From 506e71cebefd09c27df92217867942c1d21e3902 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 18 Sep 2026 05:40:07 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at Sep 18 05:40:07. --- .../20260918/20260918054001-Binary.backup | Bin 0 -> 243756 bytes .../20260918/20260918054001-Config.rsc | 4335 +++++++++++++++++ .../20260918/20260918054001-Diff-Config.rsc | 59 + 3 files changed, 4394 insertions(+) create mode 100644 MikroMaster/20260918/20260918054001-Binary.backup create mode 100644 MikroMaster/20260918/20260918054001-Config.rsc create mode 100644 MikroMaster/history/20260918/20260918054001-Diff-Config.rsc diff --git a/MikroMaster/20260918/20260918054001-Binary.backup b/MikroMaster/20260918/20260918054001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..900146eaaea096bd0408998bb9fac51e68b2b078 GIT binary patch literal 243756 zcmV(fK>EM$sF8ClxB~zH0000M`Y0@C##mq@``Tpy0002|`~QBBNd*8{!s&LzgM6QU zrB<9O*~7Nyi*LbTZeh&U)Tg%Rle@}7E8P>zy%O!!Akq#>T{%(~(#?kR$;(IAlgU9- zsRnZ;9HIg>xa)FjNRSeeVZG9kn4Pz?q*9oe5JoSgj;SWlF*-e%}v=bgn&5 z$yGSn%VK$t+mfjZ`-m{6k`-yIH3-5ik+ga*SmrO_p(y?`r@hRmp$CF+M!t{b4C-sl z0doV0q@_=U|F9g}$y+%c0qoV+t%FGW_ltgfU7-!#0N#S>UdYmMI;JV5AVCoizTDs! zsH(Hm!;&kLnb?Oc`5$rv*+89&=md%B1k*N_r>%^T&74f;clo=ykHm~<>pl79mJva8(mOWw-y~~L>3{-~~ zOwe(Af3*#GfG|$ZZ{6wpTmjEK$wzr$O8gmPBwpy1kuXfQS%UmQcQVUG5-mQL zbN&g}+AE%)W%P5=+akXUr*sE{h3>`v+7IxkPDChEDr?X6t=dXfGN(md6sJIG%@*(O z_LzO{7I+gca#Vn@xAgi@scRxGt4LV!(NWNs7)h?!9DKZe+Gr8#TY?KYo<#r&`d*PK zdt^&^XyEIV(K;~%>`f)*MgiZZ$`Bv!&JPcVHz;eDO%1F=TXr-9M;Fu6X9VD9$HO zajC(f4cc~kk;3^Y&d4!O7xn4m!CR%VFHJ{=dcXpC zb_a~@tlx})&$w)(6+bA5CttdCb*OLh1P3-6&!G)kGPRtd81q+y3$@(ZYM`ag3Z6pm zfd1^5#bf*_=By)xd~M}9=CK#n>)NuL zvywmK{%(!DP=ofp*-EJ%1Zt`!%vs;vVzWWY={gbQ3xfq~mq^f} zWj-M5w_uvGm;UjIWKUVa@DHI!?DCFCVzPzT^_sYu#LL@Qxh-p3DKr*Jqwq>z%ZiA! zBc4;6>jVg&2bXMpsesO10S8@6C#V-6AJ!kj%9xE=ie$0IBDH_M>+i-xN zR_E1Xiype&ai&*NW&O*aQC}j5hryX>V!Bv0_zNvslz3$)_up}l4V&Mm@Ef-v8enS{ zO;zY&GY^t*iExr!`72;82QUbsdu-Ea>5)@UnE-Pzo#dJ3=1wh|T!Pj4X{M9H;k=i! zQk95SYMru5y=vg&-YvzS^E);dQ7UTTiIP7dzX}?XKNwdqWtJxjN<#!8ptfhAsQtzy zy4jI~BmKxnYXM6vUb#72Wx+KV!nZ^NEDD?#JaZA zy1dCjf()}r5ooi4NoeFlT^`Y;=<@vi0L=@%8?txT_>d`rCXhY7Hne`jB408En#Jk~ zhBH8F72wo#?2g7d(Fm1#qG|}GHC*2GS*Wlfp;!ACn4S6W#a9|jI&Ccr`x?xtn~oUF z7b6IztM`zQP{`%2a-mM2w=>m@CGAd8K!zkQgbG#)jSsdN-U-Obtk zh`(L-pjv8P<%~L`>rf}vp`aZR7)4?Wr>Pk?Y926N(|7x-5~uozE`nh_gY&Z<&XuAb zw%d3ai({;8@-q+;zjvkyryI#5E^z-{l}SaOsw=$@kX5&{bq&gFY+W)RzlNT>8{hQH z!*Tc7S{SH+GRijHkTv}iv7MQHnERx9Ic8%>Zp0Fqbb2QLh^WOtEPJJb@pfIJipqC* zR8<99Pu<-EiDL1SDVhJn*Y9(hSRY^CC61l&-mnPFNvmlcV3mJghLb5~O+pDU1YudW z#ZJv6>ltroNNQy~#NLJ-+i4?Cz^oT&P6Jz{yaQh8X>(vs!xOB}-&igi~?2~u_tei8rJ?*&^g?z;YCgHs;2pS|RkS_D8XrEStMediC$CxZ3wW^8) z;IFC&N;M#LMrU3#8fyREZfNB`6^VG z3Ga<#o#mG45j{i{KT5)o-608eBYC^znlAEZn}zixKL2f51yf@d!ktp_Ya*#)rqi9Y zrtuSXKSSX$R?(ZsL$2}}gXk_gy(~lB$;Zma%hM>q?h^8>Cb4{ z#Cq}Wu(gIPt|Kp60(2xvDL5@Vr~shLN%ntsCeeZ%ZQex#y3ihJhC`gZ2^n4!y!eA{M z36>AG%WKn;7z~H^AkYX?LP!g9;%#{oGzYfen8B|0^_V*K-!}M%9f9+jq%CGGG-n1F z@$ld&aht&oj=@=%`d2f&33;En#8gdRd_^-)^Tu5S4HgWO&Hwtk0$+>&822*14(!e% zT}M|o%Pm5f+sl+7+b`npkG%u)qfu1@0$3a#M`>%TVCJ=HDJEH|Zvuj*4DPaC@=w*v z=rdfv>$XI2juvtSA4H=IFE%nqN2N0hnC!&IhIT?aNl2bZ7z=nxPK5=89GyrR6K=1mUKNYuUOHF-nA9nS3r(By6qX`|Eb z62Yq!7rHCN7BLwmdj>*ZlP#_?c$*(NFFC4d05o=iD=4~?ir*c5 zp?;wZea7|{k#E1Eou1a6iP!`N(szx2r<7Gq{)2vbUAL2pIW{eafJ%=v^huAK1JLl^ z1v!1j^jw-NZac$rbK&{=JIzf{;a*}qNMah=V%1zr58xMkDC^dHN)j^I?1s^%L-j$=fnvN^3VLNN}q>TmG`cMfp z2#Zwh4u?*D-0;0=P(U^Pc+FN6S1NqHo#P+8j2)51>)7NQC7VN#y~kISU3{o6331v5 z>9iaL!_d^K%}i*ulFRlzI^fa@4Bwsxl+wklU02q3P_gu}x)L

#H%LaDGh3G`jRT9)-Pha=UY~+&% zLkq8!zNE&=Z_-F0gEp;3jZsMD1$HOnLq4?Ht?OY#CZ=X35-o2Sc3<#k2XU>hGTBJn z(bKQRH&w5hpN7lAz%+dHGp6lf)x$|HxJUJQM^oBaW#-bfJ;^2l5`l~=2XM~Qjqes_9uzf@hC$zgI1EXqc#&5fVIUVvmE2=g$Yz`S)06kBRJC*M%%;Kt` zw>enLMD0{Lrl4f7_KS4=<3B+9#~>R57}rjQ%`rH$KLWmvPVULEU`poHl(_?#j)yq|_ z*QOpNokp8AxX}gS1zTwu!!DEvTuH)2Voa+z#$a_#3L;Y0hL8R7_JK;VM=L4=^1blV z<6Quo?(9~Q3Y#`2n|IY1xzbSGRdPU(Rg&3$kC^MWOB{Mn=+53Gx1R!a#OPd!NN`O&pm6cns~_5%zA6)D2P7vJDnkfSMizZ9dsP! zQsxOJtOlBP_o~q~y=ooOF}WZP(LtyRgK>|q)O|(*biZx0Xv?mrE6SKVY>bb+{DrtP z8fx-T(9~7X+psIsnGA(r6Yrc}HrmD_p|{MY1PCB1Mh=t~LST<7FZ=R1C2n^Qod>vD z@$yC9BBvZ}MF;sz_P0_G%2lFo%uT6uLY_;%2p!?@pGo?I#uq;ZRJ1{72C*1s%8&Qb zlmlU7L9#~ZJewT~TtBq>Az5poFlvy3U*44B5sF7WCS&fGbfN%=LP;=D?O1b~5IK1F zV9qhmR8+mLgWrWeG^+BpN1b1@iHfFN0?pNCFvI;KZjb@TKaZM_kl0B zi6u91Oc&T3nb+<&H?gGomirSxAS=h{7F(te#YCo8rWds$4fGTy+QYJD6mf{+SBmXz zA$>l#p*^U&83%aeYk){lV&ggO<0h^(|npmN~(h_u+sXz(@+{UnNqdVt6lKjQCO8 zEMP}y0R(I)N%Dg*p90}9(7nTv=}9<8k_iX{kj>USX7XmHgpt%@^ky4+|R?m8pu)r}f`q ziFNhT`$hQ|wXU|RTBMW)RL*P_1ejw}u2T!DqQGj$m;h(u@OI*Y1i@|~OKwH_M|KrF z?J?X;o!Zi^w9uraiQ<-6EsSMakxG6JhIt3M-lns!tg0ABeXxK1|1oCd)Gj%O>H29z zF_Xx(1MeVw#fKBuTo^3k@5(0vZj9bmEf0iOmUKxM{1n*D=c;Sdwu)-G=&>uuUoPFG za%Mr<2$dzO$}mdDZ{&EQXnGMwy(O@~u5Rc#6u*)d3r#O54EXzz4P!>vdAqe}`n%{B=W!|tCLnQbF zD*}O6A`GIO=N1-k<0iIS3)96rL2 zHm#eK?E;&uDir-{cPrB8Gu*UZ-B($vf7ru27RF=52bQ~3kI`CB;3_`ha6VLFsg7(l z?O)-)-A4gmMi_RWX05lotmE-PCbnJWV&In_Je+fTdGDLozl$BB?>clTgpiv6^EQCw ziU)GmQ4;U0;5xcC2b?WVyuoMcL+*Z1 z6ToKjqSi2;!=aIM-BH`HyMVl>{rQd}e=&EpwPi@SC`K%oHb*EaLWuV34>^t7u5%(fjy0cjVffy+jh@JGC%% z*(t%H;4he3o8|Qzc?8SRTSrN0Nro6*Xde2ViB#BbbKfzlnPZY#g<7eMJ0r)ekLhrn zpW`A!{-&gM?W(9ZFv`5qb3~uGi;h{wui7%8Kh~FW=I#T|5^?pro<&)xWv8@9 z!wBmbHNv9E=7d3tXhfs?kfyOH$%uz;8mR=eQv7O|TY>FQ+J(x)J1aS4BxC~H$~}ZLq^HJSLh*1` zJ)ujcs;tvPRb*0&SkVeBa~v{DG%xbY>wbg*RLJOaM2asQnT;_FVRy5)F@aPjE5}a& zR6{0Ny>h|UK2D6%X4XT4n4#iLP2aSib)&A5BC$ZF>+{mJ^PBRlt_B|w8cv}M@n|s^ z@fHox74n#z3o+*WdE`))T5dLZsCE2{UAP!%Be}bx8B~H`JBrt!FUee(!DOjX{JIU8*~C5D-iGXAoNkbTOgxM&!*c3~+Tlx<-|-HU zpia@r`Dag6r=wlh+rWrgLBT|b<1$J$EprAwX?S!{n;##1fnM4IC0&BQv8HtaI zkAz`(^|SWNISmd+J7R9`?BL9+I@vxQ%`j1B8JC1TxwWg*0Oe36b~d-@;gLu~UQPmR zE}^M}-)xT6dP3FXKnx^eC=S@bO^;xXF8f@95M28*UvoDn>arZNx9DDAwY?)I)A7@q z>50!ThrjVy1~c1;Aif!U1@-F4mAFo|bS3BHr1}i?N;3#6+-gz79-B_QEB?i`^*~Y> zE?;@yzRK4Jv{%x}>7x0VCxHb5(WW#lK8 zNzpl?QxgzGton!M3jNw~TdD(-KPJRLkTe7L8sOs?CKrhDupF`kEi-J(;C=w}yi1Ur zvD;86_x@m@~eIA&~=jok^`Qt9jo==;V8} z3zz@Cjl)vbz49F$bpYNsy9+!gfe~(0T0OG%is}+!#rLNpV*$liZ77}7Nd6^)M+L0o z;D<=JHZ3-zs;36!pX88GQVW}pwOQGf+JRWff@NUG{KO+mM{Gxlf)Z6ZMTGy%;gR^P zA{d219+W;}CS8zYt)ey(6B*Q&=vIk#lhyzn7yd`d!P%hh%Y3nLOMP2Fr>&mFTQ{qX!s9C3Ix!^+m%@K9pj_+SkM-)+;k$8(=iLwPc&h%b~W zPNPxP7&B@pi=HvW9lPEqzl z)DGKDnR+YK?6FgO6T8DgVVBbyg-=-E5Tc8=<_SX}DNy!LB&2tqmjE?Cy+zl>#5r4r z9$inKqu03-nh)^3w%y!?BA|uZo{I>Gwf~pS$<25S6qp0y4u&ri~#ZqmP zWQT^mBM?I2y;%gpAue;tf>MOCVFrs0cAO}QF7cPdQEU;nGP*kC!;oa}TL(MIRN>!{ zdlK?n+Ly{kxXyrTtUH%2bN)%8lPdesWMCYYM&cg6OiA1$kxFNO6hr+Ft{eHBU)SG^ zbLS9~IKDqCqAi?}2kdGvN$Ik4GYtuc1-7gG?Haz|Q~_x0SQ~g?eL?#$Pkl{MDWS#u ztB&$WG|!TS#vcF97vWy)(O=$uR@rm;+r!mE55hVhiV@Mz13cH0%9hZ2{#PzSwnOCl zSS^UH)-XT(?a(H5Ni_^K4e84)bTH;{*{`p2pr~2wX`~z)nA)%o;Fr)SNhm2ff&*`_ z-(tJDEF13AF?x@0OJItf-dAb9epdU{4rsytd5(3EjrLA;cRkp~c8EC|&26`&D?rIi zv5^-9>d8vs>W1ukH)*ichs99{VCW<4V2Oo~B$Eb@>dVIjUw2*uu*3wdO-mP!Jb3jp z!s>)0is1@MZx;ccszanrEg9~A4K|+va4zO#qp;~zv7q_rrHlQ~=V*jn7w< zeoU*+oipDB!_(yUnO#ayBu9}WpU3+j-u^r5`r$~$(KQsrBLnEAotQ?u`kOExzDbk%G)Ham;kLq<(n&P zt!$||V8yH7#NzwQ1rj4>&Xsgv-rAUy*Ye`g4GZ(s2H}6)UEK>z7W4$H4hWnMFB8}< zMphoX0svluQ}#b#YM+@cJmC;!dW!ps6#1)Mf35ZT2CPN~x%nMg>RD@Y;kib92+M#= zufz7OrmlfbaJ8y}Dg7GQcS1!4=`szkUuR9hm{*8N4r)1Tq{d6Zk2*7-R6&S|v50qG%Z()a*PvR*a3zxSWYXcUP@g4;{#KhBax5D|KcwdZ{J5MElrV8+~v zmR~G;)WWk7un;)m%=Jv-K?8s$_s^HYdK6>ppcYfcidssi6WXDdxWj;(TOGC#Q+DI8 zY~u7|70YF{Hx(}T`$x}S7wev%7Y~xD7BF^)~B|u zNO}q@uT?J6awAdg`0@Xa;2kY)GN94kQnCL4{kj!B()Q4V>{m&qs93J2i|plYq|f5P ziz>{~0o~$TO0*9IsI7O8TG}cHESHDj>BU`HGsw}JpdAcwr#Hf725T783$J)gwWif$ zooYKCoN%Enl*g&)?!k<6j1uW)JRvadm{GNFx;k+@Yv&34v=C=FwTO>CXreWTnaJ))0L7UaB_bl zyI|!ya!7PD$w<$?>0hEBaMY_u4HrA{QIL}n;%c-fbFM zsBw(jW@)xsYQ^fY2du)w$KpQ+*ZG|7#-2hIoFt}-<;!sSw&;Zrq`q>Us8I$lA$EQ+ z^gxv9C8PczI{G~XFCZcNe}q#b-ej3WRL6y}I{24ums|aV&!g za=P-EzrZ;@i~-iDyWuTbq&&Mt`DTV4$vtmdw3d=!RM+DksF+i6Z?{fyLozgse4j zD{zdVA#B!GHVzIo7^KffIc2m>lxdP!k)f0P}M~uUy8M7kP^z%^Y*LQs&?8hV86;f>T^}pEmZh2o~c+_K8P?)d!U>ZLs0I05$>B&zy{z{Wv#;pJ#Z! zI#RWn6znGa3&rEOHK9Q|2oV8M;@AT6WPLMAqOo?LuM`9)`pC>CD`zorximZP@|!87 z!hC50;FoWngg>oCz#U=q(B!xtu!`j8=I4E6r}0iFj;Nc%XlJd7w9F3e2t)e$kvWM* zDYow52YbHUPH0=nzib`np_0pFV$c}EY|xdauQGR1SZJm)E-Yw5g`-(gK~+r>jFX)q zFr>Wg_+eo3%o)nLar0^eoR*p(1y2~(1ic0}gddAcccSIxrK?<9qV(>zrHVIbzyKow zcxjpHc80bFy>jvB%GEA0sO$QCLx4zg{m2G(*UExnd7@uBaLW_kD9+1`Xb6|lj|rUJ zem&`Q7NA3;AA@ZYDNa!BKDnN3%}1C8BRS!q_kGEqSKqwWHBxT3pN!cJ5d?*TKCd28 zt7FE_QDMvBG;{+XYeeEJjC2|8Ac6fh-N>4gb|!9z6Xcu~63KU>DK9dFk&0w_8k24Z zdhoMxh87xne669{{$xpz4kVplH*2Rr}N!PXqnaY;3^ zcAa8ALiC26r?~mb_bbfbL@qU7jb*biETBn_r5pm|3A`D9y&U~WhhlwH<(D9mn4rA zu+7jBGA)kKpz@W|=8kBKlyQk5>VXN?6|%5Hw~pu#-uCqTz}07>4!8_SscpF28*xrk z4Vo8o#8mjYSuhB+Ca%} zG(uz&q>h@+4aJb&UareR=)jY5C}XF9R(H1PT05Zl^-=f+EAmtCE{0IioRKl|IK4N1 zYlS|Ts4%4}_s89czPDJhtyj5a7iSWdcP=+=P}(H7rbR;H!3kffCXB`DBZ8hpatAk0P9_1gAXdUKCb*g8uJjR?oWSY%rbZ_)&^v6U#flr=BAC zXa2Bk1oRX-n^hlmm9(IQ9kHP>XfD+39F4W2!!be=gXf?ja<)>O8WHb(O8PY{gdK8l zMq1hc>me@4shy(%2g$7Kh*QHB8K`!zNG#=gn}NJd(EFZ)IUd2f+l`g;aRy98^~$$u ztZhj2`JXL*zh3CMdgkFdu)vc&)q65cpV9!7hXpnRF?O-AE;*(c6SqWM4iym0Sb=_E z)A<`M>_Q)Y^G(S<#1#p`S7d7|)<;kds8}%ffWK3K4fvxmy+DiOA&oo=5n@KAmpAlt zh&V{P2xGLkxZGG$V?@sXOS?!F(3o3QM;hC}L6H1w7Lqnn1at?zNy498@eI{=3pbV( zPLfC${+e{>(oiaces?TNbk+2e*M@=qwQ1wH+7-Xo{bjqG)It+;5DW&Q(Xf?q1~A+U zr}8yLaem9;!TT8kt^r0IU@{2~Fm0VdM0bgq+`t0m5SCxp!J z^a?tXYeE_Fo7j(_{zw*s{#_|Q^Z4@(&RG#Ph}|aCK7>Nt=7v6pBGhAHuJGb_;gWmr zFTdXNXC_;VIdp}ohYPabQBq+lMk_YkVT&57N;Hd}oSN`WFUb6N*|$2R8S6Qn3&O_g=Cdvfk zY^;6f9j#OUdPNQP4NPugK5JP&TakoRc+rlk)N9oEwd`q-DRYC2x%cu?sZJsPX&sMu zgYFIj^jwpQ81O}Hsx=)Ip2zR~LQ>Ow?w<@esX3L~SP+nuh7Zwuwrfp+1%6~#eLUXTi(Z*(hkj@AjOyoP5II;IFNv06HEO}mv5&pmr`BWe zz&qPH|3~s^2c`IPtEa2f4|3%Y13$~#;xkY=&mgc_D?l8Evyf3lxw=`uP=nE@xrtR4 z%!e#E*|)^~;{`v_fJ$NhCWC|RLUcIUS4Rs;|LO5Um61jI+zjKb7or=b`RD?7N>-OV zL7rnWBc?+4Sy_*fIcB^bNwe>|c3i@3)iqZ4XN#9@)BJ`)2K?nuXi-i)D*XmEGR;d4 z*mDxt;LislB^>mYP0oNuJ39zp5qR~h1-4vo575Q)IuF`CTFx~MrQ+ByLeeWEYX>C1qdw6jEXQBzSclKMQ zFbqOIdj^b+>dPxrqFtD1U6GbN^+5VJ3lRd#yZY$(Vlx9V9EQO;o|qOO_ zXD$jbKnU0+)shT*&axP$BE=B~1Z1-sgCxVsE zRfy!<@wkXP|yKwcnE@9&egJ7AW5k?A`UG}eEfJ1R6gWf zp%NQP!cSoP8K`&@R#7ZqOdu2H2F{id^Vc#d83kqV^i0&svncEm4Gh-M)gE*qEsI+! zLRPy9`PC z>=I$Y`k+qbMJ(pE*rh&2odW_e}9N+O}M^C6E`$R`x@v95BN5JIJ>eQU$E#YL6 zVuJX3R0fQU7zSYIGZr1LbFwwUgnHm()Kke>ZrDQrb$T8!adRs5yrgcL4uVhJjSn{O zmEWew^b&3IS}g0Wx=3T4pq+WEETv*VH?_61Az*YtyF*%oCSLr-qbH1BA6L&}CLt`A z*n(IL<-PXL(kvH$gX~lSkw1GnpTJ*&tP0E4NPh0FJuR%6WW+GYDOIg}>F3iuOH111 z_&qY<0!MNVSZXdX^{toN8cV+;W#?1;xK4Qia%C)f=@U8ADa)FN7wn?7)bbK%D*32( zxTOEfa(VPJLa;PjZfuLyR=&dKe4Uk@E(2U|rs(h?gGq;l*8 zl+$i+V!Bm51m@>-Qef6gZvjr$xydFvJcOZqaeA}JjNzY zMw#xci)vbs#$)4p_bQMN$j+4*;O`%|mbh-P;@#jL;S>1F8#0m#z39sQaI}9J%|>Zb zFz!v){~LzfOT)s>jDtI(IaAEkx*>ZAItzvu^@c%^h&nfEfl8=Fo5WbbtvXdV=C=mF zwej3XiV#5-6%KdzTJ_Avr865jWo4`MiIR@NSIE8qv|n+mIu`wKw7PAky`egL5F!5_ z+}7L!VUESEVAg9!-eTmi0NKM zWA7lJ0Q44VmzH%LQ-n#aVfAK`kGvkkq|IJ8+`21T|)(3z?X}XBq;##YO5gYoQcd zH*ZDFc_b=Cijn<-SB4{F63P#T`CM$MjhW(jZMmt+vkVcv!#Wx*$ru_rg#+v{lfds&cOQ)awA)9pW|wxqE|6VO zh47!^2opVmg84Jc`z!CC)po|fPK8ycM`U7pkDYe-|8T8FNmDR#kQ@{UXdRU;yI}Iy ziO}?bxeUxLt|k^3!O}`;dsC*Ti~_esGs(7?;BCTU<#$g~&)YX;aneto^x(G*b}(Hj znZ7FZyr9S_NbV1p{gJ=KrL?5w9L}1|2Q?#7OJD?Y6qOoi_4rF$o%x9bT1k7&X?YuEmL$?4NDF zY4faQ0HewheI&V3(Qquy+2R{54!7c1-h~1SE^q0H9=f(#=_wmv#?5)sl2KZbKUdRC zwp2_zVnNy~`kGCQh=qrMloT0DqPdhOLiJ}^y{t}mL19$J^q5&myhb0XdD=??JoU*jCe>gn4zoB&H(ZK&%)PXlfUskY;N69XSf)EUE~Z+rLjk zJ~AmG@9S>_yNx!r#OW=N&vQO3n#~CW+|K@m_}W6a8EE_;6@74CYsOM*1l)~|D%5kR z&xi^OAK#fwQs-!>eJ48zxv^!t+c{T}X%#l%Q>)JT0HXHmm@8=KQ5#@=S4hOXnZQ@R z8)xW)n|{S0$-p3lH6xabWZ5ZG06E*4CLA0Z!zrn3TypRGLHndD+rz^UuuAXg+*V>E5Z zv+66b;J|=;gb8H(kd7Dz%!s+L3~0H8U`BR_ENhW)fSbVDo zN9a>T1BKy0Y*y3SNOif+;HOZmFK!D95m)r|7EOu_W}XPyvC z&LXEkjwv^Q&-0QW?FL@T7KhytlPqe*RV$CYg`3G$sr{6aN)XqHmnF9o=Wh{QR0~-* zC?fK5#}8P=Pi$2EApp!~{Q?^^%z2;G+xBqPp^I-ESZ4?rZQ6e10Lhl5$$=3J-?PH= z-0kyRJ(S*n(UC9&JhGnIxYA1sOV8Q>PAyJy#-#dkxsvCA-*zlmg&L2#)!*?4ShiR+ zM6IbOPf;u>e&(?Dd$eOu!UAdoHc*I!p{Za{%Uf>Ti+Yn@x`Vy`v9(gt5FK0kBH<~X zKR4U4s!NzGGieWem0JOQjuD=d^BcASw=9W^yEHFsw+-HL#5dOrx&Kt71JY+$2t@b) zys^vzZZk;e?5-}xQJZ9v&v08LzO7(^foq^<)#&U>TwhRD4yVMsOM<6}lm4=Mr+Gb; z7KmT{c2;p%SaP%GGwxb!@9RKF$PgacMg%6U2P6DJS##40OO6;jX63d{R5chk z8yMqo)z;iYwb}{{U+>v@fZ&jFV`ptome#(y%7pQWmtEAs3&~Pny>zuzs6n@wyt11I zkvOSPH%w%apW6W_>W?v7sx@lnV>v_UZB76=A>tjxA@SmwbLX@oLi_-tS-HFU06n!v zir%{rX5@I0rr{AtrC&H3%+iCcMK&IV8bucSsjOOs#0q)ZyK|tH$P~`7jmO)fwdkB1 zMdbea3}gZ)?n~F)er`$0(#AqAYBLYV)!swov9nI^8?oGjb(}bnC2Go5XNT~iO$FE> z)}037q94s;G54DJG}$OKt|!jl(_|M)-SR|4>=)8qz6UBti% zEG92%VA!1}EJ4iL5__b7-P;UvlajXoNV@{4>2DKf5nITz*kNsdsn5wLdb1*`Cp@<$ zS6_1=M+-#ftW@UY6`=nY0%6E6^M66mddl0VxKw%Cr8K4#VC|Y{$`jK- zi=*~SE7T^GQO6t<+v>4doEjzDufYQMG*jVJWaV{Eks{82YV$tFL1(o?{*)c8OmE(t&3i>P zX6Uw>gYj6&Lh04c@Q$47`5-(!T%uJuOM)St3Ltuv*HYc-RKX1BTUihwAr#d7owFGp zFw@#BJtnLJE=$n$r@79hxj$17sylxQmN_om7oi~eL?S&A4*u!TYlBvq=C#rUYhO03 z{!oJZ83z17X#QyDNLE~r#ISW?V+-OG^{V}0-Nc|^>S%J3>i)uDVwCh1FG1w;#I6a3Jcoz$;m;UBI+^oi=QM#%h^3&UbF@|&LtP~GG(1&$8*9SD-M^v zDUk&#b7w?2RBW)cayhm*gCdf^T*>iO-m{s90wD@3I>6$Kud8JnHnQq7t|}Jcd`tcR zq#k05glb~J(*G$jgiK!juSpI;=~5|e=a_S@8B~Htz2;&doSk712T>`%FbI&i2cKWh z2ql4fZ+4^Pe(J%P#hFcl-vUT*R`}SjDjNT|UZ_Y>7s<&+-W$3=DVP!9A5E?+ASyT$ zm7DCM`sGl}#TgoxLvBl$Xiir)QlBZMrqq47lQScRhIT9(93K5cu|{&1$GKohC4q|4 z9NNCji=yd!YpxeiNOJu!KJJ(@Zj}3_Plv3Fr@bM{_};<{F^(nC2VUjrBBASnMtbB_ zrImUur+qnO%6}HBaT{``h$Kr?rnX(Miqe~p1j`J`oYHET#f*aKq-Uy6`(2CrDJf{h zGhgaStiIz8`8&4Qw;*&oEXAo({w>-+LU({R4bOPn1XDK@OzT~mi zUZ?