From 3127ea0d2e57086571ff518e1cc0cbfde2e62bc8 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 5 May 2026 03:01:14 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 05 03:01:14. --- .../20260505/20260505030002-Binary.backup | Bin 0 -> 269577 bytes .../20260505/20260505030002-Config.rsc | 4501 +++++++++++++++++ .../20260505/20260505030002-Diff-Config.rsc | 4 + 3 files changed, 4505 insertions(+) create mode 100644 MikroMaster/20260505/20260505030002-Binary.backup create mode 100644 MikroMaster/20260505/20260505030002-Config.rsc create mode 100644 MikroMaster/history/20260505/20260505030002-Diff-Config.rsc diff --git a/MikroMaster/20260505/20260505030002-Binary.backup b/MikroMaster/20260505/20260505030002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..dc343115f56039d6f5fdc42c9111b76cad0e4411 GIT binary patch literal 269577 zcmV+aKLEh*sF8CC9RvUd7FY`tN8O!cK;hm-Kk+pH000O80004Z`T(2&Lm%iH?Bhh< zu4ya)F3^Z`4RZZtWZgijz^C9}u{6L4B2%YKIVxy$290AcE?DZ1JuS*8u1Zr5rlZU+ ziQd(I0h(KChb%+xnpG@E39(*mJr%c&t_fcaU{Ys82L}cW^iUQ$*mG;R3pz_54;hSL zP&Zy;lacRyXsS??Suoc0%vewGVWKXy?63qI{=G%aTTeZVZxtAM%3U7SC14}p2uw^0 zEg4aSQ`fh091#2Wiop`@n1Qz9*#>bRPcd34210DPKq1J3eLNSa?@h)g^37D$0D%Y^ zD#DG!zf6nt>^O9ylrcY#LzB?4sS0S~!Ct}I9nJ$H0d0b!W-0BY2rthD+QU3=IPYIbL7qQxCuG zNJb`O8C#;Ib%7A?#nb02P``G&&8`;7G3}2o)02I@f1IU=BO53w6e$@?iY)LmDwuxyUaA)NkJ=~*&bbeGXk@O+D_8F%hxbVq1OSoP*T}RmENC{|n6^KO& zOC|h1?L`V($r7S6KlDKUGYqt%I;B1E$ot3U#Mu2rXjhA9;%-rJFhOJ=j=p3*(y~G> zfX*{Zr%L}8J~a-};vWdl(WuMb%PbnMM99VM z#AtzzO-ozYkP_=j{05(NIzt*xeHvWInu8%bS|z57PNIT5urPj zjF1(VK-(gLpFGPQGpD0(LNyyxf%X#69ZKq~!7vOR=jRj*)^#f#NM(ga;>$SY0w@Jn z&&+%~&E(c|ZVS=A3yhZ&-796Zyac(Du*ovw_srkq3acl1ADxHVrq0PpnIJ??_Y`{4 zso`568HRC)Ys0U!Fre+s9bDmJ^O*U<(N;)T%m`M$oQ|Dh`^5}VKpMq)Nm31x9Tq0W z%AHH0n4@p0zCBbK_Ai0NhswNyBe|Cg^NOWcwXvnRt z7KKX0DaD#{t(z5%%oCPVo-ZP*Oeph3*(_qF&O@p)00qiM#*Gd+O_JlP2`5VAI=a8k zlXJ5iL6e977EX{59bxpN&w+*QpIT!_-UX&;w|V_cIzSjft04;W$bsv%L3Xcmmby*>0d6!SRgbYY6l|gsE2Ylz(r_7b_77o3?u- znXOD^on;F|+L(TBb9b>9J!mTI z)$|MF_4A~0iT;dy_rzh^f2X6^qz?_cpgym`jBqD$J5#3%K+T&Tkhbh8LLf`P(;vlPm zt(rSs;h^%;srU1>?r>e0=vbFEv-T2;{|=KK`U_0%=}P8Qu%Oasq3`KD090zTn7Btu&?srCKP9}E! zR&yAx=Q@-`cCFtr+P`S(?L0gk*4^N%D*vh1p$Q1{K@#!wTz(3rNubSfsiJ)u*{&$1 zjJ-F!cdu3(*y-res$P>q0C=x}ZljTcDN$J#Q1Bj~68v)IKQX@_E}i+1Hy$mmuf>s+ zG1OWZ0ZL??7wQaN9t)~57$-aaZ7v)u8$a9i(BnJj_aWhryk={bX8K}mMtWPE=sO7qMUX?a4f+Xg7j3mHqlXdnP77CjhKGg=)ZJtPO-8S{4Y-K6eB1nC5$0h6*c^!i4R%M*_^fof);$#lxoXJi%P}LwRdM+Xpg9*44V>lA5BF>ppUEWqJUI_+#xwPY?>ld zZ9I;Zz7}n#>b8%yf<^*yj*&SO-M=-eHT*pJSAdp|{WWGDw1%4m7S-l*l(w;X%eq^dVz+~qr8{PLCUoM&79q2n}mmOAD5bnkrnnc zZ3m`ze1iwjlaV=mqirFCcfWz8{?!BWi8jZokq_%#bYMq*|9@U*q!pQf%}R{2>Zj$q zRyL13LiVa;2}IdESMd0_I5u5#AOzb zO4Q}6;q04^Zy?>i#Hd$A5o&T}F}R^8i-g+=N$OWjZG|#rm=1{Y*-#-2(F*x^uqU<#A9+3 z@=CgH=3WH76|1)-G`5>D7375KQZS5-F*XLrdW@?uu=gt%#Vd+qTv;i%vefU4Y+mII+49<_3Mwi5l)Sq zJACVaWD~rT?XtMIKz0BG2}N=21Sm=7grJ`l4$=!M6zU9CtJYm9Yj#DNy5N&c(c8zZ z9=tXvM&@czAF?*8_{MV-zm^GwadT=8Oe#k<0aUe;dMw(V=C!A30-uue6w;eN*Zn3I zFFhF0S|$EGcN7#rf9;& z%f+|1VNVxkA4|ZtKcNirCY&CrBru%ld6T+xSbAH)9F{n5(Qc($sOd1JbGp1Tw7ww3 zPT&I=a(YuwV-@V>=mof_2+fGz+nu@Q6==7qujICiIgtA>H@ z%v5Qqt6vkN3_)kb;3QnU*1@)TKN*u6Ym;2S55)@pt`}8mQS=S?@Yb9)rKo&;|~ZKo25V7!Rn4!VL0A4PK~ z=nmta_q1I#JR@p-m)Q@3pl9xv@m%+4ORPobmJ(gB!)*lKu^0MN*w~oQEL>gP073er z=*C%x^&WYcue@+=p&5Y4@v*x88+8!BgiUm3N#7-d5^fMXr8TQbC0OQH(wg3MDgEu_ zxx3U$^i5eZpf{)Drhdz>*~nqIRX2EfxRZjuEWr`nsJPr5oYgDqLfO8zu#{Q-l`e{psw$B1^ zE+QCe&EJ3r!o&1VlkCQ(FiA~1oIIqeiU9m0E^`9|ylRRNHlx)IkiBM2%b?3epsE|$ z#T?@y55U$&crMN?QuZ&HD5CUN6siRu1HfP} zE!Q$rH*3^s#6(7%KRfYK?bV6Lbg(zlFGd~p#G8LQnqGz^MSqKUUOHnn6{q3H-ZN`~ zP`7qTcMAG=IA49?(phoB)%TlUF0M4x1x{65d1aq8dq!n)2vm}ikvb()_C$y}goD*~5#o*8!*#fcRmo+S5uo_G zp!~QQpe)CG#4&}z<%Ci&!r^1XQMo^5u};zkv4Ya&N)fEbCx*?jTFnL4ZB652$=xNQ z>6h}Zm=RE0H5xV2qNO!<%>}No2J3sRZJRyAvp}THpkdtv8uPG^YuBL9m@8$DWtIx` zr6d5KJ!7a$l`cIU@+zNc0W-DHsH^$=RYoIx8QddX6gDK-nFFr@P1%A!bGi^5)T@X; zPWIuT#pz%fks)WxGh_(-n$iMjKI-jr5ZpSIoRV4cgMts64@{95TPQ4|HvqRpv%fTgP=Ny*>#`gEG?uxxdV+9rpyNjk&_!B= z!fr)lrdOVTX|XI`Gtl`t*`PB6733HB>RVfx`P~}Pq9+=;V79S-H4i!@p;ZJUg+xh^iPui5zX>Ad$2hk~N0oiJ!AEuDb75JH3CPJ&j%$?EY*{ z^@}8Hd8YD`Kn$QC8fh&UwO`=l0$b2Ermt0BJc#|cZ;+kXXiG+NgLvz8p53U?1!U$J z`Lj9NRW^kCB&jtxN6^Gf(bm5Yf)L-NT~+1pReY^vbfaU2i4mgM^# z-bi#VTGnj5%;k$Q?&djbogUVpSoDitqtwfndj$5%tx_5mADAmZ(Y6p#k`g5NO#H>; zyUC@fKc6eTs2osjxux(SIEC_2hu9u&;!OEU&C$-kd32?B1Q*kP^B9^m!f+fdXEW7S zUjRTy5&d2K@CVaSI$T@24fZg1{-??@xjFViOruWIY^|I$>EOSP?nDawVq z{Ul@>JYQYZ0^Pqn-`d1dFuIuFv}XQ?7e9(?K!|jy;6WIB6O|J?fpla>ejy!R5ZE?O;9Wf9L8bU zI%UNZzOHr4J0b#gCq!S9ry@^uAd0 z28YG6pPp4``XhsC9_@X%0nEWnm?Q-RBmak3No66V+8tF58$=5vgEL9iN2*LBC~5t4Kdpg#CSIpvI;Fr;T%C!ibl$=A;!fm4u{-|An-IW1D%z^Eg(y zRj#2eIn-oYGBXM}*<-2*E-oISjGo`;+{~0hg>HUy6%$meM&{ht(tPafTe%?%ZdF|$ zL~;xvhybf((3&dr44Qax`x&yKZ!ReWp3{>Q>-#5KA!^QgDO9-!1md=s#=y{!+5r*#|PzZC#q5j&D`Z^Z#{NG~LvTDB=Akf_fHjN><-wH8hrO2|)VXno zl#9Va)*x3YJFC){>5G)9%eb`_@QP{Vi00HJ>s9FZ-fUT*2216sO54Nppl<}L6Sr89J{I&O^7=9pL zh$C~_QEgBGZ{Y<2o^8r{zcAh12ryB|BfpB-ViQZh?j>8?a=*D#tK$ZN_!PS}@kV05 zP%!iQNT_24VlaxU-mtrDQ2EO3wQt!pp@ot=g~&U0-PT^SA4adSO9&)fsm#U*9j)Is z?zkgwKoAg~va^z{-Bv&Dw`-4>t^E{R{A+I!wN9dL-xn)LJw+zR%i=LP$40m@ z9F%psNEBH!8jsuZsWRmLnPyN{0Wh#eeZ6O_smn5U0BDGNz?AzssLjTQ*X z=#41fRoOrtPwFi$0CTmv`_7yNf=`r4aOgilSmDJ)&6J6$LgxQcfy?@{3Ff&{#BX4_l7xQPPN<)jB( zK3^~DiOzYNQJYBJQlpEZ*yV7I1lW_jGtSPU7)({1tN8?vDTSuO0_7hEY3MOD8Y0bW z$tqeG3UBbWiI|R{^b5+OaqJc3byVGRS*mwqQIAw$sd-l7#zwbUIZHn?2KMsGEh0d* z&?uDR{rOK|Wfw@LIPlA>vn;IaEaD02iWAN8)DSENpv~Q`zpU$~a|-OFN1`aSuHe2G zF1iA8w9YsXPV6PtYF6$5V%0QXVw0Y9VjcZpd141{b=M#JPS2JR0Tm-sr#4MNRK(03 zf$b`@4nXr?+8HwXGE3B#T`3{6HQ-AOy#=uSDc{^MY#D!#%!vy(hpPdsG(6MyL4ea{ zV>o=&-8&P+CQ4J>P@u-Fz^q;?#Un(JEg(KO;#U6kz+rK(fij7CS|dVnB7D_&^s8KT zk~sTM>FYAD!95`jk(nJgo_erWo0*EL9CH^7TFQf2euyk(zNvm8(n(#UjZE(y40C6=;VFb!XmRK z(gTD4$zV z5+LRb`uME8-dCO10a&nQ7fRuXH^yFvjD`VQ%ipLouBLR?)=J zGZSUbpQY$*H~$7v%LnfM?Xb%hws_s&la7||IHvp8KnC$A`~eDFzqM`YVs8}H zXqmqRC-Q%I^CE~VRkP~8eQklta+UR zJy|9~u>H{N#DVymwE$OipSVr2P0{MhpJxxUq`$S9t&fA3yQVE&5FNGi(2g?0=>51@UbZ-n_ zk#+CgRNf(l!(nE zWbUDqxHBL5FhNK5oNPa_W;_?V6?(Pw2AA;`zp>QVy-PZc*&P2gaOG%h|39 zf-wGH-j|z8TD#6gO))kZ^6Z~xG(^AE?$&U_64yf%M=dG1>QW^l0~XqsFJmtdPe#rO zP(4at@t7p+oi{4slLKj)5{;I)#*#EEUqB(8?jKbtmzo?HtGHsu+mY{X_1&syE7!!M$AW{7*qj^Hzq)> zo$uEWotdQ%&rma?GO6w45VTpr8ZvJNSEXiYX>(6l{kgkkNaV%KlzhX8^UvGO^6Ooq zJKpds5aFZq1s;*{0k}wY5x1lONppvG;XT$7J=gZ%i~1olHchK;wNc5jNcgVy&0ch8 zbZ}Sm7wuBi)nWbh{|;Sih1+j6wskeVds{-GyShp{y9ByDSsa+7mnO3Uu=LST6bd!^ zhB~K&z}qvSdLv*oT_~?+O1fZ#v@h<^nqJs-FRK!=@ER-lC3saTNjg@sl6xBV=0{H1usJyX%0Ko5 z5;-@7ac$qMd~SnHZydT!bm=Gme)!M%(3-V9hyl(C`0Q zlNXobB4YJdGdY68udn{9o&Vv-I=d+yIDWLsP-3isiI!*VrfkiG9zL|XHN$iWdF{vr zPuE#7EYZqIV9|p%JqBpFxf={f`~3gmdJ|dji~Qrj0dDl9h9PI9xfJuc|Ji z6{ug6DEwA|_czYvvo1KxgP6>jLE^Wi6`BM*X2lU~sRwmctkc?Hf3WtbzuuhF$^#lb z=Gtq)tyPZmZGk0;Wm&EjCmWIY2^BG1cx*rA!v#4jjWB84P((YbZurQp`iVQzAj#;mY^DWpIc;$k#q(zCq52!>WJp@S;Mje=s%6Bq@B29Bj0 zmVyFyHazcZsZ#QK7#GiO^CG7^DH1Gcmeio7hy;0u)%(5{SJFjvSGq{!+e$mS38{~8 zsl}42NUMGXClX7&m>LbWKcW&9{F&5P{mlt0apu#8My#{NM`BfVr6I4owmm z7pDItXQl^6DACKhxmT&tdr`K{&5^NGoPth_#*#A{UlYs)(A%ue2#9) z(3NWm25_o=tC4`*;L8|E+89!2@Y#Oz!VFu3(C}Muan4vrqP%j|PXUUFWY|ECQr`Y_ z6mQJz_G!q?7_J-Pc?)b42UgNlMxXNeqDx)dyc0`m?}Mzbb@nM?10NZR;&7UAZ1bHH-7`Xn%J-voK`E+tfDpKNWwjmluOR(+{meX(0g?MLUbPU zOk_n$NVxs=&bn@uJP(0$t|N@jpuF~pRv>zhns+TpKo2N`1qbK*2a@mg&>zbpJDqPeeLA+kS<0;c8i$|A!M`p-uA=FoW_ zcoX@B2!4COVr5)AJtCO?x$uZTh6~DlAGyNZjdnDkF~LQ@6t;djbujlWI>;Re5%FU5 zgcmQ&bR|FL8~T(7mRkw=X_^Mm%}>NUyNAdMF#!EY5;DV+c~ANOiq!wP14@Lv+wEkNkEAc*SM7>45=8lo!;%s-4z4=~*g~ zjTy+|-T+oG9-Afm`ruoHOxhFaAl0~wEQH5FC%AnX!B*BiZ_t?n7yBh|!r4xM_gzU_ zjoHBj{kCXf`-#?*uXwk_)erYQNh+pP$+N*s+J5SpC>@%)jxj%8^Ev|5o|E2<;}v>K z(qUc-)pyW9b~Onh0RpXGI2k9O3MQQa+1W?K3l8dKiyB!Ow+DBK}3iYX8Hw4MqZ4bQPbB;_I#WN@JQ^Kif8S z`iR#rl&L1zGF288I2dFlz)LFinx)&02KJ^%jK7<|fmKYsmm`l@dp3?s++W-RmM2a9 zYi-b4AgF{tzZAMERsct+(Gs<%lCJ%f#=mE-yz7%5?L^b2nSHkY7@AKVQW6Mzmfm=ZHN$TJ-PI?%va+irx zH(Y%6Wu`cfj6)c{lR*l^jGDdW7H-zzb5Fp-wY1I~?+B@o;J>Ai%7s4egJA#1F%`HY zQcR!>M`ph$L^5 z>65nE&)?kjc~nj6Ni_V7o%zoq_T1FEhL+_>#TX2-=2>$>m_Q|x3v+2(!fcdb=hQ?r znuUdt&mZXQ$XJEKShT^PQC(|!`u-|!buTX@(%&1Sl>TwjJi{3+9CA+7$=jeJ11HD( zc1Caj1kBqhs74C3pF21A`A0nFUt|9X0-CcIcdo#MIA`{LD@EDaAPTh#Igtv|cU+2A zE~Uy5QlL}(sRz1yykb@N{}g}mUds($Ir(kB>Guqs7L={^?d7GzkIwu&QDd-;^ zvp$L=%37Et9ZG_3BK?kR^kp4RM+CP}Qvf&R{4s0WH|jGmS3rr(Tnam?D8bd@YL&30 zOo&2R!e61T^Jl;Cui27a9h97|=mXoHOI8PK+JAArdU_iYldUqkGX7qXRJp*04=QDC z(lY5?=2m_R2z$5R-3`s3_XvrEb8_J@8qxsW5_{A2xL9vY1r+o$#mIu~KiaAR`F>oA1L?iF#QU}DNFM8XC8z<`*9lh)4 zvbXuLD`28tL9cRr!zKj}=9?)UpJI3VI?8ea0((eRCJC$Q!)7~H-W+(Ew{ha zwV2bO|NpwH%dcTOKHUKKeK?ixSH>{Q^5W5S&>?J%AAXt&s?-j2cTD3rtPC>r-n_xu z^{(m2NV-eLHnjLw75>ppvZyoN*t;Z+8PYVMYsiF%>#)xSYKloEy|5qPs3~aZe1!{6 z{9W3kxrWBB(}WLHs9*_+U-x7^?)2=xFx0?Y4Pm67IYQ^b=c7J(@&;<4_iMc7O$N_U ziM?2HL|{%kpf@ymq>%$DPt2N`P8|DI__@qx%4){an^T>c(t;E*nRO@*0zILDbB-LB zV1LnRK##z>K0H0i5T1(HN*Rn8%{MoQlBd+f6(nEs*BKyNc^`F29`Z{?f^}*Z79o@~ zG86p@mi15R!0ZkfeD+=>e0N?$VD|hXX~A|yxx_EWv*KDoL6ax*ZYc2A2)Z>dq!t~` zweMu-eaann#A-&BIN1jl@SG2>SWiucI#h_2ON7kL`V$Db=eJg+hQUpQV7N`uhu@lNb5XTxMYxRSW}t4=OiHW+{|(5;@(*5i zL0^twR`E3V&gck9KEv*+*+Sm<6~}<+2{&H?*`lr<@_w=U4B4Us$tkdSY3>1T?IVZ% z^5Cey(Qt+{&^vB*G3r1Np)a9dFYm^Pxihyb`=35M5ZiRFk~1EKKjzyTd=s-)dA*fd z2yM_-3PQ-}f_V9T zRaEr|{5ah*4o=l^Crc9(3zlocd;;gIkyq@jWXJM` zwWT!GwNKI+`o&o1g`kr{LrToJZ`Ls8D}un=urwJxw#YQyd%F8Os^unR+#P3+QlL90-=CtK~ zo5ep7;?VU;{wuRWKZ8P)@EB&fez;s=S#gAzXCJ--!~BqYuWbo%qXpN3**HZw!vaop@5bZzt*U z;x0$&(XCm|?i6d;jW#T-GZaJn5;`xC!@dX`AfW{r5c^T%bipJW z6 z+ODzfz6^aAG?cP(^!Qy|Pk3!{B_D2zKL)MY9J_!z^N_RL1puSH24w6bh$kiz=yYXQ z?`S<+{3J!(hNf>HUuH3wjTYiD3J7>ug2mlQ-tB5$Zvcotgpt z+@_WZJ&;h4sr>qO96!dW*s%f}Qj|Z}M2g>4?uUP^Cjq3hY0IzRaV6x9*wQpq>sp?hL)+JAx5j0lv$FE%+Mnb8L_i=pIZ@fxti*q-V-bT1E2#df zE;@5Vvb*OqAKB;bahV0jh=Hgot>M`PqA2rQ%p@LfgP@^*0ROXW9u`4q7-N6y#U=KaiP5`@z>Wgnb%=lvBeyX@-t?6S4MeD@7RVxK|j4QvL6cHE4 zRbQ#c4g5c-|{5Or~-?=GHP%ldR81}g|(>iDz)Rp%2#CGcL zx@75+Xap(jU}cP*q%cmJpL^`@nKM-~LY*tjixAtn;&F*`-vXyl@A>#Ep6_gP#{!Qmf0)8i ze6Q5#_%8mll2}}~eltMV1)_DS9diw-CnY5G=Od6P%UyjgBVq3eR7YptyyHtKf?b$%Jy&l>kmVXw z*tnJ>UJ#kpZ{xFkk3lb^|2%>x!=4AQYq&Bh#abSwPOWRxR?9n)n;s?aQaJ`t(y>F5 ze1Y~+u&9#>_Ebo4eZsBP+~pJ~LZe5%dsmOtbn&B{&A73KlM^hf@b6!B1aw_oUvt*m zL>Cp&f$>jx&SBQ=FJAi7V(tX>OO3K?VjVit!u{G2g8$^ugP6j^2|Lifx^;yBkT=L8HH*Y6RzMAHpY%RLbqz)^)_U! z?Gt4_DG@x>tKbZUD;Em3<(z;7lo=SdLzw3S4|&|V8>nz3akJMSpr`WGQanbgska9n z3d+)^dXU-8N2(mu;@pl;Zz)g>Rh*{YF4i*_^b&I3;8c!|JA)^y;3Q}O1W`1OY<82H zgikXzUSx4HlCD7la;3uyuT}mNnGfz8z&XLe_QO7`bYznY?&Q#{=X?>ekV1Z zQX&;Gf}S~kc3k{prjmZTEOO&&cQRi%fezNMZt@W#i&nsMmFN%sNR{WeU5NhWz(;aQM=R`@EIm%ywKpYeE2g1hhpCUInOEGJ-}4JJ+uBf79tR7)p+48N zhW-KFwtsQNOFbW_SC-=(CR*B`5&%xa#s?8nLzql-5sQZv;&e_&5qL|!Pf!XmRB!?+ znYtW6>WBJ{Ko(f6R{tam2~_(SP_309tEMpan7JE^37!~#HKiO;Z?fXG^uZLI>_I>e zg{oOeUuk}VXF`YQ(V%v*U}06?9}>u{>q-p_Zq)}ZrsGw~V+l=b13n0NW2dvVrU%Lq zvAu7Ep84@|6Y#1_gPsYxSVFUWa>P|+nX5)C<>>D8Q|$Bq$; z6I1-k%Y`gwko|6QTUhPk!zvDW9E`fqEXFH;ap>3=0j(+v2}~Pv9WT~}#g03CLiUir zPq~pLFQjTYa+KQtfikMKF1YCFMDl*S&WOmAIgh~+#x7tMM1)XpzQ+@Y>gKq6Lgu?E zl5_q;?wkEB5s3$}7t{Eh;IZu|D^>TaD#$a|3K_foFYU2K*gxNF_=8z93}ZsL^%9OI zJhLrl|V{6|fH2S;vQxMd)&qqcD(u~iTvQnK%*r*N2B zgYFqeN~LxUcfnh%N#3>^gg+YaRBAP4?y{>AVQ|qvi0^or*tUow^FV+rD&EfL zVo24831)I9mDCsUx>_OQk&hq}Fa8t_Z#(_YbiDw|O^FGQG^GyNjMRAjLoe2T-@T?+ zj#ZF5A4y?DcI$|xi7q_6Ja*iUSS>xu-w|lXczBm+zvUCL1d;>=OrP*~uuQEUEq@yb zp&2%Qi){c3z^*P?*8AbywQyj`ljx85y^1x+Cyam&pkFNIT$RW;=4&KBr}E`R{3K6q zBvu5xYXsYt3@WdS6274ViOF)Y{zi9*NSl7`>VQ_$TB!^WvYX}A0>I=fMA9*-=sA;p z6(8vcc-45BE*&NyJU^QYXOZ6a9|4U#0f-lGZU(gpPDOd^okE5;3h>=Td0G?nZ9tlf;ekT;99%NsOfvviRx@+hIMD!N}InjFKESd(_h4`X=^Q@cl-Hv)km&)$R z_J{a58Yf&fe4e8-r7yWkU&3`wFkT`ZW1mDg^b%4A%F@&v@JBn{H_O>|j3ej@5$?G* zuR)u~`XX(w<|NmUFZd5Ijz}lJo>>VGbTu8CGy+pXiQCF58|FG^h*8dL+GHge+*<=} z|LVkF?VMbBY~X0X(B1M+*cq%#FKG@J$*sTnL%RR~=)MZeG96RlFTI1{nLZzy+1uE^ zT+C8{4p=X_Pw{-RL>}O7_Yt=+wt!w@E+;PbhY^$i)tRDD<@B6XyWy-)gINwTt)$yD z^0M0VVzkg%>5Lc-n*Z-S`yeGt3*t%I8Sr`6C7v?q4%d6g7l$wu@6>om0eP=8uqfctkk@ zjH|Mfn~4t4gk|@T7rkXQjCATiH;pFsAGt4lo?a6@@Al%@f6{GGlaNH%LP}Q z!q@mE%F%0eDxpBwQLF&d9cn164p8_??2jU2)9zY<%^Uo^wT2^s2qQxd%lfn7+?yJ& z*K`r)kVq_!w8*>hAAk&#=$_yo6v@J|{LlZ{5>S0St_`oP>k3n$jBn!PVml23|D9x@ zm(4FtxkCAt(fz8y+`u|uG@jA}AqA2n`e(RvW!>|zjhTb3wp>RHI~OED091OMkoE&4 z$-h6ATkppfnZar^NQyRLNW}ncs!V9;d*`cr2c9zZDd|gcg~?bvcR*eIZ#QCd77H_J z(90Ww8!>`?kpFqoNBH-(xH?(zx4C4=J|tqa1v^~6#(;>icIeFG45P1BJL&i=cPm%h zcDg>&-gsLA?YxgA(riLoQmYol{+>+@)~sP*P2_hjFF*W`)-~=)IT&KeRNJ0Gr{gm1 zr&rhm0lq3+200!m;}CuMmo~ECKZ<5g2_($WXtAK>kjJb|OucW4_BUWQV8IYX-klEqGCyeE0RyBpsjzoTM}K^+VFk_n zVrfNtHyrD1Yp%=)Tfu9}3XFul27tgnq!m2v*8JcG3rO|z)PNdM`={b%!b#!fWP4tl zT?V4FK1~#h2w)Okqi{ERKOI%Dp)_j;awc@z#u8)!Ky`kOZsy+xXxzEYfL|Rs2pjO{ zKcp}bc{)@xIi~MV*Zs|l`H4!6XXM!)iDNwt^%%u!n^QT~8GL8@zqyQWNfl=a#$Z1T zIf%d8Hcn>U!-u#J_>v70M%Cc^;mW2NDea%;ZWYB49Ci=eVb|F7xYT|Z7fS8(PF^*( zlItjo$+-Fv2zX)_GPu2ga)&;iG^|gc{mfR=zY|jbpgH&IQQ8bHRy!LZ-1G~5yGdq` z`dZ?NJn9p7vj20FwQGS|ca#Cw=h71n zSR{Wtr#x&{iPUL)OfH7>yrO5<$&cU>?LJEKM=p6O-wx=tRN~9#t0{m%G>5g0 zwXzwBPK31FkMRKiKLEh9_HI6C&tRD9`%hX)UM=w{1&g18YB`Ib2XCL83Cjy>dU zVk);Y$6%WBE%X(Zw9x7bq;ACKi8#SxCR?*UO3!?#M|;7U?)A5URM=KS1JjH70Gcma zlpAL!1oY^~WL==ozxEk;Y(Xqos!siCEoFLBV#=x96#UKi^A@Ey< zlSCv2SW5^u3*AsIP57nuPbLdgoR$KJ{K%cVE7Rb!g<0CuNx9War_^{@kyXtW` z_)?}%^Arb4{w789bv=DP859ys%ihBIE~P3WPBqbo)_>+SKlMbK;s%RTX+z`WflrKy zVjf9!pn9iQ(kRp#S37xio~bDVV+E!foeK<(&dJ`?6Ha*YenR+j;`FA#mzl$Sg_}Xy z*=nG?i@e(q0`hjcust-(v?jQ1#R%AZTwKY3gCmOd z5iEvVfGIkks&^j%hJ9%ris||0Eq}DBzrisdg%ReKgD7^e+CJHqC@ncaU(Mwq9d#Lw zBB?&j$$jVl*V=-U%$)BAJLWB1N1*Rwhu!Y9$B&ebjhl1o?2lx&JOR^VBXi7GXADosY@3WLzcj5u^t`f;kH7l;52A$?Iq zDbCW4_Gi>7sFJ0*PASqAF)=pc#FdHP0`R8gWa}q)aj3msKj*AwD>)M$<3OWDnO-5z zT8u}wyVhw*I@!pJ(L{#{m4D*ZqPn-R3(LR|0^TgxC4nw?e1O(+xdU8PCwYxwW~SP?@$ngwAo_fP_ec5X0VU<&yC^bhYe| z5b7b;0xYHO!ZN-M)aH44@4~fk2`CgA2;e!0(A69zwvMYLtMBEkyRI|?(uA%hKR4k2 zXV(cU>PgpLC)CqM_Hc)3`R$Xz;7MWr2A!7f(S1LYeSr7)4>tCTX%*P;L}pV6m^91A zZ>J={;&kKE+-p)t)LycU^0wDwpVgQ2yer48wgsMdtW5ocePD@hr^^BT%LrmSFv$?h z&za`BEz7n=nm_Cvx!|g0Y%d8_nD~63&mx=z*8t0f{F=m3_(`5;79TWGGiJ7^mWkeT z8E6b9*VR&QzI&CVL!)}aj^)1O-?2w|hVy|u%@(>NS0zEV2$-fS~Kk>87q`I1Z%4T_ICDT9Y*nKjoPho~$+L&L_o`LFmtcy$`!Msp=w}*K+ z%vaDUntu_0eLI#1;>VlDn~4V=hsWZBQjH$SP+oJSaQeJIT9o*ck|O%01Kh$|3>pYX zfn^jYnaA@Yn>=fuV4kOa>Jw+%@^6fu{s8LGM~}DX?s<%I0J)zXRGrCF%w6HC+`Ew$ zv}G0PXM5S6a41vwuyY-`@$?&UM1Rlbuqi_)2D{(y6gDXCaDH)pnltgdqM^}!SSa~U zIZLb0gh;0;bbH^%{g`h-I)HLK_EkCg85nXvMJZh`%ftE3fTs&Ikgv(PEChlSuF6jS z{c-V+A08=n<(GI5E9RGAL!UcMipQj8As1e+cQ&xdgpfl@v;~4enqNxa$j)3vGc9xM4%?zK7u_ZGnNr?L8r-c^(~R z;jLtP0$N;`9ZTh7&P=HEZwN?OHWVbXslwe{IShOd+tSTmMa!cDzQVqZW-zCob*aXa zP2)T@DSl)Q0rwnlq>?b}rIvRiL@mf-U9A{OcR9kvRc_D6bOGeW00CP#5V=*lDR5i{ zRxQvpAYzAbm<#QQ;TiTWH`43l-WRjc@7k)ICL6o%9l`Y1n%Dbtoh`D;dDrhSTllFi zHRA`YeAS6VJdJ_qv80jdn_$qrz8vto~g&MhEpA-$?6>mfr-V&#}$zx%Y z$k@#sW7}v4;uF9(?f}EC(wvp~q9v`rs(SZM7u4dVgR_sWqy3`bwSNjnV^<^MJEsNV zyM~<&gj1=0G(I+38^8`Gnq+B!^ed2}8wIZ9s{83JSz4}A7YqI7Bz?kWtF$ojtE(oY zQiD70;%Ezw#TPlDkfed9C_wt>5FxEtM|s;bvhKkhFKw)RjYgCU9LZw9TuFL)zE+#Y z(A&0u!aJT}NNKi%AU(}TnoROgR7@$qAChAMfHC;|f?xQ}9`e0h9@#EJT<-4AB;0oA z!K=+H1izX9w|il=l%eL#3!(xIIbA%w-i+)VDzZy@BK!p#Ez6(CD}Ed)t8@D_=PCy2 z3JrG}A8cua)aw&AM;#Y)--?o{p9|#c^k;V)?07#_Y$~vxplQ{u)s~7i1;aE{j{Z^5 zN%kU#)ytFW)I&BHyTeO+9e`v;R+%G3s<|*m)`i{UZ~7@l@maN>=Zb-9k(TH&A(UGc zgIAnYxk33nq|=3%91+!|tCah<=Rj5=Wz*8m!KQc9$nrpEctZk?ot3P?TcKb9m>I>Z zB0;GU2BFvzud*l@=I!{G8@(y(&Ra7gjOE=(DrpaeZLs#q_$A`w2HYmn%0=ul78J!3 zD`BpUVe^c&5Y27{^{|4ULO@$-mD?K87kmLVh?#A_#2YtL${-76(=}NTdd8 znMKz^bR4rW$n^4t`dcmmVBDtL$vf}e6O5^MDF$mNn^#}oX9Pp}C*75;+;#@Dd#FJc z+&$-`;Pf0QVZ<4419R2W`Q?DGKqqhZqtJSVV7tTF$B$>?!1r55K`1K`Ujceg?5a;t zWU{dc0+H*)iBl}@vbz!11qa|=82&iY-c?gXA~~wI#ogZVeS=IkmsHXyy`u_~j0URILRkJ~KYj2B&9^`^ z$C}(%Kq$cSE^o)OI(n|}^j%CE9WzL)>X}&Dpzz|}Z4mWT3FSXWliI92K|Z~0JYR6{Mmgk^U?qG?%RV}Zo z;8n^YP=YvQ{`)W1caw9OR`C5tVi_7AI#;oW3Uvkid6>BHSWa$DTW7UW1)!U_u5@Jq zskEC~wJjE34AOa2y{It4oE9;I6n6T`Ua^WUiU&-;%1@@MV`Z)?Y|0N$LAW*fgM@#T zV^$sa5%0r|W>{+)o8VfoC4^qdQ(-GDvjg@Mc^y5NhY8sVYD-2L@DU#;Y(O;Z*g-=GWQfTRqk zDjr&8o(3Yu!h(WX>znK3+)V@!LyZ1f@?`Y{DN^@(#>>qKM{;AUvxN(LiW~GbNe0_4 zp|M8*ar+0&(+v$Y?;tC{*2hn<+7Yg7xywE^qL}j#q~~N(v>0FoaXNR@=3zmF zwOgo1r2I9=JQs|2{=m~+CLT33W-3f`eT2tPNljkXZ!~dW z*Km>}KBHgZjaQNJ5;*0Y`)7FrZJ%Sdc$|)CSCkMV&v|3(E*3{(7cttGjo(Tfg`9ke z*A>o&yqib6;IlnZ7ka*QP9H~j{8hVg`h%X((I2T0UW6_jc>K2Cg@)#q&2$Szo2GV5e?PnAKXc z9FU=W`teHuoO?SEAa0XGMEITv#(^O-B1a;|F zJ%{iq66Kf~X{#jNPJPJAZd~P17}6-|a{<1qcM&BhX3*CKN8M;lnI>V?V!?B+Ii4`D zrc2?~wBcBxqeBd>P1P0YNR~e_1R54*R#JiQ3D@QW7{zW>yWHwHvuvrd*!9XJGp4F} zkmcgajRi+o$K;vb=DaQSw0+%Knx#ybygiS4ki6AGLzH&3n^PF0)j1%qBy@NF$|N8n z-u@1Z>S^>J)I#buUeu(+$w3y>#VK(;;HZE=NR$PP7u~J z^>inTkRQV&Tm13Fc}N{#Lw`QAvQjQ-J^3 zW4nRmuvS_Uw_FmmS^iX8OqrM$Xj5)Mt|;lfAu?zPjlnwL=_&9F11Jf;z{In0={!V# z!}%o1zonSr#j6_b)6ogPB>(GN-`dYWd3wI%`*IBotl+uYM*WoMy4NH0#XaLz*YGoH)l#BRK&HY~xY#v0g2ATk#4V{4jFrkQX(I@uqOIZkHocSx{u$i#%ShGv&^}iLuM{La zo7JGGGX~-f(OuRdpk%qc1W;6tJ_ zugCbKlrPT1u=<^>bJ6OH5RpcgY7S(-E9LH8UbJ5p?9PJI718xF0d>VHlo(ydnZm&x zM)}joF*jFjG(s#-IIsGL5}O_PQIUtHGr9b^G%SM1Et~6w>W?a(*9H2hn0)#;cNsSv z%!!8_(x4`?F^(#$Txaec($)HzjaybLdM~1&7`S7;{h+0H?tPl6{dX^s8W{}XFjbDN z=--fPH<}cJMc5TFABqe^O=_`^(ow;^qvdOxp`|KO!dDMtE3{;+AO^_y>f?`rUU{|n z)>ZNvKy!{w47)2_7TFBUuR*e6loJdgO8Fj5 zm`Cn&5UN|qVjnT?GTF7&2wa=d*5X2vPB?#|G1t1VSB(g7MDHzGCDy@Sj8&%=Vp<^M zLDNllHSB0)?N*AS@q-l5-(0C~@uCIW^g5)V>nAs2pIUgdC&Cyv6^`uw`^LS@@Lu%? zhF6d&Js@_e4;ftI-LZxq0S8*GDr@o!pjk;TYE$4WM4DyOV9vcy-%%pbq>`>(a?dd` zn9(ht*0t{e)&04^k8Nk$YP|8>{|1XW9+G#VAZE1g)F)qefm^hqZmw;Vk;-XW28aTG$M>HdGXHC*TFJD(! zVtDx3;(VBXp1tE%f^SA7L5gd+mJ$s3d!SCLU>96 zhcHLADM3N}=&Iqc%d8$qvdbZ;G0SP^3i!GSENasuvbrnu41=xO~TkDwm=P)ogke)9p%^lM)3!DuN6Z-Sf(?Xd|d8Wf#H|@4VsWi}R$!Oh#E31Yk zuKfk|FlyC*IagM4=n7mIFMQF-N64}wrnR+A1s?0F0n!v2DM+k#mHzDtnp>5L9UOEU z!cx@x9bS(Ff7&_YWpVuL;(X@xz{!rQzUI}^u+yX1z^X|z4W5%4+kFikr@moE1$_$< zZ5@&@4qX@CzRsH5a^ucC2t1BAUR6w*$#={;J#@awt+S3rAN8_OecRS@IE}aXcvfwF zIhqO6cNMKT5*(?#DlC*1k+W+WO4}h;4io9Su1hW<%*GZrUc{HRwq3OqOV=n{#7bO^ zCl!yvH9=Ssf_}zUm9CI4xWyU`?_Xz@#rHPr8L1>5ll+J#Jlv34=waDKvA8i7giITtVu(@+5N-9ht8(S!^R7vR9c2-SMAZx24 zJ5EJ!;Bk9@Pzmx5#4{3El(C^Jt8Fb0wct=8S95$amqsiloNV>g6loc;1uTiC{)H>u zrAi4Q6W!Ba4G~q;Lg_nWTKvA0sCfFsjd!$>&0Z}@f!;wWT#z}3z(D0{VK_c(MH@BSe;}+yn8ytRdg^HuG*jn_?@g3%BM8WRnAncZrga%(UO8>*(aH2{p8{kE3b zO9Kl3`siU=^!S&@Rk_$8SZ0J@@PlMJXHteI`uOW*eOYZa8hX+DsD~3$*^Xk9x#VGp zCh>ACLLdL5#{XWzeLPeBkZe~dYR0z&Tt(Kr-!;+`@{jl%wfCh@YNrB*x@@b!hN9aq zXy&{-EIuYh^@0IeUtyPJN2i>~`@oeGvkY^V)>NDJBXm|&!o-5$oz;{tLVXS2APUqA zRtuonX9TjRce>Uz`nU0i(~|vRoMZhCZgysm_1MI2Z`TM?TU_nV4EmZ$H>TesWZt?v zAX0DG3V>3*Y7#yGXKu8X zu5oVzk<{)xr9yI0WSCwBcY$rwLGrMeD!^toDHNa*8K%f~s*Pql zGI2W<=Z^Nr3IX&0TGUf`_2rlTLM}*-xki%GlGRgH5KmONNxr;YCLP(W;I>W^rYBp)vIDOy!VLf$1S+StcIsTmIbvq&PbpR_72x^!6rVGx; z1Z>9`xL6q5fpA%|&6 z?)Hpay8|zk^x-&&%Ov|zke)WqBn!iZ@^~19`)3;ihAs}7ts94_>Iu`17_G4Y#w=$RDeQZnpRP=F5(4}35yTkj<#!eap`=<3An`M zW!EiADk!MwZzOni*n$pmGJ{roM(v0u2rl^Q8O4VZy_J6FQ#1(yBioa4@DDrHuS|TA zckDNtxvzrd<*0=h&UFUCUsN$UaNhL+ttLPFY{BfadiPb93Xp+Gtl(O1vr^qRc(&vj zV<)VW>wx~d6--Pl-Wsg3l*&140iif-UZN;@bw&y8BsDL!spB_YJv5ZK6k*x+e|ln{ z0DBD=0GMJCb%{u^NUfN1)=e>Mu?0V>SDiAYyFRqiAmH3GX0JJ@AIQ1)oZ=jQ#_gEs z{bN(t_}!T+Jo_^0a(TwfB!jaQ49!HK_<2y;vYy&MGZW)N&VPJV?^7)lRDBsal8>Xp z9AL77H)U8_gYt`dayZTF; z)S#HB{ci*Upg+%S%tA|?-`GaZ_RF(j3#f3*4G=n1Q2&c*h?B6(RJ_sybn8!asv)u> zj7p{L6?MhWj}()b3AMti{HNbZzaa-JV)y$jhc&?RGDxzH=|8ptsG)Bu7Jtb)rM>JP zNO{*>Y$1A*^xc~4{RPx# z(qAAG@A22TqTl!4>@F&Dg(tH_m8Q_{l(A_Hn!d06qzA?DVzfOPkvT`8HK!dk?FH{E z$^Nlr?(@ijvePzJ7ion9{#6ww05Du)2+*3Yb;`E2DPGvE>Lg-(927+zggkul8-!k@ zbhUU~G`RzeDv+l{tYiQo4hjR94{vvYFyukMuXOQTstYODi-<5F=jf)y@o5U*8e-Q%n`@Xnp1#gzK7)zbLEJv`M#(-S}3)v6oT(y)H~)F9qVmf~3#LB%cfo8}#LBSbf;)ggt= zGn|soxVSRtIy>moDTR&xZJxr-;NR!R^mbcw zvq-Ey{K67WT6<}WfA~K5D4`iDYFF+dqP|`CEWUTWi`{SDtPeB!9Mt{izcn*LY(ZgA zjXgKEUw!(<;nRiLC}$LMGF?y2Y6D$qC{v zG4G-K$S%TYx5&QcOiStJVOvacuZ}(#+vMubJCD2OBbu^)Q7Gv>qX`SLQp2fV3it0l z8~mb%q>lm;5($RGO!zQ)lYWWR>C z>O;aK9|%~BnuHEzw6+%>RdL1*h_D`=1Pipf-6YGuxC={wDC=q!X>R!r8LFYK`7Xym zK9}3#6tBM3^$cgeFZlp!EWaM=&*iAFzN$=xOoH%!6$(8CJ|@)j?el;Z|>J%-ivz)ODQ2|7&)78_-#f&wA?&qhFVk3EN!^( z>;l~4@x2*;%0$_sQP+)PH%5~e~pP)Tv5q1os)#KX~cRnw`-{U zv!Z&iqDTlW;3P(DBaML-3^py4V$O@jaWco4Tt`Sb#cgz`xK5fWUzWKQUmHl0M#XvF zY=F6fYQ!QOGCC}E@aO`~!o^p&%l$k`%-3sPaNGI6Z zI$mPx#)#_78-y~s14BvEiCkd_n#j3@>DS)Y>kC|$cxKMw+)aWPEWat_2!sNNS|RMc z@eYlLW=gZ%o~IfpYoDC#zRGp%3hvi~#Nadv3m-Q1GE-1XPv5=M0S9 zl5cA|?;B0Q$oINd8%K_j?fWi1keB?+6QbyxFG(zIqX-8GnREo8WFgg#5a*xjuEI-< zp0D~eI>m>qLs)wb=qFRBb`D!v7GBvthppm~$F@z2T!K3v?>&0JZY)DjgCMq0uz!Z_ z%#2P2ZCb}Avbs`u|9yN7PcT?-5|%o7paf;@AysPt8Rd8-T9{kGr&b?&)VS|fvZTL;qlgziYfvMgMR9<8F?2<{M{{7ly%duQ~ zsd?rt8qB`s+V9ca1f}yTpqfKk4BcT>nb{?m0Nf#O!1ce#Ki_Re1PJ0<;MD0*1mX8s2qVRq$)Pz4SI%stLvzr2zJAFyH|O9B zB^evW)FFBiP?W5+8l&HJkUZu?qMX3e;6H_WT@Y^FG4Ai%Qx3hAkNd@rah6H?2#SSn zF3pMml%dJuTfPQM&d?EC;XRcOF`qhh*5*V-d6bj1u zVCvN9D3V|KFVaX_5j09A)0wAy3dId)gJs7-brY2`cIWA`DYZAZx^u1sw_TkJ3f0JJ z6^uRReC3NRJD0v^NdFT&YY1-N_uaX;+EF22^J0-14ZSVslc?6ofT6q`o>l(qs^i&p z=tr_yuaBAo{LHRw?orm%1XqYiRDw?=iepmhOb7tCgDmIAB8WVkvV)E8?eaViQhHk~v6aW<@u zm=v7?7~=An5|{7nwj`;IU62>B%mUe$7J_s`x=UX3%ud>FOD%(22gH~_jzYA`NqXjj z+FVeib5-=*lvXzoJbjn#r@RcP8et|Ja55_(rAVP-QgrPK8Lz^uA4c#|_eO!7rfvuf zTN>g}fGEqK`@?rRHL;*VGhLf!S`I?7Ajcv*BC3m=Qd~CH;uC+4=|dJ5;GGcmyM@tAJpoCL2hHnId{VjJGP=Vy}xkwVw&HJ5k|k0 zXCo0&Gpk&Buc#`M%USs;>h0>enSu=8KyPaQy>rVu8%~y8wqm}!81s@G@iR(Y4@zGH zD7@4PD*`Ptcltdik+BXPstCqe&Vs_+_*GZ{l8bw{Aa65`!1nqQeo4Je;$G_^O(dRX z$`<(!P)=6m&LDJM`0r9rBsz-CKWdxflO_4zlcJu8B=J)nk*te6g@E^zn7#u<5oQrj z8?>19+SU30|h`xMznw zo!^9OD0`xz3mO4jZuPU%bRPbq7l^S|pH(NkC(8O{Ko>pDIJZpaV|0+dQSlBCMlo<+PYah|9z2a&_tKVwwk55@Kzxl9(0%DGsaBB0Q3HvH2BTN zbBCLKdv?Ag-dticM1j7ar$g1eib_kSd$a*n)EsIFg=XEn?Te*(_pLNE0HX~db9`}Q zzlwJ|+2Ke!$O!iS4S2G_bY@1}y=41;LdY(0Q<{7R@yYCO>6e$O`W%L>tKJMPQkrri zYx?c=#b+Lb#`Sjqg2BdjZB6G^SI>Vtgw4)sh?BxilF|=w_vT|*?pvb7SoseEjk@*` z#Uj_Z;<`5hEC#;KC-GcGjCZn=`*e>(TtbvpjZf#)vT3uUlN=qEJI?*Kr;y{gt0V|XKv^iAdC98K9 zL`cI2Bqd)~l6|RdS`(DBE~?>-N84q>KvaaK=X7SYgh3XJ<{_1FyD@b}-ODyq!S$GV z#`VYRoUYR{CGTSAp1U66GxbtjSA4E}(B^I@BBd+#Q%=#`Ie&o>G#BWHKyoPIv4qBg zp(60>FRBr2_g$bWeaBx+g_89m?LQG9I%%t)j>O#2cgSb`b2<8$y8pCAjf7c`fy(_0 z-LQKqfkxD4`{&Em7~xeWW9C|kTfQ9rot|?&@>^YuU8ScglUNt-2b?M_ckt!6l5(Tt zbiihhP!#h-)lCdL>xk9_Q?`qCEE_r|B+ z$Fsf*@{ed=+B`9nhyOS{qCp**hVjIgaqCK)S-ue4Ctr+Qm}^Qr1j2lqBmA;7vP{th z6NP1ouJf~cRHuub2$gXhI*d)-MJrJka!%fnKsjS zP+%O!R=zHe#kbQ(@cB}1e4RKf(z^IW;yaQ8jsv*UrFBgU^p;yaP#fjoIw{pVv2gpX zaj6k6OB}AH6@6hJ!kOM~(WP!|zN5!OgFl9{riLMTB*iv~d*1-5$)$}2GyAXPlhkuc zupUet4#tdHl+yu_w2+ob|daV8;ye3|?h;e!$QiBKzYVPPqM2o^I9FDP-9WUp$fVeOyn zsLX(IGyK5^XP0h}j3~f;d{Ou!_hus2TqpeZeDlHv0Agx6kD{>w+~$QHgsGHG{e>Z(-_JEaaV=8F6`~sK&{0 zMc}~xwYr6zx;kyx;*4DrI;&Vpu0)ym_T*hf{MhdhW#=Z-hJebf{fn?}Vha1zEdfZ4 zMLGr5(TueP9RzfNGH)VCb0T)z%WOIYTy9NcplcARbvsfJpCbL7Di3Z7*Q#~~qRuZH zhmwT6#^ps%$4|OZB_=$-ML4xv2KEmr(VI1M86y43#rCZf1t$@#)2z`S?C$UYno%ytLn#M)a@U_ zgV-A?h4_w^tR3gn8d$Q{yGxq|c%v}8y6mT4OI8<2<<%=z zm(Hyi_iA~&DqMR2?Q^AJ`!-wlFVmm!t4PJWHY%#BiMvsJ@L9*j_2-^m=ZCtB3Jw}% zH7~!U^525Dx{>ju%Lp+)~T5I#Z zMIj0pm(4_43C|`J^;;^N!*Hci5BMBNmPZbb?OO_s?4LeUp#T67oWXtf|4#3H>%+(j zPNxKT)e9Sk=|8MA*}*2(A+>e@-`D>;t3U0N{G)jJI<)~{ICv^9|K5}mIsPj>VJljO zf5`ET!&1x~V~XTs+{4)h5Ku^BApoHa1NM-*=vSZ(=lT@SEy`R)*4I*3zeE5$Q`38xNXMS)0X-B*<5X?YJZvt&Dd`D zu)Kj_oo=2PmWUD(;Jo0Z2_%iTmy0K(eh+)*u|#e?#q1Y1xK{`ne7|Q1XfG>A`^Lgx zG{;kL8TK@EG7<`_7*#saH~r%bu;wQ2Nw?Ml%djo6))!t32%7|bX}&B=Iduz|60ECr zTB1}fElLqGb0rM&>XT5pRkCubySgx5!Nt&|CJy7&?%#C|c5fx`EX|Hj7o!izp8{*D zW}YsFQ}$-<233)KXf1asVNP||fEe!0p09`R;GG+h{(pMMRcQD_CClLMZO z2zhReAL>_p!Ek;(snbLg+hqw?t25_Wsvc?T|aBab)@Du{-8L8C#7BKJep0 zpjc2~di$1EVPY8yP81_4xCY{pl^lJOfhjp>od2^a*f}4c<~;53cF7up!G#d7(63LK zk$VK)C2q=Pb;U%X1z=l`=tt=)gE(Ji+5K{q&l&=JnLk8a*O z5QI5}n|vjq*Ci}3aIT`tJ4_kAG%)mUUY7-OH&0g2$DJ#dCq%ezBSzu$#<0zp zQf%hN;XdpTfiq^!O$=nnDA-9R!iZK_e%U?#qH0xQ0wdN>joon)x>twHTmy`&5R(zY zlz@|2U7kql8Qv1Lwe6BmG4oVM4ZV(o-hO@g;AVm#gV?2dM94s}?|pZ?WxXoJhBRls zqMb%ZFeQ6;|F7W1#&WJu?_B5>QPp-~83P(D$^$!14Da;iv~FJi2+*I0mJX2MX+P6I zp7#x3w(sT666!w54s}&8NYj=pgc51hi3K1)M~Cx_qCRY9NFxTtE};BZAS?2@w030zHy z`o$=^*}D_zw7%yxhm%uP{wPfE7G!b1j7HC1!wh!hyUf8)q;|6kszOtifLA43U`Ar8 z@lCLt1JYBTdDK^3tAyVfpzYe^Ld ze!v0`LM5lWPH(y*Y%{6eT?{XLW^!#y=0Y(YO0!HBb|>c%vffdFP9XHiUuRnXggQm~ zr_9JaY_{5c(Tr~-6+gc-n)8#xNd*w@TG7yfy=AhnOhohdc!+05;bf#uSkQ_c*F`>? z>GULq^jlDa_LyT-a~HhabFUbG@cX*0L$5$QjrbrBQ8k*l3ihoun;{j;(xRV%g|J%R zfMBM6%t*Xf)Y#Qpcomc=ezZ~QGGBNM0M%+~9OUEVSa;ivNjeYae+|xL4wK;uziuLu&ue!S6 zrhmLi7+$w@TtK)q2i3E_w3E@BObFHcivJ})SGfrdI=x=G z7~Jb+qc(r0n_s46_1=nTX;<|v%DagUgrS%OTs|Ai9sM91~JaC>~+(7W&Tk3 zEWDzccCC50ZYfdAjAUH;ko)qE(C}VldZVbEN1)+(Q-es{q*|EB=xsM*Rs!cHs{AeK z@H4gFjmPr3AZoZb6zWx ziFShMhyn}~*w4avEC!lrf~Qt3A!|+QxLP6L{C*KIlea#X{>l0;ua|S$C~W;0pWY*B zp}HF4Y)Vw2IM#6o>D|P6l_p6Jvao3X415!tx&+22lnUdm2}*cG$xQaVu5TE1pz8DQ zFD)mtxqm7E?n^^@BL5Psn?GH)M#T?Nv9cYF9(iv`4!`pVRrcPbbQG+4tL;rR1&cv7 zIZ4vLqruA>nWD9a>b((t?Qm?Ah)8Ow!dqJ}`HE}H2dJAzZGU;~SHbTmlm8{m>hVqU z1G)L7?LQYGnzk2QcPmbwe2z>iI)P3>ub>wOYED0SNJhRtTJM9e-|MdjCh^>)UdwA|dq?EX zKh^3%EFI@tMW=sLmk2*Bu+^<6)edS>XoI|I&h;uF#=@q}{bNp=MR!+P?LPFe=#K?g z_O~|}d}{)V4KSHm0-1fOlud7ODlirJQ9Sr8$Fem>OrDH#e(z51eI1pJr`|D0&Mf6p{xM@WVH2ca9x)f_&BzSSg+R_G@?z51b44P9hi%%J-Z)_-ZK^{rMcV&_18fufh%> z_`CfX*kHXVFR(dAr6Td;I+Z`9QO z;LhpsKp{^Cio&G>gwf1~U?v9Pp*i}p-jiHq{`KQi7vmc7|9(iE95TNGD;!~$gCPOb z5zk^GC7E{Xe3UkxmKH)u!p9Mor}Pw%u8~uv=a}%v=7e(Gk8y8v}Jt+s9;um z$`x#-4V}-?KD^d$phRPvseqSh+Y7JMVD<*X9`o?zD5bKGRuH$=WRu--MmxH%()}-#LJ-w<^;OCb3bW?(7-(`D=urC{J-GyU-MA1eM+`9 zoxV@)vL}(&boCqa?Cp&E+`N7Cs=YZr1dw~wa5Dr;KOJ^f0~4ayZEWrzkovAuEO8c- zWBPnOrj8h~sjwlSv9rO{Ad&kHT&aNz&|Npb;w%exf_#*;5nnPue)-2aQ9)O>Xn{Ia z#`OQiNEb!jzD!k>Av(JS+8q~!i3+9VJ_2wRbP#@>C`?GI(-PuCPWU(4)#eeTE$Qu- z(S3Wev`^Jbgri4YH~03^3KOu5w>|)UHMF-TUFNbU6-Crj_? zzq@PYjA-X7?B%`KRx+=24r+{}Dvez)Fh}Wv{F({;!bNeWWIJf_53W`ncCqk;!NslL&e?;z(5@o7ucyR z2Jd&tU<(Ze#K%!_NAO`UFxkLVaJ=gg%$C-N@@>FJ^p1{JvIl6gy0r;q#ljmmL!~U? z<~*-1-dzn5_F-sI`Y~1)9X*|FW!^vNrMcY^(k-SK#Qi$98bX#^L zu_f8BLqppI)Z`@ydMK_c2SViD2$6`vNV924Qz7yvr|*bax`MFFYPcwj>LI;;(|h;| zNYUjgP$HzolgrY?a)QVRECW73pHCQQ zgNqyy>KnXiSkFsrFEnJUAtNhL z_E^t?v`3Jr2FD&}{oE#+*$s9)!NF^C->1~h&t`cs@fbvG%AFh1$fSGibk$#>k|AyD z5y>AsuRWAD!L+r1Y18z9L{OYN**>EmRs3xgjMMgJTn?{TPKL_FPAWd#v1}z}X3=9WYS)!96L1;5a(?WT{Sp>> zyHyWBTLpbjLr9Y)HB`S?tRB3-r&tz@wqk&dzA-3v-OG9a9)ySRXmUwly%IKV?A<-P zy&P97fu&ZB#=FcpWxYSzkabwx3;cWw$jpg3 zqyTqRbAgxV--Q}0DuIhki1QqdShE(>MEM8y4hj^)ZWu9fc_vvx?X>AVMERh^^`Vrc zR@>m6QLT)(M!cmh6|e{*?m;9#D?l1lsxo!#5UV#x%ml1ZnrvTF2@p| z)A0pNxoO!@;*h8|-Wb5gNRIW%bE(+^vh7^IsWQ!a%{nODn7NszrO4%?x2We(reLdL zAk`_&ykkyJerB&A=1UtG?zMOx>WFWkOp~ak5myxN&@q6SG+8llRbgmi5Di}@b?En! zLmCPI7UG*5*h=I+cB5s&m~t4Kg5T*wmsNpXk_*iBhZB$i6sJp?o!s(c`%ByMW3$S5 zU4B##+Gz=egO8Bm?6M&0hTAH~;1nh0En*iK47pQeBPRRaH4EgXn>X9f*6E@4+Hfsk2B{#u&$Zyat!OrSLlG2Lr&i4wK9^`ywEZ?=ZwlzK0Z=3R59Z`A^!F=UlSP+8E ze0sGJWn_C;=I+6=uA9b$A1!vct2=WoWlzB2_62xNXu`dx(R)=WOXSG-SJq_(gB<`EqY0rr+4lzJR;o&@ z$H(EHx&*EVXSIn*1^@bGEZrUu5k>V_tkl;b9frI)xm1NH1=F+I1kKByAO>ylZhXmJo zfIbQB8nXh@_?(DshHbqKFxZlBXT?&dYSJaL=dr5;Hr1D#(;yGEEb{gWhg@TWrSCM) z;Gs`l@&5xBzP9tc_*N>kA&$D~;O{3VCWcmibPWc0d~$G6sjW(j9R9ohCh-8pHjGJ@ zi19#gLiW%4z2#3L)JksibRhh3$enYlnwu&G+pe9nQXk&Cmm9Di$w-^=+e1l|l053- zK`*2L@_l0o-RKR`?>mv1;kMDjVY(}+ylNnuv(xBG^mkgbV!D^)Lv)hRX;_n@zWoa0soeRh~_qB&qp!`;g1vQ2*7b zz-H0t_^2+!KRy^>YJJk%E*ya$L32eb5eT2ppyF)$iok7vPb&!Tkn3N_qlLEQqY544 zg~}YzZ9%qcjaEBj z)5sK{!w8DGwz?>C?qj?nB#(aNq3gcCgq*|!pg$p_6dRQ<3;|@%`Y>2PyJwY<#I(GJ z(*e#2GtSv&XOfZ>sr+W2455780F0q_Th_uRd~4hwf(om-6ARu@Jmlym_8fp*V~Z6^ z)P_sXv3P184$mdd07xdAIW5G7^la92OCMHk5&VG2&3#p@t;bB?p~A~_2DQ2x8Lrxg zi`4<>Iym_4fjCqwZ$sXgDyM=y9{aandS5Pm#y3J(u1{CQ_ATSaJlv@-UAbCq z1=-U9p`ork=b0IWLwZJoc-&D258TjjrXVzKvsMAy%b$j8LTAf+KPaqtX^urfIoe=x z`Kx!rA-D#K2(=b`+`{G4-~2o)JHjddatp;8kN5MhhB;TuG3q@MMNAV|ck@~{rW2`2_D9W+H4Xfu zx$;arl1x=qnwSr?RwiN^Pz^{H;U4Ko%~{>^HWu;VG{>}J;#~6Vv57y(Aeo4-={kMfzpyzNfaiaPC%eTrZj-*OqV>4@a+zDqOBhisB8?LtZ+HhrA11)$4d@+h zv2P8WK|Dd(alh-z=eM?R{KM2clE=o%ymZXqq(Y;E{4Yw=5NU@I@H-LVLw!Uw7^%B- zcLzs`h1vz1%%~~gbnnDbL(5?vIT)hM-@)761mki+i0MEV)E9IWEu>lK_2h_)!%!_0 zFP%ocFe&Af-+MXyfJ>GrK#Tvnsy_tzU8=ixP$YWk&R7iz-KKj^O*PE_g8?4+bq3Q6 z8hL*V!f7Z_{&AK&4Z2|b&&ZL0ueFpPZQmfez2VXS#<}0p}~JN{CRAZg^d!hBwB*HUXPOUKd1P^s&8l@vt$WW zkcx1uVm(9s?xtVsZjh0Sef3isn|dwjS6lf$KFUKC;oW21t<1vElXqhUG$ z?B2nz^y7-%XL)jmtC?5=67kmIyV_IaljN$@zFcs7MUuEptCQwgo?}YWLU6DW)i{HXIGG`Eaa?n+IGJQYn z^Av;uwi&qk;I@UJfPx^gnu%R*>p&Z13d)v40i7dkC1eiL4T6xQ*!{DuZbS2+I#^o_ zNZv?JmOi#r;46r5DEMKF9-RvJ7P8FWH}cb6m^=bKtc5=8)HR6Bn>A|7T1Mfj&Ap*h zWiJ`BHo6Oam3pvCwtkFfyb#Oqw=ep^FC;i(kw}<3P}$Gv@ON-Y$`GG&yuG+Hs>Ifa zwj=gk1+?B}30(Y|Xo*!xM17db{-{lVq%DnE!~ZoapHt@o&`TX9@Go8!knwyFcIXHt zB^&3Yjjp0I*m$ef$~^i zgO!}KV*bo0ZkuMG;_L*I2Z9Xfl}Zt;`Brc1lGi;tb`K;5b+dB?&e(Fcp1eP&62@O` zTDwQDljLY){a0sXUtg{0H38f64+kzHJY=-pZKU+TTqP6$Hucww)D6&f3 z6xcG>8yjQ|)`LSR*FxVueA$`qq%=Gw{iKpKq;Sf;?B>~urYAb8H9}R$?j7r+i4tvF zP5zuu&fAZ^#j4j*Y6Y)OC8*^PG;G+TXtY+y-3jX6IWCM9%-FBea#vxVD8%**y|@&I zDT=yTrl3hRO6HMKYT`{TI@dzmRcCe+ zbYK#_B$iN05=X{%dz1D;3=DR5`qYGQ9^!yO(x#{e`1CEkC3Mk#_uei5F65)6?ss(B zJ}h(rZW_9BaiQ+CGwI$u|(y1ci}T`k{Dg{M+`L2D8Q37y{Q6 zqI3Q&Run9Q^bLO(`HcSh}5yWPh-yNXf9Kmm}<`Er;K{W@4Dh-4ut;mdwHJkhxqJ9OPx8%-eZ&7=w??