}WM1%Ea(c#A84N%QYyz_>*FmGTYzv1eD@v$+x2ZbJb=}8us0`y6w?p5;gtx|x8 zH(%g!##t%3Cm$MZ)}A@}h5$;Da5v>SYgY5zr6b6HLAf%T(Xliy)765Urs5@f_a$iD z*z-N1vbm!cH@APxT=Tm*j9=mQRDX85iwtUxt|aN$(4Ff&M6+IGmN#p!ACSM3zs=2> zO(V~|S+?&g!{R@2uMxjbAdYx^|#Zarb>@pL>lHLkqs(^ISCOa_xhL zuBZDTRctC*{I?;P~rK#EeAL>d3r@_rmP zpp0hL&!d?zGuCB_-C97Rp#d1kVTIkCIv5^#yhXTa6%+0tf4nRFnxlD4IneZ30X??3 ziZAo=AC9B1Qc_cT-8AkNIK{TLmR*g*d+yOb5V4c6=5SCFIG^40VtYiGPH5zXmC`LF z5{BVr(5V*A&2h`pG^3_&0TtF|_vL3B9~jE3fU$w_OTwl_-*)pJYPU!t#H8@pnU;!u z(miJ+tAPC0aOf(`>OoJDnAyq1<7W7;!K%p4WIyH8a@j;#eH$9Vuj6e% zqyy=;{?76FtRw0_1#^9`{!h%+^j3odd)ax5|3*-|=P0^0K~6W4+kooN<8kFx?9KU)P9rlE$;jTn|P2>YEh5(V7fV|R2RNPXUgyDC$3B~^uD?J0DR9)Y(e4GF~q*g zog7>fg1gw|l<>-HOn4n}0RKM#zzhqT+nRa;jZlIO)ZfD|=q)AnPl;>v_7eQD0JADW zt}Q6=?&9Y2&V%-GJI8K7A!*r-D)_Q)_g#3=jdmO_SkJ=Dt3zL_=+{vJdjW2LKL0G} z>B$X*DsSn-AlV?7ZxXz=aeA#REq|O2uEEZpu2+=&K~(--nMKFcissIIxS;aaYI|k5 z>{_2HGE7V??o%o^;_$E%I;LaAxjFRgNbjJE5?kFGq>M);vPmXpEAJY4{gLB~l&PR; zlgUteRv2T3#rQLcDFE*21VbhXY8!|k&(JJbN>7YWFdI0zYS zEnV|PZ%#vOo|h*8qpXXx`p47`BHAlkLpN$>*pdzLPCb0rryYY=<-}m!FuysRI9UW( zYSCO!40sTn%ednWSP(g6(vyP&L%m^bd}o*+>|to92J&dZnx^LnxaicQ5PP=t!IQ2d z%fXN(e2clCcyp7+=Ws35SH!RY2L(KP;ELnHjXVY>j%~VtDYm|D@#`PO`arJO49^^B ztm=CcaW%&EQ66l&yDQ%OC1xt{0+{B5P;J$xEaA7pRi$rs%oX>uyx(VfLGfU&Sc1y}Q zMJP6g5mkDu#@JCo6IuLWN7aaz5yw@LwLLvL& zAAHo|C`S!x?`d@lPTyH$xgLwy(&w^@L{LgJic*@3Nyc|Bd)pNdVr);N8w~zGsk%p% z81U|20ej>?bCZyyql$RT^wo7d9_e0p`G6(le=9Ts%lg{>u$G! zM-bLIKgQvFlu8U%$0N1=e}+ zRuAFruaK?@Zs{x2-v)nb+cGV!U;W*>DN3ecsyMgn$D1Ll-55&lwPED;Qi|WmmHH-w zTPS>QL>_JKr~DYJ)LXyQK74+dCK>de;n+FRwsS(=@Q%d)5g8`3^Qn+*tS%RE@Aq3^ zAfEAx?1TUB8EXtHS&lJa2Y8DgqUf7$i7!N2?z>(^Ik*2m1V2r(2S+9X#xx=_Ij;?A zv+OtQe_N9YRsRF4qV5D-Lj*+2AtsonZ+VI>erB&Hv|lULykk^9g54lVOC%i8Zk1|^ zPM4UbYa*o9DRs-m4Y8>iN;uXThyrwF?Csz=Vh&0@%UPn$zlqfyt01)9vc(eV!LO% zGxg;z4a3Erg~w%rS*(7w2JC}Kf%#eMqtO@;joXa`}^!}XapFOO+goQo%X1S{&O z;|pl)uNZ&_+`C3yPkH;lBwN?^f+_9hpqk(^;MXQmYTSRt=;l=qY8L{EM#T1?^1K zC+%7g5;!%kq@r_%isS&=&d1j$SSEg5E6617|Jz(SW;@@Cq0IK*9e(uAQWlGkhoj{t zjFsZm{BfCCGx{C0arK3DBwVVsd3bMfPgJ+-#^gM^0Oi;gDn76ioOt=Qx_$MLl00r_ zL4EfP_mB(<7VwTt8Z1jTheJlee)?2^VVxc1UJAQ1mY_knn6c1jE1=Qg6{j^5_9E^6 z-7R^{*zR;vtl#ae22*O7F!x1LQa8y*k9rv8mP6-ikGzafd71C-7qFwlfl@9o7Iark z%D|44ea=7uC|b)ZjL5fqus>pEsOutpE(XG^$^KOMMKbK9XWaC3M_Oz|FD;Ndri7$k z6A-OfoQf;isab@;u$E18Uw|3o5Iq{cNon)UcXBB+s~xu09^7nlkd3NbH&p*qFnzE> zMd}mEL6{N>bET?~{1ow0^K(dT7L3jx| z)p1IRrD>!Aybq;^U3#D|F(J&`-2b{YK1j1iRajKSaM#nWKf`YLT+^WJatjx*f+|b$ z7gO;cKD6-hDWlvaWsY&Wc2?^lT>E5~SDRSIEh{#?Gm|tsM+1(ZSc8zA4=OWMWZ3;^ zh1xkfs=>vVjX*&!KWDxPh-kc`BX_=3Yr=zNE>s)iiszApzC+pyl^AZq!l2ncmAS92 zop=w+loxZeQPn7kqT_)K!AvN|;31zPQ7*xS6#lTry0DkFq>JL3Z^~+jVKQv=)r|ao$|c zAT>JD_BzinYd#aPwb)w

##VILu&oG(Grp8Qvnq*4cP)ZJ$|P(dEJCu{AvK5y_h8 zfkUcCtop|if^W6SBlkaQcDO@WdtV&upYz4y0_m(z%i>?d=l#B&)9&70US$7OChp(U zse-<=$+3Z4ILG&gz1LFI{igrm3lx{e4E93x%#gpJ?g1+NFzBLZ%sUp7ZpX;j2&+={ znqmSBCh_I>o*~1@K`}oYz*rO~=A4d?7BYV)>%;l&rxVT5r!T0r+ai~}CNGLNZl$Wx zcC4N{Mpga?)K4jF-oTll4(uAayS;4S*?e^~(99CE1Py4B%v?04zDDzD0{{n%VkG4W zy*PPLqY{=q(s9A2?xz53y}ha*zD(KSW!nL=w|sU+4xiIa!|F?t-%Cu=cj=`SO8%lnwKx{zsM+7zB>38G0qRoXoOP z%LNU7Cp16qhf}ZRU3?-Z!Q{gTkGVRJ@|RLsW;yn1k>)q4qY8zh7=!ei2<|X=sox~T zgRqM=GrjZebc#@f>p$5evF}4r8nH!!?11Lv%l3?iiT?&{%G}evYs7P~4rj7SLY>3-9vSEP9 zqRC#2^Gu%FYG(MR^hQ+zofennCse7v3k0TBdH2HOQOrLnpGe1JoeKGP6{8zMb7U^D z30@QrKF-B@oUx0t1b>uV?^oTv7B2gB5+tT&|AY5)TRTPT#JjJg=#}qI}u8V&FKE%8^8xBZ9_(lal32x26s3NxFeL^W(eQL=?*Qy^X zoPB0@&$Ob(vEupjwh1Ka z@Sb1l%4w&Ah+000f>1rX%Z5NAXSQK~anRnIO?}iM?J|xsDiaI4MSQn)=H2}`oUNf} zERqfpM}d)HiXO|Sr@<0eJvFlyjDO)8+yhv9BoU@F_p>`HN#LEFHMVWd7Qm#I`nvWk zXAPH?R`sI4m*8mJzH!j05?FW#JCJ!MKEMmbC!6q85D|6;kFHj3&dye*+KpA-scs&% zgBY0d@$mRXy-Ns5)xj}|Ox zI#8Z(Kh%Z8+?6qiSq!>&_kyIGZaG$?>7YgaSqpG?AnZ0T-H5oP*|qddt`TYD!aguY^q{Iae>MG zwfgsEK(OWh@*U`I1jV?~fxQ~j0Dbs)cTkE*(aj&6Fu7@bHQ4C%^Bv5hUv9UqtX;J}(teA(o&y?;0wh!2TP29 zdb(D!xBiv5bqd4?&GQi2D=oHn8K=g&)lTK=O+(3@m-bcD89}qZOaFnkpydb_3;tz& z3n4wpw+K1?zvT4xtl-@XoU(ibT78Z4W$`D%Ax2Hb@TK%AwE+3r?cdz=sRXYCo*&xd z&r-q^a6mqp4N}p+z33Bi^o*3uDaDq5xXLSQ^Qc3n*_Nf_a5nLgrd|AK%=7hdNK)w3 z=t-NOl>oY>+?T_+i)M-OmB4Jqk9))Nf&(kYFS0>na`8^U8YQ%|70U1L%t#A z8Ij6MZ8=P^bBRAt>g}^^5`$d%=q)>qiF)-+sQ*|T>KR6-Q((m+1sOY-~K3hoJtDR zx}@H**dsGsf7TuUe!85gZlS$~sj1)QbJRk^J_ zn^Al0YYf2ty-y_oXb=AX-+kSyZlF6 zs*m?&#u?YUbRKofRb`E2wm8vfPYKONtQdbx?q%MtKzz0yKT)@+o?b*Yu zCwY~qlo)JA=3yAS76mgk7Yq8`r;4Q~l;zM=mLEldmZyLv+LuXM2iyiu^hePK9ug+3 z(HV+(o)=C^ovM*TFfj|0Tw8}QQ~?r*)LzX1+)VLPYFvEK)4gDvl+=n-NrW3n5s;uk zP~`4wHb{qvuNm?Aje}KbV9TnMeHZ5@qLWP7BKJ>u zd1z8AFVHRw+X`At)02{w%2NUWS?qt--ZNSTI~K6{&rUzUP6;%xD9uI@6j}B*NSwl3 zb@Mg?=s4z=CAg1M#z6CVS}ZLYkR_`m$kp`UrInQ-HxchAvWWsb#fvcK_?5}6wC~{U0@sERz+sU~ z&+r8xFdmK1?*pG-j+@Lp^E|S9r#}jOsAk=e;=9q`0@%Tcf{@7j9nYa-I7O~$CwrU! zX;hYb&=fS8N|!@k{O6NK0>LSl0JlVT)lm_Gu1YasEGIq^Z&z;D)gY%2^)&rH9IaR524G|eZ@cY}Fu$Q>X+6x!Hl2uWP| z{2<+1*bfv>4oG^VA6zEBHh{54IIye*WI zW_@IJ)H5x5MvKRLXjKcPITV}}X*@byG9NhZaC!Zzey!-)iH1pU+q{^mwKl zTUl2Z>g0Lla~Ed6+t*u26O5NFxo(RXPI~tp-?DJU+8K=vhlenNN(mCWRZ)CF7;1*n z2%73qCW%K+%0?>?k+sq@#`jrScpOgWNV*dAJ-^5?vvoOhMW8xbg8r3nfB ze6Xx*3P4njpD%{3gzqWD80b$buw7gKi?W{<_2?`C?sU^+Rl|Vo<0Z*%ie@pkxd)Hn zX`guEYo{jeq-FZr5YKfEAMUo=9;jwj92|XUBl4U1>l<+_=J)bkC<8;uj1wN>wKO>90E=nF%}9y1(Sj*L&2qbq-EDG@kz6-wB* zV^LOgbaFj0$h-o<<~&HV3RyWX{*GUpu`fK(XANXi#p>e7q` z3*GeM$S4z&ine7+6HpY1Jke`ZGS2%lmmUr6S5->0N=z{+H>NLjuWU@0Q#BCr78?AM zX}J<4%-#U(11KApZ<0)&Lndf;FE~?jIGl9hYp4O z1ms@>`^`n|7_2^QhE4aJMp);ca~?+naAS%0zN5u;gFjfeUUEPnIsXP05=+-I%G9l; zOOJQeD%#n|Il>OKKruM5@GjD7P6=(SHs(ol{|4IIDtQJ!$(14oQG~`Q>n>tIov>1x zDX-W8Ubjc^Df7&l1~ggk?z>!ds-|xd2etfnf%EGSW;I&}?1Cw)Db)PqHs;m1$6t>d z-i5Ani(Nn!OTqrg8I4o+su{hyZyco3K&gIPDT_OnL zF9B7N3Pe@39k%9HfvnL+6Hu66c%}~%HjgQ;pfg`Fu>1oZk$$O!_47zKbuKbBb7*Ty z|9n!qO7K_mY>CdxILmxmXIgBaVck`4I^0@h9;o@n@>JH&(~@DwUGpBCBvnqq%_+4m zo|lyqJ6ycQPDuwU@!A$r z`GQPX9>)*B7@~1RJMqOF$w96=8^mnN0?R9AP7<=s`BaiPG?aX<&(tiCE;J7_o2@|0 zY}L>=Nb92|L)AtpvkM@L6AK*^YJ=yAWoV-abADraJ|JgWaRTy@P75ozTIrdDY*62I z)pQZZ6<8Fb5qsS`K*Jhd5+#5ED-mpg%94_1Skw62WX^Rj&G#5+Q(yhh_$D2-g_!*Y z$@>?@0s2!DEJR)*$t@IDOG5v!@y(O_IZ%lQ{P@Iq>MUS^ z-@pC=HigYXgga8I<2#f!1B}k?^e-h`T{08E9=jf;_C1h$w2ms5>rypj>Cx~BWYIuR z?Z^F1lR|7ZTQ$YbD;V~)QyLp6cEykh(~Mn#(lQ`782%tAK%T$H3qWT~1J0;ccfFwD zvdw!LC}fjO9=b28wv^dHO@V`J$PFc~>S9wq_;OqiaYF4z%OEvz#$U3Vua??j*CY#P zbeseiQdW9F$0T7BsZBOeTIajG_@+Vmo{%YKL|+#hholt|6_UgRdtdgmPPX1?_5H6O zTYMJH2~+kGGN_v(iGbScTn+EqLdX1N{)&KL9*8u)VJmbH&5<^Y8xb=4E2OQZ`D4#M zq%=`Vq-?KKt2lX{??}r6+@&cmuO#W~Zrg1C0j^?rdHJEC?WAiT;JsiDAw9C)YN)NU z<}EbJv#O5LeFX3vXlR3Z8sfp*QoPaG%%A{vHqNq?_qeH0$&|uv!neBwhsZ?1=tlYq zvA6(YOAZtT!^tdABa=mh{I-oT4)XxpoaBlh@Sf6K5-|_&ZkX^I!>z^^-oi*rU}BH# zP2Tm#UtFg_`mh$o<97z4FA!7F`WYuK34kn64I%{j#_D#*XkI_7j($ss`fa8=hMB|fUr)c)(`dTRPHFF$td|9 zQ+?_AJ{i0V6t&8?zmlnXbsz3gXUIieJtIqOcUA@aajvZL&UFLUiK^Y`?5PEt)QTAZ zc*q88--UQ|PEN($7HTt-~wFX!4t-?d1ED8)I&N=Fo3*-dK3=2uXHC1z^s5{E+$@(OfxxNCvzy z#37bY*U8{ZV9!rqG3lC$mOh)U-&u7nu2G&b(j;BKq#BFvxAyJTN{%lI$Ao*;=25Ne z(yPS7xq>s-JL)&Tidy!*Zi)&GJZOhH%znFZ##Q5{?w%C1d$nU}igKzw24~(3J=6qx z2{u~%1w>>}_9Do>Aj5I5L`IiI52Rq<887esA*~3;E~Mu^s+rPO0YYD_ouV%EU2Hkb zH?e0^Lfncn8{qtc`h-v~olPmVN*1>jGgv{SB2i-#Kq~B!s&m@#YEAaBe_6xLYYq$0I=OD;0GY zhSEVFpnzQ&pL}0_UhQygu>)!RaLmi=vk&8fW1K(;+nj%+3gjpUziF&zoUWgwf-S4c zZd_7`UVV_~I!s#AYn5blYgtRIHV?gba;yp!&i6AS1F?og{Y+$rQGWZsuP|E6wIBw0 z$9>YT{TI#?M|_L$?citPCxDq59R+o71-qZ+7QAFN<@57*Se_0DTDeBL2t2U-?hTj^ z$u;#b9IXJNQP*P&ZjFKU2O#RT0eHySU0nU@KIAc$5ns){#Vd`K?ZFE&#Luc18t`eR zWdslH_EgS`0QA@(y*&0ZT)WI-FLY?9>;G6Ho>{eOBjo2o2g*ev6PI5h&;g3f_P_eT zD>HUA=`NW8G3631PmEl_MzK zT_0>cB1Ki>D=})dEdcr2MWns(KWofLU31D?IWKs~a7qz(}of1wjnW2z7VQ!&?ZAi!x+5R1m|7gr71<%56Q-$D2HQI*jyia6pTAlag~4#5rs~|U zCK%*7oLzhCQxMUOTm9oB?_`7It6K_#EOFT%&3$ViRcTOEPr8LquM#fXCy-OiHPagb zMp@yqy5aK;QjY)HrV_+<5>zX1j2QCeuMZBkvNsK=BJLt1(^N_=%JG)-{k+Y)0Y+6% z=xtOiw@Nkci6fdSv~rz|$z&S@qyAV2LSJ%DW9_CK6(+|*L6xG^m!46zgcdf)LXKYq z|2x)m(t|w`nq5Hh{xhU89*5R|61gbq$tX9l9&_{cS`HGx35kk74RC)DtQE}R5f`@f zgw**ZMmA3=Rj^3MpfACx$yk7LfM(kHw_i`+2ZZ0n4<)BB&SWIyIA(YfgU+auunY|o zxsVKC{^uZ)s#n5C7iyic@*rlk6y@VC8v@tLu z4b#P-tkk$5KTPA4;y{Pi6AgirBZ(2W4icYQSMZf8gY{_E*YgwBA4WJgV|Z=G9$^cX zD~y+Y8OPir-~d?-5De1bnJXSI&$}pX_7x6QTg)}+WSR0> zwA<6rx4UhTyH<(E14uGeTp@&?Ej}C3TekB1pF=pQjGcxp;nQ*sbm4AF~=l3vhB1T1vZ$orvSnX_PEHxA5)gnoU6XX z|E}>iTN!V;+tbb|%%+Ah^20{{?bZz@qF`Icg|sJx;*mRCawKR>*5!PFF_M>fv)W*#GxAk=cFg&k*Xl?o!EpZ%=pD~ z=O8$ZM*b2`H&^>+1w)6pSFd2?x{7(yY3KfYCl#hw6iH4o!b4;X?aA~yb59mCwMj2U zQ^3jeN~G2f4_?do0d(UgQCX5GNznEqktMVEsWD$SAC|8V%h}0VpG3sLCz+tCKmYAp zZyM;-@4fFq%F@G!J%l!tZ_<5`54NQe;NCUM$UFCbvPG@TS_-X{U&DFfM&qZdSX z^dQ#dC0Q9R(-snFA6wGflty_F0(bW9;woW{0!}N;e+1M69-!g-M6b;a47(7%5>@;J zP9Aa72&;R{J_M$e_a%6db%uA7h95y2;iGPOEJDh=NEHuAXIEuHDGc#ovWl}xd!BGN z9`-njYsF#hN>?n^VbCeD-^xFWZuq28`{SpAray*mjWx?OzaNGZWSmu>l6_7Ew;hUn z0XI{;a0FeID=Sr1qB@Vy@%a?ZG=ZskB7NI;%Y2ZEjim`|=QbURMb;f`13L<-sSCg6=NawbPMD*f1;%@O*l0sk`0Z;hp9-IuRvGh%uNY z{_quxjZ2()Nt>>Bgtv<392Dls@4(ynO@dMz$&BvZ*nDf0@5Q3My*af%?mdT!c!P3v zUI0yr=0VPMOT8iX5by~e<14}ot%L-FE`&yAz>&8Pzui6If#PD6wq8d#x*)~DJuVA3 zAr@0J;VrQo?DGG)-4N;xjF9`xcB>p1YkdHI8gb6C9s;vxO&t;SUP)lWCP6y4AK0k@ zdIp^Y{Vvmxg%g<-vIep433tbDOlhNcHl0_DZ;cS-sloWWdDMM1e&1xQ-+FI2p4z6; zxSSx_U2h_hn{(#6q6!nQd7g)l3Dm-?kV?f#;sQ<>+&RHbM()ahp|}Fq|)XU(yI^Wy}l-4J11Kq)8?vXlC<^xfP|e zwPdlex{h}tIf36QbhA#tGP_UVRHs&I><%Vmw0|d7g5b2E^>9kiMFH`~Jo|Sec({#Oi+}N3G+SKM9UIe^*mM-YXh^2_do8Z<@>m#K`lCgQ|LO zyUA+#dCALFuNh<1TZr_1u-{^6FRI-0Ui}^4wJYQh0_wrIZAbC9G2taA4KeU2OZ8vO_ISc@R{WZRy|X=mdbDs%$_P% z$pO$CtppsOE*|Q^%bnN(|9ZeG=tC{-nbf&da1b8Udi*NG%oQl7L>i98L}sQz(3(A! zE*V=Sj>zj?aXAj?Y4;UQL$+7$T2v3i2r%>C)h>^Pl>t0mn6xm;SjY)joZX)-LyO2Q zACa#z0=Nu!zhrx0!{+li;({~mYNLtfNiLJ+Ji>NLX$gT90UNSbAxJAHo)AQ7Z zRKS64OXrHWt6XZ+#<4doWRpf6M0MJ1DUSD?uzKs}4siCdfncP};YpncvI($<6eh7n z*E0HiTJ{1YgzbTY{#3yv;0IOHlz5#dbOn#Z9+2p!^ZEgrdJwE5s zY`gy?pvusN>RPV1sx?`zD$7(y>5m+yK}Yabf6({2RWeP_21u`MVg)QeR85ImiEu@x zM*P_=XO9-*EE|ZBg0=L(Gd)qEUPkd>MPP3uP{s$Vr8+xM{G=+A9g}!aXC}{^@s6$} zATy5wxiHc(ui!a@gzk|Ol*`Q#-o;1@jyrW$*?KaJ?o-#pH!v|OBWP#T-KkywFZ6WT zRDeeYo=Rba7sFzYlpkxxGk{88xkaGNC^Fn|tcF;OIFiF@|EzPO>jZ5dd9tT86$36* zxTZ7~iZ667E>LiLn`T55a%Lr{j9{9?={1?P{!V!-s<7x)fu|mkQw0;xcJq25wPS^w z+WM+Ji9wasULK2jen#G}DXHz5>I83nj8|X6E41=&H!sdKOCy zU_}NEhO(2qMQyx-T@JZnfCrBd{ECu{qy83%SPio7`d-z5 zHDGh6Utr7X{Vl$Nc@25cD9NT22x&o3qAR1>2r>|qu+_)EMU)N_f)ZZ0Ouoz7+~$p- z<``95pKKAU*jLnzryDBBhrmd7n<*-KTd6JtSB}S(Jmt>UjAziRHps#V&|}UPqm|tK zfQqb|o+U8TlIJ7#n2wM4-C0_@vpD(~{wr_^`0qVTJ{m0yw~uh(mp%kwETfNcqfMLp z*0DL5y&m@@=ilF}qRNh#zCKNVTeL+brGD_9)d{-rW=BVFZA-E#HN>vN*^Xbgj$k42 z+4y+`y4RIcEiQ5AMrHp{2M5lhapPgZHHzSuuiz9RsRI3=l}%R6uXk|=fe{JVAM6!v zf=90HdcFiN_@IxCV*40CJTQ(Kb1n)obzgNDjwidN&RUyt0)7{0Fw7l|UYoVgBgmohCe7RF9M}b)RuSXbL=5E{v zr2Y$gCtU9`eKGL4Y~3#aZ^Xse%*Av=4}wtm&gDWdi@XdyRnB=LfBb2Baz9|cNL3(c zaCV*xsaj7JGmD{S7KE}*-~=as>9u^o95$3&q{+U0VrAE&Fcw)7JG5cUp+a~B;EEHM zLk5~-p!Q1BQ}9MojmTw&#m~l~^`Vbjaq?CFA8lJ{?CS|~WbhLg2}tP%b``JA170{Q z7*6)h0+YMF(5pFbaB^glrkn-}rzokk)F|b^%|~&jFvSFtT{DSqN7i6Js8oktu(2s7 z;bn)Ywu~kUln9R-1;oyrA-_DIOuU++EXIDiLoFlsh(UK z#ZZX|M#pw>fZQkgPQ>_^Pb8vjo1OOhZsn;Z73M2HD~Wgr?!Py)GN~mM4A05+i7gJV zG+X!z0$Mp_ZwjRfywUiML~)DoI+$l4mF3ppkWc?auh9Iq+B@v_*otEGi- z>sSk_NCPQbrr7N}Ko1oma&B9LcHC6+;EnzdQEN`2ev^!KXH<#?4Lj`1IFUXutZXZZi*}=X^gm~bRC8{ygVjUP#s$6o=Iv4eU z`SqY^5T?0hlSKklvlSRJ1emZ1M`W_;$tAH*uOCNm+{NVU&&ur^{83L)HNa#e7?JO?XDhkRF$LRl#2p(u;jVJ8J_g(SAugZemc8iMWYFCMc+F(%Gc zv<#NVVmPg{F?5(q?LV+(cKVIx6|y4Hf`cmjASKP`@fv{L>bXSl{!Cg3L3+J{dzj=> zP(Ja|5`lGm5uSh3i?GWcm{*Ir7ReB17~42f ze|kkGyNcVatq4_$`a7;#CNQCdKs9w?YT$i=&eD`N-smgEAD$Y87m_fT#>kM!I-G)C zVWOEOXAJl|Wm?sAw)~UxB3?0%jjynx84Rfv0;Qbx;=+myYo&bLOiDd1;zL71o$5T( zK@^WeeX_DC3Md6RA(cXg^yYy3x6Efvb_HV9xfu78#I{~OVbjMP!uh0>fX-{Vb0y^^ zuPmL1?~q+oj*wAAc;Z}4eZD974h2RFp7|z%x5anv%wA_S8Q(#iHHt%FBqjC(YW|Al zogyUlRPm9j7cl*Hni|P%p4B79Tx+^dDv+3@aK|6V1{uTy`!x7{7)LTv+iv+-vMf>uZSx7 zmeCRmo66J@lhqHb4pt1mQx=Qi=A%3i04xdZ!`-`rz9$L{lC!L9{jN~Z&S9^T0-EnSnVK%&X{GP6 zDO!9e$F%v~$QusUYJd{=NAnfP7%rIG3UQTz?PJ)&&j(U2WUor+Zb;7^`a?!Kw~TYW zEx3yul%Jf)OjO%x1FMrD*WVjIc(1)hsMPvE!HL-`*1N0F5ZU9U{}ZK?2NXCgae^=} z{R5#P=W{4cR?gd008wczB4I@|M@U6o#cunhnm}uaa*Lkvh@As)me%b@uv=`djgx_8 zTi*>{2xL|90nDf0SqouZrgFnWPtJ3RD184K0sNzo3uqU2aEwn$`^hejWX+7N@xxbK0{ z8&$QAo47Vmh_>zh=F*z5(Ql6Y*OFb@=P08lm24V5bv6WXTOU7uU|MoRF#*DP^ujRY z3=@nf5kz86ro-#g$#a2a!jh3MWbGe8gBePZmsLwbk;*|$Ys>r;761>L$)z>GmIV&- z00Q#bMbgA5kkfJaQ$P|Lc)6rd;&dgD4|HihBrY!z?Ig$5S{nGqn)o-f@dbYfBx@v zLx>B>B;LDbCRM!)T!o6u z`dtvEe0K+J!Y4oLLKksmDZwl$e15a@{ud^{a*zw8*X4Nab5xwizi*ZTz}P#bWRJR- zkM8d*qFRrYviSP585Akwn;`P{m({@~r{$(@4@Ck{DwksXvP(;6l?#r^W=XO>_Jwg) zFcFCj>3l>=l7q_o=_om@fKIL07`3(qJJ15ez>*rIWVRdPuC@ck^+DiD77C@b&g|V} zuGq_x8an^}q$f6i#6m?xW517Q{ahxab}E3>#wX6ssPTk@?y72`tCEO(PMRBP0Q-2g zaY9X2qwL}WVb586)zZ>c_2VOyvtQI3o=)>f!AQ15N-FcO)b=@JeZ>jY@k0P57m!!M z<%xF#-&ba)RAOQqjUdvWr4rBw(!vHQvYXrKQFYO?WW3!sfw-kav1MQ;YH0&-6&JPrTvVYr(YOdWnh0*&DWraUw1$Xw8*< zB}Dneid@pvq2>f1+Z^cnPhTpaot?wa3XCXsCgoP--JFTTf8ECFk{UlBUX^hd9U}H>vpI$YvZ7(9#K%~roIJ@>Eohp}0eLYi za*rP;L4zortKD9-zAiaDPQu?Q!~odBC4e_|3=njRBKJs`*P&c-9nH?{KI86fde_(P^99_dXG zDR+Ro0b6ZcK4c>7u?YL>@4yjXII|&nYU&CmZqQ-E)i-8b)#8TPx{Eh?>Q_=OU@i{! z^e?~z@MVqf1Xf1ED{Nob)fkZgCIagR67X^DTzO2Cx6ll4FA&e7)Fb)lPJoilFyH-6 zlP)j!Ck+%c4e64M7IRhL8UWVAh19}#2RN8h$)f{ZPZRO2>l41ajL;aLWtvj~LP6tx zhP@GE%;6&dKa8FFf9Ey{b{hz`?Q?Xj3YhS-kQ?t`q_ zQW7as20I?-dl|sMo0girs3+6pyk!4G=dLn|EKHAc29U!SIBRk=I~zfeq@5G_3Z9^Z zbPV(vL{D0~ zcCP%y=(9nmMaI@%T}}HDa{t zp^4@>(5u=BLT5ePr|k=B;aBTZelt5TQYb5s1ifLHnz@%Q2tSZV@<6LCX%dsn44N@D zuD6EBM>afQ3MXJ9^y*(LTmDeq_W59jJlS)?3=K(uQJRh8*&D@y2lq*`??KNn8RT)} z28Ba0c>AAP8@ zPHJrL6(j3r+b)biZcL$xV@D3fSD2|&K>}zsj&ejcymykAu;(yXQowVY=1_ za~>$aK^hUSCrv#Cu4;``MRC#Xs&z~yx@I^%FFnVj@6Q?L(iZ4Gf97v=DRF?ewI!+W zv9j*qm4C~k6jxSp$(P4Mg<^4Ir0s*^N;zEUn=T9Io(Ir3lBphvB~1E+?uld5f!aY)jY#C<|udDMNP-Ut$j|+zdILLE)E4Udua0|{= zt_p~S!j=P6Q=^POL~sDRXWKjI(gA3Yx7L)7YgO1IW0LU5g<6nN_!D3X@m*zdYFD;d zH*5tZ_yYynRnZ%9brpK!*_}1rgUef@YIJzdFK7mAudG&D6mP?;jjUGY=iT5lF|3Cjwneh)OVw*H`(w)K_W2g{`vjB3jF zBlF-%1VE^el_XHlYIR`IXbA9Vt{TyJx1h}$x829w;`Qs;rHD~JjJHfFBH2u#7HvjA zf83^cViym?SJOCC_O2TcB<%~q#BT`HG@h`1S>|Mt$OIe6U~gOOzLwSwQ4mc(MT3N< z5vlald|zDGhl3fn={h_{7qIjNp#KMt0RKM#z&4@<-i>elP+~^g6W_xY1VeMg%<=|- zo_(HYs7*15TQ4mOhBy-PLWcQr7(@s%CtTs&mupai)$fSzbDJ5FJ=!lC@V5*0L_>;V zl0OPv!Y_Q2C{AdLC^cto(7DBGJita$w3L~rB&Jp3(Z@+ZS7RQX)Jb3pZ{{T9QPIK} zUAts9)KtrTeX9{n5GyxmwqgjOnC$s&?)I|olRQw5l+MQI?LCbK{B7btoSxuIdQ1F+gnPK5tB06el!6U4`kbB)cw?nw6jA-e&&By(XQGCYBHNdncMa&D)qy^vOuO zr-?6$Au=8)`+P_3fGs%X(3u)!%sz4XDSHd$&~7UjDAMdt_`3WP>z#-)4@lBEte+)I z;#(-~w`Jq6Lq#D^oxPtZ5KLFmw*S#5ETpdKyPQ=CkCvIea-GxVk}P|qMeYFfWAR+` za{<`PrC?RjE3sp^7Ck+IUmzn_@3@aWcpNI4?*)EXf+B$U&73Mj%JH@IuB2ZgL!1Ko zN;Jn~oB^!U686l93D-y{r)n`0>CF7hz00&s^ZU~R9scLf|3<*p6`sK;{7*6SA2bP4 zfJ&`?qs zZHBS4Dr^M^js4{QQO5b?nVNM`0d8gl_-D_louk1aRIMGH7i{G~2xAxNy2;hiD(Zp^ z(X;Wb>&*IM$Dv%p%IsnDJQY*5l0+Yyx>{=+=TNUgr7(M5VMDGE&=!EhXK-qi5vby? zq1NioPx|cr=Oz&c>vz?b7Zaje^*XTC6U*2fzKtZ<{6SA>vrITlAN=~4ZSY0uXk`CY z+O!7(LVBcw1GDg(7{@@gwa4;)sJ;)UM_NmWgm!yjUE!$5BMUFeqyxbCi}0!q z9{k3OuY1Qd!~t(}imL4%NKr(e$1Zt(xd?Dg=fh~L{VSqh{sLM+H>667F~;X5w&;o7 zQz{`LQkkt{r0W;yG-q9kVHp+mMKV=Gr7k9T)FU`%7HHVyz(F>%N*9kQH8=DqH=({h zho~X+thC=Dh2G>cO>Y?asc=xPSEaskNxcBJDz+pOm&>nik_zNSE1~y8{3cLIKjJ9z znXn#(s+DT0Flwsm``u1?TbAKI`3=v4E}of?06p^KH$@J0BBfL>gLc^+qZLV~a?JTG z$PX}LEo_w-4--fk!k$Y*`;gtz@pfr!Y%(SUdyEsCR8LJ;ir~BoQ1Yxi`OyK1$yAdPolb+jz=YpI8x383i^AQT3pxp&ttq)u_#@|W z8knW%ylHjeb3Vtb4?ZzqX;l}?28LReI4}G zltnk$N+8lpmM!$FgGg};p_JK@@mYlmyX0LJ+`KcZ^D4hn6cpKw5KHaC~!u3#7T<&zr@Q4 zbkWc8M%`X@_qNm#4ISHn8TcSiZ;{wf$7>dG+(Vpq|5vopgz7pa>BnzCJPNnTaQQPbeK_Vv>~~G}@K%L72qv`KKPd-9Xg+9#zR^S7looU)1 z*sE!Vzc=Wtt25}gFdEwz)JJbN*3g^g|1^`Oi|ok#65`l;Ij1W^oHGgS7PPS> z(exZnHv7KpI{W8r(11-8xoV04yBJJXza*Mh6e#Dllo&aFahw88r?pcP%|M$mk{Y1? za+K%Xva$Uc&qxuN4=ubrJkexxmi)6Ut|_9<%;HTn9QYUzqH9?8|NPATAy+IheMXRk z(+5}!KrqZGCL*y{-${=%yW3glyK-98{i^uny@K%#LmOuH@fU*Y^LM4zLU})NIG2Fu z3`+!oyoJ+l81FTM;0P6lXF^lG^Lke=Y$XZl3ZgdaiAyYwu&Ih^VIM}~+hUu<2gft@ zSC?a}R^x3kw|Px^L;>!|(ekS!Y)-Z=G-T>7nbCVN`fzU38HX%7>EpmhNj-yLKG}u) z%*@6Fef(AWUWcYL6G+Bh>R_(#NVTZYVyJrV`HCgSr$9>_XbVY18A9OfpQ<+#ec~g2 z6wTHff$B5gn~t(bNUr>;uKQ|(z@@Ujhj;0S%RH}QDEQ7z>xo{0l*%fOpPJO}+M4FB z*q}@*KWCbBr69rFxxR#g2BUM`+=Ty}ZVSdfe64dF2nHDpV(}C-W%m+;)3TlEXoVeo zI&Ppip~5iyDkX9@wXZY$KtDCG=%2;nkEXsnSb73`2$!xHb>D*tB%GVTbu*W3(`_F~ z#X&Gx6yQBL<<{VUZ^j6-8Kh^}2z{fBLMNiS5$Np>KnQbg;O_tNeRtx#z2D&YL#o?f zGT@!t5=mwmX-a;aX7^G=Qw{TneAe2CX!Fok2qUG%_`-Mpufcv=#F|MW0?h3T^;M)r z=yHQ^Fzw3IK?1hr75Yg+8i+{L!ZmN|1hG2`v0Gq=t(voPxBPrsH*-W^(K?RoH)KNZ zZ0C2IU|4qw-9eAq&7^0?9fdof)=`NkPu%NNw94gGm)5$W3#%ac$0X#`gD&83jm8rt zE%DJs&bg@l2Fl3+dyM>Ict$1au7g~QdtybZx}+{@bn(nxdO*v3e#OR*Cs*9`V^Ha$ z>x0BEH9UzMouu|-nUJlG1mSsMP17bHfACZy0ZY*48TAc3YbH~{eo91j?z*C7i^y*q zEEA~g=bUuIhX1|~-_=HV=o{ycX@5OK>+g7#UpL1I0;KPNt8-5eCjT8UOA>rZEit?^ zoRE)I_vI>w5%dTF;`^ud<`>b4@I`iT&Y9sa`WEx^1PECkMZ-i=^}-@V={m~()@782X1crmD`pZt69i>EwQUW2u~?ua*GSrhZME+G%s@wjmb4M?;@W6pe@@d_va-agXnV0kn<(`j*KTg(k6 z!*}F7nxwXBt`~ z_)Kb6-V{T1G+Ml|O?Mr<;PvqRq6r3@ky z+0(p^YpYNb;Bw)Fp$>|3M+lZJ!eR;hkboo-@MNB-lZ7FQvVR_LwLPYDhUnk+^`X8YX_ke3p0Wh5W<&&DJ@Y z!5&MQ@<={lO1~MTeH053#^s|(&|u1F$?-a~f$FIPyvK?%7Q}MNZ@-@>3_Baby$=!i!(f_i3sd4(mk%~u&CJwfErvQnkn;$S+{0Lln-Xs1pmP34OK6WMUhX_3PQ6jDOahCR)y;XqIS^pB?kTBc0? z6(@yLVF?Oy41A!dgLgg^l?v$mW}TRQkIzkX4Ps`$779IkYXCMgeE~Til);hSiM4QH zj&AX@eK*=FsBMH@#>p>>T|O$;Z6=p87u9%r?Ofz@qD`0`u(CY%U&j{3uqRn#^QPxB zmv%2nt|!;0iSWr87!z>FRT9dAdi~k0;ac@Jt%BEU3ZI=WaXl6YO`cBRaa%J_=W(U= z+z-_;@dy==(?c@g(yMX1A&DOaI0swL8gJ|9dKBNmJtNRq77N58FK%7bf_&JNMwgxm zaO~0}rg=452S<|z=8)3Bv`bVT1=H2{;08Wi3)u$@;X z9$LqC?S0FK(<(4B^(fW3j=j{&?G3Q9Wbu?))88I_Uf^n_>u0@~vMUWs=7`lc=WHkH zYRLGM;%NXudF^R*PkyA_D)yWPJcp|-HSOm1EDPRskg{35Z}3(gA$$<*L~&%i;h z6#K(`At=WRw{4?AbF2W4m1IE6>3amyNwEB{>dh48#d~Pub3UjlrE1n?CF3yv{(jdd zXw@h1sm*)qDwBs%^rzXXKw9yZ_-N>^(MhC)X`ZwUAN--aMNhT7eoJI0G*O-m^rQo6 z?Zqjxb$To$CtHie&V-*xoT;l8lF&@M>rgUaep}u?f|NHqTkz|)`*mVpY6*=-x6b(*8f5U_5>@2{1IkfVtJG8tdgTTc=D7;)C@m;ntp{ zKrziy0ach^zD0jXXkI%5HP3Z_29%Qt4oY>@P@$wMsJAhE(il~3IL?qT<&h2aFE+Dj z&9#M>AGG!G+TMS{Q4ewxo#d0#{tap`8y1HAv3)Z%7t5BZ3<+^ieH6Y17Nvh$TWC@Ptvo$A=N(|a^3UR=&3 z{}0f1aSLX8F0hvv(e^Sm%VfEXxv@9B@e}#!IAYmaPfxrUUF=mZ#)A0gniPGt&IS|# z(}3SndfTody~tTZt};ey^>>==7RVZ0s#DO|L*Z9u943rzacXsZ&YP5|nCr4Je!QMF zmO(Cl;p19v{x!^;ET3Wq{>M$-ExoX4Z+O55R(=G=_rMb}_;m7rB7=*48=gahM8$l1 zc1s;WnuDb3e!c&@suaUeQQlqdsCjOWm7VCu%sCv3a{Atr9VuN1W>l}n=$_l0VRjj- zbj6Huy#(Wc>>*8mnev4{EID_4pVI8SwDF=9=PUor#K#-a2}TLdzrF*W&@-@w_t*H; zM4DgJwqc~puW3NFfNcI6y*T!#rp%&zxS6-ir1~^BV5R@X^=Vmi5(EAa69z+rai$%` zQ|QG3b1XCFD{%uyF?QYPyqW#Fmi~UG0I{BhmsA1vb$YP^lN-E@DoH56)rr3zbQa>g z79lIpD+7n?oha^4AHA}n!y}jDA&E7pW)#RcRd&x7c-73w%E47$b&%k5jn}qAVOicn zjKM;KpuDb&<|B{C=HA2y`H%a#IUpA9slo^@nnLcp%uq(S1UQab)n2C=jw^l+^KP<2NgfXHm>CbOjd2X)*{Q0A_zJycE3SDdhhy{^D??`vB90FR$ zeMaN6zPHsEur=g8A(xvmFllI-*0|f((T7)1ZZh_=QX4 z=jt-7aRq75VZ?8I4utEErt$ZZf**xu<_ExCW7d z9T2Lsd^q}aB*1#YrM?9OdLPQH!Ws-9(e?tSjSEMGW%@OU#t-GhJX(X8jLazpX<%;5 z3{R;*z7PLvUL54A+El|HdCr_n3C+o+3w50?W@z*@dcKUMg@-$~4-ez=ydT;h?>3ql z>sq)IbwwH4|3($I{sfoA5qr!|#PdiibV-1Q{;nf^-d%l|fpEaVn8f|ae!X8JBe9zf z{J`t#y&3Y!`6+1uEe7X@?bqpHsn1#xfWvi>L84q|>VU?5KP-YhAzWsE!rmZvlR zI0%%aJ`&zFi^%dh1~Ynkky?O|e^ACO|Au=DeQ7??H&`@!?W=M2-y$rd>5-K`j;sIT zjS#QG0yuts*khRq9mAq@x)Tq=f&ff|cz(ZV2Z2hS`go$_TyY90`1yHxRD#_9@qwv; zHF&xvwk@oELMt~2027c9T>nc4jNm5=)1dK zw_ck3z0YB$CKD=Z5lGdcdk}VzEje zDk4;ewZ)7EFDHk=<7Js#=9 zFoDPK@<&H);T}R3S&paZPx2HKR83N`n_4(rnt#ONZN#;lIEASOTDB!s=%nc)+Z3u_ z0ByP#^cSNl-+=oH4frQ3(bb4OR^Xy=1a#~uX&v;{WHitJbmqqHjD-^{b84FlXY9;8 za{8IL3$a_DBg=&Nco6o66ddrX&;L1;W*dWTdp)^sZs;E2GANc{7tj@AM;e{*r{3`{)9wPsR5>5bs5v-$^t z-!>`Z=q`>to41$n&BqUQEuqxFS2!x#mZ4pB-MUwdY_GuFsZZOuw;S%Oiu_zqW^@Tkve?zclad!&TG=T$HWs_K4r zKwt8DyisY+WA623?^}N@9GNF$6bsnZy$hPgvq@UtcWOjDvE%t$W;@k^728u?Au-w7W~ zBgd7f&-jir7eIZ~ykYD(F3Ng77E}^ZEBg}Ad`xo3JLXn|Bq?Tshed6i5NaC+`Kd|K z^RKd`LdzBBllT@-J*8HX%gTHdvjo!=5vkA!2Tw&!XvIx?j)u+IczlT)yc6h(Hif(y zQ&`$Y4Tj6%a^RyuSd{AMkmF$Q} zwO0IfJ~*YO2UkUBGRhh{B;mbDK4hmudwK&;nRWHgAyh<1Ha^oPD$x-b9kI#C^I6jU zO`rO9pD0K1n~gZbNE_c}g~}P`s2IrL?52ww*@LU@2-4RAIo6}$EVEb>W%l(#?8%&ChBWSW$R^1CLGzIWpZd_Q z{19JB`~V+i;0ewSOWn8&>Exg<$YXt|2MIp|hgn8$& zbrycyfT$7S4$cf%+vFhhObo48rhoic<24^9=3JpiQ_=RS8gUEEAv*Z{<1DTR(V1RY zo`Ar-9w83)NW6y!CA#^q^k5JTA&+e?A=le#iMuKBho58ne%t;K!lWlK$pz1;3OF%O z=F`T@yY?8k~{<%mjXNHOUGkJ)|7g z&DAGGsjf|DgRzw2A+z6`^M;S81Gj-aFG#Cl*&AYqB@FXv1il-}w7+sov0kG>=oijs zUC_=%i$(VH6c`1PB}iBy2utmCG8do8DB5aY!SurDI=xTa{2~CO%1jj~%XxykB)|=OzhGX~O>10m2(tk`nNngv7s>iAug*tV!A9%W zNP(*#`T#p+QycWi^CNf&0Civn zK~lcFwUBc_`0zCi-}^Aer*y*Qnd&Vz9=qYm%T&V0x)w7+v}P7M&(1%Q0=3KfhDv?W zs7sU)2y%UeB!NJQel&b3z2Ncbe;ET$R3eqOo=9q3`wHDK)WFv!C0mzN6{FO%3CpqA z5_Uq5@Yb+D$vVj#ct?;p-Ovi^E1^yt%*#z+nxV6QkifWi3hLG2VXsfGv8c^?i9*J( z*Q10p+%MjCb|BYAbqwpYb1;!+3zjU0%Y)9iD1%8|a%K(FgRpaUp9^axLMtcrxBY&4 z4BMm6;bDak$TPiv!MzoJ1AS(5Bg5(&4Wp!Mv_JlwU#QtF9`d>CxUv2=8ly7#TjxHf zPQQ03NbKJZ`H35;C@gu{L`DJzh70TcH_Z?>MaB*bP)frOnqR*UW%1BqA>M`tuP0lt|ZCedU)d*QQ$JXE*P)voRw`nhHiL0SsDyrW{qjk&lK7ecNNOgy^KuY@2_y*_Ay@~)kC zcc??>K0_-J>fZn7YC7gH0&{8%ZkrJdAY#Ir{|4$b!fST8^sORgU2%t`DTV0@cX=e7YCvX;+Z0Ks{C;Yo8Lp<^Gy z&(OkvKXIZU+CcZgrDLu;}j7(z_dV>vH4CS9sT;8-FmSAMPKw zxJDzY5cWDns>7Cr6hd?_>o9ssmQVyZO=8aK%)^?Pc-AVJhY4M=ro>}H`Pho8-<#iG z@`%u$Vu8@haP#KJcM>uf|5EEi(IO1>%G@J(HZC05mf>~EbA4T_637m<+R}9W6|->k zf5xS}K=1rjl7nC#xvL>4?_@pFSmBhYhn#Cas7yQP8BN^knN)lEZ2-XPH}xEnODjJH zjY=C3ni5Bq%V;(0X=M{Ed+y>grqB^d!}#(Ua<$^B>dOELE6$T z7Ot;ylt!e*^(@z8nNhZbv%yAT%(Pn&#YFsID5M^921LO~lyCaFJKlY^i*0XfE1UnV zfO#x_m1d2Tz~$w?)rI>+&>PcDY(~h>t26vxe!xrZE={fU5E4!hB5uX5Zn(Q@n#2XyE}beY_n4l0u^)btREy8aL3{WC}S~=B>Hwc80$ z?%kh5jNr@+e}`Y=ufg}4M+BQ}r6%m2J}t=26yx6YW4oNo6#D+LC#fFil{J!I+YD)B zLaqzPpNW;E_~y+lw)mf5O3!e1np3>z@5X3Jvzp!@2($BP?1kttvqEkPMUt(Xh!$M} z=FmH3gaW|Jc~b=Z=m_$K33ub62!cfXqE2Hc5C}6mvbA%2xvR=DZhVL_1zplZt)hOw4L;fwV#)<@X5ViF7Uzm_@${+k3}w zl44s__Zjt&WSQ6B%A6jXTsL#Ju`$U`%da)L_-sUAB@+-x4yJsq4Ir|=EyeUDjU+cj zTND`L!4NF;d}xd;kfSAOP}S&o#(4Y}Bnz@!1~+v&&&Uv}8M$S-ZVXzvQlLh|Qdd-Z zf#p#S9K<#&sEgmOXZqGpz2Emb&7B~?tG9o(iVZBl=&UCMv;Q`0y=#KMa`svO+tjXQ zzbX|jj^F_~6+C`!M}cyT1dcX(>b7VDc4sCM5}UCGUMNTw?m_FD0Ip~ z`@C&!oR@B2JfO_8R#ACB`nxE#g|ftCEg>^}i~R!AiqF`4qP-4j`*6h3KP$(pmOTRS zEp(FtghBt+<5j2oL)<7T7W8{K5354rC|azd1Ps?2wprlj`r`@%|57m^E?|P94>xtz zh9zHW7zPDFRvLIYU=X3TV{Qol^3gEJ5+uO?+s* zizm|Aatqo0!wft-Pn_mmxv9+0nUA0=ZZRI#+EpD@Um%%u2QdA@KSX0Z)cTl}VXbCR zQpB@rl2yniFnV(`@J$r8+?k8;5dh~4Dr;9?Ye?6Y0FSI_w%4wJn+*Ee6L8GAu0c49 ztS2{&$RJ5*%Clx%u{?kf?h#iZ!Z1jkp9T3eOS5k;w(H5{06!;5 zm_Z15d%cf53-RtXwPDTP=%peu(3Eq-N~1U+wCgf3x8}Wh?3GeRi53JbK~lf~PCXLf zeKwxcjS(gGTnB6Z>3E;Y#wNE6la~&dVNKT%L1P%*3Qw*U$O~W$d0SE4tU|L}y3!F; z*4!iqT?bJd*#8fHFk+Xvh1&GWQ3(_PIIy;Y363x^!!0O%jSRFLoCgh&ej@)k9Yc>d zHsW;g;8PUL@&b-j2I{Rry_EftCq_aJ>`SE}Y(D5VInn#LLpSQ@H1_#R69h0SsIc|o z<&5HhwmA85XNs!oNZ>`SpTZSsg5nz>2FxTMC`d4>zuU5C3n?po=65Nz*BlE(FJqvt zSF4i?p`nCLZN12>D<%@eE_k_H;u+3xyn&A#`(vDRK@e;#Gl!MpP?C>%^8Jg58D*sB z!88Gn=b(rFZ>s>?ux!pZn1l(>V2X)Vg~uiIiiIzxCp-~lvY&2DuZyG7XB{QM-Qk6 zb{I7(D5L;}EK=y_!$cG3dB!(#K~eMix}WCmcYYsP;hi)sPeI)UK zZ$r1?41$X&b|B$(=?1{K#Z3r_ut`?dd>|NdTz4tCm|{~FjCU<3ju))En&;@>y`cD% zgI%i`8G@bk?~gcYq{bnU*5GB+B>m=yT)@Pt7#;2U{&hHz&JNIGiRF-nk{4LI;vK_> zF|x!QZa-HzB?x|kb_^o9R3Lmm=_mnsjpusq`qz68ICvg{vW6dL|9IumPXs1(zFzVR7AJ z3wqbo!qn&*d<>b4p75u`r@bAz48Q~!o#tbgH}=}OiKkIV&ip9Hlu6&)MuwF~ERjsY?qVTlfLMu!82~DNVZm@ydL#8rLs~;{i=<4!xqR@*9+$eHQ5>neruz4ft3DV zQvbe>8j90pYDT{}2v9iG6T|tiE6%Wn&- zkG%0w`$2hjs^jYM`smTezH@C|YbsFflC{tHfbm=|kz__v5`(CtMW!TI9TM*q{Ou4m zbLS=17}5^dANDDrtKE<#7n9O0f|rjK)@4fpv$GvWNxwx1-S`oQMi}K^x%$?S(gCpS zyzJ$3;+UHZ^5xxusZO3~B3CNcT|pc;x&RZ;`40C-gE4p32-+hhjq++2Q577#ob$`~ z98)J|gdpnU)B)yM`=TE+$@>q<2uH~N%QDKu(=Am{7D;bKM6d5NKg*wSwOF^hR6RX{ zLC|5AzkxTjI?PYDU@%zKOmHx3_~>SS*|-XgmM;-`aLyo>(_$LFU2v_ zh>)IMS8$n^ZU%0JwuO=0?KR8KN*cPd$JZ&4OI%y8%4n~P6!L$K{(NEZhMDedSRTO;8o-)XIWUK8bIxEwYN7TMuA(qW4@({`5#Gy z-tBgkbL|IGWxdf-q+6h_r7c&^$%1BT`!W`&UPcr3&vzuQKAshaEKRhX!WlON_ySY! z%^eSS7$LX^l${ETkBQpK4(oAJN6<0aKz4STO86tuEzY44JD=V+#|>StJk%4ouzQTk z8Aq!c7k7>=GhN74W)*{`kW16F^!naV02&DxUysaYImWnQKqBp&QrTdi5-vVQq_xZ& zVs`b|mQbrx-m_7EugZ^(JTY7cJffUoTyQivzXIrZS%Et2k0NlzN@vf&TtS|$)vDj5 zVgjTqqFN$@-ObJ4=tdkV?b$OXm8_({6UEI0#rjPQ_(ZV4iTIZRW>Ry1yx0%H3W0_G zP?@SXD8hHs5%+_(hzLS^)Y=B9dnG4TUCE`j*XIUsvJO!g=WCfgJh36}RZy3}l98L# zyC79E%X#Lx9G?14bBf%21iDjCRoy`U1g3EhR*ZzNWXsYY^yJ!aoG_~78o7Ag7KiRU!HFwiba#KiBH_KoW6wGPWB(B1L)td~78m zlRn6IQG+9_wpou{Gb4_qD~;U^PG11S9F|2plPLQwD4tr>-SX6~u~W9Pt2`C%U&k+H*R8YPoZ6C{~q+UnqG zBYvjFk6}$JChIO{9`_QJJCgR>=1D+PULJMlwRn2{o{0$$&48 zx}8K+(&NlExextQ^$x?`8C`CaQ2E1rosmhQ%h~ZfXQWGEDKPCNZ7lZuum17^@C zl0Ud<5J`N$?!fgYcY@jYNrKUWFT&+n(0SZ|nVi!6e}$I$*NGd|Vc@p*az}TQ z&=PfJS&=CB6F)qL>n3?Z2G`rZDi3%Ns>b9f>fVx{;0!$ZPb6-$IZEd zBmu|@`nOv!8=FinuxEbhzMgC6Md1OD?zM>ke<^@e}%$ zv_q?MGibhlg~YqH9-}ZMLPUk{rty3BCy1@&oM4xek$c_zZ!#5wJMev=%;vT^#bUB>AU>qiA%B- z1MT@On({++$Hj&fl<;HjRyS4toE*&)Bb&ZoT&^CB+*-$;E%-hRY+HsSLkWmeQRR+F zk>ubHS2t+n7Ls288zma`D)~RCZNHp+9KRx;Ev*7o?mr>=dNo=G^!&4=p4>xBw}Er; zdbcPvC%bpF-{}BR7*1a9-WPOb$c;d|?)^ug@XHIx5+@@|x8b&#Pt7DM17?dlKOi)G zni1B;6*23zG(#*&r~jn=AgvClNq0!FPLRT?KW>-p<80CT3n^@53x2`;OZl;Id2Uj+ zF=D`O=q%}iUe3&e>4;2@@TD$aT3T!{<-vfs*yeJkrxxkWRSP^rJiShVR##VEr~So zN6#3nUGzx^I$D8W$LgfYyA^x_N}p9tQH6`IrnOjmNqcY$u%T_%c88oKAGpOvi^Mzn zp;H@l)jr(XI*BwVZe%@^H9k+uMhe4|6`Qsy3WK4M;ln@wf+r=O0U;!lYH#nvq;NGb zN|%`Axlt&Z0h}gp$L8+69Z_lS)F&p7EJ0V{iPQTmq!0Txfzy)99XtEbmsb{)$CfiW z6<>75t?xsa%ttjs5c+Qn-ZJn>t}Abp?1 zPC0wMBv{-ZW8Afmtr}Jy2Eo-+*C{#j=132q+HQ`rO>cg(ohH&l-EVRtb*XAN?3feM z?Rq#8y!vpZCpEbe+N$t^2Q(_O4_0_clPEYYIhLxeAAj>Pah1NC{?Pz__@pIb=ui>ecve4+2r79k$L_YhI6e?`2Uli2n28FvrAYHiecHod4) zmO8kqD?5Y*OSuO5WDB}`hcRdzWNqsyz}>Xh1r{f&SQ10e&yA!s$3*5HT2qUkOs{w6 zF<;1Wr9{r~LiCN1!+P7=rx`4xZ;dGa!9)l5hQ*V-x!fN@OX5GT#|Epb zMhmXqi|CNxEEA|YqRpHXILQ~}JS5WM1CDxdn>O7VrzXXfOf`_YI7@LoINWn!wS1VQ zz-8O74NbI5AHXw_C_nYA#*lgupR#oh?j{L)DLP-;buV9^SX+=qpFr=tmT-MYP`)2V z>Tl%tlmKj*wVF;dpa|De)Q&iGlUBkZ_pUAQSDWODexg4o7z4^A{sW8sCcz$fKg?+aR*vx&C%!f?` z*62I|gDleffrnhv|7_P^?$*=KG{c+cQTI~64i$|tGl=2A+J_Na$;HDjUqyUw;%Z}m zT55LqL7DS;m`%UM;|Tro%ilbH#|=W1nU-)sUM1jt^5&H!v%5K{LdM1t3%LXH+RVxZ zjW#p1r=HJU4Cat{G?-HEQZXoi80mm+bJZC}qxLv;2HrN5a>Ltp7vpGdk9Cn%7aLE# ziam#}w4tTRi;7|xRF{ZIU>ezf;Jpk{vcKX^v5le)%i5Q`tMHj}C%;Bwo9wXZR1HIc z|E3ISpy1dWIf#H^`3)LHj`A5shb9g0Q|b$=*=Eq$ir}~{fRw%dhNz zvo9GT$b5hBl$gqAq6fy0b}DQ?nXRp=^7j+IIimO%2K8iZfI~{Ee8Vffx*N3g?uH0 z9LqkT@h=y}%?RCqimRFuWv0`%x?s4Q;G)@Y8XLSea~&m2^idJl4?x`jj3_yOyH$Pj zG!l63I{w;qhya0{xow~~R+LTlg8N7&{vA-5;6ynpCn29EnApCGY&lZ<3R3%aUDETB zl=6`;n_St0WIhpw!o}~*9CkFARfttj6Dy^}c;-j>IxtRD!Q0h^ceQgM$y)d2fT%a5 zNtjTz*SHwPB4nfaW#j?CblCTQxELQp-B2sTfo>W)^q2QP)3n8y78wKUH1NCS*d%5~`=x$rtPhR{;AI`Ovc zk&X{;n3W~JI&_U)&_Wt)GXAgiDgrtdIo*sBk;vpb_*xRf__LmGRu_U0E!