% zlfsgW3Oz~BI@C4au?+U8u>v`-&>aEV(=)mawLm;)oHpXpGL$Np8U$Mm6PY$wN~vHX z89OH=98i2Kpcekx=Z$EMyzc!3)TY5@=ti|Ilz`@&4em_zX3gcapwJ<_X6MYegS4CG zG9=kb%He?V`B0^Xc8PisOAsmz*r5fxj4|1SQ+qvp(uzDXT&Z5<0OQG*Am)9IV|R_) zV6OHjQbarkv;m3 zr9NDJkkW})8#{ekFD{q6f2RiVqxBFRmK(fj9_Kk(R2?6%(0l8JXhl~@MM=}9(r;sf zvISxt@v85~wc&@DTXI=+dNlyWO!d)tl*&3Uq84PF3@7XcI)JE}|Vd?-5yNA)zt!OBRN)r~Kl*;D!UR0CC z&8->r$|(}Y)Dv&mx#!~!KO+i!%qZ4yltqN*f! zGzD5C4>}k5)@jY2R_(9ZC!50ZbR&}ODeI{AwM=D=MH4W|r5-9wc8QfT&zvWMizw2U z=CR>5X(BpvWF(*!CD*+k`VxfrBbRPnO=CCZ%TA2c2=!#QAL%7CRv=kd-B{o{94O&| znEwIld|D%vG?JYVbR74r?*IY|Iq0!jIuZdHkWdIMUTx3{v&*gUpFi4XUjzm z(UN>&`n#N*Mg&?owTVpVSikE~Ac`StrGRQ!kee#l^YM8uuZypvr=i?A7ggBX>W7VhCs z&w+dH9D^%NC@y&Uv^}AIC1;V_E-_cYxa==j4^>HJ9flW8v{9>YL~klgNoc(CI~yefNxH)q2?~=5Bdw#7Im?JOLZqcLw$m2k@=5C6iVKh!m1xvL{m@1>eurl))qur(!8o&{4l?00UXE)-9m0{{;! zm`Y@v37z0;|B5P)OsZR)`6!%EPSN)C>aafWcgv!Lzqu(qB&8nSWO-tg?qvF`NYhUH z|9eT><&8CNyHZ=V3G`S#!A+g5;Lk+T&cG=(*)a*Ag120V^ce};*6#;6si+t-X!fNh zy|RrlYYU#Hw7BI4L&ml*k~efr#o^lFDa-ON{cTi~IO|O)8DO)V~s zuD3nDrZyzULrYy{v|Zb{Vvt}ajaKEm!4r(oCSp@ehfpWrKR?2g23M7T1%v3S(IzTJD44|SB+!?u*7)GD9@)+vL1w)uBbDFeo5wo5S)sgLX>}MdKP4%Cdr9F&aG6_}igNiK}3xb!&3b*sa zjIBL=ph@!%At&>Jbtdt$hq9{1$!I`UVH$)6zR$DUpAC~BHXUkdf6T2EwCeGSF`0x# zxHEEE#_aHHeYm`tGY-3>i(Va=c5anoLa@~8{s7yeoP&L>a%T2^S6VYTU<~)m10MH#~^h4_NPR+3KC+nB$Um|3; zt6eJC`pGEInou+AnfK$Big`=>MmSLqr|UU2dydb3<;vY@&KX^Dw>u8>y}|XTE=ZO= z;-DtQ6vdD|XynE!pY`|@fONo(SJvclit5WKax$?N$ToJ*&d!p2jk7|pAZ1@e-9kXa zYiY+$YIM}tAg1iR!cPj236Ii|7Td6r?jG4a{K(Ckf#UxK#Il+^iVD(3vap<%?$ zy&_DaN4X0PfiUJ`@WWlUWK*c6kCsJ#(n6T?In!J5d@P-Welw^fM9bK*ARGRsiLwtS zJWOFnk7?T8sCanH>Q}y%xdz8ldhZBs0c)K#Y_7w(_cHWhmPT&L<{3Fe1&|Bd zjxt9r@R88%!q`dm7c2|i=bTRyKR> z_S23=qP|*S6B_wvz0Ayiy&lULzPDR2r2(831XS9cahL`WdI9v}`MEU9%L(jc_%Jnj zRfO-0h%4vLc&rOXbLPHaM17YX97P8MM`%NLgmkiXbs2yB=f_3^rXHNNsnkuT1Zay%cE6 zZizo+?5e855QTUO1TKbWSa`to_%y#6tN7-9`93)WhjFNa?R_1LT0tunF0|ra8v#hA zd5sMg$8$3obEawq_xf59j2>)mD>+yg@|&Bs=pzrY-1P?!(pO>2*`PL+x9l4E>REgJ z&1NW0#rF)EU`$tG0Ni{2(kKI8ZiezXZ%c-@cCoX^y9eNCH)j!YQirla?{{0rYn;aQ zDXNZpYr)nH(D&xIgnm3uCBPlZs61=C{Yr_aZcy?YZe2n#y4YWS8uu^noP%}vltel} zhUz$&>_netm<%3Mp+P1<5Nu%V%5izWJAq) zoY*puH#Ufk#=o#ND#b8W$q`Vx?9|V#W@)Oc$wwEkk-qX~Iu}}+qIcD>1wWK2`p;9U zK412M7K#Ksa>pL&(0(WcGGg%axQBGFIhX8pzL_Tte17xz8a3PKeJ<`w}gr#ElL)yt? z`B)VO$Yr^m!EI{8*xHA$rRU|_lD-Sn*SBTEQW{xptzrV z4%)Q=IeBL)Y@m#Eo1ZPEUq4^Veuwf8z%nfpavc~inT$A$@na1et_J#iqEI&RSs}E1 zNW1t%rq}tn!fl4SV{N1qzy4$C)juRcP8l9H!80+Px7U&DxD3|dP;}pvfiVZCYXDQ`yvms! z(phKV;D%o`ymSJoY=&*@#jY16HNg4D?mt&?2u6ly-kU4k+b5vP(}@VRAzNN`R_~XP({IDft6Ug1Y zW|B2zoYe1S8g)%80a?0AJxLnCRp$VXV7)l_iH6Jn2AF3)M7v&F4wsHwsw!F!*R75v zKtG^PWR5iM8xP*`G8)8Cor?D15tn7H_zMQ5%dn&F0T5v7l;tLSLRf(GY%;+m8OuSR zv^0>t;`*T=7{Q-J81@9GMMZ3C%v*u8g};?vrU(qeY>Fo*eu_F~UlXJv8p?g4)sVhJ z5R6>10^}eYL+Syr00ZYhbQjFi$QZfNGMFf2{%^y3M`&^utkl5+jND4NlVx0i^IRk3 z*(;5hFlFo31AJm}r%{SZWnbjZvO*4b__W?$nq(Dt%Lk>^UzV!|R6sE+GNgk&+H4xY z&L>O;K2U4gaJML}o1oYgty99%w?6Q}tu=$$a#y+r|6x6&N4&dS-R2!6VX#`!b6FRW z*tc=7;B)G`8#kAjA{pPp^CQFv6OQq- z+hf5k1`uegY6iUPT~vEBOT#YS)sk%X(o3MI=rxKEBr#2LoggvwPRed>eq*dNRT~t1 zR6*5dQN&K(PfcO$%uGB>uG2mKtKSrt$_Csoak)|F)fZ4hm#?^TsG}n`dtL$e`XilK zTjWu&ZM}wf=QJljGfiKX{A~ulr(rwm;CE;16z4O&Wzm>qQlK& z1sH=Ar#m%7cAb3R&drTJVfnmp#9=}{=xHtXvZu-8LiY>^2sDP+H!0c$jC|}@@B9Ej zLaISvG1oErdhMRPqd5vnY2A1!QXI#xk0-~yOG%ANK8 z0hQWg@=qTlx=+H5vUAGg%~=9@d}GWA1GWr@!GUzy@^BU+;ig~+8UTp)PV&fIm5(-^ z;^?^CzEz`V%u!x$!~?3dW=*Pg#}SF|1mfVUznopzwcOPdKu#Sm`(59ekZ_=AvrTF| zoe2Z~PR=L;+-xtAVhn5d>#5Bq76kof$X*WYk3E-Qavgfr(o^BS#)PPTwATL~8*|6w zGgS1KN0s<}zU%UjvZk3GL!(rC5klGhiqfO7t#jgSl{<3UFBjrjKSE$W=bkQiJ5{Fb zO|hfPS9Kklv$;^=q5>gwhSNr|8MRbID*L*g-b&$6cv`%f@3(VB2^vh&FrL-i zWLwmA9EV}&xKmQJi(XyWwQ;k&FF*x_;~sryiIE^E730-^NKy&`+zTUv@Qb~G)Ij^+ zRdt+^EKhah$0#E1J-QTnC56my^krij=_5-Su4x^&s>2dene?cB zt?&QqWSgk&s5EPn`sgX#F2Xw-#JI8gI0Z&nE*-YY-iu7{-T5mrGNvq4Z@U`Gw z+L}(B4OuUphU;zMV8%3;o9E#M78urf!{Ti@Z;DQJ_dafOW%}}@Q&CcWw@@IYRLh}H zp*^ig_T`Vo_Kr=oM)iG}=Phhl>S#x~{adcKaRoA{o$tyUuJ<;3H3UT*J_Af8`&x>m ze2GXHs(#!)9J}Re8C=EtG0F|t&3_U?itffh!*k~ z0!A5Yn#sZe$0=~jV?B;*Wz<-=U+UeA*OO-@DpZ^F$v_!<7lM=1$Sd_0;_v}%22oHd1QG|bv7>9#co3e{ zzMN`l;Mh_M#H_EwZ2JT9yV zKGfnNaqrT=fs0tu#p)JD2~4nZhs1L<;j@zEcmnHie@~sqf)@emc|T}MWdu=c!BRf~ zX6=JU6+>4@HMCANap>gCSoARnQ391Nj=4!JV=(1-Q?;Xv>3Q-MRWNR;!(LPw(I~#e zWVIf)1F$45afGAC$3}`3SQMtVJ$;tFeC7b2I4V~3*9i(L(ucCmJ5 z=A&S`U62Lv2}wbLe^Ej2G{Z<6!Zr6nxxE4q*Z6J4>7n@-p*USWz^v3SAK#SxVLimIlGQEQZQ zmOLJ1TN){5{x0v&QF}RWy8>oR4r5i@oBM&*-uv&z3rwOe1S2q2iIU{!Oa4}?fCsg; zV%A!q_ojU{WV_~SN|>b+9bA78vhiO{9lQ^pb=AB*e-y~Fo!?A`PltvP^`LeAZwNj{GtbGRSPam^Dz zG>p21AEHNWfjzMN#vKdB`yP%$F9`-3p?~*x=B9_h6z8*C`om!s*(>Mf*vLlwu)5%P zE##*DtwR+M{vl&r*fvQ=wZbwuA@uFP3v zf(f!s+JfkWOcQmz+%HXoycv7rp5UQY=On@UL{V16;MbyuN|w$0M&*@Rt*SoPVB!(+ z+Awy<5#LZ?GXzxMlo6uQEsym!*-XKv^IgsfqoVo&?uDzDFTJ!Uu6nmve!IgVm%~gdu)YpOg*wL+q zri@gRf05X&27$V1r$qPa8~&XPh=$pW$|bv&J7qP`rG#WIIn>@qcpMEvisI0j`jpoJ3r0P~Ytcr5~+mRZ@z8-kTQb zsUTC^hZF)Kb>7l&Y9&8>pQ>Yxf>YZZp>fS2=wIB)U=BsOfD%?2sNNIzc~#?LP6m=s zq^#J>S*dJ46vIO_VmD_%a`yxKU34al>iK3Ayd&PiXiYIHAnyMmfkkxiJ3meY2pPqf zdhpdz13E16c;ra+>Ru4h=Zyu2zIxIfaSbC_gNO+!+DfxmY65I&V+SzJw9Sp?_=wNOp?&(zV&UY+ZB>3Pea zXluRS@RvQHxsoK*e6*P0sxFOjYvk#mB4N?5sfoaa_@BKEsQA#u9O)O!b&3%TjU~3@ z>{$4X!zVu9PvI%+5M6~zSIz^Z;C@F)5TP1Sq`A&z8PIGT*8#d<6k>cAvnVgaR{R9t zVqO_2?u!dP#V26qQo&k0MfKY>d*2>aibf5F{CB51fpXSvi=Q1n17<>swjqU_Dg;J^ zQ%ZZQ9w=@cP>M7t!T}aJO9X^qZ0H_~@4=@CF*Y4~HqntP%Uj06z*|1AXC@){h`YF2 zp@VPv;T*a`(XuoSqyYS~E00Fm<(Q~pPR~+Y(6!c_6x%6|^)bfCA&%yN_E0CtO&B)x zey!@Ys6{;F`>A?b+l(Yr56v$l(P|q(z*-85y+ouC%LG4hl9LF1y>fOS;z84q>auVa zQw%J3-5pTnQ{*KK`P?T?zz3ID|51QmGkY4O9>IEVxZn)BEMdH_sXzFX)8~|4LPf0C z$s$exArm-Y2fkb`g4&o9*E#8%Rv!t1hyAMC;E~PvZjK?6AWGj1s%vt0A5ez{|({(;vaYmt9)6(Ay)< zAXO^Y2g=!l&OeEwF^51r_j=dIkdkWHo#UMj3DIgT-LeJ_ROL4F4RZUx;s+o-Jck_p za_FYHKhz@U)cK{H>%sEhs2>zn(x9&xU?bL5I0~ob3)T@TZhUK(yBWA7dfwcXz}V>q`#5;%ZmmfDfoLJ7*9AWiZY#%>O7{dftd~b z&tGomgHeJidUL|u^n`6DlpPH99?R_GhD9YnR+l9Y7f!<;^_kIs#?b#T^-IZh1BNgz z)j}~56?Pk*?RM+hjN)+;FYK#jBGo|X*YJ&wN|6BmMIkyDps}J$v$QlS1*fY@PY>1B zx9^B{aY7$OO=JQ}{HQbvMV}$-?&W&gy3BQ;n)<5!gKn`aXH0yi5_=_4iH(JV%)YKE z-_e`v@BAIEU-h$R!d3tEtGEwEi7RzzUWsqDDCp&f&8g_C$eE*Df_Q$aUk!-7{pCqF zApocE7ax$2787wh4W#$+t_5Vk`Sw+F>niP|sLt&U^)!I>N1vC>hk%ZiX8l#?z))zS z%z%7^^|`X?u${bJdB6_E_hDr47W-qGebRS7c9ecpCi7xASz%9$NbfdBG!)CuIbFnjpZ$^M7RhW%KOgz zSjm2`@bI6l4oD&fH?S=O=FB~?V0OZstvt1ii`wW99relfGn#m$Y8OMv*H=_XlvUbr zwxZ8Oy83>E&~!rLl;4q6&5Xn!p8}-WOD?Wuqbwq2pP;SRl}OhmUuKjDpMUlfGtC99 zYS{UYY)g20%yDcT7Cgc_Vd`rd;EPpWj!tJfFL>!cx)@8A{h0tL1PsS6Ex5VWa#4Z= zl_9${xZ3KSP11c_^AcGMFzA3z6s*x$z^X%7HpH{nQY?rZ=|zoYaY^nQ#tUiU@xiQV z1ZeW0S(hkOBOC0K>DAm=%6IC!nB(&sQS29T~5Ra+94rfhw!d zP+YYI9E2Ci!U`2mkMg6scoinK&2wE?5<`w3f@FPGqUK)kgXfFu<;SwCUkfJ=n??5c zVUKbvV`_B3t%_`5|FFdmd!f6#9D;kMsz-R&`g%JdG;|~FVc0PPd}a;=aRJTJ%_$G; z=WH6mdNc$|IcZJKtoa@YMhFyLVn(bg#$C!9SFZ~_SUC=fz(ZMyYQ2m~nHtjAZ(DPR zREyX{0{!?S4m-=0q@RDlCRq@e=)_Lr!*P?k2PO|D=+C@_@b{bsJS27jn?@RqmAbsSIz$V?VB zst$Y(7=)ehpC1GTgfK)*erd<>gqj>~9UMhPdGQb6jNcQH5F|oyH*%j*NSF{)bR0`! za25p3Y`Yt?H!RXq6NUF4|FHT)EH6)F5$ChGV)FW5QZ&n+p@OnRoOuqDBAj@hyS;z_ zJ>LA8onJNX9`n0dw~vUN=r+kk_#azuhp{t*d1J5d3-yDMqu3{cP)1VwK#D)4&A!xZ zwF8Qt!~fFU@90Vnd(2DGYOW%9@uTdQ$6tEnyK8BWzep1(``=YL6ahwLKW?`#XiqAt zvW;o;qX1Mxx`CeKD;zw5vg8Ag2%85s%iSq<+MI_1!8tW6b}Y3t@O%u+4>16OBNv){ zN)(XXl~fA>(`z8`z@A;p=wZ2;dy%#~cXvcb1fZWsCMp5m#45#`sg2ioALdq`aRLRx zCmK)87t} z1?oq}3zZnuWyNpQOT(G0dc_Y(5r*hE+3gN-nGz33-uYg<(Rf$N{kyXGrDg0BYtMl)wb&M*JBh2chBlU0Ta#nyAWzNh$Mj*P742$d$Er|9R@g}b7S7-P{Vz0VgI8;i9Ca3HLW(k zokAG4E`EN|1FFZroLK@4kgyR`cW&lyoAGOBEm%95+2r@i_yvS(7eKXSrq7*bw`?Id z1GrQB1ck{?My|R@LL+{n@Ofu|=+P$s7oX)=v(?X!HOnN0idD?} zLRQ`-r=Mbc?%ye!EjaC}W=(gDA=8Cq=0_(T-=g?6APi(y0>6)6Cd_bL`XqHKMs;gw z#rwx-lBO+>g?d!nIV?Th-wXsl`{~)Q(VBF}5cU51@5osI{xuRMs)ubP(pMm7@=q2o zpV+|vtjgcQ^)Iwhs(OIghW@@Cw)fVRDlFiY-JOP(#CjFf4kR-wQuo4;V02&AsV)*Y zhGT>uMbJ`_1OAFZTSy36R?X!QC5vIhZs0m;jq8ypkuxLaFR+IToVzlL01D|ou~vDQ zVOQf%e#P)sGW%btB<;?(t~=7FaGXF4kVP**Bw9k~cCRBlXs9pI#g|AzEfz2fMnf{hjdx1ko$WdH(3!0P`l zf%vRM)OL?iq*~Y_j23}6?=OTlBK(PYjsoe2(;@P4o$pQkT$fjv8YCHb5OxOg{E&@Oh+_+xK78-f`{ip7k}P=VebolJkL@ zSsb$;^o;gY{#!{F^&)%2>!Kl!YbtEa-LA-oIv~y$?ni*ZVB{rkhGNceaOuMkQ@aO7*K6@GwuC~pU|GZ`9gi$Rk!>2*w4eNGEDAGusBHDD6Fa^W4I*mRXp1wfqPXkQ%b^5b!L? zmQJT_!^doP6M>PQ&-;jCw@o;I*9Z3qmPY`J2+Bpej5Ov=mH(tjsjCAW(xb7xU#Y8%nT5!Q(rU(o zyYCY4ab6d~BYvk**kyMw;-p=;hUD$FhRN#IWDp1}Lx!}1=Q)*@w!?YA-Oynd(+8wz z;wPc^pm~{7HF@B#lLZSs@rV9Gi=DD;Lc9R~KLEh-ZBF_^x|L}k(xxOrZV~1t|WnS{&(; z6ia7Vo`kFu5Bb)w`0xgm0cDyfZvEitJP=3ZRe!_=1NvN6Q\|Obz){sJ2NgC} zHY%=cOVrrfH#WLpgl!H~SQbJVRy%zq)p)(FC|OmsQGt;CvK2+Psk);)^)p~*%Zp}v z0-F>|39W$Uta+Syxh0wBTZTrn=_;riqJQ|iPs*!AIE&LlTy@!=$RnxKK$a9& zUY4WOb6qp;FDyp08>2_2De|9LYlkEhm}1;v@}IG83o5>lfP)XVydw}53GAkm`_8tm zi)@I@^*m4GQ4yqT+@HzY0z;W%vTinLO|g-<-KVR{z}U-%E|xKL>l=);_OA*M%eV{D z`N0z-!*@5s7d=;W%mQ(L1$GkMGwLLnxW^ROIEq}Dq;6(i^78NU!p##UPwNO5L$Tyr zxr^lr5*W*v0v=N|g_c|@*BNoEZ=rL_oSd60BQ(bww$F^&5){HNTi^+^TlA$+4h54| zhlo*HvpoW!PR{8uZUhH|z@6^iHn>LK`GAGx&*o zr_iTOGoZBXX6Ox4AwVY}QH{m8Dt%p&zzmgTz_!@*V(-irqK90IeZ|9Xla2+(rEO$y zQS-X-YhGuJr2!SY{W`u5AybV~Q}zC;4Xd4E~|M)$jX8Cv@oFm6oMNsa@%# zRr(^$9!!VUyd0Og#I{C9Pb8F~Ny?X@x~tt&r#i4%_^6BJJ=Z1WhC6TT2z=py-i(Yb zUSvSVH(jf#u(w)_)Di$Pm{wBZUzFhPk%04K^8fr>LWPgC(3`Zu7<6Zm>5LuD86Z3( zry2)YGHdSM?jap9txEj2d-_|x8Z5kfcZpjh3DLwJAV=ibd z47x&w8+xW}1&s>_((Kwa{!{Wa)$Tq8AVZ~ueL(p{FI}+b*tw||rGJ3Y7|8lO=_b+> z`GnJ=F-~KUsE)-q@|N&Xe}z?dOqFm)a5de$i7d&iC0rI1OAaVH+=*b2Z; zfKeW1FWAELjgzm4n6DzL)~Xj?0$e@WPsjsqV*A^`}^w_hCsU1pkvU9MbyULY-s-Slpeqkw6)T$ zi&z{U*L|u~ zDI|qrsaEJwY4}C8Y4Cl#7Ex||0{MGm+N9$Hj~7g!HS~cvD_%jsC8SCv*qRTD&je(! zfxGw~&p>QGi36ldL_ZBaHZ9)f62++g3_^4?F7XRX3uNK;DVqqWk|4`cYtVvv?d4jMf>Kysq9l>MkM4DChm% zR00M;_u%Ib`ljg52wJyxnE!|M3EB5bq=GpNyH;pmQ;cjh_L+DPqX_zj9OuX1IE33d~- z-Qp3jo0fqYtMR^JhWcg*L;y>S_E8P{U61z}5UVMm{uG>S#xbE98X@)b{sp;PCuWs9VZ1q8rOkX?Atv`K??wEkyKQX#Fm}F{LJ`J z@3Yq<)wEUyEY3FBNe4M;L#G28e4-x32T84y6c)z#gOJ}4h?%trmWXI92kadY)1%W-Po-wS{`d@n+*eV^W@O&Ve~1p)v*qC76%U63habYjEDpdNR{yiXf$K1dm9~!>6=5% z?|HK);(RXZ3BagfD?Pz9oyD75ea}0+oqdY73j)$w8Dswt>nn7z-4RDq8mB?7pz7+4 zby1gQT^+XDGSXA;$t)4KgiZD9;~lAxyH(jPk(28AROYpP0k^9{pC^5Vl<)KpKGkO- zLGJP0Z!j%Pn{l`J4(v7;D4zTu<;WO^-l9)vKhzC+gqX>-BH0sU&P?grhcDa#0j{lnLzF(y zZ4IFR^vOt$R_0*=f6_2ex8h#6Xb){%SDRj(CCL21i&+VB zb+=|L-n~$y%1+OA${ECs+z%551HjGIHWgY>EBZn{;B#^_Rv_4S?5g>?Q9Z&IPd}tE zOBm*B`DmZTH7Uu-25X(3usqUtK;uF7u$Vb9wn>D+-zKEb64DwozZ)p>@vHA%R4Mx! zp7ti4_nSxN79u-Sm=Hc%O|%ALq(`(NOu^lhAn?!<9pULb8!gENttFgj`hM}R zVEj<^7kg?(@_8v+>xN#i7rmXWqilGJg*yY~0{J70uC`~!b>5HJ$k{`Y}`9YT< zwKQerrh6hqW~vqfP0$&$3}pSl*PrJ)Ew-tm`5^)_P+JElXV$Q|Mwq-gR`7DKYQgyyVYE5;C%o> zHFi_`&^M2eMI-?D{VKDT-Zh&0V943=(RRu5^Q#=eM}1lLYy(O4ZF=<@zQsKP^>hwy)(tlZ(h4*=hXosqHd*Nh|{z!*?C`e5x z>&n&Sv(Z4xb#FV{eF%?pek40SeN?yQ=>Y_gAVsbxi z?`axuS^hK)!5)@vev~8bPfrYds|R9QZNKfTR1FUxrXf;isNgwa^slZ^0Z8bm0Vukx--NS$mP5gf3EtL*^Ql8*}U095XL{>PWhttL>DIr1=Y5M^41 zz=eP4)43dwHzgz!-%sUh(=zM671ci zU&y9#l|5`6Xi8R5lTAHh(XH6F!v{IxI|##pKFUhC`Xy*{Bp_@0-%h388X*fZC;2lK z!~!8B!3hyrIpNoH+Z^D|1yV@a>}&2qGWzP1JPB%#Xm+pN1fZ)rAzX%6pn;V*awIkD zbn&}LJ{2p5%yO@Qg$FQtC%XwQ!j|-uaUdR!3M9mPw`IoA$ zG{o-o8sR9{^vHiIF8pGnFFoQXJ4%01-ic!B1R&%~FLe1fc~hwj!j?-JsYsvM+kglH z!t;BfzUeCje~xtoys)hsrXsK>fylrl%@?WL%>TYbm&2Jt0Pl)woDj!?wQ+x{jy53Z zo=OG<0A{uDRYc$rC*3NbK64E)jwtPZ2h$NEjx8g9yrJF@N0`_RDBr~1V4*LPiGmA- ze%Sa{!=tnJZ9}MndvT=aw0`NliJ(Cf%IkIrje0G8h5|#)@?(`Pd8{v{+fsmfE{VeT zKF*bDCegN_$z&26xhTlGdt1J}F%eV2ZQBDra{E)LHJ1)Bgx1p0fKB9~L{TEmI;{a% zsC^Qu87o;(mMfcwx}P&WiQT`Hsj_J&(sTujabN zaRmN{Nbn9qz6S94SD<-VHS{!u#{ikBM+G|&h;n)Ce@`THChKZSl8*q6PZ?<6v2*)Eahk6$U>0I=rB}7Gav)d4`w9*^+R8b)`pdgtzAYj1 zgin2YH7u{Ob{999HDR+}6+iUgtt1)T-Js`;oz^tcwh+?UZ&Mi&W|Hp@#^&7t2a8a_ zhWQyp$1v17Y?&+S?ZPmGjxh>u%RfQz2^S)GJ=p=YpZ^UB)O{lWkoo~sp%6`1;W(FO zrj?y)>zH$uZPbnNEa-vS}UWpHBZC zWI%3X*A118!m#a*~y(v9lH;5fM!I`5#f)t1lb5YaQ zPaIK&4I7-qHDySQ!&l@THG9&m9sC<+gfMbH*v`rMC8Au>b>kEbi;j+^Z-@Hhn|>t1 zBZq8)VU1w``#5lbW&k&k3%@XY^DnAJCdWDDSbsdYb6I_!3CW<`WQm!E5@jPBkng2{ z0~D#BV@L?KO8d?VPNH};&c=r;DQlWgM!rDkD=E*1>WBnCV)0}aLC>G z`VkvLSCGz9fa_HS`#3Y>_hdYQ_3*!`u_R)$etu@cqzNxa=;pDrmOn?qM5X$s2D@gA(U=fF!N5B*e2+l)T*3SWcfaD273Ni6DqBnUra&r1~3mb{Cz+V_xm zHNeWPj%k=D+l85Qafg)=LsG^ts#7wSBYBNl^g>ZLlO#V(shDsWA$39-MgFGyd@t zeZst6HFtu(wn+Y*&IQmxto)%`>>Wl?Vy7F&(Kx*106rV6b&n+GbSPQzxS650FzS4n z<)lpKak$MCpF{wCnG~|St`V8u(o>-SV9x)PSefY9UGDO(h4N&dUkF0S{LTXx0d>)b z>i7!GZLl;|cmHCxF1pr#45P_29H~)Bp6%IbZy@3(L~k%BIWKKHUvV`@gb3}=oS0-l zg>E`la+6>7|I$Hcysyg$Ihjzy81CRG<%v?>ps&E`C7rt`Keb@y>3%h%5n66_`nj9- z3@^6qKfLx^EhyBKWs8=;vrk?1I}#WusVvZVW_!i5`+pmYf|tc=Cu9fxkt9cBnN!+V zwYEmPoxj(i@iZP21y97W#BN+!5XDgzxijws`fE#fwBkcC6r`bXZtlAZ@)(Wp(XXg# ztAt=gB`V+St2_6mYOrK1)0qUs{*s4dk6m_N9z$)3VHUluUqK<1v}~EZsB0MX-3)2;ph%Nh@*)pA z>mZNiyL}|sAO_jpn{)ElAoe{xz$%@7I@mCL_=zO2xAxxkn-@FPWc6NEBe%W6tC=+k zlzHOSqXe`@DuuGJd(fg||J52R>Vho*jw(;}peLhY0FBt`%(Hks|C=mSJJt==u_vZm zL&Ae0wjakhAUs&RHfL=5AH=5Quurm0Iy(FWBdl%Tu*)D*(vPivht_dip68Y+KIbms z{8&l`w2-I`bj;A@v7R)U@BGHv%QIlmGZ1&~n|{ZRmXB8!74Hnr zB&uA&>d1QjFtr$n+7r^WKz-kGGf(Gx!>Km~@+-F`@f$)EX5D+f zl$c$9LJZxl(!CGz+lii+1=*dE+|87L2Wc5quax=Y(uP%AHI4bwmY+EWOCW|!Z1H2C zgiBREF=8>CEO32=d238!*LyAsn7O434GtbK;4LiNR*e&DXrQ4_fMSCx( z@2#{~tA^*0mb>!p6c21dYi+z@aoyP{NpZc+ZO>WGnMb8JZDfL5g-@zC(pvg_-HzWYM?NKjD&w{gbvZIN>&FuGa36UYQG`kFLdIWJgdf z=^Oc>`EkI0RrUMtStrl-NA;G8{_sG^j^(ggepkLEWgs3>C+FuLaR5EYl%B3W4N{2C z$KSzMer8z@LDUlu==sGYry$S5@NUfap?ui z`^J$}johRAMKXiwr_Ux_lMLSHxn@sI!lCZlgq6NLRM6(HW0HrI+3m}}55bH7Pg^tD z3D@FR-0x+dqwsG}eE|j&Nd{s}yO84Z22J~rsPXWKrsrk)$F8G#S}w32*@2}xIn3e^ z0U1ZkcUy6=@bh+hifZwXg;;rrV)Nv9A+!?|-VIzRM3YLP6k0+01q|9g0fnytG-}_< zS;G03Jwffpvwmsg9I>?`6|vUU8d!R=qP`{89n4fd`PQC$siS5J00rO!M;*t@U)>Ab zi`AK@l{VaY+=i*#Z(>Qg-fKKFi3c(y#x8El6&R(`(cQ;Y)SS8&d)_3Lrh|$IBM@&8 ziWr_#v}}`R(Y*0RX>)z!yfG;|QhY>1@fU}@2suOfJ;Th0;XgqP)>HpYv3VFLwPa_u z6sN#+{T~caS4&HSq2WI<>yb?O7Sam#6N;$<7{Gpi_rI&*!V{Z(y!p_&K59p*c` zU;bdSP~s$3X8A%E!tUx@Ips5@>`$-1{#8D~iWRXvfC)_0+_%(P89)&R$pJ<7X5>_X1yz}CXT{fs!{K#4)CNeG{X=xy;~fLCs%l5Z znbQx!od)DjS<>)GiMXZm=(@3gbzUeT{{aa&Y-IjqEq z3b2_h5Q*EHRJv?>NypK#q%WtD&U=!;x%m~Q5T!!=F9=i( z3n&vmzhQ6UA=+Gs3xKbZl?guN5xj-i({((oGmP@1jUIZCN?|YwQ_9N6t2&;t(s;fm zL5yW-?151u64cm2C}tX{gRdDW)jSQf>UD|B_B86}J*)Xo9awTHhh{JyBLn(#pTa|( zQa_R$5-!eeeRVHCh|M*p==pkCZA#U!t}n;6o$^E3PQ)-4?H%A=*`|om@8luPejS@| zGo;W3N_rpHc#NrfbDrXjktMf!ferowV95PT+aDkc1Vy;6Emqp2q0AZFY<|ZSwtRAx z)cLVRa*>KL6C+~$jy%HwfM}7cz5&vWN!5xi(h=No63)Py0~MxST9J>}yJ=+8S6GO0 zN;=?+zqwmdIQp|+a8n3fn{>X_@H=+1BsW4#;jUm!Bpm0aqD>vP;J?(3C`5*%2oRI# zRD&>>6q3W@`wM%hJ!ipozw`7oR*8dgi%ZME$4^DRyfEK^2k9KYh{OHg6T5J+tG7lv zp6<{dHXWdDh9qCnMw&PRAL>g|w3^SMpi_I>(~iU3bsu*rt>o=0byB|_3ewhHra=<- zjK=Z+>6F>z_^TSYX@avXhab1-C7acoTdA-K|>ck&?Q5$yW9;-k+ zV1gmNv)-)ozf))9*a1mRUfCo!)M6d}rs!M9Cv(@RDe5Da^vZ~>#%swO0v_#@A(}SP zB#exrL|3Ntym~EJUW8qUQ5EQI7U`zm`2tM+PRKeT)I;0kzF^B(7%8%y;8r7ySBe?? zbNFBn0a0IF?Ov~02P+vc4~`1m@#tbt3TVdn8!Gpi4jP}zGo#Sx^dx8A#jby%{trfzHNl) zP`GP6daD{$CwXeJH29lTgVnx={_6x0FaDBt1!~5Rfma2qJ~J`e|0?0eK4Nmev7-0RxP`}(e99PNl z^HO74c4EF+&H@OO9oeH3^i*$&KdLw+goQm1Nc)F5Y=j&>NTW3GCupjOTM8-9$u~r@ zM5rdxE1_6A(1`r)g(%4tDCYd5dCYbtt`KR@cE?}Ig^d1QfJy?#wcqLok`YP9T9>=GA=I% zFFCQ>ejc&R=Cpn@ZngqvKIh*!@#1+Ejua`#3bTUi8^8j(`|~W#EL|nCdky<76Iy5K z;c@RaM==?m3wW*;9C;&sR_qG=>v>J;Lk5u^#u>hkwxa2@HcAksWj*}`YinwK)WSlm zlO7Dr(geMhS%sh&i-Do02AMn2vXXD$T`s7)c>6k#dLJ+bU5yD$~23K6~Nh&w(){DSnh>E-7%|O%>{6-|Ph81=d-XZijEUmy@g zn8b~iRi6d5xbkwRnVfRf^+PyP`q?vK?P^k%Tv`YTHw&&M!7e9}xP9>+cGr+%Z7d=p zKaT9FtI&f=-${zX`e7*3Qelhx!AE7puP;7B&fB8Z%%&yd+y5{@A@A43BLI%{)o$@w zw-eOuSj;>%AfbGB;z^we3}hKZ^Rx*e8({`y?Ad-nJStBTHo<>Kx89%$7RJl89>gkCp1_OB#mG^` z_Mj_yDy?-UZR>){&==X3|7DVzM@+Hi$vbo>mrj_GJ{`_1oqxm&j#3y7uM^?vNrwEVkLJemb2U^kvc zOa_^>Hb0EBoY;%?VWJ1`?VUTy;;(q>Rb1dQIa9p&V)hAcrRU%4C2M3O%eD(8iLV=?a7 znaG0llyV@fAcVt+lg9EO&M?KBgL9j z|9a5o=n}9HIQ-w7?J6k}txgBMiX6BMugf~^Xev78`#D~_1fG_zOTgp8v2(-riROPn z_%7I@(<}vw``9Nq)$sesMeG(&M%zf3#u{*x`KSntDenaWAKti)xu-^q;X>amtf{T+1ksufx2JVa{U z-s`4~*V^(ZuCIpO>Q|<-2fI0GF9j}59p2n_YE7&^_fA<9$~QB-mg!wL#gXfU>{DlS zurun0!2zyi=_`w`C+r1Rp`$jf=*{ zLL~NIqus?#uCeq^bnmWs!&eg`_sPw?)&g|6Y9zm3o<=$d+YdlnmU@#1n5;0`;dZME zwG!Mg#u^mz>s>4QBxH$~B_$;E^+HzISb5uso;r-=5nRR1mE(1H+`4%X{Kx{@3hpgR z|IfOqsm*MMeWgJ)8nNmO=m;nkm?+F_^1zEDfN9zSf)pw*R(o6)Zf%s*k3tVls?aot zA!vf;0T5vxZ;TFfXre@B{T5m(lC3T=yc9jryv=DSyBS_ zu(z_}>;v6D&6E81ey3M*3VVor$Ab2r3B$esqd%qXrztTd>#WwtUY*4=$Hikw4_O2~ zl;HIV!DiZJVp%%>)KlSQQcZ8A@qLSqOO-9VX=TW)lV9#@GbKdbGj>m8LIfcv7cA16 zaKjX1!f@oIX!&*(mU&!*@=oL>mY;!$4_}bESarC7t3gaHQ{&gYI}hM8EvN^F)R)5u zR+XIKpoIPtwIph(V0)D^0WPS_wFw2iL1F$-^NDO^4D4(uwMv*#?Gs;8vD0!$A!m># zrIvTX&$gc%8#kPpm~97av6qr%f>kTpaCr9dOqgp)u;vi0>L{%17u8YOx(_Q+Qub8K zUt-n@f9QLv6frcSv5Cdgmyzq>NiULKaKRK{K6kbQ%bv_xt0o< z@MU5#aB)h=x-C|7zH>h$LHobL1Tof>Mp_VKujr?>^o)B`&>43mNpE8OGK&_(Xf+;N ze9tI+H%(d`yeI!C(UmJ?%HuuicVd$!`tRRe$|LK2 zStFv-ly}3v^5#=TWu;p{ngiQdv1klyANPR)Oj-zM}Ns8B8XOd*dB!1tkbAV z1cj(ene_Z!VYe(;$|V_JK+^_9>UTpgT_r1Z3C^>@7tDbpXDur!0&~^6bZ66&C>Q+W zlra_dLp#%(9#fua!?`*BlW+q-8?~O#g}g(~W#VHa)gzCfRVCR9nA6$Qb9)S<+Bi=e zNKa0m&eQ6ASNH5bGy(8hMoqL7LH92n1f@RerGZg-lAt7^zJEqiuZeqJ7QTUQoDDdN zW*TFSG?BcjyW6sF$!m-#c;<4<2UeeC}rz5Nhp8cD(tNC0;c3*^Fv5)db!k(6uD4s zMRnK_w)8gqwH0vOe)XI#*%7K6nzm?BK{y^VV3dt;F&GJImxgR3O`GFFrtaqCZ}`xF)qf$;EnEU5 zV}o1r(IA>PmsotqY*KuH6c{zGlha~dE8|t4aMt>Y%`tF+C&|6@LxB@Lp)-64f=pOO zA1r}(2K_7&I)G#qD>>B_0%LkH=f>x6bCPkKp0sU&2 zzS#lDgOEGmT^+rs=15Y$b@jtHCPubw=8qMHVt3SwtF!!YDwb{{gCQLF%ugL=xqkYA zQPJZ-vZ?~)({D^Vm?zRaud?N5p+d^y#)N9^ZyNEW#a{j+1X!NA^L$cl*K$a3=?eG} zz2k2C0DK5DG$d|6@cHyiI`W6=o84`Ozr_Z$;Wen7D3TMzrL@o^B>4IHPXM5hQqE)FW>9-@vl> zT)zhdfQt;`J@FU8W+um%h5qvHbPw+a-fSch@XxfEVowuEvXy`UU`4t~)ArW8oD(jSV#0Rua@3NO{^oW++|F| z4^sBd^`>--6u7LHrnq!NovvJidMnk9G9?7)`Clz#5&aYKvw7kMU(9Vt4xIEE)e(PN z=|fe*>!oOsPAS3%w`jHqgJ#MO*tNj~c(-e4KE%y5gME|%7!lpxsuEQo7g)#4 zaoGx_mc_2Rra#tCHv~-&spfXNHoSPpCoG{QgHyA}v(iR`3rwO*RSJ$Li$Q{FpVXRN z3vzkN78ckRWRX7RX#NoaKkvX*`c{C6z*}2s0^qkLupbV+!0G4(KZH&UTlsx*7$>V> zfEp$rqIbH_YR3<^yagXZ+29=*VA;Y(%~NJa9NW88dIXMTfcVo0)w7th!#{K+%YGc)SS1sSKu}aM2xxjb0}CW1zA{|C%$(u$8cDM3sy!8V zw&h%->1WCc{vND9%#x=a)_wbhsI-s9=S~J{W5UfO>lf`L4gY=z(pz=|hu|ZRCE`N} zSm{lIjbT-&#F%J_RWwRH7@1veM}#>F(0yb(+5{jk8m6Uca+S$m5tHXGKhzu%x_>u) zt~=0w+Pb7Mp$N;Ljs4!Vl6%4xCi6Kqz=LleHBrrxw4enWUCkI>Xwn}+aJ zWQrUOlE3s~$W%fVMy2NYVwQvG`rh2A1@O({?PoTEEnf0NM%++R>;2E$Fr&IR`%s0#??Wt$qv#5GZ)1=zz zx8ICyL8H+6_H#Wi;Wxu3o~8!>1qp@uU_k_WUg1^w6uc#72sIt;IRA;`WmLp>#L zU{;>cXqrHuhA%>9VL6u%r=`R`fM7nMh-NH~vl2r$UDyFFDHWu0G1)ImT6c&M*k<1R2xv-LyAlT22 z7TaCYy34;p=_d}dd5~f}R1O*L8KcnlresmBIuIJR^D9+z>I{8ZpU3}I-t$m!UNmhn z)vVlIm;q$vue9^wTTuoBZ_OE`lm&wva$ftaDDii!RH{-^q;-@RK_VT*&7{*(-6XDfG#<}gz!4eo5-WTD6xTN z^*)0ybKOmThQq6Wa4dV!w%62R%WXM?N4;&*%m?Q~KvIbWKz|>Qv*M3QwxSc58dAc$z>Kt0j*~VLF6jI` z6Y0TRLMPb4A>regU$d}lq^Pe;72lr5$cP3XwC@4~ES23S<~7+8OgEP zcvWyz$&j}D+y&lX#_jFtA})REAzyok8!aEUeB^jsd}|%)0z;aToAmv=8AGhHJJ;F1 zC3f6_S-(m3%jrXv&>#2+1LyT(;Wc$Xw_(F`LYdJQR%&^e=YF_qgel2(Tr?3kh3k=V})#Ksq?Hd#b?HgqrDOPWFdgxK@ly`+r4`xQ| z^%D7Nf8ky_Up|lH&5*t!v=(LqEC7xrd&CJtq0oy_kvE1I9kSEvPgfy4~r zaAAq!fws?tvQRl<2tE!JesNQ11q_|8KRXo|hsVP?u{l^(9m2l;Lw@gvVFT#yIN|w% zlzQX)y>#D1(T396JFZb7M#ypN!Cz*z-`b(=>>*O%|H6W!#x)LgIWJa;WN;_a#5ZDJ zatU=KLk(TYTCV!pGYEm0+jz(~al+Qen6%ablqIFNImbsc9pt6|+`-&RLV9)sK9Jc8&ncUsO8fvo)Ko_mx^$ z3_(enwAx%;OE-8qB)39mJ!1kz#}7FgSj0$RDt0_6!f$ir^dxXXxoBtP_&%A$$zRu-z+!OZHa7+l@SZs(pGLB9RkStFD+^-^ME_O%P*Bomj zNlhv6hH(^OLjHd}u?F#UwAN9%r(Jl5LOcM>U%?5wRH7vi5`qGxLNs*b#uRFDp#zk> zM}1v%O`g*JJH2x_P;r86JIDEoSiMc=Y6OqBMrlS%h~>gg>QJ!J52G^fiMQPm8S*DV zKjEvNm$LcaB~1`b?mOfxr|;*nicu5F`uM(IG{afm%j7q|#1R8GPHAPvCZ*IFa$jMZ zknskRiXYTa)EY4g3L^Ll1i#qcZCx}*u9rSi8yKp34_GBh!+Mo@@tmiPUpIi#NJ8!| zn4KH}2$SB27J0Fux-O4JayMuUPAbUiu{UWcU$8%Jf?q=DGGWd-(~v06+lT0e(a2b( zS@PYt5CKYE{3x_`_-k~jJ#!P3o!EC7O<^qr^%0uE_D#!uUI{I%55K_AN<}Pmxs%Ty zlGOSmzq9rMvy^_E2Uaz>pGmkUFB z%6i(F+dD@-C>i<4EVrmzMD$-2&jInk6JyG@J8Agn3)o(s3AK~(_D3iRfc^UueBSpb zkYk$zBnRVh-m%4ZscDc5c>%{VMNfi}_$}Gx3x0hiQS1+Cglj~@-WC4Y`?``4Rn937 zcpQh6bL+Q7?{fDxi3Y3rH5Ahbe_#B%C5ZiYp+~+xyKeTvJmOLuXa_R;$DkYca9f^0 z!l5|H#`KK>PkPMOg^VykZBlh_MD;#59Msmx>Z}_^7 ze9oF7Rr9cU&;R`LeS}??ZN)UD0>Vm%-FzXB2^ z$`ZLVhrfFL_i%T#OTxej?{>O)Idyq8e47bfWs8;W@HxXp?JyknRoYYc@w1{T_69XIX}l?RH+bqp(@pkCVwmI+VsyiT>fSf4EgUSS1VP0;Tav@vke>@sl`P8AYnaQvsUWs&rx7uA84o*rG12Y#74m8cr%SWtsx{3$`{ zj4YMiXs4GAK7DDp(OU5m^klq}^4-qphp`OHpAV@^8++u3&T~-W?-R!1)<{@QXqOMw zRsa%Lf45K&Yc_To$3*xD0v6}&Pgv%V#rreTSr6?ujUPT_8y%b#F&b&^J}oj7`Vr;6 zJJr_pj$QcTzj zkFldEK|(jaaO*92+F9tObRu@;AXFX{Y?Wc{uOH&S} zB511urBlgxQQ@fJz5~{W?FBR1z8nZ6y6y^Ft&w{VUp56|2Tg4^r<4@T5jQ((Qs48$ zpS&~b&deZ#ymd%0@deN#M!h*)+dVfs*cCm~_jUK~sdV*rczt%beQszll7|Jjp|zRp z974)o!_KX^ol<>_)rX=+-v)!oMuurB$jB*KpfwKwtazIRf)MWP(C@$WLZ>nWksDt_ zfSduXWJlDuy6yRP+7A%UAgLyy@m`H&3*>nf6J9kl(%c4*f31t3(PXzZKJaL)w~$P1 zj7m3=B@H2`QMQ^=9*sV2&)^Sv@#N)ZXv*R&L`_{eXc%{YC4|IUnA>x}tkq4&b)y5# z6QT$c`E)1UFJG|iTeCX3N0#3olcMw&rz9m0-d(-4+eW#K?7vCZr1)1~ukRIe* z8HBWevP5LXul$Hq@6V@hu>I|$ULDVqe~OTAje41uaUhpq(_FaS234eyLMT6s_B){T z0dY(CV(+aZMy*sgsa^wxn80R+?3V^o%=(x&4dhoy4h%BHzoh+Gh^a)Ml_xqyQhoEj z0$elNR>s_pR-j$~N1wmqD94Y^-o^S=aj?#wDO)c5g@w2D61!AM3W3=g_D~mZcwox2TbWjUh{*|x0;~Up<%dzYbbhT^IEd-0@Wc!LY#$dZ-CtNG$?x28moLR!uS968!(!z=^gc{>gk6ls zby;|j6mKhL+qZ}a1yGkO44-gbtESE4OrC*X30+3PU#&_9D<`@>tH`bs-;*(4DC2oWxE`GMg zeWuEyQH3rY7eLhAr2ETXX8Cod+cYN@m( z?oXbHJEK=(_#TwA=5W66ApOSlxo>E~aQLi9$Q!C8+L%~*z?L&l9>QF%cD+hMJ$kTe zDSz{sI=p8}y z*b(W7xV1+ldejTD&s9>8aS*O}Aii$STuo-MgG_vQFAe|vqS83PsjkUjzl0R|kKS>- zpPpjR0{m7;d#)GPpJqM6(8v6OwQzGG`uHOK!x>@(hVc+kO8fmQ3!sUH=G<6Z!Pd_% zkSGZ1HnvEwas|+Tne3%6tm08py-clS?}>mh&wDy3)iIz0wcGu3H>R}{;&ywJ1Ic71 z?ivogH6`j9&Zc?tnO6FGZXkTX1$T@0kLUIV_dLZb0H_JG4c7_-8c^8{r97SUjPNp*2 z8|?uG5ZUZkzp@iNg@Eq6$e3M&Kd-V8nie9GixRdY4h~ zW0ch77`B)n%@soBqDiOLv;8$Ek|dQzC`U+vQ#-9lN1k48=t_>wI3=C#(=_-M1^*w5 zA-NthCT!&|u|SVz?7cOj!oVgnYSFMO9hxQ&{!}FP$O$y2c{Aoz_5OlPseA< z31Z{^{;Kv+)fCX!g+h1vAa>T-I?kxc;CU2Y?bIyyV)1j{=;I*N>}FvnV)3*Sm+zJf z{z^f`&TUFo{X*4cAnn5{2Qw*;`^w;l5nvTjq;m&Fytmi@@Sz z(bxvj1o4$;q1Nf?j_{6WU57!#UM6GPCbNfToBa%NNa5}ExZr2imd>r|?yH`wL8kFs zX5z@Eg#(REuM}XTW$;tv1TReOZ$G1(xABZL3TVcXp&V{2Zn&F~8$>&n`pT<4*xvau z5)Bn}F_Rcsj=~((u+hEZkd)&(;OI0eQ)ns9wRmk=h98i4DvbtCCAO&=U= z)64T{vy$!E2GZzP6%sw13Kfz6MwXEQG4l~BgpgBDPhXI6jJ--=o^(!Af0rZpGwOTfYu)e&)<2pft zN~r_KN{gT>2+C+)aG*mi0q41kKd!AphQ10EWJf$80*B~oF${xc7RpZ*fFUBhspT52 zj}`0KRO=HAdP!)0CfNitmOu_9ycwQ^`I3ZUC(+gKAe1}y znLGo@{hTa?S^v)>f~Q>fBB7>`ED=_S%_GwvrHd%#Q0-doJM7wPw!&=QmK=34j71+2 zL%cfKbeR60*jyAI&c`(Jhe}LZe@Ia>gqB=`m#=GfqUP>$i0RRACa#?A7dX%4*C9>J zu|$pL3D0E%8RURB?YKRp}qu*VEIxTU|qN5$d5@3{Wg4 z@6DF)AJum3eYlwG{)2Wpo+yz|4#kcsSmr8Zt(j^g8~hc%(_~;N-sy{C&T}?5jz@8o z3nV}~Ae$;`$W&$1t|9CJQ1AUN+D6T6JJd=op87w)*UQ%Qg_tg%L*}Dwd2Fp(_r9@P zBt~^fip=TE5kC2c<;l0k?O9IKy3>(Z2Rc=d3NqgKIyeJ?vz#N6-e*uK*`C+H8FqT)D);<8yZdaj%jutb&qDX z{dUTZ+Iuedl&3;M-@Go)yUXji6&6WqHm5>fI=9x3V(E|sH#?kKXdp_Yxkn9u8RzxEX6QvshO zzp>!+brII&f(S(>jsG#ERwmoLD}BgBxX)iqa|?PNsl@HG-kI6YB-K6GF)PWhrrL442m zEEpIHN?-~JbQWaEa3J0oW+ceoF-P`N|4DjeGrwANabGjsjJpDfHS~pZAw1@({cB=t z|Ify|0JQLD%WGISVv~0+|VkXcf><7d}Au!&U*PEAqG(ln&p?h{#An=oFPh zRKearsdp4xNk2|{iSOx6gYNj)$xW{zoh>WiBF$JsDhzz@xLD-ryxd51H)m5NaUPS2 zK8Sp{9X>=+gax;D+#?kPO2l$jQ{Alh=2``iLn=nrt2Fjmus5 zW}}}BJvp+2)pIwBy{?qTraLYl%BJh@5Uw|Khc*^W*MEH+r5|wMW#IwQ0J5$t*vbR_ zIxBu$s*j>iVE{}BU3uJ=->M@HyptZLJo`mF%)>Bg2GNJ@c&z^UwauqiQ8!Ljev5|- zcaPgS6Zn|VeL9E>?M&YviCf$x-5?4KMM`J_6Ppmo#!=uXjf7Lw==+Yh35BLZO=LC6z;ZIbplLIn{Mac*b~P;Xn=E$)xPWSYP(0UZ@=Y8aHJhAyzXa+t_u?nJC ziDp~*+J`EvyRK;C&|Luc+H0x!cSz$pK1WbfzB2A`IPIWO`I%%uCdtFx5xlbg-2(cz z#?DdQ9VPj!oHxFHtsPuAZ)~b^I3)y9hRNkR8E!|tT1>R6L_?IypPTu}9Z+jt3m@Y1 zTpUq0Vq1!0!cR?niI@Yy^P!SdoM2->7oqgWYfPadH}Jqh`%ehuF|u)FX|ae&9%w@y zy%@ zEIEHm=y3-WwAZ&o8FsO8~jd+$2A$DA|d{+>s|P2K~>^vAA7s2zmoYSQL>_R!;f{5--Rc-h>7p ze~4+v-+rEaBhKswI01zp7WcO}40JeVf!N);p<6j|7%`XjYJ!zW$~hhBTo!q*D93q$ zSI-mW6|_isPq=Oh-hLsK)oh9CTDmQuXsInxROb z40de1>K|)uOK|J8V)Zfoyl&wb$TV2B?J6s0qp)L0>CzR%CAY^}MMBOMPJUKg zM5N1=Bg`nqcbC7c!U7b(Aeu^)p8)Uil-n|(j2u%>u6Xfg!>BH3xC<`H#7Nraz|`lv-ZHSX$vf0%SET8n`~Z zoTnvnY}Sr~aELF|EJ_!M#BeGtLMSAE^%5OI|3f-Qz5K1td@{8U$J7lFH}_Rb=#bu9 zS_`t%Iy$cHz*d{Xf%-P7o5@L)IKcU@m0(K$Q^Do? zzH&>g)aNBgxO#>F>9r%~k#T8q57#XGR%85b@D+tPZpHTz9F^XuON-W^_AZJn`dNT* z119kKIPaSdhvqF{nax(A&8Nb4OJZ9@3GV!r zZ`<5v_cAq@v#Qf$GJwNzJ}7rG-}oufQ+Vd!8%S3?Uv?5a!xfKUP?tTlt}$WI5<2|y zR-yyX%V`C75A9s70a7!V;D`|jIfIHN@@vq|sU|#b3AvYz?wG!IG9{Hnw^I(e5>mG; zGni_OaLKEF@SB>9NYJu%*#|G|qbnbX-k=hnl?DKvBPbPE?f<{*&p6Lg z`6va9Vud)*sSi|ILj`WGSBBM0e02Q0ij)shui*T|VXKU@UcO8#S}R6;xCV4W)tyfk zR)z|>GnnF+?VZcb^r1}7#3vr%%c6^8t2;?G(KM1`<-TXkJT>muB8RagElNMyjd6i5 zfHS8t&GGBDQ*W&g&FSldSj$c~wD%rB_sDATF23!8Jj~})Y3=}Pa}U=bT@_MpFJcmDy`ny#SDl2z*rMxq2>6jE_q{uL7BR8R^Hx_w+Rn6-MV+yt{!)$l6PL5BX z9-uvRok&57)kg7Ali3iew#5?WHc(jIxhFhKxju0pN9pe28}qW zY4BaR^g5l}&Jfr0)~u&LIjNtQc@ZtLJ5@=wcszJ{GmEQH$cF?~TD)0ck#<`+PRQ+( zVB(1C3;IObKjJs%%y}&(oPHCMRapAL$+>1-0*XGEaH<)S!S5tXZkeKfzx2k$(jF-L z2}C?sou#8!I(d5kJ4a{L#(u!?vH}%*b0p_Q!j^Njl00-hjqK0-;t*qXq|BDIV zDkgxC?dv#xFduo!8RwR&Xdj^Yj>X$)#q}D5dXZZ7`D?R5?6&nZBs4n-Dq#~Q-1#g4 zt)qCvT>M!M>eIppAm&qxcteowJoQ*Quc+l7^jD^!6UJ)ToG@JYP$KmX#!(&h&Z1Vs zXQ}UxFVG*h7-Va6UO`k~suURjSQtuQ=0|OKt_1?+~$hnrM9-NXv20_FMb(4uAD#kSqie| z8r|+@r0;zjuTg5$UBDHh^cgfiW($jvA4fkk5uDs7=^Ttugx@x_^#=Ul74#<|{Y=Xv zKbImkuZd4VQ}m5b>Tf%1>d@4iIDZeP1CS?o8?<3fgJ?k0;oe3x*EkT(VS+~lpbXVR zSpuBNh1Q=7bS)BU6as6m%lCkgfopRlb~YM7wL(QF!Zns^EXd{5=BK`kd|*wu`4?t6jum7~qPKjm(W26u1 zKV_tlERb*<@juAs{qnw=`#aZQj^K7ZsZ9hG{gG%5l75xju~Oa2LvZ~!$I9KcOoc^@ ztm{L6xsTqzk{C(UOE5zg;Lkk>ucwc4JhTxEdFvi*J*pjAcfwLKUVto^sBZapKUUi5 zO&ij|Mom(8@WbV0artBeb2X1Fo{HKQX}|C?bv4=NR*qX~EHst?puNMN%U~rpUVmVC z?5j`*bqk8Cr*+-SZCnQ{QqHvVWj~nj`(UuHV~TKhx&sdfuxC$Dx#e5yX71!q+wCm< zO26+HR0}eBk(Oek9Amh3b4}%E;ND@0l@-_vDksx)euta2%WAcoOUApXt&(o248cBy zIuA$eSZzJxmduH}{L03!C(~hvjNo$vj_6(BxvLY)(*^F6TDC7kRphZCF%iQdj>9y3 z_Z&NXXI%hv%OtUiPC+>`{9H8STh{pPk!m<8xpYahJxdd0=P7DNc<<2umWyt|;Ww5@ zI%rJ0t2=eB7EpC6&2)a-l50Pg-Bm5oR@pt9Q2DYTqunTl#0&9BCtK zpkUnf(3(;12mP9EpGGA`Cdh!7B!B!Kz%;6KnE z@izDj{4DcZtmoIJ;+}s9hn#D&gpIW3w5PVMjUCSfg>K4bTV04ESl?$uf;@ z)c$CyAei-yUuJ{BQL*apH|aGrg9G@mEp`|(%T>DUXA;C#Ih3Wwv4ew}1@)%}M6m#` zSE_4^78b5*_Lbs$WXp>|T2}R86CKY`gpRoO73I)C@fkie5lQJ<7UlOjy0@jfDXo&x zrM{VCOu`0dK586p*9Z4_r6c9SMNINmEA~oZQ;S2!XTCTu*WTI&v&!d9ZL{v7SgZ=b z1=8+EcPj;jgbL5wegQxWC1xb`fHhe@P z;>(=6<8SavtTJC0%xd`cciZ?o^oxdMh@#Om9E#+h&-xpwieh1~W}V63Ha?>tK-#_) z{qhNP<tS5vic0S@h3fpzSY0?_bEje3f zG?fY}(6SRbNL;zo73&x(*e8SKk+yas;3k&7+cqFw#U`R!N3&nMs4uoX7O?#1?M_+0 z2~RERVIRIgd6HyF<|%-$oBZO1%OF#E7EUEA`2N64?WnJX{8neS)K;V+B9y4SF<}9WNOY;b zJ`Khspc^YV-)71iO9{;-#vPH89S^SoJ@(#=5ADaxzB|swZr#KPkY4zOo*Cc^I2d)e zSRmE0uhoMmSBtw`V5pxtUi*r=TUgE@wLWF!fi^60S+)OpeTF>46dXHx zfL#+zhN?;kl}Rr>>|B~scxMjM(eJG%A_XrL_xdhXlt0C88=U2&pQ^+N6uF=5eL3;* zxma35NFRDS4m>PkpUHER7q#cpuG~3Je9!cN@jfd}y+*0@##X-t8dlX7muzEj!G^yW zNvdfJ$d)c$RQ`Peu%;`z)hXb*cy+7NGkJ055P8I*h_6Z_hIU#@4AoZFDPq)l7qfAB z)fEovq4ZGb+2WH{HvJ)GmT!$-UGb`Px*#w%xfrobUgpnOTGroL`_0WvCg#d&PBj;^ zkX5O3fgl5?Ag=JW-@5Xs9y|V%YbwD4_}TThuR-yJ{;-`8L>liFT!4$srYC#2$h5 zbMzMZ*Z}8EkYl>3E}z>S_N1j*EP zKtq!yxdzAs15bK%!a{t5VE#Re&P;i(-WQ-!-R(a$uR?z zY)OnUjJ;a0l2XjegLXmn1=>+A&2*eGb{dID)0_HSnpJB=oM^*gP{P>Ybz$ePX2mF1 zsk`qqe_5+7Ai7+q$d--=(r}>k8%MK|m6fDzW!__37bW$~f-Lj81HEg5W!8lkLv&oz zJKB%gCB$pMCw9v2QHD<9s82h#^b4kzaDBoeUFDb%7p|q7AGR`W zBYU+PQ8z-B`s}j&06@dO3mDafvTB=MB3MX0)j>9bZM$qoYhO{pjm&A67^Xk9*Kx## z@+p-B*gYUUtNQFx%+&YMJvod($7=8H=o>q(BoP4W(MIrLuT60v-uZ;g(T&YgL9CLW z#6^VzCks)9HxjT{5>iI*|6Gd5((tR&Pjx{uJppy#g%8T=h#Awh>B0g4m*}<&n&n#s zVild(C!9L|t%R*LKon4em|1Dd=*wrHsbM}eY&Te8`rN3UVEZyQHxG9;0kRxwdy?*P zXYt^&PPdrvB8c(!;?8t!kLFZ5H{2zlvw*i%NzYqr;iiA27xk{dLb-XZob%&R;3g#Y}M?$`XvuGWa zl+;iW6Z$;EYCt`Ud4xw^{HQ?p^?!^ebbZQ&zsoozria(|Rc#x8Zax z-a$$lz<`FOFl!RS*RqospZ=s)f79uPWP~0%^L)?*^+U-Vj&K>|+-qVCAIsDX@2VvS z(-AeW6Ty*|TcE(Ofg8WGWE2F2*L*q;`TxQh1&?|_mt06GI%Hb4(@5OXs2ZkdK1zd( zwWRjCeCmc3lSqA>@E)HvDL3_UB-lyptDy}%j*6!hd1z9P@(p9xu919EYbHKH<+#1)K*33{*SXqm`M9MIhMM646ejO+3$XamxNxY^2{E=>R0xkjSJea7Y#!@%FzIi+&u4Q2 zusncx!If75nx1HmXk)xps}_ta91a zMSloTq$idc@qu#^2QK_$#Ea*a1blVRko%DQ^G76G+x!p2_Yyhq%)0lx9(#!5-80P9 zP&&(FTa{Kiw&4|E5Rm&R*p|pXxfcy^xRjJO#a@h*{*iSSRq-1 zC%Y0nU_^yr{&ESC7g+*Sy zbd}NTDoG2X-$TL!OVt8Po#TlmE36h)ue;7_%8|n79&z`E9(+N_LJ9yfFcXtZ7y9Gg zMnX5z<(l(T{f<6*!TGOduii+*`5`L)6L`U9GyZh>a}Ldpy!~oHARtI=^ zeghp%k1hnFAzg9=3a~`&^N)hOA|Hl0%uH+s(aJDCggoDZF#7h~*Z_M7C9C`fdwT%m zZNt5oAfK~N)t0;w+n=u3p9=m$Dv@pG|`nn4GcB@eMjP_BI zlA36_<%{uj^p(nBr)Su5yy4-yo~9p;u!HJ56gZBH#9Sqljh{B}j7e0x;hh(SV1oIw z_gzo%)}6p7Q&MgENdD^tfw2zXb8sm#y{!p;)*ZMc8$LYsd=Elvx00#4F2}yMtePY| z!@o$Mr&yJ|NGO~O!H=J$S;2MGSJ24w8t9@sFJ{4}+HV&1|9z?|ySw*3>DDGs=v(d* z1$itK<5NVP_pZ+rIx`HLSQD%auJhn^+L83|T2BEM)FW-==I0(4V~ugZ3hr8<*@CQG zC91E^sYp6;kQrxUuE*SHOv10F6G9g~dsc3@^5ZoO=U0CX-SIT*6ZO#ioiS9J3a@5x zpfLnA!`NS{JjZ-STb5$x?bz%ORPVP>vO=#7)AISsMziKY+Zp@T0*P>0AMLD(XC}sc zX57`F_z@}N0~#%9qn7g z41vlYY`$P1D0Duld1)>6Qsi<9<(S(4|LB~%D~Qdy@`>fv+H%70$x^VYu3mTEmy5JC z5M|myU$r$&V*Rf9XS)D>`g&k?qg}efEjTz%AbgY3lhoa+N3;hqZIP#jW$t(I! zu$1esesa`LK}Bdg!_wkL4QK5yX?W5Qq~Hgu*loU}EPm=#1HO)~E@P<)UY>1OZ*}+o z2FNU4#2F1`>To*HLG}1Yvpo>OKxIbz(=uIcvgz`r^g!^%2F_f7%MQulWNv#UBx+<6 z$Oys@FgVf;)AgRYp~p^wQyUWa1sZ}AybxOrmh2=PrlHs4qHAJpV*t}JSz|Lxk43V4 zu4;00*F`VyRR!lyuW_QxWuFzR=amK`Zgr9XlT_h`ULa_IdpxF48Cnsoyd4 zRJ&0B7wqj>clVdcz0S!mk1zAc#s3z6znb*Ij!Z+#W%1kaivth6AHDXC2RqbE>r z$Vjhi6h-fFVnuHm^P<06YVq3;`LQ1DlCd+4m7(tlP=Gx8_%RUL^AC@ipa>J|>vDf` zst_SgvoPf8kgEHgJsiRLNuVFWBa-)0wqgi1&?hHr76I6V_2+E3R)g_E{v*C4b@3J} zA)m6+eUj=|JLTNF;tPRmv3_=X4Vfw*nM;3L@D>`Nhf(i&f2 zKfqLoqRV^h@(f4(WYGqrjy56#c30Mz)kx!>pgO`epfCU-VZ~7T&D6^V&ygqyG^p~B z-vauq#;KHoW(nLrc;DGRu^5Jt^!=sU$Ev>7_}oBYg`cbgq<<=i1v_>lDYbstEm0IO z9wjAv4^%!huZ;HfpzW$4GkN1W7EFfBA>Tb7>0f+SC_eHu8nuoAs&s(^*Tw-H1t1J* z^qXM0$OknpJkYD``0YjfUiMl|UIkFlmDa=1Nt8crpP!nq5&j4RiL}_WL`D&SeZo2s zLMT*Wh>}6ru|>=qoMdicIHJ;zCD52%{G`Id*~$qG>hSR0ckBU5PMA$;qSB;s`|+&k zS8Q`nj?`fkBat!7GQ?jo3Cg|Qnrd)M+m1b_Lb`&5jNlq zUZ_gv=!cd2ji;<18;|D%Hm)z{-U|8uar8|fsS(DnTvG?=9Ma4kzj{kb=c-mQjnj?D zXBSVt1xfUIdzENqL?!SgBdT1#XifELGirmWCSe-Sn$W%D`7?i0y$I=hx1 zi_RIIo?|B??K>EJ(k$$dI)|F6V1n?E=@4Q$P~9q09lL$5IiQ=y0jBG)x$0%GqgLrx z`}d`uU9^KQlr~%loeTCzF(MS1UtQ^sOP4bKh}oQ9WJ+w;4mK`VW@~8Qw8;rkVH?LP zV+j4tr-^V^Yv3bUEwFGkat{AeGJ*vMc>BaIdj)JvVF^DS&cr=l0w(ijgYuXgpl-F4p!^UZgr-&33ca7Mk(Pob{-6>u3uc z%x$<`Y&>t01~kiCiPRc)!;!kjZYN@pK_WpMwy?&p_D1xdAVPH`%D7(21n=v?F~+xZ?Vl`WJttL4$I<-TSpY=fbsL{D!u!wF5Y_jGsU5R0=@~QTC>8Ni0AsZURb$U3c(o$~tz1C~jnuC1iI#G%KwCMIZ z#2f$*htwHAaRz>qOSXXpbGR?lfl1cw!X}5a&oRc4cr1(eK7#-hTi=H}T)0vCUr|WR zzxf60HDlE1$Z#Wg{KN-GMKQ<#P?4M4ZpQL@TnnmA zvs*R7gcnNs;Y|vo7G_*DCK8;0{nGTyM~1okfBnK2YXTP=tX4PL_u_<}S74(Kkth#a zB$^VOexa@5XRfEC+GE|Pz;PDBBAr_=0D;9iemWc4R+>+RLq2F{Ca6s}(&Xxc0n1H4Tx?5%@d7bkPvNe|2Z`wnh z_N#K>9j}P5{IM!` zEKGadDF)Hev>?Ua__YpzqV~;kob;$BgEm;Nlxp^jX2uTR@mrmUUR|!?#|v;arJ#Al zx*l^na9i-9dM@od>jq^0acn%A=q|TB3LOsc-eRdDm*_K}aiA03oa!Ttk%j#6ll;lGXhU{SZ|~ z0>nJZ>0~BlmUm#1@`JL+LWPlg)ZC*3w{-yHYl(kP=$N3t!PUoSM}$dU8730ope3ROiZkb^*moBBID zWo>5qVtKhiw>I8S+`c+NlR31dmP*%){jQNAJ04--rO{jKg-$8I{^Gy!XteWRvgH;_$^$QK zKH70o7+%)gbBBqV#%A$fgkElwc}apOtaK0TXA8XEo~yKQ191~z?$b82R{*bA7VydH1T1toJUtd5 zLnQe`yGtEg1n<#rm<@W_6rsL=@$c4%(4w5_m?AWYd6mv{+AJ;0#lB7RRQlis+tg!z zGECqAa_wmBr@xmX&}3wWIkRicMvHeGfiQo&=Dq+ORyK{luvHEYSe>icV%zFwlUr7Y zZw{;7N3QB1$e!^P5*l~?LWE9U0j9+Ktxr^0rtX18J%g&_=uKi5!{{^yXO8s2S##3( za!6C*y33x!ouQ|8(K0RtNh0nttlFku9s?^MX$cF=8Pi9zz&0siY~H=|tI5yblQP(mT&-F7q<(h{si z>M*xRQP$bK(d`bOaB09^tEg`UgE@k*@RlfEaEXmD8y!5yb5GK9@%0IM z_fz0`J{qP@N!S(T^{L}NyZ>9zCNN|iI4aYli!*;ognj(T;bqi@LZp1JXi{fbO#0!= z+ebr=U^dbozLx4^3iDV=%;}a1a@06Gz@FM}%0+1NVYtnfi& zo8s>9;l^IU=7<)Oe3doDAJwk2FyxlBpn!t|1UfaKYJ~6-5wiyOs5r0V;uooCsab5QAXWE z?ylMzNd8`8ww_|{9xcgZQ5Kkgmd zs|LQ??r4#qWaVJs*U40Qx)tYCatoXh;{A^OTiubEdKc5;XQIgiB_6#T26Rb6^ygcM$bLyfgBBtao;2tPmvZ)_E zrdFtf;Z;V%g=G+6h7mq`#6(*`C16tpOiwCR;w~9%xR_1`f_%-Y(yy{|8ifF5t~W2k zbQMS_Y8X9G$kwP=AK_kh?n$_z!=tWN27ppEScI5Dp|7e(Zv5F*l0y3$!Y6%q|KJ1g zkj_z6{nu#z>V%yi7`-kQ-feS7;mEj(>pu*%@F~+?%xP>~0CE)tO2sm4p7&d$*nKB!98_X{c-rL~PTrIky*Qcz~Pe%xo(R)%;tEf_VAl8xe z&gL;H^gr>-D9IpE9~*NUqsW_Mx(*(D=3M~NBo}BH= z&I)HKaJgEMTj@~x$Ha$+*0WwBoD3gW6)%JPhURa_xvyNx7|f%%Pk1XC{X^8{hetWP!9rM`hqG%`CH5M}jx9m1*bbBBOW5AlHx@M~1l~b_e z7BJ^|srJ9z_uDu;;N?&+QI-l%FLZBPIuIE)sN{D*$_v8y9BFO<&CasM^P>%nEM)*w zN{!}}pi~nr0n+g&lSNWQODB2WHP5)B!dpM}`hX3J(*^yr4c9Lj6*rcnhM`I-h{ zDdU~D>+p!8np3*yAr{Op6G}x|fe(WE5a^v;H=~u!2!XQ_2M{B83<^5aQ}ZRUtcfcO z`@s?%*GZPt-LpZW_8AQ|Xo?Vl0H9)%>sBHz3h$Mz9ZQlqC<=WX8bH?Ft7;3=+xAWv zhX;`_zx-r?jDkW03q3OjVi*hgW!W0O13?l!Uky5srHEOc7z zmB?-Hmn$F&+1(TsYb}f#q#T_pY-S>3%ibCs+<_{B5CKNk_UHx1&!0GBeK;*_IJ*0C z$2r;0y~SaVD!sSjF~TnaIXI|GHNd5hq>tY8+B2d`e!nU6)B*3K7kdG+p)H*R%y4r9M;lj;)M9%C%9EVG`Dw%?G_j(w)IueJC?Df?Cd!St-|E*bR4>iZOlsaCq z5VH8t)ZYA;B!b}l=HJ;bLvNpa<)KHN=lt=G!r?i9?sQM@c1@y-KhZL`;B|1k8w=$b z>4q^zyh1jMfwLyuD~0g_2~GOqYerdIM39)OA96g;$L3;lS%&-ljN6gpUnUx^&^R5C6zKQ9ymS6?rKCUuZRp->c?mkmwdEpjd-zuL|Ll8SNbnDNxtFcigycqw3;K{d>!r+<1H)Z4X804n3 z*fM;tM5X*HaPU5*_d_P!U%XVJCd1-5-@b^_%Nb^OL;Oms1XoE;A8b9-LhVLuy^lrO z`-yz(gjI3gQqkPPur|hd1el?s?y6std+bQ-wi532E zAj4;$=NfJThF^l&&YWt_P-Ve5r*CF`O4vXWrwKHpmD-Mw!>x1Xo0p$$rF`ax;jyCw zNNoL2(tx(35TSXlZ8Cme#i1X{NAzh2?i-cHpCqk>xQ(jt<+AB$X7R0`2I_541nb<6 zpp+C1a{f$`1$DLv5TMjxlqR0P{(B; z0#fM%lr*t}JCyosiQWboj*yrGI#t2Wy=Q6cIF?veq(vL*pavacIft$ZByfjiKKuX; ze0!hb{L0%LYB;j`7|s$6-Lc)Y;zA(fT+St86GclHKR|?rA311<~Rqi zKW9D-Bx%Q0zt)Wxvv=x&w7$U!o4vwELhTQe4yCM^>kA=WDK;5Tjv)&Q>bML)vOTVt=4pd~ZgK$oU{w0WnaL`$-nZq7QV*eYogvg} zC2)as)!~-xh7_08x%dhz=Mf&A*8(TFiQ+`#jR4)U`NG1yfcn81h^f+@8uC>sX)mfX3Ef15!Leb%Y#tHl7K4$ z7qT2yWA%wTl2pO9+FJlXXq^G09r|-!DE|iLRR=n{qzlW0{IsbjNyw;BN1@exokCbr z@ib~-^gqdMfLO(B>GbD|g^=^gxgJ445U#UM4OJts(Ap6qXy+*k;#E2lIWoHMC!5Xl zN1+3M=%6E;vfbe{_XY7#4H@V0bQG`}2TP5-hy6Y^;Zg?ZIld9O1|+&xwc#1R%NjCkaX=E6DBXGlKyCKLEhV@!o^N zHxzwKVM!up(`&WLmov>gej|+g&$Jh($9v6vpk^#Z_IBT%QV~wL=vDSPY9@rL&Oea~ z7XJXa>I-l18nLV!Fkyd;IFb^&_K$|G!JO0Kq<{a=s0eqsZn=9biy$R%UnfsQv2bor zE9)aGj6t0TGQAl~7T=E+ATib}7g%NaB~J`heQ;eWi86f_$*c!Pwrw@8hm4N(zCeVL z(*P{r1Gr2U0QtQez!dTp!0GYUsZWXh<Zy#vIe-=2qv zu)aY%K6*0F^LcE}z`P)L83aVztbM-YVsQ4v_|>6s#H0H)wGlNJ2u?kKY1?)xf0NY^ zy?PN=s+lqtD$LwXYc|N^9?sh11M9mx)}i1&=2zwn`abA1hY$(@rQJriaMJM1p74$G z)IMxE1^M5vYRj}LyJ`l;^?rk45YE>`#uZa&hD3BZ+dmj}n_Q1x`JYejnNWS83e z*V@vlN#P=8jAZw0<=AGbx&c~}6TqJ#_Re&wo10zyU)q(&;<_XkpSf7=ZW7sV-N&~7 zxbPgh7xMnp=;@3WJ4xUt-;MWmgFo2^XlU(UZgLAREbzz;3W zIm1a^nt@xeKxMsFep*?HN3{15y8{I$)T63HL4zF~{0!khUCkL!VQtJBWP5WJ(+-1~ z%To05u9x&mILt5|?VPkvy%+84f4u9@Kffq01CHn$$Al#UQq%xb=h>)8JNoqB5DPkG z>KS`^h21A8Kv%I2nUZ(`;?ZQLSN*MM>>))>D&>}#TZe+mZrB(dZCO3&F<#YDjg9e4 zguanHl=szKMKaRtipBu<8B?Q3L~5?*AziM*K0{3}5(i%|KCp;XNK8Wf6z;Up+*t{X zmx0LEYYuWJ)&luuCg%iuk~uw2!O+}YWOuTBU}%Gu?4x&&pGnMP8ssBC{?p>(>-E%U zM$)$+*>xnOa9zK2N~kP-L#jZfDSd`nMSDT(DOEdsjy7-?I7hMM&%(} z1mKv4nlSq5vLT)BP`B+CT?44+8bI~YJ(MSM!e{JcM%W3Z`W?nm^OF9U zb>gjsH3k}gp-8}YmEdyHj8q>uQ=6UgkIo837`(!25zj53$)T^K_&WZoMeFPr`$-N# zlNDOv>Q+xPyIhPYHA%)UhD5%v%M>58$jh>ZSJX94f-d?ukQK(372sgYm}I#wfd~?cW7&7 z^_ZGO9}#w$bsH7HD6xN_(UK3x%g@=L!I*gL^i1yj!P)yA@Q|~0k`=j}*{7D92?e-A z_*gsBiKeA7<(uHDxY*~potO~i9GG119s%}hjL8j%e%0-V4o~Ce(TiuAqVV}}`ZEBo zvb2jPUc>4DrAZ)E!G+2Cea9Q3bPr-V0dia*Rt3&hC-O=W3=mfQ{~eQ@PHLjGo|#N= z7I<7_5@cIbYOM&H5Y#3(%yC*u1N808NUf3NI&V+(eT$B}nQ>LD;teDbaA_V=56oaW zisnRhYTHkG zHPg))WxHnW7Y?6}2YB6Mzf4)|$<-C^f#Q1qi#baoS>Cqp?m{pu+zPDVlkM(LFYko~ zlP{_x6-61Ztb@GznC?g_?AEx37DG0WFZunj8 z-xv3=x-{8B;-fxfOk*g>E4AHwM4d5pKtJul2pr^%k^`kw@?u;;V3m?0(g1N`rjQkT zOWE*e?G2EcYSOZ`?n4BYV~vzgydz9g09T#>-txx3B$`!{7N;srJVC9*poqWp(_O#i z7N>GdfrlTFs<#MzsyyWpZY(CU-dfK7Id8@;p`n={C}&uqlGC&S@nc@D!ZgS{v6AIN zOelP!bul?0894{1_WqkXNbFvQ`E#Ue>(YSs&;3)|N~xNj$W>WR7%Q3*2pU&st5n72 zN`9VWav+RX!Iuvuz66uZ3Iwj!?a>$Qd3T!$E7O79yY#Cx>Z#NaOuh$kN9h5xi6hXe z>-71rOXdJg75947Kvj`Y)&dojnT@;0Ogm1h-;=)Ehk!6Z4bBp@9bHRpaxoeS#UqTb zUD6FH#(G&DLPsnqwD+ix=dp$1>Vz2dxc-4UE-BkWd}(cN(WS-%-O`VoG*NE8xBC&* zNS)Ns`NIJVnYNKj76_!XnXbQw?RA`RYUGd>?3v8xs$A`}jK4^x1Tr-*cl#^dN&TxQ zc@SE9M>w*+?PC_Gv=e%OWa+)p1O71bM;@6aBgF(vtL_vYz<${YGzMcM0n{a|X?NoD zAsi1|Cm!^qDFQMe;C%p#enmb~CIL4&*47LEE!q2dg}>E5`htLju!cz%aj_Dig~Thj zNRNVu?64nlsR!g;9~HDxy*M^S1uT?kPS)g(M(S!xt?h}>&^faO#m8z1C6yG}l!0G1 zRH?7wQ*bm*bM9%DSqaF;=JHCiX@#N}iXFH$x;&vaLA~= z=s=7J)PAIQetgL{{}OGQ!1p-}F4&vvQO&>M&M8bbr4Z*?)_ji08^TGSoi9|*w$@yc z!P>1RN3)sNPXaVf;Ceu_R^C*>;cbI%LxHQIeC{Vt4D&3?>zFzNqDD4f_a%;Eju4*X zxyKrHoU;;8SL$eaI7=I&#S-#$rwvYZ-tLWJMBOW1b_x%#BZ{)E8TndLGLXU442#xd znBAmi&Z9GCkTA=pS`N%(joaTj89mHo?0101HITuYc4p|?V}9BUNyPY@Sw+eK(|G1W zA-AXPl0C>LWCIK?6*$Rb#&E9O{P-UOyUf<@zlEun18MYTBR!K9hw@f;peha7!I)W+ z_gGR{6RHzDzuc`P-WLxg4d9~e^ubTHs9#Ntw-*CKg61q50SoGo9@%Z{8>o`HX=X*vPCG|4j8 zY`iv4lI>(&jsaMDdC3Ky^qw{_$L2^dj@YnCuZ)Lj~V0PsB%;;8|MW! z)qWhfX3F4D*_-sLOQ&eG3?b0TzC$Gc(;p?n$j~*Rro=89>nC8wLz~!WqkEiyGrF7#=p(lWt?sW; zP8(L|lJB{md;-O{X)tg;sy|^J9{Uza@SE!Bp8ia)bXsDQ5hec^ZldHg7sY=YQ>r=} z+=N<~9UbkI(>5{je#fAep{AX5tyX}@S5%)r+C7Wxv(|gBI$z0@#>$!ImR;IyH7NM6 zEF7P^#U`|bO-FHZP0(nJlyXDK>We~a262}H^U0p_6}|!jnRX)FL<2B6vUL-zVS8bi zGW@YAXU0T+)j~g^4kx%OtLJ7jn&1p1MgUszo}HDM6FaDNsWDa|$cx9A`cjA2h|WeK z&+RW(B(R|)!|+zaC)H$Tt8L=!)W@k^m(EY=d?|*b#nkWUQXRc~2u=l{h3F>j&k*=$lSc0k5^-_Y9Dp!-ma>KuCZ*~zWgWJBC z9|yxg9(zc#vVU4T@)7j-2>ljQ$sGQ%(|qko_t>rJ#@s^F?wwFr)!L7d5*|*-&j;Y$ zfXLk0aGqm!S_g;FzKWMOS$$=O^`Aa{uVq<1I7HWe&#|FxeoU(w@^VWS>~}f&qm2*3 z{4J!2%lMD+(%N+hl1EpR+_|hwjZyF}$mtrw47t)ADQoI~xw?MiscukWfXTtuw26Bv ztd=U5S{u%d+?B1{OJU9=dYvg>s~#QDk9YHVAk%G=1v`rB1W_%Ecx{jEo}8z8u+e82 zn;k!2NlowN2j{4xloDsG??lDfWr2BT*-VpS^(!7FAbo7N1-Y>Vb<5`rvK)&QK<88on1%nv?|~skIZxxyx|l_tZqPZcaYaA+k$b2zik9FO4lP{Sxu7 zk|VlqsmA`RGM)}aI{u@*d54>2%m+J`Gqo-JnC&D#(>}CkIeUWL0f+;4S7!1I0XQI} z5|25oDoWAiW3?e88O)C0s=+=*_tM@oSfamAOI0apN>Pgc>oCz|nbTA~2dPq2{HUU? z>PE*)pX^i^)G6cDf__e8_lP36Rrz0VIk(;D<>S)9F3ap?Mz9`~B03VKcRUhpB&fnP6E%?qo!>zW~Wv7=`$NmSL!fT}l-Pe?)>%@k3U=Ag% zE2_sFV``8f(8DK;`J@^KRhjB>T&1FH?xfpYp}-zHSzVjm4q!^Vz&rGd`BiGFlBW5Q zy*zdqmr^In7oe$^!LXn=U~pEkVUWEE#48Gf=##(3N~3~<{MLjC&bvv7k_EXlovbOB z_>yKgE}2@|wo5pIT^Q=w<>y2ovJD+Ha9}?7+Ei8%k$1m9W2-{# zj986`&Im>1BT9#k=ZcWMw4}$wf(?+VUHC(%WYnj!cFB_T4$0gVL0P@Y6-hT{Kg<}t zto-49vI32YW}H`e!ddspTyq2&m_g4VBuemZX?*lRM3Lhp43So!cmYjn1B1TqD5psv z!2IFVE4|Lq83Q6!88UF^3xzRg{VhORNE9hLB2D4DLYQrYs}v&Ns_m7_?O}|O?Cbv< zUsT2wQM`1)f0+XRpd107zM9w9hs{Hc7l)a zq>KKasRjwHr@GSL?(z-MC-R8!x;Uu1R+gTId816Fj*{oM>mhcz0nUKzTC)y za=4TL%nIVc_v|@)vpB?*EYgm!T;sJmdbxGJ+~eVFVM#@SSvROwqRNFv>Qi&N_1!|C zW%koeSNS%a!TU0=KpABmxGB2~KTOmc7O}uVkx(e!@h#wKuLL#-pbf zok+y7irO&byn%V@2^N$FI*bpfoZy`P%=vo1%!G}u2))ThaQe(q)$D=r*#RD>Cs5vt zJu}_?urI)It1}9CV*opV&x1ia%K+l`tzNHvDP<-U{ip%%7+5Ch(4X;RVXf1?8YYCA zhFen;IPrp+^8(v1MVp4dC9G_#_;^Wun&C_n(=|-UBpXtQ?bs9#fz)+ju3;^-B~zO@ zY?}Nbn<4cHDM4{kKqKD*=`#g?Cb@;C8ZTL7M$c)oZFv+_PgNraQQgUaE}Z_kU+d z?niaSLNgI!-6(8{(x%_kQ7b4D{`1zUtNb^63*)2Y-HJB`&Fyo<@PHAySJy+R{H07R zw`eBTf_2;13`6Zcn~Q$dH)1(pZ}p>;BR%eGoN*6u_EldunA!GJ`Y-tff%BS3ddVm? zfbl^SbKkMDDyU#?*ge#ga1;vWTHD2 z+kh&yAvRCPuCGXDt^`0m=yJy{Go?xd7^W1pB!(~djZFq>{>sv7gz>jXIs?;)erS4L87CVnqd~OKTURs%)zKmiErQ#Ry50-L*+4Slz{mX`Hul8>2d>sQCLVWx- zGQ8j;cw(5t??UaRTWH5-1Mn2)YwVf=gBqnSOoeOXWC@ z+_|G2;O^IZlysPD?LpJ?nn=p1$8|W1N zAgrpQdSr;PT4;NvQmX?uT^?7m#nxhM(v4V|h4C)+V0(;?FKtBv^)?lk+!|#2Gnv3S z)>O%~Yo?IQtQ*LO-is%&B;qyf!f(oF@{ospuTL zeA>!Yc?Qq{v~5`LtvK^%1b~C1RZ$&)C;x6K^2lTFMY$+h>+WC~e*>A1ju`e>T2lw$ z`fqIbXF;{-d3!i(4%oZh)P``On)O$GJ;_d@fc1Fa)Pn13d7`+S)Fu@*X@W6A>qN z6qzf#r1UJSY}c)F`IaVh0GVGyTJmydPAm=d?|}L_C#S`p&3<}{I-jp-YA?eQj=rd? z&P$i0_4F{@vOJv_4Y4IfR zt!g{i#TM7pv8l^7CJ{q&m_{hQP*w7~6!vaS-Bj28%J=iVk=nkJcTmnewysT)y?M-dq> z3E-O~vrm0<`pRXo{6Q~l{w=e-9wbm*_JP=S6>(5DX?A71VI3uBfumI|K&M}6dF>>& z%JgIbTH}*3ljCipKAp2xLQN}zwCgJRJwZ4}|0V&}XQxWZF$)|jBKe|!Gg~5@3w<7H zBV_grYsK`S#w2-yjlP(H02yi_Vl4ORuJ@BzYv@7ja^|kYjS3>H!JR&I z_7EGuLz=y*Y9*|}_>80Q@4*0J2|yebArAMLt4SM0<6HFeG=fyixzkdSplVP#&-H4ADR z3=Tx8STUUbHtyd3|Jvw5KW}#S`}E#-+CJ$4I9q!!2#^b)iBhn4qBPcEw5BP4G7zHm zYejf*q2~%$E>yzl_~j8R^GBoXF=V2fVDJ$Ws+`rkFHe5lePAD&m@K_m^bQ_foc>d&zcYe+OoHsT=?6E7nz#_BIlFvydl4h0? z-f5ZaR%M*MUoML=uwlroA;MhD*#=};VV=A{$x7;y6hv+a2xz<)AewxDitdm%TUqUQ z8jHN1Q!&Vq{CYH3DhewX=pug#g1bJuj1#ff_dYZuU$_E6ba9R%;h-yNRc zX!{;|aJsV57$hX8Xs3j|_F1U2@vc7UaOp`6vjcWGR&c&ouN@fTuYiw;q6|4T7xrPu zc6e17dGJ-}g)y1+b-oP;H9=2)62XJK#s(06TYi&2^HbTbV8se|6HlN0$!%4rT^zkh zq*6wA2Hirvc|qvhCXzt?bmvdq8IZpr%q!8e`FOleS2>0sE6vc%pazr1MXPHU06b>y zJe3z8l|}J01DRq{&*NY_Qwiz3Tm(E=;^Uth?|Q9GwSk@?SMf3aVaFL4*xbe1bT$Vf z(YehDo}^@lq1W5tThtRf2NYa+g%dSY^LD^JrjG|6&rEMpZ-LJT!^%SaLw=N1Ag94l zSr6x_Ee{Dpi^oQ9G!SsLO<&6$j+90R$J5|?vsXV#ejE`F75$}IQ;Q@$F1EbwSM#L& z`|bzZe(Hv)6H0=xn{^t-qObt4ePse6oO^8&*cHhz8&s#IBZp1(ag&x(8U8?g2>f1_ z@P7y7_4yt(Vi;ld7kZ*V=MEuP#JU@&(?Yy$KLz|@mUB?_u(!VClb0ozk*R>x z8o95K7u#Bf--#p*xN!uC@F=LR|-;WbDEr8=4D8{}iCA(dxoWN|Jhccx4A-VE$!ny#V=qjDZURvO z#;e#*32k|q=Mt~65nbgBVZuQHd<-uLz)^90TFf^@8)M(9VN&;#NRPTOOEWSr$yBUD#qhI< z&h@aD-ZDl+dYQ_@9jHe%a%pJ;NZ+KAgzOWB5z7R`6kB(^Ry0?Qpyf3;!?QN82uqyH zDq^c3k4UYnv7xzuFZt4}B3A+)=Pdo_k%afI9Z>dJnW_WAJk^up^>h={W`% zPupEH@hb{!DC&DH3B>vR>Ek9BH^JVIChIAh|;}vwiZpC|AN# zAwAzO??3?ci*3HRObOLRxp4ZirWbIF;_xMYDd5N6XS^)p7Va*yFm-mr;^-&4lBLxY zs`y2tqJ(%*^m}(5FV7TC33h#%P`q|NsaC&gT%7yXg5;C>RNc%875`D0fcCPRlHG>X z;A91>sc%nz>gBq+lc?qgHq1sF6w8UeDEGaude9@+V<)aX(yW?#Yy5ABj4-y{B;lG~BR<_k~S3{Ee3s+-c^jsQQ7hKY8OuHV68J8@BOg172sfdw*LGv-9eXL zkH4O~8#bnjZf~id1{an~usYuf*0>$heP+FLzHpu>Fg!6JWez{n{=z~#E)HRPnell2 z;_{cD2fVC|H4Va(ol+jUQ+klSxNszta_IUeMyGf|A%965lK#yMy&@#Qy_5N05(c_AWjd_ z+xW1@G%L=79zm)?U3pZc+6<7NZkW7bLN=qw-w(^u8YJ;{g*x%-GZB}tzkj-jW5lt` zsm(Wy6%3DBh5jS^mAP{9DS(OZhVW&D&nL{SO5*s|Ui2jHfh6d{X2a*7$pq9AAFOI9 zlx#hBthiOH{N^n#SMEy9?Z~-$#UaX3^>kFQrcA;OsJRoC2}f@YpJ#H>Lo(9=4JFHF z)PG(B8O%PafN9cKfF!FSy{it|To~gcnWj{*L2B-Po7r$W9DU~{pGULj4hT;Io!ZY> z&U#~9`n9tS}vZP-4p!r9=)9E zakF@yKYoI1RDA{~F|gM{X^a#25fz1%5D>tD|e%9PCHoar|+>7Ka((!UjVTu zNCdnRr6NIfCty|{nW_vQ3rMU2{C)0 z5F9_PQImTfiMG+o31(;NG#B3FJs$2i&-nyBatJZPc3OLy6cR+-4Vec6BSMG%W1&cs z*+>$kIVQ{!3QIyIpkUA0X`TPpL!L%VSVfomGC%5-u=;7{QKkBZcvd=wV22Z6>-V3@ z?02!9cCn)$xwxHqB1UYM+zP0ssw5=6c>+|VDbg;WgSxuSq%CWfsgR9Q!F>|AqZxcW*8`uE9!|QZ<4RB{D8V`J1dz%){Af$eC|) zy{i7erA7HNXNS5F$|Of`i+fx(qO|WcxAGV{c7kDD?!#ry6Lqu!x$niv5?QfQ2=HBi z2@E?!*h8Tb&7%|XCCx^6SO(%6`_gURF;074N9rhqO%O;DB1y|zju~_UX^PZG zk2b{F6P-l#&Ue$abA#P`k(XAwBRdTsGYC0X3;&>gaDjE5barLs9RbV5ACP{e85V!x zebZg8iL?x;vKcPrl6e|zy0ms|E7-?@@*0rLP{%P-NE*>gWoJ%^!LVZ=Qf-SSFySb} z)1jYYG6!Gu{Nv4{@CA<%&R~DDO8)tcjM=d(?1a4~Va`J_4{}Yms!1JSQa0`*z=}^Mw~;J`7TM*BzActL&hi#(hn#jJ=v&jNirsLAt=v%v6lKTY*G zy%&g7t{+5@m(t@^>J2qBN`(Yfx^u__q90&Y7n57MbLp@UqkYLOK6SbWmz*VXVO76{ zW;Mr3&|B}eE_3&LSCdBV7Ezm!vhmEnxa3njY=`^a5MkLxhjCXn^R;1h&V&$;vg`q0 zjT#ai-TgaOnXwuxIyf3VTwL0aQ769d)0Lyr|C8}+1I_H26{Pz#jC3oK{eL{(S#0lH z4%YNey398A%yfz@JL`dtA;c(0Qs#Yzwqhxs!;E{pN^e`n*z1+(; zP8jaj>KX>}jR_d`E1+w=iN3v;#Naydl<|?A0E!!ktD4+UC>_Bi#jX4|+P;VTlF^L{WmRE&w9Kt%9_xGP)_AE zyU<)gq(E^_gm<_q{{?1(y7Eoo%opNVoh`#mp||6ef@x~g_y~9Gyt2A1H3%;0!q0>S zlh&tQ*4`hYglRuW6N7HE=`txr+g%b)D0o=UOQne0#R)KZvU%6v2O3;;*xA(!Z&;*? z2`0gIJUeHq9ec=ya#=H>Lk)E5#hWq^eiyv)?G9@V3s8I7* z9H@MgHxOq(mL)oPqBHNF<)QXn+yCHT+xo>LMWpp8;a*CKt$5m4z9q1ICJ}R3w%(n? z!Wp4uUFs}F0RB!JH_LY!7mov9tYs|5@5e(FlHgfF`~ee_d!7rrv*~Id;R+@Ihrsx8 z=hu$f6f2B?h>o;v5Ni7sfe+YNmGgR5T_QqivoU^e-`1S;86apKy5azA9HN+r=<2)P z#&H$)P@syfKgJ0qrN8+dlrWFnXca|m?Z?g0zdF#W8%eho6lMmEF)zi;w$I2c+Cbs9t0Ah7N;y#k1xK?Oz7#% z0RZkiRRBWL?LdwcV3=2cL|KmNt?cRy(Q_*VK8*FNV#G5jzrPizYD#9-E^jWS&%zuT zRIHupu2e`)mbrfk5mqheIcx!BxYz6Rr_D7lJ&*XjX4^%VFr_d~)kaiAbtFvsmV68 zEAI48Vzarg*_BG<$oOMHPO&kT*yg4>^azhnJbek3LPs7@LPTzb>iFMxvFGolx6!@k zYIpmUcbMi)Ej+UmjA1h4_yxfek#LA&0>~NtE@S`M(yLY2a#~|1h5<=ucx+Qym|$$v zQbZ2>)^@eb*&?YXbTTn}gZ5ionao-r;bSE7y2Ra6@@tH1JeACReA`)0;O*|G#hw9| zVGhy+FyRQ>KLMYikhbj7Rsd!{Sr!~XV&ZFZDW?o2kN6hHV~rKtwdc*6N}a+KdOIX} z5E)y(YVNuWo9t1Qu_!WB_sm@e6D-t{53rQ1iI%;pJhG=>>M%`yT3Q>`#OV&NvNDuH zL;Er6;K%xxc&u0+v(@_8fAL| z#wi=veK(7YG1ZOcnl~v8jJ=1ZROYKf#PA13?$iyGE2%mI^OJ~u){QSB7A9lC6*KRH z;zjrNDIiXX3$=%t|D&zB?n=FCZ^P{!6Y+DHpQbbPWQ2;nWzUT45O;3xR>#ZKBz3G63crHmsn> zSr*_Uy_d|WZ10SPUE$Y_X!svmp>2X6#vY00G%Sm`w=hQq;j-$*$veK{XN{lU)jKxp zX)Zgai5_;%4BEv0v^RT~FYmgf*Vv=QApr5)>1xkB=EqsehuZ^5vMY-&%o}w`3c0PsJddie%W$tuUX4 z({{Yz!9Be?jAW8^Le8MXfnZD^==Dath9!mTR@Uuad>oOHRZRbwb6-pr6(<8=#O}Cb z>OSsvybhog`{NtUwW{QsWQ2Iyz1vV%1HyDJ(uNf6fYc(Q@dh`d;hS?O+DgmE!X?G9 z$Hr)gCT``BHtD+ipUCug0{U1J!^)DLKnJ2oZ>f~A;7~qvnC;cNx|Z`Up+sm=0TaU} zEG(S_!T-Ye;224k&R++hACIE+kIgR)xd;9o3l%D;!O5$)CLuFsD<_Nxrk!tu8F{O? z>j7iU9ko2dK(#^Ob;n~-RLdp)x}Vx*THjo1*J(NPUueE3=E0-hT(au+A6vFnreIT|w$K-qOnc39N#6l*UjF+R^#*_clM&mG#-|FZPfFLktMB(bhy1=3`vwF;KH<{r z`UzObS|ec<_|pFZ+2pQ|KvnYt89f3}Uj|cReW9t!AEWUm1j+;FSnB?LOrc_hh_GnO4;4hge>23GnYTJ@nIBF(c zq=D=|Mpl0gaZ$hhf*c?dA_(odLi|+S;xfC+AItC1B2eQ0X9YoNQm1&$L#imy0>4&a_;lX;TPhvxk5GjZ<|++yw&e zFnLvQ0ngza<%B0YZsFSn=!@)O4sZo-5R@OcpA`NKS(;ji{z z^#(i93Mi2~4uGS?cBdQCxAgqR`4mSh;+ZYk1SeZRd0IjP2J61h0^+;u59ks<-a&qK z%awOZZ_u`tDsoa1kvD{V z!QqNXSPZNKlO^X_Q-0UuiPC$PERG52?{)1DMuyduJ%h}r3@$c~Ps27<+$#>=n+^b6;KlS;*ioNd4!Hhc8AATcfcMs9y`zP4}(+dEG?*W z=`aMCk~|6=mFGlCScwV$b1`=}*9#!+po7o&fhO#4J*rt0_1vic&u^d&n*obTeCj++ zh4rZLy)aXAGDNR>RgAFz7&Pb zK3i2jV`B_~l-ot4!o(irYNXwJB;uj|?rF_=QVy58C^r_!M)AHyRz~LJG94Td(ad1ws3ylUXrOZv?wum8wO>k|v|8cw1{3&Auoo$gwPl@8=02I4vFcNp{EX|<6JGa`h(1jjS6N6l?*ZuUzDC2szo5gQP-J?X&5^2u3bH0hlDsAv?!kz4$T#L zQpslofMx7!|E3_*7JNoXn-t{$wrd4@t9bB%R<-}$#@w#}xT8Lqs`6CHY^JOix$_-$ z?26Cu$?=mEGMROC%pe!>IWp&7uPW_xpsVd(m#oT{7JXsp4zp(zvn%HpNOO|n)dlZD zH^6bK8}0g6awA%+9M`9Guotvx^&wsvy1jvBEd(D9WC<~3A64EkrM&)uJ)$|07n$2-kb_CDTO-z6pBLM4x?qMcaJ{q6ZToV3E;1De($zp zX54WO88`rw>{bPncI?IZfT2x373eu}SNLa$YghdG9NWusEWZq(I@;Q=pW=FZF|-i>HqQUJBo%&@Rtnpj@qOGpLrH@5kQ*QQwCI2K ziP|nF57O*3cumm$^puKU3+!8L^N1^oUwM&haA>ez35~^ffp={%&PSF6JWGLQO{WGb zR>yf?QjqjA;8S{{Yh~D+x9Iu%Tp8E{Xf2+10=R<%p68`9Z;d>L-O0Ik1s<_?PMfib z4;dFm+Zel#l%V)X&QZXW%{IWdoKU+1-Ia<;@G^hy{h)e-&R6DOK>l#~*ABsL?CKnF z={wtGWfE&gwDRKs_&R=z84JbHzOHODC+{&gs5LQtnZX)NLvVY=kBJ#e@0&2sGH*fNrG$7NLv{-0O28fhIxqs!%$PzslZ?f`-+pE6|zXp9}WQj zKLEgHjmdrluW9t?n`Zz=HAiLQUufa-h>S|D;!wiN3HR~|PSNBbD8}tkD1lNOu5^~w zDA@`67?S>O!0Pp*;_%TM>m6q?BO}}DOEs}S^F@&SUqy-`lTS9qC*ZEa>&P_)P5N+p z>A&&Iir|mr93x`wfY=FK*3o z-SBv9IMV!%Y2hcq+e|UEQ@30!pYy_XyKzoxPx#@un>d;Jv17KROd`H) z#FLmAXWmey*+G7KTw`@`C@JAQ^27j&`+P1iY>9UXswmP|^?NaNdex&jq43P0Vma)S z<6rPwzt_fTP{!ZE9+4E(*Nq}6jQUV|uN>e%DlXGs(>ErTU3o-_P#?p-agO)l=iMFe z1G3_#_|X=-O;nGu_~IKQ48?AJ7ER7_XwQ-u@7Ok`s(U?8SYo+w)cOXiz>5IP?S5a= z`wT1Wqh?*COE1#Wi8C6{YOC{f?C+E8uZP@zKQo|7`pH}AGY48p#2wzj9N^11xZDs0 zEURc2o-d#>XV1t+e>6#HS@BO`pOEE$je6Z1H63o@5d^hb33H`aRh3a8d_ z+N~9KdU)+%%ax;2Ox*mz7Z{b{8*)OB{x5JTpzdJzUhq0pG8%75G~zoMUz8GvNb1%9 zR3|3K%ZPEbnTuXWotDfi2?E0>m;F?(o?C)mpeNt;ATd(yCUy znE42Q%0S2#EB@|?S)T#}o0gWkU zaWT}ga^il?zp@XIyeW~9S-Vi-eh8*1qFgL6C4jrQ2e1Ex+E$!MEE@xngX%HVwER{w ztP6xqqDH&)>uZAV=pG5(*5uI2UHd(~DH7?8p)Ch(k%UY;qSR7?n;vebB?)7#XE9tL z-w1r>Sow6~+dvhL%m{OF!~XXH-XoB!qH<{F&-=$0m;wRL^pKCq&^tS>Qd_o>7frSQr zws-v!>AS=;{~6wDwn+EUR>4=zf9~oD6LPS2njjqk&;SV~Y}#>v{6<<)5iwmJhLn+h z$MM12fo!DB>AqiVLFA5e$4RH!AyVj<5ApLNoS2bMyuzxx1+oRxLUIgoiX5CIL)PaON@A9 zE~gf^flAW@!0n4Bh{kJk_j;2j(XDdr#iBtY%2~*mg5eSe$zur%D=hpA{Zv*a5tF{w z%D_Vq+wxuMX_*^u52f8m;*dYNK++hJTyN;L9eLFXV0ZKJNcfD)yc=4V>dq^^9-Z(+ zG%VeFlxFttG{DX_lQB7QxyJuHOOA0YKH`jTqX3m+dCaF~?xz--;vLS6kH z41X4_*o%yBuxFr_zb_z^Cf#o%F`@YIEvrudCsQ+S2%{m&I=eoaR`b7F^0gRymZ1eA^twiY-S4;iF~){CT*UQ8lF<3r#t@Orj=&^bJep_@AdHx4^nN zZ}p3&+(2rO0+Zu}U9IeW>RBBzZ-*90$}o;K(nR6{U4US1Pb79fS%u92SH>zi7h zk=cn86$#RH5udmzIzhDPOANb3WP5$pR+OchIZ=Akw+xWUQ{?#{oM|vP>mSn^xT&xs z(jVv^Q-k}kzJ{V3x}~@(RQiMR*yAXIi_F^SdRh?Y$a=F@%RcpOU@5|hv+b%N3lY={ z>dY0DZd~SxC~uX#u`O`Gyi^G@2!@`9EyUawJ4O7O9{50*M}I%sy_8*K>kin98psZ` zdzLqyN?Q8vu3WL7+Mh46!JttSc)q`-3{aa>1x%{!A2@d!ko%1~jqz|J%KFcsyCggJ zUUPKxi}b-UUYj}GtjsV7ip)|N8fS(~y(}jYFuN+o|Gfg^NrN`eJ=d{Xi+h*_d-F(P z6U}Uubj{(vyxQz|{06&Z@swyAr1BQ!N>VX0Z(Fsz$yZcZ&FgU}htvcnD=_s!c7Ach ztRvcdO;=JW_a$n%W9Tx2Es|qyy2C3*!8hGa+Sty^e%Z%fYNBEm3M?%O^pZIFX=Fjo z1NRt&TOO-hJVh_d-iIwFtRsT`<@2>59q z3CZi*Tt3H~$rMeD(KW*b;CmIp! zdFekHerMv@-bkn6SzJhSE_ab0=B%I%OqpQ5Q<@=Uh}q-Av35l|N-VBcqGz}1E$k6| zJ6E3x!cjzR+IE_jf3%(uyfCj+TJ7(T%xsoDP2Meb)XuVv@tvM4*dECLqxAK#c% zXE?W`SyPt_sg+Jf=YH2hC@%&~W1xHRFQ1X1&6nOxIClvPpQZBhUOUcxOPL+FpX>zD z9dn>~feSbVCz;G-*6CNlY=R%o4l73JdlPR?XaMLYi~~LU_8{l?ZYy3xG*Tl;0p9$N zCtxV$zyA6PDp$XFv1^nC8WVC_Qi6r5>YyWfS*O@eAgdq=o?BDy zl!*HO=z9anfAM_mm~_Uyy0FV3m^y5H-=A{h4-~dXhynJ+WqT?7%OoZwS(0igM(vQu zinp2SvZug&C2usdq^bVplJ!!nXmp#)z{;X^SK9+19EaT`=xe+`oA)4Fucs@Gc^CtE zHN^vHp23~o0Yfq_;Ff5pa$juuTch-n?1LL)rUxtX&!EW-H5wdm%*@FUW=sOd0ig+S zq_9HJPkXT-lD(_6uqR7qBg4|$CnUQe?}u|-&p9}IMdop?HxHuDa&bpoF3ZK3!spH+ z1m4IeS|&78;fW)y6wd8Usc*8k^-DIWkzHbsJ$E+-XzZq|jz_Pq{k>wWa&_8s2i@r@ zx%9dh^Nx%5=!;ylIKQSW{@vGH_yq<7w zvv_*GnAvSL9D|_nein6U``Xwso{w`@JF$k~DgCk? zJ?3b8&aYU+L;0e)js^>P#_cKo`gX!sNAoh#zvSZSDBWt&nk>u;Fd~(#IQFpJq?VzP zvcg6Z2Wxd@cJkxhiZjI)1K#-)(pae%4=i?4#`KFjV$lo#?dLuG4& z3x!+av6k~E4+`Gb$)(Urm435;@V+>uE+?(!14T~z>RP~kGCoUVVKfr#T#5gu6EKY&u)+|Dq&jE> zERITVmT~~VOM7FPRF8?QheO{6k9#M%%_u{_)q%F( z`X_qU*W6z-LiZdTsRx;tfgBBc4I|cOOi%CyCytq0xm-lixTTM+=+eG0gIR!aa(l+9KP*rMQ&dGDp}Y= z3--O$Cu=?d-83Vff`9=n>>}?mhVtggD%bVm=%q{>79WXJRB1gN7s8UgpRQdO*7|J-12Q`~)T}dvXjagqze_#c`K*z^`5jvvlEIe!6DO;|Ztm1f zF2h6;yk1-~{)#FmaHsJwe|%M#16T%Cw8yacU`YzcA5 >K;OOOUJJ$%8ywE58%-V z(`0|OcEqCVeYZJUc7AS5F}otNKjNoDm;oH#_4Ypoc8 zUE#5LeR=;nNR!2sTQYx=H9B6Q7dgXfMXFu#ZBt**+woEapC~FUL&=@_$mHq(Crp4d zoj5MK)#$#KAItY3g0(?=EJ>Uib9F@x7jE9=W4Y=zNnu5ZtKWtx9%)XXJQ%upi>VnZ%GeoYmf2HVaGxAEV|6ZOP@PvbCf8&w5xR5 zmh|bWP;?EnkLH5twK?!zYn@oUIsV+#l|Y7H#nUPY1AfnF!${`PU|xjvi0`zXW5M&6 zjzuKS+CrQMj+pW%jMAI2q#oGMG^ z#r}adZb=>&Tq#s(OP`R1Kb#V4pf4rUZZUw`>A=Bi*;MEOGu)7dEm-#}%UA;jL^hC< zVBDS>$tk@ZJC{oRU`xlezPpQ(Rbsi^l+*TnxroC~pZG)7VZ_dl7kD!A^&0r9EI&yp ztbgY}2_Z?_z9W0v=y@_o*tB?1VsgDtGjI-jbAR3U<-%;=^xzUBSaNFdeX*;x7@K;5 zWaff#HPY3(j=uS6AbDf8>D4xav#5CD-Iu(4qnkd8mqiz%u!4JpMh_XT*(lR}a9BkD zG%z4o2`H>29jnbO0ogb{vV2^_)qSIr$F1mdh)yb!{h(fPRQ}w}{C${y+o1IXkekcU zc8Z%BZfpUPtAk7|QuSnnr zFhQ0QTh=PgFKi1G?z_e}lEjslVK?bs-;Vc!T>&P%yjZC)V^E*WHpa65eBE^}j%~kf zkZHFqfiUP(Z_dX*j^Y)HK!S0bOi2V<)jRe7<6(@|x#TppA$x$-8}ws~K^op1ov$Lk zeP=nwZ#)4W8b=e4$MNXC0|U?)nat!Vf=>i|((>bBefog~YuXMUrT8wHuCM2(P zPs&fhp)diJhW*{iebqZK266<*qxg8Mthv2Q3nC)M>!5d=`#zbT>@`@}7_QM#Eoe|5 zY(D0W(7;iUK?0sg{KHy_n*?~9&3VxWs)x-L0BG7@Nd7qK^!iIbzfiH*oacF#>&WJc zwFg`1m#`9Ruae=sjyx)?Kkzz8ksht7+2H8?7XRY@XtHH~I3K2Pyat^{0^(5v-II)oIF7N`Hv8 zr{`u*Q}9q(csSb9A7T+wIP8sc7NrsaZT8+440f*h^*Q@2$iD62ws)px^O&imC1wRT zh_oicgOl3o)AYMqF^j?v_P9s$e9)l_$yZa+y~eF;cCP~%ZCjpT2=D?zH4tTte>JXI zSK%do)1ucAAB?!`Z1`mUC4If%6o0Hj=5dF2>A1Kted2ZNM`?uOr?-P=$~z627|(Vg zR3j>;5+%7npplSSwx?S@vcLhyiR1TGEMH?(-#cGqFp16gSondLI+CyL2R&9};}(pA z#XF?x(u=AaCHf&#kbqKaR%z1pYOFa(=;xT^>70!g$80^;1Q{FDj4;q?8{T(cGeYVS zW2ke>8UFJcq&r>rQgicB6obg~6i<^=*ifh~~t%-BQ9DU)%_zCo) z8tPnPNd|I;KM)IvK~nTJ3JYWCQ)b?{b3WTEzK4Ksn8$06%{e_Qrjv%@ZC)EufdVg> zIIEL;7m8^FleUn+2cv{^y^oci)>d2ZuCz>37Al`3L->rb2Mn|=Pa<{+$s|Mpmy)zC ziXsgTLA@Pd6xH<}5A5I{255VNc@Tv7(ku8{7L4jfJcFC^o&NOeZsrw0@q=6nS&65d zFo5WxLNr!dESPt-XIES+DnV^mmhA2c;=CT>H#6B_MiFY0lV+Wi%ki`SM%Q?PPz0|Q zw0VozNUOo~&LS6+$!jHu>$R|sUGw~%U58R_vqhZTQ|x)F67CS<%J<$&6(8@#w2P2s zK7LtL6M4PNvk6~8g7^2FPkPFF<~&ul#`X`pz2CBtW|{m+xS=v^GimzSL3&gd+^ zC6gbVpOtGh|9iCyaAb-dpkEDZMY|8|W(W5=w2`-2Dt`-Tb@ErF5KkAIt}%moCY-iT zIA$r7-RELiPP%NCH)V^w@35&ngZTwC&$qqCbMDf(tc;NP{ESJKN^O-tjE>Kj{WY_&zOQEvH%F zNN2%wbBd9V)txAv+~6`9T0!Tmhu_L!CTy^(k}j^Yd9~bK01{{JE7*G@ye27=0_h)w z0Tl4NHUC7_p3daS+!c;%sQ<-7m@|URhEuB7y(Rtb!SC-&AOL;I=u&GNes}Z>n>Q~C zOS#5TGK|z`ksRV>r5vlbm6ARj=li> zW%K=+f@|po)?v^GW&J`F7zx!c3XzeAGvMCKT= z!3za|47}?yV(*%8#Mbmr{@9Rj%$;>S0>zCHWW=eRYM{4<-pn*vZL)0^%BuWMHsSgV z8ZWqxSM2O!GsT5_E`l1c2m7m?S>Dr^b&lO}M#Q6+jD{+8&s7&g3c*O{0)+E&R)fk< zvce?bIr#A~|C%@b`>;7V*8R4%HviU;%x6`|G8IZ`=}0)&A=jGnOf+JaZX^GAS3^Xd zj^x9N#9@qCZ?J+-jN>`+{nK>I!@doi=F5-{S@Q?-wmMlttRtG9`VwVU*!tej6=hsy zj4wRXH%WzpNe1u2?^B5&w$?iP*1(O4Th04TeaIFt|PYXh)T)8A4 zr}|6>)HdDDH+EKxfNP{bGK)fyQ!zS9y$HHcviK_rl7dsH^{6>SUQPE-Daho}c=>*e zM<+Sv+tg$c_at2#OUf5?eElvZ2N9G-?MGQYEa_8o13$^xcHId`&90J%INh2bYvPQtLZ0>pPv-}A&&ftCCX z-$bghYivql@_2Fbht4jdMiW6ls?0Za6<|Y%Sg+X_9Lq{nSCs@*!Ls zEnIGVRK#CTXMFX{(W9fQ!Ah)maFy|!KDYG6V3gq5s8tQ}K1xF_vfE=yj%^UBg)!%AQ{vO}(8hkE1FE;m5RRtpT2U}iPq zco-=AiioP`Is4wVQxXFSSZ&U^DM|kyFd{i$?m>Te*bwQ6J_HtH_q0*IG+#9x8O@fL zYG{&5nb_D5HPOLOx(`IB?lQxea;;!99}x=Q6Sn^oUfN_EX}!(zqk(}8*AXXOR z8jq0mLD?4CWXm^~-`ib{h#}}O;Tw^|!^Dk=ar>6WOfAz;kKnZIni5>+ieh-0EIfis zrOxGMRg89%p$73K6=DAXVvWIZ#TAj6JEhx?R4=gVZaA!Y zTUdjO5DLq$l3QKQ-}~iS-;Z1CGqz5iYPmnpdpf@}VNrgs20cj22w_@NX)iC!ju2fj{pOz@g}L5A;zsnt@KSg`tDMIYZMv!^F@{JA0TsZ_#vyWq3=O= z6mMFB@>;Fgd_YElPn%~$O?W4}z-BO`@XOl z>I2&}Cx%?b&fl9v6#y0~3svA`bZ#5rzg$l^1=Qdte0fzp%b{4A@?tj|Sw@*isNH^N z^A~dB28}t_6O5!i`TtQBK^hhd)O4v{`(Pl2q7&utq@}6l2MZ%)%>utm0?4 z7sU$}H=vY*+rb#`0DPZMYC4asuApuK@C~!8u8JTynKw!h4O6 zlCF6P7L^C)+5cpx)bA31&JgZ8P(qg(mk=-{vhk}v?OVew`fdB$C+|rCretkfEW>7~ z`G7`V#f%bh=C^-;N?i&H$PqG!|?11tSaZ)SZqagJ!}?EQKAmaGn0Z% zK#Sq0WUToBb!aTx*5Chs3Cao&$t<)0&HrUWSFr((a@_^zH?7M2zYBU>)~0{@vK&l* zKs~e)6}3o-bQNudbl#KYnE-8~>F{-%9(EJOphI4Lit0Pt>i^R|Q+&oVEIu!9FEae6 zSTvfo((V2Vhij^_His5DwOilWUhY0@ByY}pi!vr8bYANXtz;}hFLxj5Rg6xRCbQqo?qj_>n2_nU-z{3t#sA~78ofM&3iBa27fey_xU+??|M^X)(kxpcOL zQx}50t{{DLNXY>pax|Da)b=Qr@2a@N@C=w!R3U}9N+&(<`yBp^;pwNrw%Fvw+>ntp zBOR`}7l77wp(wqDl6SUPCZmu!lI$54}gHCqP5_`3v) zA^Veo&Cz4xU8Lb0PC&&NXoa^0gX^3wTASMls0h@JYLopD*2*>7EXeCEQT;H9xiX1Q z7)dX@-iW!}3WebU%8VD}BsSR2cz-+Z!&1kv6;LX9``@<0x8xZ3q@Y~a7Pr^$u+|p?^%-B zDJb>xb5?M^f7`#GNkDh_Xu*N4JyuScxeAagX5AFz+ajrU$?QlPRry(z;i1m5vhA*d0Y+52OU8AszboTK!E&$eK6MFI?gDst*D+*^qcmyiZ|;R+1lB@A=SaT zF{_S3VZl_GQ%&~j;Cpy6U7H8PcDe%ZkvuRGY4oB4bQ)%gI~&8iQi6uJ4G7w|^$Vb* zu5}TEP#=k-^p|81&Ihx>Ul&XBna61K{;3Pz%5ioVd9lVIxI2dYY`vp&uPEQx@m`_8 zX1d8~PzY5r(1=kF|6avoU8V81C5Sz$zAly5&^SNs@w0iDwhPhZUq)0{c30+aL*QRpBDM5VXX9)36|8HAn&5)1*nXx?)3!kO zhWtoFY|lm-f7G9b!aXb_Oj&|Nueot^t!sv=99e(XUd1Li8z^-+HElTZtv~&bLn8q-jcKQFJOx1#1CQ>NZ1;XD~@{Cr*h=W(!7bHjp zhYFGtn8_!!66#zwV09DPc5lPMeu>KQcm6G&W0K`pFrgzT)|uJm5|Q+Z6I7>Pwd1J_q?TGVD$@|i2o_uF;*4*9uZdsGXmiy{ zX1ASl-%2tDb7NsKQ1-m(VMm8bq$H*%0jAFPkhE}DO)E>-?CO}T&~;VVv^Wmq%=gZY z%i2TP84h^S&X4_d4gk((@dqQKk}Cf)7(Y|2)h;z#@W;VgZZgmY45py79TyYRjRnk$ zt19e#gygRLY#O_Hu#OOZKP6 zRH?=pd2Hr2aoq7uu3AqaOK!v0mzz(zoMJp?UB1ACi}Ow3q;x}RU1$Hg@yycjIXu*`7QfPR%RuJKRw#P zdM5C!FvuF2d>!cjeo3<3R+T5k*hDnd`yFB)g2 za86;CFI~nS+5zR+2wov#HdVs0BixRk)=_h*Lec=vRK$YQ=t< zIxG-n)o2OA9ekWr=}4Tlj$6|kIl=4xXf>?kdFWDGa3U0vcx`C(C1j?bdojt^BB)k< z*AJ3K2V?vkikIF}C8lgy2+vCZs+*LeU$u+{REU0FojTo@4#k%P`PkFgoH)B9e#|Tq z{o+ikUE|v+2a-34|G9qa&SGZ(H;q_U)H$T)=cIk4?j{4Nxd)?S;* zNzrJUJ@1?b#GM_1xHFvNcS~y@(cA1d=T!wTfdnM2K=k&c&tIy~h#`6m2 zH6FBET?D?xQmm0N4$@^8l96qMQ^#h=6C}fQIv6l<+XC04b{La9AG~YoXSCMaE4LWHYDrEZ5aUb_ zpC_J=U;or?#9bvvDF>na&xd2fzUz|SMB+Z-U*1+G?y`~AaM@{pSAuQN4|%UYe>^3H zHPzXtQ%L?vAwF<-WX=8Yq}?R&0TLQ}j_FqWjmGq_KAk7&nVp|MV?RrG$E#W*@10#R zaB<1}@S!&htbZ;#lzu?i2$kes5(KY>DQ_IUkuo~;;nJ;E6#k@LS6VK@38vW374NNb z88*0qjW?as4yIX@QB@DMM#azJTm=h}^20>&%Cw*|c>n(MJZa8UX_ATD>Qh)qAUitey6fL@9(jG0 z+Jih5W~;QCo5>tx+sr^9h48{(=#G4~JoVl7gDp5{_9eJ8*)6=tBnzh!Ca^M!rG!AI zYMF{_D^+Mu7zof4tC%6gcw*s=0NVQ)xjR#x8yXVpxUiY}k4HIpE$(c#mP2ju;ZcGr z*c&umQMojr&;3+4ylMkkl(yQh*+8it?!i@SyqTtx@M*lM|9=oW?i=C|-_JCfW-tw) z9if%zlBAGvUch{gHiXL;jx6>bRYgc{vtARA_m(a@pJ=iV(f_mX2-)m9Zc@NdQpRoA zJfw$DuyF&V7aeN|--G}%AJD0txRMO}%ddEL1A^pYMAZYfJPL~=WWjusF2jIk$|lSF z1!(iwJt0~-sBcW0kZ+A+JyIkx!hmqP$M)a6ev#%2unAS5rRN|qpJMZIEGG4r!ZybP){{LqQ=v&-NJ{HF}`; z?f*_05;pGyi+}tEwwEmf4;f*ymos`+j@fzeSPI|Ri4ztbB7MU6g#G}<_NpP#7|j7{ zY-}i!G{X7&GPEovn$q&9d6azXa#2l=xglfQbr+VJJrI|Nzi0BcTmHC}g!Jb;rjFT8 zF{F3z5aa#YC%`15A5NI$AAvE?)~)vcqp1)&|NfVMR&iNBl>VOb_28N$1*(1Z_nC`4sBs8*50~`92;FuSu%p&(tfbhO?_Lr84Z90BUrIj@ zb|%~(nJcBimJFH2P(X*_I40bR@_`k_+7HM90#4xTJ6lpA8 z2PO?06AS|hiXI;9{SyBM=q)=FHW1R~2x8NPMf{KCCFFj!ByAK?<4?*=$jIFP4>sW%J8GbqSs zT?nM^O<0L;UZiMR@ygtcPdw3yOyk36+kJcz>=8dx%a%~saNhx|+s!IvU)_n;-Vt8p z93Z*o)4^Zr{4=fPBDK&aO!RbDcY1dsp{v715IVh65CBz?Jjz6MPuWgk&Fu^}_XKsD zEyI2!bgUb+s*%G_SjzhWnv4ROU#!Fl|2SBI9@Q=Qn|E1(l3cLaa|<$I<4vT}xJaMu z=oA3b8SDN@F{y)^HW7H%7}#*+dk@jvES@C`1~rOjtHpt!8&;TRiwG!@xAyGBNzhU1 zH5P{0_aJQ8+D`2qOepK`wMo8h)B;(xJ{!iLAxCu2t(sBgjjhX$eKoc72`R(uZhs!z zvLn^4Td`c;t1v*Y(6h}@m~+y(0@KnO*_+I+Vl4nrsosXNy9_%OXgi{FBYCnRdfz`K z2QetC10I#@iWAqX{#>?sZHN$pR zNQWsR>m(34^j&*z6tM0qY=O#IV!-xhm_7G#ehQH8hGnJB#DWBJ}`VyvGGq9 z31W7%d3sfw%!occq{p65R}Ov z@TcQC!1?oXfxc6_bfCWuBdJp0x{X);DL@dm2?{n8>KZD4;N;|{xkg>pl)~=WWSo~= zJy0RXR@s} zW|+YS`=3%q=3!8C{nqS}9+uAZ>4t`pF^8$*2JfH2uAcFMMdr@tZ zjjb07LHL8tmt}O974JVP)^`Te1W>KLXgq5gBCmfEe2y}J?^SHB@<^>mrog8!?vSLk z0szlR&3RvOPO4rTEzah>C0 zM<<3o*5F8^=wrp6mhdzjqA%db{1woR1`g+RZ(eY|UB$)A*oD6%QAe!?1|hES%`949 zdJip<$Q!Tb$ufu94wH?0T8Z}#*$_0yf{@&5iP1Ee@e5oEAINE&LBYD79RGS!)*Y}+ zpRbeFw`$gcZ639zhbe>46E3pmeOC$JDbmQ^3KoM(TCpa$Z>=LgpL*j}oBZRULp@?3 zt<-s@ScZSiS;P^Y>{Z!_H!stzIB-QU9Bc=&p3*%{<2{WjpPQ{vTqUquxYpM)Cw%*| zu-h$bCI8cvG-Om_>bA2jaSgX4<=m0sk*j=jeMi~;7-4qhlCFu1{T}%*FBS4|?4P4O z7DWwpYkZ1z1LdtDc7n4(hc;Ke+3X2X=Q9q&^7t_|rV;)-xC4Omnu&0M%+P@vRI8|(=!2h8b|jw1C0s(?f5}A-A{zT) z?~sOKc!3eM{?pkBF*M2|IDeMVIwqak%5GWRurGQU$ZrFqIfOP0In4}I_WE=B-s2FG zQzbG|`iyNwkCVwEYr|6Eb3hUx^=m3~ z`_J1Dw@{a>6yGeTP3l54l?B#Gh4q}GaLo@yzqzTxOY^va~=9oq7h{+s0 zcYmZ&8O2@HPK8gajzl<%pS?+@>ncz^tQ9ib8Q7&ysFz8ihquOkabQxf6mbY*wR*9& zJvYTv8USW{E?vIPBO>MX(1{VGXTe#2YZ0Qa>9~CjQ-;&ig-a5IyE3I9^a14qPLa+sCHwCTTZU`10<-yK7##D^u zdJ%kMejEM__~;$k!ah>O(;o2Ow$B{iGgnwc zcOiIYsFslj6*rMioa$*KV0ud34Ko}qh~0VmY9|rV1Vn{(n!_a@n zM!Lw8n9twI3I-hT@&#Fo2D0;zAX!kIZG~Uy5wS8qbPhtmku)@sOPU#b5g^>?R?pBO z$ER=UbPul)X5b-SC7WH3PA8M(EQFdGd~xuZvr}9`f^>u%IXEY|_h*o>te*4#(2Rzc zTmlN%nU(Xkg_DONDz1Z&!L2!r1Yxw7em&0K4w*mMw2erY){A!3UdzL8hH#o~u6NB} zsB{HjYPvVC>QF@A0XaX?Gj^K@dq)z8!SJ;sSMUw_$#v3s^b2eNe=v#8F`ogkH7#fIXmkRJ&#crbz=cit;gc!R zl{Nd$PmupZo+zWaeZCitaX9A!h!3RbFn^d0s;Y` z-BAvrdtK&~PrnMI_kwD~?FC-t)s;ViGRrEX&agIjQL!Hv(E{Yr@-(~|axtUoB)UBW z1ERM7Wig>XPvxl?{1cbqqhdCvWwS(k(gn>5q!*rBbBuP6)S1LTAeV1)X<$x+VQ-Ud z9jA=KoQJD9leFLnG0}N`BK?JzOW&2++`7lhIAx;&XUCQ7i^TE&y2i*(CuUlQg}3_d3rW z*Gg0UL8Ur(pjMW(Z=FQ{Ln%#e z+4AkHy#_M8oK_(#v(w=TWy3$!{_>U|!0};xs}C~ciu~FNOi($lf|)?Gf^T|`WzSrs zN=uv%31a1Z4m9T0V#2r3V6Nz@kDb1Ow2(Qk(lASbNv0%3h&fY;bh0XnUz|5Q^NLven8F~H`O{H72u>!N$M38%ZoR5p~v)7%BT*3vE53UyAT&hI7 z-?x%6{$}m-@*-%Nz1}xU9J=UJjs4qQ(g1FY5&WI&D)v!