~>d`FUf` zH~9{`s`~VR{3+V7{7wkKZHkOWO8O+PYR*Zy&;o(B8pn+cpdVX)2PtFX=#;-9lcCfO zz&fNC(U-zdvkIqJriItCxA~zXStaWkJNNCz8GdS)>)ecjJ^=i#KXjW zk+`+mdOItuYtI%nb4EMdAA}76R6lFQWLb_<{pxK2fvKbY<5uLpB%iy-#}&^*BVP&0 z%iZLqWaCOd9(=DeNzKN>xNA$^IBJ@eVH)n^J9uRqHI~axz){Lri*v~;s(MWVlyZDM z;8z#yKzm|RR2sGV*wt1e$y zA@KVdgaSjlfXXXii7M+m^0EoB9i=E$xe><8Y@m*syJW>Vr%kSvn0}7h_Uu%$BA)5> zSH;$@H}Cp}{Q&3F;pHFC?;iA6xcA)%)#Jhk#_}TaO4(cWBvBbK2scRN{mHK$x)u>m zUV}<6nB*fEaqnH+6etR5V|tXYp&teIm5lI1=$dKJAbPNCCLC~6^m;f#nOxc>|n!0-<9MDj$aq(Q(pyqVd9_nae-YA`=IVD%XHA2 zOApeqwG{>C$+&_Niu^!`o9m|!os_+85p($;iPp&Ln#6q{py7 zQrZ*wOx{nnB0h)&8FXjvD}*!J=+&dI^FfDZP{IcnUu%B|!n#A85`CPJq+umie)z1i zYZrKJPJeZ&7%h5smTzQ1!eqoPxDz|Vx+^l3Sm zkUfa|)hT9yeVbZDDq09P7&-244Ot*Bwp(n4O+&r(m^OZuk1G^{V?bEhTUk;gUc_`{ zhre9vCqxQRPv{qlrP9s=M9d+bvWIE>b@N!w3iuz@y%v)k;!vXIq|nIF(Pg`{!fS)< z{*x)e%@!;*r>m4sYSI3=!8vCod-O}*m7(kU;YlSvwM7Z9ieGbb0m%qKOj}88ACJtg zVyC>Y*}aPC9i{x1aGkuRRslQ=hD3Jn9rc z3hZJ)hhkVeD$)y^({uf+=M~-P3X9wW3VldUbK+Z$``AQShGHtop56AH!^o`?vWrEr z=hpXeq*b%Q#hALGGni0^g1r7pSqqRzA6Dhifx&V6|3ZvO<@wL+n!~7hQSZEw( zxh^zdf&1+)#g6DX_%Ui&VAJ1IUA67P@KaQS-;xYa zp|Y?=GR^fL)(drXC^>sjxH$b?sYKJ8ZEqX+aDGa0b!`Y+5xrkvOofGc8hpaV^_1|@ zitUaj|KSc%-)6U_uFU^3f2_NI^0kGL+*oU(OC_N0-1|?n!;v=xWo1n=Rokhvf6GGZ zn3tbTC7&uD{82R}RF3tT>uQW>`3^2l!cEKBhv)>qvK^+Ua_GC{-w*RE8{r8`{tIQ= z&BEkp!CCL8n>I9?jI){;1&B93#_=w%+85iuC;ArWVGy({#@sEEY5z$^VC*@okCnFE zfZ6`PLyZHiQxE(}mff{ZFdmYU-3ljOlBge6ByI^rx_JRVkZqVSCN{v@hBpXN2>-z^ z=-rZ)WY#on!ATw-u0Z6oQ$g6I|N57-BiB(L?0^efK(yy(j z+2nRJ*49tFc>naO^M}I&R`6X5mFSx8NvAd$R`2 zir1THI~Vm(Q2{7y?#zO|W!RRzcnhZ$(1i@%M_VhC+r7RnKj&veFSjkt+ro+G$-aj*q*rE|B!*&A&okjJ3aD zfLCrt#^?rC3tnn4sO+!nsdT9!BSR@I!4z9~buW*(=R(7B6$@9vtL-j%+;jafDc_zQ z{CVTe_5=I~69YU|IQCb7A;I%fZUVhdlPGeIi`f^IN>b?37hh@q%Ko*+ZjvH_4-1$A zb{}`ad3{K(7@^uU1;oP0f>A`gx=U;|ZE~Z?&m%~bn?AgUkN0=CYwizM zl%AsNtm@Wucy54X4B>>2#H?234|K zwcU5l+8*AZTdTf`Vi7tedyB|#*5GYtv2OZa;@ylrKisv*Vi&-SkhRtNM6puaMicnD zgA80+EGh#!egO|_y(XAbYW7K={xq}4?tAc=gJc3>#s3k0AD4`X+PwmT&;8=nAkCGd zUcY4we>fYWo+;BDMf~1iW@8K0rVFaLjW`$4KH6!*wDeYCR6TH)4veRiiYHmC+!kwTdI-j}P6^(%r4 z=m6L;oFq;9p>#Rc$?G;3>fx{m;DXCHF@(7p{orCtZNsRy=d}0?c#vbJF+WL-)9%y6 zzf^NYss~v_jL~~~E|g^GiPaHS7aQnn;mbuePbHb>!^vDKO*3(3#2WEide#7ZRbMyK ze|U}GVDhUGZGkzUeQ~WIJ1AOE$bJ%@ecqzs*3OX8|%t@buEYiI5v} z&K(VzqWZw|$w^2)9>;Ni{A&PKqrSYQ;?CRKOyaQu9_>;8%aVYDoS|t^TUs33^#SWxuEZPt$e%y?^ ze(_5Y?WVjc-}FT8AdgmVds!MFFUi041t+`p@Ah26UE&(Gp!@}>B^><)IC-JIRx1sGLs#hS5P|J!#cr!z1LY3X-7;Q&NG32Vx! z@D0VExVAKLL)q^OA3Q2SAIbuo6|{00wG8|{wa;QJNWP*Kfd~cOwmfr*cnG9dS^xz` zW*apm!7hLU_m-$Vv8v5*W5>@Hv?W3g*{zN`p3WG)Jwx9vN$;&x*;7>*SiIT|&r&{P z%a;KSG&8H%ADzpkt+1k~;5Kt8nuR1Rm8=m%O=O!sdOpb7cuq}(cEoUkpAh|0ruz;@V;Oo!6ptiQ4`yYc*=FA!0Ou(5>z@X zval=OTBMslCIE$|ibKa%>q_!2IyD;5r_~@SQHmU9+;z+JbRdLk;-DPH!8S099|T$a z0jhM_=ZU4atao9@{6PX$AOgxgW{;PLt?d0N4-~D0yP9lq<}@}G_V|{mA@}=5>fnSv%i3~{Rz_znc}@X$@>%; zxWg{{2vPyw>lc`VQo*GNjCFW<+MVTL3Sgo~^4RnS;5^T_JyrF!l0`HC{R@tpQBdWl z;vt7IJrX)E-Z4)f8TAOT1@ELgus#0?RwIflwkVuuf5ICsCN^b zkko;xY*>JB3n+Ypj>7Hpe~P?SMg`9oZrzZ&f_p5=Rc&88y&1oJLzv|KGBep4vVN&X zFb-C995AsRY>t?-(T8UVhWyrrL~^K9AvV$_5HvY`aGxG(HKig*&rYqr#+Hb_06J0i%v`7)oneAT;9&jc!iFi zI`k9X$xuyXUbJKjl&$_DW%X^SMOVx1lGkfGih`TBE@Td<&k!#=C}nty z`DqAFxy%Jq_qDrNOKaSMs=mY3V=aH9c)xdH&KlC6lSx`+gKXF%d2@CP=#Sm-)JafkIDIRIir$75+4gc zP=#`u!B0mFz|(^ny|$}T$Dt8qV;%V#YaiS>S)ho3p4gDF%2 zTX0~BF=-VSDz@lGkA7vcp^5>Z=KFJA+Asa{Nr{Aj@;;wwM-~QZ*ay7%9f(nw#WQ$HUVHNQqq$ zO3iP?6=%i zUI@}~)pC-1R#}TZ-1+`qV)pN2{-TCG0(JDdAzfXY`Co^bW`+GVTtFJPk~0+CnTVu5 z(c?0f4o?p*eSnTyQKb+oYl{l3LO4pacY5WPO#(^2*%5n&g#fQ8=18t5wG|hBmuH&x zytd!}xg!u`Kje>5=0U#aS+~UG90!`IHiFGQ27EL{#*X`ggp{u~mMp%h z;R0&yeKx!VtGTX$V#tJsknt%h?_yOC-XO?or2VzeC+}$q{EY%q z*yReU=;pxQszC+zaDRcGMRA#WZ_m6;8w#S#KobnMLPx!s0Tii46E{1_!0ZVyxyg;(EIsMyM!v!sswxC#555n~si>n7gNSsn@tPAJtLLv{k$<_{4Ko$ZZUAl6vaQ@g|R0{^M-< zWBEvlXwqfKwwu$_AjnnFm?hQ5M1Yv87Mjt#5wQ_|Stc4cq6;-_su1dj0enrZqli_v z#A!CIN4ggH=Y_lhEKq9tn@lX^9(@2G?0%c@7wH%Mu)4i*6^e5r%*%HlmB@fc=-NQT zwAq70AigzesZoAQsdtOeC;W~-Hl6ULd!mErV>}?<8loPajz4Ny+hr{gfHK|ix}&Vc zVi_*N`Z`*)m~oYvH(O23#texNsV+|;FmqfW(ig`c(>twn5_AkxIR$DjX*Dw3zV%wt zx}FsjQ7+t<r6=EHMsdz%yrU!JnIGMt9g>#P3vj6I`fiW-8rLJ2dfSJx} zqRJW^d!5#gYm2819+1JFoZv5b0ou^ipC_>jD5L%3Owe=zXy|DxeI0MTL;&KNCn=m- z?Asfr@zUz@+^tJ{GL;PM{DgwkoH(|W=?%__#CP(3l_=XrEFMUB6D}6?J1#{yn#NhQ zdz#($q`Iij;7~@zUgoE}=TK#jP9%9qp>j^P{&fdWngy&<-R}DJ2($o=idjrTe;{l& z4y5~%BEw1qp|Hs(>*PGPGU}I-TLXP{eXa4dXf$wxa2!W&|A$Cw(jM0KkTh~^BG=(V zEQfzsN_9Uzpm)JIdT&z^M4g$3$cLnpU3;n2F|eC1a!ppdn%@@w&IRS^;yz=+(n zebJ0rM@d7QSrm+BN+B_Ln?14oA>{6eqLpb9c<7Fu)pHoF-dH8oH+L zEaXTp+juLCNww)%NFETQ2-P%#9MS(%F+%WA}t!qXhyNfP{PunmR86{JQK4{@PLzr>E)PO^XtVFGVdQ3W`>%b z@0Q2?xh>~9D%N*b(_9@}WKr-YU|>r_rm(AxiMby3IXfn4nF~6U5?Z|FsIhe|mP;qh zmYX5(st)WZhlBxWE>IJi{Sgfo!LDlk>M=&NF@P@5ZUfN5*Gq>kO$+Ed*omD z>oI#$ynLIrOV{Hxb2V+*MDM=tETMGkmLn(`^3tZ04GVBTZ{-D@<)Ks!R@$|UBRNPi zXGS$WnKcKrE)9wmjKwnD@rk^G$P!}(+B;$zZ&?J-%=wXw<@Mz4w7N;<1I?g(X3e=& zj^=~|^mh-O;9m0nPUYcr;w%J|=)ITL9p|*C0{JHO>ly1RINZxD2*h&*CeIMk-MPB> z3Jlvi0$yKHBMtgIPVMf48e9OK&bD022oB3&;P$R7G)B3kxTm+T+A1sv99Oe)%K1a4 z=&zJTmQOVNT8d|IASHi&rk&`1r{04CM|#bZ!7-3mv^lWv`s!8a7=H|K0uK)q;hD{1ggJcQnel*>kbg=;AWVD?ao%>bA zCq%bbFjGt5&*%&jyMquB<6y*Tthn&(<6O&FS<~JUD7cQR;R`op-C*G6ug=X?6!(n} z%0%ArNR^-b%NM~`H|gu6_8hi^#uj`l+st7h!=<@5l#E75I4t-AbtEnG17B^*YGmF; zo4DOp`#ba*r$lbyW@ORG`U{FtkTZ|J&rTOTIkS;I&%~gTnWf z%$G!hlKSac=#BR6q`haK4y(|5$)B0U`+7nRMwL@?Yl zDdA)Qv=*^kgejMtiVs^t1N~ZL)nABxYhp;a@m!^~xDK%b4So&k^DC*zi7D>~owZS| zhal48b`|^MeW*`^;E=dDTf=ozPj#GH>M!LJuCdONFUE|&tYht4L&q=Ak}PtAUndc2 zWco@dx5k-S0+%0Z0UYxeLTeqpi6WR`_<$0}-4{=w<&CoEbY6NYUfe{ZH$RFoA$DpxvxKxBI`C8f09!_)bfXCia^i4y490#NBE4h)xywnbrP8`2} z=jTM9WPqR`yigC&A#b#pQkS7-NSZftaLTaXWawsdSz%Shk_HnmRwtw$6046__CVLl zHsFShc1q|BZj(8V1e6bFE=U>DS&!rs60a=0N^*CGs$2|$X8}x?eiIP`hMb=pr@@HY zcnfo7iLJ(t=Z#2*_1K1(&&iiAYKWgM+U(Yk(jw;@cc^)fmvLVMu=MlUqzooB#W|Tj z=lfX`gk_!p+sF$<1()Laqgw#t$yG~RQPf_FWt%eAhmv#N-T7NtS@XTf?iW8P+o4LBp|!vYSmIjX(W=yRrko z|KSRY?aYx98-PtsN7U1*3tkm&h*-JLQV%GBZxd6+IAyPlM~wutC%ns@oQr>TtX$K5 z%cLxq;bw|21OARWAvn08j^wSJkK5S`nbjsin#u$F70aVN@Cp0#wzOeJNX%^0#c+GA z;SsYP>>o*`pM=Qrm`6yyKUA*v7se->*MMF+1~L4J7y1X3woxq0wdtuBw!j>LFH9^s7^Q=S7W$;F{w9{>JF2O3Uy27X4bEwJ(iS*L^u1lUtoNL=nC%h8Zdm=ZFf=9i0$~X3RwIe;P_W&r>M&Ab)_l=dI zk90%9=VWb_Pk7RBT;CZ2xXsnWc~e=lE?pC2Nh)48Z1 z@@obAS4l#5Pr_A09#H?~5av>-YBt;bRLGTgY24X7vR_sCxk@r3EOY%PF8Jz(paipo zjL)%Vo%jD7wz0D$#LPO<9?nk-R>%ZqfT=KNvZ}shjPhL3w5ykiMe)&;(ly~VQrW}& z4mlMASbx7km#tK7E$J=jglw`3B+}AEz{C)!sXe5LH!BW=%P`!`0D5npd`DfV-Q}mah-%P4(nzQMUSsuL}6UO@DbE-qehMD1EVWQPsH|YF) z4YftV$l3U(`;JA0@_+F{ zf=lc67zI#sHy2%ozsVrU_UDRYEbg$n)$MJrG{rRGH!6L1&<5``>)W}vEPXv6CqJFx z18CxwOY^;ZNvmejy+#7VQumQrY5~1_duC=nH%s{ahJ4VF5236636uWlso~FDl~vJW zoE38kt{&3YMVaEBG~!ejg!W8W@yakD&5ZCIWI!ZY8lL=Rt*p%^d$qMabS;aLuUd&{ zj`%{&HvIz-Zz8qN_;D7PkcJkKAvg7gC+e9 z+x2=F=l!o_2$`~bJg!O+k~2W;1wGHhuWw1&9VpDie!~!FJN06=CcFTs?D)`^3B|eB z`U+-MW^OGMU$C76`j*|fH7E4-v^9+zvEW)(E!6hwc&(Thl z+CIZs<7)AYm`zBp%YK-HE~B_)R(O&JR!}CH`~ZZr3$?DaYYmt@KqsXts8uBSfJKA! z)q}b0WUH#U@WOvO@~Avi7^Gp2u>v1b-z}|BGXlzG@YER{_Ymp z&IhI~xn28jr$yBFy?Vu4*GiLR&Y&wjWpiR5L5N|X4M$x2`^Y|bh0^mqbb*ZC^hg#=!c zmi6uF40HD4ceh&|(e!YY+A=S<$8 zU)BP22ZHfS#=AE#;lB&`jh$TTFIWPG@W19N8KmBd^Iu_xO^0ip%srQh#}YiHtVj4R zJ!G4*CI}dG`u_35YRa$Oq%%2&B=PQb1S=0Klln39WnioCqh!PvnwSNJ%ACaV+KZwNKCzTL zuB!5Z3>kv##fa-njWNhOgmB@58W?G5qAXUB4{|$g2tFf$So5n>7Ia;sC3gYWNc5n9 zai|RFk(`fu0^Yy~xLKt2u6hI+PE4Har2i9iey! zH_wp9kS26*PEhOPJ^@RB|Fxll)#)7)b5Joj%mf4m4%M5^gJ1=)tYY3La;&4JoHC}$ z)m*}9u!h$5&wa2)QSD2}Mgh%@p4@>E2k3IIvaJ0dL=z*Ir!oMsE-qpA^;^^AC6)3r zF`+o~(J9`5v^Tr$I|nt-KLvRG3CglSg|Ao}m@XVHT0z~&3DdkTr*5dL<^6S;_%$b2 ze3&`c`{$^^k3=v87{oN_UmWf(Nl^>h1VscJLzQ|yOsYo;!(m2}A2wN7R}9=(2HRc( zHqR2)I7VR!9#E<&O9wzfnO;PuzAYhK_$>e@`rZjr0!0mpn&8+qKVR>{W2Zhctwq)3 z%L%c=ZGD}Nr%0V0KRNArA#d8(s@??vDPI2gp6$gC*|K@Z=}1FHX!R(Ey&tbrQt61p zL0O)-y_|Jlv}6wDArvM4rKOPl>&AXPh^<%**vQ{_6& z1Aw0K+F=P@vKZ+J5oZG%S!!Qq&a6)qXG3=s+O_XxFRd+&RN99OuG|&v-ySu5rEl|0 z{#wLF9ehVI4BAo9umrgw=)8L{&EoIX+p)le#1!2gGxc=LMF|fU9l{uwJihvriJ8aW zFJ>egVuhHf65%qYoexoBqaEC8x&i&L{J`Hpc(^}6#ZVaBBtim>CYC_Bk$=P;zyQqs z;-^c3_OlyL^I07?rO0Bi{`D89UFw{SLduQ6>+2EuFYy5X1r>=5hXIKh8DNXW=cD4T zrbQi{B++t=Op|!c#rw94phpG`6ulR+e`^|(Ym+8YZVF1M9IKnpQ{hTtjcAWgxh_|&xNZ+Df~?tA zum{r2XQ_@`t7nsY%I`v+0Qa#zu=C!Ok;|<+@SOLKO9IwUUevbt@m6&`D zFJL_7PRCh!U!RXC5;&6jAXXUgq}+zKdP@@+^Om;SJ0tfl4U4&x*|W(aLm`2cz?ehU zC4bmH7A7bq*c1%uu76p&fam-3d4i#_F}XwYI=a69YB~Kdq&S2DhTMZFi@x;(YLP`}tFTyF9)q_OD^!7An5tJwC~I}b3`o28OD zz;d~5=%kbKgoqPZ9#vRpRfi;BeHiQhQ)7!>_eCin*347eZ$8nq3X8ZA+FIfT+=aEi zY5}-!o?KjloRIxGg7_^T>Zmt!jBdzKn$vLXp5myw^6c_V!T}91+%W0y1cdV*Vc&}a zZ0}E4x>rUxf_R~_Js%fI((WI>5iyvmYCQKS{fP;CB7gQ&U|sC|E7WHDO+tqGK8H@8 zPH{&!W$N
ZS3Xaglx2|Pj)Q)(z$2@_~~gZ8J8*LR&t6|?|(PbPj`djD{5ll~>^ zodJ(ighp(b9yzj=4a>=3f8=V6<5Dcnh6DD}t#Fo*0OQ_o$d%g{%11jx^p(KPFQ7Hd ze=O0~!#Wkt%K5}bjzcO#i-5yEg@c=kZr^ydP!p~WF+3)dVc9vtrL=e263hDn-Hszx zvV&k7eYBZl|D8ulcWUA>yWDIGMs)=bK#4boaVlSUhPz`mIHHL4xUxV-dtqurPtAw_ zeKzvafBN!e`Ke_QJ2=u*oSR_~j>bR^deE`-%^D`se3liXE-lN%mu~?SIF#n(>&#Gq z0$=F=9tc%qnDiVWPi}{xy7^PDNZ5GVO07;p_Sy!}T=Jhb0=`{Y)nJw4p@-cj_xVq& z&7|(|?)BewN6J-OL;j=kj@|fz=Z{I=I!}f1dCTkVXo-SKYW?(H&~YaFy_wioMp*iR zQiy|nun*m|DOE`Wf4WMbDNNb)q4P~0gR#VBGCn66Y0Uwy{ZT3L<8MdXRho8uj5_Qe zP@6MX@@(|)&oZ9u>#HwIU7$(B9&M`G!WNbDK`?ctT z!qU4(bBWBxg{+m5X{srXqJml0WyYhzVeV%yHp^m1?|x@%{=ZW*Xcb@4`Z1g7Lv>dm zD%6v{OdVQ*Ak`C2wz_<(2MOq)=*ZHpx?bWfe*%tToTqqU0)(%~N1}u}Z6jF{&DNXp zbwKcJwMdNEdc6+ALBF-zQ1fPi6S*Sbh5-OPBo$<9{Vh*|09_M6Slf>Nzgws~A2?iG z9C%(wtUWyLfCo4OwO=6`Ef)MP!dKj6g9EeS6gt3yO=z1wXCmc>*`FhY`~6Zr);ivQ zS0`hY^G~TD!eezuH&+;`Tn)J4Kl`Xoi8pniR|)sZQpzz zR1ebFx1?;*Wx}qgC1UI4(jYa#!6k zG)plE3rr5eB&C|w*o)e=N5h!c`nATbywq-kfpd?W3e{T?bn}2ynT(>OI9|t5wRSCw$fDpo0hXx)$SZUkTEt*xej7zqDy`!#|hQ0 zR9wdLMy$>QLJWpNg6)*bCUy$%vg0!P-QkvgE`fLVR@~Rj=BaA}lWDbY7q&BTgFWU} z@EL=IGu+j&AhhF5S+iT7D0%D`B0z^oU;Rag zRvVpoI_MK+HRg;yolKCPSR_enlV0G|KHP#q5Lh3OTkG}isYlN}V0`!61(;r%n@CAa#IKtE zR+z@#NaKsD4>+Br91*j`3!el3@;l0{$-@2ZbNJJ9LLDX+%V5YWpqcG$;a$bS1~z+f zvMJ(ACF^s3(81B9t|q3xTYjJjRunT8&MTcNh7)8<)C?pTQ(at&Kxf#TbWPf79Rjry zC$BO#s$la(pldY7g{Jd_&b&Lrg-^4^v*t;XdrTm=I5KDhTdZzc>GCI(d49o+WKrSf z1XVf}7^|MD$+@L{7I+zN#_C#;(MFM~qi55oZvZ17gYq%N0^t?QbM9ZN1o6gX?hP}m z)=@JO@iVD1*APktcH82V*T33@N4NeXWaHl}OK6{_rm?D0XJn7-ePW)z#}h@MA6bRA z-)CU}nw&gAoG{9wQmZa`5ptsPST2p!R6r8pGY5G_flBoUoEh!W1MQgT5V)N&A$v<@ z_>)q)Ym^A*LFVo9bQYe5rZA{g>5)S@VXQY7vc(bC!?`)zW>Nb3IV>1l6OM@=_vAh# zI;1Tph6DOeX&u^dqFA7*KAm5ZA4blu=+`~yhf!t?m^9y+b*I9MUYcNHDTpiYWE2W4 zF`R_#ai#j8YOUXsp67RR4~5a7p-087^Q>9jR*C|jnSlMMv~znFy47++wl#<^v-QoD zw3L=fSM%(-?GF?wJoLAVi+A)=1^Nk}=egkARLG`zpE0H=<~Z@5VQq9{VD_}9HgDOe z7vkt+3fJ85>F{Zd%)e&g**zz(mgg`u#bkS5x1feg&P+dvmlt5{_*cZB=D15L*rAo31j94caU?u!+8W(SpMuU*ci zxRR6Q(@l;bGO*rORvYbX>JVMavG3VCVyHt3vID4rH@?loQ(@Q!p&x zM2eHHpxV+=i>2}OHM=-bi&{!CAso1LqaRBoYMS!(+fE@Fwr&RU_4(uPc+?AreZb2F zoQrECxZ%Pt7ynbu6-zX73lQg<4e`%_~SOt**??N-KebY`e~k&Y8x8M z5hpG6KYx}X`)$fvUp_2MO-#X}P0X3W9AbX?Mb00J@>mErnfjDanX3`1L%^6xb{8Az z_)?H{E9NT956ldQ_PvT$QBHq+WjHEIc8p|B7_vLS+l1sv_Qay(^BTZ4_tMkl#B8DU zhPn1(rIN_kWejDGdbJ}HaPTxV4?AZ}wHqAcfqC3VXn2jeUik|O6Xw?Z@8|-;ka&ZW zwxWszpNj7=bhSgie5v#vS|Qyc%-40sP6|?RhEjE?4%SY+xFd^@{cuS82mo)wmol2g zum%>?CXU8Vk7SoGTi~XC&1fg^P!m4CK7hUzVt58!JjAII=|crLS68ARHI)T$!GPcM@>(rz1WVKwKB~u((_yg7ZhA9R0jga;z}IP#lxF&Tr^?*a=zwmxxm*PGF<_9js!QVg8&5ODNxKr zw4h^&Ch3IEi!d2aR2+GhvIF=zHx->z0iD~d4kZiiuDaG8e_jww@o?wcY)Gfg(RnHP ze3HXagXCjvGPg2zxx$H9Hm+83(r;P%M=<<~XX%%SP%D^(vrcwVArjcuAQg4>BoY+t z%BQ^cvtTqQu?sSx;J@7LuF;rPNt@%6KxDxaf9~33{hV_q&(H`tY5z2cSS*y3b3?V< zb4cXSiscdoRu5jUSN!ei{Ua$i-~}$ehm!@g%8a=NIFzk~N?TMeX^IphgBe+HGweti zCs18yg|xgvzl_DoO(-N=s~Ns5HF$R1tUhDFkKWs?29RdCM}uwX!khWYS~z|ne6aVm zpFWyME#OgULL)(KXMlS{%d%W*Ql3jXOHh_|ubwAd^PPAJ-cy8Ag}L4tJ@Zx;OeMhP zxZ4o5@RRfa;6-SjFR>(;imFfXG&D2NuOzvfSaaEdK)*DN8J?c13gp~9^{Y4@3BxTrTRM{FSg&_q zk*-@f%|6X<=%>0cqaL>7Q*^;o2QLaDfSadSw|Y;4Y;9?EMf8h;!#ZGg?6&54ebxB> zUPDaDj@Vfc#Y+YA0Mr8ekZ=Gq>i%)-CHO4YZ)u!5FdO?^vAie3eaKMfjv;F_Yhe0D zN0>$NEY78dA2OQ|DcG~nL%5g<=G#6jc1-Q%I>c6kWcsFVIJc0P725!wq%6;$(IOiiXZ8z9*iaDrXrDx`c z9rc8tsA5@Pj!|Vuw!7;PU%)ZqRfKBe)?7{WbbGkN%G$0qf9+e1LDzwU+nh&hqXJ35 zyUl;E%iOR5j zOs2vjRV<$NnNUj*^cLrFgqJ(IntVU{{opVBV4~<&%7+eu*1yj-YPIH>k%OH^3lsH7LK1VNE`({>C**|F>@cGOUWf00`F5;M8F3Xd(lR*}Zo0pj%tJi)z8i%d!s!^R9D{D*y9)x zx!VgN8sQ}IN8EjplYZD=+;t?pOGdZfmm zDb<}(Yu$znHFhWCeGAvvTh*CTQ46E%H{d<4W z=>kpcaiCFkO>Np>Chi=?)bwob*!XMSr6dCog}Q|^c5_>iF>@<5Iz*L)6)h6u2H**G zGFplym_&L)EEN$aeuz$r3#jV>AD{uqQBXMrFydlPIHE0Z{I)e}#>$Vv?H&+vde#^V zsKlCEf&l-DKceT@Uzin}G?hlu$x+R3!q*-|xXeA{kv8|2YM&{}Um@UuI_n;Wh%> z!(Yb;`2c`lGK;=tz>M0h7GN?1-;{gbN6BHtNXaRY_yY5U{`a2r;R#aHMU;-$j6~DW zK?azJ@r@TdF(XT~cYChoVa`RXN>zqQ1>>*sg5e3gLQw(|r(}IHcS{l*e%2vh-#KEF z7UD0DIU_P)mu~y0`_G7uPE{Lsqz`>UHtwIjGe=w-gcJRmVTdFtWz26k(MYBABEB`e13}S2{PV~0`dc}Q;SQn_S16|+G1Iwr#9@C_p z8XIEQ^j>eDtag|O>ceehI!cm~e$l25-@uhsWtq}|bdBT$t2?b#fLVBk@5ERmi_r6KEn|0!1GRUgf<5MJmWxP!*lX=?z* z(&Cuqjf9>s&vgj-Ks1ynd9D)lF>2eB1&iEB>#~kb;5iiLLPo#xQgL@ePxwhKDM3;G zA1I9cx{9{upzrN6n!`m-;xH}rid3@I*Jd2Q^18iEFPgW@*SV7#s*wh03(B{k^dybS z+K5GEsEhwkDt%y?(2|F_mDH&E3_VDz`edqTLDe1Z(QX)|FGMSwyF5UY%n4sFns018 zEIF{5QqRo%A~G!zoIjz-iLK587Y-Hx)7VPp!G3`%O7&?0D8w|KpT2KtnC8?4Thzm5 z+)~vt`cnx?&^>s*z`+Lx#337w5*W9z^HNI{)E9vYNG#MB9_Ii^MjZS#0 zSAG>LT|FillFsKdKn75~@c69&W<5-`(^PtE>L5ck+h>vHyyn-!g6;_{h2%(4R~Ukb zk=&tL49X0xV`AO8dtX!QK!wwHB3_&ZV|%PzzO4;>Yg>IAHmoYXNu|~u!Xf*;CiaZe zXrp~ZHhean!^_4qP5ey;@_7QZENX!_v}i0C7C)ZnsB;NeOnt-8<0_@l5AU_lzGV8S zs7_**#eN0**$foWKgxIJ1Z&A&yM-^ZS;y)(&PeNJ+CJXzFu;Np{A+fq*WZ057L{-I zz-TG}lBoI>O3yXNSh4(Ck>l!txJCHjNwOI@a4M?dLx6b41f**D>Un|g!nvc29yQdEJQh}J{$DxbC z4onC@T`?Zt%vx8`1C2W@R>bN?i@jg?FN=c(PN$)(rYfLk zcvFo2P|;`AjXg@I(;o{dJ9^yo*^fLfsc}J9YIULw#F3frQht!7j2o{#oj(RECV8Y1 zC3BHrfu7|u%kVuFIG8}wmyZYG+d}mZn>L(&WI=i0Ph4l6`Fd}@pLdLcoLF{t6lzVi}krT^Y)MAMR zMUmU#%ELuGSfBY+X3r{gA{YEp3+AW7CX*}{B+@4O-{>TKXm+j*6*)e?Y63pw^?B#4 zdnZvgVKf3@7-UWL0C}oPzhYq{umqe#T9uN(!ujPm91^mD?)*-Q4NqvZ@O6x3=@VA# zAg8ykoLV=gO=&I|ha9aMRVLua18OPp~YAYj}BSkT<~nZ~CL4cVEguBQIF(3bdSbA(?@eCjva zc!bi<)Ao}a&*W6yFQtsJK zG1hG|63}fYtB@x|zva!$DT@8NP%S&sx1XPB6Zo#2fMbQtnJnCuX=A_9faZByZI_b<{s z`*D0m9REmS9P~IZx#2sFNq@MBBjQa1C&aeMQ%o&l;QETV%6UodVHL+p1y+Lkt4?mn z#L55hCZ4NLrcXkc18%f6kjkVFd&4}>73mKQoZ}I@Zx8x7u92!k;u3Dpj)$vr+!moV zOG2a@6#4mj;xLFCr+U>wIni1q_fGa_0)JX~bEPgWYKh^v6U~Oy@@3az0glk-g7%s2 zZVYw;IUztA!@Utr-`Up70{06o9Rf6B=3QysWM3t|mEy6KiRj*EI9+cVITB|ztS+tQ zp482|#3(1^Mdgsr zebuyF;LaPPtU_QoQaq8XU6=NDSEqSSfxxeGl~ZuZ&a6Qv@)_W`2^?O(XI^RBhENE_ zTJ(u#b3F7YwU*Vp<&hw3RjZDB&=5Mu(how9EkS{LLwej)-IB0~WWB)#&o8Ek$nRiS zC9@lUQzvE4PZkH#NI0!gXTjO5ms-*;w-5MmtAjEB=b+gXZL}i!K9YQ{AggH zcXp9C2wKS94HtnIB>)td)BEo) z8A5@le7^MU{A->JC`xS%dtBwDt5ARshDqPd>0)nD&asu5 z9$^}n2!PHwn{oZlc7mlrC6((Fm74qcAAOBmWCDP-k_=zXcbzA!&c)G4IUguI zW^^U5&{~qiJvhs)!WxI7fqyw=L7a|O+%8b=>c&$e4)pm`>xS?7V9RcK#Vjq=*S)8` z(&BGL*Ptm=<9bn-E@_8>`BJf59bz`!>1z3EV_nFf^dcfVNp7FnTp7^LcM4%Zp1+s8 zt(7(a9kzJrdNsjlZMgQQ*de`&-O;X=J}ltUiC)F@YW~<@(v|M{idSnnMM*@7=d8a@ zb!7PqR;};@B%F_CtY-~+j+Ey69s8o3briTpE!2vDk%52n*fdh!u?I6l5m!c<$b(9# z)7U<@q@4mUcg7-r=|pS2-I9yy@)dca(73XsDd7Hn&I8*ewFt$+l+}#`k#}e?*3DW( zv-9}n_PF>R+nBboYwDnUhn_#;buZ@edj}$bGxS=mp%fJ zun@**;Db$|qhKs*MtbhNs+x~#5T@0S|Jd}zTBa^_?Z(P60AV4S_a++hWcGaGq5$#E zTV-J{{JZwOStRBqmC0YUi&8ve-75N)i5z7JiI^}@A<|JDzYjQv1uBo;=H+_SBxc*^)$Qg`zh5}d^DclmHNY+>4w#`wTB zP6v$p(dDa{y4CWSPV`|U`A_+YF<$~;^Lb{E31sz%AUuB*icldSb-ROSvOT#T6DI5d zT3f*KKobp>F|jJd;h4euEn42Sf4Z0>_%%)C*D-oAEf#UsPRe$g+wAD#(23?Cl;x!@>UTHLR{7H6X1 zYFdl(OPqJ<*D|4olX%1Rg>;MUCX$<0jwfR1@rtbxbGFvT5U%L8=_gp@)CHf!K}9&$ z!kp6HlRW4K?=^*acs9}7DERd^ts77z>gWZ!b zk6T8ikyX8*RVjeWPa&irTQH`AT6gOTIql{%tmE#Sto`^EuN5^)p7q)m3vBe>;xX-E zkG;bo7N_qgq;*)*USt(!2Ynxllb$qC(+ctSzKAij!xm9OSiOCF~QU$Nn&<`l)9A)FUfQC^j5CtIGD_JbZw-)?!$$%nt>8m@(UR`ydT(xj0s&baG8{IJ3{r zk}J-;;xw~>lX2LrkH}~oyn!pX3{+ZIApdXj$Qcl}?5`dDZk91w#^XmbzDMzs(?C`N z*bUW1bbUcPlteS)YwbsX(z|vE!pZFeG?c<421x%Zp5Xq7-c(^K%i~T0SQ?inb3(V* zZPvk*h7KPl)Wex21P>Qzw4=IcTsS)r2s-}`%!ADQ{w=fFzo!S}&<6jTTzW}hh<3?Y znHhTuD7f_h`;zUnQUq1QYjn;j#C~ZgW@pQVd^#g@#Op9#ogSE|@aoXt2^|NeP;#Hy zsAagS5&-}+FBPwhRg04-vnKgV6cEIc`c+<9BQ5=);&-8D4RHHqH>&9(a}-Z@2$u7b zuLH^w58~{9&=wb$yytFiTfC${%LUhs{$od;Fx07$;3rffQ;*xk$(tE@K{M1caF0bI zS8$hJsin1gcLXz!;22#Oslr#-5H?h?Dj~@U@BN~u zv;QxMfi^+c3E#@VUL3*I&$SrAy4k;?KF}OxfO=470=H(q7}4MUoi083EB+a?av0?` zW>81#GU|Pu-s{v+8}V%}2yX*8AlMqjjkbvg8K6wvU@0l52`pJGW(O;HFVI0>-IR3e zQC-OAy-fIWQO^jS&Y~$Mx*)S+<|F~5Q&XBgETaL1fMApvXEKSjSI{giI35N4v+yqO z!&K=YnXSQrLL-L{>I!LRaqpFo0PUF3-=T2va#m~bHN7{s;gHVIC950lUg1&k%`kV3 zwOJ;=OE-N>QgRTTGT-`CLfr(#j5-ecmEIqn48#P&7sMRtmwr}RufKJkCZ976$LAhi zUTNif=OO_Rj-k=M<5X%b_M|4E{4MDX2`Z|%KyV_?a!0^CYc3PclB@Y7oH8-l?ygK- zfmYminVOQP&yWL5EnxcwR;5_w?2O8t{Vvgk#Q6T)lQMmbmcO+nXMK!pWDl`SL$G_A zrE~w?Npn9AP^6EBzzHcViCXx82QPeN)w#m-d@3|Ssdh&<3$wzU-n0EZZ3F5dE9V?% zmnX-{k@H}+)u1_&X>MHuyZ&wt9;BvO_aVKRSTvnhU!>vo`N>52$pU6p3W98{wL_BEQ;!rc17c=Q5CB=)=@wWW$Zz-sJS7Tv^9yz3Um(Zg;b-h|?0HR>`TW zlma+p;LwOU!X4T}65$xS6#|fwcJFN9V^ob*2|Y32h?acaOEBBEIQs~MZ@jJb;3BKF z$2zW4uO<&(BPsjCZu^aOV~~}ivJc#1`B{kYaLs_=egH@*+ns|8Gd6JfIv0>yJw*{9 z{JaYzCL|gP|BDSEk9JKd;wu2TkT6)NJHoLA7D%n@)jsG`g4~i(8%@A>+J2x(PO<70 zP8WPqJMg1X+~Msq1UhG1$%ZN?aC#OZq9PD-=2F$EV}6gM0T@_O3o2f$R*CL3VuOaa z0TIq`g6*?#M`2V51_=jUT8--{ezQ+QZeRUY^rbJ)F<=W|BNioP2pvbxPHk(7?6Rto zGwINNE(**>E~$%a8|eTfvJqVv_s_PDaLpPiNm2Ius&>0K1sFfn7aLRLzMHe%vNMo1 z4mb!#r+@V(Jq}E+^)a1YBu-s(By|cp$-oFWzc=QniH&URH|_Vo%s-11taAyQpud+w zafo)#=aS5ut|o0F!?Cw}B*tAwf`H6}Ff2^yK~G!!B^r@#2Aa{Uvij#F zo>>C&8yK{FY&+Q*d&*Zrb{g0WY@oomp5c`Ync>*K7>evqy*=Yf7vJ5i1uxBrY~O_| zJW$>fO%78&{&F4a)zfOXV$3s;9dh1ixmIJO&;LTtj<1fXQDL0W!;u+;TrGImADigZ z1LfRnhH`qOKDkPVA3eVug7%>BS3KcZX%1jby{tZHxvH32ECebY1mtA5O3#M52j#iP zVq1C)hWitEr;HP-dWvu4S`)Rw%1j1zm?d~D38yl%4eS6M)$A*G32W9q?yG;Xi zT6#F|U1naeH{ zjcVGK&k0tx~u3>}2giA#s%Si|}XJ<%8(=G(T8QT05}vC{K};OZp*0V*g+p|Zvt zF+mCjR?COZA&&b1g4Mfh3h~>4O>;JX><@YuYAFQ))?w<&z{Pt|xGt~w-yF6D2>q!5 zHaF^O)4$3@QfC<27d;+{i&ukFbor=4NHuwO-{zU9!SSvuD20wm|p^n#S#2f)w}E z3R8iSR}g>x)$g1F=F4I#v;@z9j19cT9e2GrVIyJwh2~*Ig6bwJXp8nKXSp9jT*{fC zurhG8cXB9F%xNbM;qJ(FarjTDgMESHl%?_!QDNuYY8b@sSSn&8lzKQ#tA+4Q~_S&>rEUbaKlI@6cQpAbTjTmGz{uZsRUipqV}t zu)(6mRHmP{eD^z>FFL_7JMT5Ju7+|tlb5%l1D(nGP1~P>#l=#C|Yof#r#{_P|_6zpm}$1OA=b* z1Ip&-kMxTcyDD@qkghKv_ZR5U$(C@$n{uk-Eqmrug7#E+4p;eNwHnRhs5 z3INmYR1R!Gm>8OyL38KV8li zYp@-Wg?$#81i#T#s5UjBY^(wl<5= zcYWZr=%hO5s%gp2lxb*#Ts(}<*LHzegDH7BO|h(uz%6_fssxHt0nP)6$!iT-p_D|g zbE$|E+Q?lE+JaKxA%yF^L%`>_m>Ew23{)i|Z}eP~EikufSP5m4Kmd!#@vMZNwYt)0QGn6&3D%I(*Z!;Dxc;%E4^b9Zf{6Q?J2HhI%_Ot#X8Y8NKZzTiOWwgL43zQ)3@4&-bv= zIN3sNS(4()PGkESa*n2}bALlWXQ;lIQiYMqCOSHI-m#TwHQvjR(f$ETD9RLUxmD1R z59?-VQdMC0d$6i!EloDdfWr^~5%ufFRi-mhJRN}68a~QBP%Q>RkUffh%Vt!0ia*pX z$;vE`a8D&$=FknR;KZW~Nu2>eC*ePnCo~Z|s``wfDVTQ&cNv=*a!KuXk@!m&Z z!KKW1Y}o1-2RJYrj4eAW3KW}kYiTmji3=SFQ$F1d6@j*x{|`zHj{XQ?C3~}UqAw;D zw&Bir5ZIS%7)2c=Khb8?N(gaFaev>c~GNoZ20{k=36mudAh1j@1i6sWdjeU`><+7dWSP&Rp9(Vo2P>~@0`?Fm_ zCJ!y*+LzbNGqMn^PQ!m*v*%Y;ttu{Wximm0 z6WWImkRlYDv!nqKnOr~i`~oVZ9*aaZ=syT@D-|n}r1t}F;x;k3O};~1 zbtPPh6hNgcqEQ(lql$a`?@|9vw?0gqfq{tKBd`#CYwJxUkKlFl!6>xrA!g>EOW=Jg zO7wDB>;lw3_Fyy&BE3i90=gdd$!Wd0Zy!yIHd7_X(Fk<)vh4esPZf-<78`q%|dQpb+F{D$@@jIc}N~!2B9aG*?Azs1PJ>7%=45z_d`r^W# z0FDjgSos9h|7nnfLu58CyQz`~4r`{OpuH7FoJ?}h<%aIwc(xqW$z;(lx72(>abMJ1 zZ+;!X69Hm52;HkRdMd5xPCq|nE-JCoul`&M4T@6k5|lDo1}B*@QxJs{HMRH%aBVlM zUnSI6w!~{VR>cY*)}KCCsQ8ND>0%t#9HBj!wx&q}mzw&Gjk#vfX%?fhO&{&8fA(=* zC3}dx6S6XN4id2c0Px8Brbr6@Qw z8W5D3E#LXHX+@b(xE_mp7=_hfIXDl>(s+4At;xc1(v*i{Ujm95Di{&t0BH=UxMaLK z4I})Inq9KbLLHDM=M@Rr9!1rCL6LQ)Ylk~cv=-5pQZca8VVrDE8}I*6%{;u!d%1ZI-^z+Mf=cS97ybZOiwDwO>c+ZVJ!|=MxaBV<+7LyX=OPazfTViB{R#q zOiS7sL$LmXwNxuIe+L@q^9XH)MFTyUq1&(k@t-|$OT3}j*p=jKe06o)&v9|P)N#Q0 z-9R(i4$^yaA&vw#eLXV}E%reNBQ-XO4nK_t4u4y;D((mOcK|XM^mpT)WZAxtiDu7Kwi*f@8en;$f`|)J`1YdL#t?FWNKuuuKRDz@+O*3FgwC3T{)I zIAl%{x83~GAoih~+N;v9)C;tDOch>7!WGENBeh&ymtD33W;fgz4+nUQ(Y4!X0Pa># znQ8*Wf*ZbG0xdkmO^;i-_Ji9&{4Y%A*shc3@{$=Byk3gYr}%4w@4xK+5Qj$-w42N5 zb~#YtM`V!2aJ3 z9SPe;<$vorkWn-^5T=*A@NIiHjktf?&)~*GUXqe^J$Tcz-&{nhh?cy-QooHc{O0Pq zh&_1@`UEwZ{_0)?i>GZSl;!KaP3uWJvS)VCUHF~96BONNxQA7dWIK&)3xmWZZJ=AeEFZ}--S+U={xopR zR=LN%B(0|QHo5G6yVWfhO;nS}t*OXx>mmzqr|||DS{Lacs_l;pQeR;|2{gcOu4G+-9 zTG-Gw;&?x#Uoe)@Akk6b9qFVYk-(!T2s?55GTp+vVyb{k80Aqjo>Mv*iJIgDX^ZX zS7s|$?H7A|N61B(1705BrJaF&W7<9SeVJ-M)I0$&5XXtl15%wcW9MU6;cBEDYKXzF zn=ST2Z7OWl#-yws+Ukvgvgvf~mR)ie*VDCC-axzwxA|4! ze)J={`@6~3Gm8Jgx}GNSsE%s;T_6H8n?&KG=m0L|GsOmPPRVv~i|LU`E%>+fU}AL6 zow@-3w6`S>CBm&-VQ@fj2AnQp&a%@&((C&J^L8pV2RoREHB5|CXzfMOvv+0WS*BmE zxd@ef?)!q{0~(gm=Qen01<>08Pw4uXW{3dVi;mP)BOS7i9&8r?SoYk;MUYlq$h&BB zZ_>!30WjDplUy{ChlVp&dN(Y6pfh$WhVBIxqx@Vxjt<96M>b~<+h2)ztYiKdWEi(x$ zJpil5{cUNY_samx`fJ+^w)gp}yyLusZ)zpv*jr9o$>t4^)-p=0+M8!*St7Agd0}kKv!LKJk6z-pWoLnCz^PSu>Tl1;2627B9>k z;jg`L&Y*QAs1$;0h`1#YRYc=R3~NK^hkrx>m@R)b?_awQH%m}Bd(wtM_r5H$s3}iV zWylZ*Pp95&XwHDkHI+DcLXx@w^?UeysPn_G@Da{(xxS^_{A4G4`&i=4c&w}ypWKB+ z?QK;da9b(wgIuaWhb>rb1J-L+cOsF|@ZPvcygb()|Vg zX#I%EkjE%eWD>S9V&-V&F-X+t=ER4VS zWAKDq-c_C23$1OPlAgb(Z_JZr2P@yC|&{Jk#(wpCB z^;;l3=iFCZtO@({D4(7KC#4h5+kZ)sSqCSr%(#d+K7{TPC48D##czW{nCFnfV zq#$6k5(#i`QZ?%txGqGecerfIgDAY*oxo45mb$R0FutK=foaV3>=fZzJ~!5h_P5~z zsg`bEo{#dg*Os_9I^}Mnt@kH`UGb~@XlUqP)h`rL6{Pa~9(-$LIh?L6V%S|rF425I zePWI8FEu#{Bk4vLsRMC!{Ks2$(n2`WI98p9ICcrDgM~{CT=auSWo8Ht#1%gX~z7$eC zaOR8Nn6XwkfvS->2`S0q>%)a3>$SUn7iPD3N=8?Kata3Uur?_WFu%~X=6@I8d4`oH zO>}-DKIZ|Pfv;k`S(jsZ^ES+gM$H}jJ$u$PPb48#B z$uw}y)@F0>MUmf!)5Tj3zjwB%fqb7{DQaJETH~emxrsEM*S zX3}cSyE^Cj)#Hy#%aNOwZ~QTJ`O1$aInVPxj|PwY*Mmf{h8r2>QfdaQo4Yne?wVBmphj3ck}9aR&>UG~yhq08}hDZF?s zu<+QAw}^;`PZ;4B7Z7fJ3Z)Q!9U>Px=}`I=lMrf?jSlz_DkE%NfGgtk6Tr4Bh;gi| zt3+H3)ykdBKoc^}GGC59DeK!Sp3+b4j|=(FYLtl+Qb@-gowtYhIbRLuM&VOiW>2@8 zh}wWvX}eWZQs;C0L~rcbI<`n%aBI9`HwL7`=d9PP%65~jpS>Cy{U7@xEZb~QOS%d2 zYh-L}k?x;|xrV5%N?5%j+~#Fl%T4D(rBJ?!v##5{l0<{_`kl14Ez=af4k23Y^Z|5g zn_5h23wFyxe#&p$6r(H=>9esWXD7K6dvOb)cUAx}NtZfUS}#%q)*G--7?i)KvF z_E_X2#5fgpVM>)C#a;`rueY0up^o!QdBTQ;7BB|0?nVPbA)<C7&*ZC9Ou%ENv z9hS|AR4&>{yFQ08xmDRH_ug0{zEtdpisf(Hg(x_jR-r+ensl%|N*yb4E?yT-rl!;3 zJC%z(fjG|O9e%zV6JbJ|%VvCsP_{wj$~9hDLYR@X<U>A_4xh%VhmlK$&rYksNM zOv4QQ$g_EX;O_K?nB#wGS%%9D4W97a!Rh`UGF2&Qb{E$0Bf}a-B_oGyO*sEc7WO%* zy2>xBkQRqFV#{gihTeY%6S$v1dd1b5d2?+>*p`JC=?qIh#18<13Bm#Y#}$|`yKMda zVd$v5mwnudu?cKb`Q2`nNse58C6R)WqP&wz~>_RupDYxdDxFO@TA;jtd0Ily( zd47JHJ@_Pmx4IfE8x*&uJVY2jq91nReXl_E9D6hRg?7=`nYNkC`95i*aGR)+<6SJ&@?V#$K1YL+X z+460tJvbDcKl-E{Atu29YcFJHEKd>o>L~YYtw#}o{GwVS47bVek0o{yBn@gai_F#x zE*N~6HpG~lC~wZW&=OoQ8kE27>9 zl*7O*s$<%-KT;Wy=SrdLrKnu&_*uZeu@HCXs^kqH(aJjB_`|?`SN8ybVje~Ssg$p6 zn`q8X0a#=jA>lp)8z}!*guvBuYz?dbGD-I#DCPoYLy#b{zbLY;=rfm!oLG{uD20-F zSb^^mHBsN8{Bm(nDnU`+8ZhMkU?3!P_qe3oDwOZVwH)|wH9Z8B{A-ZJFnFJUVo7Pa z1vLtL)&AHh8Bd{BsAx4&^rDR8gEDO+sGWag$G)K4!<)P*F6biv<%MiMfE#bqR} z2b&hm&EjCZLRjt*xF}>-uIgT*T5|y098VDXP_%2%sK^^2KXDlakok^ll1^|J$)3eQ z_MR5+u^J2&*JpaEX~{Ja;oI5}h`BIyE+VixN^yFc81dt1F$`fVzPMIC_FZx%CCD~?A-Cv9)za4~q61iFIMwaOtnb`}{RdZs zZ!2d$8yFQGWQOKYvl`y;rovavQKUJ^-p)yXaM=;2!_-Trvy#P?@C^zC(3e4jeK`O8RF-Tm!OkZ-P_zEu z`d0xB9}BaH)_ZpupHRIdn)8#diVAj)vSo5$3q#{DhM-5TV>IsnFAY|hTl7H#LzE?y z`RZ*vxaR#5J2@j=NOcLP!%C%6es~&z;U;rF-6T2DfOE*<)v8)pbpc`zG=?;zKRwv@ zLJCs|;~q{Uh(x%D+h*NZ7pDgM9|1#F5urO793PU>Lb4&QirGt8W5h4kKet-zmECcl zQ!X!V+)mQ)F!dza%l{<^)?(X~rv@p3R@ZEoJCMBJ$=(mkE>^1`{@WPmss?Eon3f0; zbE0)6OBATC$oglI@#*74{bcdQ6TGL;UxZ$LUXREDJYq272-YQ29-4U3g$w11gQ>DV z2RWhRy2qWy*A`y&31jVdB^d(JuZV4v*7Nym^gY3o+%d0F-C2QefdsiixT&;OkY^^909IF>)298elEmStI{amEkuD~OO) z1Bi-8y*;gA#@TgRXJTC1VV3p&r$EQnlnVs5cu%TDg_Kr*>uNT<8qA#_iob6l(YVY` z!UeOmp6WWOxpN%X?u1|qLPq}xoZEg;kzj0RjE(+sF&e=hzbgMlumC&V|NgRDj>Q&# z%Va#@T<2dnyKby0hWp;ARxAYY^b#I?oLTMNUcq&vnECZ1t>EDg4+J|sMU1)Svh`YH z&Ecs;OG}rDuMclYdD!unQ~_EWV?3P^G4+DSPbpk zDmlO{Hgr|Pt;42JCMb4RV9B?V??=3WHJjXIAu%f>^0#IK_yP;TPwM_Ec_W$Esd=kU zB3FFOwIY8+XNVD^I%oR?@AVz-3&HYc>T>>^jowysyNrsU<)g1c0}$7{bfE|7N|{3M z1RWnZ``&!y+F%T@*rm0@%Q3tqIgG2=>58!VyE~4VEeBGor4B{@g|qHe+dVCmN%2<` zY+KoJg3OIFt#p0yAF-eZm0W!6Dc_tW(doab-mQ_hTLqRo_hk!*`V~cBra0KE8W`G# z&t;6<*Z5GPb)jr}{8g-b|8tH<1W}PAz?lZ1FOwRIP-;o~;jOsMQqSXCMZLImsqvtT zDWO^n&{4Q}@!*5keedFo9$lDBKCMtSx|KY9zd*-nThTg-45S!tITi61DhU1S>UfRu z;GPx4GpDkS$)mdTNay9UXRtip9=;VcMcK0_C84j4Dy zJ6=hdQ_Q)2BPXfzTa=#pU$aHthFg#AG18E}L^Vsaj<1;?rytJIHyPCPU$90M!m4#j z2L<1p<&tL!!d4h6`S+SckFa*_Q#BjFhlKjMONl)7=WW_r=aMm~GH6@)x{K%qw7sxJ zl#P=Nz2^^!bMY?#6s_e)YWuGAX}Jw@_@;W1Jl<4H1=)x;!nozZScw<^f_xG}-x@h) z#ht3#U0T;9gr`xVoI-p1smJcBu2pg~{r}~TO4K(!T%kz>agv+?SnXt<3sckvJZEpR z?V04`QNNJ95SL5DMK}ZXhm7`0&1a9xFq~CKroJu&%B+-lXolq}xgugkeoNS|QPFex z(p6y$%JVDlM*TE>h0`N7KO>hD_5-3BqMXTy@(i8eP5Qc) zi-H7ty#|XrA`J&@)QH$&(@#!LJLdEBFoCctQy+1&30@g{K_UyYUAaK1HE^go5hAQO z%{_awnUvThh>bL?#!6h;tt&Si9TGw;laf}xs4riSLL9F-^rJ1|#Bg>G6LUe3voI^9 z!CU_j+)T3apAp^EjNjk0axAW?HbN}Iy5``}+QAvR60OMeCd2y)ub6IQM8Vby*n7}yA;_J6+P*@qiUrHT&Z4nU17 z)K)Vunm7vsAaEC>CbBI|RaGw5emWUthBh<7JH=WE-`D^VedM7}d`S@!j9=xzWuv$c zS528p*lwiQh7h^UV%SOU$Q)h7VX?sFi@+eOEz`RTf&OcO=`{%e#Ye0=?}<~*4oPUX z5t=I;W)5cMMH6N{&rT|_g|5okA=PihI^1jSsom z>v23ZW=ZVdR@t|!O{)7?jlRGkScYbuX|xy&kVj0GTz3gT`ZOo~OWl|KivJ$UZ=;ka zGi@edr6TFtQ3&2jJI+%$MY}o2lRNhO096N+Zl-#%%Z;WY_GVr&Y=fdIky2$IKTi(S z6Oq-GU<%R;Whrsz*3owh!F7cTw8Tylg?<|ds{l%1d~xgM+5mjC3q#@^W#r6-PCw90&f#r9BFeq&vSl7Q;83c_7p+i+gUc%r2hIC&>({zu&r^aIfWgV(<>JoOq#cB078-~9<`Z6BB19rJ zZmpgXHiPFTWrHo%1Gd|`ef`2^|57?Z2&O%fLomT-0FVm>{_&&A67TIIvw%ziT0tOH zWRET0aT+`m02YhTh(TP@*?9?G_1HTsbxWDif0Zfspdj6dh+ld5pM}oZ5Qr_)`+CYW z;Wy1zi!MWr#3W@&R>Tg%kT?g3=KisTHAj5FrtWP%2BNR${ZpD~CfjsCyFu&R;IxHC zpu%5X3~GF0&yEeXn%hduB^f3kIP~ZjTipC9oldLWHOp-QHy@ia_S)447AG;`RR++K ze$(srMF1w3wer&tgps`;UW*kq2wGJ6X%+^oWW#U358h_H8HjUKniUL@y<8?U+sy~2 zT4d04tLGO#>SA6VrjC?PvK{s0VxoDrNmUL2yV8RNjF7Wt8!JySUEF)3zZ|!dkx5@I ziql^wXIWUB?-FK^ej?|zvSgB@+g35V^Ril3^h{~){$)2`2Pwz}D9#TOs5VR$^z=>x z!|0`JS4N>$3yYe`3;yd0WQ^+jmyyZ)RH^cZqeCoU6kcXmH8dkymOg&k0lrk?M+!+@4+e;!^GyU^8j?wTgp0VJd0F|&ToiIb$m^3PdV#nK zU)T-1$N+OM>u63hj+Y&YkjFMjJ78g}w1b2c2V*VO9?&AMcB4Zd08s1x zwoIttCRKw67bVr&RANd~I21+obH4JtEPW`|RaFH-@7EVJJ9qA>Fdu!iFcIlwDNHAb z&G8_?FD^s{3KQbuuEJj6df}$6Beh7EqO10Qq?Re734p1c*?XG>zrVC9N=+jI^5c!1A_2MSx&NX?4)*;Eb&`VUgBL|W7B0=`P3Dd@87E&oKP41BRgqU zJFpH}FxUevPaY25b(~M2*_sr!kh#`aY1eXWBi)tVE_;)hs0S6_YfPMCyd=h%JH;o0 zY{DN1&v~asDEm-i+-#w6+18DBYQQEhJcISpn?`wgCos5*J^|6b&RFgyw_5YXm(13D zSrF7kUqDWHHm#D2zyKPibKuc#UZEl>?fZ%xC`dn8Y+RhiD~kF#6L+gBfH>@m9QYQZ zv!c`G$|d5T<*wD|@!R4H_5gHu3l6>kt4;}8j4{2xuY9h5IlQ+{E+?B>=;eEL(l1KQ z*mQ|m#N!FIE}-a_G;ljTB`M9lj--#4s?X5(31A&r*qIq|^q5rs;%PurQV7Z$w9t^& zFiw_O%{w4sbyp?5^8~Xt-N|n&i)*Wlob}U zsdo>@1o>RzmIHT)^XN;r!x59x#gA&ux@{pMkRM3l(53`{3Im$et^URf~7+vmo13LQwFt6jLFtc zXbQq^sqc=fAQ;J6R9=vTW2+ELb-O)GM_`J2PRjH5HrYXRrGti-1*I4uSDc8;f_C+P z0WaHe$kcG94V9{>=66CCNk8r**t}W$G)ZXP6!Pc7ou76jP3CBTy(d3;KZ1j^Y*xj?cNzlTSAE-fD z3t@xpP|dAINzg41AgjX12)d4vB)8UF(XAZSY*NQG=i*R;bL=$yHbOX#9%D%=0SDt@+($%dDVL9dE3t4CHxdG7+9sKzrpz8!0f}uKmTQ9f*%rq~`q8TkdnF z8-|Ges1^m4JDA0|JrZWXKcBVKy^yJc_(l*+3Ol?>%qMYrfjYGymmeyJ#&w1;u|ZH8 z?OS;lg4aWb4Cm)gi>zxm5-%dV=7zbzp779}WHb0S?vPvGG-bxZ*jx~yeHQ7sfO3v) z8KK{Cg$vr(8@8<|JS$={{!oi*-`&FP-_??jp%b||?3&dMZo z#40G+TKXa|iP8>qpCtLrcx1c$_hA`g-no;2(0X(2zHAtNPUL-yjJFdo+P5Sm>$(mf ze0*~!sP&#&W5qIGUFSmg$tUKS>oUkjLtNKC3KT~=sfp&m-`hZdX%)HG&c?