{Vl*RmZgj z=9gKljGW5*qS~D)M|&0sW5 z-FttO>RfycqJBc=mC&#^C@AcE?48wB@AMp_6C}N1d7-=qRK|tmSU;jPZ%oBby(jdz zkR06^T805Oj_{{_1#C zPPdo9&Xh|}bm%!GDh0PV)#BKnP)P|2A|dAhf>@fft+wP`E=0c*5XnVH0$_LiOALtc zMr`gFp^Q;2EM~SxJc!WBpq)DBo|>LLL$-wQ>LI&Od{`^S2_=e^9}m8j*k;CK8v0jD zh6;Y9n$t<-Ff>~ARz@RjMD!A=s<^;KnD7ecK~(|tVHQTLadc-*nGpw^gQ1NdiMSH$ zF(62Ow3Viv>Xjc|eJW`Q0@=ESmmGopU|!y;dQllbVMW~WyzW#O8Jh)U*3UrH?RKW< z&&yVR)IJsxe4!LPy}ungJe%R0HW^04&1%8xzAET2&=uw%AsR@GSN6g}irOYFtQ-~I zB$p^`+N(fT@<=uJ(he7I)!XupolRkOwpTV|yN0pZ&G`eEm~2_jZ4@JnyUc>2Fx3v( zIzH^^j`S-f?+k{crZ#va>oOj+cJBQ=P~%5Ns%DN@UerSd%zZxxtO1XcrE=Y$7FHo8 z>o2znD~RZo+`sr%H%V92v^0JoO#TFiJ!?hJK8x0WQqhVUcV4BU6SD zg7gl3af+z;ws7uz$?Z}mQtz7D;?oR}lB0((#k*0mK%uq9-ju4d4!LDyyG+h5Hu3h) zfZ+d5ih7uA9;fe)VRo#?4vSyMkaC7x%Bw{QyuH|u@D8Vt zIO}F%QXsmPNFpS;7ovUG4h=a;>G>TD0P=)pzfRNK`@>73iwl5V@N0{B(I5$hQmq6H z$&xW-c-YKEq3G0I1MoOMY~bjx00(%CwL32N4U3)jlv+v5K!3B;1l}cNe;|(Z#U{s4 zf1TA@1&DiFcKO=j&Ls(DDZ9gT5d-lpC3*-M946rB^7$ z-;dc=jsif8c+$F0MY3-0)38 zWJPC;37FzegxP8;TF#e}YPb@gSqDYe%U9ma#r&hLw&TrhzGM>x_!rqUoIrQV6(z|X zMRS1k57mpWB?|cTMY&GaO26MeZNk?iF}vsR@pvO69KecQWVfsqn7@9>a;46@z8VW$VTvDKWcNe8`Jw&EA6@}Fp(O(iPtUv;JtUzUE z`+U@QMPE0)SFuLMNVemq*KC}wtaw39e=(;5J5cnFDED!n#1-7 zPpYammNPhVsIGG+j*FnxhuJJJa;azuVe8OPvnQO%;DGb~oVIp_> zysh!Gcx}N%Hv$-VYH&!!5Uqu#VuvDW670y+4im%UQ${6Uh~)!x-EhQ($*@ZLVk>Yv1Z# zv>;!ba&q<;LBg4nQl)D~HZ^Lp2Sw|T)pkcuHA5FEom!nBnsRo;v%f|{1J zCh(hWwty@Ki1=1e`Eh-)ciUcp+5mQ2wEssv#4o!NodQJjhoKxABc0T>4p8f1qN$nL zbF!O1}!vww1 zHN96AlPPBokdXD*`7A6aTE9-Tb{$Lx{(_~nRw$#$bUpJG)XB1y&R(&)qS^Hb+?nx# zh~EqZoTWs(xRl_oDVU0IKXM%lm0v@4fXJC8lmR%JPkVBAw9tfNTy=3Y<#B_>W#;?q z{90ML+WY#|X(^e2@rXaJ+U+~~y{O}Bp!dKW85RZN_#PdG>vL~EtVLXGh-=zbxnaa{ ztHuc%0ek2_*;_nFby)LdE`CuE2vFZ>6fnBVaeKKvI^|Dra*2G$u4#0@Iu{$wUZ^J_C<>jh#`tu$S+zJ~$OrbKee4EgKKxC| zAK}c9>?Zy07BJEL0aOifq2cZb9v^p199l$8Gz1{xhwG_|Lw~Wh$qvgRmDtA;N&GUC z8>vMUit$+EoDIEhKOj$v(dC#UbHU^BLUR=&PAlG}_u1KCm4(zPiV;Gx!B?2LliuRLt z&^-?o0JeKUad8^DPPG}j%Y|JqSzqnLERFyolS@NX#7MSONnPU zpVf>9#>XSQS>Zmz@L=^46$l#gjOnvj-lH%~=w$ml2zsi%SKZg z;+a6Y#_HWev|6?_?%m;46g(Mj>p zPEd~%3#Se!2`Kgr0|727o7#iYbP+}4_Uf3ZTV4@sDg5K~-=hn3e5G!-rN)u#jee2f{C_zUuTh7BJO`du3Gj9il3 zPq4f|9p*Se@A&5@3;EMT>PMSy3%cv}whcJe#F2i*dq~>tqW_aGrBy3d#Y$-^?Pg3lc?w=+Sa<0;~3W>4%Kz~hu0OVJm+nvt8pNGNVWLG(h+v{vC+P$R9 zR&T-$aPZ*M5nf}6g6X03t^T*}eGQxX#@Y^S^~+k?AW$J+rZ~DDGiWU(MA!rL zAeMN1>ui2+dmE$Us>t!>H&A^L#UbnITxcy#-~#_8G|~s;78-*)$AJcLC4GyAeY_IKYV#1zB z5d3MfV@3q0{;d19J(T#FVhDfkB6ornApEspgvR!Gt*5=w)hf^b`XV`(-uPUqGY9VE zh_fB&hs2zKyAS-l@TW9iAv?;zNpgy+Xa}b$xsP7mmtS8!X}b;I90sT5 zrCc)Rg|hZO70l$L?CquuG=+E?uEKoxh?NCCk6+ohlv~6;5L?|=EFwPB%Jf_Zn%T#T z3bbB_zjLG06QK3WP-Bq&Cx}T-W-!s!fx54qWH^ z{jsa4Rna9RV!TTsFs8_0e2gw8?Ih%m z8{Q&zx^xkgH}pN#mnk!i>JsX{RiY4V8UVQ=?0jqeRzxXau@>FDcYNn&wRt$s=M|1K(^=^+XI%CC*Gk0QD&bRqphsKjK5>gasZsW4b%IEj#uztw#N6je)$Q_n z)b zP1S(dQk~Z+w-!Pi6I1n7dAp6UMz`OpRXqG4&W6K>ZAcOa~|(U476vGD)+ z17h3m(iudzKY{6h2}iY7>nPMNW=)47FUhr$Kl!I z>io}?;^^$)9@w^^vkZ_TIkA4`aCC4*y`t2?P$lhBf6XLJPUwpN`}_A}xJbO>b{O z1F|)+V~Z!pByJ^`vG2{l+x^l_T&+__6-*eoRskPdlS^LB%&fzw3he977VEw zBkZKF@?T(qS!HQlnG`it0@MLphA^{_p5AFc6MU7$t^T;)_@ zTW6Z|s;U^^sT6)=#<6+GV~(v8Z+WwwSEVvXr_nYLXqhDtfTW5IEBT3h|($!e!t zWQDACM9R>)EV>u%q^gRADC#Pl!Da^_&Vnk3!RdwQss)H+T;a(@O_ACFExJfZBc&C? zoqy|6)B$OAIA9MavN#&jezEy9^dDyLg-=QCM8Uz)XUKMC64djezoKy_h&8(EQ^8|E z=$F|lu3#}2aKphQ@;0XIsgkO=pF}UphtWU92s?l%r})|Xk}$>tIb}zl8BvS*!om>F z`6h?NGlhCGj%Ut#KF~Zh9&iuR$W9x-zQHZ#^gBf30vkj%JkGNv zV~?Qp5)u?cZGN2dYigP8k-|Fch=h@>1|di!7Eklzn}^JHMIgteM>B&Ou6`c;hkw)a z5h`{ie}op}n5jGl5;VN1`Y-IHc(c?W4tWk~6GWwviye9R%lb3IixRS`BO9cwoQbKg zlp{3ryAsTJE;hj7I61Bt=M=u9w{p<)Lt}voQS$gP5{| z_DR%WLy8c!yio8X=<7j)m@5u)bc8znYZXCV%8mgIuwc*scZQma+q1d*NUSt^g2fas zIB@k<_k0?$_1m9`36nD440Mu&mWmt-s}1PoyK(EmNyrvy5dR%Ht$50&YSdgg$0Jw@ z0FAHuCkvz1P37U8T99CS=S2&+Hcyy#zwgjaTbvx+b%Cu=B?xe$F-o)%070st4hRF^^YxOq1Twn!wi2gawb=-S1o+A*jJT{jnF-00kq% zaiIcu(K1uxyKaZSIwJO^%W;|SXvgNg2ai(_kH-3D3K3A_-fBj!{+pUU?4ygNn2jBn zP3Au!aX{A9b}l^(%L()iZW+JX6<;hehW8Ar>$EYwNNI6jHcD+&Dipf|N4AaDeD6OW z1Gd6Vf1Nai%}>Xt$S^vEw=i#6amdxF%#3GAmnJ&lbX#Hdkg846ev|MjjY z8iv0wxkq?qRriJZ#=g~sy3|u>tz6+1#T zBad*#1&emu0Uopgz9T;fYMBl$X;#B>wS2bc(mldxZuz^|t}t72Q7ypgeDi-LzCzJe zOk9s0ce6z9g&m_>KAWS9Bmyq{Cz=ez>~!%G}+YI2kk+`?r?|tOw z6x{@se?GQq$cP|U_8kM^*ZBnSN$vA+>?++?w3w;AVlP%5-(%23p8+f`HY$G1%D@O> zEg(UR3nVege(Gx2<&$#k*BgA8UnKRLY(TqPXZB$Owp7rX98Cgb0%}2}AN((3zz?`Q z%mTbw!QBE;!aCTPn#F;L=J3VXXvsU(T3k@Lc^Ck+3=E>avNHpy@Cjf~&rVM1d5-!-;l5v?57IRyTiyj2qmLgEZb}^h2%hf@~i{4f3r}RQTgUV zd5wgwT}%}7kHtsw6OI<_XS_l#6}J@G8Otwjx%NN{l_> zu!7-nqL@l9t@RThwv6KRS1acrZMnB!f=}Ox(l8t?sFI<#xysedRh9Z(URBA7n)^7rknn^LHov8@}Ve{Cym!hpcKR4>8FHZ2OrJ9sE79wlHxyPn5CdHAM zUfM!>hspdQ{~8V}!bjFOtrWao*oT@zg+#3gN|8{C+%-jpXfW?wMxtOX)&Zd6QKp>N zq6OA%NXw5rYHB4i@h1&NKrWejHM&SVPY+CqTR#U064v+$0AA9DD^o(iA{X-aXr>bk zS>n~0h(yB~h$;t^FG08ip??B~(;9rou0G=vt5#l9yWeqiWTqs{bwsq&;fFYfO|O2* z87Pjt>3NYfdB<3C^0)6 z4nslAj#<7@GjS#g-2nr0LhyDkis&gr?}d6&3E`e)Q*kR*v0FZCYYbKCPs5L`LGM*% z?=FpwXiobJBrJECjwMYKUtL&u5Dm!4udSd+N#D6|Vi)cq$WaFa%$S?%=6xCVhz2T} zEnnDAb3HJQu0t)Nq^$`|A^%R-f%z~E_IFds-u&UN+0ik6LuH@;H-t0{C6vP}-n~pb z^%QJmwCOkEdFn$#-vQBpGw-U!WQFC-_WC<(yVGPvgUn4t9 z1;P0uuDxezEq$U#dl0hK;M}x;7+1lKBlNd<<-JVaF-S8pv6CkS=@Jj(lTB8ao&m-- znxOU(N0T5RwU8WV6Y}4ivjc7sabJ(c6If!{o^9tEk3Do>jnMfA3tI%#`;O$XEt#`Z zAfN7->8>E`d;Hkq|>u8`OVt|KgX=^Kc0u?wZ}d)U?1C z#4CnbIrrWTaXprm>*EsC%vb|&m&7sZjoEv@)8i*Tm4GmSY~H!2Sv?YVD9>#52n`3> z0%j1~Fmej%J>hm{_Tj*wvwU}ElTS`V$?sTMDG<>FBIYjR%|_FPe2Ei;BPTR6&v&LU zXLuV=a0ge5tKLs)5acl)2y|A`|I6ISQ!7IUleL1+8cfrS(hji+C`-@cL(=3WoDip$ zut8sH+Zr?IR}Or*jCs+;4p`D_yN)tkJ%*zrSlLwpF0s_5{FOff); zRh0N^E)DHA5`g$YA7?57(^50YfPDVBDa9B=o+Eya2`7rwC5@Es?OS+eh}4pvMFp5}WQzD8 z%nAluj|-3ZG$i9JGDe)~!+H6o;t*u~MR|d)1a3g75riLTU*c~MfYXhLE=n+f5WCRK zNU(>R_KdUrMLEi(D?)Wt&8^g zj3Op=`+eRol1UXD)Bn#)A@1E#@R*ksmNJTRPd3-Eb3Gm@SX3tg`sl9ud`@l<@BT)6 zDNHKx82d@`x^lQ%4$IbUcgi}vgj?kaShouqqAda@<{EOU1rvy9y_^N+3c@v2TdFN? zO$6WU?42uu2d*X8AuGUW4VAyPt)^SmKy}&IEC)MA4|o8{z*0y!9-^{^r|nP5M1CJE zs?6|mtT?N1z3S`~jV1p)31TBM5|)QW-C>g^PMlt%XQLb#>{d>@@mlx})nfryN(PRT^_%4X&&6UnRE9fZQ$tsqb9-r>Uy|F1eh z)NfCk(Aw07d|igE)K#E|)5U)_oPP2{&vsn_a$u>8Yc?TE>J zwH-HrDtg4cvSAx_l z=l~kyyvX$)>BSH{n)D9tzxT+(1S@>JS9ijB^NxWh@@bFlpOL$x0=1653~(Y0-OgS{2cC>z=y#$nNr|ub%Pb*eIz#UjW*RpEbrKY4I-W<0s#L zzeIg`XXp5uUw?Gq{M>KpP*fSYaRZu%&YwUzRWllfW5z)u!jpV6q~@IZzAx`LA$UOz z`+q9hu{t8>^lZzD(@UqLQQ#t7-4P}nd%rUgdo7w zMWhsh?-s-Ly!X6Z{jAR>EhC_oYk_7sBI?%a3efc+VH5(_oCIqnj-E%6w$oUI^7kDW zAfZ!qt)l`yBI0f;D-G$~6m93JdGo-{TJw>vWx$V5yBytLC>wvuz+IRF3I*YZ4C2Omw7g@EbT(<<_T?+ zwTSXp;yidf7d4UJ8u{BK59cq^VZO)=mcpMPP+aavQD=M9qi(0+-MWoQltYq5laJ38 zq?ns0Zs2Q|0v{oVcIQGZ+wt34qf%;n5)HG;6~>_8DhRujwBAvdL+gEY)7KmOI!;ba zge zviI02AWX)F<-@CIp*AITX|{?}DHgyJ^&H==l0D^|89@8OOFA%}2&2ma_kzwMid)l| zw=tBIhb{UndcfIja>q1*30a`z&Zg{5_Sp`V4AuG*0|=R?mMnGX+l~$)E2j6JPL4TN zm2CvmK65jdEWTjPep$3WK`Z~>_EB6J6)iOTOMB}Zx4Gf2meg^7(8XNr@o@68s0%eb zrs$!!Kz6U~=khf z$4WqCO2cLQ+>XV%&(Z_FOu*3wmh@bYMr-6VTpf!IHILPOKqr^X*QULeIgVrP9p-i8 zSU_Y|k)Lk&mG5|;!x?Geowbmb)FV~%AZ1Oh|GdQREidJSM5^} z^=#DrMN)c`2e`_XF{G*pugkk&4jn3B0Iu0>KJ?g}r1I&IL_T41=Z+_;6?6y=L(AY$ zWf?6q`)x$B%a|*yYESAYk+_@04Q0G2nl`_}Ov$m?sG_3n2srXENOlX31Y(eNf1Mcg z>VvsS$D-p(_TH|J77h2c^!4lyNH+%c5Hf%~?{Cs_z?_K4CC=l$-($M|W zkaeeh*e11}JCh;!$L{4e+&ZUd)h%%Mi~ewTH&I(9&h{sYtn)CtwW1z-!)>ai^m8dX z>(-{&cAD=r;~gI@mX%e2GWqIf1~WZcKBE7a&M>Np^~*|HLfhrM>Ju0Ijja>_)d_pe z3!!4Fnh4g$4F=*4=RDn1xgIMVDybWY9Ak3=#4){nfRTbMBO@DKyOgs-Rz^ zVsu`15QWx-pSp+ju(prEM{!a}NGza?zu`ahCv&HzEi~0Xeci_QjTG)Z1^G(Z$KDJK z5#FF0{MKUPKYn{3@qk2Ae#8BNfj8hF4rUU@yVUuW1@%X7CaEje?p53Zw8gm`sTa%b8MK@TWWqHBPG%L@>O|1bu2*#O;rtWp*i$0C^ zR`2{thh3m|DKB2l2Xsq(EBzV8>R@CM?=H(H658t(8;RNa%7E((KK&%~x7RHA$~*63 zSE6^b>2?vNOs`FL+Z{v)cJp1jAawcsUM3&->6MEi{I3h*C^<#+mbr_M#s^)R{QwXK8;O9$-i1qw#VLx z{)6uzz#UG5>t{05fb!fW_Fp*hy*yp9Mdgplg+J74kCf`8OA~h0gzDcg3Kt~62KL)FuG@#jSIJUEaDt1ykzUIIJ zJf*#v)48tRsO-?)qE2*K-0$8%ku%kcqKVXe1@ia5UGrV1hSk<~OMMEtaD}ea*u-ag zhrAz5wIELr81F|Kb&jn(W^+C+{y`RaymeDHD@^M94s5=8LBO}Cs39zAb;|xAnjRs0 zhA1KN<-*fN%VdPiQcsq?jQR|njvrcv*{2ivz6ew8uLr#f_l&$rcid z1JNNOMukQ`i58In4*0WH6|W<(F{+#tSQ>4nehJcM9iP)A z!yvImgm~Xipeva_C~QT>NBTgwFvVoIk-Shy7l!QcL}0tI&_q<*#mxV2#cx>4ewB zX4R!uou;dfBDpwe1vjB1m`dDh!FNnfo!YQDEcNYMHQ3^{+XroDJh@h6PlLzCwraOm z$9KAPqlvbk<Ax3x!22kOoK7U|nt09Uc75c3l62osuntqRz zfv}yMUtYGC!%1 zfrEBqI3oj30swDJwJ8aIg!;;{@!))vLO0g77`)j@L9ZPB@`E(vbg+O{e3TAWIp9q_81u9v-O!BE|vlP%jmU z?atS4E?Fq8^;5&>!*>Qyp}hR45pa!d6Bz$JRrd!;=1D&8f6t_z(Hd(7Efrg-FFRDj zwfGuTIaBqIfi1hpR*Q`p;Dk)|F^sjiWe5i{Hj#+wGYkwpu?aP@^uUBugKC5$*|e`L zc8TnkT*yucY(!EN?9S?TnGr43O}!9+`i~_-pv7{e=V=Waq~pw+tOsUf0KKygTeqvKve%aLdN9U%b5hV zme7ywVabGQiprGAS?Szk1}3?nzdiS0E2@ zO@#ps5=ZV3fW+>5G4cSn)BCk={ko7Z_7 ziMY!h0>EAsrrN>~6CSwc2bePPgm+_ypZ;P%{ZMsyt&&vrlsRBAjQ^-b^XpP&Okq^g z3>2uHn1yOnw(M4lfQtD=rdCrA9T_YJf<-KJN(t)rbKgWiYb_R$KGGE?A{oDZm~thD z2J*1<7lA5Y$mxC!xg@v~XSw+T;&}1V%UVUA>3+$sv4L+~Fu%?8hiTt^bgo&OiiFBR z;-(o*AP`@NN%|7ktCacDv>g-E>0gl@dKP5~IK~%HEsHUC+V5`8d7>|J&P(o5b zs8IGQgtWr5tG?Ey@^|F_b%Zsx(~l|s50tnT>^@%w+(2s6>G(d3ek+sZHUAfj3k>f> zwlge4>Uje2ML=F#qbol|djm)GX7(ta$5T(N0os2*)gKt%SY%if^HCxw`(t*}DLbBI zQSX&pL`PcuU^Yj8Mg^oCdJC?3PLm5{g@#RI!EsjTK@HH*Zzout#_e4`d6nKA>qgOpCr}I0RCw@KWDt=KeCILifI1# zM~D%@ij}&dkKo6Bj{w6j#vx&MGcG%yax~~TUvrIIo~>Ir5yhe!ssL&v zoMj5g;A>+lyyH)$^nybc4OJP0=1OjMQCNH|>9uik%k_O^l_a`uhK@)@4vS6C-mHR_ z{dj21Rqp8AqP&|gqtS_03IYP{;o7!^kz25YV3JWJiSJ$ef(M0u?W*ASi@(1dy*bnN zyYIt-OpgQAuS#Gt^h(I*H070YQ(OEY4+TzF$`ZLOJZK^7{u`)M2@=NJ#~l!KoQ-kGBr;gO5HY4KG4oc?s3wjAh$I4$2I}ZcO|8Bf<|+F=xO9HG zLK31LM=*5lgF>uPOzG{su7#C;9g(hEHrYW@K6d)NuRGxZ95lij1}=H?x0(7js8w-lGvqWs!z|e@>#l>GS*67ec&rsT{xR9pDPIQ5y^{iL%t8 zgLLhxh=52WH;}GGHaHv8F*#1|C`+K#<*m6xV4xEsg;@8)X~F(w048NGIKA*5zW}FB zXMkUj+YkjV7w!)h$sH}iR6_m^PhS((Q}ouQdKumHwT`INo?{=iR#pv-a8aX{rB7xQ zK_-n#UyReIs7mTZRp?F-%R(X$+O}o0EiRXT?E6gYLauJg5-GlypdjeBFTYxs6!D?k z2ypJx9zcZQ!9o;&T3(LtP9B3t)a0=GLeXF-EF++jTE7N1>X(8-QTvL4B$m>M6=R7hMT2;$iG?)5a0`v$ z446ZS+0pgepTw$?@t+!EFj;a^D(wmfv-9q~K6k2#MH<>)DG0l36qRgybG=+NviDR~ zPZhtkQ6yJn9w4CC%yi<^3tJjr4(QTXR)wu5`w74e06o~pc1{HMk8l?$vJLi0#!Rqf ztePo#IcbBSl{W(CSY67nkmHc6SRo^5LQFHX1P{{TVxC;DycAXuUyvbG8@62#+&1CmQZ{BYW0K8`o=x*}(;O zSlzX4xQGiCU&PN&8UOj;a|s`}n9!HIgps_mVJfbTQz{KU!!+p~{G%ct5g-~Gi`D)M zB7!0|^~Yq;N2Az9`>~TXyyBX_ZiGe|?1ve;6Lx+?T}TxPLpB}&nU+nFch2Q7!(~Ip z){OO#hyZ8Ukdy`_7g)LtNoxs4?6Y_Rn@#Fvj<(UZZ{*Io#kF(*=8 zP^o2%vnK;7aScZSgG*b=B=$K$WnwMxu;o&u&b@Tdb1sTI% z%!>L9YqFuwa_8c7U>IoZ^bNui!%$_Z=7HrY0#K43=K&P2YiI3!eH@TJ9G_h*U}A8B z+F=5~aVB5PMSZr{&n=r$tmVeYQIF*@aiDT>n+c<@sqQ)QmNa+cN9qdXKAXCO(bNRXWz?UD>=@VFj_%k1G2q*RyXT+!u2_ zcXMl}%nfFL%07(j&v{pH$fn4(RDzE@kGh+m)i5NlgD2SnQM?CbYfeLi-l%fZ5ayeQPjUWE$87ql>`ohfdC*kJMe+^ln5G_h}6``ZTX>jWkLB zS?@wcx2=A@urrDrq2U$L0u|ZU$c@(9X|l0)VbC9ACH+bC4Sa{fMB5`jAvV3Ce=!XkTP&Dk%KP*5&O+ZyG)d@sba1}`)x*U8CBU`Ih$c6}= zJl_xb^;_TYnZS*pDto;P9;AR2oYgo;9GapezfHO7&+624gl&|K5^4!+q1P)(Df~G( zv^TqN1Ve|F9viQH*~k=9>c|A#VzO@~;xRyqvT6RZ(314H)sSXtc`}a;>0>%Ym$PL> z&)YlS#iX8N4^4oiU^)gHc8q))9d{%WY1Alh98ssO-m47Bs&Pnsf>){`kd*6q{6Y48 zTX;lutyg>EyH<`AoZUcS4?o<1S#d7BF}YwqhJv~n{yE1b?yzUcRen{#%3*o?T&IC~ z^*It*O3?CUT8=hbw*4}b77o3k-H~hRPn8lf6{ysys9^@lXeFg%#{9)IS%Tky`}2q^ zmF1m+9|ec=P{VqvV>~`Ee>QN^w-0^RgEHGfai(7ux0;ufD5m$A*&U^Q|9X;iuGgcH1sq&I z;n38|w0+-aQfA?F3RzomwBKChw3hk%GwnH=bFVhJf7?IewUaB6g0AWKH4_8;WS!KU zghZQtpPFiT%&Ts}t1qh@J|8CXwE!u38Y0RORi6$@iu9LlwJO4vu2s)~y6u@OcV+R4 z>?S{8y{I<^8pK~`N47&sq!9*?X=z|o{DyVRI(UTP&!{+yygORHK;+v>%II+)=g{I} zH*{BJM8Pz-qA|p}j|CsaQZ2gNP`zvPMR3VQCF+SU_4{~jK1%R5gf+a~EN07|liMr| z8M zT}gfe89Vg&($q2Y?MNUDkb&?995UXeoJ(enizA6i{yH%bzD5tZYJX6=JUJ~aaxO}i zpVB`q&nUyYBfaxAQ%WnongYt$=feobo`IRiG)VKI_)o#d@4pRt6OPlypg}->k_RE# z3A(Fp^`;mD#4u^C^rLqwV4b$0lE*9?Jxe`%`}37Ki_Vb81P|6x5^wap3T$Avq%Zfj zMg8ZkCOd*~{X|{+o$MW9nuCQCtenwnh&J};k;^kZWOKR#g2thRSpKm;{i z07sa6CVQZDmJ2+VP8T7rjNC{;7$Vo8lMQ1x3NW4T1Q@)SSZQ}(j6 zA7(O~7}#xiL@KUMVlU6OPP+4!PY@j)d(rg@eO3OSUP;@5p^ya9Ohp=tbwdNl$AQgX zf(2%ND^qOqYkDuzI?RW!GwCk!ovk+Oug5_B1|%64E#JmpMeJ2L0wBozcM42;uCJai zWheEWvW?AdnP$4%*YCF5F{SrWY-bPD0VwWbH|eN$@i7wCyedT>i=h$s&(U#E(qC={ z2|~t)MbLsdtQXIU0w|3EAt@BTq80;-E_KDxpo#BH=cix)?%>BUS(h^!@dO|*PmA!u zeGh+rbUc|P_L7^Y?0uG4Fr+h)NM7yx`s>!XlZ+Wb$k9{I=?=Tkj;bdQEHu?E11na_P5{saVH zGtzf5@lKdfZ-8me9sgb9ceNop(B0bbRf0x9DY1I?0U91#;NPA(WrX2{`1?^>)ZoXS zNq`)NRsTSSpU-A{Ppj-O?tg6G1&FJ?RGP%Na)G6w92o{pcJYCuklQ4iDh&?>8M-Pu z3&A5tUES@BPuQd6=)n!WjoB|zPs&Zm;Y#4jagXc~5sug7{dj;WHZXT})eqwib$XO= zNi=6qvMbwX3?CHQzpD(nSo3&hZ5d~P(nwmli@_%NjnvbH*lwH~ul8au%tSY4cwa)Mb zr))SknagjCTw~DPbWeu;JN40UM@l(#z5csg%K1nCPYknKRr}4g<;oOSO#GjCUwr3W zssR_^&)f|v zVYenRNm%%;7h!gGpw`1y6= z9Go4~0kK{<=A*cleasjWgam|RAk4jVzClAis%bZkL_$yk0 zZt*W3Zm;OkWvq#|&V^tL;7u@y4y zQb;K1K?@YyDz|vLrQ3z+0Y(4T^3|dL%J8*iw_j(=tnN=Xvq=KSLSWco{^~0@zfovs zn(GErF^7PQ7pf>)#$~MvPbHFsO0ONqpGQc;eT3hm>2x^q zE|Qu|6eb6l^>C?~jjm?kZZj50VO5AfNos9EskpB&j-%$R`jOaKHS03Fie=^PPr5OY zz6hFwwMs{ZUxVbWrGc?v!qy#ohfvmBVu|=-Bof>tn0r(dA_kFsI6)n%pXyfV)7U}nEztMN7lo&R=0mh9>X1ruXk2~H)z1ZzegR+q;@ugbeE5kMas4V}BU;%< z<9{X-Q)AMa&g*aT2lD{`KLEf9tlQKE)5M8J5;r>)Jd>s9zt+t|)EkwEB)oeVNw9#6L)^VtAsy_+1*2sncnA$km+*uVB0-*!!t&_gX zo!LY=a=MoxzY)n6+P}X9fIz|`EDDI7cFezWCL~g<*C-?KIfV>RnUjuiPEb?8`ce|svN zM;8Ek!em#J>Eg?cjha2)1$sFQA4vK%2F_=*MX#kWx>NGyenFjn{VGu^(IY|bN=D}7 z7-+F6y0L#9atLK*egfqO*9Q((x)Lljc@i{ zwpOz>uIVty5L$lQI^K*=y}%z*uegBw)s9xqPsjwgP-0zn1iu#m2%!sY5dUk{XKAG! z3UT#@Fk#(<_J77WnleKc&HVqxhdmT;5!Q35boqa((mLV_6%>;9AH0G36&C^MjZH>~u3v7~JLzA1Hy+S(Cx- z|LyvrAdWd_%ACy=e1PlD&zol{cf#F8kvv;=!SJ?rg6K^)sGAMI!F*iQy!$|m3KuEb z{Sxbv)RzN3RO!!do%G{fEPQr(fZhSVx2T zIa%31ikjH&Z&O%D3WP%UPXr)~h!sP&n9L_QW0f{aY9#MJ7p4i~!CgCr5%mhH+q0PB z6&89O1?MfC4|l3t^Ho{rqhz#?ojGER>|R-~S%7Ff!$V?elpnMbnPb34L=H^u_kkPu zSbpzKODBSh{?w{fOmAM=bk1F>i;vdPp{(gi$T?)3jc^Mg{VgkapF znN??$tEca`RT{%+zm2zb|7+**KDX@zTlJ0fVd4oakf4fivC}h7#w3zwL77&Tas-t3 zryaFzDIe`8w-eJsnGTN9b;`0J9RXB)7$z06OoGB&9(f2^*T9*8H>%*tulF^lC|~~k zTEC`TV~ar6o4Kh{s5@LZh|XT5QX0mmc?-~xZD?MgRZXSp6H$%2`eeSJ$FqcIC61EB z7NCYKIT&Y-!#g^ocx^xSO!t{-VYTgeS>w6Q(l?bm8b|{-7h&|m#0&@Cs$eB+aShk7 zf#jkvqN?-L*zG=wnYwqlQ2+JiYkD`S5&x&Y0gQ2ZGEND=bbXWW4$Kv+_zDW4-$fw6 zITpU#uIW4doRsINWU@y3pdY!R|K%ob=@Sg#tzZDy)-_G5V2^Fntit5cnqnJ=7ZAr&XRFct=k*)nNZZ(_5n{06b ze^M2Dq#8s7UCPC&SSNlGNriPblQZnu-;}GXDtG@lG-34~XU1|D&6cV{+!U;6Oi{!o zPKRWKpN$WGw|p8f2x1UrDBI3Wxm`k1$JccBe7-9*4b^e>GHe0x=BRSt3ypB`oA<@g z`uA1*dt|db?xo{rI^RzO5#iCbQhfn$mR628$UkXso1A)B`+j<`58O)s3%5aSCY=>r z)Ws+*k>pCABa{0Hc};>LRM|kx#&_MW=kW?_b%gVfEoYOW(kfNiVKiH_iMy7&@O)7T z2qVS}I>BW^);R(;)A)RtMag32n^*B?9Mr4}+P>F|KRVMl zMf6oYe%avcsVXp52%t`&~W_c?tO2Vq2f2 zSN9LKA~P9ITv;&W8TBP!r*jIHz#D>G$)8PALZIsUZS)HOT#TOnTLT-8G;tX?iCI)X zeITZ26|5r|Bco$n0WV7;pg%CoCQay4frMV(@daqt=yE$CK7LEKQKUbr<{#5u7q%oepJq9ww+s4gwF<~lP! zDRUI`%UFrf3me{ZR=@y$zzHPU7&Bss%KpZ|5<$70e4@Clha6*6< z2N}Ccr-&_XII0XIFpajDFB*{B@ZQM88AL19JS7hZ7_}A!SNoj^AFV^szgg6EQO|G8 z*>6if_hCf$_)B|mA8@s97IBy(RXlWnz2&a_4_%At?sH^nsCw6-P&`!?-M!F)v9D3P z*iW00>Nu%)Jx~U4f4{h`Cy^h7a(|C>eMY#w)d?KREA9 zM<6F59x@`>PmZkA)0-SAz#XCERp(!)Qd1H2{&BYgh=*u3$@dq9%2|2B)u@uYP3ObV zMbDS`_=v58K%dAIhhDMyL{)tN=#$iG^ljR+R%|*}K~WkA#n7x!ZCx#Ch3V}*&EFNt zS>Ov!Q3Dx`o~RSRG&zHl3k_7|FmkCAm=9E82@UW-HjceBjnD+nD!R>w-cx~-u(|y# z-P?8;f|!(OIbAoqgN3kCpxpaFcW{`y{)_H^oC3ixgf99{cQj^2cMGY!Ele>k>hJV* zKOwdY+hxzTTK0+^`yBY5TE#eGKC3~Carjem2fD_UOrE#@?vCAv-~|quuu#7uoa$KO z3zZgVl*(gyw5|GJL29l_t+_I7l=kw|)RU(ApnfwXD$dITlS3O0gEn$#!&WToPGP$V zXY6A)hl*O(f3dGP+Lt%?Q^X7uOHb2EbIIb=V0JX0j?n-NrI?v$8N8oFjmrmhEhPrk z+8XNBVgko+-ajQ`%cVVltRZPe zvKyNLQ8k+`rk7<>1POvF54f%0r_T8`JNHNdyF7Mgla?_h>81PcMR)h#ffH4zVbKBF zwVu=E2rZS=pry1)$s_-0OF`p(#yU)eE-%3t$MJ))4c7K$5M?Ot)8s@5$K>a(;PVqT zO8X6Eb!TT`B7dLd)D8?9d%i5uZzFtmf>&a$0hcredQw=Ei>A{c+GD8*Co4Ixwu*Zu zM&VU{JEckM!`!nj_$E{yb_@EaO6i_$FUl{5wx-aeb8xJ&K5FQv7#In**w7Q7i-1^a zR9Smgm?v&=rTmo)v!K~kPhd^p{19O&W)aCK3>`^>yxUD{%>3VwVe8+ZRfN-(LgkzU z$NJVDN+kNH!^o2cNpqqb)iNYxhDmhcW+?XSq92%M{QG z8pazC?|K}$cguBDm?PaL?24P)ZuHwJ3ev9w&dqE)OMupZV|t)&xgWU8=MOP--qikK zhbIwY?dM}OH9sC|<_G(C&WLk%bV^6(osohyJlS!`WNfs>qxS%DcyNeOJQ|(&v73{n zx=Iy-q;;(OFt1g@gRgL07RjZv=^ULb;rHyW6HlXpQsqfvKXnSvM_O)IA-NElG6KuC ze}l+e$`_6u94=Eyy_@2hER(E8JEQg#IC&+=6MpDg_tSb14r@bn|1I#-G2Q=2u$BtrvI6< zGsF_tyx-~f`CEgt_$2lV>NSuaM7gKcwLOL{uO9oSOUHM^tt72IdlVTjtn+X^1tPlh z8i>ewHh6?A0TGkZktuBGE7xzC)XQJPdaSY3mrF&PZy~O1!_R+tRxqa66k3h;AO^!51Q}EW)dSt)XKRP3 zz^?psFd>pUIvc$SD#KzDlDN2hS4T>rGx=vX6Z@OVU_s(k;G2XoJ^w3(FkF&@E39iErPYe7JQ4g>P+K*e8GzGLuE^{ZS3boABbhE|5a?KKt0EX^X z@b_<2_YmHJ@-(P~JKqUPhuVm}sD*@{gkzfR-U=(L)S~Q*ImytpShq@50P6_i6<>WOyBAcv|eOcPQ!EUcfQpH3hX zy;5V-<6u`Os;_-Y;+x^yzoJVKXE$rll`>saY}o?*njHZu!u^AipAsn!QCID~Ecf@YmoS;Vm7ZCq-6g3lm zj0LUC7HzA1PeY5EV8R?u78%-16iw4<30ZfNQYQY3t%94SUPM|0ABkKyQ-q%(%2H~3 z%*Fi{EqXAIUx$aYT;hiXN@J)As%dc}hEpFGMt-mEIF~ibx5m|B3qUYQ>*+|0IEBdD zW%x&P;>L>G zdx^T5{deh@U&TA(YwKfDq7EPk6E)ux-*unSQQ?8Pv@33knXTY$ea$WJ-uvLJ*jxD}d*_QenH{=Q zRl!!(6z%CjJ*#q>W#Dfa8ypkMCORy@9Q4x23sx*FP{9)0fJEw6j&oFr%Ke>#BNEq; zbIW~4@se0+Hdrl_LYCW6kDS3Fq0U)v=W_l+N9*|3OBTF+vN}&qANv#@HY&OfZghTF zKXohbX8es%E9d{!UfiXvdoXi){*EzIeiLvNwEy=ADihE%e-vF6d( zGa~O2OLedV;eX*i)=YM`jDKjw8@$QD+Owk zp1k)N5@E?t!?qV`5RzWr?P^$}*8`J#B1vcKfcYma8!#DV@YU@QSAK?bmFF<$k~K8a zi7Z7|m4NKbmR%SJz^>0&;=fWK&nyN6h7pDd1X#S_!XD9SR}{?Lh{my8+AF{;L_1?d zR8K>nfQ|4d`7%kkz7PP#Y0o+=n?MdfH?gAKqW!oQgZo6i&fk3wpK2wUAURXhZ5z3{ zg5KgKzq}+~c)T=?skc?*F5NVOD2CsqR0o&`mQ+^|20g>iC2Aoi8gNOsOjkFaW#SIl zb2t(nFVNh|_iKAuIusdl&XJ4W<1K@BD&JAk7WUC{28VZp;lqKmlS5|e`VR+V0 z=%kU%pC&rx+A_%hM8wzoqAA|0xC;xCIOIiSVMqQ7A9wN%i$5e0iAFk0fjMne!<^N5Q9pJ)WL&Bg1YN7WOIYEd(;Xv3MM~5zl@u46A zd(*)aQ(T7~OgjTStO*%t>84)q`EYM!tsLuW@VJ@g z+xs^3$?7N*;xanKj$doWsTi%3$3_dg;zD>|aUkYBTbZZir!&*yG76JZ;UHo&e&oFAacbhx*qwi%E zot;Cs3djSxei!*N^S14BV${9#Sz=cf98?^Sv}G`Md*81-2PZ`Vfn8dZMdy5W6}0YxlXChpaE%%L@dZiR8dVH!M0|tNh#8#bL8)t)jo{SN0mbncS?VMR)foofPIzcqq$D0ff7uCHI z4PH17N0_%(8a`uciJf`a%FThH4P?~XC!j`mkkw31f6O)UW4y~deH7AWs`6(0m0x0F zimev?uc+}sPy!7Hyqe*+D2g?)F>B$Wq#Zauk=(8C?W5HeUa@m)rcyxs%v#2HRG6hi zcOwC{;(o4Hfn%w^wIl}zZHuP{)jxeA#mW_z-Y7x(%Dp25O?M~3ZxnVhJDlu|?P?Gk zw>4G|9%I2g1rb)c2Z5~JiV6PMJFG7P@SZ1C1B>SOvk-gAf?e`7=A;jXi()R_Ax7~~ z8h1d%k^zgWPMwHowCbOvhoAfOr%_+%2pUbT2A)uZO3Bp7*^>1jrGgmcfPrYIX@oAt zuJ#h3glFLD_OdY9YfdixrbNl(?Ykw20^%&&1_+d@xT@rVQ@5QQO{)!@>3uOBt*r3s zxP5@_rzfG;Vn>2cZ-5%q;MEg7>}Ki%Y=kZ>uVJ%jH}0*uMI5c(0(r0=$cJA~)0hzo z2@0Gi{^AwXYru-NYxAQbJ-pDA%fDO08#{U%kG{=K+-9(Vo>#~DrA{Hd3whWe zB}&$ZJknv8r{)Ye?Vx+Lp z&8|&fn!iD)xq8Tvoa|Rh!hggqC!-9t9wrINAGZ(cAE-|- zMfpHRhaWLs(qg_vd@AjxjGN14f*ZUC8lSPVE`JJWDna8X@tRfUm&KvEjdI!NvJ;!< zx{3nC83=6Z@!1XiV~XARD$s0fk}4(6TP|eC_yzUS$k&b>f)3-+ z8C0Xt4k^DeD*|r37EkIJH_fHqvO-hr74WGj`v@BU0eO4jFhI%?)09bnFeMCo5MWX| zlf%!(7%6s4(O7_WWK}jUW_}Kwbafh#;C&k|Ft;xMCp90c)|k6!-}3wPX(WsIv!@E;D| zR;jjR!hVB@s%gXF@R=!f@r|2wN9aBGiXtnJOH!zRfyRj7$(j^=ARI@6I{wme0#4xFAxeVGoz`m16Nd2j_MmS`?3VV?OfHf!N4=%9 zmlOTO5khERO%WBQGa!kD6{cYk7?%(0E+W4J!(gzJbE%e}v}GerP2X^m*YsM*%vy`G z8m5v!&rk`qC51lNJ2+;K@J%1WImh3aR5tSsB;8wXNR_)>Ht zD~=(_@g>YJ&A5+BgmR&xd^}ULmJEgk+F?aID4BPBgTf6}5_I>m-rIl;*ME;yqzdN(r>%+)zHec_e<2?@VL4JEU3cTT z`8}c@4n7OMl{-#mk^nZ>^_z__1q%fmvG-pk9uzE@=Da`z7Z~Eg&V&-gHb@J}yKMF} zL8~aD#fHFgdYt0Eph1nFRAJ2KrSGwW&sTc;5yT>H8Y8w)3oc?0{tLbx z4VR6JWk^5`&u`W*G&U#l`*xqww*tcplfDAGXl5m=2RU-q=@9zkAv`KU5YLEa@J*|o zX{sQ$-kM)FI>Pt^M#uMo&llyK`~Zi1VDso<3Vh>eC3bGBWf!!|$0p}~!vwFABTIa7 z1L*>afx4uyhwY$^BJ#q0N_Ps3CntyBN|?HspBTlBFP75r(jDIXMXNh;v8(dx2E1$! zfqD;kvU+EWaAb>zA$?q&1g^#wMWBs-*fE5FRn_>NpzSQN7twSAt|6I)ODwP~eWbKxec?DcJJME)wjRugB=VZvz4jQWS%6ai4wXFWSX)Vq zC^^3fJ0v;t;PRG;2`})VQ&%B;iMnleu!p^Gd1ZeKVJh1bM#2jcg{xEB165BcD$Q~u<$!jwX9>0>pgN5*I0 z`sEXP;(P<&JC}(y5P-fH4|LrA8}vtX>(ohYSQV&Ks}A2qj##I}0U(!lV6|_jj^0?RC1lYY z+P9fIgA41kHiSnGHpWG#QyT9;MCABOqOh6&4G-m$HtG6>v=lX~<65o7b?g+cmcMBQj@FtioO8HA9EZwfJ5q(5_VW8OY<*jxe|X-iP3uew^rCOx zh4Os3A99mW!kVv-MhnF@z4lSN#+JV?8LO+JjY2)8&=eLJsz5~zr_l1xL=87qdy&6( zYp4ammp@E#jZu(ijvSaROZ!F#`5Kq)k#>Aj{g;In6VV7mOH(5q+@FnPm11p_Vbxd+ zXX8!ypH3h9tnF4LdsnnOAwlAJVXy>0Z7pfNX1 zn)tjCSatxYB^?aDQ_C5o<7&!%>OKrvv^ zTBk5Y;PWYws{dhA$fjVs0G1+E_hI~@1BrP^ofZ_g5o26#D!V!q0ngN?m@Bx1a|#}3 z2TM8vH?>i&BMt1)LEKq6HKRn)a1AdwLjl;uC0^CJ8iHS*lIUi(kLvz7ei+tyZ& zjBM|`-y=m#f_0u1%yZAps6WfOZ zt&+RO{mh+}@ZJKN#7nhiD{+nqRp<7|z=fnq(F}#A$u+?Kz>Nd@zg5|V?2A+U55r%{ zM-&fO#cx9`{E9T(@3o4*9%J`76Q7*dtmFS2#@7fSR~Pqjd2gk za$rr_!cx;tq9Kc=VQmanxKC{;`nvu$xJ zUZ7hC=HNj7+Ch5I$dJKKi5<=$3(bt5QWSi8j^DKU}6B0RLP-u$) zAnjlf#%Opq>q@~>Vm3P)Ne3wNw0TvL2*86DDW;Ec=Y9q_8SJ4`+w{Hcz)a9f3(iAKn+4h=e1Xl+v< z-0dD7^bS(#t>Y6x-8T4Qd# zVJKMT&|A~YwnhsP$%DakUVGL7SM&vDXRB-Q4#@R@pM9i`hb^+Dn&_;@a|CE$>ook_c4o+tJBa(IAvt|&-9gmR%$ zs(pP1MsV6xLjJwi-qKEaEdLj1nZ%>vUG{E1opKXn^qDV=u5v{R{>dXfNP5XJ4nZmx z=P#Sj2AJagMaD>nzrh~PTjtLq>6L^;h{wXMLiIW~{<^REVo8qd_ymAuha`izu)K66 z_Q68#LZ9u}>wVM!HsIXZr?^ODPZ3A;%pf%#n%YBh%`=Sa%HBXmPull;t-%egtF0%J zTjaQ@-xv8)W(P);8wpfvyj&-wF(mYn@0L=}%Ua|C7=i}FjZ8tUGGcz*GhpJ2PpN)y z|4$H|K17VeqbKd>>n0!AVWb|u38tg|GS3`s5T8sFI;1W^Zc!9QwgxYC&b4jib|Ek7 z+8MXfr@fW#)yWDXO0O6bdK}1^Gd8a?)nP{nt$6g&f$iX6Cd0IO>IVgyjnTTvl>~{e zMB7WyD&1=H{nq1+3hW}YS_oSP&$SkcduM0Re`rE8V#jD*5G6mbCP@B;@An&#j)c)( zu0qRTsF+wb$xNS&$~yeGs+Z~@9#l?67%pwSB=Qc(W-dy_M3rJ16fSKt80iLxgJgM?6)m*OFIiF`}M zq`wSM({XKpX2)}4EQ@TGW3`aZ;I6TAnzgBPtpkjvCPLi5v=Bmnt zDgddV+C=G8$o#Ftuh#4V!zDpuTvQDiPmLX!aCt zstm6E4jPNNt{!*l^(3Z|ip%jAI454{fgA)*LBoZ=@VPvt`1E59EXNj73fQH6U;ciOz5acjtkzIK{3(a}+ti*YZ$b#( z=K4?MMFo_UKtHuL7sCH_qCExFVZ>Osb|7!FWDg3fFqhiwYj^}lvmiBD6fG0k=_$^M zrjvzx^AQZ_w&b7t!O~Wfa9fzA=SOA6wRHT1+}Iv$@niKZ#$4do#j`JMq)VA zvp!$wR978Rb6$aY@X2|}eRp=5lG*?d`x%ese=moY9e<;WC^qu7euH`bKW#TJj2~$t zBblpT92~+m9HVrmoPm$iCYInh=0*i-NA0V392z(}_DqI;s!kAT-CWx*rN+`WJ3$?M zL7h4FhT16<&4pMvU#e*stgnFZMRZCajqbY2+xecgxJ$R}c)(%c_W&G$?>JI28n_*( zM*ykDkmNMSHAK%s%iOO~ltDS>XphBiQ3*#iEf#?;wP4c(E?aD}3t}+UWF7!M?mq(b zau7F&Jv3Zp9^Wu0B8DRnd)zwfk!B7MJ>gkxSD3awDhILeh%w!e3$`H^AG;yYM!a0e zh?aSe%LwJ-HKruDStek@FJ06zVc9ND?fDQEs|aDW-$j+CxW{SEJ$_gQ7h`m$+6&<6 z^t{3vwD`uXNjrjf>TDE5t3BDp)(qRJfBTeUEd3c^gjoW5xnLRI;=7!C(OsInW3(RA zMIY<{NVjB5!)7x0-=)9OM1YW;si~NK@U6Uq)DbG_eNcE5X%?fx!AUa)u0BEQ;M-Mw0jG;!||(l$>;nkRKZf; z+5XtI1m?Z=z9sb%@f!kt2F)I6#9$RqG~74>Hg8Tei_1)9+YMO6JpFPu6jTRuz2{2< zjdhf3RNE@%up(RTjDJF5hjS6i0sQ=?YwEcva|AWV<;A}>unL@&RJ8#wV@iMsZ}CWn z)-yqb?|+mN=jkMW_S|#ub@=T=p1f3NsBO)9Jg@Zc#uFMwhc&c^>wb>_t4}W@Tytv3 zn0VM2TXFZfoZIMsAgfLzYU-5dts+5ys)gi~Vw*LZzQL$wk5uK2Nc5i$CIbIGf7B3o zWFdg>w=2^>gOLF_MB}MSm#WUFF`DX}8}x6xUcpugIpTflVPC1Kx*Xd1hw=hX+JUuL zPpDZ`c97-yX03o5=~;x{5AqUVcAU@Z|IVii{lLT_KnefqJC|HsxXY#2K?Z%Ojbf}! zoq32qd%Qa&45^*WwFM!eO`D&s> zZwDPefDA)Y#q?ec9bbOvyO5tYMs{JiNVUW|)W=>Le1A?272z4W zpTy!F?bHoB`io;?m{k?JhRK>5uJc2cFD{ln89#6L%1*(=7vduU0)z>yPqEeoghag8 ztr_Fl%xnQSkxWRvvj3N$e|S85E%o-Qc#qPNrlSR3gB{Yl+HCOQzqfPc)4_2vNc14a z7dI-Nq`(jV4@J))dzjFaTZ*!pc_-;Z@E74oiK#YnN$eSQy~pu7 zbh8`WL(Ka25@Q?_flX~eB%QFv0gHqyOnMf7)pm&ENDSD_!S&!o&E|7y1|Wi}53z66 z^;J)SAcV~tPBF6^bZZMb>_Xp0;xIeP^3|G_m4ev(L#}J+J*={iq0YK;5t{8;21^jhS_MWMb)ofz*I@(c%|5O9^39Jy-ol}v0p(D1KO#LncfWH3< zwXv&hVv){Kwo+K40AxIkhnu4rCg1K%ReZctAvY=GT|@d9lZO6Gx8CqchJi2~NW(8l*a5Vg@? zE2>dSX4;CBl&on@d~Jm4N(bq+JaS%~XhVrJDy(3d%@@7;Qvo9Wp7w~ml~Tai73|>D z9bgq^KZVdv1|bKBHXNp#07B%pbEeeSM$rL`3V{;oV9{{8{n2wN#|~V*x7odpwIAxh^^`ah)xn%YD9XIXl%|$&Y~(e zg@~!vz``eirkDJt7qnK!wbx9M<6>ikFv4t~WQit)_vQ#%LtbxgbKd@B4B(oy#1VcC|xE_aE6; z64~GlsxGQ1LH>el{iLBYt4S}G_ z{iDCwfq7sp@yz>J`7vvxX3+i_d5&YZ?UM#BD|ag;%$@Q~=-?Tgn`MFMsRWF%f`6pU z-g=~BQIfk7{cd8JCswv}bKox7NN?1`3yqaJE3zc8M%b9J9SAo?Elgx8w+%Mp zqZSO0yQ|b%Q55E(WrbqDjtOiSmnjSvZnul%aM=!!kJbsz%uVFu?@7mKx)(T91JnXc zD(|CdVn^YXo|NRfmDH4U;a{dBp3u%vKsURJCkTtL2)66$y55x!Iz?s(Plw=&}M z_#vOSx%$^y(wQ=6x0rTtXl1Egf0(6k1J&$8QrhqhEx|FeJ~cRkb9ME{{doYw#~B3KI@$wpw*Cn&Q&l*G4k z^8~IGVT0b$5HTwzIV8LPd2+XG=rSyG9D(I-WO$`7fQj9*mntw}G5Ua`59mBv;V}~6 zEM8x!t^8wPx#u$K@Sflb5=Nz3;3*7n*Ala_b(9fr0&Yn`0sYtx9E@Un99ZJO)izY3 z9fyD4>TZ^!V2??3T?&f=@;6U)@|)B4{UMAv{vYYZw0}_vrkBC(vDK>@Wytc^Ar_!B z0<3fS5XZj2l3G*qmf9)t(n-{XU+%=Y#{7hKh-BbUk))8dFWs!nigW8zphiRw6ElGA zwXEXfOK_{c-JMZO!}7;jvN~$vHudcAwSj!QaR%%qGtshHULx(|4+_L98-v}ojDXGZ z0dS19F|}PO-Y;MP?o&w)20A|}64Bv+eI720D=0T+Mg)h_AonV5-hUgkEP;mVjvO?b ziV|`tNxK#NAFf~5$@mR-iJuvO8!H+meSX0{$!%a`(2QPR%Y_0NzSxH=EzX)%hIwG( zZpKlmXS}|R26K2fdu`K+1|njQ2?_7$SOgKKL7tjcrk{KM#{K}|Q4@j-Jh(xMcZ+36 zu3pvViWaPz$+cqr_a}+0S5zq<$wTFk?jUsS?Ie<7fX0bX7ppR}$wl|?c!HDHWM}P*C0a~1?oD@;(x!2aUiL%dYfrx_D;7{FW1@;NqP4W*YiCPJn2XX}=*(GM!V+&Aqk+u}_) z!M49sPwH~l{Y^nNZ-s07p2hP^rS%_S(ySDykUuP@G&X3cR_BSTO`K;nppdA1@Tksg zBaV@jFV>#in;wTYQly>9BRa5YCv#Vv*v#sE$EMc2xmzXR-Feeqh7vxzOF)^>(<<&X z=rr(H$nUa|eHKY2*uf_rlN(T?zJM+$gk|=m8&@c~8YEqL!11WEGv@}%0Du;hlkZVf zCTC3%5Ivw5swvvS7HY^L#=Og1wTV(p60N>SodVBHaqN`n2Tz4R;qDY1#goCCifnBy z_@1X91Y1|4l*yxEb8)jj0 z<1od6ztQnc?fei7Mzw!R>*`X30-w$eGZ-bVB6XHbk99esA}Aa1Iu$9<+}Brv2HE9g zZQ6*6OHo{M-23q&&g{smyXAM%hkWo(x&3Z#_pLBvS(W6Tfi{9Cds%ZUO2u5Bzeq)I z0Gb{G|BFNqKLv*y220gIy^#%6Swv#yU>x%o9fPFCCG9CY7q+kXtR!DVAD+k?APOzw z@6%Mo?qeA&Df=&@@wr`l8R`m=^$Ta|rqO2Kv3I$%?%xY>P&)9TckAVKA!>XRizuNX zUk>9;e0bm*K&Q>Xo-MN)$e0%VoAJ&9JqGopW1wc((EUHD!W2&rND(xZlwx*}ORIap78>LqmtYK%Bedx<(d#W7l*RbE; zB`Z>}gHV^hbu;LJ4PA~8=^|+R4s6Cxmvs10oJ_fXe-_E&KOlu|n$mKLrYTWB(5UlS zLLirFpdGbF~5z8mKswSJxO4SS6<2^eb3R-8}7rNP&q0 zYc}pzZbX6mW(Ktuwn9}rGPI4hn*ahf{A?RH^0n~SJq!J{PuZ?@`|yChf#NmPYJyJY zOqapOcQ0ggS@oJaepMDY|GS%c-(!+|9L>PF*Vh^rG=g+&`m)hmox-y_Z?Q#i z&JUSrR@vXSmmE=Zhe3_3nZLF;nKy`_hDeEVP#&c$jHREwe_qr(13=_nHn1NJ?j}{Bj0Wq4a7#Jzm=rlLi7%Zc7sfT&bmRw8Bn*~9jPBz=s7mp26 z#>^twRivwiJ`9_0`uv+fx8|uD4#BmO6I7Sbb`;_mO=m+lT<_*6(a)1`?QtZLZtknB zOGp4VJlkft5oEf}wLf7liJG=B%efcVU*+^C@wKsakp6pa1n z{qx^}?7;`P^y7GZC?G7HCLezY>UmW!a}UQfPONIY zTK0v%A5t-d#k#_>5Yl6G313GW1dB_a4Qhhj`o-eiS+(&hQ}`FsC-$D_XOUGAgTd;c zq(Sh?IBMrVntnIa$PtDOOY1uGtf%T*vvj)0ME0mxZ;A^HH%tZy!VQJLlyax9G(b!4 zdBBI^@IM+Jp>nHJb?ox;{0cm9dD{OlaNCcHz<&GJ!-kG$)D5^ukFIA9qo-yZqjLpx zjG|D>d`6wVyv-OIxDh*;B!Yl)GFd1V9sz5xfQyunFxTjmXwG5gq+_`?V77*8K(zt^ z`lE#ks~I%@W|L);+lvG#%I^v7Gc{Nh;BaZ)?Y5VeM+k~W4hX=Thg~G@R%+$1Uh4S! z=ha%r%K_&RD?Z&aIF%ZDb2Pk-o+SYPKLEf_&ehq2IAfBl4JUaef-s$+F9=2!!&f=E z_y*kL=LJkIeoC*KAcF6M3dJVHD)q?|h>xAvH93V!dGQB#wD35H(|68u(nu{>is~#{ zqjgcNEl9gb57g1W_VMYqzB}2wO*J2o#z4I@qaio{g)=RM_}Oz|wQ+JX&q>o`^Y7I` z7JLf(d?MNPChJJS5$ocJ=gfhK7T3s6__=Xf$-;a5F_;#Bn>80-S>~D4W2viTF2S}oGKA&d=Q&2>M z!SWc;d1FXRARYnAEaFc$lhl3@pr@ut!&nVq-}iCK$YsL%`oLs~jD%NaIrPH=gr5VU zenF!(S}5V&*PBBNekW>Vk$`l_L=-rKdJN>eI~DgeNm)M`Ix5pj&f{*HR{#r&=RZxS zPbB>M61@|dH_1?$h49KH*np6(vf<7TyP zYz*F&W}=o=l@`bgF+)`-LQxc1_GqHd@(o!DsEY6AuVEJL#bHJVewfXxr=3(Xz)sYI zQt1k~I*|+NHzve?^+acez`T-~RZx)z?m9mNskfE5Nr-TA0pZ}O%v#9IksF!qhWG3& zL8{T8GSB1CuSb`O)DlnvTz)4OEk=Qfs+g0;#D;a@%-JSR5DLc_rcTOnuL$od;Y-rR zC$f7Mfx78{P0WR{QyTXX??kR4}~R|NNA{l^r|7v-OsGosANWttgRWi;I41EF*nc zgMVN073GuuJ|C|JZz1%!<9OQwl8@S!{*K-gnBW;~5Gx6O6k>3sG*PXWy{EII=y|@N z43!@T{O%4?(KG`W6YeiGLofP1Z&%}~^P+~Z4P-wtj$Gq%5(N-gV9#c8iTYUmvITp) zoF0(*2PhSFkBi`+2um<5T{4zpXISg7L;u0kz$Hosfkw?ZLm3+f8WlK#gCz|E4D799 z;LxdRQWkyPKBK#ZP=UPnaOa@B#WvE*Olq(B{G@dMgo>LD+*MPt z#Ls}qF+RM@RIGbqYl~Np`f64r_l!UE%H%XCSObE@PdBm<#MWZ_jMZEY!XxqSEm;J^ zfA5kNiqTAxOEyeG4qP5dW;8PO1p+P(KIhyxtyd(L6BTcbnU*te(8Cx?{|fTF>eDv3 zgI&3Bn)_JQ#U~Lxxv+XcPt|RGe>=d`JXCR3qDE^Kvyq}Z$*Dzsu&4{bW98!#Ie+jqID(BOfh(s2 z{HiVr)S0E*ghL-QR* zc(1NnqS$Io%aO%gMs4hIY&WwY(}JJpRiGlnk3zBjlLZca4+ail0yJ`6AHBKA=s|CX z2UA{V`|0UrK#gBxI@@IXrD)?Fl&&{fe2-wNt}4|+swa#_AST4xCMBVI&g|sav-pnJ zpA!By+Zp*MR`Kh+4%Q6Svo|rx8w$S>{N7@@%5o}q&AJ_A#l*+l^qXyxm`@*P_n3_r zwdI(6IXbX!q7CuAX(JUQ_rA0zJFcJAtyZDcNHry`&EB3T`FSTvJ1Y2%OM=XOg4)V{ zs~ywc%8|)VI!de~^{DK{n*YuOhzY+DEP@8pi>j7RtTaxDMZIIv6E_FANk{$NKO|NI z!cFDL|Ch7xC{k%Wq{25e31ozs6@H0WSyyN2Ra9Lf39=YjWVdBO?O6~YT(6a_nA=kH zWSX4R12*mBUOA!7Sc+j&3(kNCQpRwzCYl+wpv7BVDp4}WGKGY)@^f09Nhu>F<T`u)3$3|Jc9K`aW`gUyo?9*Rg8@42WeA) zYkhO>_&EmXnFqHXy1tZnyM_b<8*%wq&3lJLmYrro7^yeO#QFO4%y@Z(A-Ez6{jJ;|Jw zg4eb*jpQH9Pt90Y9;HY3b}Df7P{@G%hI_^jZfSwn0WrjYn1X|ril)0y=HOcO*Qf`T=8Vq zRvwxAcGQ$JPV?&i2A|ej;nwVZio*)A*owu5W$s4RrQpPzsng}E22}Gfh9QGqNDS-0 zgNJq&5o3Pcam_G{A2wf^qO|k)U>8rV=3N$UqdF`V0rWv!sVv(a5 zFPHw}?d0thJzxVP8NHVxUNN7hj#SJ7sq>!3&~{>UWxVEfLAZj1W8DRnm($Lu%33=} z`Co3$E-8+d+jMP@-QMVbPYV8Ax{@~1Oo*-HvESq}$txQB6SO9BumuU3%&he` zgz|MU?`C`>fAZeW(oK<0Gywt#bt-awNbR;4%CD>5Fd-{}eJ7jg6V-LIA%#4>3!xTQ zr%ztoqVB!!^`^jW$o}zKDd=EtCx<*4J*S{u=02D~vf&sY6my$Y4;jp&F&&401PtM0 zN)(rFS?6*8h8GQ*pSw|jHR22yQ3F;qDvhcEpy;nR74MTz5l&aZU!CZ^rL%-8`BthVtfJ(Mw@F!;V5lC8EndQkK1;*I0QLHNM0bC_l=L5 zso#pV&7{I^fXM}IqTM9i4*9vAA&%p$)nw>%v@aDL^v0w38yyC&1UH{rchonm2H)3XmJ_h1G3tUn^S~hKp)J`BNuGej@t9-qoIKiK1u3rHK8n zlZ^xmAU8#>8j0LHYlfHi0B!DiKjV#9{>wbUD36pO6EP@aUY>}6_caRJyXRWfqWB|> z&R^YClpNC&b~@{J)}qHU|gvq$;;(zFQ}qDrKEYA-#f61 z=0O0z8@w_}pm=&0w|hEagVHs($sYgK-hQy)BT9bnAgkf#Z&Um+FjKbg6LLzWn~KnE zob^{gQi~qk^~^p#US3kmAANwAfqh|Uj-otwC18Rd)*VAMA6xgNp+tl@(UKMI1*Ai9 zL<+3;{cVhwOOGD5rpOV7hVCiRYqfX!DEH#q7rfK%@lt_G_L>iHjpg5YNwZ=n~v%}g4vx7(AH3O(z z2N&7c)9_pIXD}H0xGp)#=uqrBd$Ul&F3Uo$dZuM|q)t4Af)~}3qP;+9lD1>A;;g0=Lx9`ekj8jt!M#ZQWOzN5t zq{4=OxE@-6cs{&sN=h0>pY#qnBV@Pm>~fiil^MU(!K4yfbI*0ip7*#%@UDFnrzZZw zZ`t6SYtcNu>FZ5`zd=BDOOh76^Kv{Uj=%z6J1tri!dLXc9!jeU{{q zj4Qc~5`R*EG22yLw!