`?pb0Hw zwZ(=83uxM2klg>0viIKfWS|?s4jQD%*NLW)=fgB#1fJp47cHasY2d$DDYm{sgd!7GkVm>#R@TBn|}RNqQSJ?Rc$kwm+kIbH&fm8iXfut=l4W?YE+7hdDF z>8xTnH#t@nI6Y39W#iyqq!XU!yjGCpV4gTkN&feU zBI&3_mXea^C9jliqTqLt(!{YV3;;L1<}ajobI_xJ%-!1BYs|OmAI;TfjdklQ&gjyK zv6s=>F0G{8O#15e zJfHBcY6A#}QVM24Uczqmha9)OGk?ch78Mr!(P@ZEcZb zKzW6Z=Z3x&?#X;ELkw;EldCgs$%riyYB zQ|P~9A@+3Rcaq66G@gSt)iR6uy3)be4!e%qAlU@JY3Bu-41p-Pe>X6h8YU_v0RKM# zz{unEE{xWywvX7tjhePO;MlQ(Sk+^YMJw&<(lFCj=NQC@B4IKbA9x(D>cz2Ce=gf| zeE%g^l){h_J+cJhCWv81le+<|FzXbn-0<~*=S$>ZVEzVA0ev5}NeB_l!hkqMasAI| zWRug&eGMT=so1bU6Ju!qI2iCIhZtix$u`InF6#fmbKh2)OH2e#=?WD6?Lyjj8I_cP zFYY~Rn5`HtwkYw^fm2jcy9_wn)f=w7@am9Eod!^<@K*LG8J+({!ZVE3DYP64kqZtW zMhoJvYN{f;c<7NvTX0J%UD8)+U6m;OMZ}Kp*iaeN2lPIPWBPI;HJ{CS(IqN%n$7Ca zJ!dUu1k?S09YR0n#W<}+Y2g4YIrhq9-Qbe#rYQ7DDNua$ezdSvw1leYH<*0e+tkt# zu+Ps&*Smm(Xc9V2nabLv3O--fi~_0(n88UyS%{S_D4f#3 z^eu@L4$uyDO3r~#(WQdq!>f&O5H6v%%dy+Kkv6NG#XmUT2vz_1246!Nr8a1 z0X}rRG0*%Tap8N3Ds#oglxU8E=d{`I+xiDZvy~K67*H$|rQ6Y)LVlxM3_9v694!S) z@ng|ER(N5qZkHZcM6ZARSWe`TTf0F#z-)ZEtJ`!wLie+JNVG8Vmq0MKmeni@t*e?z z5%zB)c@M`9NQpgsP3|#brS>XI^gNeJhaIV~6vnER5GJDW#2yLIcM)-;%8Y`ygL~F`NoXg6C_<1HjZxV{WI2xG?kRdm z89?|gywrSOZdNbg`s}{5pN^->5HG#gI*P@6oKAJbV?PvA}6>Qq3kY^pF zl{yv{=vO*?ayzsQOY-wnF*)RDRm&xF+%d|WHyrbw2pN_D+lhXMRY3u09jcI}(WKyV z{T|k9u=xry{bngY6oar)fLpqQU8=Y9x68O_P}*FyHl}1i(-lIN6R}Rgle9ewbW=-`zS_}x-b7;3!bh`4>X7gg!G>gC9FU}>c#3`h-6hkp zX?{htn48plh`R*ak@%mpW#=LeoRWT(TnkLuPAo!c^;NC=Um-6l(Ee?e%%b5~bF_~M3KDvD$E*W`Q zM*Ac#%T9Pydfk<*UF5W-@KpwOSG{Hte5Y!WNK z?3#^*RtKtXqq=qzmVTdZ|CKy{(9Wv}h+_^ZR4iA=RCyTNki7MOKOEuriC0Oi91hi2 z)hO{)YoP|}`Nc!}n~d|<&~$sW;E5iCbWL|%Xc*!;E8^C?_y{g&u;GzkKc`#|JOOkj zUw>NCQsV88&m8Nf@{{)SF5=WGj`XWDei;xOycwc>isUN!#VEY+8SI6nX}53DCM~rR z$5fLx-r0E&eR10E0`h0}=T3U5V zo)cs-z1m=_CtC!gD)0$*kQ)`XkLyD=W;hUGcMHd>u?A7hLEy@;?6Ca^ftF%M7hr(^nx)AD%tEKjo&Z2Wwt* zlzm%-t~VssYQo9q$n|JT|1_$~X3Yb+S?Hahoxs%CH{wC#yb*yl4X^5A!dp2r`!0WTqp+S> zX%1c#tIEdEtQ}o3y_ilgFlYx?-Z`H`NRgB!vkN-Z0sMqND~q~3@Hh(K zC|xvssem=U(L$W3jdr-Al6@7HqLJMBN>XDxTs?uu3&k{;hMPDb&<={E<6AOBxKdRZ$dR0a}3HUP|31*>19 zovqM?_97ux?{+cOnn1vRfIoltQ`o0I?xA35Gd(&_UY4lNhuQ+4_VLP`%Lj+OeTM@P&dRxv)9+iClc;Dy;;sUVkHp)?> z2vU+~b`$z(2HNb_s5(9D=U%;KYRZuR^B9mcWIcM5M%L7+TA{oUqNY1U7t#%FD9o85 zwbb`Wlhio0VTL|H8cA&j#yf0Rc!c9gs8g6GU5tjTlCVAiQQfJ6Vz}K|H`ZD9RdruY z?$WB0^*fKjT_`3M6CKJc97M|n$Xd#H3(fW5YO|Bi;#HNmv%t+66H9+|dTyxUnPmL6 zgcT^UeK!&>(kqo)iys=_uscmPfkr$TwKPu@ZFqfDy7U3lK#r!3B*no8Y0y`u^SBA6 zgfw0}ii#h1lb{n4r2HT^p#kE95vxgd|?Bh>X=-kA9Ur=rAKZM}f_ZE$BbC+zN z!srM=-FwnJ2?QLEtb&a}0NOM;ya$e-!j<$up5$TZmsDoEpAi`(;yemWj9oqv)8AVST1d!rzp492yxHgvLEqFDfR97%J_wU$b>9|AgP-W)~ zyWT9dTBFzpaDdT-m;Rm=aYIhCazui8VX0wSL_|6bheKiD&V)n@I7qaqt_fWyuBC~i zc>yPCf&u}E_}|4B7g+1`Y*YwxphqUG+=)0Cm7k- zxwXDDwt>C>P{a}(yLsNqc`*FLRl*PY$J|{oF#DBjJNfk!kA#(|W%aBu`|Xi*p!jbI zh7>o!wbUJOr6qJM!cBvva#QAdtaHk!MVaVMKDa3oCt;@H~hAmSuQk~^=X0YL%P zDA0;T*2jFTy)^S)Kcy3}Hl@lQUP+spq4V#>ynz~E<8S?9$6<>6$8_C{O{caAX-V}f zFr)27l;T`(wG=mi7HOI0fPr+_hv)Pf{dRc1zN%FS8=ki(m53j}`*E_Qe+1ZIZcS z9hb3mn$w*n8qoqGzKKM6d5@Zq+;|@Annj#Ybe|!`C^RSB(o#Kc-OJqWe)G5?lE1m7 z6kZqETB*yMI+TCX_G}Y6p>)hEK~H(h^*^K;AbK9)vDBbI*<>GE zL6Vp=7ZHc51p9UU^4v*{?@1XD5azsnO3`>pfKaBaHTfjX_$gXOFD4N}7k-B-|AV~y z8zMN>@S|R7zL*v*_y%a1THOD)CW!Wp@zCU|S&7)8e}Ev_WNTZjuZ^+GcVkO_>HQq! zZDyySZ2y#JmWTarW;ZXBCwO6ZvxVA1CK>-X^38~Ge#$651}uO&Ok9pfU0oG8%x#0y zKWNk%&$2Oh3GDW`IJtcbec(G$Xf_wZP0vjN6HAwcyYtg?*ntnMji)M7R`T-_xV=|o zf*HD zes2`njZ@Fch*u5sXWRgHk%Kq>VF0AObW;F-T_3Z%m?2cftK}j8QsBR??=qP+D%5i5 z28UWkio+CrI7^rAbHU~nZtGCxdrW%frMu?2{YwL5C;DQJb&-xYmo#@@u5Ss=qS*ot zpC0?0i!qj(khlnFmce{%W$9|cSI1Fq@Hj(g4Kxn{u-yVG93mBTg*2BX_hcmuad2&V z*K^c~5Y3&-#(z1kly?%Oh!HtZ zdG<(Un%yeR-dm8-iLaqI9eXD25T`25u-ZtfcafSZnmEy?`DJXHz}VZAuCbs&KgmS- zJ8dTK&bK?y=XzqGVz4}QXxN^zb$OG%%5?XRGPr=NPr1@+7?AA1G0_Lr5H53BiFvh4 zx#udjR^ONvnOti6;?z0pE^bRYpfzhly$ub;(4yrOg{b6#v+btOotZbNDqtZU6$*QJ zz9*E0+k+3`yhGnI=LO%NP9QjR#Y;RMI8NA4?_fP{gR)I~ahWtK!p@$)slV z&P$6- z(WN_qmkE4{p@(j}7??5#Zy3j#x%>(Avb`&b2*(S_a8>Q9u*Q92K^bw;J+qbTgb#Xe z3|%m4aUYHZp|Sq_O3jHTCVS$#$VH>x>Ek>nT|vWSX=pl`Q%glq5u9Zxbr)~)^ zDIlR$h>DvOY>w?Z_H)v))38EPmd*ANG*E<;wR*tuz2vgjd-71G{xx+Fqtx9{`#S=S zAn@U)5lq1Gggd|HI$eXfKYBw(gG{h-UX zHIiEiFW;9e0lqXXzd5tc+~Swbs+AR|*!_b9|Ht?)-U?TAmqA?*;}q^SU`}BTbIWeE zIdbX9wWv&SP>>L{zMHo1W$aRIh-O@Slv8V6L#gV)v5Z_3W5GV8! z4ZKs8J&&GrOyeyKmJ0Q$6BCd*m=5ddQ>Vmxz#t9vt_m_0Ve^L49sWW8F&4~2D-FG* zjGman{P+Owc&UWOUsW_o_)NsC)D7z3M}rp*UX`f^q&rc{mo~}r5~oXpnW@$~#iIkm zI3~Xwdc2@a04w9?-=*!8H3ChIb1dfN+!*Lfxbjz5Am-ssju3?;tiR=IQh2pfkw#U# zFm#<5Ss-0dV}zf&-;nUM`M4jbzuEcXWf{YWXf1H(s&}Zdi_3C?O=-Bwi_)t?jelN` z1-fXQN}*eDop8_W7S8LnabDuYn>Si;q@p*dw_9V5x$rs6oZeA6_h}ILe8sw0KZG1o zeu6Zpft6s)KIBe9g(FnUirWY+iu|Un$LYT8@Sh5sLUhKKfbSB%KdrQ_KDnizb3xwc z3wAA5X7EPobYS_AITp?8=$k`@Ugjk-Mq8QJP;$P!Ps4`GX6Sk1MBzkL^RWibrwZsu z2?(rDkY;6v>o@rZd}ya}auK)3Ga?p4Sq9bAH=z1|&@g6ji++{p!@Uz%EhD(EMi0p} zhG-Jx@Xv)nkH1Y*_VI%{+VaW=6;Uz4ClkuXE}f0@GCs*^!rWr%@DGfBPmvvqnsG4|I+4ylD=w$)y+8OtUcMFMyPyj3ZGYj z1QPbHVCXWU>Do$kFx&hV$Axu}YQm|KIxiQKh!2q&s%?dQdwB#MUcil1OGA+%jb<@S zM!#4%6_usrhu|z!aS2Hmkn?^9LB0M7+#U!L^UvGSy~Zr$LEy)YBh z!KKyo{CChlkzE{LI6fnH9HBfqGXsspL%zU#GQ0(UD2=nEsR&T{oi%Z6QYQP-V-H;B z15DihY0H+FgCsp=zg9!UTmbn6EXY zY9|oJLQT%;!@tLdfne*aVt?CxmC`I~k+U(hUU!w-3R<#NM! zG}FyWTWw5Gh&ZoO$$svfy{|3d8M66tXPwClC4OIFp&%q2^#tz2EP_8J=9m+>nvwKO zZ?2a)8OCV(b`u+XnJI`Q*{NqIHBPJ7ol~xtKT{3n8yI$0X{6!Q=|`v*RH*2eF+V}5 zM;=ePF5;ygJuRnA-$IhdXjQXtHK;*g!xg(J_{#{S1hh>*f0KIBT$0}|Vv6bjFUJ8m zcCa55eIk7nS-6Rc_|Xd>1JxcWdCDh@**u8XWapxfkamju9?b!2+_Em3uUHGyz)gU5 zekr$xZgJjVyuM5#k$H_*fQ!}H!tIO4!Pli<>jeE2*@v5IjCMWH+t*{!I%)~X&-kdl z9)Z|-29tFtWXh5cs;LaJxMGe$*i{u$^dUq(Ee$xwTaDy z_RouiA^8lrBn#Z*9gwoTTJ zt{VaosVy*ASfAg`E*7~LuM3V8*uDwe94D}_xB!OTl=DG2cB;T1 zm^TM!!bd?H^E! zSyW4Ack~;%CbL1*m6%%BAW)&pnp+`({Nvo1J*c|^Iw-Ihfb;>TM8}7dmL@G$*+l_E zD1xO%IbQsidYOf8A;%uEB70eVXHfv_V}KsO13S<*4V$iqie(OyG(C`mX9IwqOof4f zX~QDl?lF?ug4$Vcm!9Xn9Y=Rv{LZV`*Wy*)>Sg&cZ^$_e9{EvD=^3~T;0bP56ocGN zaBNcIce^}*Ltb0ubbDrb477;>!{vfR!L@KsX$w_p5Ijup1rO)i>X^!3kkRyFz(~~5 zQ_~bKjUQHYT2=Dvf|KBb>|>qvfJEj8f*q&Zs4<%-RfBQ&)(qyeWHVo$2}i?B4M~(+2cJ z;t$M;O5|ocHGQylJsn3s%hTHHd4G3)%=H%^V}o{3vA8!h1Gcnx0>O)RYbJ~dM=FWH z^FT-pC*YKpQI(myNub1VUG=Ti9S*=hn@1wfIt5S*`A`TcrxE+eEV`~%UA|PtPHyR2 zq!!N?`r3r(nHf6%Ph)$OPTe*rEm7M%D4$2ah8|gv{1lpLHjycXGXp61tbLKu2{0nL znJ9ejFr2^+_LK(CqR>Z&US{!b6Yc-Cj@COQoV^nR4@FfrTPb%p;Cf~4Zuj>7ZTy+` z)G--A2${96F8vx`$5d^Hu7l%%U>|j?)U{FnEsaAS0iDTejg#hS`M_--!Vn*RS{i}I z>}Zd=dkWx21OK|7`H2~{N^7^d%8t(-AcT~V9;iJ9oN-a#vM87n0C?U}TH4Rw9L|7G z-O2Rui%U@UwtC^mEKIM2T%AoMVaNJQX1*{*b!#zLn|WcnE_SEEJJ6t5T2eWs9P%Ut z=T&sAsy;Vu?wBphvJ8bTBdrmngS)&Lwb)K91vZP79e#kDxL_^Uf0G&Ht8AnN6!qG* z9JPMLZ0PcBIF=qi!?|y7Kmsnp+AGanSnnM5x1;t`)Tu#Jn#MDlLMcyq^d61Zjsa}n zBPRP7cik$s;T`r5#T#vxzrX1uEC6PweN{_E=*Ke25)hV_^Jd?-`%XVXUibwE44bS1 zQe(S;xFv1SDEo^pl4+#YoeQ7=dP(ZH+Tv3zwpni4=H}w*Y2e-#=M%6;RLl5Gd;|mU z(27$n+5Y}ElSlB#f=MIYqA+T$s{$Rg{r;ONbfE!gd3|i4P}`r>)R;^EiA8;^mK+dx zcl;DH{si#S&rOfQ;@oPcR8Ev3B7S#trtDvag}2#M3?&^;`!Qo649V)MHr*1UL68&8 zImRF&{#7GMjSuqZeb)%LB^`u~P1H}#b6p-MgDL%=CZ|w37!H&|d()Y*jYbReX%08& z;y{#X>60Zh^T-oVQE*cFXVyECv`8&WT}QPNi|Aw2t{*c{guNt>CS-c9v&;V=3O$w# zOF>U;4`qFuZOeXx3B!>I2h4rVZ5rX2JkA`mqJ_ZNuk7TI>PEl4Y60wuDdk|*gaV#- z&za3yi&T2IAsc9+qgenc{}9LDoRw9^{H=k4TH(p=aX6zYrJ+^22S0?gp-&mn5M5*v zDc}=cDn(!^&6Q^TNT-w>c^HsffF1ax00p$VNL0X%gQ+`?rv?Q|}&ELRm*GAZ`w8mans z+EbG3k+_op(d zQHGEra|p|{CZ;M$2ccv=sSC@8dnyNA=j$;r24lm45t4-&yJOhOZ&;ed1M2vhFKZiT ze(n>(U;k8LbsH-{zM~q`J&QA~yds8|2r{;uCoa90keHSm(ZMZPm|~=}FMZV_Rz{5bCz@W2ZeIT+=ruwU)7cZK?1L zC$|vGqLK|sFt}1^CUN$0$MkFpdxH_<5i$0QKyA@s(m|)^)LM8zF8mGDmR-f^ZELm0 zI(^aT-`8&!A)OtjUw?W#c`j5RI0W^*wL<>o{hxk|2{Pz zvkt;I? zKh$^341c)yGk){;7-rSUYNf@ZlGgAK*MPxyw0OMlIv|}!`}ux{HwH}7KcTNB zZtF!Pb9b}kmlowfWYOf-6dsFO#s8rr3XsnHY7B@>1l~IJ=qLIm@K;*_k20S@MC{*O z4;{cx?)ul4)Ucj`uE}<+*t<#Knp2wz) z)rL%Y94N9%yHtTN(H(6!oLWX-Qyc%RvR~ow0ED@D1WmFMU@>nNQa_Scx+{V{=4-|Y z%6lLM`F_Hve_S$;#EM;Uz1%o@C%py>I7sT^?g`O11gCL{z<**>kc4nEZVXzkYHlxr z@P1snaLxNO#V7NbTf?A?W>xQ(OIzcmieyVLZpY%fLrNns4Zh>y;I#Q*f__(MGP~`; zFR#^ARu4SBXt#cZRuT?#8;ctviqvOAo^tgHI{0Uv6ZTK0FcZ0HC~Dvy`XvKH4ZF(k z={~>_2T|x#N(QIdTITFQjz#_$-To5B)t=s_S)bFoe1fN?#tW+%+;cHkk^#8?>~OFF zrGIivJ*b`OA?%}yyk>=nxH5>Ta=z76R|ZMg;|15jC~wi3a#vtvs0%J8>jQU5)V9$6 z5PrI!Ah4yv=2m|LNG+k4MJ{=ENn~&hSJ~Jor!iGi&g&ZURF}n&nvu}wY__g^W|81) zynvb+M+&%pbiGt)(-S~QI14Q^JG>rI?>AeB!)7nOYgmn(?q$6uhHq?t5@oWrF!JxTUmkoGtY*SHf7*du%O^5|JF%^c44B zI#jTx5{8eH6Yp1?g99RCL70J*PK`USf|P7x9!SH<$qvE^qwYf?vzhNXpZ41_uNc;v z-nrw+6FIr*b}AxErS;2S1m~XX5p(<=(MgVTVGOJPMP%b0ss&cuNY^BzaHnriRl|1e zqiqE@;N?siCC=HJVve}sp^(ySd3p2`a{f+!T-inm(PBD2`42wp43Gl@AYefd}^Pq_6TkB2jl#pqKE_Y&2*nZ@??U&Ty&;J1R4h;-ep+_l`suOB*zd2mN z=m&Pyi(tl-gz`Syf${^HWKtjPpqJe0#%k92g;u)6+aWbiKS&06qAygGu~eO(&grqG42-_SyMu8ZuI-&i;i&FwG%?E57ulBk|r| zjDC&h?8EP{*hr|)fWJ0b%dOHXLZrkxbTll^Qvx=yMlkw-ViBTQt@AHLXhA_6d!WBv zjQ8c9Badz6O7*Zpud&G+9O0GWj>#72-l!peE?`3lTS@W3-o-$UZ0@6y_?eE#<9K7j zjT~S3KjWgNmAUy62gaH&*Fro7v!os8D0_Q{M3rl)k7G}#S*ybdXFZX&ZWJjVi96)G1 z0V6w^$2S!)&GtQ1OpJ{7vKz7o$HUiQ!*Kx-ycGEvXr_b9{d07s5l1(vQe*@)s7vLJ zf2_c?39z;Vr7@vjBH+G1Rd$y-Wl^LTA};V_ic8;zc)ga~&c4=zO2YY3*+R-OlJ&Oc zFwry^{5}E&DP{5;A3pnr)j7w_o70Z^V&f%_d@CC!zM5J{-hjAyA=(*da5MaLT&2O! z{N*4n#lq%3a5hUvKCld&(CMSg)|d6eq#-TW&!Y;G6805w_!%yVm!g9&EqIRH6h5y7#XIV;mPa9Xw_+6E zc9cejOkTqYR)J{= zRMST1`GN4|n4?ghS9cbt!7o~~QLp>UB-0j|1hj=kQ-{=bUOve|*L=c!z#i%h?$G3{ zUeP->xpZkV5z{$Yy-6ZlQ^;fss1JUnR>MMTO-x*R1AHsfb^9@143b{)iUn?4P`>{7 zp-YSJd=j_(7=#6l#9r^|`K&S_vd=5|am{GEt@5%Vq^JFc_J+5jBj;C2W)i`khC!-*|E%uuBoQp#|pf>=HcGT;94 z776Exj4wmv43xmkJy3S2%!HkW9Mju9-1cHj!p*D&0HUBSLFz}Rd|hQ`zjMxj?0pxw z-z8CJg{_xT$exl_kmR?fSimaqCAUY8u+#D|!g`e4Avn{>@{V!A@cEC?UnE!6sF}wm z8TiSTS$9gps65xPc>-s+W~IPUBP@UFIcR=O!?3%2nfPZmJAnLoKm*0GnIK6g+gf3s z;%4b$?dumfMi+P>x!FRxDFc(QweR0$ZF8tP-j=~3wj;r{iBTnmzN3&GrYH4qX*AER zdAve%+!(>-VSkRXdxQu7fsAm>DS$p(pjm;<&x=mpS9{;MG)X1JhJx7EBZocW5lm$? zsQhIqu2V}2dh92mEej}|$g*@X4<_+JW?~VBxI0Z4ariHL4c$j@Ln~c2{>`j}lt~*d zy{B|QTRx-$*i*_q1EWv^K#LInKD9=G$_;+0Xe!9PeK^2YL9=Sec|n_&PpYiv!K$QX z*x0-WdXAPCC zZFm}zXFk|^)yg`(x)!H;c=qVRJRO>@hmpg4urYyhT-<~IWCWct_d~(NjtKECv+F4L zd@Bx8YJhWJVAIp6bJxmQz8F>zPxH_i%Szp?+>>#4^uQ$Gk1kG_s@gnf7 zs#lRzR)faB43dy{n7T8ZHdZKD)BY$aF70Nb%#Gt5DG$Bl055#y$E%JtHGs<*=)QZu!RN4nlA$wgt0Pc{N|(CdH^Dn;vyg3y_uKaJ3LkrsR0(gk z4V2!Sn)Q&c;)BDq*JPb^l9$Zk4<^{~i~$~d{vh-Y=!tbw*>QlG@WWRW_^!@zFAUD=c`LcEqXZV_D*V(vB;85yKly#EA-s)U)0@nebku~CkjN$b z>?8i=HDp2D5NsVtN9W^isul)A)BIpRSTu1NxO4FxapyXijO#Uew5QyoGM`D$2^C3i z^+@H1tW)QcT7e(5V~WuA!wp9*zXdHj7sqK!vdV4#lC7egr6oznj8yf<3GSG ziSJoa`71xG7tw|g|05(OK6fPw)g>82f}D9-VxQNPztPdI_|F=Fmii&=9xghbM?%56 zOK!POj);)GQLjI^ymJ6~NWQ1XAqP8dpM!Vud*M0uIiCncxpK%}vY4MM1N?8QFw8xQ z8ioW}UO;v3Pi;jHa9az_EZsl|O~_S6-r>oFn{}{fx-r8K)PP|cARv5{z&jn3OHV@~ zSdr9uxC6Q7TpR^4FjdGW@d>=*okmG3v2KoV59D+~!4%Lz}yF``l3YE?yy3oe@pR;)EZPL^m}-6-&avtW z&0KDdoBpppL62A}-A5o;B$7>$zVge}MFDYq7zz`5ine;{O2*$0ZV_zqlMFBQCUQF~ zlDq1xA=+hLEgy?7S6ZsCG9y;nK1IJs{&vdp@S*-VAS!3uIqLp)uI{`x*YCf)dRSmm zVFebmc}(6B@Z*tfS4Mjcp3iWdaa?&ziG>irs_GLp%GhJsYrEijUYPIb=wlgHDan4> zU0oJt*VyXOJfp_Y;bC!iq{lIIAW( zcWYO&dKp^9iUyQu+1S`;hK7pS0b8j~6%9H@q`cL^uhS+WJv|K3L>-rQjh(MK#j7gS zF7`#p@P`7MKIS$u@=IX6QEO*e)G|gHgsC7+wah!gx25|^J<+o|OrG`*eUP-cWv~Ie zx$&owLCnALkK0x}zpZXk{oRt~uVgn9^Q04QSjT7tfy*DjBe_d!)G~mxS`u5370$Xy zOXC1xJauRmTDs}1ItD~MMgqKdPa!hBoQff>plZxKp-zm{RUAr`VdXx6j41x%!&+T6 zgxemzX<-1E0--vivhke$G$Wx{O z)I5C}&(Gg7^t9hQp!hzoT}f$%wJRkta%R)XDGN8Gxs_XEW41G!!@9`|CY)orLwJw8 zGD#&}OO{RtaINNCf}@epg+%RnF<>D$jD+BcLD4T7RRWOB2DF(ee~Gt!ZvFuoaw2?T z8@^eT#xhl`%5d7BtsG}J+4nMPM(#uM1fzFHFir$jSp%8S*E$Y#5b z6X7kHs>vpSlH5PzJQH}%z|K`1`7Pmx1HEJAE&h@{fJ5>X^(C>Ks=q{vazODdr`cPG zTUo&gv4TzNr#Lv0OCfaT!EirpRRX!&-vv0XLE8iwNS3n0shr~bc8kZ@M^x6=N9s%% zURY!0H?#jx_mw=(bgG~zl)w>ZI)SUQR5Yn^ARVyC;eaMtfuQB-WP8B2GGp?2;GZNQ z9$>IxaQd+!ds=5n8Y}pC;rQH~yTusXHkE1m^QL>2S2&LSA;3-0#w+tI3596Nwu=iQ}SOXZPtW zkA?*Lyy-CvyqcIcmWco8$Re=qX0B_dgKd;0K#I(x2B?Bstoh;2F|W5#b)93K`U}2^ zuV^;dE-k0)O#QB&-<;+yFTiTvuKk^*Gngb6;Pb0mR3JSF_J(8bu&PL+TNgbkPtuKZ zIcT$4LQ}n=koP3Xjn%K1bpQt)&bXQVwQ=nn%wURYSMXu*Z3$$mKRO68ojCWBdf|r*vIc3&_dLNj&Y4!ZCec_o z9cPVP-O!xww{gZG(vroC=v_HOTQ(=E8s`_~NdFV#Fg-+2Glg2U8Bd)k1LX}UUNmkI zaIs6B={WwELg22JcnJ2=+rxbOJhJ8}-ng}L6vMVYo6CauGYJ1&Ee|INauawULaY~a zE_0n}WuJj^fy zza)iQ*b||`+BGu)zPw~_e&287m_Ov+g4WJn9GC@lBsZ9j4H12TBEPRvs64=295>t$ zeZ*X*-ky~U6YL&TQhZQ0-X=3#QgBUy*i7GPvmtYPn!%+v@a?VOx#Gc+NMv_|Cx3-; z@mBeS3;XoQS(m^%p{B!-0Jdxcr|7;ZLAd4IjO7NbnmG<+YUU=PQ#5UD@pheJH5V!k z&Ap6Jp?BF>0B3^Z2tg(?=;W$Rw6VB=_~y_Ij6R>70HroztEBF|#h^Be4Ae-E9P5ze zKL2KmaxfrK`hHYSO}4+7e|Sz)X{0RW?bh`W-{CvTmB7V zqJhVlJm#VuEJyB3wNkGza~u#v12FH_!d+TfGrbWM$VKtrXAKyj^UEMwIgxD3+4ZP+ zw?Tu_4$U<5&Xd=h^)c9qjrmk>o82IArr2~yc$dy*Skqgq{{hj$W4Y``=-@TW++x7} z@GU+ygatR;2F_*1ER>91RnT}>5_+{ej8hU*I<_31$!$DsnHieANxPz=WRgNrnhmy! zrKfhcQ~ustYLdV#E4|BAR088xKbuxzoM=LaWeu4YIc2iMAfCiq)(EiFJM8o2!Ti`P zGn$#;XvQ~3gfREt!xg!OG3bW4TCwzJ5^4=Je52ym| zcH&yqQj;{SB6hfXb4QpTX5+(uvG`~)(HV{weezsiHI$02_*%<4Q3y4KUO@`xygk?N z08(Z?8FJ#a-{}>vR2FYEePhJHpeiLJ{h@}OXtP;d)h|Wk z2ka3#tkcI~7aT*i@G~AGru~HSb>97d2%3WxAy`^vu6vm#32jEut}M~)o2(`kw{85* z>+0tTlo%jdzvLdGb{42^UkZMrVYBBM@3gp~qdPENW55XL$(YQ<-2Q;U8-(enIv=zb zv1XFzqie50DTD&>g)-V-oqE)E(Rb@mQB@`PmY~2BVFija1|pSD+jqrha#`nysTo_X z^3CQhg;&!LGM(kU8(K#w%NtBohW96EoBC0raJ`;64M!^Du|$_ZH6o(~OHC#2%(PZ+C>ut9E_2N=XekUEJ0J8nl!S5BK`78HBDDZ-po0dA768=cndN+$_-RiYs#;nmAnG<0LZn-0out5Ao-gm)Df-+6 zOZ#*$_^*NF5+N|2LdGmQ&pmA#WRvkNvts*S!q zVZNJq0Rsy`@OBaV|Hz7Bgj8EoeEXzFrnwWle?;T>njSm6fmN}=IuK>zJ9QIWB}Lc2 zNaFa_Di~wTZftggX0W3k_NKMA-3Njjhwj%A>9DS6?