<}G`5;ap)ZM0=CfqrQw<+kGIEY-1x=@>x5G4m0%V6=(8Bba8 zy^eo8fXK$?)E-or95Lj>ydi9^I)CCCY1MRz>lwY_L8yr)NOjFy?iwa)MmviwPXH! zYU2v<)rRQKUFaxL9v6B`YiN#>fn_nB1k{y5^J#bD~y?HLQTPr-M=_gQT4G+hGs|$D*Ubg%7|FN*2%0%K*3g{;1$O z3ra&?Q+9IluV>d+ashy-Zw8*GuKifh#S8Dn9nP>>K@y>D-Ookl*o|8mw{q$a9{3jW zt^71u#ZF-5!G@aU5o$VPMb09v@uqO@J(?jI-B9jG-N@Cz|1+!ubVpVpZ$=K9w#(Fe zwnMaoS*Ts^5#guBZaxZ}rK4l>?y+CL`ABz>z`mD~OfWRv3*h)iXQU?hG`62n( zUFrEgAkvWiZ7)38Rqu>`fry%}ZZQ5;DK5Z$;!8v(RZSD7_b{>W-0t|$(2TWi{SXgM zwMSi)rB*;PVEpF9m%j0eVPoJF)l81%Fk-#7Eg-wts0}WyP7jr>ODC?CSyglMNr6oz zq@pj=0NpLfFH8W#A)y*mG0qK#@IZk|8O9y&`iC=GtmuK4oX2$R+8JipR0$ENQ&bDA zdLujXR!QKkLCriw@|y?aPTcsn;3pn8>_30Mv9_AIpP!UaND5AE+`tGU09L7v(PDiY zNQSX%ESj1tI=iAgs?1~t40eAt?p={`<>@obAhYyCNBAoLlY)I_5!|Vf8_uD_?!xZQk(?&wL?*u~ zBBpkl(K=rmumzn#xSm6W?BriaeE#%{*9{}kX$rrUqWRqB_XZy83BT!{w|RTI|7~>f zmCSDk;v}IOygK#JB=MnE8TGv7{7o$eyG5vh`CikZ)*TCCZuxh^VkLZ0+8Li`1K4 ziLeouB$799&W-LMMwX$FN`mI{xlZy>QYSjR{ijq`D$&;RkC{Dw>B?Hty9mtOPU>_G zq(1H))gWU?;=cF;@5iH!jb}HIi#9iAg;4zZQ4Dx8|rWQJol@5^kag8|Gi~A zD^zG|oLjGYnE&pnzUcc)n?Gc$y&7ecUAyhR9r_JEZtI_z!7-dhd=A!t3ogJjesb4`Bm^I+VOg|=vh;cX(4pGS)C zFtwnoMV8FDM$r5nU~E)5fBrAaAz?CpaY!}+NXgmaNfQ4aJr(+C)b@sUfvu}iq-X!} za+pZeO~$m56OuBK+6{KYprI2TF#1Lho(ZpvEpO@|I|A+yu-K}5By*$Ni-onKbjECD z8$mU@P@$OwX0mEu8u$ClJSch3sjZgX<7C)C75r-#cXYy;$Fxl?sj``587VfCJhvvGUDneXBR zKB+Xf#WieT&99wiorS%4eP|@pZ|B~VYD*tD32NSWtB8qvTp$*l!*xVYILX`UKaxm# z^RAb1Y>5%ys!Y)w_mB{2qJASagZ<5kRUv(0f!FkW)Q0{z|JFywB-tsbl|R z$P-~s9gBl;?1al7Z2l0E6b+rLsL+6=9DOP}BrkNvT9S}}>9iW)3ZShMSXIt#`PDmO zOV^w#?p3oRpI@D9>o7>qj*qQMpAB)H|q_mmo;j7d-3!?L-L}dtIn9 zd7fzJKy|$Ud>dU4mJko_2M;ScE(7|fKzY(JQlVh7woC@s&%HOy$D~R^F;h`eTiFQ4 z$O`b)3V7gpL|l77QYph8@Q}IlksMoeZqS^tMTh4a`=L4h~&jqzoAxGj{ez_A{fBXMw1E99T1?$Hq1)T9`a@HvPLXY33 z{a3X_tYVZPQ72oJ{(W@)+OtdKrW!kS9)bFsokWb=xrM>j?98`uz$Ie|Rl;YtAJD-Y zBa!z1aKeLmQCL6vj(c;eJIq3J=9<&fCuZ5M1nBCtYi`1KQ@7OZs^z2hT{iXj$XD+Ob@yuc9Aki4h&>bU_5U0VJFsTxMsf-Hx%!c&jVH*$ zZPB8GMyJ9!&TFw(x*=d2EEw-9y85>of|i}>q#$GZ5ejfavAq<{=Lh$mvxU*9+cefMN;GL(Rsj-&aD-QNSs0rBxyoKk@`9KJ&R~`i*yq zS>rPy7M@oj$CV+1RS8N;RPT#Lc^GK_Z^YxT6=BnZ^-iP>l3){C*0i6nt0m6V^o(|P zt5q$JqU2Sn>r{!|AZ(6b>8}r~V|EsV(CZd)RxxPc7{&M(A@9F;!^aih+aOtNq(yUPuSb714L*TWF$9?fs=pPTM|_;tp*+ z4G8lmdpG>7i_1;4K3xeLWT;-cF)>Vl5pZ%krk`uM4JA)H#%e%}qJAZsj$J-0enz!V zW2S-7DZXnpUBXl|N?rAf4cUnY>(j=ahbEIE%nzo6Nd=t|+nu>w!5YotPK4 zjyxq|Y03Dp@(3v#7Pagk4Rt*q>0}7R;zLR;Yd2SEAeim$rS3TDipxJPU*$)>*~lgf z^v|yi9Ak5OwGdXx2btZ2B${9EIH3`lEx$|jUTu`6kSuC?A0?9orD%WgIelU#vLwol zY?qjK%)+)C_Rr|3A^`v7D%>I+oI5kf_=h;bgkT!Nh>g#A@J$7gkP5PHuj4GGBDiiQ z2PP3uiiPQv9g>|$P;BCPr7=j@yOdp2x@K9Rv*#;6kk`?h%gbm<%k!t%qq>@%-D}+W z%?5f&;%s4{LQb+-#q#dlk4-h(`S*e>h$2&tN%tkYjxb zwjaF~NiB;SNV9bMycKl)_vxI+@*}H+oE1xOyL1y*lY{_kokdEO@*=DQn6|h)sdkK| zkVN?%l9eAlE&I>&4`acm*)wNmS2HxRGd6#jcJ!F0!^C~DvaQMxB6u6u*YEmzSU zF?+r8LvAS0PxAdLWo90ghkegibwiPAqX&q;awbITln&^nCi~`jx}AI$x)BiH)&j3x zBp~%ZyB6{ujZSp|4-^N)`A>T3Wfy8q`a$WI9mt^m)lul7jSFfnADPNk>>@+qWZ8+m z??Q2tVFE=ppaf0_9U6>)fg3W|5O>&LEu%g?IHXtz~)>? zyzlyA@0D>GjThM=clcbG-pSy>{q5g7ca9GGVw(6Hj5a00;!>>ucAj^E;apx7^;tD8 zaRBIpAf^JOab*k!xRWZZzPE9{3*rguO+Crv8)@vRy>5nMf@K~Kky`Kt1T|O2Bp#zP z%VNi)G>Ha`)>o05PtSPdUc=)-e3`o*oL0VDN1)3@B?+y*E5gO81<4HJ60rA3gsYB9 z^-%mB`i*PJeDEk&0VkjIZNYJa%@UW0d{9CzcIJYMgd;4Dd4WLj->vRd0xGVb^|xXP z*z&oAInOxebbXe<9a4K?y^toae&wR#-45rFl_3$mkk&v$8uy;7t8sOfv5C(ymLSn9 zDBv>PLrBKGDEN}WEm$R|`H9?~>pv?zlXlvzVe^z=EE$Rk%z*4MaT_?{?Jht*BXGHL z2Tq_KP{o{rniy?vTo4o{jf-=sxlQ+F(pS)gs+5^ZUuaQd2y``X?SUfNGcm$3W#!)Q zr^gs@SPSh(QArl*9)@>^f8gSVRVSQQ36e=uEzXW<2WNBuE^2#lARsQ z!QSr5!TJ(kZd$Eir~i&T3=(}&OIrd-R83l|;Q%CYYlc`gJxrd|2JgWcwM!cskP0`&ZOnqPCyYz9tChz_NG5tYkwDW5p)Ej?ygI4{7b2{${B3 z;5t`V6Xt!bz2u$zsgR&pWT~YJA|Z2DLlKM$EBk&iF6!yW1>_82VR60sO8`a}B-E+$ zM0AI0HfF@Qd)aau z1gVdfUaLzB1UwsDwzD)kfY1Dy@g1RgKI?R_x<}q?7)5E)ZOJn*=AmBpVz0Pz!q(Kk z;0j-~+rW=v!ti}@!(>mL$x|{_<9Ij&@+<={7l@#-ay-e9!%*|Mg zDvNw$8-~9{NC0_k@^!zI_N?`iztK#>#(wLzX)RkZTtoLw2 zD`z$lRcV09z7>N#Tv0=|OzHtC>VWgKG++g&p0_MJ`pZFLp+vnA+psh0qhbl{gcM@@ z$MaTP4x$W4zfwOjgBT5hRP;PesQ@c$0Xfn`cwKsUs)#DdDn@l)>N|(@Q5rCMgnpBdq(HYam=vqRI)lDZ}7Z%EkUyKllB?wAobUk9egtF3-W4;9?Xhw`+De$=y7#Qq z4`xexUn~-kN=gN;)Dlt;y5Y)z@3n#dted!>kg#-sZ%El8ml?eI9^$pVVrpy?*t{%e zKB|Vlhx5w~d6=<5X8-euQp=+bacy@YR=!FiFAg%c7O0Bg4y1bPScLbv!%h_myp_^| zQY{$CdcmAb_F8^u7DV99crbobuE0kUhC^sss#B4(dD2UAY+XP-I?mxHjf-@1@AMT+(a*LG2s^q@u(K0IVU zp)g4jw32&s4`0c8Qc$Bx+etbvR4oG;HUWKE3HORiuMVH?Gz6#doqdYG znG2Ly!ecv#==v*Pn3L@ZF2I=sikgV=&Z2is1q7&@8KwCrGwyO`&?JMNb=@t zsJJCpjAl4D_AgzUF`yJhcwUG_#?~N+sYu})-Gf`6Skv#a^v0heJ1~EtyhqOg#j?c*Dx{!jM+v4umpCVM8?c}B3QT8cd zzFu%i(gzgQ-EPf2WfH~TRn_LKn&p9YTT43RB-y(qL}Wf(haHG(3peYZko8n4CvKxZ zYmI;kQaj!fVANA#xD%mo)r7vT?)m5KW7dHo$}8%yUf%`h>IRRe$#n*UskHSrgj!sA zoyf6WY?%u3^SZDW6hl8>-E$p)^WhGFlBQqjB7eE;ML`H;)=Jb zPI(}+BJf!m%hFw{$j|9bAKP`OE$MPpy`5fwEj;xiytZ>+sRG>aktoj6!m=Bv=D!@@I=@B9Br> zE~WiZ)-e?Y-J58e_1q7j=x>Q+tU5l6v(LRo-Nl;7Wep$~rbnB~LLhh6mCqQ`UqA0+ z=Dn9PY?sc!d>5Epm8Uzm2I=JczamTAiNS^xsO{NxT*;``Z#2dksL0A$us~_uUuVg# zCs(UV;YY3y@Bg{y&A}EtF$8YiBgmqT;h9N5OyVmn3@2z?%Q~Y~=*qj4o220OmK&1b);VtOoi4Sv6nNb;c9`>v!>iMl) z56$BKmjJ}_6rxd|Z!C*?LBwWIK#Fc}aP=9C^br^$+4rh?~*}b;dT@$5DM_so0vgyfYSx z`9$nBS|`@J(Ex)(bAVM3buHn79odH5*v` zvs6DtS^km-nMv7E5=-UY>QYvJA@hlpN#VUd0{B+_%}P@v@4B9{oMEH#NC%BXi!19m znJ*E#E8WCv?zS;L<*zYRV!$5L%nDZo_=S%{gqY8H0=Ffh4FaGlM&*4*kdv5*L>rWa_WdM3r}@!ku3j2{ z`^2Aqdp^u6wUt(J!?0jg?#hK~)qJBqX7DKt4yT`ZenwA7*h(9Is`;pv9=hAFe_V4+ z<#+^&Mr&3b%kUF`pk1MMuTx}!3&>;zU@xgj-U;9$0v5PjOu6K_P9|a)6%~f(J^!H8 z$%ph=g*H$IQT98FL70ft?7Ah*QqetJhT(kn7~L3V0=$Hg)|qRs+}N=aRYkdZbm1`{rJ+=UF2P0m9oYF_Dd>x^2g zl;A5I1f<_1=nf%bL^z<9DqVsZ`jh>fn7b(Z1jPVME7Nu(7*WBx;-48W(ddk0EKvM*% z2W@T3r;3Hq;=ln9dkd)Irq2HAatG4vJEPs8Qg$_h4;AUn~14Q@l{GC)(~*{r#9FgKi@IL z@Fbc{4OEC`er4p>!&Gb_%Dmi0Vh1rC-5=g!Wh706uYivgt(4fPK}hpJ40yH}1`g^G z0gd5!T2k2%ZViqTk`y7RWF#FHFhs>2#e>h9h5lC-gaE|C>V2;qK;0V1aJxuSg5uxQ zewl;8+adW33_=oY$ojqzbLq3eOZr~KDf4;%PMc)(UXhm+fd-ftrj-MVK!0(1DxFC5 z+`WjZNt*;p1H?8>O8`<8x7Z3*#l;>m2oxD8QC-aPcI4N;qRMODe4-dUf-C7xh zECM;_vvy4{WJzO4wi*RC1PBumgJH0rg9d)Zb(h6r6~BR~S_D!Y-&u&0cD9J&yJC!A z~7;NRsG9VRPOQZ`nywKHae&?WwFXS^r*6uSN$d#o1s zpZd`CBe(%xE1Np!QnDZo+iWxqrB&w$XSn zqstV$SjNHHyJkEY@j#fhYhA_9p4Z)eMPO#o!ZASrFpt$tG^t7Ia)W%z7le`QN|Q| zYfClBDWO#fQMvkE-DugevgEJGkYrX+L48TS^oy3?h!OIRYjs?VZK^-Es9uWWRE>F+ zmnmS>)FXzXWUii-9>oxG#Lo171&evW(mJNe*kK@f{%I=KtwCFzqnf-q3l;>y54Dzb z2|wE8mF6c2_tZ5I1$$Gl!P|wI{u9VwV$TbOlsR=GYawU=N{TpDhy90c$t5j;=85|p zZOE1h!<;W7Qz!Dqul>2uUDV>$P!RL;`!qJcE;pbI~t^jm4NQ$Flc1h_p z8cKG(H5sxd{?C&H3hR_a^bip6W;@_VrJLAw37)k~#lW$_kE1@3_OSWsY*YN^Luw#% z`_0_s@OZ-CG!INL{m70ViV4cxvM8ri?h!en68+>AXg~48f}9`TSguhxm(Im{}#oz9olyBB4SFE>LuGB@l&b9k0tV|E}-~!t^uFL)3ic=h< zE>;Vk3WBlx;&`e4PA=@lugT7_V&5!88*dBTof)5SL;x5Os&Lqd^oMW@lm|gExNQ12 z+S1niNcFH1u!x>kMy2*BxNciP@4kQstfXoo5|kJ}Y83u~f%jaD9$Ycui~LmQSXwXQ zp40*q>0*#9Mpe^2)l-aMg-h(fk}D5m>FF3cMd;s4>GRiv7dB%Xn({3}IfLf~&HyRb z`oIV<;s~uB@W&rD3$S}x30Nf>6GvIfG5tR0TAW_Aw}HiC6%28GM9ExBvxyh`Gb&hh z2cP}c2y%0I9l5mcpOTt{^U*)r17TQyq=8$MW4A+pgpZKo!gs_0u4P`91`i_Hm@B|u36JFFK(27a=#t7;+;>3^ z8^h(b4Yb$<3lZ4o8uA_(zA}LSD&J3I!+>(~1C9g>#j}v~EFrjct{wN3BpgO(wtXVG zU*S)hz;a206pPF4b;An_w>bw7{G8lyD^}N6qJEzUV#;PPwRFvAj%tU9ZF@T5#}?I< zqVK75TMYbtHsR2re?l;{&6@WRyL#XEqy5Z1xlX zhUeOYxWjiZ>j|N-Ha347P8EDOcXWxoe^dJc=C>Clw-&UXMzMVFE2j4?h3G*SroU( zX={oYS%d(;k04QEt+UxbMCc|Bv(l!^*k=YU5*$T?&A$yVofP_3tzcbCFEleiL=kd^ zV|XSt4-74(G<6`wJexs+Z94huzWP;dd$RCObwG~dG(u{rg6`eFvghro%N!I)!*qg% zC;OPPRxrfOG%190Hxe{`4tZCS@xWM?Qb$I(vYK&XpRDp3*8HqyZ4D@h;;7MCH(H4}wB(a^s&hSO+Lz(F zWsE{deVV>k_a6+e)J>^X>$<0w=4bQ}n6b9WON zuet?riYDy1Rq?4qjlw_J*IuFNueVlZWiBfHc?JEoqzIiEUtILGH%=L5s+8Bead;eF zFlVQj4sR$_nR1RW(jx5JSYq&W=ZEh@YNYZk1g8%F8fHjZ-A>@~2;jQEU$L>`fv_B+ zr6l!)23jqT&nKfnyv-?<>5L>B6OJZFl7H}}adBl_8!gD8UrWnBw$VQV3gtW{HAt`% zJi2Nz5b*>97c5b;N7>OZDprY1gX0R6#R>Y@;jEM|0%Yo`sU;8t){Rzks7$rrK|hSN zEmOm-FY9gD8pu~(0_w?%n%n`z#?<rz)_yhpZ>&eNG2B#zeZ!9Gzhk7SO*RN%3smdM)>`SB<6D{ z0S)=i?C*r{-qt;jzz1bI9;9{@&zZ3mPULKqea2BksSM-(BL~^l z~GdMK6#Sd4f+Pz0u35}9|-^i*k(Xwo<|;n23WOenN5}No1M-N z4j{M}56BXHi$$`TT&eDA**Nh+NmSbVjNP4+cZw7HT5W8M-&i`$hGikP1m~aRixRA; zzyZ(@>uor2B4QA(83`p|;@aTW5CK>N3wa=v4hOmMH-}zpY>5uiz!#N|s|KmH2f5$| zZAB7rYmx>$*c2WA+D-AE>Yn;rL%+v$gesm2n&Pf*eyHxNM@if-^_72!*UExHQ3CXU!Xn#Y8;-{QnwAKip4tB z{;9&8ZG5G3^G|PcRO4`NY2*7-sKmm(e9;B{yT=9ZiQm+X4{SMRs5BWM|Btj53o_kY zy6vo^{^rXl*~OIZjROTtf_i68`YxsAmpEs7X^R!dHR@<`XEP^h=g$FQW`Ti!=UkSx z57ZO}<;Pl^O)gFzn|ClhRX}qAzzxmuS~mR(R`B;CT0tH>$&nv&!iJjVcWsvxgiMq< z-caH%vmj-*M~B&i&Ci5`(9gi3fNPzbkZwqFj+~3c-@(ua?{eScLq5LPmdGYaz!<}B zbOL10@F|WZk-L9NH}jF~2EbmnDc*=Gdf;^gO2Rx@W;1F@pXu)(m=@6pmdal4%$dt6 zDlhI@Z-VQ`>FJmozl{A>@~6S1SK_2?PzDeTpN_qgd1yV%sKsXcuuG+X4_WP%s_p$H zXV}QMu!pm{^%3V&0c5PNSR{>5Ne1?qTZ7T2Z1tFh7?sx@HiWwUmVK^<9^|Hl)nn!F zx#{saJFt`@3KffZdBwQgO2S@8(nOQ*lGHLK<2y8yXL2OC$MhXsjCb$H#vpNIXB{D* zqJ6jNUALYT@LvCwkfuV!hE3@O+j+0{mR_B}q;X+z{O{4`pLwlqF=a48V(~Ny8;bANY zs;2j9YY$IA_s*Q7@nZ??+ySv^wq|rAUT3bTmzEC?AtS3eZq3W1#Uhc+n1x3 zAwnf29>|MBto*AL4KxkF)dPXLbd2uzW9* zDasml1#@47V?x;UxXC51+(PAnc=fn61D4LaceDkshI;41)ahs!5Zi5|cnL!P)>VEB zv)|4rX@?|lT=*vzGlj27um_6362Uf0HtDm;O+-rEQJu%i>vK|XAhBQd+)Uwy#Nd

TugN6PJXQ;udiC(YFr8^1A|D zgg>KQxyCRn+s};1+Y$E*R@?K4k62Wz{jfc+EW@;#J-L239$DiNot8c2>GJ#eaF7;X zVcoZjGk}i0A0N}R$HNUK^#DX|a5t{p{JF6^0PHJge+J}JIqLgQ;UwLbOpGjuu63FJ z2ZQXb9q5>Q)ddR!5nvJUo=e43382HZ#T1(q`?di8KLEgAdNA5!$TaRm3Dz`-t@S{$ zK})RZHo#w8b=mP8AjsI>{UiqbDrJP7Du%GrGf1m}&qf2o63zGki2??)2VDqAQLakWl;`Voxl6tZ0yow@hzdjZ$S#m!xNC+tgC~yq=^dDw!E!!9j1=d5r@9wI-_XQQtEb|vY%Pn#JVRh;+Yd^q7Gq~rL#HvTn zfxGwxB-Ke9KEI5Tl6zuTW6^8sV3!Fj(4x^QVx`Xxc0S8Yp+I@K1l4n~Uf-+Xpvy!q zbO*;Ws_9_v3*XU!QX-HIVRFveWa|4jOc5y^3xmXuSwyloqj_wK--+#xr9v0pWoBV2 zWljSeESw?L7>;bz57S&#R){9s5V= zM~Fw?#UjH!baF2)?^!&~Mhc@+j}48=8>5OrXbl^&B@$)qV@M#2sQx`tQ;{c=*Wk;x zQ|xOH`H1m;m~U)oG)L}DQ!m`(HQ%i9sgBi|06HH(q)4?M6lA=1{aR{UyG-^v|DJx$ z?mGeYCygTwFBi=%;n{ARcZIeqx>$jYxcazYY%(X1-44- z53$Vt7`bUi1st^Le$6xj#A&?xUk3iA6@U<8$-*EaiU41VbxP%Ge*IIxn8;5zJ3|BH za2+A9@V3yh-GM?i=l{j%PSLI}OaD{6Rx$t#rl;EBUbzjC#OPcSTNHPP_Oe;vz;wD& z6QqbZ#ky`egWkbXVh<0?9O`lG&q>luHa+#vFqn(_82uMa*ShsvxlM}p$iwo%;_>3d zZ=>{`b5!y!tTeY8w|UvPkegs8moy+Zjk(l=BL6iBzSV|U&(V-@y6{)hP|dptxX8fb zjUAPqmw1u>NfMp@$$NFA$gb>J!5(e>KviNk!W~o&p0CVgdfN8+scv}~Qn0{I79s7- zIhmW~Xxj`<1ja*g9XM3CUL(d_Ks@0vcLx1`qSr3CxT$t9_&M#?;}6lc3#GY>|K(F_ zNhlB=4^BoT_O-qeScWU00Yi@*<8YBfhP(LUh-7647^gyM*4D(EZB2ffVi^OSV)2-+ zpz!SF0|L)G_^>@IwK*UbVIPV6E*fvucwgv=)&%Esd0`F8`zz)`0lmv5v9Ru;nJ2?b zI=<;()+a*yk2Hkb*e4UP`Lp^~QspN>8Q@%Sv2Dhmkct0Sng#PU=zqgi{;Rq)YuSdj z=Lvm%C2qQHtBc_a-)S>YPQ4Vd^NLK!1?WDw(dI#+->%23|}R=aBEV_1W+U=~)95V->_)_&yHSOF^*YeYm5 zFacw&Wd+Hy$n25hhI74_JI{%O{CQLV>^ZhwlW+-Z9bp)R;-n2RVskBlYQ+VoOqv1S zz{tr43-fF>fgjFy`yvaz)F1ddyOm%5CT4}4H_Yp&*3VtH>2q)lg{inO&TQC4P5h9M zbx-v|g<7xcPUrZiwMtM()|8-mnsREf#xBDwLpvy+?ePlCMC0p8bpVx8qfjYq0@fq7nn0zJwhp=f9)defgtrQ8{%Y41KYZ zGxeNcYR1_;4|@Y4{wnY;`+V!TWTO0jJgu~V&?7$O76|vIGx&o;qymVWJK`f;ukf$| zl@~THmEO2%EtBP!(xL2px5_IlW1qrct{g=phxW9s5grdWE>pi=ILf|!SXN?sXPZpYjO*OAljNq<=uW_Pqrp+LoJH{2*e^^0 z@cRTO`5s|=2_fp8`T(4LglBx!!)^N#*5*%cI$~vM0XGV=EYE% z=n%t`dk|aW71_M5s&$``Ix|{#eldi$BnWX0U6Cqe@Vf_^=<)m8HNSk+)1Q3&kbSy= zM+-?aP_y5*XU-DM;s4td_M3rk5@0^xQBFrHSutrQjvKlE8u&>-Q}eeGvcp%_Lak95 z#lvBQ z{~%It!ZiYG(U@~1su%4LobxFx!z)xvNI z7b8BtJd7*9$s*O-YGivur$qK5m;d@$#zC2O-AJl{K<2O}%b94a z^fcK`giL47lYEL;C-HI^p0!GdhY5Q+Dh}4wuYzC6?hY>f!(PAyD$c-Dm@+OkHd1y0 z2oEWQIp`W%H63 zy`dUMcOma3xNfc}b6HZl>8%Y)n0lXTu|p)S^r||)LCwA|8NrrxY)pJps=EP|;cyd> zdW2KH4Ig~Jyo!pi2@J7I=e#s6fVWT)vU(5^r5f<*>jmPDnLQxDqEwtiX=^j`O#q~{ zrS|u)>?8YKyKeILOP^!#2}%M*r1F=3SWX3m`q$X-2?3lJL$2Y(OmI~~>4^7O6 z+3)2IIIExZTVbY&(E*wEt|BQG_s2%shU!x4>nz}t3I%|ZX4LD$Z#^A0f?l;ny;#D} z=J217enXnhIN18Do_}pvGfTF;}$?HLyOe{jv|UD zkKaj;XLFAp0A zHcaJWg%t`uUxvo&xfo)|byQXt#E$Q{FY&{xQHzZVVnXyM7u{~Ku~>>QppD}{zHnVh z5wCSNeP>Y$k?|K)h}{WQMz%@P`$47)5)0IQ^3-@YAH0ei?6F&$vqwA*3$09ghDe6uL!2 zht1!h6DO_jVYAiada+aTqn?d27?ARNk9P+6S(U`AE+1@l8rF|vj+MBLGc}t_quKd`+PsGqL(%;Vja=!hg>Bp1RTdrw z?D$5~<~9Da7wY{i5aqm4bI$nloy44i-rQR&BPpCXjG@GveT$-s9`Bs&=UKdx z#W~%s7mx#h9>3$PdCr)d{jEO)MpA4I)xF%9l%lzgog1uhxZU9WHI7c1XZIx?9p2T= zs1r?jlB5%Gd*hOfIBUn)X;DWxFACjsL+1p-&(8FS5_1&-eWOZi2kS|b1!o_9yTb@d zp^R3|Mx^%GRkeChZ8t1KpFX7dmkUt;vGh!HpYFvjbID*d*$T0t*pjTOthSG~&h4P3 z+1x~i50Y$O=Tx+=`hzvqhh6_YoaWDM?(nw&!>Ji(C+iUb{BioiVO__P!~k@YoPYM^ zL|us6%hc1zzBm;+yVviPJ!;*gTB(^m06yQjD8Q}AS7sKX%}TX05tJFnNwT_C0)8~% zY#nJST*G>p@YAy(4 z=Uh#gC^i9ZGP24+t#UET4j>I)#u?^#uAfc9waZ)inXFW9$^?7 z)bUM1H^P~^1Z*xPTlKHw$nkSj@;dHf+Rm4d_V{Gspc3q1KPHXalPPiefH-#RQ}Ef? z`uswIElKzRQxRPjw1)Ce*fK09W`~hsf&xMjB+rS^+!{=uTksyYc&zz@NOh9%B2tE> z4+0G9#<9-(H=!qf=lDmpzO{y;>)$pykL?V{GqhyEldE|gw{L{NcX2I?p?NuEL z_k0xcx>M@U@GD&jBg^)t1<56Ed_glbJ5(5^zIUr=YxGOR|M*Ci!k~eQ0u9voOqe0F zlp8XdQbdJ8Qe=H!ehyP;Isj3;RimH=N5;oHuyek7CqBas^#{~(@P!$4Kw$zk-#7wM z0WBHi8trke)@ui&YeOn`C@V4zdYpIU*QVtR@mrb7WAc`Ly6jWbUcn2>HDf}|*@`e} zb5}}pNt}5#^{EYTF)BlE41GxddXHsCoO251-~X83(h295y}NcM@2~f8T{hwayGltjk#J|52luLuz#)fsD)qJS`%w z_@$}blkICA^5O;$fnoD=RX_*?@2~hcBM^SL-_E-UL5r~0(Mj8&FZ|Nu<*i0BD0VfD zdzxmTc}#&H6K-SSs&lf(U&z9Crxiy|khs%t46BX$bou8g8pZI5J7$N;uRo3m9pvJi z;y1qcULcBaUpxG`l4jCTJ`8rGAb5i201>ot1I|lNH~pB|zl#Y%RSh(N)cFI)=Ne|N zd8U&2RVp_R)z$Pkg>zfTK8008NKNCM&9R8`>t`6^yQ|E%Y8lJ{+!s|EeTf*ghZ;*z zlTe2om7qkm(Bpy!*w@mqXLZMhOzTjjO_Q@&4Nt(APZRT5teidl)cZE^pP9XJm({4A z7vDCJcHp)^HNDefVP8*~P>V9C(qieE8qq8fb{f2|pKHdm7COO=o2p=!!58-yq-oHb z%XfD)B^P=e0Uy1-x<+gz6(%n3{XU4_nw)mPYckP^TVE-S5XXd{W$D{u=V z(Q@n5)O8DO--*lL2)8>o|GR3XAk5tLy_-*QbF&w?O(zeI+1Psib=aP)LnM*C1?~P)q(N=oZBWwB?t8l7UVw7kT{+>5PY>@t^N-`7Jr4~PdoQ;K{a@dIo zg%^PDc)Qu6yz-%Gui3xuwuS@hp z{7YbCa37wIM44Gh7I(=~J5|)i8YeI&qCzFvK&7u*B>7zQFD45u{Dr^ktkN7v;F#!3 z#3}Tcgso zprJR>nrD2$ynQ0**Jzw`FLgp-P_JB~>>RpYR@-eCnS=Y=INbjSP2nRzq{)XXH8gBx zKz9x7jkq*e5UhvX=B3GA4w)@uu%G6iX}km`nVb3AUQtwFG(K)>X|2JQO|<$HfWx|u zRiXM59c5q?50)ZKm0KuvO2(fsq9DC&m^U9ws{&O=@4&^q;sa7Qov29B1jMg=fKyFj z_@yHV$ve%KTAU?(yPzc`mLzJnebIGVw#$Nr z<5#6E4LrQF#`&9-ke${ytLc^`2p(8#rCvgF`G|)Ew~>GNYqu+82KYteAf+~tn9OVV zwv`5>Ow1m= zVs<+ruUGaE*sq25E&dxPKgehBR=@}l>tl>)L!cOb{1;B zHcVMW_rWB z*$mKW4KTy+abz|k+t;*p)Kw6_@^VNh&Ai`M8j~V5WZ_@G)^(?jlqBSwf4TR9(7P(F z-AxtQH$4|o&(*XpuY;=?r)j9jkBcgA_0(3e8)QtZxnL!g;7XSgeDDtReaCeZ40YZE zbkIk9q8e3f&LX|DM8A5Kd3d{+kL}1&4zmH6D)Q&ceB&ElRH}ovGMTPzqw3L%KjVAU z8X`x~0={5Nt2XI6bcH37^V3jTJ+pCF4xh;%><(41q7&2{NSEcuuCki;A z$3D>poCXz&dpYOpv3h`wACvii8bw6J3%518Vz7D-pM=#1SSQXgk?tp=Y;V--dan%a z$VrUEM1I_SL}Z>jJy0eMcNZlNl>lXriG0(H}0e;Lx0D(Rg|F@l<;ZriO$2n!lmRp} zG;I)c?Hy~gc7eCocw|fR!F!?{2(Vf-?FHg3@~#pQJ^_*}bYPvTI-PsVFi{@>XF6Pr znt?nZjN)*Q8&m@|0PYQ;&D0kbKSWTx0J3=@C=VD#a-uk$T%CX!4gy^tPEhT~mimXu zVc*6_6+0A5ztBKvMVBSO#IFJj$a2YcZOSxq*$%MPQ3xk@dro?>mLCl*&*+%O^ZAPk%1vpgbm3suOYX zBG!?Rk!NO+Au)aNjOnfKliVpJE&rcP>Z28 zZZLkvyNkY0ezVK^*&}FjY9OO<`;-fDal8RvWm+sexDU2@Op!z*E#hQm$9ya9iK1?b#wUIt&iJX3cR=S;p33=8}~t$_*waHK-E(2^+-pRsuWhOybvp5nO-H? z{P!=w8!>d)0q1d7G`-ssH%ls;dl9 z5elR@NB3WL)^P%h)HZe~AvC`*gJCzaoPQpe`23t#S}3NPeR5^^R#t}sdTQ><^hudTmy<}b0 zxyV>$%FX*YuwFCEo_{V6NJ%J}0$W}R6W`wHmklCDhwS8H_uLexm=C%DtI%$g1-og= z6--Tms{#mi{8ljmlUi-*3lx*|q}f6Q8(w1k2?o%HGaU^lBj{y>_tlVZx<2 zr~<093b7hGWKI@+*v`cNw+P>qU*_{vOksN`EoDf2f(7KmFO+)bhWS( zHZ?IHJdNWMwrlkshsE~TB2Ronnd}~}9egpwNMG)hb2pykomiLBPt1#Kw524arlq)2 zHl{6U$F?km2?;CZ!2y7RY(uI*A^x%HL)HP0X?5q7oPc=2Na?Sk$!mmfH-&c4El>-K z&>dthL&@*_f*w-5kJI8jus%>ohepswyDC<^(TPl1!^7x_Z@^oq-FaciFv$dN^a7?; zva`NKM;6Xca1T0VIOJik;-03@fh6ET^a5}EpOJV>G(iJ{L{znPSk#~}D%-S`2CfjX zK6Ihox-CW-1FU~s$|YFOEdwsu`dlsP!o>scg)z z$-&x3R3@)Vr{n+>OcLhbEVe3okgyjTAt!6}Hg#;M1L&i^P^M4rR&5s!# zmX+^?Q;maD@r+JV{82~MJP=!xG9gK@7g|4@ABOJ(Uh|3C!6sGl`cW->*7zIB2ACN! z>FhbjAa8~bK5NY8^y1QuGBPxWqN@R?+7fH)L;nU4oi*!I6G*&@^9s#hUtEv%vxVF{ zuRuO7%n8?tB@Alz#Rs~a$lQ678jg_Y57CyJuX4}dgG;Bb)QdK4ks!vGu$Vazjo+0k zu`1v-{qc-nQ`2BQd*T!fP{=e|n!6f-pyTOd-J zV#nm%+S1;x;&Z~rhllo*3VD8Gp~fw?uI>DA_@WE#{Aj&{?N(p}Cg2KxsUZ}Xy-yhfW+w2& zo_q%GsearbdNfXn97z?BH}DtjC;qeU7j?2=&v*~%`G68W?7+O8fKB}A>X9I%g^j+) z4vDBko*kDIK>(%5sehRx3mx5Trg$sZYIxL`&SX6`Y3mXTA}ywiAK-Bvk?iIRa`7S1 zi1mXwU7m2TcQfN{15U=I@grGzq=k(#GSNAo_P4X)W=;FFk=FE_D?|TA_fz!5QLfvJ zeKa=TP)%6ENq8~MH{whJsg?a-Ibo-OKw_I4hG$yOr~sN@Cy|B>zt%QZe-%*5bSKBS z9)w@6O<3MvO(yEm?GuXO?gS?yU`5(si*`(soYaMsd$dE9M{tr?6H`=zl!=D#vrX5A zL{zw`le^IhGOC;|)@+zZ&!+x25IXavA2a)(tzu<4%qv6j!a zF}eWKD}v#mgz6*GufWti5>$ca>tDbO4@4nz7YQ5om9PYSYH8lr2A;5v2(E#X7)Wcc z*S$uv23cV6>B>A&_fpXGN57;yAz|Z9mRE1NqtwUOj^efNa{dc~PheW5n45G7Q8>A3 zNxYBj`$NRXWn6Et?N%zzpZ}uU$`t=NuXVM|U3Kk%DC$p$^OhfZK7D;zD4J@-R`osf zvX)63rv)v}(a$P5!;@>`#J&QlfhQ=0Xgn!%1%TPBof`EhHbIBH``~1nflUQ}Xu4r8 zXMlSQx2Y9Eg6apRri2kR%fdKSVK2YX!5sLiPZWE}?#ueuE6ir{!lmFm!A!FnO0m6AtWFzl2a$&+8`x-2M(|y!EuHUiWnE)o(9ru zIwEQ$oi2H~*a}jSk^y;K%s+G5G{D|ouuVMfAV+y$OY!DySZj(ES+5uyJ(G~IQVWdv zE|n+5#2xrz1k`$;qCDvyXunn&5|d#RiSzzXGypwfq#hJck09$Thi2Me<$gn((NZKv zYceEeBTco^#GDp|H^2!Thto`jMYAtClTA=d^vroY>_lVbB`p@;Y95?+E>Bk}00|Gh zo3< z>i2?VN8uW@x^_WlcYJlo4b8`2*<{f_{dYt8O`ahCb)49FfFA!A#*YeHCSL7u2Svr8 zG%J!u#1gg2x}C!#&<$So$$6Heb03LGI%)tlGgPz$7htx@&gdRZduIC7f>lF`ln!ZL zxIXhzN?*%`HOKUP&rkkA`Kcx&5bUI?ir&>EmsrL2WDKtu>Al$=yEGX8T&2mBSJT>G zXfY#BIKC%aW+)=ZaT%x>n5HNhPh+Xn7qk9_D2{LcmwwrD|^B9ijgvfHAhC%yw$`pZw>Ktva!-r!Zq!G*GLrKxxgrs>Zp z+TT!u1PjhNt~#zdz6b7OfSTg%4lJkow~HJx{@Kd(C9Y6=^%m41o508% z1@iL;D;`=Ppw?QkfGzTPjVL|UZQx@O>Ju1u3gWP8=EGgil=Up*g!j#<9e%sPvO;3C z9>hjZRs}b0Z~sh!FscG!O?BSUEe~Q?#1DW@mBe)>u=pAVim3J**6XdGmY5nl1w9+q z@TMmcJe!`9{}CDKIHBr46afq%2qhYlCcMfZsEX6B~9Bhk$i6fOcTQSS;SsAcr-0)S~y$7*8dyf$!v z6G|BW^}HhrKpKPXekPl)9?fKauJGB<31UA^A8>pBr-~tZ(oBEKgh=Jnf*Pn8Pb@>b z+t~@x(w!}J&s6w~ihdvrQE-Y^^+=1680;FL0dGJtsUoOXNo2~1Pi+C$^d#+@oRwLHm5ca=FL3I0AD z-4j{XG{1d5rKVRXnrlX9yr*EMI6uBo*H$vM{ev*n1#27FpZzPv;B>wy_GHQ>DxZmA z*a`rwPhRZs88l1rFS~JZZeZ5~XX;$5M=|OJUVZKDkplsI{Vpl#j!Ewz6Iy>lZU|F- z+Ld1dQ4!y-ikfy_#M5fda$Ht4D_fe50(9*>gVPTU4fcckaj9K?Y zm>qlvQKnTWt46HZi{0HQhBVSv*Nvba3qM+;gP!$@Sp+BJQIoVXPaMYmRk9RQj*O1Q z=*rM?)BD~bQU_?o&i0u@Mon-0nR9Fel(vm3@ggXtkz|6Sbh=yIjgNs=aUXWw7t?No z$D<_KVp|Z$ikIFiSe6@Wi{eYD(ADzVuGS(MJ#$>r?^kw;TWJ|g0ljle*%Dn|9apDq zCk|-Jlln+V-bZw!qE2d=Nt3%5_&?$_DrXI)*W`BN)0dV&#KOB$AZl<^h{|UrQ0E&2 zyuk>l{}=7@=>VkF6&;}dtIkZAW?@(>CAsn>#e>1yCoV4Q>Rs}dix^-~Y)O)t<{XC8 z)7uwCP4-jmo$YQaq3~A#LiCsgTK;#GQq`4S4KCCxEh5@=9Y9JIZms4(tyA)!`P&^N zMSu)KGdE$*B_?Q{-KB$8U%C`LsZQmG)Fnl7DI-E2y-XAwrIGzzm{7tyRk}Ca$$=I> zc@z41GqL@9Y8&MeWjKBXk^}Q#Zg3FdTHB~C4Jtat84R2S0a$cc9B8QAt1IVj-2GsdMe+e&k9z?e{z2gGy)HdZ`i9xq0}*{i-e<2JXs+A4h9&_c<-PVV359euy!&?aTv(hIg&`RoR`p~6$h6SbuuE$c5NHd zgN{MgoCH*=f@?yH6YDZ~Vr>EYK1A|PWBF!Fa%BxXMRnETSD^3aQ^pS|ID_IsLy37 z2uXb}hh=4hd&gCr$1SU;sN__mRt($uS*cmy`=W)$JivsS=*4%T0pz%0WOOelabVqh zgq!&8#pZ+{Bl4=yU89y6<_omCOv?)yARQk)YiTL>U7qQip?kKpW*tkmp@^=mK~keu zm$0)$8^$L~=N3Ef?66++mY>q+ZWMiy8?YqQSEL-Dv5+He3usA?zigajsZ8S`6{tC! zy8&K`$jz^LPIj$nxbXgOMxLVLu1+VCyG!YW-0yqOOq29l?^i6gZLT`H%W# zzC0HeTN4p{Q5xnOBEEMl@d}Cgruo{sEYyz509bM&%TX; z>u$EAb^N~wg*BHba%RxS8F;Dtv*Q0sAdB>_*U6P1En>XUtO-4L9;0h34?v5(p$}3e zkMlwASCC;LqqZoqxS=o+7br8a3i{I|p;}_|?(!@EXhxp#v)Lhu5`+tc6H2*G2R2rf zmH+<7o6%~C1*a}csJ&7`70y6a2z&Gdu{7#A)C%Y} znuVp|H^01j)E65F)$l`??u=*!ZMK3sUazHP;^#qN!cX5asZ-*m;qb$S+p`G0NPa!@ zeBec-) zL2guendWSiYAz6RihOyyo1*+a5+5L;0e8|*NU|k&H%)pP zp^Cn-`|$ARX86(alr%5~CsHL_c5^?=n=)@RA)?1kAK{+oMxTtZ36m#?tMURfV4jv% zRFj+zZ3xOfWZ|aGw2=WPz8<68+XSNW|0xQqOc4`rUyWhto@nAIT7Q*h7~8MA#UsiT zD{saHaQTR7S#`8>k1+XmB63s-F+G=3e@At_k*wxO;}a5B~%IL`t|+2Ij!9Lxdn@{P0?SlZ)uo}eR$ zAUX)&iCQ$3`hIjk7^bU`U696AGPMLdA3-_~HyXBee=|ud!IVs7a52xWICc->srW3C zqvNI@w{Q&2T^>LhDR3*vHCOKe|E+IzqNMiziS=(qV^0jgV*7+=Rjy&kr!Nl0amnz& zHMB^yV;tXeD?obt?rMmp-kNKw|N%-amumen__p>pHN!0+Q3D`n7hVqln(< z+1h_{oaGT5bbO4EU8UYSX6fi8iygq#)K(vz^x0WR-hH3xKaA7PH`oDSNgPbN<5zo! z!0thv)JF=e^o-lZFCZgq7IaY!H*IjG0nrP~#qY1G4`M4mpQQFdK58#0m8ng{PQk>` zcK1$L`&zKswV7Lm&r55(1-+eS8;aY0i~!6=ZWH~L!eH#8qiFdKKp+;T2$l#5&d=hP zPiI2BNeX}Cg%V@B%ykO@9lt2lij%aOKIF4{Z?I_qu07?+TV>D>FLG4-uol7#o*DLneCth`-e%G=D9+P^G7=j zz#m4;{+MO$OA&3HzC;}Sms+4{Ay%xbmUO&kT{d#0GcJGeQM^aw#~zmihx>cOfbu=V zR+%4%m({i_|V|zFnrr33QYGT6eVCBz$+slmcVV@As8LuX3APeR+e!` zYYJaI+vXjPShgW~6Ti4C(TRdFIc&A`jF78Jm70}2RmOoTG3L2HEGzZNLuOAWYqP`c zl$f`XrgCi`ORqzZGky8*Sgg$=Mm56Y*Q?p6v4)ur)qp)1>*9ceYH;+jKlTa{rCTCl zDSJIZ;KyMVzLD3KecaN7Itt35fO9s%;$R|=&wcb1Pl%nT85bL zx?8z9aprp1-OOIgD>pEFf}y$1sor)S17TWx;y#QjK6dnCUs-26#tW1e5?)Ebt}q27 zog1U_O1)dfqWlF&NnGKlQzo~71L`{KR~U|f@KkJiZ1X+L)oxLQ(J-*7hSm1ivYE?O z?OZWXdBm!QZ;_z-U9BR)IB%%W!9pf_fRBgb4Y~8h;++`H_a(A~I2jK)OP>b%luxR! zsSogWy06EFv@qcDJAW_S_Mf21QiTB56@iY=OeMn!2McR>#22O}!X)Z9 zja#Xfl}GuDX0!9QYwZj?X1u1T-(3gv7cY3d&!ipAd-R-h6Vo<{?H%%hvV^E8$sbE3 zB+Ts2=RjV>%Gjozp18gIuMrxv@t`^QtO!*-fMfqjL8i-K1&}-`g9=l^-uuWgp;Vgn zw`_>-O|xOHhmt3hMIeyGlPS;fnH6_~`!~q{aihrukU)84oiu|oj+i{pUKhw|B`5ci z=cCQLt7#x@%kETD!SVv2f&bOxky##|Q>D|dC^8~n0L~)cu}(n=Czf=Lw-)@{oVh13 z0qiD9T`3VK=nL7D8fgf}+WPu4RLjy*m^`G^r?Ju;Ipa<37jXUPo4ckR%6-sivk zsG{&W=3}1PL`>A{>LqC2QT8csLf@MK%2^&9_G_+b0cBtyZQ%hhS1%hjukPf*#>ICv*$=UtWV;+I?b$yB>O%rA zUTTZn?bI-U!kSPdYefTG%h6r&>!=Mw_hk*OWaNn#1&>HE4_c2)alMdjXu-`tLxb?} zh|HBD>*@S(++22_yYK(Xk~LKu8zwLuN+pm1qR_ZF<@>j29gj;B&g2<+^?;7^PS<}l zE&O}KvFU4|=8w~(`XQrfqH+Vo`1U}V$R0|@;Z;e@PS?tXA(Kks(MK);XPBk%JOhdw zG-ZP4UyVXE{mk{TqG}k93z}*x$AlHpHAEZb?8mNO^hOh}_Sszm`Y+9(bIv7%)Rq=* zc zIC7k;-~ zn30@Z zXC}EPI1dNSm%&47`p@>IO?aVCsV8?E+&jJaL%dEvn-m zJMvq|JmDl57a#Y=vAT~2cqM!0_iMad+qlrS***Iz*em{PI;zw8wvmDbU=YMT6w$^a zRvRL@3e1nq@B^axR;PS!PrN63&u7TdnjN3| z*0K51GXs>;{8h)2%9*#se}~0Gh#*f3D`N-fqz?bJfU-@NNGW@o%XprU(Pt(HEBUS>Je0F#U}8k_AJVcu z$(n6#DBAR+#fLuK>>-b^_&FYMh*IfhKr?DlW0Z4#>BF^#3*-Zgo!LUx!D?3y@}CUR zRi!j?cXk9+1(q@}&v+I)AxWXYkvNyOuPH<+$e%GaG{-)A{1Ecp{rbt{D!M{V-9WP*%sl-FmRiUXKFVuO4UCHP;Co1!JH`Zrq=5nhGt6 z8k2~Rhmcqg55_j_Ptr@WRK%A8k+U`r5~b8$w|habFD8E z8VZgDXL-n2TsYokwy~`$i(yd-y-`Nd&^e>%4;(=*!3~WYp6m zJ5;o*107$gDF4PVXc1~9|L|`63O`&ka$QO2h%Q>GBSLx0WM;AL=T`-kF8>P-*#ONy z6-N7%l&-T_*N_54(-9t52x1kgdVFPEjCZz8Wlj~?kW`9T#6H?rY3XxcxjWyLpc~U1 zD%i!O$LQE}{G_+^<` z7OcFTNn6D1H8o7SZTYQLO%_+z27odq*csnu?=}*N0o2*kA__mpJ(@u^%U;3*inXHM zppu7Wj){CsxEwetuifSk@Wb^~3leFBheO>L#Hz@E-v&wTd#}toC4NW8`EW37W~V}u zjaHT$pCM%Z=5%vEx9ttPeH>nFs3l#koP@Rm#c~bA>V@sqd2SOv|F5WQaq=5Bgm9fp zo`KxXgc8}IwN6|V3kRCymdAsO}u>I5 zwMmHlt{DC74W=nv%?n+03Q0>ng|1K^^l!>c+iyd`a=5Oj3+|3MoV~snzjd~5%d4R zxrRAcoHa$rh^fzaW$G15{GrRBoZ(8$e*}oFlIu%%){1Pi2NBW)&01UyJh(b1ja||vW_^uxULflwOEBg4Cb8aO^c8P*-@ZGrKl5O_~ zP)6gbZu__{S)4LCSvo5h*c=c#DQO6uLVEn=C{%Z|aTL$dhEyMT^Nq_Z-Xq8#e6%6b zzNNh3m-Qg@1VG`f4W13L&b}Tj-4bIc6tC;*%)CuuCyz^fyqG<0FddrS{}+mwF%6?f zWAtOM!0fVmM=Gk=i16T)#k3B2mL~$qTcyG#DGJ`Q8`2^};dr?*sm$r6Pzjp&>VC(% zi|)soAF}5cBnKeCj{2FoVI*)D zhs6wUuRN5OHU~X|leR8`-IY$Eu&b_ZCv?i8S+2Vl(8_eNEF)n32F8N|Oh;GXhX zjoZ+TQx>@hw95_h|KuMf8%l|4#I0hGYocsY7B86u=RH{bIIL@>>WW%Xx%Z?-W7HXK z;`ohpCBofX`;3?J3C!KthNc@4;{fUj9q=}g^(T6|cvMjs)^S^!&?#lbtFzonirw=e zy|aJ%i*+Y$rUt5oC>-;Ck*L=JX78?1?x-K zA(E%1siLm!5XP?7q)izWa+`kZ&#q?XfmEMZYKFv*BK5jz`fOEv&D`eJHdp|lMlZIX z+j%iODl(f;iKSt64eB&VFELghzvQu-bdd5a$a+jjpAm0^>L?FzryFzzo0eBotI*a} zS203iY|;1%-$$p@K;P{ZVbhL!-_uhp9?_T zEZvxVaGcX?%J#4kug3sQwFxYWg!7F2<3&CIV5P6}2`V(!a}}gDlA z5>{=|bhQ?Y5B=m$TLT+O0+PF;42l8K#X7~e+#9=WzcM$(PW=G?KLEhgSXVr%=AXm^ znojqNRF6j$=~J=M5Ru9keP{weJ3ShI!?Mf3^57~#?^Fx6vcS4<2v9>>^EfTw`&%u% zmJ^$_L85Y)0&>*pEfdQcje~kOdnpg5%&r;~VayD?sH)-Hl|WmQYf(FzWZ`N6pb0Wj z3J9AvEUsel(LJo+;17bM%E^(4I(#581HT8CXgq^;^s_H;mWaes_k%fE(&7WE%6XJH^hAwUobeGa_JHRK>g zgJ+uvC>w5#2!SG`kN$>#;mZsrul+jKUC%Goh&5px-odIiZVW8SJ{2~gbMpZw4k(=k z!$8uODwOg4Yuem6jj)|16k6lb)GBXA1eZcD+R(h$g<~Fcj?_sdHqEBD;S7@s?vQ*| zDqfl;>+9Oac#eCXAK<-l{=i-R@XdaNyF}u-x?=OToOhuhAJYhy2(T0_(5B2khXg`Z z?Z9WyG?@BY!eaHA`_tWx45V&5tj({R;Q{hJL76Q7D||I;e%$n;cd8sWEy1RgzHQHP z53U@xg+$mQ8deEj-iQ7`4^7o+v+c*pN^`S{0@}!IWKHcUp$@D?XwLTNPi>A%p1+>A z+M)w>(ZQk2Blr(-)V&tjydU^8Vq5|d6)g^5dNvGl4w9{gwqn{E$Q!RfpnwSHLM82e`!y2{SZ&pLWb^+oTrHoT;47fq5STyuJF%l$g1^=Xc!dpLC)iIBi!kfXQu6@E;!N zOeI0nQtp^yo)~CmjYDSZ`{XERja*3RUUXo>_bx1p7|sN0(Z5@0QtyS89s7ReK$8*m zO#S^cCWAp6OwILGYDG)Ul=ac1xc4EIm@aiT+M-2ij5Q&$$s*BrpPj@gK4EY=YRBY+ zUF})pn)@#%FFo#w!^h>3JRX4D%FDHWE?@Du6?|}yhe0f9;1+b?z5F8V#HR-&PVJpC zxar8+h}9R_hz!WRiIB#b94-Rkd8pW#?#ulcSd%DmPJIrhCU1ZX>XGgnbXf8FeCn^Z z6`LGR%dbnzgBB)@W|C93ky4DK;9?5g2aBB^Reg}9=vJEe#RTf;(-e@JEt}-qPhyj+ z`#Qaf2rR2tbLj;z*B@Y_4gh*)Rvd*tHDmp0sYp-_I=g-U!I0jPH`yB%<4k3TFzs@9 z)rb~%dQnX^NoXYA934u4lDi8*l;Ah{ajf*DZlyaMg$lfC`#?~lrpO4WsRkt<^~odR zCqMI^%E&og>3QSKdq`Q)rsA_jIxO{QY9Wd)ro*VhzKJZ&Iz>UWb7kw*ehiK#mwsyH zMKt{*0fbW~Dtt66Nv9R%|Jh0h5l=<=%G@rqNXv>FMlyo=ct8U65mrbyriSn~;Sz)< z`YSwZ!1X&JVaaoykhgl$a(w@BKe4Y$a|D>|3dWk!AYS58!Xr-3eQaYZeP&hi+L*i* z2_gl6e0(K*o};MWM$z2%HK(q_Lt9m>Zvtv2;6{%|X(&_rn(^iSHvWXpgyT?gy?m2l z>O82u+N-EqE8c*}%o$Ct!?;>)rXNIU$85hqmH#s&UZgaf2xQSIoGf9>W@{{v!6|ob z@_XZJ(^`7xjPXD>C}Y-^Ix^2XT;u>GJTumq15cm*&@@gnU*VE+QGL{(!9bx4E(M#@ zQO7rLxT{z7_nk-n8@5+#1t`mtwe!1EA9rLi40_qy3Q)rtrRANRRH2$fW`o+7?d?C* zlp!qVx76*?UlpohIRcz}qA<-)Kzujz)-boCy#20G$o(g0<$~lQac46*&}x(5@NRYj zQv>XpczxQk;b(6jniEH4BQ^7A?T0OaqsumIn!RfSfKZM}{ktAeW9co(Q zhkVtKvzpFc10sO#x-Diyp0G?_&{kBd8GrAQ zNHzBs-z|eW6lHAxmja88*2-E2?cF|6=Ss3gI$^)-46UnNE@@jod5dePPKIxwVQXcBL-sOzb#xSxV*8&Qc^|RcbWBQqqGxam7Fh? z9hy?V!D>8S?FO5wqkYL*tN#|MXUoKWAs(JAyq z7hCq!JYVjND6LH~Sa5mY69rquAqrro2jDbs8K4jjqB>AiG zZxfJEv@j1Jwt0e@1eo(1zC{uw5vGSrxLBm83_A^8JW`bn`+xiIpHCkob_^bW?{%ay zQQIEW6*%szLI$>m40qrXt<2-U3os9#g<@)|?- z#@rU8--=)vZ|3x>C^dR%Mw!7@9G}s$dbRvRLtbXm1n4f0=um**7sYD8J`EUpR@V7ezrHv zb-6x;c@RZWq`#OI$OlL*@+xpE9cPy^wVLl2a2Du44>Jlt*^!r%X7&b)Ez%kht zZ0kgqoO`_eeDFfJw9z^lJ9J#(1*(RWR9DW4Q%if3r|cYu=iDt0dhSZGZ1*2?nb~dE zi(_6-JwF^$rzF)%tQb4b@}l%Pe)af?k6aikr=Dq#eH2?$yXiN-6pYq>l}g}F66z@h z5rc{OXK^u4o~-3+R2uVJU$*d~Jk%VBO3BL$wiRV^riem#F3~h(1#&SyFEtGyvTG~nIog7F~vY`x% zS8gS5M`QFN3c3qb!ed(!bA}T9eFNpBP$zBm^wRQ-et0AQ``uL=Qwvb8J&WGkR8?FI z&v-An2|n@Y=6k;?6B%%9qSTq3JrxHFi!9!Yv>@Aha6C74Rn>P zMSiVq_$|!bO394YCX>=|0=nFbP=&7+IWNW}LeyAfCE@S|7^7(mSSQ>cpE&dM=o$&n z`n^ozA&GB^UqWiqbXE_ed+@E3H_wx37yF3rA7b6d9RFok` zy0gmCz37aLW-GJMKKIOiQ`Z2jt`K^IwIL@lWt(^tSz4nnih8ANBLEDQS|lE^=I8EX^Cc#SWv%B znV?{~AOpl_7mrEnIkUjz<(R7fD-kzfvT6aTS0UIVd;)OAti z??jp$HT9{AGVqHBZw0>W_%xe&`FG2)oANRGP+*AD%9nk)Wl!T^*$8Td z%=`bG?tKd^A{;%du_7y^ssZ%x5Fn|J8%z?|{`8Ah2FlEa#3nR&Si=lyf!O0@*1d>L zf(#9b%K0~cW9D*hmu3K;uGsVn^5W91vNp^y^~iPXu&1iBTy>IqTzMRc{e`mnu^a?0 z?PG~$Xrn)-u007|@mIul!lp9G3%ITFU}uD@vTZi;bc%vnpbmA>x}Qlv0x{E~2BfWuM)z!ujOecfxw8!^9t_(Ol^UEXH{Ih< z+v}$3BxKuy7AAHn$7Ue~I&$-uzQ2hDw&8R}4-SdUFUM_$CafgqMZpx*7{Y82tpo*W zH;r>r&=`LV5YaG)R+@!L9_-$aimT~T9 z=3Ug3E?jNnVRQg1yDDtX=@@jc-py3nE)`0#4xn76DE04zQw7S9*$zUhS#>S?%BVZ^ z9laI)XKls?gOi!UprT-?&7q1!Uax; zyGhg&q@KfiJ_yD|twDw-W;H}}Rtq#jEsyz+P+$YC55x?17%xM;7;#8?RE192#>`P^9?z~kSX{$lEt4b#5L;we#1T+G$tFQl`0&hq8JZGVI_6n2R3q`0NTd%9E?hqh>bd%cHVx`AU>y4#4^K$t@y?YLj?V62?j?tv6>zwLbCs z_Emsq^^FnazNUY9ox@Wnuw^sB?xMG(2wV(jpWkP{HqZ~*J1<2d)u5OY>{3|V?K;AI z8ZpZQ|1*Pu&a@AgTsl@;B!OIr9Qplu>$t9eqo?$i0{LJ@35YKbiC}ISORlcni#NVY z8IZ;*w;*NIf2G-s^HAAu*QW_R6Pbc5yB4#t)j9U&Lck*kD4xQ(#WLyqO~*5BgoI>N zD&#LiG_ZEdB`K4O3kI9&biLyH9`yee}ZPrdcoTE$nu+4fiq(g(AK-rMF1Qtg(|RgD>y<7oVvVPM#Eo)|17< zSM&t@T$W?HGO!Yhah z5Uo^fjIEGx#ua))DXmapP_{80l4u&noXbsZI23Xb(g7;&h{r@h?>xB<)ZxU+-{bZMD z7w2tjlH-cRz)q|7wE+EEd@B7pLcdLvYX84UMtbc!!7tWspi~FiL zxQL?yn$_Tr3^X*@$Y1A_%TwK4wdtmw>+lsT>@+W7f`0!k9Q*E6)t_EPoocroKZjbU zWJHTjj(N|~Tws~JskUuHz4oLG#fBP}>`2hK)&ZU6dc&D(ZF};G;Dg;X5(1s(+-$33 zi;H2!15(&mlTZD^eL3|j;|1-4P>gectKN<{HGL+68fSdJwa;To)aR#+=231u2N5?? zY$3(2!1{TSJu!EW=^&pl27=re3<{{X^fyBma+Ci$k@NMqDav*v#7 z*?#QkPz=}xhS}^aPDjM@3-^cn%{}lgX;^&5*=WV?7i{4$_*Fl=ioyhv1Ts^rq#1My zMN9~8SX?|vQz>sU7b#|PR&m9{yBu2wT7FBCy=_tY;Um7H>!+VGu2tfRp+~cNa8Ydr z=Hsm=1YsncL;eqrZl-^@uD6M>hIQj}`|zVzD3k5v14snz7RC9bwM_|iQFcR`WH9dz zMj5DpxT)}P7NYdq7`y%w4N|EXDkyLYOcX+Y)+1*Sv`S`Bzz2~Kq$qP=aDb}g5G(6c z@k4QQQ#uYEpMm@96Tqfa8OoD$3z%jRe&*$)VYq9^8dH@~k&2WuP=mA~J~)eBxsJ~v zuE|qU$kx+^%$L7lRV1g#{;B+Z=TIi2EI#vGNXhVT8g!j60M(*$3WnJ^41(&lvCPvh zs;20uV|RMyFhr!+K#zuqdkPv74iq&cD21{gJY1pgPqO?C!ej_pd+uUAz9vmWF!x{> z*o$)e`!m{%{SU~y#;at8nJE`@gEtTmXK(s~zz*$@y6Z%_=>5WRP9EYF^1;zwY0h?P z4Lh$bw7WDMLacEq*nIucXMKUWF8A#&ND=F<68_DMOCXkU?3Ok&Jul2F_jIIHW}G`i z_A=X{p!rj%+WK2>{Qjn*V8Qgh){p%m5(N!-@^3!`SRt-9G~kU1?F>vO40Q9Uj@V*F zdJK4ij?Jb@l%B-lS)7S9y5jk}4FHI)01-rU1z=Ze5^i@yZ<_;3CwGS^^2E(H5IZPD zU0d{3-z?5aRc?%(`HV6Brhas6sb9&x&MEK*Q*-ViE)*CesD`HYC{$mp>rSkyz*(in zI}SUyz=(V!Kx!*)BNuN<_8uWkzlxAAgQ@KrT^KA{d%~ix7y)8Lg4i{FIzflv^bkej z=XH_|lN0s8$YD_RncOMzEMxjT=oANZd=Qn2fu*X#MzEN~!Zck;Mxlrdy(mM&XVrQ% z1yhzMnpQN>9yYl>LrG~RM)1-Z2QBGzZirouloL%fwh^4S+|ISlVzx%|)OoRcu^~Fr zDb`D&Dx0p3b}z?cqO&^90G+0i$H3g79m1NYbVo7HM<UXDOR?$C*kPP zthXAHNu7eODJaM-^WnVytNe)Dk{{|6C}muU5r9+*XcU7zF?O80Awf(Oec&R8iRj8# zHYj`W5Ji*uuR(Dv?y~Zz`gA9K#ZVR1hJcn8AOPgThC_$b4C0ggnJj&@3;?^*E^2E~ zB8%8;Tj%Uns~{|u0g3NLJamehPKV4Kh%agIuWqd3SlZy1-1Lg|JL2Y@(s+kIL4+cm z4OR-PP@%v{X;2}mWm+;CeEB!XFzYgMWfb(OOZ5sei}F~lrSB1OG#HkMyTDw_hRZz; zFg^RzCq&H<*RfjnFlRVHsn-KA1!fZyzSki=8hS)hY5Ws=hG08L{W`tQNRNIuGvHFE zN7WoR{wzbfA8}7Z=PkFnvp^@h7||HoE!h4Lexp}FR?&-@%TogN`EBai8g+5-h><&* zF8ml~N3CM%r<7_C{S<0sy5_5-i`f4a(|u}iy{8{-85m=B6M$F*hzoM?akkN3Awr77 z!?U_lmOzrgf*}}%!7jw-ORXhWI66y10&EdinHuMRkNTXPZ)XLtR7LiTGVPE6N^iF! zpP%fTJ0pDL23&W;uDvb}t>{P{69P{ZVqqqJ#W&?c6dP0l;Qd*RMJVrfDcovC^zw~6 z=DfUGCj>!RMC7vk%!mmvi39s>2tRV^SdXxCF)Wk(%Me4e?=jsarMVIUIQk7jbSgIK zg_$}(3RcB*SgCnfPtbP)&oSn6y9Q2U_%yDvXn4VL2E`?t_}VIpD+o$O3g1TASW`$< zPQf-PIzAkT!QBY~x4+DTO~w7cN`PZKb5+YCTpTh<{I;#ITnw~37*086`*#SnBb1=V zr7w-jtY`_cEho|85ZN0`y?a5T1Iexrd?xtOA7ps(^%A;{&$u~!1|DF@_5YN`R}$OV zUqyANEZ{b1BYZ`aQ674c5CrRsq7^%s(4A0~w@!N7>d~8mg~a;`H5^R_1N*z=RL}OUN`& z7P*$ri6sMP!#;x9(TT!xZ*vKn`NQ($-^9-q+D?yybnn(8bij1^#OLLp!lw9oVKAus z0cJg2#4Y}D%%+K?GPVxKxIeB9a>EX^0yTzl5$~XHdAb%SQW6?h?ee?Dy#|nfij9qDHSA(ShVw_&I@OvzCeX> zA81@1Nscpc8}LL}?P)jjq&Mslq2EM?1r94wnW2iv>ka=p-B>Nh^Mr`MQ? z1v!V>e|2eZGL5aK=f6IC`BNgbrtW^s+huG2i8=L)3b^e%!wH%EcaL0R6gzVtYArYG zCNC>_mwOW5C%WLrJ9|hu3oqn7l_h+Dj33MMrtIAc^{*F^OdhHiPoEyf#XBcPET$3E zRWI`MW@hylb)99kmX@k+D%>%53hH^)wl6~_$UdpKu9&VIeG>}%rn%jF1de)czehi0 ztP6I%V2Qk_z@mNo{~%2hmKa`lVvjdC+mZE2aVjvWr=9h-J0mJ3B6Xbnpp{>=S@$7! zS8!f5oKFu7ogq4>SM|mKPE|}SA5y|u%VxV1TIt0Z<$R&rSjjbZs-L$oW(;(c}-UZyc2Pr zSjQRIig?c&T@PLwt(>yQEIn%^r1PRHs5&XML5NHK`$8}4+Kej;fg}r3riz^lwno^0 zFLhTt&p*yQE}$kM0jpZe_Mu>2nLWJtJmmkJEfjT0zx?$W+08lFN?sl49O4wj*jqwc zglpC=DInGcW=4^(Jk;|FXZBa#nGln^Dr0I-l~$TNad@FM#(PQ9Z$DoF(1N<-SG-S<=G4 zXLh+H;%gmOWovf(G$bS()|_-3!%6k4`8dIoCf&1l{}>6KLwrz9x6Q>>!MtnO#upN^LxJ4rmzgZiDqx; z?pt;lWfbMoDNn~8(48l*0HUeIC>b5nCSfk1gRXbr3KN{LMtQv4HOA?zw-}%3`RtDa zI@C4j5PD>`W2BjokGtX`;4=|cY<~&A|E1b9r2};Noor6L8NvSkg%}=pGTNwtCLBYg zs|ja;*>+Qe7Me=T5AIEE(VC=R8OpISLyvmV$j*WWTblF!9nq=6c#!Q12crUn z;-so4(r-%L-I>T6PxQHi1#K1p;eNAthaMr4lU^;!b6h-sVTqy8%Mn=PlAWIBM7 z=5}7JVueG5);R&a;KCoMoT;DR!~Fjexq2S!E=hdC=FZH)z7{EPkPMGcoTim8bc<7; zR?#YsnVMrPLnKF_XzZV9$3-nYgLb5>z$M}y$yV9zgmrC_R)eh~X%pocZ>MU~7~&0n zdK=K;p8Gb^;lgTgA~nmzrX9EE7^Rf#pt1$V11Hn(yaTdny6nA-3t9~E_PhXZeMg**hqqi$&*jRf| z3X3^1+|!44@{zxnsyf1}?UIQBt`*3Vg#nB9T&e&b%2v?q5bS&D1)3d1D441ARYFbI z3wd||1D&0ucKTgW$yXpr0f?q}McZ)P%(+?u`ChyaTyCkD@$%7dlER;ZrhWjn+HCwz zHr;E~*5X$bt6$sU$>t`w6sUlnUv7g$G(k6THulHac@)ZQx8c9Qk~@mZ>p9=F!YJ?dT3LUryE^# zix#sq*R(4&za2N{LO2M5{-Og#;3>h1&4J}=Fb26(oTOdX(h%=;pw_{?*M6@6 z84dZG9YuAlz;T1cjSW{~?KN8(*o+?uR#qw?+g@hmD;SIz)AKVU=S~zQnIid;sTq>? z&bf!e`m}gT>RVaf_|~ZhQw}Bb?v2~lkTcQ9EXc~{2M80J;%xQ>o?^Bm!7$$o?h3f9 z1RGNit*-dbT2u7R=c@RfjbfE`t)o(E(GxRV9TEF9g?+D4Ev|7_A=2l5x#b<^>{{wW zg5+G-x?}kZU<#m$>Arkx*w{)a&NuGSyuTgpA|v0zp_PA6{}mfQ63K785e$Ma`7*7- zzgT${laIMTj4=l*5eb(|{jPUWm^L_*c(te3vS%uswdE;FmkKhpVu)Fl6s}`u20%ij zksPK)JLYy~uMKqZf^5e{{kL$y?4Sn|sf9_<5r@*N)m11M$0&o7canX(yqC8@HBn3emaPQl|_VWw;*gzQYCs4~z ze)6-s!%wf)<3c9KlR#o--u?kS(pO07h{CO%+3L$XRqm)cs)x<^@UTR~v$DMXztgb* zT|}|RC2s0CB|K-KD$ro$^{d~^t*saJ9q22^3}koEL}3upV}+)@s17#=e|`~a zm&yo4p`ZpbKB@P7*&g@{Lf-q*bCeJAutdLiOq(zFWAX{FR3iC*<*Q#{vhf&~nb!d+ ziiMwu1awxZL9gzc5{wgOjhP;{wTZD= z?F>)rebnG&g?(7PE7&n)GqWZZNy3Ut26M^Voj1}@S0C29<4U_^wNkm2>XwisFa4_U zp7NgC@YPyh=G>&3@*A)?AID>*a+8Ub&tGp%4v2;;*m6HpT2!e`A67+S3D2v$?&vl9 zY5;LjCoxHY)X%^5O;oRaxS!PwjuTsJZSkqZXV67xrY<%wl(MAOszVQr&qoJ!7Q9RV zHBq{WJS?M64%~E}dgMBK9eG_^SBtn5EtTWkyo@Rq{tN*`4MxK_0l^qMk|0j6d6)Zk zdj#WSnG-_p#zMAfO@lOiv_in~uz_u&tdqJ;PDKGE-Zxe^#b@XfwyPT4CL|E{R|A2^ zJ@xdezyR)MZNzq>>|}rZbxbiYP8cb_%(7_yYLM<$jSq+o^&M*+Eou5B)%OK5E#~K(%wLk6p`fB--tL&D`#qVhjie^vC53p$_+}#3hrq zqZ)p+4VU_lq==znNW+&bPQU-5KKRTW${kp7FTK zriRRj@fjbT+p-~lPDa+Z@Mm{E6?27S zLbqa(*5Da13!eoLjE;=>%GNSzz{7X*4f^wC{t41Uy8{qT^lFzS*0-+Ii)ue#uN&Ys z{51O<`*bx(_nFKbnJ>N0Uc>utgbj<{DD%33wV3y@D{341|SF7{s(NJsY6Ss zOdq|2#1PYbF9|_IMz}~?jwMD($O_)(FuLJ8?Dvai5=%QU530hTb5Qs9*g3YIAv@)N zHaQg14vGKeHS9Cb_a{Lcx}lTht*raNmw#@=j3)hD_2@qOqTHBHce0s+$x^fx$M|RU zil0$5{H}fx5;J<`421m$IIQkzAUPBQMd8?X3FV*1OtP=$e6_QElqUp*02X^tDSe%p|ckk zSH=ip^{_p1>PHo6i;|ZcC6CvsO|w4Aekj5{J}&kB8zVeN>625lq^|^xcQbhGieiHC zs`G?y8YwZ@B523jf=36N`79kxDSs2SnC`y}(Z{S|Z;aqtWp(Hp$4Kr_$ag-FOJBvqF7_|IS( z>7(wAwOTZ$QGcx(u~Y8!Gg$)LP}C+%H*9CP_5f!(5&5QE3}uZU91Fv2UgBswtT zCFySJadFa4)+Afwx8*JSyKqY+8K5CalDka|Mg7M2DEg1(2~g{we#SUSKP+z{b98a* zPx)^D_gTL0>T;CnIo}W>r!t0Ap;d2P|5B0nKaA51^J)k%Y(T&9`)iOKpSpas^3QBO zN$}%U9oG)pLgD(4ku)(~*t|9g_Sg}*HS5tOXa!-VFeD(F3uRXm`-5zh}c&&-});m2Q0*y%K)T73R(^$@j_`NqXzWpet2)M%I4E) zFvmhaWiiu-@$(-5Jykg=^q|tMN#JV;C#!zF1$zcYHcK|vcj9JmGGIYOx|OOH2b1{cC;7-A zkqu#}@yI*$=SE8V_0 z6o7ea3-l`!C?%KM;Q;4no>G|W+d~ts8Xqk%cS0rWr5fL>dgIl4Apksj%@%lD zjnfYG2KI6234h@w@Y=tT*2$jtcdHV;a+P}#ada097I;9IkM()l0G1E)DKfkcv$+_( z3vWolIkeAI7HoicPStn!b8KTW8+t9DV>*HwKH}C>k z92q3XwJoOq-1@hAO{TP|yGg?DIYnBpXr(agdq00E<27Vtl(;|Sa4mEobx+hNk;?%? zKS$u>Q13pW@^=JJfv!8f8alTp{nQXd3nC5Auy^HoBz4w37T?be{s3yGiKW-Mir_ts1WOF`4wKZ?_!+Ln^SglrR*JO+4-inp#Y zh^K?qkvgt7NT|$%>l20A_!V7EU^B^PY}6@astNMh%^z1d;t~nLgvDnTli9`xB_UX3 zeCbU5OUx?#GSf-* zmIc%EyYYB0y(j2F{QlPP+)=+apE`-i%vlZ##gcNKR(Md$$7DQ;_IIM*&kiNvU>-f( zFWK=}rd{sZohI6)j){++`f8ux48~ayn$73fb8|98r&#)PGZmZts)|9>Ep9++kV6M? zt@_oL;?zaPc-OhX(qd0g2i=UqPLV9Qg|R>2nJ9SM_h&PDpOmMVw7=g?&9fPm=?|g^ zTO}1e7K_&YyklnUr0tbQusW%G+uiwPG;7;fR(3aNM>|=R(6>O*;ex1 z%iQol#f*XVE%qGmuwYN-6bf$+9Z%^#gLkxpB<>GE5}p;HHh(8wp_hEP;|*LgR%Xag=!9DqxHAYY#rYlsd$SZOl{6sDGe0)0y~T~gE~pMr+UU{;)F;a zLk%1wkHTC7%LQ7X2Gz>pKj4^3x-`zGjVU+;Th-73J^}QHE^HTOz*;GjjNuMaRlq-@ zkGQV3QmBLbjx(~nYDQNPQ_;35e;VG)2=T&l73&PW=7Mpe&MSAHCSpAFsoL1cX?X_>QESnC=Bl? zzZ9fU!K{=Mt|QnOX*FLEjCIfrmjvUI|ogb-i6Lxac4ggQ&e zz`ed8)SVO=haH^tTe=qX$`o5YhlK^HO53ZEt8S}C%J%9~yuD&}+Ru9KrF$+~SLl2D zzTteg(%*Rwl_~$tMhX`5lwz||G<$3rNVGruEoeq8sS&q z)UMA_ilFf^SP zFH$+5VTbLRde%bOYD8G-4+N_|J?cn-wTLFHA^droEfd}Fb>A;Cn;sSfUQRNQ`Ngkd zBJGk?=;gJP_nJ7f=3bQ!H__x7xEFD}jT9bIvXTaHU7!c^-C(>ut3VWrE*$goq-;Qk zDSp3-7PLWZFy1%q5Ok5MM+*qdB!_jU+i2K(9C-RY=7TmLq)0Ymw==j*hYEOX8vuyJ z?IYBvWJ+c^AlA){I)jyzl0qflU%DbA!BHG7HP3`b9`@ZPJC4)rNQHKuJ93qbLZ1MT zSb9oKuqo?zdG7!gj2Lcz~1Qp!yRF zkY(EVkD9_Kv=}OTz}*P~loJ$A2uv`Df(KYfg<9T z<7_q!VMlQ$6w~&L@y(ypSLnL1AEaZkS2)2r9VvRvNJC%v{ehhtP1UfK(YnwMb=p33 zzlbw{nUFL-Q5=bDm`>NS`)B7ha<$|*$9}OS3*=lIx<R71cq|o+pI37&4U@<1JFRCu?f~8lt0Bb|5$BAhh_dL2y zF%t+_3d%uvS9QncF5u>(zWM~uQ>02hx6fuTo`VVF-1F-epk$ekQuv^Kbz8U%-wrpt zBNE$TW^au0%Tw;tK}c1*Nyemh^W#TGE+3MDsZNaWO*gqp$*alXqBfQ=S#!?dasS4O ze)c#Kt=2H3-;f{NN|2xc;AM_bVNmb+X&Ex|$H>%}!t$1Q4j&EIRQL>RlVK1I^jIGQ zedTo&nrAYR;WHS>XIKJ6(=0WVSOL*d`GU#W;Z-0|R2pI=_<|EAyoURbxTN$r*H5wE~r}yTiKhyrM zoB@=W?Xmn_$;KWA)TdZv=uVWom zkt~$UiKACP4OW$BR@4!US2@%{n+IGQ`9c8nXBgb6HSj>QP1gbl1?gjF|vKY|(| zgE}q6pku^_{&&w?_;orAmwE!ujn<${XCOOs&l7eam)Lrnj2Kez2}*4|t?69bF5!SqFrci2R)cZ`xMbbds0Z|4v6+8LKXYwKM>S_^ zM<*@^yOlUY3QI#H@1?DaUR3SquU}=FnRdfA#m)ts`uVbfN)$t~(zNpf2JxjJhXofh zCTcor!~SkR9V+G91B_`v&6lk->A;$gN~BTE-sQe1&~gAAhmbV!}`14vM#_*pC1=2 zkd4Ix<`N1ik+(s}X<2;opqcdS-@Z@5UPEbPMUJ1!Q&qQ?so)43GddkvW|nL9A}YBc zh$6b}Z#|rCCP|xfKSDtqGk)i8{=TP6{l?ONb~0MWM9FbZG4=hjJS%)|hJu_QE0Zu5 zsqa8@MCN$%_M0%>sfy?GK2^#bGe{NpC(OQ9>jMZ%Cqz|70q2VY%{p9(Dz=71uPN*5APmLI zDScxoz!Z+(Sa6Sa7+RHH4XxQ3OYU239EZVo?;0j83Eg1J5@49=w zG1E5Jy1)W6Lv8I7*E_}!gp2Kp;MHetN!BD*!F9{rWVVood>0x&x9C3X+!HZA&7q8) zBMTGF3eGnaKuo!?5hP}seWxmvA;g<{4fAhm!C-f$v8!=^mT=q7cMwg!N(mx)#Td|O#(0sCR7oD|HJYkPKLA{QCuu22tU}&7uZ)G7 zx{b1-p57}(7Kv`hLQ(z0&h|txt=yZk^@No2?6-q583GL3(^)ttjSQX~*y3sdU@)zn zsr~<$l{ohUh}|Tb$?}LrEt(igS{L=s*}j}^WkijV2jbw4jut1C43{S%CSIkH-uLZY zO+f+^>7GJJI-P{=QZzoT+Mz>tX0q2({`}JRgr2FT#e5#pz0GGix27#J3`R4z6aAr$ z)zc+>m{FL@g#wE*Sb|%5At`Q{VOXy>18eGD4ROpK&#!W_tzsE?T%jjvpSpE-*SFF^ zbBb6WqSr9G%|m2tf3EpX?X?*sN#&W!CGS>a<+?+i)Juq%*M;>V!u+Ww9<}NuF0jwE zz`i}4X<$(^qm4QkcN@b?^(o&Ty#Q3Ksv~2t5&wl5d5CZ6bb4vPFK9yFG|(CQFhCDO zhe+8~u9I3RW*|?R!!9VTQY<~%3%O3pI&nYrF!X;QO<1bv(G2|`*spVaPJ@-}`z7^J z1R;fr*=>o7+AbB|FY6>y+M<$Cx#yqieu~2?7qTOai0$H|CB@6rcg!x8nSdKio8dO9 zgbR?FWngW}+#pE?h|CXrTAU8`53|5uvd4tX9wc)Ps`VkbDxPPP^QSXI1m!yhK_g{( zWR*L#a9|mJd42n;>Kay4HGG(fwyLw}DcgH*_dOQIKRY0$j8%yldaEBkOIn73J;KAt z?kDS7{5vY5ePF%mQ0KlI&qsCZXik?qp9VY$TP_k78@rV>Npm)bvq*@OX>=o%x18zaxt=@tY@ zP^56ZBkOA9gUQ7lDBUlHoIuNGhS0J2r$DT}cIh+lC+M&Bd*a6%ig5X`onnSE#{;sc zgmfW`n|xIsYd7{XU!^X;X;_4UTxhhW@y2qq7X@LZGFy@?z$Vl(n$bVE zMa}k{eks;i^3$C(ZL;>l%qK6^L1J7RE&fvIC_7oKFvJ&eDb6*9h@jgaqT>7$Nd*Lt#|4tRxN9z{`AU&C?N28~twadD{Mg z>P$+%fgY#5ehi7Qt{h6O*Sqy<&TlZ{Q$!3<$msm0N}zw3LxNPHu<+ z%$n38&J7ADc$4K#)3`2slVQWtqoe_^@j$Xmo#@#Ekc2L|Gm_&qTBu|_h@GKz>xz}P z+|kk0n4ou}9?FyjNH!^V3ert-fA~WyLr?0>!SO=JUjKUd1b`-8ULwo)I}un>0Al}4 zz3+_ICnzJ#fHRrB$G*~nx>oD>C~%TyobVs8%OgnJ2xho!Gvlsv;8@;8-^Kmd;R6yh z7o$3Tm?P@J+RBJhTFLxJ{=FQtxwY&bD{Bcb)$8}@{NH!*@R4m*77|qZiUCeuaXF`p zPN-OVAX1wMPUwgRuh@}bcUTg&nuD3Guh!nA;^GD*ipQ!|*oI5F(cxLv1CR#HE2w4^ zXQI2;`u#E>!r-Yi{#oxB4~~pp-&p9UGN<&zTe22En3C>OA3Q(_!|Yb}v5sKZDO4af^F;^qL}hQ{<>XOgL%7|Z3&$X7s&1k?U93&QE4i?36fgK1 zxb7tLk)$rrcZ#xu?-X#~gW;ZehUHC8#anqUx38!!G~pW?oW=*(w%FUaD6@wERf6MO z5CWv;3myAjEMPb?>FDby8?vjX3{Z`>_Go5+;9V9vM8Wnk2z=9gSSJ8b@!^=dVZqA^^D4(y9qvaEYxwfTy%Zk~P=pt%+VnHtkdntXt4Bl|}i(mJc2hYSH^+ zRO4$AP^FnWB(4OP!LSrudOp_wbx?wQTAlH_4tM#BR7(1e@tlb7$Z`ZY&(&Mj2q0o=BUOxNpj?Mc&u& z1z8*j_@v*$HCaXS+av!{{3J%s6)&-y&#Q)oJa?^_hncmhnzS`G{=CC?NC;p4I#|oc zm|9)+qxPLQy`&kwgB?N5nzNmkj|2O=-66g@J#7syRJHVru6?DB@!Xu`*~?(dR6D;3elJ&6Qr3>;Rz&B7?zOgU|uoI0yii#AHz2I zr_7;mf#K5Gj_e1jq_`AEF*W|6vFpJM?+)LAxvJV5aY=q((O>%$&}an?A{JsU0c2A^ zvaecW50>)rEfHJo>X-^90kem4!vl!w#f=ul8#dI?0+(L+ndDTH{m;18NTu-kHXAt8 z%IJHc9o(B(kf$2WcnM2hh?e`t0tf&mxx<0wI!qbE_BQPGIIW40duZ?Ao9T~@VRDMd zc>+~YeCkVvnOXLDvu%S+-Q%VyaN7dUf4+(ZF1LDeZ=>+nu2Ex$moD`ViLEX;#} zA~F?VfrXVB(xwencXwC4I}S$=d3>#I|yO0nbBP3Pe{R5A-xf#k?p zEkNbvqBk-OOCZ{dTn0fYg>94N7(R=^5_MPSRvYSo1jGxP(*Zu<4UZlZ)DjUyH}#A=VgQdwuj?k>~PBn0Fe?Bs7tlF!?ky345az@PONm0RlGD zVx7)i6+kjgJI@-R1ZFe3KRUPz`W$Hy%*~2V==RH_64CK8KO@F8vh@WxHMZ8y*801{liZM=gCvM#P^Nh1#sfcCiub z1rO{vJimR|24jUjP75_Yu~1CeJgYpgqtORlZHWGW{f^sxYahzBxsGoVU$stnMYSH2^Io=z9k>%t__`IS$jP!jUYQ`YR){N{iQFrMz z=zzAqRw~)v+!|zZGziRmuIN^k30C3PhRgb$!}*}#guu9TurS7xz;`TDSv*L(a&(Kr z#fye{CmJ8L-8X$%H83DEC)uXFfe3A{o6*tUChq62BB7VR+3y$?=my~+irLooubfpr27bz88cPVU)h{n6xAZ60 zK9V}ZUKkR`X!Jk3H==^_AfdO($J|r4^*2%c+#JBtDW%U;2CZj8x*ZOxaqV(R{RN?h;&G=|3CM5gldN358fA_#0 zYCM7(=ey5;`q|P73D%pcMvkFb2XC+3F#VhsDMyH$r7eJ+hXjiz`?6dkszG1G&3*~C zyEb<1Mk}g0IM?<|`z%2~U*w?&l`dfxv82toKX#R3`-L;3Z}CC5@8tRrO-Q22Kl9C< z9Lx%txc9>EmRiuMeqM(p{EU+ntU$(t-7=5ihvL1n&Pp-Us2h8`Uszi*CKCh>{AEx|Aj&6--{mK4-aOkyicF9)%r4?*CnYx=9*UrX14@Z0Op%&m29wqV8G1Y_t zeW8k@*{-3~AYw>AX>&rDD(EnNy76FBw&$CGRt}>;^M1T(Dwz4$N8D6}XG3{FG!IW_ z>5PSDW#>U48+^^@b-hjvZOOei58fwt(eaP#Y7Y0e9=BkU2D~vL!@VbfQ8YDllf*{{BFmVCvi( zrCBD>|8TSnbYzjr0H(H0;dy6!^A8JBm_}U2b~P&W9qk9P_SL$Z{$~d+e1F*A>NYOV zKmk%VXiZn(byLVq26G@&sg0{IVRV;PiXc2(R;{dCDf|UI{QZ>VJ`V|O(vtc8Rz4@! znia!J*i?ZOeK3ohISTx1|~^hsHrk$Ze?VomJ* zM~lH|ed-Zw@1jcQ}1BhJ59Vm z`i}R90zw{K-Uxq{0Uz4NEx7mVZDiiIy|pN$z^P@FN_59WHri-W3<}+vb&}P}xL0AIieWqDq z>(=-R^jL(P_C0eHmdWlGP2MiE>=URI#aLk#-HX;tw*Ah{S#_;H&JWlktkv&R1wB@s z(wkFq<|xG3^^U$0J14Ce<&QgLP*;+aPqASIVC%E9$JpnXgf7cB>1W;l7cgv&pc09T!*fe= zyEi2B2Fqx!`UPxTr^@Qd*yPZEG(wOjQ_y{AR%`YnC2=5YB};6LR^9A_*R0giXD%;b zj>H@As4n_JleHG_+SFjz(7EhkG{_uEl4y(?J4f^mM;b}N;wXBPZSxN6j;-WfoVDBD zz_Ge7%Fu8>o;1~sv!(vnLRK%t!90EWj*5%~m&xTdWRiJJD31(img9@H*9pwqt>BFz z6!)%6i*Ug7<~8>G3IEayWkwmEMjFmlppW(lvA!u0NDFs{va>}KxyW&~H1C;{>hKyz zW|ih~O1P}pAG`_TG*HA`%en1+fvgu;zD@oY0X{wT6k(e5EdK5rQkw}dIr3HCgRK}$(6d0b1c z$pBn|Y5c*hz0{XBygn+Da{+h8mqO0^J1oPkf{J;1l%$Wa=1i;eWU*8M_9fxv!4EvY zeHDz>Ww9kA2O@|mBA4&7ha#)N>_9=okOJ-8ozCIy0Xa4Z%s396g#>^seKv$1BAYWn zIEb#flgk1DDsdw1wWc~|Kj|NjFH6|OL|rj(^OY1b?$UF7baDe!mgfmMbS#k7I(3L$jY!!E zIvKB*N`!yLT>ys0M5+HK?>K7D1jR$VDv#_e5sXGui##q~_oR&0tZX}sKz=An|B|3W z8*k`9gs}4L&~YNUVfjM)=^*dLGN9tWBD~^p8>t6#W8i%;OQ%svm*tCXQ}h~3Jq?s2 z{>U6`Z&w-;Ma8evDCz9SSs(#=Qkrguu5@n$!btGIz;`>3_-A!54^@DQ80graK}w%D zNlLcf)$1=Ak)rL1e<<-wnd+~5&>a^O z>&6PJQTTIRuYxN4*<)J?^$iE(@Fgh=I=7Z}0L%J~p>1pxa6>2X!RRqLuypG(G2aOI z%3&aYq~tIjWD4wSCrB2OyL8NzTo^k#zgdgd-r2S?<>9yh{-7_bpZ!k6WV{FcSVvbD zqC)BRFI|}LE;D9#8VwKuhE(X?v%K4G<||hG!n3(C<&tQPIM_d96=pCD?DfGD0`N^; zTNw;lvEhiESAZTiB)t5!Ow`b93>|^Y%KoSxBQ9S77fm6Pm$Wt1eF|QfriRCP4tX*K zL0(zCy%1#YNAQ^ZL*#rv&0@#vBufRdMo+yihV~J^D3FofpMJ))uoJ%#kz-+%HU5b%ie6JY z`uthmu@gY?x0hW{V7;kJA`a+3)_8LB25y`xXhE<`qRS@$1@ymyNx<jr6te9044;W@7%-v;%keN^9Qg4T^=GFSuEgp_0 zKdvXcXRGV_*Izb|AyyW>G?*(#Z;GTVvDleZA1;WnyWQ(T^(=Zq%rKux?kFe~@Go2( zvAqu}tlsiv5Bj=AHCKhxYdKTX!%B#=)Z2)tsGz(?2#*F>JI7f73uLy zSa(+lsPr$6WM{sZ+n^#TqH#JL^x7Ih{Da%#%_l?5-f75R4xs8}6?uSYRk>C`Q%a9; z`3sFl&+-Xc5CqUsA^NCl#sdI}G4Uq8dRu0ksLYH%s;`-}(+7@#N@sA=mn42uKE@l|4%2S53)QZj!9hT?T5)hJc8oOUkLPT|Aayk z&y}B(i}~fjJ%VMHOg;EetTPQ&oPBV})btfdCKdFT9O;W3{8n~MR2kRZ(cdDATRFJV z+Ka|bY~xR$nO!l50-$Y=hg6n5$s+%Ig*?@>wUw5h7%dY`hy^y=*d%`fcV0!7uCn(6 zo_l`t&y(tggPmU3ZcTo!WC{rbDSkCI$6h(2@lnCxnIfSls$(Zl_pjCVuhHd|UH$xv zIps#8jdA-vZ3hykhgAo#b4}RE0fiif$2`L)fEG?R ze#=WA_oWWaEa=@T(YHuqPD|r=|C+vzjN9QPX@V3m4-Q_Ep40!Sv$la(bpBt1JPe3U zT-H!A6XPX!UhOAP9<*4kN?l;equ+WYdBID6Att4~Z>9K=w21k&#Q8|y{GofYh~U6c zAQ(cS0W=ank4lR6h`a5-g+`8Fn;5UKyEK=ftXU51JkAl`O|x!hzgaWW!zD8Kx%cs| zjtrgq_+L!@r7UTv5%fX!r)18)$ENt4%d^2H8C0(}8KjSQV;=cwC>Gx)1#=(komy$= zLXuQoo#>=w>sOK!z!eI?W303<+@kcVO4|#hOpxSeh6?sdZGd=8(ArI;C`!BO{Nt5< zq;NGF-9e$}X0B7)H}!V3od(0~o9_fkU5*k=C#6i~x)N#JEUox@dt$r6+DX5;+upQ) zP`qF+7bbU1mVmhkP1iH{;fd77k98e8&PI;7<4XphfUA9@XKzlt$Vf_HG)nb|0o;#a zKBy$+)~BWPWz2*&!@^S!D3-YtF_^R}_?6CgKi|6>IkWHX4eqY?&>y$hA%g%5tLO1n zh)E2mDBZ2tfalGGd5a%W7I_KoDHm^e|NX}=3L4q4%RZ(g)h2uj{0uEDZ?0=n3lst$gr%!xHF# zzmgmyiVA6WA5iteWAWtl&J2jLEe1Km7B4tB@=Xc%2gDa0+e}@o^(wnScAA}%K8V_v zXuFnC!$1`&+aG$4gdj7U(AL+!@&3hp*c!|P|Lk4%EO(5%| zSJ>)b=P8Wxg>Dzi+@n&rf%p=)#$vkdnMqzu2^9D@SV3T`%}+T zb^RC>%r+m9#@H;@u_cfsc?!y`nsI`FHPu}a{o#xIu96?Ub9pz4p9FP*mCxG;vz|Q> zadHGPdw^lS!Wzrd2pyxNjgbE>$?hdyP`H$OiLB;9+2Qxj2oXLz^!`wRF{~H>D{hEi z9dB@{T?<*OFK2K+)M`v{6^Kq2o4uk-mA^?(Vf*|%InoOTz(+cCe<6^F;S@Fkw(9mI z#EeK;jtOIce}jzvnGt}>6M&j7U8TxzrVMyac=;8eMa-9Yn=minm{g(dr-ee;Ad|CJfB17~e*1l9Jcn=JusAEdPu5qnd-3C;1#K7)=i!U&pv{=c z3-w>(B~6T&ds(1(jXqRo>5|;pcb<*K7=3RYq7ka}uxP8oJw` zOKE`(ff+ZVMpD^+hrG$hCZc=Je0+^paU-`6w;8wwBXNr3g($AGfYc4#=qc*S_d}5s zECx$;HqN5AP(hOyWxc*KG~({J zJWoW#bbXjfJUK)*l5nE>J%NG%w1A6lg5;_u>MZ}tUE_y2aGSjd)^7?*uOxE-8nZB% zyt@wV7W;kcrRS@M?%cW_qlC$7=!YKF^xa+bT&IrhNR=e~#qY{|0xT>R8mGk9=g&Rz z?hL$;rMctgJi|7+twPMp^xw}Poa#aKCsMnR;M~;O8o%+%JtpL{j*TSsDU56{-9~4D zulAT(7O|IfGWlRvfrYS#l!xZ^*4ZfVp27qX{GWOzWowW<{62-A1_AobT2!&eP?ov% zq_$mgI+Vnuk4GdHFNzN%%hBq{F2)~~%iCWKBl;T|ZemPaRo#XrKIz_hHW0rjpB&js zj6}$ht|cjLy15K-pC}F))V{5x6IaL;Bo<6SREL@Bi=>ZN5*bG~C03Md+cL~Cfn#eq zUHx{>4TpxllZOz~C7>R=Axby@QbVjr1gX^c`NKIoZ!&6o3@GB~2y912J*&sHq%Qkz=%(4T4ZNaaFGd{L+tTYsSi;^i$1FeDCt2&=nXn|)BHId{P3`le-gyJ6m%)I=-&ITbCGQG z;X3#ME>O)m;%j27viWYS{7cma#!qd}2wiotdxM7Jp2y6{0Y6NTvUjJ^uz$zQgqH*N z|Jx3k;ZzR}4qNN}F*KG%9Sg1&zaNy!X*VR>KEybE%gZZNkJNFnw8kt&4TzOs2+~50 z$rgF!DDR4i8>Q~pu*tQUFy3zw3^e$YEeUD0NiKG=3U(-upZGHBl&uxH6I4G$yP-YE zpE=|5;gz(IwCAUV4PpbKo)O+iIXC-ZRPW3G9RM!paA41*(5uXILuYR{st0CN;E!Ly z0+;uiIsstoEFYIF342N(pt6PZEiyq8Ze^H`7j^dviqEUQsY^IvMo*m^m%-<9>=7nv zNj)@+nPzHeCbe>}3bgsGDESxA`7!rH*&71bhf?^OUYS92Z4P*{lW< zQIDKTpUu|IVoVe1zZZa%zmSifW&+-*xx+7{AYd*j&q z>SvjJDH=~ZHy^w|>+7R;Y!nlYvkDj!ir}(wRBXmIj1TD^ylzOSe{WZzD982oN>vc5 z!3E~R+G|)#m_`s|!1ZW$OcI#lcxW_}t;FA3)k1m#whuzPjUZB9#TF@P=BJoAn|1(O7{j z^cr-UOyJ{Xq>}BD;ESc_T}6YiD#!wb@XEI;7#al-)ZB|5;-lQV`v6|0Nt_zsH_Avv zletPl(_R1)1Y&x4DlPv0-{TQ}|96vadaq^b1PR1f%0c5qxb*ey2yqls9=sfWR0;dw zFtF6o==H)T?a?7ErcMxL6FJK9nYptZIF?8pSCWOfG@Fr%76YgB@bOs+%Ray%MLpDG{)7(>wA3^g+Hn@m0kjf|w zpJ!q!WSE&e-#dU{{aOE-T1|gb;4L7q@md}pt{>W5j9KT zp?{t9wTJ(TNT?)$G6@8&;RU2B)G(R_3Qs`KPWvisdmL&CPwf9_va$oPFfVkaWQ>o=4n`(vT~2Ji%OmM4r8fb8s4;!A{I)o*HL^1cINXGj z=X6-$G4%GWeUiT-&UylObdo&unN%JU9qzl@cj3l^^(ov@>Mf}MeVCJZ|9XS>J;YX? zG<;yoi5I-}WA&$O6e7PceqW&^7L@tV9CAh$0yJ5Cejz{?Kf26z=(WOAYKn00;5@zt zDi5-D+~SuZF#E1qKp9NKaMz*6IMhff2E&L~Y{t>k5*5BP2GQt2B#d@~(AuPUc>$WgigtOLh@|rmTerw}(NIEfdY>g@>SX*mIeoZ$zL2iif=wJOAI%BV3s>Yb zJ;G-V$I-!x0(Hs3J|A>GI{#RDV4xy9+3>@HKdwTm__G1al!0Y6N42mo-zhTNQb+Wm zYctmxI%UNQl$T|^Z@=aeFYU;5XvUT=H<%=q_&-)|UzLtR0(r?~$~c*K%#0lnq8tVI zewe{hij3nNR{CC{Z~B-oyt5IayVuWUyp_xIuYqm6E}2N1eLDaOfWFH@i9X@P{r?hz znV&o+^$N^&Yl(D4@=rEI$B?u3z?yoHJK~gUzd*roYILpXWHf#WXu}en`IJXWxEG%l) zq^v;{(uPRw;Xa=fA6b#pIc!aFnA|=QduhHSqyv$B@32b25omhNF{skpGPp>v^hs`< zVin?yvyS`(D1)9GPdA^5L)7s4F$Ff9#-jsNvy#gW?Vq;}bdhQF7$h0A7-Hrl4TAjm zOa0{h01&iu#jmt6E=ET$Z3{{?F1XzrBS5$eM7gOS@0IR~gD!OXI7E}G%7>nAaHL}9 z5p+G)$3i0^=M04eU3(1t2lh@wLTtCQAjf+zpSYCGl6DexVYDyA0M7dI8mYeglAT`0 zePaz^Q@)OnEntPc#Swh-y{ykrCad!!f52KW*OejjE#OfHgpM7(7+Ame+5G~6iG=XvQollwJrlh5p`-tmYst{&rO{k~OdXSu+X<8xpto2z^`w7Fxbg)M$A*~$KGc8oii z(p%d={mXgwao^d{E#WI6dkqhyAsnIG{Ys2x0%k?D&lbw_yx67Hs!jtgqS7NHgHn}1 zABhI@Z_eos?JhU+;1i3}F>TMx+OrS}+?S0831(v+WE~QMMg?09hgUmIl?+J&WUb(FZj~2rN4wWH0CL=&%iyQ~*dz~*{r>=qGuE6r zIwqc9(j#1|&_l`)7l!B2w#mAY@oCZ!GxO_wO$pBr&X3uz@rm4Y(>d``E7<^6$ z5f#5e!NeL@0*}^mp+)pgU8w23rs`9}-VDur197x+)1o~yEn|j2by$wTS&Jj&q&i^ZY4rjdaDvr!>64W8 zl-x*{veft5wTP>f`g^|JkYTnLBK{~+DwtRA+>6%VFvEYuof5462W@h()@|V4Jy7z0 zGC%nN^!6b-?Q!~Xt$nBM^6#Eo$NcyzdXbNG8%dEj2ww4H7FG7`5GNum1T>YIx@`wt zI5}c9Iob6f@@_BDJCVl}$c_233Y85uYKO%lsvtJ>1jAePu%u$#;EC=%B_-7{l;iP& zG1NM9CY5aA-=zs>`mXQ9M&O+KZsQe`bUvf{6xT`?WBe-s#eaB2H~09GvgX6G#~6C- zBIFxJk+E?65Pk#>NrC1yD8e=|pr|Xf)7fJxKE;{7JSS*4gR;F=Yw#o%uj0gGl|phr z*tW%wg=&|5ockH7%_(6;E>!QF{O;XB0Qm|dgmdO}xx)1oEmVb+QsN;bT(T7#I0XD#|E zhNo~rr@hfp$f_-EI;znwMmheh4m=xn%wMf4$yE~amvL~+vUGNiqp;%pk~V8-K=z(J zjCVE`%^CQesptZfFwS@j8?l5&_bW1G2b|apX>oEoDZw_-*#89(&H4px?~h%N?MVdP z{x>fjvVPDI!<}(UZcc*9+02A^Q^!QMPFcR$a%tckKXIWJo$Mh6il!k98m&;W(fI(Y zdTrhPYc=G$j+E{`nS%tijCy9vgcBZ3=TmQIMtX>9E&Jc0pG1SO|IN-VbGFac~~%Q)g%^RX+ssNeCS zIeKmY0Dd*G2>0~*zmzzo>6_1?5F*vvdPQO1Ex3BfcQq;~t;Y)#keY&R&?803h%QOBx8WwxO z`slv?)RctAzC;f(|7c9Lb_9mS1Bty2?e2JC`vv2ROGjQ zk6(QueAWeMzzJg_!-i+D)1dKoq<6eS?+E2Bj-{Qg0C%}4Q`mVWd~7q&oGN9}lljP@ zZze=sva=8n=Exjx*pa~oBHfOUwn0vNC6Lrn*9k5Hvh4SJj zl?uJcU?$RYxh7+A#eO?yO*%S(i&{4LiT0qSJ(QXjyP@EP-;;hdDq~))yc7mxb$72= zf6po_Ujl3_8TQx!%|)R)e-oa5=&^?^E@Vkz^2euw&+`#;M0BdXzZWxhDl@(1syv{J zSRZ#59ydIp1(jt=s*tN#%@J_kfnx41r83zgfs=S7q5fL<*Yoz`)(e8ZP1b6x-9+#{ z{$ME~(fmZ;Ia;!N!X6kDMm7a4$J71|HZ;%J1VV8o!ul=kf9Oo_-H@|>mF<78;XsSPwEG{$`GhVd%vyPN0wgf zZX{!))HSyDxZA$%C%TV9COr3ym|#C3JGTXaf@7!?zoNf9x$DmCUS$=v>9bu{izDvN zY*3$u1_;76$Vm@_I9EXrMw8mXt3!0OXm!3@BZVm?6-ZoJ7(u)T^Nu`_Cxk#ZpPut|U#_MkodypLT?B;lw1-Ufw#|)w+rdY#`H1s9h#dsWM zb2$~WGlRr@)Rki!O-zRas5p?F|DQlGTQa~cR%-7k_9UEtuF%r`yVWJ0a zOz3kEbFX-43KD&!d3|B*D+0DMa0|@hvDPb0T8lzS;jD!wiZ2W2IMWkrzRUr;g>n`O+o8kni&JR`WX(d|VMVr^dN+)c!EhGu(r z_a8DZGEqbitigom5F)X^coPuTG1RPWecnl6qN-_AoquHu`a$S_FB9uRy=S;!Jz}cy z0xLSskC9*!eoA}D)S7sFG4;=&wb=#Fk@v3<%(ZrDj1 z8gpS_O4=M&uVIdVQ-jyYG(F!)>q1ff3%e+l;i&D&~ub*wd zOVmKJ5Gu!k(lCvpNEvnLfY9CIqiwqDHr0MR-)N=xs|DPu=&H&Scdv@Ehf7?BI-s4s z{3?5?p-CX++NI~*t=t#DWZ@+@+n$YoS)C#=E!$OSBliJ`)n;M0H;z&uYKK9oDU|r1 z)t4N5a4B1GCxdvWhCvjjvqFZlYzzyj7lQXe`c${=O}jQ-vn9oM0rHoToX$p%!wATq zOlTDFkU>&UV0>+xnuO%ymV`qW>@;(0RFxPZc;kqmn?~9-`(wsdcs1ai&7d$B_V#bp zVUIZ9NUJyNR*gy7J>V*lyMS1Ok*P@HAvT%KIL>9b) zjXp|#GfQ1R(=IGRg$15kNB6J~O`&)Gq7uORIi%2iW;st(%_#IfJIpfondkf~L_d}tHbPuj@KK*o)rD%f zGJX^TTNIa7K=>Tagn@m-V3&oB>u$!mo2MPa+n(VTC6S^e~^BqqsrQ7ym8mS?z>ozrUPs%V~0Rh zfBzZEo^_0P$=ug`dyzVOaC51mZwzWEB80LyN`quXK3;K;zSNf?aeav!n|6t3hcR#m zm$VZ-#j_oF@9Rft#jeOtNiQJ_AZU*~Rl~0DR3%EK7RjWI5u=JZgv9tmGVVe#*`Ng z?Dn3G^M-zbvbL*!F_+~Vm%LSSXRr!I75v`TV{(u15)_#@#ETDSXZpm$+P6PYPWg`1 zr?|61C7hHraqei!unNEdq~^_S=N(9Mog!bpfG9tRHxvSuSy3eZaf{E+fZHJ>E3xb? z%%HlZDs*t{i`(9dF;}IUwQ$>8HL(@w#r1*Hg>m-NKJYJyY`_tM-&AO_wq5$>v5CzTUe8LGG zz~@%@MKiBF@~~hf{H|;R^HwNO7T`0jTwQk9ihpJx$u?^VGbPY^+(3HPK5)%()J47@ zp8|Ts%AJ~)&^&R4oSUYb!Q;}Ca>?x1YQJ}qu zVc5JpVB)1~dJjPr4(eaGCy?L12Yn_CqCw86ezSEFzVZ!~b@m1!eNUh~`ITC_^zdM%2__~pITXM z%89g?O=*`!uV6!HPsK)xw!BiW#Y;;&Z&zg-=f>A%TyAt~x-H30A)k_-^z+W9R zzKJxi%2jR>c>kqx502NXrX?$hDCK2uOB3DtI5@7la4E7c+xp{Qx+dV-Ro0JLe93ee zI2VK44HmEgh{N2WQ(JnFR5l6A>xfDZoY=SnrYzCTz>4nP47ns~A?@fq^zA~>K+u~V z;Fu=sh%cNF09sy!w9mv)Ch3$^Ptbc1y?W@Aw{>kqp!xb{Y@ER_nj z`r*r8-H5!Z{=OER1Kk1&cCp>7p5D>{;5*}&mr$>yfqzrAHv(JUo z^P53D(%h7X&`_qgjE;nX>0?uQteeluBz=7lxLy(b*yd9JzWZzXJ9S6#z-|?Mkk$A? zsD|;zYf>x3GzfMkT6lsvQJsJsvfal6e?1nv1$Cx?Jp~@5252whDg&&s>+o5U7aF>t zT@tL9@7$c+VdArSPy>=e69%L8gzY-7V?f{(2NAhTr$#u`;iANJa%;#VwK)|&=h0m8 zsz$}&C}c>}X|}R73m2_g+BRJ+GovfRG2R-!c3b3aeCUc;GoS&JtfR~6hrvpt(PO#u zglm4c7_ARx5nP!U@EAtu#DN%q+??2z8bA02Qy@hV!^80(YqgbGyhNAuJn$JHMk$TG zx+&H?Zc!BlD{i_nRwiVHk|AOT=o)ZG3Xd$a9Z-bo?JNo#2yR(R{PHkBB3YDl5XV|5 zygri3ktg|2mYr;K)?TFA6rL1P!i4&OP~{Mwq;+;~0;iA#K3l}CJAAmDBoN$!x-grx z#BTUq?!(|Osg8N*t|LVV2GLUU&6BrF)14cy=|S+K?rhO@L)v0k+qR6)wfKqlLM*2O zTD#oHAarHGM_kD4LlqHafp*L3_icC=X&add(Fqoj{napEEJvrPs4hHu3!zi{cbRu| zjdC~EyVsNC&7qAN2uP;>11w{I$kD8}M}Rk11BDZq6n-G;CeYfAKMbu1k~zj6Q&!(z(YjbN36Ca_MInRyHATGh&N|fbzm|no{in)k#X(oC z?c9h(3oyk?t&B|+YuhaDF?Z!_An{YjEp2p-YscZhOKf^+zNBc1c)NUy6}a>Ng^ljt z2{5%Wec-Bj2)q((2m;^LdZAh;znpH(Q;rP%N8HB19b=}ugM5$(#aoW-gn9$G3+l!u z_5cdB!(JHtAQ))1JN02$f-*_~v%_Y^%&r5uX;E3QE+c!x$Kt_k1BvC@@{@2|dRTI= zMY|!Ekc?BLKicO@r*O3F4U}3#k|X>mM?=1fJQ)uP>(k}r{5{O9&|n9U?Z%#JsB~yV z1nK*JboJ-KzNL^xUo&KuTtDQD-D{M1fzUL}m{Zp2=->U4yYSUrzT0$_HUP_AvLY?E zJVayVTr^#15pJ_PjcNlPQ8(P(`LEp6uKipl6pEpFeAQ>Qu)K`RU2KD3?s}?a%a;~q zg&UT>B>fXAkM`(#P1Q#d_%Cqm#-mZmm7t-UM+&=!c`1`cyo=po?U;;B!wrq}42y-{ z4K4oRKxgrPu5*h9qFbRd^N;@t@hXpor9AI4?R1W3m{+Q7EGu$wSc}QJ^uznzx~A644?323a3WrNT<)K_`3aT<^8H6O zQ*i1WSlS|$FACcVh_1x|mhWAH%)7>4@iM`*WQ3WaBSA}C4e!LZ;bq5I0NQfz`@q#T z^>#sccYoE`Ffd;rFfZTm0A*+}i<^LKV}ka0c1Q*6M7G&hEW*>{o1@7hZp-p&4D}(B zlF&vYS*Vycp104?uj71x2Q9bq*)wp5#(~~kZMowR6}Q^+&aed@0Ulalsf5gHV_Bg+ zpR1x{Os(wa`SM1Ph469(Q>@jeMtARg@vZejt=0R$Z$B_+u z-fp1TQgQV+29DSW(|7G(e)nKXnMhl}`5zwm7;Uj%z8~=K5a1snmL>=|@H2k}^oE_o z-d1&)LM=$tq%S(3@sqAt`&fHJ?oq7gWd2tNq~}OTKc^t=>~g+D;<_+X1xPd|VC&^w zE&kBta+99Yr5=GDuhkm$jJHMGP8(l-R&i^K`m{(Wex+On_l;dtv?J3-K2#x~x;+4p z5}n6AtlcC$C2~eWr7izE%xq&2;$1dbI#JErT^mbr+ln&}r8=zP$R4!hv#=z>gbAjQ zMWJ3mk!rPM-zKh!ABmANx=B}Od7-wzjaE{n0f zM02T&=_jaj>q7NZG9JrL$795UnLbNyL%Wiu&eqE3jj64v#Uw;}S*D!Pf4gt)=hhms zkH{|)`k6(@Yh7d(8@k#kYl&i0L%73G6LE`^a7HW`6E#I9ZJ45kcK2ESO60d3CW|3k zfLk%z16`iBvqa}=-A}V5O=%>6uNjL>$m=g_hnlo+2KHW1uAq7@zb^|=lZ@DN^;C@`*+j`sWAu)JUa!aTqT#ryVI{P42u8ZOZQ z;t$T&47PZ2%m`UgII?XqcVFI6a3Pzf?H5&K`w;YOdBmgG2X9xRG8?FN<}b*v{E}KB zp_um-LG=tZwAobf>>iSYcnm)?v$$p_IdaaQhAC*hh2H-~U$@#3Ha)b$h8ZS`e2PE2 zAZ}1|W&hbeHzF=;I`8l9>zmfV9>nG}%nQxt6r4P8R@8?!#lnZloP2!1(Q!hCNyYmS zMLWo=T9)zgte&I6mZs5k?)0~0(T2`msG0U1wDlVvfPqwyFboaL)LH{#fAn!7nKC%` z$;fcON|o<_vdFdWy&P_Vpl(w!W^2*8K|vwHM&Fz1VH?_s-7CinS0>7>F;5N$ zUi16zH0fLY{*&6$&&jfuvJ}fWXm)0g1Bf_&SV&Y!-ZBMi|4ju^ER3ngi0q=U&fnLP zBjy;W_D@xu?`qt$=0vj4m}9+uMzrizOdQ*$g8aLv;oq#}Y;rzQ)|d{<2VD_@6$$>g zW}VDuvBd02*>BakSTbfFhtSNi+vaecnPr5htU;9NaPy$Decw!18M4svhRCv5qL^kS zJmjQ{VrId$N6d$4)l3(KjjETp5nc%QY{AUlGrz_CU#MlzvBOu7-Ye^1+d#DaCPs{X z{;w<Q0U0BSfNVCB$BuoqcH`Ou_B8?8b%FXSlKRenVXpdT(PBF?3@$E(4=LMbLY` zV#3Le_(LN*c*_v4}KlFnxr%Nz6(R3<=y_3;82X#K&L$S z)ftb^L+rg0TaB(Zeml+aj{%jq_JzkA?!Op(CjPGPbDTO1{2W#;%uXKt5mR(r{JV+A z#BRt!Unu#FNbI90(SlHu7qK_?4j=3arT2?CseevyH5C+1umG&b5s~-?Gbu2hO=~8v z%|u#}su9f}eNXQAjqdZK_?P1k<~a*MzGe#6J7X0(**u1mwGUKjEK!7?c>Kl(8|#>R zR?aixo)}BJPwyasBrBIP2tj^EXSaY1pUvDZ`wr-)&MOnu2(XYPsSH}I+kjUp6pV;Il$vNEe`FWb+ z%u^jWdDmq5DjKSQXY{2S$oMfh6QcT277HvqPdUXm<_D8wkhnO z5;_pO8<59)ZFuOw9Gu2(MwX19w6HKApAt|e$0>j^bljoLO0~sP)QKe^(;|B1K z&q}FY$mkD8QJQ+S`aU2EQvMDKR=hXc3}TR3a{JC+Aw0#R-ezd4ROh4R>rqL_2f-;l zU8AAsqp0ak`lq&t^HYu}E_$jh*1XrC_5G?oI%VlB(@34E2N-X2B?r_%%=T4-Hvz<+Q*9*VcddVT_5tqM2)IW=q|KW2 zkU9`6f=u=xj}KL342<`pKyV%w6MP}!ZVWX(8Cxjf-x1djoArPdz?#^O8I8Yh*c@vb zoO()!?$iH%^f|!j*8B(?I`FL)X+qR!b)XAQUKSh$j$8OWC$3BY+nN#8h3Moi#7BL7 zRKm7czj#%{u5wIWs&*&h<$--2JbY5TD_!7ys!A1+ z?Lxv;fJD|GOfIH&h)$Z8LdpS|eXoHhC#-=lH|vn5iGG5^++)i1qr~(F!+uvQTKkFV z$&qxT0SAxIJ%pQ&f@F&j=$0d59Ua>p)Rhr$r=(!Wob~V+$GAR|AQ20Z#PmBR1YRdv zWpU{c2eUIRoDus@Yh6|kyjP34YxNL*DLg3pJbVbxiG+e~kh}M%zxnKbpj5InUlfBPG3&)pFIl+WY)0lg4*`lZ605BoEw|3vVUnFV-8au`@B4j=KR z^zt**zN@mPXVyoFV83`b5Ylp-d&U5TwrrWTF2AQgQdW+ zqNGDJ;(y<&<3L;8Z4xswaJ{?oY-jwF41Rn|H)cy|_z6;X*;&QkpM&-Kyvwp@GU7cE zA|a0&)X9>{oEpc5&CbDKK`RsZ#o?s7$|; zf$MC&p4n<##&v-NwGp=Ri~eCj={A0Kt@EGoVstqR)C~&g{XuXmLC5Ctr*T)ZkB|se zkrgJC>Jo<(!#mm5yg(v)=0wqKH-XIDL=>)eZaev|L%G!BT3;BZk8jzN4JeIFm|MB?rQK)N`?ri=0XJpi?M{^ zttVu(EGGZbp|=Acp?%fAn5cr0*C!?F4hfHf*vg0G(9vwt7n63BnNt!StRVrJlQ6@3 zji=1YgBO_Q^WczQH-Kk4!kNrUsU{sCgm7D}zPp=AX1aH{2kK0M?n{G)yK7|F7udnBFoC zqQ#`UsXx$5%LU6&7!z}gES%5sLud=D$wT=BvH)p(?q=)?LB zwe+9l6z{dM3}Q*Z*lia=K9*NkV^;?(Jie&-bywNJxeu0}JXJ|bIB2vp3PQweR+E{T zGq$z)F0XR6{E91|CoD4-zL=$ypcveAndSzk`zanh{eR818M>e+blnMY@k5D!XhLaS zHlu_b&JN+2Zm>U-P-K}X9t2)@YYCQ5g}d{GzjcRV1?4}nM8?J^hYLC2DO2 zlxM9Nni!vP9&Tg#Q`6>rcs>H7f&!N0dX$ZxKj--gT(NL64}f0^KPdD$1O3gmV(m3x zEb=l0AqlV`zrf{2eB@b#7>l<`wfNvv;8nVKGY&+I@O%{E@ZpklmpdY~bGYu=cJ^cL>X%cacx=|t4!F5ephytLF|X$k(HY^;apGcqZs z0T@P`sjMm&(v7ial*(IqsXYtl#^=r&H057a6i3#de=Z?OA*iO+{icpQx^%ES&qCX# z{^)4{Si^cp<4vYU-Y`&WjtY3)I3p`1lY$mxy2O_lA&U0~rP_TMY07@L%+V6WQ5fYn z&Gbbl{7W~0?v{XNXsxT<%+N}G>uVo}e_j8FBG{|!&~;}_AzTE7GLrH`dT=WiT!EQJ zkQDndu<5O!vAJncVXc*!Cuc?i?8fH<-*({)?YRL2xgd1D`cvTRuXfLRp)xnWp@r(3 zb7jA2_W`Fne@Kkw^YW6Dd~`&6=ul*y&wK8x1#?M4b=BCELOL+x!2dPJ9YV9H+vz+C zN<<*v-+9!VL)jy`bX}~56M<>%>VWCt9TEonGewx{iBQKa@8l~_zZ6wzM^*}a4$SGl zrLaNP+?C2{>e6fa!ZyE2D;aXbUQr8I8OEzUd;RzS#^mqdr6o>ZBL6L4MliiC0+OhW6Rc=m3dlF?j!Cs0hV#pM6prZ3Io!eg z8Q6pkrMy5k@At2tQMOUUzjU2)I|?RZJ8X1Z|7U~q0it_Fsa_Vg=#c3DXXn-6*{vfM z5PEaP94+|)W8^C(#S;TLoLT@j?L1j^P-DS`Kry&r%IXM6sLd2GgGi3yM5v}#)IgA- zRkrNOpwCq^I;U^_8nK$$sMFKYOjPX;bMdkPnn3(bze^7oFBA_^o5c{PbEZ2OAy>zy z_w@AC8ODqOcaz^xe{$__iM`2WpHe`pOkg^Ygv}~HaJ-q)YzICakDbpOk%|L9NeUEw z$vU_$h5|ZMRzd26IK;u?Y|zU94&T0cFe{3^n7dkO!5;C^WGv$eIit{9wo;)lt-nz_ zmwqBQ4IFzJvrVSE?GJf=DzQ%8T1KKS6;DOc(!T(=S~v?(yv`{-Sm_)J-(sJ|Hc=$z z7%ML#ji-Amq-644rR!SE-U%g1SOC~p^6YEt4hP4O+vFI7fF^4+%a=*IM-q!Ty;j37 z&vIxkwv#awqrfCZ?X;^mYc{H?|5%Tu5h~Wg+Gvp)5~v(`Ueog9L`>g{|Ou1`_Z$ zUe)#!Tp+sJPO6C0_Vs`amRaFZG=QG3$O53=r{2r-3FXj80uL_&2E=yCfUC(t-;z+j zjX0|ip+?5T{0xl~b-S8$oiUJIy!Uog=i*1`C7-evj2n1nIibbTRmyiY2hnL}tc z&Y?|CW}Q^1IyPzs1G`m#Of|=AjUN~ZbjKe!> z>TE#@0d`y3IKRANg;lFdBJpa|7j-HwE=<4sH)*IQjoi&KX9ew~um_@*AP%N$$bPuN z?X6-3DWIGtKj(R`N#_>AtFC@BCsxE=^XNB7`Os5$3pW&htZbOW@H^IpZ3a@*!3vj5 zUK+IcM;G7c)B#CH<*I3;D$|T;*vk~WU}=% zvLSG-uSVii)E@(z@Y6}xF#?KZax^$8)pNv7UihygPck^p(mcwN9?A$1434}Kt&s{Z zD<8RCWpcozvQrEH&7@Q3N=Y;gq5fx!=S>+S8xdosEO|KiL!VI?O@UOq)l?tWm#aFU zKi;M2W)lNypDjL;J4%|~V^X3oWt$8p0m;`SD=69Tmg-&4Tr(VgBm^f=_ufzr5btA^ z&xMGewI;-T9V8_H_N#V!{wrb0*mg-HNCoVd`~}{FWSwisUiOXBrAJ`DrrRNt1rKcD zeWW#E8l`-9o~?Uh109RdpI-8)u(yLC%-&W0^Qo$@Um-d`G<$;@x8TIT%=?i0Un~VP znkVmVvdTZ^h-Xjc(P+ycik0c2{gDU5Q5Zfw^vFxUXR&N?ot1aro*)<{F!^Q4I*#D6 z0{gbF9aFS(?0kgH^cP{~s-LVrJ&BK~yn+;WQ7FPrc204N|ApaKJmfJZJpHIqeY<5B z3>;6}G0qV$b7T7m1KW-R-h#$*O1DLrZP0^Ac8y{;m=bV22AxR2VM4X=|EY>OI~WSp zS2Dtr46qZ4>{q3KCFMz$wU<@7v%0`NMJ3v?Z9<4uASQ9_qL1kx^QG1EG8x({o(*X7 ze^JNM_i@GQx2-5Nh|exacOkxd_|I*CgMPwbLa7j^FTK1Wva?K3x$671sXU-w-VYP{}D%B?}5&8MX~Hy~~JTPQ&d%l5%`{$aNu!pbe0A%0dXDo;>QAo{X+S`XFk7)^MMR9f303qkH0r*1-Zp)DY0XZiF+p^aaE(!G3tJqd_^RTiAv_5?N%}4jr82o5*e;~J3ihLrc=6z-1l#T z95|b$B8#8WH-cp))&)(J!&EEutR7|FDXZDqNg0wX6&BFC}U zHw+l#Fa4Y^6&?_1RT#oUwpn>DrUOy@%TrTL%HLDo!%yHoQ%=g9|D*Vhhm9d{Qn;zi zkY$3S4a6bKi!?!DB8k+O&Z06DT#;_acgT9V-1&QJ;VTwRp8h``qOtVolj?j$nBdy) z`Z>(zTRjStwlcyub@dL7BU9h0VqoWY9ZU}NK&3X#3f=vL0AQ%r#3Mx9f@`iB@|Oq zpkt$nIORMtXaL!c@NLVtjb5wzotkOlYt!!yi8H4n-;qzJNMZb7dgfvtSiIlGeF z0viG=3jiGE_nw}QR{r@At`*a2z|xCY9Rnc3Te)BBC(|@V!b+^v_@W+|(__UO-WzY> zrXQm93uu7e`H$p^X$VzQ#dNkH>{iaOf}j|Ta0ua63TNrz!(X>d_YI=!wL(=xn9I#9 zr$W=3^O7A89(esH;YbvfH+nltnjmw;Vio+|Bqf=knJ{L-J6K6FFR}DRY@%zWLyoxc zyr@;VL;V_p#e4`{wQIrt3MUv|&Rt4hBV zHjUs&2!uk^q_)&VcF@9{c7F)QbdRvG0)@LnL*+Ua2tK*Y$r@v0rBd-aLQ_>=rky^t z%eDb3wWPO}o-xmH%Eelui9rKo^Kr8pfW%9kV=GXoyY}0qzucU6L6uUI+`FihEW4f)<1#c zWa!&Ty~d|>=hZ?FoXQucKfNbM%DBG5##sVx404goD#qix-RvPJr+I*n^GmeKol0pW z*Ad#YnF*|m+*x=VI+RwF*{l1yRx;#VoH}?GNtl8V%8j-P-mfAFGds z<?{A|hgV0?Q?H%iny z<(3<0XtR*72I6|=X%8Cv$BO&C3TnNay4JRsLuFX!?%Y9k#RQvz{#d-bDKq0?pOFv7 zrr4+}c}*VS+O;B@XE1(vInb$l)-xMN4DrgMJFXRf-Lt2QLn2?!o2?+Y(TTYqIy&U> zyiv8B0zeB&FeG7|>Btfrhh%E$djV*uj)o6YVI-lgsf+PzqM5Lq1fo9@&rS++kXBJh*x{m8o^ozfE%RcPKvU(*&%)Du01c^@r{xB#EumsJu{=%c@ch%k! zy3!u_h|3YgnF_g{_aaoce*%-(%J$Ufq|dh%9Vq4R<|1PXcTRDIUmQwkoX9#CZ;4Wn zLltEQ2CkIT`Ib6#gf zCThit`iifQkZhKt$p7QUxJ20Sx{2zPo2y2;eytCbbC!#3S4{ze z;{qEta1+1{TSB+wX~Lw?i71y%Z4NGUX8S#ko3nX}MZgQ!Z0-{^7od!A|88f~IqZly z1lZmP@9#2Bd{{Dbq8fsZqy=;U2Yan6+MBUkb)ap>Q%}+e;JJduue*tq6bS+8;gO-` znqmjMARXNTv7r&=K%7}D%O5STmm*Bjm~_j)rx%2@6Gkk#(t3e7B^dFglM3si@ia)u zGAs?JJ<_pcajcua@R#SFrbT%3(fn6@;0jIh_O~B-2mzkR66~HMyi^3<1M2AJ_28G`t-2|)4 z@Y^dU_c&!`zC;KcI(R?e{RIJ@W#%A$IlohL6^AxfhRQLl8~5J}KJ0TlioDE?H0WO3 z-T3D#I|E&CE|t!*2oGC1hae^L2v4bLRt|JaoWLmjN?N*(rjhkokMk?mQy?O6vjQ`x z%1xa>`0aMR!qvUE_u~(C$pQhHR0?)J*C^y_DwQ$qpZixxXocFw!6r{e96{99M8cVM zsc<8DYr@HgFlKu}|0;M_7N&SE4LFL9&y*r9hKLdHp z_IR36wX+>yIbs5yDu6XYY&c(xmOget;c3k+Ce74e;#*_A7oFm5jWvIw`dYfSCPi;Q za^S<>d4$I$tM|~oAsLY(I@@NO*tzOBWGj*)BgZTgt-Udsdy$VFn_GgI9Ai>n6Vf*R zgY)~URRZ>i(e8kU4ud=BL?w7n4WNO!<%gO9Tf!{BVZos_46_TM7AP@|le7+&@ITcx z2Kj{{I%j7D{s)1+yG%LZ+4B@-RTNSAQ*+7P;MU|@0}FOqMzbioK$6YNMm?(mKfFF zpDTd6Q#7=ppovQ25&OX*=0yDq9$BS4jFO)6m`#4zjE3<_=kF%JLsy!0;2$-)C994p zp1FNViJ~7Jd-8={)v&3!I=nsJIiP0{Be>h&;rkW>{egW+`L6=MZjb|!u%K`9BQE*BJbFlP5C?BeT#G1$PJ z%gB!`Wh_W)Cryba)>_>Z%VXj%Ea42(aA3+VUL};HNAEtjNL0$1Z>8{OS#^AJfN+z+ zksX7r0(U*nrvftR2X@YTDRv1WdVdn|V6~}nqZ?T?D>mh%+-sW~(K!}K=5Z)e>c}u7 zKiW^M;gmBtF&>0|-)?}7+mJ5v--Fay4v@1(dD1?)Xje2~pOd%6+}S>Z(a7gBQfBXU z+M=K9R^VWuUA3_(oW&$cI+?Ln=lAeJB>mWq16Px&DcZ<6o8b~eFEU~> zhN}*$j%vXo5mr(aP#clrFw~SLpy&MdZ0IVVxItaCBG7-T2c$}*PJRKc&B}`-#x1<( zTiq^Fv?$}W84iyM8#><^6m+=-%7Eq`xhkIasMU;^*!-Il7_BIL8@y>h6tn(74U1ZR zU~R5*r&zZDiMPemxst?+mm40*nBP=%k>9K4iR65V*=XpuN%AS>KqHN4kOq_qa}zP0 zBK6BZ{O3fi05&~TMC0>>5k`<_hoINY5xlqj3~P`*9hCcyO%WKs{;CLgkeGh=;WiNb-&1~dsa&DWa>YS|MMQ+DzajvNr<#dov zMF3ZqzG1(zf4ox=Ai<&8s`XCcWO^cZA?UGTZnKR6QD*$8BVoz36?