&#`x7HJRQtYo+Sv&~ll^n{4i z%&M&EAjnPo`7axDv#Po`0fv+b_Mkypa6c)+d(;J{=}ub+k4PfDwCf&tCLCAhBezN& zOvYycm!MIg+huKRJ%=4Vtp)`Xs`LOSd8r_-ZAdmoN3)u={zIk;KNu1rj=1J(Q?o=H zQ%H7?3p~qIt#MlK(|{~OjZbY`=N69zufOD%14SC|;UeAj%+_k$NH5qk7XGjaHvg%$ zt@~}hINPO%*rMeJH=?S(AIt@sI2aZl9{^z77CQw^J2V$no}k0z11qEXy>Ld|BwSCA zZg;J8E_!RPZ!(mzvUX|4t9YSdT1gS1GiS4EI*IW$w9toAC5Tchj1sXJ@0@t53vlia zPUT23UXhem38i&cSr9FiFI9zH)NSnrL+XBu8t7#9v2xFI6{?dPf?d z3iLc?wk2XIB+3X#7w$Ee8yJ z%SSgrF!eF<97?#<-E_-CGC^YYNxuryPH0PTnHnP#-v+FI%^LOO^SAtHY{rQEXSv}v zmAB7RNY{TT%$lbh|FvCx_wMRAg6cQ^o1AsZSLK zyB|mpI*|_Gf^`xT4{J(2A`1S(&%^cqH8G2qUTgfSWEooP9RcKSx!~x}R^> z)4cpa9Mq*CbvuQ{qkC%Gr(=&uA0&n1I1Qa+(Znpz)o$f*=vTpQYt4 zh!9=72MrS7ktMYNGk}f}ar}ca1e0HR(~&jeQh6qF_M)2|4Qc;mN4t<&@;Td2Uy`!G z(OU;*r8Gt&*ms=6@XcR)?na$ilgwlIzV4eWb4imDw7L}rA>Z{V@fL%_r=6t zcl9Z){|#NN-ls^ok???khvbsO_aN!?Wx|&?qpC>v3iX@T1UuQH6*OrE*v2A0SR1sj zniS<>y=?a%L}OH>tH@pE_XO~hLe^@LnEm~+8Ij68#kHT7YZ>r%T` ziz~t;O32C~s~TYi@h>MX#@<+ZRhE}aWc5s+hZ zptP*DUaRy($kwUGGHENGh@9&P=$Gi!xU10?4Z_<{$z9_z%;Dj z&hRS10RKM#z~tI@)7JIlw#sHS2MqGXql^N$D>5G#UNHItoco^O6R3#4C3ivR6xXSj zH^|?6(-@XS!jsyH-b6}7cv#HbSm+3|EerAt)q`8(Kn@UJr&?2LUGP%1pY8tJ7Xdd1&oNf=DM1VeeN;%M==$Cs;Nm`Y+QO}nI2`A?L;m7}D1>UIqu}Vo*@)XcHn|-m)uu)|LK4_Er zfwM#GT_FPH0f_LUL8^v*oK%-8jZm_Yu z?a1WyD#v@e^=ML)ZjKJY8~J+G3r_t(fcG2*>c~Q`>QLEbVY9LR+(8Cp+;tywae)~H zfv(Ac{EP`MD!$#WfgL4mny2Dug$qRmxAo)xV1fu4L@Iw8N_~YyS6TmE1!%xS);;Ny zIB~z}%<`9*K>!%Ca+gd;?TV6WjlU6xt~~Xut}YtXS;Gd3Zn&`PL)&L~#1F!ki>2B6 zy}xOTVzsNi1sNErnDERDX~XKz*Be~bI85Xv<%&cp zJs%@2vAT!$z%2s7a^sryn6}$t;SWgz?#DA0)Vvg?@$GJO>MrUsH~>vKgVH>klzm$3 zb%_+#kJaj~0{d4^sXhJ;R84Ap`s3&N@{iRy9??L2&P4v5ixE*Ai3D8a`10DB@+blq zZLKKyX7uE$N~os9VQE#fH&uitTXNPV7@X~)`204pz(@091{}g&3;rV!%Jl3@yz3Pe z#txy%@iTc&J&mXx{6H#c)(Q}L=L-s$6BBaw!gg%63wKO(Qlo`Poy3Mav6|=xK>^k^v zPKL9If@VnVg_m1;(b22s#Lu^vV)Ocd#sf^cDw_5nqu&G+$&(D+~c&J7-H&mC^1=&pzo&c*7@)yRQyZWU)O?fw7`te+QoU+G$-s zeCBOd^;z~G3bfp9$F66x?7of{bn=cBsHulJegO1G4};XEON2Wd4RoutBu5O4H?%nL zF0m2Qh$`|9L!_wPzVZ)w2-3OPG{4^yCBTTuEwVJ$iLEHmGVe-+PqFrGa&s|l_W*hUovX0QX!PnlGvfiMd% z7JT}&8co8xceT^xf7U5>F{HcO;7x2dbF%c%5^2p!M5dPIIN0r zDYB0wpvDg1NHIbvCSN5gr2#shsqrPo`KMjGRe0xON(p-H zwauGX%3)i-ruAdQc{`)f;?v~i{@v)weyFWhMdtiXOJ z58uZ$F>0{gD}ROOMWj~PN#0iXL}n=+%H9{NVYKw1WasPkswBS_3C1UdscJAokT)54+^%o;0N5lLV;PZC4P>d6c95Z}GT^0;+T{M~ z&t&*uPS*Fk{=N<1T~OiPG4dFck8`Yg$Uql3Saf+lmFgF{*^6xh3dFO|`hkD#m7I034jsBYgdS74 z`O!7+(SK!IK6{jleTWop*P_z1{_`h?JQlD_n^&fi2# zj{9DiSh#==vxoF1EY&;Xk8Xh3nx-N^C5nMUni~Z=i^N#?Ijxo1AUUSc7RMrE%k5wy z%G}3bOQ8u*6HTz=^IYgpX=r^D>-i1%uiBwztW_1Dm?Be81c1sm^i$SSx9+HF2xVm| zYfxw9+SZDBdH4y>d$r0B8M_^})ymF!Iv3vC=_>cvE6s0}a zN!UXLJZ{dTY_&CAFx>^J2~OeiH`yu-Z8U-GFqg*yWtubYFX|uJm9R$FZ<&nFz5bMf0+pmp{t@kvpl~AkWh6 z(^Br%$H-OLQ`gO--DXUv2%l6;CtPk=xJ7As*9Vo(kq}-rJbe4fO?Q2Tc3`xbC~2Xm zaI9l?Zl4p~87YS&UkVY#|AufP72^Aunp8Nmt*DsbL_yv!bkbgqMy#1ZeIGLR7Q566xA@CCAb`_2xl9!aJQuD`M_ksn|1To-0dmaM3xa39mKza0Ia?stl4DpGipcd-PZ=20}1|CnYg5g`YJBGhNcrZ zf~I!6#QiKY-vy6&qYV2qb3LuE$ikU=M6*{@>#7@dvvU;&<#-)3Gt{Y1%1$>zjXSFg8M9PxHeoQKtCjE5Xgs?svzN zd9o1d$y6Ig9|Z##7ZOutKIV$FF*XT0s;e|g4%S!ybKZt^Zq^4q{i4pRGTll(AGAl) zNpbvz4Y>T9a4T6BfcH;JHtg%Lm1dk+rx)7&$p>F-VSK0;beBdp^Eh*Bon4>Jve7s5 zGOI`xHLk9~-q_lxY`iNO$eQ4NxE%y2y#ZPF5888M>PP8@y=4+y>VhTK>i=RRFoXBB_ z6z{}Z+(|MMvVubw_gZUMtD3{VQ+{oZKgCX&YDt@F9AJ1Hsx(7SC@vWzdi1?2zri9^!Nu$Mnu=%h%A zlX(v0!XIyeXDjzJFrqO~Z2rWu6m6vMfwUu3}2q1$>TGm2RD8WGxCW}fpomS*Z^Smt!6A+QY6PVNz zD_`#*nhTPyMR<~=aVK*$MF*6|ZDf-FWU#`e3%P=v6SBca&Ele5&S@+on#Ezikl1H`joa;6XG+5m&WD3H-sx>3xP7tLm~ppGsR5%-|c< zX&fWXk$t*Df9!)(_=aP&%2^35FLj&UOotsWQw6my(85 z+$-M-h9j8d&mVW#!6#%JNqF{JZm^$)lp?FPI$ak^XaKV$C}c^NbQ>P&+{^fg5gNnu ziu`oGs6+oYi~J}`V}NxChpn@Nxq&ikFb79vq0HQUs!NLR_e`ar%B*CwFew7lSCO3r z&7T)txZA(faqVaRd+3^wd!P2b-CLB%GiQZT)$KK4H0rTO9}Md+rT223nuLPW#Tkkm zam>OPt^<3OXpEhN8gF$WLP9_N$%bN<;-WNOH?OK6>eLO^Y6++35HK4MX9^s9qRP_M zQR9rKdLsT6sRJSmh{Si%;IBMheq8vU|7ymon`Lji0?2xl-}qPU33YeQrsDieY=2Zz zlsE6v+fmyXf^RdPnLhV-hi|ccZd^GP9Zj1Vx{Buq>435K&*ULZNEaRDufL?VQI$pQ za#Y8poiNJMhF;Iwd6n*5eL3+uHAeG5k;%^YY{{ghev$@nx<1(vCcULdmSz-@Cv&)q zHI-Y9+DmP3i+qb|zmfV2uG#NQDb?6F@)LF8RNUV)Q?nO-@{u*(9s#A@W5x0X%~0f# z2Oka1?+#XSA*DMyORQ1_y?6So_1A{2A6N$f1oVBI2UNJX;oUXPcN9(LZy) zd*hvZFzE9PpFuvNCf#Q^Q#V}VJD_2oHsaWySl`#lHybUX7Bb~kx_EhEBu7}bmdpMZ zM}s48-{_@GRiNIKj8TM}~=s6OfqB;k$+MC3X2Ra4h4u|Vm`J*|5t$k`k?Mt7y)t8wQ4a3`BUjiC!^M~i)z6! zIdlCkBo+$&ss2k-_@(*mDeMM=*Vr1(@rrC87x>N9@x7@{sp9Rh3c&;{%#txpfQ+ml zb3Mu{Wq=_vV%npy?!0B}v85{^dbHSh0~Db`*ZdV|EnG-+0er}eVzO^h!wuMjqjE<) zVG?KpwCen_=m=r*@IdLz!RIkgSxa2?W$)nlV*6^+pp$e+ruXeWf%ZT&O^gv|K{RMt zFE;*#4)a*U33eZ*nw%BQjRT~k$_dQ)R}@i$Dmh7PU|CIk_J;X#VL`P`-I;!hm8OUq zI{F=r*OvUSUqebIgZz@4q&~TNko&ObP$#`PD#JUHH^L#6 z9FK|vw~mv5pw(YbesegUDI3Rr@xG-FBt@)+qdp zuyYatV42uyqmjd_8f4Msl^(}XrW~>i8e%*rf@nQeIbyQjc2xCR13ucv0F)!$`Uqor zC*r*_l}NKQ?ylnvkGaGz)z%o;K&Ex(G3Uc6OhB2djxF|nh_T%@GeB_feo$yjjNkeQlRJYGtj)A;DpA+n7;62Zv zv4dQXp|Um?-_d0abeP`5k9!?ULp?9+2`~Bp*RvYw?*Bi|2Q=To{p?`e?oIMiwk8U zPkkEK?B(dpVeuyt=6JXo=izt8Z#c>h^3)bq^+ShQ3by_pIDB4bW^p}hbAiZw!qYmX z0pA#x0aYuZ{DWW#Nc@?YcPRnp@I9|AFwmpk+vIhyhai=;%Sv1MJ6>Lt$Ibz_cu9Ub z^8yG*(L%Zm%`;_1RfC0Rq_xFXkVzk~)gw&=1+B78LR+K7|1P1k9*9f}d~N0GPidz$ z(<=LA;=`d-;cLrYrzu-em0FbdZqL+~(+D`)OXNrUySOjBV(NuH3vvNx z$mtZl?}v@jL%$N({1c&YNWg&E6aEwn;q$0>;dZ7$cbOF4c@+My}z}ZjaPah zkde88lhK-(yi*BCHv+hA*+1d-7xF+QJvZyqUPYl9TlpWjWuQD!-q&{&D>mUR*Mcn3 zCAspsoz|%O1>GYb9091b(W2RNqFYTYkz<`jIVsR~x#XQ2lpv1(UdV`?lqStDIq7GW z@t!*Qo)?8vF_d#0__uy#T3by8O&v9Tv0@vsJ_N%`Amt4&L=CB`o*T2KBkl*4JUp^3 z3bo;iGa{G2d0?z!0zAv$8kFp~^eU+B%R|qDFnzjvn2OUc>UM4T%zNt}J{yG1$)#v% z)2gciQL*H!Ofx6b;-D>k5(_s{2h!Kl%|X{zEWuLE@b*U`ksEr!Xd=9SYlhpwSR==1 z7&s2EV$A(;8QPEKTo}gMH|k1TguCE1iRNf4OdU6Q;>7I4jS0l6Qu{H1X;_BaS=en# z5Qm2XVfTEn{^I#66;NZ!4c5|8#8#7Dgu=ph0G>=%9EAM%ElU;|AodNew*~f}11j=A z@{)dDF>)F34Bp}#yN)LYm9}W826q7z!;B(w1i$UTiD9HfUE`s%h}Dr=P%W#-Y(+^* z!8f^%YCw3!XnpxF@(B?aW?{;vi}mIhJL9r3euL7&mj zECsynHT{CN2IL7w(mnCq8{Ket>%yzgkcH}Pb(siUYDH;dBR|wFBhD8owAK1!jwTgQ zwt}y!ySNAVHP>sPqv30IMGks66w6V#umsV!1X=MUp)&E#2SQtv@2A5yOO@whdRi(} zQi#iklU-ExAPoj4jI>g<3icozzbz6Xt+C_tQSNh7d~}DY^kSLZ*i!C)&NVr5Ru<9+ zhpa$Q&QRd~*p`1RWw1r=33jN9sU$QoK88(~`7oh|>Bu`(i`zx+2W%~bR>DpXDIA!~ zbC{iQ^?KU{B99fba`_!e+Zk9wCWF_M@Spo0}O zMpss?T@JCBUO(QsC4PR~qS8w`A_W`#_F!G~Rs<)BJN+Cy%;mO>zP0ozJ=rsdK_pQ* zSjNCQRY=cX1R|1Ch?B}rKrhMfSU!|tR-7m9KqdK*y@7kA0M7wa%iMK`&C zz-fM;Pon|o@P8wp6iOO|N#M&j;H=(wuPI>|I?x9%E0U3(*=c^cn;2_Fzx+}vj4ZG4 z6gIFO!X@02rc7AM7k?+PH7Q7K$>`*4Mz4t=dpXUlDCn^{AFDPd{&V7+>68a-pE6}P z*`BP#mE_%+GHS)DI)*|(SYZN1jqeK*zSSD`A9!w0B2WVmApMGRZY@Z@b_(1SyUGHW z4Q+ufg4vYgE#Eei^kg)q#j2LSkg&rnuw-1d`1b6F6?fdf+u@@pw*LlE6iq&nyxdO6nV~V=Y|BTYXjK81&2<&I1l~CpV&xz>Im8@f z7xeKr4yc8cwqgsYO=6bFDfHLlPp>nh1CQkcptcCr`AT~UPx`+}J5unyiPCl68?vAO z`<^G+f<@dFYyA6maBHVR5d?&ZV8wjC-5*4 zS}t8bE9eEn;_2wk++$WG>vzgjH^hAj-_cz~350HIg1l4A1BFeNQ+zA?I1AE){5B{oKGsB{uqouOmqD!7`!d`t!M8&x*0kw`#LkDKmN-^5xY(; zDtgk^p^cYUy9)01-)Sg9g#p6BBySQ9@*yH_cY!SBfQbH-5{kZHnfK@b=Brh>%7wLs zfu@+>6#X_qx{Wo(HLD>ny?&8edgepQZD8@{9|ce+0n)9=W*8JH7_`60ix3xvFmj9X zX7`7O16dx0V6?#|wlCd%;BRkvq)XiKbDLD5E}lYVK}k=lg`xL^%~2QQb1juZH!C?* z!$*r;@%qLO>$a%K^jOq_`__Ju&kuqP0{-jH32U&rhB*Fu2bo1G5mcj8jGugqrnpoF zW%LmjDSwFE_WAV~TS6f6wgqk|0JaB*fB4mf!D$M+Qfx*sA(mzuQX;D{n8RenBAq-C zP`^DFetZ52Dwt`~*M|&l2*`oJ{|;O9cd#R0cFCP%<=gP?$>9A5b%rO_a+eGLvRn+W zso4xkd@^5((as4nz|=xK_>z+0{?abLjAVXjL6ZX~sPNevFhO(b$qcuJ(dg}GB^+@p z_0?wHU74COPu|SRtg)=w&yqiXDX_}YocDNAl;2i)-LH^jFThOA8oB7wJ*bPqMZ5Fv z+r?RZlZLnNGY`hN${I+wf>Z!p@&^amrHXUS!b5qdC__-nGuP}=s40#mGJU051KJB@SobU6MlcW#fGW71obMXfs+OOj1~3U zuqW(z={&|!YjN-JPSJo(P-2vC(gnH5=(STTjhRI?%Q&}*I8a7BPKWH#XNeWIjU z>I->wW8Fe!CupWsGK4Dyx4nvSI{OAQN0_OdI$5JUhu5MO9$$O=kY@tW$Ee!JzTO=KcIX{t(H7k{pi`U8J=TC59LdGg`Zqr4k zk>`t54-q*tt2J)9HZj@Po9x$L1}VA`FB4Vgt!#wh`2n?+oa$U=MbML7t{o=PZEC*a zn7%{FL{klhE(^eW=U&~vRpvd{!L%_C9VW}*r>KTssq|)4snmVDNua#UFSs2*rYsmDG^@0m6I%w27TXb4y13}UP@!5-d zkV6a)%I_K#7ctk^O&281>oMxNw>49^;;aNDq#>p$y|d+=iO-N)4^^J+x`>VNtGaK9t8VuOibvD9FX-q++*h}bq0xusn11N+7mE%Q4Rx6|uD;vZoyHhC78_AF# zCr|q~v`kGjQBYA0B8m|2m0dHW!PR~_90Xuz2;!H0@Vf9bQ;ve&Dg>=9d=?i#E#M=% zHjD=ozVkeMNeRIy)=bo>R+p`f{r|b+66{vm&@LFO{>{w8kDDcY5FQK$2WnVPS>c+? z7Js$a>bJ*Y8O*8_AAKFmX0=1ZVDIwCxt^cI74iuOUM2~RYokGqclkE)hER38+;0_o znI=Y*Kl!@g@J5@S&%jwVA&dDAoh97YbPQW4xZo`o!o!t&$i=@$9l*3m>rX*)t%@co zdR7JW8HqRMM~x%o+m_dSe;Ho6^^<40CMCb4dEJQftaQ7XCJ}s-$zoebvNn@vE702m zyAf1}f`59rLP{m6u>^jE6+}-qmJg%QJQ9&Ssns^RB*!@Rma8f^_tWB4hJYo4D?%+u ztW(AofbP<*#ZPlC7BKaM*`B>+?nWf61RWSu_5R@yEn1r(UxqFWkw z`lMmN=Ve{I_ytGIS5e`vdSvBN`dn#dVIkyP{`phyDi1yL^9deSIye*0)l!z_7wQ(^ zj29GB^%Jl{!!+lIIraE`2?cX?m-NNa5~W!M>S?RL0`_ell3G zYfCEcgvCEEJKs#+Iie@P>%VCDmb=d(Lwvq|e5xpJtD8b!Ugb<=kBH)Lr8-SJBfjJV@Yl<*&ISJ4lXmS2w zT#o2ps*e)GpbF&G8M#IU)bCm1aw&9Viqv!?$w-c^aG7-^#cnq&Ye<(Q15VzJDo|RW zch0FTc^uvsW{{}Q!;g7CyhB}@&%&59rg9a|4&eC5yzFP{Sn2P;SEq0*#H-s9-WV{U zH=E}4$4y3*i@ttixQ|18hW-oPcWdb+fbekivcXB#7a?UxK5jM%7JVOMz*BAw4K+!W z@+s#m&HBW8bS8stPnNvJWQvC;n&W|+my9s_-~+N3h)Lsn);%%1k5Z*Lm2pATTC5b_ zINs1+OoB;+3D47BNH3&&qbjlT!z#Hy$ku*8^o*%KK78L3CNt>87iQ^nf)lbS$x;D& zF})TdfczCa6E-jk>-43JyYBFHgnpW8jTnoI-Y_IYzN*-xwk*q3!;+ z2Dvku23%bVy~k~30l;35uy!@80V>V$7K+59U8$oooSi|cg|a2UIc+j)t{V7hMA^0>F2t6>Wn=Sq?fFrZaP zV72n^T@DwQRW%X&-=9_@% zZLS#&mF2AUVAplz6Z7>ol9r_KY&XvB#+j%+T2uz2NZ_tv{pCQq=Yo9^I1%^tA6f1O zW-_nWKr_W+ z8ZghssL+-n9|o-zMXZ!$6I)&!1Jf~lCM@*qUg$z>OC+__!<>2CDXb8u4@U=|H_@#+ zu2!&IPfzdR`icD9y)G%}qF36^c85V>?`jsm zCxzJ<+H>+kc_>-(a3Hep;m!3CIQ_ng>yYvrmzX}MryVTR6UE;|?htz?;9f9`-95N_ zLk`mgjF$8gy;mMsPT_)Azpypa&RjgFEq_7Gkc;8nIp}ig!>KnSRE>k-oi|Kl=h3a7 zGF-Ucn#!=$ZGH~v8_l#}eVXEA62`gOV+%nkN+(AEhea6uyI=@!kV{!T(9xX&ioD9e z27KSYCsi*3(lM*^$DLj`nxU`eql(K1K2U4^H#r!2u>8p>r+MWw1-=JGj$E^JChQ?@ z0agr;HW+2KrMp0Y;rFiu3QEE-8h+H>*1Z#3$PYgBZL0B#r5db#B5sxYsOq671@CJ$`ksZ*4vIt z3418MXoJ>C1f9e;G&TW1YgsE=Jd$%p%R1o21X{XgL$~DjV^*|SC7Hk_g3?OpTh2vZ zitMfRHM^nOD}@LN{Wb+o_bK1Xum#Ei&^32d+YK=@xBXgn{va`Q!vS5xemYAen=*79 zZcNdjVYTFfV^&9e8?&y=cE+?h3qJX2>H*an>|Tw=9s$^^;@* ze2R74>2m3Z9T%{U762}PmljD9IA>1g=!eA+_4?xM@>T?hw$-c4+j`z_RvNjxOc6@` zTgc=OSuK1mb$HkPw@;K9`hXBQNKH$jfu`MLS1h0s^S+QOV5*kMBdxU|b;cuapVJg3 z^OPYQ*cGiVY2p!!w&r&Qk{KErx>|@X*Q>^-yd73DbdQz?Ws}d&w$8;iq>x7%0*!X6 z7>DgBsNYnClH`~XN}5{gMCbi}k3FDoUs{W?6jKA#5=qb&=^MN=yhIwvA|6*k8cD7~ zImTkCf>uG`T8%$mlQHMi_l8NM#p9kvgVC-AitmYFYEK;+ zQ;BhsbUgi{Is*OdDm|uh5pY`*{zXz|mu~#8QnG{rFO1(pDYCvPvs#v-lkIRZHu(Ah z>EO)$sQ5p@)|m`w4CI8v`&Vtn2&kiSs3Qy3OnVmHNtz>g*NRb*PL*D>W!beZ1nN!3{=jvhKZ~bz88i$d05ZB&;38^L|%lqos7UgN}@!V-?_yjfxqU=3| zKz!caMYkVc{@cupUFLgTCPlw_h)zVs7SG3GDaazG&d!ck8}c*}k7omaR(knF&DCcPnVanZ(e$FtDPR zKN>m+(_omRo0Llz<0x>l^%asf{6Zm8FO9J4!!OJuXKc|-D@(()87t{1^nW9Td-nDoWV2K*7$^7pOVQ-A1U&_uWp)_prL>l9^dFW&TH>u|M##DpK_oQWp~e`bH3 zB3a_i7elL%+231$dktJ!l^YAw$$h4?G16eh7c2f4Q1n1=#;`xZ-xbh~ps>UC z1UH}E(PC;SbYvkc!uVH*lhT{ErU)7V46-nUIo61HtiyE5?vz{kqbPiJ?2_>gXWvEu z{XRo#i0=T)!@t2r{aNkg8D?e$3U2JuKtKjF5c)y83?e-+u*5Tyor3Z$DKp17#q5ga zU;3VLEsiIoEWBjbz2lQf71Rp6PvW}D$ zfXjliEi1VKP+pRi>(5h4Q+^Hvk(xoVN6nJQT&iDa15Jq=Y}w09mQ zW5A&`Pe>XyZseHfAa!v8q@1zX49S$nYIGLfX1_Iu?31L)Q06V zM=Z%gv@7ur0!NdFmWCi^ZYU?CtdwDiJRLa=YgwyPg>_a10@v3En?Pcgn%OV%nq?29 zO`m;zDQcprUpLo+D1Y*PzL}GI&|aCZLxR|SH?@O(?i3Dwpi#6ot zsD0w5>(OD8P0NWx$I!hB+&zA6tRsp?0qTGVF5EUcqh_}q#K|F=|C_c7A~_d}>p@6S z`75{O{8-%L?;{Fu`g7(&+Cwp?T73uYxhC=GHQg7Ogpx?p=+s9CRSTT;itPN&CGtYf z)Z|P0kT0r+2}wTUYUfj#c%r5gUoQcHL&tmH z17K4cxphIXz5_$Mk>*0MTJ&xh%Zd!mn~E{6nTFq0sVdxHij(%YZDbXVF;sPRc#>_@ zaG$SD6xG97W(mbGTehqTmm_EGhKw$a2&4LdI#kSJDG4GR>Kf8@6Af_vK`*pB;RP@U z`3z71n^@H|nl@^b!Jk&eQ6KD4L$hk;isne=EvZ=}y>gddSE+ryG@xp_%2Q4wFGLO> z7$92C!WZu*m^WHcJEv1rh<~j45+g5Jj*ED0-P#fuDG%FUbtiqOW$c+Fn$F5M$;5G; z0OhP81(ZR#h3l-M;#wPbJwd`yn`uz^3jD7AK8rO23ShK1g;L8RiApm?LSA{HA2{L` zwzm(vG+MnM1|ekTPv0}9mxtry>Z7RdpQ6XYdk-ZhE?uDXT6S-*V;e&W zS37!=JM9<(4@K+<%K77i{-b9Nx8Wn&Gn!!PJg8>wDFe4l+T3=qzW))jmmCgV)SpRN zhUpjT;k)=pF9%TqD@441k6!AS{BZ~tOKCQojZ!nk*%aVMuDez4W5RWH$$VF>ifn9Y z-2G7xH=q1Uqzg0`3tvl=C+P1PS>mE|fPv1ew5Q4L>PVJ9vBk%%I{w#2*gs44izGQc4X95 z#fsQI#3oTIrbA~Eh5AY3j92CW58=MH#YChf3M2+hsfW#F+(Ro-Tmcx`_v_%bIW)(K zIYzb!c|A5@ZP9=c;g3Dex=4t@ABQPxr(o!PAp^D)2}! zJ(*SErn!|4{>&^8h0TQY(SFS{e zJz|?3Sshnho({t{-xe41+Xc8wvUR(ppu*av0F@Bs$EuaO%kmETGsMQ5S%k-Wvb;M$b2c^791|j@KcK_ z#fZr?07bN81##BU4|4(?!&1;-vtZw8hk{V}7H6*^y$YxoX+E+o(I5V~y{uIe8sxn7 zbnNlmJ*(oXU%H$;JlgDIx5)^71y`i4YW3-Wm&SsJv0~Z6to{f1(Udb6RQk|BD(0AsY=c@E5)}m&i<2svP*NrWLNV($*JQk9Qy`zfr z?Erf1xe3)`40GvIl{ktQ%-|#{(&sU{U)D|kgwECa<7_c~^}P8@gq+B!c?Y)PA_ThK z3Q3uUmw<$l{U(bvQGGMAq;GtRV%)WFavxbyjaMwfkc#+p5*8>@@%RE_2fb6z02_Md zj67ZEqDZ|2DrcQMxCXx|W?iAWY1biH5rlNkMf;b>$`bBlMl@yhU=i=T9PTI|6G)uH zw3&us=RruCnaxQ@Wdx`skZksm>W))MUE2)E5GpSUyhA5%C!6Du7nHZ)F06gxsh(Iv%vmbI;+C{1TeB)JUTEi|tEKx1F$<#VL0;+}^l{ z(4EO(c4v|NAvYy@hHj}wj4Ia$wa~>P<-ir_V#Z0^NhGQ64qFf&ThX(KFjy@NKe$pybmk^k zTd9LeB?&0jWZC(GrSZz|elfW3vn`6In^Cc4_)u=Fy>dcb0`3H;jh;TacG0>Oe+329 zmW5NVxkRY_IRJsDp<>`I^=L=^)1*9OBqkb9Q{14B<0mq={5Lj$p3j2@vf<7~>*L%4L zxbcJA82G%{=Gn#S;u2YP^;UIofjmsL3pLNYHZ{VYVDPg-R;!(AomK7DNpq^sN&`&d zxN$21{fpaXv!75%4}y-v9XZ$)=FYJi*;SN7lOb-IK4F;-H?_=c!CkVx;^_SfM({mZ zyGKrExFL^3&&Ta2NF)9FbYc$NBACe-+_OKIInf%;N^SCjzb}DwLm+%C3y?3V6o^K4 zNIDTBdRMBoro&utFANWtK7q~2a1HXCumYo3WudlV(REY3x#aXCc6@aIkghk7g)aaW z905f_C?dS#mFzQp=1I2lO<;jMIagBBP&^c`yGWx1F0rHrx_QaUK!l7W;lEUm<44bJ^2HzQ0DlVpnA} zdO?ej)*VYhCUCOqoKB$AojwA5h>86Z09_Wym zWF-#ocnyg8R`xF77(?