~po*%$(NX|ha4 z5K>Jd@c#;ekF}#trh`KHOh8k01vDXlr2Vsa#s@><(YdftStZYIv*iq@R%-EeZ|b*h zDYpNIYQ}Wf|Ff}8QRuBZHfewebEKHYia-_~h%l+AUWn58Y*Iih6CqW zl=8}DdpEnK230~BU*O-)oFQyG0?=)o@e-$?Y2kp1>Ztt~*?Iv$;C(*iduIR7r1xnw z^h1$6Tq*1H>iZbBS41{X3)+BlE69{%({ehQTvN7g)|@e}d)1(c;dTyW@A{iQvl6V4 z4`PuHQ7uR4Hx!xuWhz<1s{e{I#qnKk1qGNoV$-CIoAzN24^HsUiDo^g437Iv-XN`3 zL-rL{q9yrUNkdx&z38&s$Vo66m(xX8Iun`s^!Np`mTmJ?P^x>_MgA<^;PB!N=v{pF z6gmP{@ax#;z`T*?(tl^%4j2uG@%eQ^AFL!Wpzi(SvK_iC$+u9A zknO9Ig|pYS{Qirh9b6E-UUaUd<$ zQ|{5>S}U+|?`oN;^YE#;L(N;`bcuX8N*s9LO4kcDyNl6ScJ9Vg1?)#oL*}>2`7{fw zsCfHjs~RNZ&6P+fx4B;ZYY5NNKMSJ@PR>!W&IZZF9RtO6;(?)_*IY6=rsinO-AxDG z!6>aM!**j8<}Ix<<-d|TNx0^J0OwjLJh)a+Z9jAlKsWk?g?bf)QhNe@0GQK529~BP z@XJ~jagH*y=ln5N`bsf#Glg8?(Et$Kh#evDtiV=4a~Abnj%!D z$3gF!zSw=ZZeLUdhFeir1 zMRdXf9UD1LsL%ngFo8bX{y4Zbf0N4@h?%0I@(R`tYOzZT)iTE4?t7LQ-))|SPHpQ( z*R_IU#QGDxan(ii4bKo@LKWH49oI+nVt;{Fl1BLiR8U{aTh>Vi@@#7vvQfD&(xv3N znzL!1rZ<{AI>M~`$sfI@+X>e{9f?Z0w0*Ww=gG=J)PfFrYu_HJx&JmF*i|}gbml9@iz@YIsaBk{u;$rK0cho|OkW{K@B z%&D^MaYKxrk zPK5Iye~+Qb*6Nx;lLx7SIJP(sI4LB~U~ATyF2N#y%8x)*^)jY@U+s31Z(p;nt&V3$ z!|F~=AFLa8p19oTnMU1;I>|6TA{yDc@cqe+7LLb)dm2qiQmq$Oeg&2tLot7uq%?0!JYhve#$J8xup(4n$IPN=R~l_R_o?SEJuz{&l)!#j?S8m0{1Z(= zj<)up%leHzh62gyaL4iRvZdWQmSbf@B3{`w(6a>@6INL9ypg4wukpxeygiS)V-dQe zv227f6zSQhQU*#Nfw&RB3NaspG+klDv;OM?%Ov96i-LZREcCF6ZpN(x%I+5uYbX4i z=4_w^+iY->ndmnxQ`5Eo2{_hbeC7*5k#DU99 zRurt?2P$q^g77FNisF}dRj~+LfOO&=o4GhjjTD%OQLF+L+xBVFvLS4BXeJQzIMgCt>;ac zf8OBJ$&+Iwjr=1ICs;t*kAC)-J9_|8b8XcoVGJ)WGMDHvMJsb)#mprQPat8W+g3Q4 zMJOr|JQ)$?A_4e22}{AI?wa}_+yfDXmg7WF=M2sZq{^1+zu6VXT>3kXv51YBCp9_F z+;ZzMRrt8qenxOPcuG6gu-+^rOhwGLg2aW+*jT#c$#6h~oxj}RTLQOL(#;bCVn5DH zSZY)7sUHx+PbIShFl6M8d-uWS`Z}i=(zV^F8MJpjn1$JG6upWz)t$FL9cDqyJWOL| zaPX&1saIZBH_ZCA*O^sc;CI+*nTy^G?cb)MaO&GyG6m+%}&4EIt-2@ zAbG`cIAV;l-DL2a`ezO=gB!Rl-nKoEvoF^1!@PJ=Lk?a37_pe=w1xvm9tFObvU7lAb2~{%*^4I?2ceq_1PkJNQo|;2VX^f0k8_?6Gwb5)^6; z@HFsw1B?jrji=%JI6ND2p@sibggYkfYdA|asuq>qNf{iq$$1qF$7o5Dx6$SmOh#|D^eZbUxg17pZ4e^xS^jkjMm%A`m?Ca(g+ zuuLWkzQrH5_>i^Ncw1YD7C&?apEu6YsARF6hKmi|WhnXv5ayYH-xBiI=$exGY;m+l zY~uF7t(r|utDu035nF0=9=?JIQ>sxMp@b7(*;kDzoLyDddZ-$W1CAPnr9oiaWW>12(bh_(C_KiL|HMK$j1S=Ct%hkWT{V2 z70nN)jtgyvy$}8IiIS~Uy{1!bkOJRoCvs0jhts2nDThK%OQ;iJ$kM{_jLXB~25ME)k>5Tl+|n*)bY}e|cs7b}ksIH_F6C zyfBOkM!NGZ+k&xgwSq<0_HC~`y}kjv)U>jAa^w?+B1lmQHG{?x>+Kd`NA6F3AW0P zgepi~Riv$@6DBdjT}OycVq_Nd+?y^b~Ut{`229OHTId{P=gXwlO(@w>K6j zMa2g<`Co(FU#LS=#;^bIt{Kj^;g>sle{D9w&?B>zJ?;?bE8xzl=2`Ht!;i6ovG`Yf z6we^3{%9>hdwyPnyQuN7lKny3zm1kD)3v^8JoyX7fc6K(AG=0e#D7B8x*Td9m1Zd- zi>5@Pj4Hzee!kd$9Cy&ILX=~jb#&qiww-4)O$yTKIv1;~rwiULW;K*(Z2oY>e2*K5 zsRejZg&BbBKqqpdVv5-Y685ihKI~em30Dg+G?Wi;rgbl}- za+=xd^Q2`+8LF+9Gfz#l}qDaXV;KiS5;ZP_tHt@6s^(OM14F?JG zcG^L7CnDp@N~45khM|N*8jGe@?n{r_ND<rOr?@FjR(Vy5OOdo zut2!ZKHq@#XeaR+a*fKLl)52xm2T)w6)&t6XmM#o#e}+48a=f_M7N+L|Dxs(!mS;4 zoT@TvajiE9Oe%UDY;>o*(LHI?qtYd84Bdhm8ppbz9?EEBb7oR2Pwt;t);ON~O1TLf zVpdGdA@rTqNGn%;ljU6T7D-~YpuT#~1Z-#!HF4^iYmYahsa^0A0gY0J9m|^noj!9U zoM@-3)zdiqxzP)xkGD$#XUR#Dyi=wuSPK#CQ$AFec*yJj-XhA8qk#bfv;m57=0|0$ z*+IXT{6rg)NG2-@AP&&A(S^!D54^Pmf&pl~5CHD7E>53ukd|bBtcJqU>UqdW?etxR zc)gJt=nl=EVMy_StmDaWf`X?;DTZLKq6AZ7P3*(X#O5H;;#i2 zY~k1S1Lg$_t**;XiWORhZvKPonKYaiWAGJasz0HhsLicvQFoM_wh4E67QfP_)ziV* zHVG#(6k{U9Eo@6;uT5s)ZnANyA|gfweyI!sLiyn&(`OoBd3TxE`pL!5OS%g^7?YQ_ zg!(A@BR3N+@xwg3tT_ZTP8EyUD}7Oz2Ar&W(3B^r5~!~=1mVPbT?mOyL=l|7M;_B zS2zg$Mc!d^4d30HMkgm|X!9$`uQ!aRFR(8e2WE7JPlHM}6Wxi6vGc#YW)m%9D8Wq+ z={xhKMz!bo-#?;@a}o!NIrdv|WKd3~J(god2q5NL0Nh6QKvoL%k9m7HVWkl*Y7}Ip zt#y`-e0$GnC6fs;&29!#4g{iWze$cACZ&T-|eDnEcMruO#sJhjt;Jj(XD{28%{AR9VNgvIFHB= zAaj(C_YKi|ZRi@lsLy2dUSSu;5UyO<;lv=(GFksi+K6<1T33bs!$p!bU4y~Lw)u^dUB*wYdJ z$^JWIG`Slgr-usnt_B%-$N_^e?!aT&Bu#e;uGgJ#+O*cXaWKtTwk^>&E0N-HAeEa2 zMfzoVK96VR$fMd$g@K)rl{1@-R`yLO?|1gsg`5GF*+93K+VPsMvD`z`n5Go{16I1T zO45nP{ZR0v?F{xDPjNHFm~MH8&|R zpP4RbiDnG<0ShZdEXM@^G*-HE&DgErYiN%2PSB}8u1Xm%O5-;v#CVC(@4FbUZA+7W zAi98WEFAA^7Z}Pz;jYSnm$zE=uEl=I0aiB%p>WdQ)t} zk>+@C3EW`^qYeP$$>sne&N(1|rZg`(OZLqzkWeVja$!H@Of#d8GCi@u^Xs0~mR9F9 z?1u()07y7D6;N>QLt8ck9;w8uwx_mnPfTc(27gUKRcrzI$Xs_6_$)>N{<-2PM+ZM^ z`x~T{3U@rnfd<;!-YY-=A24(oyBK;*$lgyHNoH=7p68~^=SNeqaHm7?WB+sm zQs;a#-kiC5s5?s!qOb+|PwH(m1zj%G=CZ?g2=f*qrhVmOd!1_v^HxKa-WBY;GFKK8 zf0Vlz-Wc_fNf=(H4<6zxG`QZ4rgf zDGu>jZ6~GnRLXFKavkvwU!6my&Yi`wVjnD7QK=}6rUdc9Ds-uzLmY1jVhgoMWcQrC zHNTfhu#TbHr|)BHXkZMY@tARSH(knd5euixCLlLg4)!s}`?VJekk1yC?c@RaDw)^d zo6IZ!1)U65;vNoe? zv{eXdnB3aSD-_0?UpfAq&$RPRF;Cs$Nc0SuaM@iWTIN&^JW{W3Xs=`MPIPLn@=wwE zLzlIO{XDeH$aUCqcRJ<>*r}Jd<M5j3i~JEjUT zwn~HU93?04%&P+tTU>6v$oh~E0D+Mpa-hwOo?gOKtd90;cf`Yr@LGkcI>i1GGVN+t zoR(qi^lBq|?!{ETjg zaOra&kochPZ>^&5>3iwe)E)he2SB9EmsYS3kut-u-#|zd2oaUM>kFbmegmRk+l4xs zAUrjqv4}aL_`c$etcBFEQ*i1vszu-wVI8QOe}KZfjbCYeB~)*@KC~D?0U#fHvCf-~ zXJdlyZ0QH9D<;PUuUWK|d#3$I?$_%bXT1Hu^BW}l2VjLhgx$0p=7D`Dmd(nDlh_<5 z@a%VcH7Rp3C2o1d#i)`?d&3J?@mxyma}$J{jS@YXNM@>@bg0#Cw42IS z)T#!xX)d5wTW?!^!yZ5!NF{>q)ib95M5QA%H_84+Wp3n#OocWdtjC=_#fD}DQ}trk z>K0Gf<8yVxbZ@2+ic#($*laWh>>=w&`5OLo=x=>$Pa%a~)Q=8SN=}j5HA3s>%DS7t z0cV3%Q{^Zcis59KO!u-smb^$>@gJ`p0x)ROA_4CGM)jyi%CH=M^Z^4dU=GNH!@wtQ zw~Xa&Xtl7zWGb~j#_r%nB#bBygNzR?Dh6g|tf-yhp-5|?37BwAo*3O%P}QS;r8Ls_ z;qK8*JO^*4%ruHOR48l^C5#re2x2V1H$hK+JSYAp!{_NCG z^H>t}i2DE1b?NI3BqW~)f4ubzGBk&=y|$fxbI52o)WZpcnv~x7+x92^i^5(O6xb&s z+tNUT(#Jc6rL(x57d4KCNzr0Jd4j67d+j>p!rmHNgi0heK&>({ZEh-Y3o(fz#PT|0 zb^cA9o_6QH_n{{Y42=6K`+M<%h_Li66!07qkd4#t!m9oq-_%__Ga=JO>oDf>azDSMrWkPwKO_z|Z zEMDl~M`u63pw!#|;YR8t<6XIfjmM7A9hZ8cg>HI-549w~Gdr5TFbA)X5%!6<mZZheG=fm?7nVsuz;Ty+>YZxl^4y zCdn>y$Z}^%QDO@!J9t8_EeuZf|N%X1}Gfh#VIsgDw)#!?5Big^`qBwJ*Mxm+FFrF12(#xArI-=UY$+v9L zs$_%?QbKi`(_>Uz0{S0ZL zC!85>VH`B<-%~|j9KoZcu>ccIQ>is@&VvT*+)lMp@SL$F($LfEuN?9j$ zhtkT0+u!}-SH<4FgcOw?ZQR%KhZ%w)R23*0@gm7F-3y*2#mOL&IzK-VyZ*9_mhI-H zZ$vHN`_NVn=7XU2U!sT5`g94 z27Nje$C@W_nu3)`mcxmt_czSSSx2K7i%K(0fm5$m|4X<#BzpWeuDICHt-2OyyafN= zd&6SSK`n^gvic?>Vn^kgO5a>J$EWQ062dV?-y_b!?SL;iDY~`zu zhv911!gdMHJ%!!EU27k^qnx5(U(eELQ5;`K9k8uq|A@r(-uE)=h$U7<@Nv&3d}qFJ zF0!|~b5qCT(icOOg*zw^K5MCJ8h;|;|FYznqDFw@#sO%fpp*!GXBh6ui5`T9{{nqkq6k@Ni@YUIjpT zm5g9as~S}8&I&(HCxsDF0nE=ZTw-KSFsfNmSP@h+pW!G5o9@R{Pk353;@MLO?(e0q zuQiPH+`};g`Sa+!G=9m2^xqE}gkhXqYcVy3Zk0f?MdIzYdISjRu>^f_@j}h9dMST4 zS<4s4Y$~9oOVYW^oUDt*lk*egd>m{cmPVi4^`nMrnYMDR_JOlF3L6Tb%Ft`e=_WSX zTL9`;1gCBMdJ-}E)+xwsi<-K1Zd1xJc37yve1I^_;KkY&0`3sS?#xh8sFt6BNTZA= z1vI!!MWB@MS)7+@qz@YZC4b*leMnIh;cCDT`*Jg=-P1IhMJ33a$cP}^YiNW$kksu3 z@8n(C#68uk?wCt}gAj@B0FHWpjNsP!vMF5xIkV&!Na3yaZseRA5~5#&>zJ3yP{02l z2hA+z1iBnPxtH7pyen;jViC&HSMVfQ)^rO&5qM!RD?o5#tp z!ZWB)PGhX-UVsiKC_IM~8{N^b9~HZrez<#VEuWQJaL4PA4MxnVhhcL&4(Jlz(-eeISjN z&#A544Iir5uNC+K!!1&OUC%77+)0(B&d6b?6O_wiOJE4zu0u&jIrc{5Oi^>$&=D`7 z?h<|Sq?lam$y8^0iS@Nj|UOuUvz%Sl)Kk6X4soY*9gcuK%zO|xPwYZS{c2HPAxjCCj9anmpk_$)#Mf$ zY=v}ajy6i-gOdvUx=@R<)0?#2A+EJ8w-*;~+Is@c{?p$JR%;i!togBm!*JibU$seC zj0(u!dM;y$WQ1q#;wkbesrdV@$dA?J#ek%IEEM1Y;H+tN z38}F?YH~oMD0`Q1FOR2(T#suoUwLL#wgth#^ulx~0Y8q0Sij0GR6n#YR&LiYP3z_k zTJ=h--k_OL8K7D4>k!IYUdg43guGuya>h>o@pu&@ zQ56lE!BJA#&RPM*tF@k!uCfEGQOLXj%#{qu8Ys+dt{szs0!#rq5Af>hc+mg-r`uqQ zmL~enZ1^5p^hM~EF%8+}2kN(x`h3!Sm5&?=(w3Mqj!u6nw-tjpn?}o87Q|7r%0>%q zHp&~~CCB0@x<5(#S<8LrN&6H)CBnS=F&OGs zU|Fx{d;f(Xi^kfS%_OP>Wj7~n2^Vh_QaU!OucLgxXI+0Ug)!yhYd6D)v;P zJH*jlSPg8uYjvp_?diR9rAX|zS(1wPMk*_N_w%eN1zqPS1SoNApY$4}zGeOt1H2|v z^Xx&U^Y~{GWJ}iBVNSfcB1j`-v6>W%g4_3HM|q5iY;C(@u&2zT8RBSW9ivX3n*T^N zqW^`ki-UPq#I@6 za*<;WM~+N|Jv&a#6?jUseOnL@yQZF#{(8AV4HtHe zA_HZnCw6&Sb`_<+dkI^FXnx}M0ayV7fhT`n*lutr$v~g%8&M&;IB1fne}{~9d32n& zK+K`>6!GRE0T#ZyfS;7+KT9<47Yc;F9XgBCuVIZda_2v})_%+SL~*Wvbi1{-W!W#3 zstGsYZ(o&WjVR-XbVe--Wa?s4*!(f6%bC>!&6X^(g3r?~kh{mc6dkhq?$2b6D#Moz}T?@AO_*E}kKyrM7gWT3~r-ec}f zhTR~LZu1*QJR!<>I^`k_gK4Tad*#n@4bcbh9y2wOS{K%K1~H_w%m)~1QWtZzmrXIV zg1HDI{DaPs$6KBnF0?mAexv0`u%UuTRYuQ@SkNV?8Ou1b%;N7uX4Vn~sdxeGA+_Uy z$ea}MDpLW7-uG$P`^CRWpk!mEfy5NCF&cFQ}NKu5@}C#-Uhn{hN# zkGh;1fvJ-+lxetbD{h!FR3{Xy^;mgfu`|Du4Ht@RBkF#uY71A~1k=ff)i;`(m})B1 zf@H8jmyUmKLz`*(?aTms)r^MRC+I?jr6W=YK>XughJ7R?-;zb9x~vlqd(O|x*YiA; z#l;`&c;gS`%&yjsOb#sTcSF<&sI=w6eT*FK8y7?gYYkqoMQG^`BpqLe{HS|?7S=2& zDTR6u{(&7#bstGwVZUFquWU#(w@`9j`p=p6PHtCh-h1>l^rzlNU1b(KzfBZTQMU(ftzrC4v`{*fMjrWDyy4?Wp3?X8kde{~stQu~7Dwe z^G&pcGZU18DK0Y2MIttjU+;>_ILd@}vNtzS_mAYc;T?wc&j)hYM{c71I#_yktR~$% zgZWg4xun%8rXnkF>#1K+^F%%Q7L;;ND_+25v5;PWm$u}@-i<2*us>*!EEXrjM=PFlAqQIQ!yLuq^8M?Xs zi^L~b{~BvTCwm>a8tL3!ECkFIz2udH4wA|@;jg-^)Y`e%PGgEe%~KP2(4B;{FohrdG9^#pAL+ zqU+^VjTE~Vb9UqhufUq#_Ic8c#a-xu7dR7v5INLCIEw=I7{iRmRqmf+2{=)jO#%QG zCtIJvwy#`^SiQM>znh0i`n*grZAb#L1GuZ<7s2tCRi{USzi>ZJ2$BOapW$p^Ad!ZD z3>r4^4P$tdBqk%srv^p^m-#k`5271|wjUB7oIlaOb>lq*I2<6msiRtd7IkAtSvt?5 zm13&X`64=XZcqC&yO%w2ELhQ(;B7f`?!uIl3gBNY z3Br9*o)L2eXD_U(WQ1d=7A3IRT`zjD473qRo>mi-KB*_B&0X$C-fBgX`3ZEjDZ|U1 z=#9&EaYFk+hHfp%xn{(_7Z>Yds9ONWTBr3{dgM>plC99cp#}S$BHJ@{pJrst#`mWM z7|kFmkbgkE%irIp3vLb7jsjECn8Oa!?+?`bQnYoWg|nnPaa+x&E9+Y0fMGxTrQG(& z1vx>HEfVte@0)uT5?{*oseglOA}u3-_+Efjg6ffAjMn#;*6);?;O2Hc|L{b~JEsWB zOSGn$29P>&QkBtse^4pok;w1(%wQu0R<)!XsrYmX@c0|6FICceCbyn;@V%my#UqGE zh&$D6$1F1tV6XEHzgeer1Y$@TOa<^EAP)-?rXDR4`2wH4dRJ4Na3Zo9enI&N`d(VE zObh#JL$EI@;tMo&7zui`KNY;&7f(*RFl9 z0aj=@>*1OkU)Y?r_Gp+ECValC^X(0J&w>(j>+$h=PCL)QmUor?bo7Z92JmJ*@+0~o z5!%OHeL!2a&{BuH{>|gO@5Op(^j zrL0U6qXDL5ohyW2nW?^y3kwz)W=Uq(C_YCCFih~U?Y_p`DG3Js9pqhLc$(^OP{4nQrL)@W&Ea%5*+~SFTC@ZkldFRQAMNH@&*m9th5W~GV)WVgBc=A5r_*?br$f|l?RAX}(o7~S` zkbPaoVsa?iaJoW5;F#UL5lMb4cD-1^kWee-7jjxa8 zqAIwfaGW2EYWQ+|SkCb)p-7drHp=S#R~w+)Zi-i6W6Sz62|$m$av@QPVVvt8?OS@e z{7lL%qc%7wy%DUROir|iDJ#T2o}$x&@w>badHN&o!*ZIcPbJuJt4Tn zEUYmdaUeIS>B}Dh+NTS0TGo_lAH*ObY_PHil*-+}#xN&y8~=$_3vT_a?HS6#g+^`M z+E4WY$xOm)MtQ}QRffpim27a0H)^q7%a+x!Q_JhMDcNBZP?Qr^VU#*QLL7k(0tqneQYLlpq-?_@it?ed4=dVU6+wD z>7OHc*9d!sL*>4w6k21ZXC}?>0ByP~^XJgfMHkIbtdc5Z|B_F|n zlj5r%H=aoc8wR>*XWdD@p--e8A8+Z4!1#3z+#V(&>Q%XYFV}oDf^4q`_qWqKNQU6N zVpn;{^buuZgrR-;r2FOvSIGq@4_N;Ze<>e2$gCfD)L_YKLi81uLd=59F;Nk)6Hk!H zZJ}L%8m7+R6ppLD;oJ!(!fmaPhOf^&g4>w7@m`Egca+bVDGwrDnRFF_PPM!Fgh}Dc zCRY&k^A0uC8zON-4Hbr%(D4<9Aqfr6>{SZLQL%i++ou{qs7z2Td~w&6B1TH zE+338c%(@5<0u3d5eXit3yi(uhsX+nRzPN1JTXwy8LbA*Bs$y^Ytn?&S0FYL;5Kq8?e0%o^^=UeI#iy$>5+&me98BBN_%N|aJ?gcsEea{nl;;TPB1%um z^Z+j@<5BPOPqkob(GU@nPLIVOf1iOBkDwUA|?DsQzBI~!1*HR2YKOvX`hi{l>?pPij zw&lQ6BP;;21Fnpo=FEaCbL>i8okm6MMtKWAjS`bWP!PbCyaA~`Zt10t|iR;oB*f^+|LGu_GN+~#ynki$<_qI&W_ad+z9#yO;AKr!YvwOPdK`bfHO z$!za$8R$m|P^Qr)MXJvUEhnupOR~OR7}P5rTES*0khsx90>E3wGm<_i-bqrVG2nqiCylC_FFjX$}j-EAhXLIeP6<{AZ-p z4#XPZoU9?_+^Mw575%-%UBU+zJY;&BhdJytk@0nHiR#cfGOuRkGh06#w1^5w%vN%7jP7o^XmZM>E8oj8qaRA57^>v!`-ITz z$1%)M@JpCGYO%6m=CYk7Ic7uOaz1^#1MJ?w_=;r_OT;5HVXIu}D z5CMz}5q31`Eoq#rIWhe9HJw{gpfjI0ovweM@DLn0-CkaCW*Nkd%``{A8V73+j(*=* zTTuChRSuzYcLPurc92^fnmagvA)atSJH=IOOEBQS%JP8GKIzu`=0oZaxCJ&T=gYRG zrn{;#doN8K$wPXgV>AXDq=t^L!OneZ3&DRb={ja^lD(3aDcF=7cM}T#geIj!>+6X( zloi{D?T65`pUt_YlI`#@{dWkIiMAgDaFTdt)0xld`;h%EgP5r#2rGRg-IJh&n z2F}7ISxA8!_x?Dr1HxYD#3vvVHF6BUERr4aWuPSl4-_=QsW7WBsxZ^_Dx`ZEz zIYp?TuG`H4hB7_^TVcQ1{;I-GEE~8b8>=>TKI0&H1;}fQyOP~!Uz?a^Po~(|BI6%8 zs)+%qVrPYS@V)aOBYw;M+W)<_5CoDgYeGa0JvtA&;tr~z&fJ{Q5R-c9k5ioV?m5F= zwzU?JkAnN*(CT=I+!q@{a%>DmSwO_^f^S8zL-ADI$d6kE)eBL1)VU>MGFdMd<$Juk zLgrBaxqeurkXkQJmD~y?$7Ey*-=hIB&U@=iDB9;28Y1cTAtv>6ZzOj0Ht*~bcwZmD zQQ3LjykirS>)ZdN4gq z^F?D5ilquzlR;d{3!q!CL&@TDgl{mPxH@Q`!K1a@x~^~>n(Q{8&_5F>gBj)w;3BBz z9|ok+R;^(Aan=f<8siPROFYPZ9ro4wZ2?A^{D3AhFvtn5yV4z z1b0@WA^Y%b-(SO{%SJ%T?1gUkv$7u%a8R}Cs;C1}k{DOT1l9a0kidW7piU&YvFq?| z<8WP_ywyDE!4`5%-mk4v$GF*z8NJN7i74HVLhrr3j|4X**A1zB0OQ z%q72Yu<3@Dm`-$>}5=au!{vK1u-9PU$36i+*$ZTE=OVKYH5t~uyF5% zS2M6tJRo<;(8T@y8UL``OI&LuFs-g>dBxL@U0}k_epnm%Lv53Rwv(0^N@6%u;sH(x z1;A+NtPHUjBNStP=(h%~Tc}(^xg;bp60LnzasAD6pBclFs2s$FXW~O-?DGGKNy+0b z*f%Po{+NnBHQNEEv?>kce2TTHmoJ5zM#0F@H?1BMsOxAS?}-H0Icj%|_u!*Xh~u?0 z7PtPapn^FjQeV-peu*A3a!O~_gBMELavrJEi=w)mO)Vbr@J2a|3*qjz%cnVs&g2|_ z{CUb1L^~)@%&M0CDmlKsj|dFY>V$7pjpJ4oi-IkPFi&?Hq@}u()OBKYhUQ1ZO)7_U zFd(x6Qifra6Q3m?d5>pq3aLiS^@OO!|uQu9oKqrtJw5QqE13SrstK*I}26~gEn zb_SV$Uu0E#jSoJJudJRjLzDg9e%H0FCt zQ~9&ECHzUrOK3MqqU+NAg)i>~W7*LJU-6z``o_0<*nRPU9^hwG!e)A$7bzLYk8L)qGbiaBnn`@+N2_P^GN6Be%6p*Gqo9Y@TPbY4|GrM~5t ztJgY8|AH$AX;+>dNV5Ddz-Ht zlRwc+11dGqicS2VR=?p^QkXN&?0jf9;nd!i63cScFoQs4%tFFwGq{uM!ny>Um8~;M z$td0^02nL!0HuuRpY?UOds|7*BrMqcbBGyUP0O}DP;FnS>nNx+-@h&PDq&%^t}>x< zpu@RtaywAQ!{ORXB8$^Zm8TFQQ!J9_f%XA)PXM%8)w2IFwBvF5I|9#z1sT*H)YL?i z{pql`k`MD3ZsqcTkP}=d2pL#e(YS7KA~mbh)RXN_u2 zFVIEO%FPl3#hy(@lKl+f%0{O4M|)xROUh8fn=e8Jq$-L>vL)*C88=NTdA9+T$VWig zHnx^L)LZoZph!P%Sq>VABwYt&wiUr>k+7Z15PyY1IViS6Jb$XW8?S4-HKLJd!qdK1 zC1G}SD(}O zQrJv{z5d?dv3UT+v?||MCHVHf_ZL9=+%I?4Uo(NYAp?FB|(fE5p!dh)*-) zz?$*7B!k`#KHSq=J>wZzA=nEK#Igy9#;&DO5ZFrmhGXai-Sgd`3Xez?&zPwuVw-@7*L660yw-fVVusF;?Z>aYqNT;mDW4f zZm)aJ%}9?L9tG2=&JPaZjaE5yjQ)O~`ln;jFwog!9yVPOe}qQ{cxNymbnPz*V-N1k z!(mIRUFDX`w_PdyHRmvSg*t8Om3%2`Z1pZSIE2Qyc_ZrZ0-aM*;b6TNdD5qn)ah7n z)3(5(2*(fljsf>%2oni&T||~yBh>0wBg{Z-6HWwPN(|N}`siHYE)Mx<|Cpo@8dI%H z1jqpLJoh2N7ENbv@u>I%c5RjLpvmd$NH7EQx!f507p5e&g&ljijR=V0O4oS=966!dx4ub zll{?;aV3RR>-EZ3#v>A9Z43{Bj>}El?Jq(Ne@bC)q#47o*`r&jYA@@VD6 z?PsCS1vaM#e!r2|50Km-NY-FDngKHC5UQuwj7?4JZ{YEYL8xDT7t1&4AVJ8pj6!1S zTKL4Y=)ox}(k5HMik@6WnV@2jcK|#z*Z1x`S@mO8Lij2mUI$de5PCXHSRe2@j@gaJ zfePJ1+Db1u;Aq4#^?unQ4EVWP=E*QrlRi06^C$oiR^+FSd;`L|-Dn><#pDHEr%!c_ zmI<(qc{yq89@NB^v7F85E?+(I-H`{WDa`)Qo(2Ei%rIr z$DKfXAuv|lM;uZ+e@PK>H5aI^Z)|z>827%V!PZ#~g?;?b%woeg6PTiOF`ujW0Xj!q z%peyKG(U5c?F0F7FRIR{cE+t^;eeei?|7gX1xilhw(H2rY>Z-fzK&*W1WsK$LO^R4 zU2CUC=Z`8b0g=ltNEx3NeUqB)s zg450e`l-7hCC|gUMdcxxi;D+}6uK(@vfK*1M6k$Db$V$1T@}UlpbHgISw|#B!xJl( zxr$u-EzmHN+}Jc!|Ap$H@`_sn29IBO=)X7fG@|3n$ldi`a5h44#ZCCmX_ZMUr^ zGDGRj?jOAO3LTpI>JT0ph<~)(0RNcEdpQiE_)C^pC2Yo71ul2m^VAA?pL01)a6ng6 z(w~bofh9b+au(Kv4ME7^WPVdGT3>>uxlxmd85V9v6NOuUAoBs9rqpwk5U*XHszltq zL==rDbMKfC8YBdJOnQyo)q%g56nF>iqGzmC&7xLkVwvX5XlaXK^CE0Wd$NM`&-TsrVeH4H zkHK1j>{H8ywIx;OW1J-{^7!Bu2NG{-ttl}tToM_6c!TCfniYCnz^L`&143Kecshno zkVyb?=?4D9#kQb8n&%<1#J>#Q&=11_@6?X5qzk%@C-25PKcWHO5m@BKmFRu05$QPD zXN`eK6F5!w-3sqVk1H$ZXAh_5^U3K<@C!T7wpY3~@nG{?$l>SJ=JzFq?@n z>aI?HM81Bo@|(eotiYl*{ZfhcoFQ4aq7|Pl{`8QW3CE*KfFJ3)YT1B2nWBgOvTiHu zkfi$#$}S_KZn$GRK8|5~Nw@!&4GWA=P3)3Y&AsAyBwRCiG4LuDYB6G(t7HESK=O#R z4^IP>&1v>A8x)mX-V;h0ImRb>^V~k@q7F*s>mn4bWi0iW1&TxWP{&AhM(5GLnO~e| zb)y#iY?|tiYU5-=gfphVj`_UEGnG=Hg<12N@W8>2a9Zjjx!P1Hs(i_Gzpo;Li`(3f zcBc$FYb9k9S{#9(3zSbSm?oEj8iKi4Y(=rGzL#YJcvskJL;Kg|W^7I5QPuiuFT&cL zp5`6O@EX*oEVH8t1Gr$w`-^?i ziXF)bTo+LndoPI6U1BT+00QAaS|C?Qaeg(Yj6)kIYjwCJDAb>58)>yBqhT)f7%A#c}H@D$l8m5(sYYu_a%)jI7 zCA_krN=Q%{w8&|pX-7GVCVwGEK@Hnmz4c4*4W(;9c;n(ex<+&kOZ7TID4B~CSnB9lCE7!A{s@#HLQ30#MlR;8s zw$Lz6u;qZ=^2Wyo^b+@|_(c{#6<;!>CMrb2vf78=Yys~%-Q{c6Kn}GEV@i6@D+`NE zH-loOj+sj+a}mP0Ezsb5*`~&98|?@(1B4POv}ZUS>9iT$BA33Qiw#r;6`MHXq+;Ss zMTc&4fd%sXland6p>WiGJdVd!Ir5e69pK5b4Ypq)+^NN2g28jFn=xYt+xp~`6nbNH4I-qLkxto`kF!GhhWt5ZfSM?jl2 zm)7rz$Q(R3?}yTm!w*)smj`Np0B!(zd8vigZaLscaG(ty`;Lj#+Tn6R(MO6Gs%%fQ3d!*>w*(JhuX{P$~$pwb>CT+pl~O3AeOz zFv0jCIOyy@s(}w;O+R&uP}cAiF&)T%9%x4A3SwfhP(Z3%JH6#fqf1hc-2Whp! z=%_3W?_`DS5s;I0!N8pfioJK7;X}lk#~1xk0iol@#&%%~+u^rObZ2DKih{G5501G} zG2Z^X-M=N*JEyzeOm(W9`{bn7hb`88+_Xugr`)j!^B<_7JhzK!yGVZ$D_gbB$aa!R zC~s<;X@`n|Ck*YS=}O1kzrtBM9?ianVfyws#QY~81?0wYY@s@keM0pIY0Fn~_}F*TQj+i!X*liSD+6w5$4*SCk11k|t8WUhr=Ci1Nn^y0JL! zfn)j|K2`CH=i!QTDrh_Kzedta1$Pd*#sA?eNovA$mQh?4d3k{0x*d?E1MEeju$b)+8q&P3>7{TCOK)vLkgQmsTx48_QF%O zfa8IJK=t9ZlyZ?y(+!4m3*(tzVF*Dn-;q@P;WRa7r4Maa<}1+=?M2SOxUh!w>Y6!Y z9j=$<#(K_Mi?h-2vc7(Vl2(r>nFrE2lH7~ta~Q%XXDU*QzD76xu~^`?2(R5FaD&)oWQe)aeq>#>kJ;( zSCTs;_-fZ3mg?E2rMSk+h!AsNg6-JzRW+cpBy-n;Gob5x2_J$?~Uv^|0|*09F9RMXEZnh683emtY-ilbEp zjJ^DBPk$_u4($ldq!BL198)|AIQl}w2AHmCdcs76U3#QzUNYsgTr|{iBbc?5-Tz&+ zKUXed*sEopSM%WJvX+7|{c-8nyi%oZkg-(`H~5^=Yzh*dBd&I2As@BqxVmoSs*?VE zz;-N&R$(0V!C&{Pw2=@IA+q1{Q@S2M98%aqJb53?k39>YAH!K>3p3+vzI!)|2u;mHY6C6+egm=3*6}pl8ub5Ji4H@w~Pwd|APzcGsRKDTVUTikj|&^Jk5`$H81)}lK4&mdG<a?RV7eYh}m5-#^}`%wHAeVo2v1AQ;UILb=fUS7jkIn$ zGl4u_WtExG_sZ6W-llFtGC%wW{&|Ey>gsm$L`*}MC4uh==*VOLo~3$ATtO-aZt(MZ zYM)bq$u)=iWWxpp_L(o@W?KhV5;x4YB2cCKxY1bw#yO%Kwm5 z3TdLf9lK_Or-p<2fyp)XoOi7Q<;vAYzq%LB!O`{T7-ei#3W(CH&+Mg71dO z?;Ti-T*XYLAgYAK`C11ZQ1y=hUJlT;*{_votb9+c(*5sfjLn0{;GQjzqt5ZN6!hN| zacXo4N*e_TmCkK%X}1|~zaeA~a+hD4fC~TT^5T_+(W$s{oXO&?3xUN{#TaQ{QU86p zvBpGgAw?2oB;A8X8uuJxM9h(6p5QDt)A)f&_21s3s8d zoPR+7K?xCKg(KLJE(PiY8Z2gq;P7BL0x)wV5&y>xU3Bz(q|>wYr6%QvFqf>=?9lf3 z1z(%fYOlaHFUFl(I9BAsM-(7C&HQW~3ZBSS^-?e-F!SV}T?C%k)DwJ*HI;Dw{MT-- z-EI8JpGN4z(Wh`oArOJ5~XaGnPS-KFQCAey`l9|3pBU?y%^sexb z`*PJGKSLK(fUoTCx_^$xSk+)C04c6e9?$`m1E#27vL=+$Lrr z__QzT!wg5;^yYZrPs9A;0`~|0<{>;KN!H;gB_;fpu(%#9M!D1$6^2a=Uj&Qc55{&V(YG^4^gZy^pu{s=ejmg1#Xb@=F7#1WCrS0h zVIn%}>R0n*W-#!kUEYh@!sJ-fIGb0$X2+pWOKD}tK;P_sUPb}r!^zvKl6W>j?WxQ9 zc;kd%%_KH)-j8vN9xDXqX+6#3rB-3Ue*bg+1Qs2HH=KnSdr+jxQ7uSMFGHT4#y)94UUxb)N{F{) z1zKNf-~a8o1_Whin7`kple@%m!5VPu+TcxaI5FEMGSOBM8NuAlzgLZ8%QFeCQrt|2 z&H%iPwm3ma|+cYtlACjYav!m(ygkeAcdvtJhgbBrI zTVaww@Jj+gBw}=j%hLIj-g#hK4VL>dZ4%nCZK-`H-{(n}Ib~4*-9#AIOZhL zV@8k1S;HW4X+WfPt}!BCc9`)sxF!=z(L*K{X&weMcfupa5H5xRDp3T=zT$FSiZL5W zU=xZF3mMVnTIT{A^xt)L1d)G_TV7SH+(ab_Np8L8{qs%!v^X5!P%a@!D6$d2)v6?^ zw&D%8xZM%gQ4Mrnz_qk=*kulEPB6j1SZGg%Q*4z^DWhP>vlqEFbCWOGH-Pi#g^*j5Ba30id=2|2F_0U<GvkIr1-) zR0)95lMwW>RoUH<7r|Rr2>XV9Yb8Z=~0pz%8`|_A!pkpl} z_%6AHDoJe5cJ)L z40P<1!5tasKu#LTcg_hDpAI`?UK2>bvIyYl2=wuP_Cn&S|Klt(tRM-T&n)NcihXuo`3c2a|+1k%8_*EDI)xObR#8hI+* zxqHG}W#P1g3FhxZjBPg;-{$3dQ0IzE%ujMdbpD}ap zrv)^7wPty#gSg)`Mc{a(x6lU+Chefr-cvtOf*!OEN=f^YTyNeF{}eC2LMB1V7Tj*@ zNf}g8Vb|#}>LwRimAY>54=+|)-1)qa(Ye>F$|!vRIFrC}!lTY!KeCP8$qP3$`!kG? zx~qGW%smwjlXiFn;tsR#1&YyHvT^S-nY%GNO8~+-U9*a5!EQzb+_iWPmX=R5de;ST z)zV6Vx@@*!ZM)4z@lpCOTP#l)axeZ^Jb{?6A<{{j2+gY95G^^0X|xS32IoCX%kSKc=r{xQorxS= zo_KsAabsvnk}(sm{jUUQDh3%{{NyRUVC5_J%6zp|#^EJ>Wd_X3DYnL%UC8 zS~mEAQy^$k5~qPYioH8V+NF!3RDY{VAAbOSWJ|b8XM&QJcZ&@AX@8e4C_d_rHDMuK za_BT!6jiu}I_f=hqWth267JC%L;(Lk0KlnINHdZ7|NS_)%HK~jtMJ@iPL-$O;A9h< z>B{HWDcN_*h{g%H21ESa+R3!M9jnv-Hn#scpD!p5ee$!OGtb|Ui*h=$9EV?>uN>^j z1u+?}{gv>+K#8@8i8<-xeXkw!vkC?e*QHOxFK?v3rPFY8F?>`jZtu(gFGZsTIDY0t z`xTD44^bnBJS$rb3xu8DHJxKGV}dyRmw0>5Oo6~>WR`2ecg;jKUhuBTl@ay?-Z6Ww z(9f3&a|~gF79XwlRvR~A?6eNoa8pG+FhQ3#KVebyXIcIr#J*=W;Dqi@i6gG`Zz1-uGcU zJRi!{(~sZJI2?0cw?u*fw~K`IC7_QdeM1Rr=V=Xi`B>%fD{DEgGdwsC7bodirO*Cc zS+vdGTKP3sF95!dnjb1!2h{LDT)(_GJ-G9T`ejlc)D>9%?p;KI5<3k@eoa9&1hFKN zC)np4^o}PVGO0>zJeuq{3b^Dg3zDBsY;OPSL9FAajNnpHQg4Y*ISV4fy*-M(%-WAE zSRAF{SdN{jXN>iK#O9{qn>`nj_NU2n&&G1WJn5blHG1FHv50*2jzghFiJEVgE%4Kk zQy6ssr^_$lr;c!&Bs|yZ?Y2`_i>-&?6T+s&_Nye!RLa4Nv6dzxP;ZZsVF$lRd5j*` zWIC2!v}PqwvKP#dW=_+!>TuYC0y(p*-6<1N#`CPG!tDf_a){R5H6ME&}A=87&Lby{@!f$td8vgL~gd9~+jlAp`wp}{qixvssRQuq`=R3>&c%uO4 zk%HBqzG)$B%hjO0<$VGB8(rW0WRRtxVyK}WEvq4(Zcc3&FZ+ANv~uAV2_BN+Rn|jN zaYrKBTq>zqDh87ikWYGRikolMErYF?DT^$anFPOoSv7FOL;!gnaN zE9a?p9E@pR1Kum|CIXaz#2qb?gL#Br>xlPu?S57;t?Sug4w$&<8xc13Xfdet)kZOF zwZUPE3o=Q3cT<^%K|7^9P~#wB@CKCTn}i>Kptd}*?>HL-R-nJv#;MEN#t@{}e+u~l zc^P$iM%f@SYmZsKwI-VlbL^1p1u$Xb*fYtrw43@ICWx@8+A&y{h>pUB&_@OW`29N< zmN0rp^c&wSNa5xhD%hKO7M0pV_hEr!5?{OHie$H~{L~>8Xf0nwjFZv9^YQs*vbHi- zE0z~_84NUvC!)IM>w?!}n3>cwu%nbX7#B$dJIDagvbsSC^O{lcQ@cF@~>Fh-+aQNWs{=K0u- zCFe)B4Ne(Jych4onNc_=+%LqqE@TGVUJvZQ<7izNh)n$PTkUxZt5^w13l@lO@Xpi3 zeX~U2@$LaH)2V<~!|VAj^f)2Rp%D2=Ah_sc1Ye6i)yBd%qHKUTA@vqKt_>3Is@7*QPaMhn{BQ=Z z*-BxSc!8EtEK8jzm1rzBblFZj*mCaN9APpi<`%M^Ixrf|$|&2fb6L5Z;tAgk|ff<&%?LTf<2YHoLcENzQMZz#TBd zMBXK+=ubbMv{NkPr3_U!q-vFP!?xNJO(#*@VLVxu;i#Am{9XahO60G^WOtOiTkJtF zG8)UCW(?O##Z=Q5XgvD*1d!~x892wQ?2q8$a-|QEp*zX{x7j(TgQHB_Z94&5NXrNw zvDD6hERrdVLIHKh@AXqbH1XmvCx?M-_dUF#CJH9xK)9+J?INe6N4^X3Y9=6*$`oA% zOfRzJoBt?Y97>ubY2l~AySZn6Zuw*K)p^}^G*H)+IJt$2mugj2&WPkHm9mh`fuzQn z7{ylHpD;2Y@p6_>e~-7?gFgZPNJw|SgKV_O4RgmY*c8O70qDJ{*4$EW2-M>ML?^TB z+da#XyaQU9V*_OxD=K0Xu^RAh+@gun zE+9}E0LGhw4M25_veLO)mEW69y+HI1jG^~KWW(3wg9b^@J@ilDU7~+p;P~x*%|`0J zx7gC6+`Y}zh9M#t*YHgdB+1}VFcx9Meko?}TTc7XP z&xgEqcj8lIWN6CX5tXj-?~1-%bL+a^wSK%%iCZdP;FgiUTfd#;GR6*ahm#o<}f z;R!=xqH3GKmQUjyUXA%~MyDrh4Oh>=F`6jgAy^mB1_M)`8;R-T*nbg^5N|3EI$Z#P zV7oNN4`cF{Dx^3JR89@1kJY$u5mRgAxzUT2$$d-IS|JHZ!U zufCw409F;a#;O`BIJ%?qIR4AR=aG2W2H3hD!hkkxMy zLk?PV)@rdL2c;R%x>2e6t4kobdRBi55pS9-KRnm?Ft(v5 z7Q%|}wCy8)qI&_URrSevdk0F!+e?^MT8r=1e*%fJV8@G-^gslCz_91~jdX}2A42py@r=qIr7C_J9nlhMs+cU#%;g; zkIYDZ^5)oLZB98^``v$P7x>@W-UosvVOGycYI9=JHY$|PLE-HMrn&n$Gy4=B%mMhw zs8P?uB1z=^Fi;x*4d9ju1DDzxNM-Z{{TI6XO6d z^UwEgxam$<2~R;pvb>hjt$HTxNI=lD`2jA{1|@M?xe6q|K>tWeZNQ)M@i|wdQ$QUq ztIr0lXTwvAhC3ENvGY%jVOrE5lNx%<@P}paHu{o^Bd++Tl_Q;)O-P{8^>C#vD6hB! zS5P6VS9Dwa4SW+=cZTz1_<+OlG*fP#%0Z8UI}mpxCb$sujhia1zD097Rj{CvbxZ~{ z%`-Ck5`6{xkr*4;ev|W5VO{1fxT`pukm%5Ec-CmzpS3@VV6kVfpIXA0bF$q^fI>EM$;0(m{Jca6#O=OI?wN44Qy2%k$Vl? z9K+c`BeN0O)fpg381ryeCDZT?=en-%>AQ{SC-4laQE?$_)IjL!lOjFHY%f<#K9EsK zn;z@JeR)}Sg0{mMUbJ}rj7Ev#uLD50DY>!+bP(wNYQ&P8?_P(JHY#qD-hs0Th9W*L zeC4WgU>sJMWC_jNXWTgmt#2|66on6s`DLRA4ZTFkHK)!v>?0*>5~|P| znxFau$xi;9lc_uHvVi7HwoF<|s?Ly+bihp70M@PCy^qihi0}4eHb;<;OJ9K*^Gzo# zHlg}s6Z1kS20#<=9lr(70=FfJ*sj*AWQ^Z<_d&LM)TXJ_H1lj?`Sz%C!s)NuoJIfE zF!rvVAwX?PSu((qDy(#3PKGf#mz$1kHUI4Obf!wA{m8XpP$+)`JEuf1Pl5eK?rma_ zH>9KeU0);^BNOS?or@f2mS=E|Nf0;bGE8L$R*_P8f*l}uL^yShyQqu>kAZnu&4}=t zD~=a*E6y=T1&8P4nf?e}fcDagGWXYKYTHwokaaAAqUo>Tq{_Ljxfog@xvs_2)(l!^ z$eg4~IoNYq>c?tSoZR_plKjss_~XB-#5NEdK#oCLA@5)NVnFwEX1##6gCg-{GdJ|= zM}<$qyF{`QSn2nnXc~2S%HhbB(RJTV@61$=RE?L0n=RvJ%a_cHx=E_AP%(j^FIDR| z1st)(`m^_lg*xh3#aj$>Tm7NP^sJ`ao8;^Qb4)*_Dw$iGaCcVpXXccea71f2deyGJ zU+gg&HXzP*BvhADOe18sz}YK9sv(%ozfi!=*l)cV977AX7_Q21My%GEQ8#dtf$)sv zy}i!HxuvgM>Oh`@$EjhDl$nT2mZ+3Ls_WwV2*7R53x&ozKpL?XT$rGEm%__DPu|C}7b+q?G%A{%Lm4f>lhTYS_spwwS@rCuH9ndiO0H{nduv6L3gNdSkUh(neoO`I>`#;Lc3J6FBM)fpYyc!G5x z#LvICykQ(XA9_Y$bO|&Om?KoqddWE2lM~?0sNRl{9E&(qV0cXuY)^q=)e^$H2DHQ5 z75cIQ2ga844c8PtXVlCM4wA#*y`rX?YCOCKu+_KaOlH5x$E4z`?L;e)`mbnJH|agP zSf<7=!^h1IRVX8UR#4B^d$e~1M{d6JKv=h3Ptb*8jY~cN=$waz_rwlU+hY9BilHo% zL=Bpa`o4s@dD!VR+cTZ<#KAcOXMJ-fBC5n}xAN(evJR{->H0!wk91k#JG{1jC{1{pZn9oW~@`F&7_ zL;5xo^B{Z5{zyEiPSj5gg~Ucmhs-)T61Y^-<7Gn_8jEs{b(cNBMxOY%zia`eJ}|AF zXiZap3dV7j#$B%AY}#hiUYs4@ir9*ZVlo8NZ5XXl1&as$CFsGNhrda zgMy5!u!8c&51Uin3fYW7gyhpRl=NV0xk$ak-vL^;IPrCoq@f#WR2u3}!{D2`lnhK> z{gnp3DTue9LLbwwQxtemPtJ+46LRGFPrU45<2;~*JlUG{tfRgxI`gxu{P+^ z))Q?9=Jzg z2dSsn%45Nl2bM)GBvY9)5j9C9Fgw;nokeNeMk8J#4DgwPBME}lPp3|YRS=|-l(1sS zFfezD5p8uvt|(+py47om*9)fa7TZv!P5C-1TRId~Nz)i}pxy&=U!1;)1F3S3*)qX8 z6)M{YO9F}%lnSpw#d|>0ddtZ)zS@g}EE@XY@yU%)za|Hi8VBR4R|dtp4BXa~e1{pE zJ)1`_$u*^*>FVwANI4c#X*aOt5yNEl9B6YiQoebQ;_hW`! zqcH9d$>zV4DzZmuFqPuc7Aa56XmydV3*g_jOTFc)3~-QKjB}Zk6Q3p)Wm?=)S>Zn< zly^R!a=2H;?{+1(Tu}89pJ%YRaHAjuB@>|F_p|L*NX|I5<3e7fvJjz-*}Am z5|Km7?G^_pVQeLSrXZ)Hi?YFI))~#paAuD2BqV;twL8ROT25BXX$V4PVk{&x=5>>0 zHu?xx)I@)1rlK#`Y3hg*>ukfkzi+8^b=UX9z09ZU^Z(rLzJK^DaVSGx{lU7+q{3i3 zK!XUX1q>$63SVIQMiVh%A6t(_IN?%)7c5GZYQfIrc;Mx-2x$!Nh{jJQ(#lP$hk}v$ zE-UXu@yYyg4T<|7sp}3;xAF}i=@Sc8XNVFn?W4n62{jlE|e?;sIEj4XWt?wZldfd*oGM=fd&5q4Iy}PF zF5=nPNx;P7)z%2+|L1_+g5c@rd_^NXS7%uDM^+~yNl>Pr%?G|U2&1s>aB#C#t;Gg3 zADddC$_Y?d;f7QHW4hF3J75XSPai9d&&AwKV|iMb`$hsrf>eWCh);)j1XJKXp>#Xg zA;&yPp7+(vs+>(?vm_?oZjjJTH;CW)1?J3~dBC7+VP{qgKC7qXa5~MSbaE2y>1cU* z8_-<#(7FAUz&5`LRdtV_usv2t^k2q?bjFF2;{Kqf+s!1jxp-^osXk=gNTM$1#uCRy zZd!_ckn<&|WyL=ldsc$oNr#7EUtiH>bB@Jn239D_(-OY>`x2f8{blOOO^UYIt{|7~ z9*A3;#R#PuT58lmzGpz4!nNAVTnyb|$@q>dmM|8^(Y-Y|bQ^fppVIydFh($N^s7S( zN-AC6+71=Jl8Q=Z{*iv~xeOq0(cvljBdMH_f^6OC8t&y{Eat$-c9P$sMUpM2H#lP}k#2W!L1XAG8OL zf7Xk~7BY6@Ux@U&!c456)9%Q10`UMo?h*pr5U+#g*tQu&uE&*Q;$s@IsA0*E31<{> z4GE%*xb8Zbn1+^|Ci+WiGl?4soBW}~dB$8(gvAGmF^xKl`4!^qw?A%f49^0{g65{H z2}3LrI`>jG18($KJAbPv2~!k%kB4de8P|0OD>qLL4O$brL@kH&aQcsvUBg=3e;I~O zRV8V8b))CzWuK-X<6KG`VGiP>J7#h%$H@WdH7#C zk_vL6Z0EXW<>)4Pa9{`$CQ^^^p3$AVn*T9VKEik2vz~Hv9()cWI#dH298EiTF-#9A zlSMI=BFX>O#_7Je&gIQdzY8?Fzxlv8$A{lSC#Qw4LnS_iDasSB%F5AW=q|>^#%k%p zZMxeY?MwynL_$DV?!|QmWvPx)x5$rQmh!;8+IMJ|ay48nO(tCOK zfD<~z9Q2^@6ug7Keo1BZr_SaY$~n8 zJLV!b@CF@^L@#Kg;6#ummVdzr{ifC_thytg@b1eT}+ zYI_8=l~yRf^&&;FgD^8X?MQ$1u70|nvoLSd(wbaN$x%6{i=CM#!A)Il$>fx|G^Q{f z*kKJqwa^;CEhAaM*QWfg-fM^(v2o2}H{9eWv$)9aAFtAm%%>!y=;w>pJZ;xbFY>v; z$R;sP7Aivb@#)&5%8bE?`Py};;IQ^4hMD%{0TAK(UL_I=H>KrQt}8@FIFas?yOGmF$}W z#-!vAZy0{gGAVqa{wA~6sKMun8{SY{l=rFN(8+kBb!F%c%N(K(BV*}lZtLRV#j}SR zd+~p zLblf2F}D^d8>7^4Q>t2Yt)I=7nfl{ppNIDlY#ViENVaM^5wM3~i%ZA$ukMMpEs2DE zXir{tA7CeM*%YNZ)?W&WIO=0{E%K|mP#ycP?`sM4R!o>F;*!T@pSHdkx})P!8=dj^ zey?^CtmkzSJL_s`%qBvpx)#_C1})L`>Wtob5q&N2tpJ3jkXLl@74Y;28>Men$G<)7 zDdRW(gVXiE=TiM{paESuIa~oEkfb2v*qEIUOXL7p3BjGIi^S&d&LjXmzcYVCUXpmc z`#76kl*ug%I{wBVs=A}yW5|pt;2U5a^ekd&lH$o1PVI|5F_12PVw48^jOwnpy5|%u zAeh5MQnZy725(`KSik3RP=!-lnPqlgukVH@cr*ra@$6K(G{yY2An-jDluf^XDS5aU zk>1VAzcHmU6#9TStDBO%0yBe3OYAA(DO+7NhAw zWndg3;pT@aj`l88&x0m$;3pMb*GOZvZGB0Z+A^(c9gq}mdv z_Q9nTvSj=i2Y;0OXPW6L;I}GzB)&>fb13gFDolr!ueNLki3=>+e5dHW#I=*#MKd!k zQ*BA@(%Pi?_?+WTc|8H&yh3WcD}GX7?@4nJ4dEql(k?+FVD2I#wfzK<8X^lJd#Uy9 zQ}J->C61TV+w7Eh-EdM;J01mjyF1t9h76Ec^i9Gujym2#`~;+M5XSMjSpoogVVkKu ziOvz`GX0c&F?7p5S<;eyR7@tq0d6|KJ_z)t4CB7Upub$I;%H`LBP$9EVdrn>5R{+l5vmNEJ8qh%ng4mnMXNYj03Q($Dw zA7BibcY@LlkvE=TKmpcbR8#*oz{YQ>GhCIg495+u?{814cBk&*+3@ z#15)YvTe7ur|8T!BiG%vqboUqabiYbi}`ZF>|bQz(JS0e*;3PNWcjF?8Kr^8H1Bw4 zl2Y#KkFQW%e6Hj%wYk!Y^Rfo$nd6pB%&QBRz*T8m%dQ5ZZtgmia946xxxK44L9M}6 zf@I4G6&*U5Xv^wG?8K9Q&WJAk+Vx+gtUI3lfNF(gaqz0b54W1{mXdhK^TT4fMg)Ri zE@uIvJ>{Qchp1ZV#Q3L($W6LUdMqLiSazVZP|#T8cMllfow}yiJ^-9VAhp_}&+;S^ z=*vO)@>c`^LO|K zsZl=B@Khb%J?s-w@dyHor$aq7Wvwj#m6hi0MgwRDpG3ABpS6$LdONhyxYL}|P+ZX5 zcsfpRRjY_bt2D8tA3wcJ@SjI@`db6PP4Hfck`Cx)4d$iZms@Nkbbk?3h1H&qqckw* z`Eu`SM~Ip{Zbw}SurpVy7g&AI7a`nmLYU>0;8zm1z~$LE$|n>cz6)#Pct(CvLbbGG zSn8Mg@LJ0F%)t|ba4Spa2d=_G7ITs= z0~}4!20*}%8lQ6HkI5|Xa$XP$&i@pZw_mr8-LF7O%H5*$*CcbrD=_w6U#Pn*l;aba zH9y0FSLcojFp$6 z$o&&uT|!X-b}l0Ct6oiZyuAd9t97_7*m?pkRDI`o|OZoJJeJ+pZpPr-hONZJ(wLg^txTgdE+QnWEjo5jc4cASm&R@ zX=1xMQ<%Vv2_)-}%?{acT?k^mUeNV1RU%bcP!uN?%7~t)s&65a?z`+<~lrPJ2 zBh^vzcyvYEBvhEgKMESS#hT4!cr{*LKJfmTHBVvn6r%)|VU&V=lm>4pNcZORFDfQl z_g%VifBI0jkP~VT3-^v({j;z|A<%?PRh1YEYi?~ZH$=tm2Kdy-ED>DteIs&a@MfIa z0f5WNS7eT>Gz8D6OerT!u?R9j$g`KGo^?iYVan7&7auhYqjE-^#wu(`OLhFl8_RZm zIWW4B&$?sF@sEBNm?EyyfZMXZG|eRfL6?}m*G&rvlPI0j^!%{SADIk}3M854nSEzN zo1rQS1^^oob>=j?syjfS!XMX2lRpL&E;2%A zW9jh?k-Xhj9t|>dE*BnwDrubd6cWg2K7@R{C}?^}XqA_PQarG(_GSk-l)vX@=V*H03sV zzGChCUZm*&b7^QKZIHlZD3@og|C#MvcXBeybH!l}H9rtqfqbyo1g`qS&sRN13E+RMu?@y^NSj4m(ddGU(b zD0LJN#RBw0Gy-i7`%#Q%Hc-P1z2ies)cP>hpdu;L|c3Xy4P z)j*gU3hH;P(lt(gZWs>hA;$k>DL4VYL94U!W2K9iTJl;c)~O!SQm77R_cL^%$zBC| zwLO@c?4vGS6Kmh9fs*GCS6ZiuM9Mr@?MCut3;4NmEoVfDa;*? zjOj>nfwTiDyQc zl92QMs5j|a*&;@@{Qgv7xQB=nXmBA&KsB6_lS2ba}G^x?DV|n z@`H=_UG?&1#id8_qx&4d2`^XWi)FsdK;6eLZ~BXdxNLYJA5teW#WKuBXcgb|sK0|t z3)ppRu@v%2>m6@M}f*)ZIQVt;Qem1FEX&h1aEra(%v=>$Whk;@C5(zIAcG70#&MvCcirL z9~EvGGhm?ByY>Np&e*avu629Ut(;a}+6Y^TA$Hk~2P}`zhZQ7|gujMIv=2^k>%L%4 zVOE1J>g524bg<4MQrSXxiZMoujypi4dZOJvu-oE;BV` zzb*7bjtCF@hKb6OqN13ix?_2|;eOzgJei%JSenrasn};fTdY0DzPfnEVAmN-h4{;3 zdH-{U$0QXL%3fQX?q9!v^l~$=U97Z{DUwiD{jObbP5(pNY2@!S;Qn8hf~Ekt&=Vei z06x?8o^C?FpMLS2v&rxB;;FSnjR@ z{K0XX4nHv5MrL};8bGl%wkk3-2)6fs9)Xncuh!Mdq|R{hefBTg&cVtZX!cDCLqLGC z5x3u*g7zi~=OwOuio=Aa~(WyP7G(mMlQh9=5^OH90fh?{L>&Wlkx{W}< z;*+UUbG<3t{VoGGfp+$oN0ijYqR)`M3$mf;pdpUBl6X`)#Z*Fn(d+M?Tt`~&kZ=O} zw%$2Ylw?ICNX}^hLoCPSgKwFE5c$4B}uh;?H!Vhyk*x z_CdaHj;Ol@Dx9Uxp;o22V?QN%r`|WFu81u0=QG-bjxsi2GJ9E1%8BNNe0`bLHcbwx zBi!C5?4=Je@YfY9nOl?N`|GWa?w2)!l;QnVu)T{)QL9}DkWu_sufe}W!m+GI@>6Hx>A;(zeq_+d)$E!RDdU8y}dM7 zk|I6t|J=`DIron}B%1i;HiewQJq)@>P*Ex{^*szZm5ot9WN)4(C5iIqZ|Y+^YE$17wLoDU=71tZx_wK+0}#A993!zg+w_AA{=yJ3bTWDh=gm@@kr z_@k?wIZhBspakGsTOK3J#F`sy_X0A77|Qa7QaN9HL@?U!sE_mne+i=513QKaWpe(O zo>r#E*_vk$Sxt+%tFrzr_s>v$e@7ka6|DZwfwT@T$ZX1KOR@5`T+JSLOL8(w0+k<5 z;fEDq_xox@N z7#O-eX7 z&oPD8^ikwT%KLOvU`k2PO#;}JEJ8K?*gh8bT`W{Ka*YACHzXOEW3hjG<$WnXi#`1^ zuq%Wt5bp-{3wIl_ly@m}`t(b;XrJUphB)XBD=;FWpQgOCd^po68C5Lr5jn(WpT8T> zBJU`~QBXrbY-ETuzU`RTtSs)WI{SlY9y#Yr6dMMVLQhqsTXWEB$6iD0$wiP7rth^4m>p8nq?@MTlv&}O&f3U_ zIDEm7F-I5c3LB^m(dGjY_{5vtLwB|J>A0VI5{YW@5r=qs^RnWX7bd2sF!O0_ONB5l z2P1#r2GX1j2TcGk=SE17hip81XkTTwV(Etoyf1zO`zV>@UfZxl6_OY^xmF%{s_M|K zRl-FngQUxe0JK!RF{ObLJ% zyT90775ILAMeSmyHZ>6qEaB1gGXKSY5P=`1wkYnt0~5_)P$lA)bJ^GU5>cfC&H;N; zjk|fqiuNFgkdo5_lWyFHS;(rIhlU zoa`M+(w7{tlYml+9-a+x?zB`?Z^^_YhPy_jw9`@wB0`taPImn*OgD9BS{Yi9?Td9N zFQLvwnGOkDbL>Q)(jV+*^+T!vK#jHlD};t?f!q=U^oKS|^Yz3uX8H_i#UVzz{(9a} zEafm@Z|?k2-k8sG_>8B)Q9mT)+&*d*kSq~q+cT>bN+w@WkYvXDkT?}W8Ek99WEAud z024Z478Cv_u%f(1{4$GxQ1JcH;*3*G`E9_D@Ng0%#VJvVG|;c!SKs5ARBOS4>Cw;c zk;4J)Ruh%p7zEzAV~0jUUJ2^8k3-)IE#sv!+IHiQ4@ zUW!fAR;5{&ErdT93Y#%=l8lJ&6#9QY{!ypZ;rJ(08d-R9p zPM_dz8MHLaX4gvt{(skQDD-)Kavl!Ws8fbL6Qlvo3WEoi0hh>U!f{$I)3P$cK!Ws} z%KQjK3-})A{_XNtFm;r}cVMm$fMMTG5?|F-GF|Rqj>`fULg|RDkLls{=SE(B5aF>M zx3*I<+C}6y(jT7y9~nP2b3$FAh_f?s%RD|sf@%Qz2zjEp6*Jph1&6fP8u@zd?RJ5x zM3ZX8Fd}T$sf{iWh4nK=W6?LiHPqOBqhl zIGSb!hrRmS9>b_AY|;}>jXZZ#OY}Q6&rHy-+y(|8O}<1VA~_^dxj%vcL(CrTH)$H; zUjOjvzc!XM$9B$%WbSRR^vpsU)nzgffnAH4|@aPD5}0dG*GY zVvwhrwprn9pEsi-&4KIn?}O06DWTn&lvJ6C=#IDXrh-kiUNK~R>@dje5$mmO={ZPr0!0w@dpJY&3zDmCHM5>GDbNL80J+tw4(_aL1bdA>GRhVe z83vC#c<44XmDXBmjW{no)I*e}4sH30d)oe+ztJSxawP#>2cg?o70HH8N?<1LaAy^^ zN)G#Jd6smsYbKZA$mOCpx7+Za+#z!BdoT_J9QHOp)BMsu5NfxZe(qa1jx|9)%gbNs z=Gi+y=d#JCEJJ)VWvF?Hj{I+_4fmRW8p==lVgqAo{DI-5%SbFxe*~`;6_9=Gg#rUD z-O^PTBF^X85mEaMXQ9p*N$`Q#yx?k|BDn48VOi`>$x+t^r)-xJWi0fCWxz34t2z9W#}hNzIcdSKqe5(3wj+ifclzP!J2Ut^id7 zr>=?o+yGE(Ro zZa~Qsj`tz6v`_zF7d|QFdUrtI@O;ka<|T!jtWCAdQ|k$Pd}Q}`Yp%tk^#}jb^=lB_ z3VeD25zf@*Yz6kan_1Nh?(*~BeQYLu&|HL5f>ZHcf^^m?66`&dQM-30PH8uA`KTkd z&+j{?-d?Dqorl0&9?@IL8^1`mu91nU+_)ApGTK1v&S~h+LF!w($TLyhgl=R>nHd5h zf5d`XyUL8zmvgUNUFo5>QjoJT?W9ks@394pw;1|esX``*{C|h3x2T)8U|#T4_D0;a zC7a{MF%$J5;~c;;j9{FgB$sB-RiM|VlP*Ob0(O-T^^uGuE#tr z_Abu|sO2B|kR{wN8has~a&>4_L!}}Y*86&8b>ohIw0S-8-kX;mCRhWKjDo&0%bfm9 zCI1}QofAf3llXC*UV{cdhB)5ziH1vPp^$0!mhHy>L;$W3e@V7 z)YO%>WXgBrn~Sz`K8&y3ZFt{*Z<`L`d>Gk{U%O!U5VXWsr^l>URr$l-YA~RzKqL4& z<|(@40k|g-%I5jTI1VF~3V41lp==s)RoRzi*uqk&^Ye(*kTHoeMo;)tR!an*{*)}^ zjL#!}Wkb2AGGnMesau44W3U}YGUjUjYyoB}eW4?bh_dbF>nUwAhNYYHm#ml@)I%d= zJ=!&OSg8Xj-jYpTEFBzkIxpD-{ji_wrOi4R zO(TvSH{5C-vN*geIpT$TtCi4itp&N7uDyU}E%v&p9H>PuQoK<;*El3c169Z!rRngPrDxqdSh840!3n?>A^=X(t08=S;xnukS>kGE$!+AfG8>_}z?wRuD zLmRk|82hD!#fcla3a7&~>c^|a013d?#h)2?Z=k7lQFhHlMn@=6X9i>^r8A8`c9jX>n*A6p z3RS8Vh)yevQAj&1Fyo)Q=sMWSuOn0X;-QP$(X3SrhuL@e)I#J@B2Q?^vAH9X_s}S@ z=DTaV241dFs8DUkd#U^Fu*?mQQ3IY9(oNKsc@Aed5a{AHlp{&}*(^_7sC)p$?NVAA z$RWvft5>T?;K_Ytt{-|da^O>qp3sjZbcmXTY^RH)r^)n}uz+)vp6B@(v`bfq8&Fe$ zVKFvP$b!D7dM%!yS9!1wR?WBjpZ~E!|2?2s)v9%!-LRU~MUtwG)(3p@2(fImJo~Gp zOV#W6Hd!P7@8i*hiDl3e)8H?{J!rmmKauXW0L1aEO_OPbT^n3v&{Ex`4ViKTQr6Ur zD#iY&Mk{GiCNBJBvYYG$$_w%Iq!V6scG&QtH@EX^rM+kD7Wv-qCVODIrV8QLEY40P zva(xx#(Fg1hg5VKgBU~0&&sq8lZ$C|{(_#MO;CPgiG?cIGknRIzPc}3A?0>jap_73b!wqyJ>!#LLF>$?Yy!` z?0C*BDZU`89@hnsi#dw+3aYR>!+aM8 zlpsoET3CgDk7*&O}R2IR>tY_4-e4I)5}?48Z)LfyG?e*@KLLl^UH z>IKzFgZQcU`d_mbp|L&UXp-vb*YD*=NBZoI9?5hGONry#LT?U^ElZ-G#_(_>2(wCt zy!}4PK7TYf*%SPwvaTyva)iAFlMGsnFZQ?Bp#c^h>Efi|tjsg%TQxp`KxMl$sQ>s5 zgXoz(8WE_ox4M^8*g}QF+w&ZpS#-RTV+)nSj;s(tr`acwFc{1!4Arbz^h?yxgdNbu zwLp5@aSF*W=#C-wCF^t6;IF7W6aj3_n7n=cE!+CB*@Wh*MIWhn3xDVz!0~#X0dl(J zpixy1DyYtwT7S--9M;7@lf~qqSHvu~?Y#D>3!LtK-sZL>!Qf;y>(K;lES`XVWJr$; z&O_+HqdYX`p|2;Nu)E_@W7ej=Fx8T=43NCNv0ng{+7%JbbE!FrknV3&EXh?jkBO7; z#C@9<7LNVt#2)D-H?DQEqF%)v{fPfUDil*%Aw0tc8_(?7ug<-kAUc>BzaPvTh6#^8 zr6HcP>Rc1cV$6RWwC^nLKUX(c1lw>f!^lSU~ThWrut@Cg%5WZs&S_yr4`$046JHC@|#9V z5=*w_)lug!OV?_rkv+5N$R$Yy;$+A4d-YS&&(i`Zx1U*P(luhnNBXLVE>>Ktq8iPi z;8H_uvSLFp_*T0*((nHF6BL1_>nQ=)Vz1Fq1J*6a%IBFrG)}`}CG^wW{F$7xD+Tzv zU&O*|-vE449$-(iNK(V)MIaE%Rp|f6dSFM|u#(jkA+Rwi8&Wx^JK(JS&#Zvu{*@~7 zy)cjVtA>D_0H65(#6X8lB9YZ_4a*~n!THc&pX)=}gpcN1Ju96Ex3{ZRsPp<|P!{-j z`06ZJnUPZ2`rtp47BYQr?uH;xcm2J)ai46%i)V_=VQz;{xqWJ7Y~!$|*C{W+ndhV- zhs^yM{{Mw+Nck(iwnnpSe}mp{0Ky@!Q%{|bUbiNtfDu4J)Wl&_0)#EMUqx;B9A&`8 zV&9@aV_b=duQ5F8Mh_oQ_Z;}K(4pLnivt$ThL*TEZlnY!vk`M=OTek#G@xwnzzTGPGBI(`uraGRcsVw_7WM@e9VUa{ohNm0bk`ke_t&g&NR(Ct-GfG#8SsGXm&#B!}(0_ZWO2U8+C8cq@Lb28nbt`@DeZN<(Ij|q=h!F+(009oPWTwQMYt<7%>&$ zDhF403-yr0$4rD?EZ`8B^*MJ5aN7qrJ-^?{PU z?NC=fQ!GTCH_t1{DAA6R&WZ;4z}ODnv;J#RK+WPPkolhINyHZ;nH1JVn{Cl`pFqY% z1vvC<8Rd)nbGn$P6^Si&I3EAAB#7)mC1ehd@Kvo#13k}BJ$6@pAeUk#H;g%l)OdYJ8r-(u6FV~kU%OBus>M7J zTRQF+NEP4G>Y5JZGgLGby;Nf`l{NBn$QboxxF3-98WbJy`*!~D@u#f+ae2Y1^J|W0 zBoQ7wL#8S0)jIt)Q!WyVprvZIHw!nYMrNWm?XOOhknm~v%#oKYOT_GZ6Ez&30wxZM$WRkq zEy)OsdHvJoDUorOyPi+2;=`mJ#p3p*N(G`75v}v^m6s(cT25?u8!`*6kmQ^j5Msq3 z;RmE1;={S|)*rmREEgAiy~E?bG&NJRxZQ_&*kz}g^x=F0t+okDgq0FE(8EXd(4b|C z=5}u~UeVV?`}>L3jA5ML_Y_#KFORGnM@KO8UgxthOG&A1tgEpiJMH zDY&=={KR0&u~8E3;?DOR_I{DA zhQNYQpzZ~a9Txi*t=Z8KH9YklF{PF7j9>7*%zum7BWO>CW02ikGeiV)-bB=k!pn5v z%?lQoc7YSz*YTwDj>uWd)cD_UMw9yM9PA5@5jmy>nTDeIN`!>^JW671GyDh~Kn9J> zv^20j0uPVQ>uBrk;PRzI*7vq7^ULNTOCxv*$yBK>A^3rUVy>~TMdZVCdnpOk%3eq&Vq+uYv{ctCJc{oDy-!Z;DX-G}NAz^$^|z54SHT8_+CLb}{Fk z+29%5Qy29Y`WK4a{uIk49j*)D47od^%7anQmyk+FFR7&~$)xg#U0^GKGy>S2H;ka7 zcg2Utzk|~}m~9V48+LZC0P)o0-#`L0`IeFhqcrY{NvHgarJIo*) z%;3WO2a-G2m8D`NG6iDBP72y(v6+~$M9k!`B>}XOb4nzTmL|%ZR2b$ylEM?XxX%qf zb-#!mR61XMD|08~gVuc-8LqN4?NpL%A6#g82KR$FVY}cwClt6#Ald?{o4PdiBn{D{ zDXO@P$JdzSbF+h`$XLc2Me8~Vy`pV0r;S-Fls<(8fd4Pz=OM|+*eXbFTb;R|UzHfn z83}z~psiy!bGfpVYw3_k24~yxHV=uw9^)OAmhRhW_vCaclSGE6EXm;cfeyLd{tXQSi1LG(k^cV`dMfr*jAjSHWJ!Q;N#Ne)t;t;z zD7yXIckeOYUvuRTDY{Vy?bhz8BnNi5*9@(nHd<)K$bdZCGcBTcs#dM>HDb)~nT=fW zf`C{7%cJO{4J~d=K$hr-(q>qQRGtz4(qyL)t>IL*!L*|fDsa#fQMhnZSUTeWT9ZJ3 zr}Q1_D;ChDRl~IREg@bH!0$bolVjp0UIme~)%dEx&G6Wo#&HDbf79>1xx9Q6Y@sm{ zfzC!$OG#O2zt+!-nKJ&wu-w@vod&Y}i9ZeAhSQNVjnzvSnZ*K2k%jwlXZn(V%!bQ@ zpWH-jvgb552(PK~RVukpANo+#1^ai~BmIUi$|`b**Gb??ez5@FL2JFPQ-JK+wI! zd&r%z+AgakMS5$0Y@}hD>oY9tP6DWEDDjmS=qWIgBG0au#|I=w7h>l-cPu~w(gd_n z# zB1g*HB2g|JsOlSyCaWj=9}x{sb$q7;Acmo4-i!y;P6u+Kgz8_9zkF!6%srQ_L0C_{ z5FtJyj=i}Be^vS{j3yPkxCw$zOLLI&XkiP7A3V0vD80Us6p8v!EsU@!D4{%n93~B< zQX8rPfCtOyv}N2d=lDeo$1LeNQ5oO>lSWPLn`aU+17*R6}OgsR9&SpT9RPczEbg6Ea9siGilqmLu1x%O<*@t6`cK9X zsWqNmkkgOdl$-GfeI9cM{Izq}lUf4qsmsjvMj@Uk0u371yd%i=#d=jTm#E2M@Pu8W zoaGZUlL$VhNjw-a{wgR!mB>^bzR*-t`Ad_7b?&;QFDHOq#{t-gTkDR~jvzu$DJmNK zSxw;)4uCa=oJG@Iy)$1yT~h4T$~k}iygKdP$su+k!ti|S^%vpDB&@A9aZ{nmBSdtQ z6J!LmP9^aP?|rwywTgfWzRyNL!`|NbQC~=+AQbsuiT1*rx!}hV-J7F1nzmP%R8Ro7 z-0xW|l&uZmB9tnlLfT)eF!U0(zsO#&;iOPobMc~*bf2c2Nt?3WMO`Yhd9+iSZWRu) zvoN}~>@J@}c~V9jx~LAmY5FX7)Ix6D=8Y&O<2u^eE6JS#4tIjOOUR_5GJvFKA@rjt zyDx6FKGg?)PBm{U&kO?8Nwah%}ES?q-DRqJax#bO2l*$e9i^Kg(Y`9&D| zpaW4pz?2T2WJxN{D-hKzFajjYWYNjg)Jy#eMiVZ0?p|*G2~9^j)jLrJLV!HJ9o6sZ^GwoW}j%&X4!IiL`or|Wn-1j|FdzX8DTynxM6 z#=kblHn|har{TUp5s=NnZi||eghxD2EP@M0~S5F%9KeKbZH#Ium7=uotVB`E9_Qihi1IW+3d87`tb9f`|o3u!? zYD9DcYWLqaCQt5FjQV}y^f85IR$%6)M!0lJ#NBlBynILAC>EMq-{@=Ty2`%-V-zmstQJY=#U3SG@USeq4e6b}R$ocaP zdnV(!cF`I6E0G$+P*kg9*NO}O`!zi z$cr3ob@39!Z&CR*bw1O1S>g$Mto?4-mS+n;r76jia1r=&_(+*iPJ35f)2dI1-k| z^Pl<`a!bA{>z-NYLsT_q!8kecbP|5*18wYYQ6x6C8*>MxDDY{4z)40>HhLlnEU~*> z;|t|9p!VSv8HMn{^bPSVu!h=mebp!)3qoQsSZ?dw_;#OIGrSgO(M8c>%-7G4#=*I< ztbScC;0Z<%U7HO6WgO>CW8QPwqNs7J@WB)e$)c*z4q|}4Wvb5i4CI{`_Hzez2>@%% z!8nNkh(~w8n3||-4+N&rd&U(EOxB+iHR7J^gmCz3AnBI~oixlO`P@YmTDFKGXFfeM zy)mn$nlr87$MB|H;`8Qvr&Xg}h`sM*kk}b~Aqe-yBm#OlB6eCklK(jvppBXGxP|NMigQ(pGm%V)(`MPs#K%Rzfwq4HVzA%3T#5#`k?+>lM&brT@e zZ7T^=(NT^b0y%EOq`3n5?aCfI?0ua>LhRYA{BYs>XvV=Ue@tomn*Vh%oL)88=5~7f zU)jON5|x*#7KKW}kc%H5_x3~m943mQ-EM7@gWip{TSGjYF4^MJ>NPe-_XSmho9zQN zQlZ?Wh9#7GP)Zuf~(T4K0 zTf*4XRnYAk#Qx}s@P+xuIcuUxJ|a;IPB)?7J9{*1D|dG=FYMfGI?h@*&^SjAY(P=t z<-FgeffID!o(;lQ(pVR%`wI{ETB4yKRL$5?!Htas zle+KaCG`cygb4y|=GeK6F4}6(@2Y#6jT9|qCg*g`4Mn3hbzS{9elUpQ_jvvq($&Q} zUbE8t#RJ8FLK?G!O8I$Ejs#W3C+n}5v{Ly&bCJsAe>WnB7ZF&P&fNukL)?bS)_uP? zSWS~yO)s>HLxr%rYFO1!sDC}hCH_wEz>}Qi$x;@p>_~mYd11a?|Lxw6_p32$5j%M0dQece{ivWfQFMgVpw}K@89I&pRnMgB z@4J&bLWaUNyV|o?NO%!8Wyp*N7`Yz6XORU9?C87>cO-=6WV36ESj!Bqb?T?H?4qnt!9wl_rZc4%GAFsd z>flYx(&kzg=sMa}({nIp*I|TMNml$o`4v$IU?AX`lHV`@AD)Da*?Rns{fo$w(|3Mm zGUGnl#yzC&vontZ65(i96B?&B&2=+s&d{ZE(MGK{A7y+n!RDt zXunQk)zU6Jfal*=5$FJ>^L#~sw?G7V@U+V@FQ>r)njNOD%T$*1b@2kc*-gi#&as+k zcJyjPoKM1P^?A7Xixi_;zDZb&WIk2E;mGLk)?$xweTgm|6%*Jn7%FJIp;6%~a<8=S zbdj+0z$@ab4a--+Fjkg1@AD@+)hPprrWYo-9zLqH9AHVF z@md?4?%pGCHB63X*6b%f2T#x+$a{g1AgKg(J~Pn8KEix>^;^=t6hJM33Ha8(u`<8` zbmeKdK-C2>pt_N&O_se*KFJE4!+T0XHZlIbvme8yLKP`MHeX$T6sAv!ZKYd_#~dUB zcpKKA(_e|rX_rP0ZFC$X$HLDrnK@tRu@zgo8X2iwUT_kK`d~l3J+^q8Pt&LJa2=Z} zYJn{%k#8j4!eRv&vU)ZQckT?+x$yT?CLB~iz#iN*UCDanZJnn)_b6+Evvvki96M@z0xr-4Oz1pXZx+{H|3caI#?TiGi9QdC(6ZebtTMTw2aDe_!YZQ2T5wI zsNcB2*3d#Mxl z#zpWyT!nli1e(5jrTE*OzcJ&Kc;t2F73bQrN+|g#lHvvt{Z(3z1a<40u_~F^%ygaa+LKqaj#be6)!Jgg|V$5yU2zK zTDv0bx5lPDj*6X#+fLGk*|>js>8BadAky#&j*>n2zaI6siZd{ski$1or|hc@30n{i z#4Jl6-*n#*m>>*|8QCY-dv$q-K{$b( zUKMQ?DIu66S;UVBq8cgrj1%28*gzY;i!{c5emr=Xm&{Wa9K_3+|GTU+ajwKf-Q_F@ z2O9>uFCWdA{GKs`k|aJq?TexHV{W@p!f}t6Iw2T}6~S{uYx16ntFN%9oUlPN-QzH` zrEG#|S>bm^>+Jgz;OM=Ejrb~933Il`#iyPEWLU!2P1lz*QRq+ul=;EJ@2k0tVhisd ze4`$v4ahYrX(KsDMXmmhWUS@pQlnfVGB&vs{VtkP8=|e5ww8*W8Ke<9Dq$XLpUDaH z3=kA)KkA8c{{#XwI1qx6HI-I?yFec2^@;W3EO}D;+~r1d-Cxlw&E7rP|BuBVX%l@m zrv17zl5mf?bPsvy_Ju-XsD3HeSem!4C1`Rmek&1YQHw`AqdB#(UIL1a(!8Oy^IM)h zZh9ih=JTKgzGOHW`-Dj5;zjijNs)VPi}gfuhA#84w_&`p20IP^?>gUTpYBcgq7wQbwAqhy3c(12!!@BxtMqO9w>tcQY z2i%Q;@P6gxQUhpZGz91Gm0vi`Fagj?EjXBf*>I0dpf7mfii5e}wAATKZ5P6eOwaC| zY(O*B;EQ3jYK$7xF0*$Y>cd$>JEUDUPEmloO-EtZ8 zQh@Xz&$)AD`=Te@qX}VW}tC3kxRLX>JudH zJq_dOzq$ROfGhmujEMUcQ7T>If8yb-S(;TX-A?%pS|@GDvG~91 zCa|$Joq!dCj0cq&&&8w3xgF}YGO#=44x=OFeL*T{duFL%6jtT*WMyC2=$6!kD-UiK zHceWqiNqu|Ya6d8%=tzG4Biaba|MvwNxGpb!{$x!eR;w=O(7G{Xw}HH>&uWq6BYuw z?Vk)U{geeJbfSn2ov9h0QB!EB%vsK%)d1(u vYT2#fYYmR*PA@WCAA=~gNbFU8`>hkexs-VyuYpIggrM^JAC;JyD(3mV$1BYo literal 0 HcmV?d00001 diff --git a/MikroMaster/20260505/20260505030002-Config.rsc b/MikroMaster/20260505/20260505030002-Config.rsc new file mode 100644 index 0000000..294cb13 --- /dev/null +++ b/MikroMaster/20260505/20260505030002-Config.rsc @@ -0,0 +1,4501 @@ +# 2026-05-05 03:00:06 by RouterOS 7.22.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/caps-man configuration +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-2ghz ssid=vados +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-ac ssid=vados5g +add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \ + country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-an ssid=vados5g +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\ + 48:8F:5A:8E:1A:C2 name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +set [ find default-name=ether5 ] poe-out=off +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/disk +add slot=tmpfs tmpfs-max-size=22369621 type=tmpfs +/interface list +add name=WAN +add name=LAN +/interface lte apn +set [ find default=yes ] ip-type=ipv4 use-network-apn=no +/interface wifi channel +add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX +add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC +add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N +add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX +add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G +add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN +/interface wifi security +add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \ + group-key-update=1h management-protection=allowed name=sec2g +add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \ + group-encryption=ccmp group-key-update=5m management-encryption=cmac \ + management-protection=required name=sec5G +/interface wifi configuration +add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\ + yes .ft-over-ds=yes ssid=vados +add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + /tool/fetch mode=https url=(\$GlobalScriptsUrl . #\".bak/mikro_bak_rsa@10.\ + 30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n#:local Script AM-setup\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n#\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);" +add comment="Example add WU servers to AddrList" dont-require-permissions=no \ + name=WU-add-to-list owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# Syed Jahanzaib / aacable@hotmail.com\r\ + \n# List name\r\ + \n:local LISTNAME \"windowsupdateslist\"\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"update.microsoft.com\"\r\ + \n:local TARGET2 \"download.windowsupdate.com\"\r\ + \n:local TARGET3 \"download.microsoft.com\"\r\ + \n:local TARGET4 \"windowsupdate.com\"\r\ + \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n:local TARGET6 \"wustat.windows.com\"\r\ + \n:local TARGET7 \"stats.microsoft.com\"\r\ + \n:local TARGET8 \"mp.microsoft.com\"\r\ + \n:local TARGET9 \"ws.microsoft.com\"\r\ + \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n \r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n \r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\ + ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\ + \_] do={\r\ + \n \r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n \r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Add Hosts DNS names to NoWG addres list" \ + dont-require-permissions=no name=Add2vdsina owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# \r\ + \n# List name\r\ + \n:local LISTNAME \"NoWG\"\r\ + \n#\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"comp-lenta.ru\"\r\ + \n:local TARGET2 \"ok.ru\"\r\ + \n:local TARGET3 \"vk.com\"\r\ + \n#:local TARGET4 \"smtp.mail.me.com\"\r\ + \n#:local TARGET4 \"windowsupdate.com\"\r\ + \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n#:local TARGET6 \"wustat.windows.com\"\r\ + \n#:local TARGET7 \"stats.microsoft.com\"\r\ + \n#:local TARGET8 \"mp.microsoft.com\"\r\ + \n#:local TARGET9 \"ws.microsoft.com\"\r\ + \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n\r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n\r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\ + \n\r\ + \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\ + \n\r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n:log info (\"1: \$Buffer\"); \r\ + \n\r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n\r\ + \n:log info (\"2: \$Buffer\"); \r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Flush DNS Cache" dont-require-permissions=no name=\ + DNS_Flush_Cache owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ + "/ip dns cache flush" +add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \ + name=Update-Certificates owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_CloudFlare\r\ + \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\ + ootCA.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\ + \"\";\r\ + \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\ + G2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\ + lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n\r\ + \n:global GlobalScriptsUrl;\r\ + \n#google\r\ + \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\ + me=\"DigiCert Global Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\ + n-name=\"DigiCert Assured ID Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\ + me=\"DigiCert Global Root G2\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\ + me=\"DigiCert Global Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\ + mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\ + on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\ + ame=\"DigiCert Trusted Root G4\" ];\r\ + \n\r\ + \n:set CertName \"GTS-Root-R4.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\ + t R4\" ];\r\ + \n\r\ + \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \ + where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"ISRG-Root-X1.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\ + oot X1\" ];\r\ + \n\r\ + \n:set CertName \"Root-YE.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\ + ;\r\ + \n\r\ + \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\ + \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ + ertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\ + here common-name=\"USERTrust RSA Certification Authority\" ];\r\ + \n\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=script1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\ + are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\ + dFlare-doh IPv4 1\" host=1.1.1.1;\r\ + \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\ + s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\ + -doh IPv4 2\" host=1.0.0.1;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 1\" host=8.8.8.8;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 2\" host=8.8.4.4;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 1\" host=9.9.9.9;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 2\" host=149.112.112.112;\r\ + \n\r\ + \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\ + .189.2;" +add dont-require-permissions=no name=script2 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n\r\ + \n:global InspectVar;\r\ + \n#:global RouterBoard;\r\ + \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\ + r={}\r\ + \n#:global Resources;\r\ + \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\ + \r\ + \n\r\ + \n#:global Updates;\r\ + \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\ + ={}\r\ + \n\r\ + \n#:global PkgUpdStatus \"undefined\";\r\ + \n#:local Update [/system/package/update/get];\r\ + \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\ + ax=5 on-error={};\r\ + \n\r\ + \n#:log warning [\$InspectVar \$RouterBoard];\r\ + \n#:put [\$InspectVar \$RouterBoard];\r\ + \n\r\ + \n#:retry command={/system/package/update check-for-updates without-paging\ + \_as-value} delay=300ms max=5 on-error={};\r\ + \n\r\ + \n#:global arrDeviceInfo ({});\r\ + \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\ + \r\ + \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\ + /get\" ]];\r\ + \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\ + /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\ + \")};\r\ + \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\ + \n# [:toarray \"\"];\r\ + \n:local arrDeviceInfo ({});\r\ + \n\r\ + \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\ + \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\ + te/get\" ]]} on-error={:log error (\$error)}\r\ + \n\$InspectVar \$arrDeviceInfo;\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe;\r\ + \n:global RunOnce;\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n } else={\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$GlobalScriptsUrl . \"certs/ipall/\" . \$CertFileN\ + ame) dst-path=\$CertFileName as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n :delay 1s;\r\ + \n };\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [ /system identity get name ];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix \"\";\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass {\r\ + \n \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass {\r\ + \n \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/614/a7992fc8\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 01:00:03 05.05.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global WaitDNSResolving;\r\ + \n:global WaitFullyConnected;\r\ + \n:global WaitTimeSync;\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n# read parts of a large file\r\ + \n# Description of parameters:\r\ + \n# \$1 - script name for logging and user agent\r\ + \n# \$2 - url to fetch from\r\ + \n# \$3 - check-certificate value for /tool/fetch (true/false)\r\ + \n# \$4 - mode value for /tool/fetch (optional, e.g. \"keep-broken\", \"ht\ + tps-only\", \"http-only\"\r\ + \n# \"no-redirects\", \"background\", \"background-and-keep-broken\",\ + \_\"background-and-https-only\",\r\ + \n# \"background-and-http-only\", \"background-and-no-redirects\", \"\ + background-and-keep-broken-and-https-only\", \"background-and-keep-broken-\ + and-http-only\",\r\ + \n# \"background-and-keep-broken-and-no-redirects\")\r\ + \n# \$5 - fetch method for /tool/fetch (optional, e.g. \"get\", \"head\", \ + \"post\", \"put\", \"patch\", \"delete\")\r\ + \n#:set FetchLargeFiles do={\r\ + \n# :local RunName [:tostr \$1];\r\ + \n# :local fetchUrl [:tostr \$2];\r\ + \n# :local fetchFile [:tostr \$3];\r\ + \n# :local CheckCert [:tostr \$4];\r\ + \n# :local fetchMode [:tostr \$5];\r\ + \n# :local fetchMethod [:tostr \$6];\r\ + \n# :local tmpName;\r\ + \n# :global CleanName;\r\ + \n# :global FetchUserAgentStr;\r\ + \n# :global GetRandom20CharAlNum;\r\ + \n# :global IfThenElse;\r\ + \n# :global LogPrint;\r\ + \n# :global MkDir;\r\ + \n# :global RmDir;\r\ + \n# :global RmFile;\r\ + \n# :global WaitForFile;\r\ + \n#\r\ + \n# :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-\ + without-crl\" ];\r\ + \n#\r\ + \n# :set tmpName (\$CleanName \"tmp-\" . [ \$GetRandom20CharAlNum 6 ]);\r\ + \n# :local DirName (\"tmpfs/\" . \$tmpName);\r\ + \n# :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n# :log error (\$RunName . \" Failed creating directory: \" . \$DirNam\ + e . \"!\");\r\ + \n# :return false;\r\ + \n# }\r\ + \n#\r\ + \n# :local FileName (\$DirName . \"/\" . [ \$CleanName \$fetchFile ] . \"\ + -\" . [ \$GetRandom20CharAlNum 5 ]);\r\ + \n# :local Url (\$fetchUrl . \$fetchFile);\r\ + \n# :onerror Err {\r\ + \n# /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName\ + \_\\\r\ + \n# http-header-field=({ [ \$FetchUserAgentStr \$RunName ] }) as-valu\ + e;\r\ + \n# } do={\r\ + \n# :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n# \$RmFile \$FileName;\r\ + \n# }\r\ + \n# :log error (\$RunName . \" Failed downloading from '\" . \$Url . \"\ + ' - \" . \$Err);\r\ + \n# \$RmDir \$DirName;\r\ + \n# :return false;\r\ + \n# }\r\ + \n#\r\ + \n# :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n# :log error (\$RunName . \" The file downloaded from '\" . \$Url . \ + \"' did not show up.\");\r\ + \n# :return false;\r\ + \n# }\r\ + \n# \r\ + \n# :local FileSize [ /file/get \$FileName size ];\r\ + \n# :local Return \"\";\r\ + \n# :local VarSize 0;\r\ + \n# :while (\$VarSize != \$FileSize) do={\r\ + \n# :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=3\ + 2768 file=\$FileName as-value ]->\"data\"));\r\ + \n# :set FileSize [ /file/get \$FileName size ];\r\ + \n# :set VarSize [ :len \$Return ];\r\ + \n# :if (\$VarSize > \$FileSize) do={\r\ + \n# :delay 100ms;\r\ + \n# }\r\ + \n# }\r\ + \n## \$RmFile \$FileName;\r\ + \n# \$RmDir \$DirName;\r\ + \n# :return \$Return;\r\ + \n#}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\ + ws and changes are not available.\")}\r\ + \n\r\ + \n :set GlobalConfChanges;\r\ + \n :set GlobalConfMigration;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n :local ReadFile (\"tmpfs/\" .\$tmpIndex);\r\ + \n :local filebody [/file/get \$ReadFile contents];\r\ + \n:foreach fwList in=[:deserialize \$ReadFile delimiter=\"\\n\" from=dsv o\ + ptions=dsv.plain] do={\r\ + \n :log error \$fwList;\r\ + \n}\r\ + \n\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log debug (\$ScriptName . \" Downloaded \" . [ \$HumanReadableNum\ + \_[ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" . \ + \$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"kasparov.ru\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"FuckRKN\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n :do {\r\ + \n :resolve \$aItem;\r\ + \n } on-error={\r\ + \n :log error \"dns resolve failure [ ip - resolve ip ]\";\r\ + \n }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$n\ + ewAddress comment=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list: \$newAddress\ + \";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =[/ip dns cache all get \$aRecord data] comment=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list: \$newAddr\ + ess\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:20:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 5s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BC auto-mac=no mlag-peer-port="ether1 - Unet" \ + name=Bridge-LAN port-cost-mode=short +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 2ghz-b/g/n basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\ + 1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \ + disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \ + rate-set=configured skip-dfs-channels=10min-cac ssid=vados \ + wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\ + 802.11 wmm-support=enabled wps-mode=disabled +# managed by CAPsMAN +# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 5ghz-a/n/ac basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\ + 20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \ + hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \ + skip-dfs-channels=10min-cac ssid=vados5g wds-default-bridge=Bridge-LAN \ + wds-mode=dynamic-mesh wireless-protocol=802.11 wmm-support=enabled \ + wps-mode=disabled +/interface wireless nstreme +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set wlan1 enable-nstreme=yes +# managed by CAPsMAN +# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding +set wlan2 enable-nstreme=yes +/caps-man manager +set enabled=yes +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\ + cfg-2ghz name-format=prefix-identity name-prefix=2ghz +add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ + cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ + cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,dns,www,api,reverse-proxy" crl-store=system +/interface bridge port +add bridge=Bridge-LAN disabled=yes interface="ether1 - Unet" +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface="ether1 - Unet" list=WAN +add interface=Bridge-LAN list=LAN +/interface ovpn-server server +add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1 +/interface wifi configuration +add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \ + security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\ + sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \ + security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \ + ssid=vados +add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\ + sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados +/interface wifi datapath +add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath +/interface wireguard peers +add allowed-address=10.8.0.2/32,0.0.0.0/0 client-allowed-address=0.0.0.0/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=ether2 enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main interface="ether1 - Unet" name=client1 \ + use-peer-dns=no +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=89.110.101.17 list=VPN-Server +add address=80.85.244.9 list=TRUSTED +add address=8.8.8.8 list=TRUSTED +add address=8.8.4.4 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=8.47.69.6 comment=dou.ua list=FuckRKN +add address=8.6.112.6 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + !TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp src-address=!10.30.30.0/24 +add action=accept chain=input comment=\ + "accept NTP clients on local area network" dst-port=123 in-interface=\ + Bridge-LAN in-interface-list=LAN protocol=udp +add action=accept chain=input comment="accept WireGuard" dst-port=13231 \ + in-interface="ether1 - Unet" protocol=udp src-address-list=VPN-Server +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=Instagram dst-address=\ + !10.30.30.0/24 dst-address-list=Instagram new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address=\ + !10.30.30.0/24 dst-address-list=Twitter new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address=\ + !10.30.30.0/24 dst-address-list=YouTube new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address=\ + !10.30.30.0/24 dst-address-list=facebook new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina log-prefix=VPN-all \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 dst-address-list=!NoVdsina log=yes log-prefix=VPN-Net \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + in-interface=Bridge-LAN log-prefix=WG-nat out-interface=WG routing-mark=\ + To-VPN +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps disabled=yes \ + dst-port=443 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat dst-port=80 in-interface="ether1 - Unet" \ + protocol=tcp to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com log=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip hotspot walled-garden +add server=*1 +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +/snmp community +set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\ + private +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Scheduler for Update Certificates CloudFlare Quad9" disabled=yes \ + interval=1w name="Update Certificates CloudFlare Quad9" on-event=\ + "/system/script { run Update-Certificates; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-11-28 start-time=05:45:40 +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" interval=20m name=AM-RKN-dnsLookup \ + on-event="/system/script { run AM-RKN-dnsLookup; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/tool sniffer +set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32 +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260505/20260505030002-Diff-Config.rsc b/MikroMaster/history/20260505/20260505030002-Diff-Config.rsc new file mode 100644 index 0000000..e872649 --- /dev/null +++ b/MikroMaster/history/20260505/20260505030002-Diff-Config.rsc @@ -0,0 +1,4 @@ +4167d4166 +< add address=104.16.4.81 comment=xhamster.com list=FuckRKN +4168a4168 +> add address=104.16.4.81 comment=xhamster.com list=FuckRKN -- 2.52.0