~p0AKljv#-`gem{;&Et5^MxSnInOht`4#RWN-Ig{4lzN2`O zuyp(j{UB_W%a8Q`<(~_+kgO>lb--<9R?x(up*3uI0HVw?X3#~lM(7l8d$FmQkHDkh zUWGE%GjL)MM@`CJJUzF(It((cH0k>c7OE@}!4q8os7$%ZZswCfBSHnYeB??W&d!!W z0TPytll9L+s^0nT<{9O!kcCdFj;hASs6m7$+^~|V4^N&vba`J)N^!y8h-Pj%Fl8?9 zj1q#L?}Gw!h6xd`0w%>hC`qCvCqDUAX;Z7UC&AAe* zC3{ibS}1)D5GpTqew1wRU&IwGua(K-PeuA3Y9+F7EcXpXy4$w;cU7h1QKD=5J>I|W z7UOnNamkq37GsPRKghNhkUr%50*hkRIifC?&jNfraW8WV0vI^h!fddXLT*DCgs}yN zyxhH_GJ5gx#weUg^a!}oHuJ(08HZgqhb$XvlADa!t22AGaw#SCvHOqmm~+$f&lv-kbh1Y(!m z(*!ZD)+I)x<@3f@d~19;2aNigFGXPAvpm5aFu#$$hV20(a@z_>mjO%9^4kF4Ob6(0 zV>A++6i^hEJ9R9tTuG77k!-(08h#{H;{<0C@a)dQ`~!WG@$@7drs#+Ydh@K)5-KOMX?1^+l$G1p(D~lzd$IF%REP=ZArt;&Sg4P09j`Dlo`qy*{1hq*vPT_eV*ZQ0RKM#z~Jy2e1i^qLkpe@p zf0)s7fcfjOK5%!yx}~r={T_BZC^JXhdjTOoVc90>$GG6cNdaWUIR9}%q_q9fuE_I{=`hTw2&GQ2y11=dAe z`E)}VsL%K>Q&8lZ6F-3F7?Ajt0NI%k8{wW{>t}4dj@VjBYh>WEtiLD}z##{ulMam# zWs-~`n~q)S=;y?BZfSHyj|rYcq;@Tkjt6Eo96=-6g^~)c?lTm{w0a*kFwa_)r@0Bk zusUPaE5gG<#oK6J#&DC+2z|2F=QsAYPMU}+nx@%7>jemQgTsyrFeI3X1zcmxfpgtgk|Uj z=w2y-|9F`m%&c41I^%R;${12ZZD*NkUj2n5HgN}lcXGy@611i#LUL3hJs}iI#eQQa z1VjaHC8EI|YSr5|w^))|kt1%rOG%2nBrcH_RT+vK9c9Y|@T@kx~}sOamVe-p|9 zSZ-re@)7i)_t`_^8x2JYE%IAS1`6Eqad`};Td7Y-2G7+hy%5-?o}Ft zU{*_vbKH}Wed9hu#(_fhGcm`O6_hsvGrN5(wmy6`ghl4@wiqX$4C37|r$?`qubZ*q z3>#E$Y_p-huH8%7nB(hV(QokC9y&yef_i79E=_JFnSNmMc~H1(8cfz>gSWKLyMEeE z%RF27$!k?<0)LFwcOhr1Epz`OWggJGl0%`3LQY@Zd+(TzK}FV<_GcC7M?~}-Or%BC ziEwi$+$+`hVu&q*OP8%8Q)iX-NxccQ6iwpnZVoVFm~akTl*u^>9h>Z;A)2scG_(JH zOsxtdFT`KigW1f0m&0R=g(koopw=k-$PeW+N{{lUndV{w+2g+4Ms1xocmvZw4kBI+ z`7W(pZ|!z0ug@(_SM9ipQkRFzD2QFcIwoXMbGl0%H~QN81J|g7Gy&w8NBHpqGBZDf zTn3**+5`CSyAUhuN>I*akzdJ?Dw1fK$B=G@GV|sv)QQs70U-T=-=eh6ZcSbVaq)`* zGC*|f+-V@SpRfUGoi%%i8DIs+nf1J4#C}9EO`&kkl~oOsiy~n@pBxj*y3W{j#kRnD zF+riAG>tGHM;^_N2nRO0vM8hl|F_vO=0W#El7d0G8+!5B%pi$iVFxn*a?uz`z;q6uq~>%BJEg z8W3g__I*!sUX{>?evRe$(?m)G68Ox&1ZrD;Vs&u`OdL+sQBNmskMfYHjbY*lii}M5 zL8|?M2qo3`IiWrQ2WtuSFw*dq{6LdzOS&bD5I(H_;H5Nxump&DNEsf6q}nOJWAl7# zW?<_n)+-`v<}_ZzheG~v336r#vgv0_zHYz~Z?JWBWi8Ep*nyyr*VB=xBhk!G z%#vHq0D7COx;>T7b`c-y#Ca32@D(Y|&IZ1l=jOIUFNqBT(3tZ|bie`#JBPAKHc`xaRRyi5(1mZ9xCF11RSCBC}0rW z8?k4h4Y;-J%NOmISCb;S%%%Nf4rO0SO@MQr%G)nXOl_3|f)_hYuVH|tqbbch{-6?M znM{WMATV;}p1PD38=mo$r34)y>KbVX8VMahLUh(yam~BZ@NFcG^}`e+IfEYO^f})v z=M$Wf>CRarW>7Xevkw&?;4ZwDfgKMGdCz zcPAc-#&;V~lEWbrU|Ej08f3~00_)B=|4z9kcVDRHFI-^FpUwWWGN+)jvJgmcXW}e~ z25#v^(3qxPNQ^6J9Ojna880YL>;TrLxXV5_(Fiw)WCO4Ced2@53H-6LFZnGp7AjsF z>US1z=R?)MAp&*9V=-_;pjb@^98y`g`!2KvXfuBDdrMfkosb2gYpKI2uo#o4ASS0V z*nU8GxraOtMTTXys5@~{pB|vyO3;FyFL1XGiZ@|n zNe5;fl0{#M@yB;EGLjR0ukDa16`(6(O~yW_`*79BbfFgN^iwW=(A5H*ktD7yj4m}s znyX0?EW4S|_<3R8Oyq5lA9ysCwh?sCHjTuv`Y!18gkT%AAUQ=PBKNQS0?1=%;a3qy z`#yCktzW8hikN&EBI!26E9z>t?~)2T)Q75SpQ#UXy4wXCcE1SNN&UbR?)JU*NE!|D z@K6m1Vx}hvFIWo)BkrGCW-`olG{J`-CMCakS3y57zW-%!%$(WsF*!Fs$t216vnmAy zO)sLVB-rQ_e(?9N0)9NN7zX|fB;=@d8%&Lh(RyZ@(4=4#fgpe)oMfs}|I<8err~1k zPSoNmGnRf*rnihRCDs=V8`fbRb6lIG)0G?+>;T z>YjTxh2%W$NP`JnrtjM1THbdV!Vk}+u&*`s(%_Io%RAJ0l)tzN}1Caa4FdSlQ4Nz@R=uRkAU3g^0oJbfBrc) z$|i&FNN3^`{^}4cJNIufVHmrnl{NzaZ^;2B4*KB0wYJd~!B_Be&vn-$-(sg=-~cQG zT*7oX6~+XGI4zUnqIB*uq4B>l$qp8mycSP;d^r7Ajtwz3){O?(;Wm zRNDRML-|dG-4zh+YD2xT*zZ`ciHKot6uO{GgP&0`Q9jz0YNP2Jc3%B(IMN2%B*fz! zxem3`^!@YHV~0Meq4=-#$N(LoGJ(j6^5KwJWqUO9;Dzu+WP96#H8F1NLDXJ`OyTuu z3TJL0V^%F20G0wke}$qS?ZWBNOUr9~<8pRR9~kQll8Cm*9GDv>=UJo>w_YAkVRt9kE0gcj7wRu%qo9 zCz+ShdyK-;oicic5_uc>cC0bLr4)qYs!3j*xgYK2`N1YreuC&DjY@Gbb;X@dq>I)HM$mc5=$vv z=F-%8GOT#0()fzP=-vK>GZR&+g3RTC#s-du00%-GOIkOZv@Jm8$f*Qsh?YISbQq|^ zy-gFuEpVMoHy@^S{9}weaF+`kdsTcHD#O;RT&SUHYv@d|okyaaFQOdLX2i$O;@Yr) zkzGuMfZ~GgRi)L#RQqD90`TVBm{4(V1b>O>by)2%t*g_fek zMFak@76Nem@j$zN{mAJJ=NH`1S>!ff!+UghZR?M7h z?02kMw@HJwr>$fJ>sKO>01ECfpG0wJ9$2{~#DV~cXBg!;_eV!)vpO?1fWY|Uy^nNj zK*m4Ws{QJ&pm~?dxTHedZx185e?4}l_fhlFm~tU4djJbGT#h_^F871!Uc1^}*1mww@tOm0R|-{TSw+Vsf&(ocG1Wd6nX9WBOg1 zJa#Gzy^B<}?PtuGh0Ol}WoMcHGj%{xH;SgJOIK&(dnpH13F_k_a33BQqC^xQ^0L0s zOJ9$tg(W$esK7pMMPye!%RaEdXg|qgxx@KjN}T^d%XX>+vT85(we8p}(uHM_X@HEh z1Zj6#get&GNu`aCU#5kTNG=HQD;tXE`m%z_y6T;qY;*@8^vxyR7UL$GXHfo5@&yIReo%_a>hQq59LjqR;+@P1nT_bDQn z#wrB;I+4JRwIe0#y5U$Yx#q%=&f5ddc>jy}b@|8Ec)de@ed(1ksI*QS*9^m0NOm(s zVMlO`!%Pd;T#@qTVtCQgNOsvs5t;5?BRk3gzHue4oXfd8!UT|4v^-w$S|6RRx~}{F z=er0F2_2XAaV8T_=pAzxZlh?H<7)nbrCpi&90bZPZhKwh*S9lsE_ZcYx#C5#)x9)q zKPF;^0+5ncQ0+^q3@o-a{l7Jivmuyiq0G=a4V+8_vnP^&Y;ZM5ogvrNDp8egkj_zA zHNf6_YL;eBOmb(X7jE}Z4K6u`#KAb@!?b_jb*9~-st)&P1_YM*cNl8b9KzE1uq&)u z250p40H=wR?*mU#66RJQC`B6kHmzVGzL9<%TIDOfr1UFye7aL|64tGysfGQzY)-L+ z+}lb_Rl-_z7*P*ehf(xdhf}+BWXI*1TsC-)CI}asBQT~jSZLhP6EdO<*fH@X^ljLd zW~0P0S@7m&o3f#p!~Zw%z&MfM@sXe!uc;+kc2ayPWnxRY;rY`pMxXqMOMr0~fQ5IgcxXnALS~O z1hmVya{k#SzMLA4;dTJ8H=#eNb7(6l6P))1u)*Da&FlOJtbMRDliok5Zvo4Icp;eva&Ub?tkDlLDQqD6IcOKO?{<@3@=TW zzun`*QzVYYLVji6GF_#~tDHyC;J+f(6BV5FH+JLLfEpo6SV*HSYUSk3t0nIkeR6JC z|96|aIdz{}irHwj7wiYj4B14>_c6qtu{!W~{_eaB`2_5x{Lyxk5Jm8@}_O~_6$ezFN49Ko-(ZiD}Hp4FdpVSPQ@6R2K)~Hcg=6GG;7q2 zXG+qAvPLob>Gc%@cJQ+}`W`ijZ5Nrn9AxUnTcJ-Vc|vXe$N&wQsr5dY%$WbL>ztzP`l{0TBYGHT>KiztbrP8(2onp=dbVSppM*00K zlB-%J59uCcHK8Y&M>LMVwn*##Csc}E1+q5f%+smPX&tDEQSh+_UbfbZuq%C+-XfM9 zAxLxWCPFUUp!5OSrPn+1W!cJ9w#8M233XA%8i`;eVI!Z`tA}GsGF&6izK({XDYl_w)X^!BP9>Qd-3{s* zgq+TAh`QLsU_O$fhEl7=IVc~Mjr~w3`??#}8Y3Eh0D_qj^O$(=W&pW=8Uyo+l%Q2BP;PB7k+M%?{+lJwjyR%%B73)^fBtP41SKC=vxo)8}oKVOzZz$ zj;6!X;^d~(sr>ma_-j&ZhE>QNza=Le$2j_sT|Nz{@o*bP>4u5bs?K2OKcqC4bmy8FAw+*qL5>C{1(o?P$;d(*H?litbM%_{-V@G}wxC}X zY#)!Q3PZRzb=PO)Zinr_c%gFdXQc#Kl8lEzP|A!H!Cr5pnUTS2*Rv$?e+Sd2cwrQ- zcX%)}-a-&}^ILuMTS)Nq{iDC39P0+CBn9A3WUD-Gd>sL0>u;_3#!m_)8rEY2R z2)Kw=7;zO)M*rAt1+{+4)!D8O*A|_K7AuqiFmU#ud9NGGN=e=u5^Ps^aF8P#KFQJbhg2tmFEP2AFEukLE- z&&}9DNg4j0IqWF%d(^{m9Vg&m4pKjhMC-ZH@f4xOWQqH+$zl6e+NYE2^{mOM$S!K? zY34MH-y*$ZB3)a8L9VDhN0+0MbXkp@(4w(2&U1nhFOg31nzP*+ANsUFOkwp$J_{m~ zY{GX4g#f>RY2f(4nTa!+;I-uOBIOwX)~HcLguddHoblaDS+GQY_=2icAh8c9>-sK-fvf1BX8a?gMxeV$F>=G){RMZX|Gkksy%lFx5kX=h zkQYk1<5q$3+Ld* z*h7M#G6<^C3mNtyxCz!CX$L!yT0)37)sl)jkA7b)H{UxhrZ)Dqqbx?*y5{;gJwns z`%j)Yx|RR)5LGSqY}*I@PK;&H5YOt1d+$NVurXx2siEGuSG9W6yWj0U+3lExGce?x zV(c|ejw-%hOb%C!b`<>_#saWOTXnNIT6K1Ft4G?{Xx&8r!TITj`>%M|kN5R+DEtcn zD03L&>*8|bE73qW0$93}7t|bTwJXL8VA1Rz@cx4tM0lZ*Q%cS0F2EAgrFHc<2+P#0 z0?=PFLnkz2MwAy`nvUsnqdbfaW&4xrZhhjzq!`R3WF6=Xar@2=CBZ}#LbAHrYY(AlnuG?oGAIdOnyx1jQj@&|?V?IMpOkzgPs{ma$ltrBclW(582(Jw&j)@puG2xU zAC|Upb=VO%A>W_%*TwMQeu?VCs~y6HxHI6?LljV>LMHDB*|1yeLR?DIT!(J&l6!dU z_y-r-$u|p-u;XTd$j*kyAl>T(_+qh|ft#ycX_V(eKhJ?j2W4}x6%FfXx?@e-JIMml zosz=R3zfP+Dpmhw4eOlZJ`bvv3T+9OF6vjLm7T^s-=o6ng5;w_H7HMZ>D6IZ?Jfax ztNL!vJIzQ7kZXzu=tcE|e}@wC3GUIf?*GoWC(tm8*@GjIaej8fAhEiI)iXz1@2ipx z#PQ3+2We%LeR~^VWw|5J?P$b5dUfM*i@%kPum1#oV5<=RuJuv_XnJc-6JKS9Sv2lo z-wP1uPx#0&T>gq2~0)jzlDyhXm9)Sp?X{(L@JK%tN>hiY@th*=JQbo0>_2<^V+x zH5NhPnPU;ET$EgrQqYbrH}McOy9vyE3*m!(S1$%{m^GMNc5&4X#x5TjN0kdIMQ!pL zO-<$3O&6*_;P4C~UI@U|xj-F-*^uq{w@+n2zr6I0#*5~<+Bl-D&4sT%bT+(prl4mG zw(~Rcbve7t%|cCp`x9Zte?p4@flh!aG|zi`NzTS(t;YY&PvP!=Puy(>F+|d?-CjNF zSXNK%9e_ z8uQu1jTn8HWr6Ce@GXk-JeYjQOU((iZ{`v(N)XzMHDfh-D^E=NC$plxEh}r~#a`eak6f=?8fZ=XV#|<4qR7x;Zyp+o(f1MwfGVa6 zo-quH#al;qps9e*(;e{ZLa+eY|CV!`T4w`alDtpV#58N*i~;k)(YL|D10v+@o8(;R zRv(L4pD#uT8F*$7^7*e$2{rL2nuKJtN?Hm~ad7BzP&X7XOmFbf3uW*?M*809R6CgP z%&}jb^z`{}C1GLKSyN{Rc$jvyeQ2I<)rNJ+6vmP+qb3z;{F{H@@ALG70+zzDW>==q zE;#6Jh#4?ujwPIq2_r%H`Dy_%kIxZk^kk2_z1okegNFhD;dgA5aFD00v z?|I5CKKner`haWao^f2TVoO?C<}b$e#q^5&(T#X%Y&^F%p}*jI}Y5gYu2^u8i=g(hBfJa=P)DB=eE_ftk!tH;m@PHLj4-?AVSudY_gh6KIa|^Z>VnhK`bQ}Bd2~?fIJrf%VRLv#z zh0D{I4(~_$dtn|InLAYeITuZy56GY#4CDrdDnpgOMAE!u4VCK;mHVOV@&h`}ho@X$ zxPP1B6)fRn`yc;EUM6t~B|os>5L9GIRyEp9)nae%G^TwgOhJ4j*X>4iHZV)5(oTX~ zB^yLjwr{NbBDz87RFA(3=HzutpGPn0MYBWc^HVP=JZ~ci>l=#bV=~QR$S;vx)2kM^ z=ctOZQ)JF@a+}a7eRbstT6lt3(;S{B2ZFFsG=C%ZZT;d0Uqb9*w}mYJVjnnR5rL@t zz%+zkgA-mzE#nd+GRGctf9JH*V+^K%FHd5IyL(YB%;q)t{8U5LMzk6!_%Xrzr;s}t z#{w19VwYGj={*=O{I82WJcG{6d(CEAqfPrFZK3qUol8dnWY-@UpPo0G*KUEV{&#vZ z?O|}~{>$+uk5P32R*oLe^I3mV)KUV3kGujXyXfaBvU-@XKUtc@{mqpebpCo7{S>~6 z&i7md)L-b5R{tI7SJVK}4B19B;>Zy9NRH&(D6EU$qFe*UT`=%S8#QSB<}S$aeB{0# zlw`R;2Z61mNR3qPCK2z?MxNR-5cvv>(`f*dPIOqHa1wB}QVpM$VKb2AYHex8VrnY;Stm{WWXz*n-s1t<$43TKfU&}rFIB)Gp$9&Uy;f5q21e)*(Av8U+t)5mnvw=Ws(CYQNzHOYQr=v{maXd| zeR_7C{Y0r!l=v|SvRvjayQ<>Ksa!^pS*7`FZU)o0-%M$NLL1q;XH9xz7a`{HJTWx{ znX1-G)ZW=-U{_N+ZcLx!HTo=5Zks9_+E?v6NJVQjs3j&w*cF@okLYZ#GaqtRH;mKO z<&#&EzQbVCuV4hPyX?3>ZmurY*lu`rRO!h&jdc?mUJ8{jeDvk>e4NgrumtTAq79r0wpH#uFg^*9NsJ8KlPHM8*RnkQw#!2 zV1d2IEsXf>R8QQ3?QiP6W2k7H;Tq3$xXRW)zt4TpiALizFdJFv?y7UOPfmKNbDGiY2A+Xmj|0 z_B^5HrVS}?RfarlG?lw!a=@^ZsOCvjVjS7@*w2r`->AQ1J{ouxyg%FP%dD^bym2S; z8?j+$T+Vmhxm1zg$~rQ=!ReBs@#ywAI0By}dQ|Dwq&nmt&Vs-s)*5U;$D8Mr2)ppn zf=;cY3ytW=%)to|tIQ3j=*N+-w+sGh_~2w6n0ji%M4f8mjCBJvSRj=%9Tr(Qc@6F9 zI?_o}2k$?4Ytwt5HB*kLrfR(kg1R&l(@={|Je#>=RspJ=rDK7s4*{9Ec!b5dN?>-* z)%CmP$S`!yWLbVC{wOTHfdeOMpdf#VEhXSiHvDm^>_N_%VrB#pS+G#g0pJ__C07bC zn%Xw|g-S}QOEyGU4b4s1j3Qm3(y&Q&lI!m(6L@Bcb|~_#=_NL(rQWdx&}`&ad?nc;BlY%*0k}NR0RR{W6krr6nV7qviz4b53H6ZV5-i|82W2?|b-1UHo zqlsT0rj%0@f$95-S*{P^tozZ4uC2j(*$XA7?*s=eit%3y98Wkn)T2%3hU~?)rKut{ z1UuP_!%5K^Vxa%eXI+*ZVep!!(<5$Y+uiOtEU5||T$i@QPrvCwlqwMqyaaxOh+q$f zb@P^beAx-;t$kgr+-(sZ^M?RrsWNNlR{}f}!V>+tfUy=IT$rla4<5MOS48d>5TuF_ z6j5F*7U|WgL&$)A9u_=!QTSN(VPG^w-4Cz8BYPoDA9glD2;+X@32 zS>DyA6fK`0T^|S$d%x)fqycEg#RaMX9s$4ho7mm4k1x6rmx&pMPQSN(;@&W1sp`hN z)r~ltnE42b7AR_%63V_YRC9@FR&mD0VSLZNZEWdHiRH)o>LJce&EZY``vA_4_0oW;7H)c!t9}kIciO zPNGCuxbB*fV9$6Q1Om!2jS!1Iv%dd&KZT@^w*^5Dl4bClDeCOza9lWxsShf5HT9${>I-7oY_|FTMhv0^f)i7p@o(x&jM4e_^_jT(c0~&5 z%l#ns&o~+_tEoR?Nxp&g^=Mm=UXq_>uFl?>&UsCv*fzb>Ji&I{uKlTmpNLw&cc(Rf z|BI8buWNKxB zuVZ}t06Ms<^VoJOo9d~yR6YNwX@xb#Io&-sb!vt$2uZy;Nc=wQ*Kfs0N|G` z<7b)vs$tWU-LcXf^7@2eB;b}?&Q!JF2d^j-{>@9?P__Qw_jD;$Pn(NnU-gFiLv;8Z z>&#|v8P$2Z7b~Dbpv9lTB?}V;HzTI&PsY-?H5jI&Bo?B=py)wmFM_3BMXK4CggkCV zk9ZJ)vt3iTR(xGOx3SfZgGubhihRl>_Gkn=yYmGVh9=dnRWS#9_H0N*gVKBtcFqM3tCcf)?(L;zP6Bt+yYDn5UQM&Gyxvx4wN zr9hehS{qsJb8b5>eCQFYeqr%Zrnz4$KMSWP2JG_oU;~j&;>bQn-Ft5utai^ms=wsw zkK7SC7$>F5D=;R_uOUV~R-1jj1b8KlD?rx8sHHf#4_~bTa)_wA`e>?r&aCa_8VB8A zq#Ka=QVVroD$0K)@>ORp8_>>Old?l6+85su$h$I?1Za4s2>qo8PGz;}NvoMcG57GA zWSfxd){i2wFa^5dfo2LGH2=1N%sclWE)`WsM2S^oO=RM9YqRdDn;vP@??T4iR$DJF zBjYq(rSm#426$J}M7D4jhY8GHm4{m zcTrel5wjgj&sTXD(x2}7Z$Ak8q)QBoE;K`lsB)5KV=^mRYprzj2<8)@Z45us9LU_<2J6Z>Fc6g>d-D}T&h`u8$S`d zFu9E0q_Go(3C5M#@PDpy65GxyQC)j5>IL6-)a?6?m!Q zXpt-rJT`Ik827>O5r_#hiL->U+b>~m3{%7+c(y>oN|eR@Y|6I%ApIO#T<8vS zz)brs*P(@i>cAu_8pU~j@!x;-qq|)U|LO3vT_(}xl zBnF3ePkP0^cOY6}&Rm+Mq%BrhYS85~>yk{vTC1974@SE+<4@?Yx!{?7f_TWm3?Nj7 z?DTLfuJAevq`1LsuaCPTaiFl#@*)dglob#^nzT0*7$!ejO9AM zUc8V{g7_lfO3QMaeq;7{{o9>CGO_cZ+w8UQ$;F9-gA`5mOHD6t4UUps>P`8q=K^N z+o_H%AnJH}+o^im=s6I9UQ?)8PwG7fr_d>3(-_bi_kWq-`yF<_1z!`bnbQgFyfo0h zASbm!Am<%V8&l&=(TJvr2~f?;@&@s>Vb`>Td{tr3f6*scJ>eu35ME)#|9!K&} z<$&)J))+N;fgd5+$YVW7O3=|nkli^qc?TJ_!8Z*}H7^z7ViMP<=L$CWRwW-LpNn9rbZ74ok;HAUoy4z|% zPG;cSmOJYmu=<2?JB>BWcvj@mNRvj5voG#wt`~H96Nd<1Q8OGBW6caNaC3gW;jJ_V zEz`AD2FJmkv`|j(@dSDriqPD-*a!?ZZYxV7USsrk*i!ZnSU!0h z=_!*#kc#Kt%x^EvkTY-J=w3HYuLXN}8y`Cd@TD&*R%GOyVG?6Kot7J+_q z51cD8M?9`|_v6;QewF-)nL~MHkQuvMur9R&nlGa>Agz$F%YjHY#;9`~tqax}F;p=H zHAxnW?nO(9y^ji<`u3|oh!?#u1&Xd?_&W)*Ft|ac*-wt`=BEnZrZft%^+#Yv7d#Q5YnFzH#N)gdcGt4Aa3_fP z1B|)Ws%1X$mQL=*%(4vZm?iP}?I-Flh4TPdqzuNd4RCW8i{PN?Zr_y5LL1+Zv0y)p zql$ks|Lw`=egQ79YF|k6HbMs8$zHPL;W!slju~BqLqv>oG>BHvNIN`_w+&M1a2W^= zcIf^2>?ZY}qUXP{NBh59D?8F6y(!98RCoeu9a4NaXbjtvdJ+XKDNxVOHz} zU~s}m+Mu61c5;YO$J-S8E(4||ph6k7C$Oc>CC38w19AK4Ji6NAx ze5yklu#@v~!T2QAGV1gS3b=!HufXV`Z))5S9*K>)n0FNC=9A3=+<2;L(F~JKnSjsD zBLSv3Ork;ZB(|fYOuWo@%!^1Oa?e-GO}uA-w+c;#fl2%+{S+6;bLuZ=nn}mlXG#w;b&BB9halgSSl{YLNaS7yVbYxjOzlhZP0s--I<)1r6^~;no1}=+@IjeB z?6G+8$&}B%y;G!2g$EOF)XU~bQdrg#MLd&5IJoxMhdRdrk>ZFL1;$e12!b?I@=EGC zd?MZ^*eB-=yxvVsJ;qg51joB~CxKcRs;|AjRisGz%+qlV)3q;F>~HCWX_|Z$bdihY zqd^>OiTL8Ka#iXiX6mkoc|}q{^8Wu(Z4+51keN!1^2$0dk1#>iw0X2c5te)vHGV75 zgQ;fEdz`C5E$$F6wV^`q56U6H6+>T!Oy@bw;wv;dF2LAqz%1C9^mn>KYbZLEz+s<= z*6RH_+|lz#EMw$ndsi>Ppg!cYy9b|=FxP_Y0Gy$2@mkc2Aw-qS!yfeKV+ zMNDjS{^VUtazqXblwC52j2|7&_v{Ap&FA+isBJJ0hvea|>9FZH2kFn^yVw2hT;@cE z-@(9{7yN}F4V>OAGP9$_{|5+4w6;R+oLG}C7Xz|hABho_o~2Djtu@I!MnHjjtB(a$ z%bv8Q=KUEOu`n*4E6seXKob&!9iAN)(Jj26^%_X%8V13qec}O}Z?KNK;Pd}R9&re$ zJS90N%?AKj8=G-n8Y`L7~l)fv4h})R_;=9a)dL0Ci zVy(_D6|{-3m4%T8to1l8(zidetNPyMF$H7%f5d147}4#SR6wY8B>~K(fT+E4{yb~K zkHE;i*=*jY%`Fa^8*#|<=+M#BY$`g-3AhwMq&c_W<1Dht*sphzz5jE2L4I0#+_uBb z7kN7Jr(YPUduZ?OxwwWT{SLvS1XIaRy-XsiG%9 zT8DlLN5|R!x}xrOOh-fK9Tc6veH6pr+%;|qj+|{~r%>DnA7wjOuxmykz@)(~Pvhn~ z2)T4#)+Per{+$_BGip=e2u!&DysRF41gerzR2-OPW66pPSn%v^v6D`~0FA<|<; zs|A!iN3Q$XU)gI|hK=UG0JR%`X@oHl%^+-FS1Z&9UIj;`S&pGc-2C*P^JTj;$TC(G; zS0qWRNQn=dEC@+bsbA#+X59MgsSca3Vh}zcQXj-bjr?kn_9nD^34DG8z&iT6*$)or z{G7|%oUpqITwCHlUF|3&M&&u&ow z>0VZM@jD^DtP&B=+>P3B7Yk!1OlfA?ziG>Ey2C#|UnFQi9?#`hB`~Z^I81-d-(1{h6m7B4`Ve zIi4cVEp)z00uwQu67yjVWC%$r$f^7k0b4=-dvf zAmD%bl>dvlHvmJ+G8sOCQ-e2cPqlF{Z%!*V#ynsZ?PL7-=`jF9yXPD{$y6gFtV2(j zH>3^jIkuj)%5!4&olBfgq+hhdv}qx!sCOT<56UZu%(`MKQixmS2^m+i_<=E(RjA2TZynvPMhup8=Z#a*jW_04Bh9Xy_Tphn8*{p-;=| ztNiAV1uQGNRNw^o)xN2DkrUF`q1FI7nr+ z5yeR*&ChYr5E5AyM&@}f{)hE<3gX5C0{8#qQq>)s2B}ij5f1yY;@?o4fry^VD*N?R z)txXQ>ls_=_p4eY&ver;th?7*rj07{6JHge8>}DK5@d*|I_~RsCb~2klIc{9Eg36v zuAXPIS5Ms3jA*wjQ^6!g|4IqGq$0**_0U zpP|lDjhnI8rXC^{CsqywLQ9fX01zPQQ>k|{kg$c`GrExsG5Kj#5C8TR_N!6V57BbjC=Ba2NObjNt2zh#B%RKVzO*RpEW} z7S%UsyG8L(?o9L92=V+W@CWI(^fzY~r5GQ6SIuIVztU3Lq#rB(in_G+@ajDxWAP8n z2Qr?oxLT2m1}z~CmgU^l3@|lqjgsMEOJ<0Z?LC@T-R%SApzYhbia=B_7_+2`IE4YD zy1SBDrA?kbBGRa}(rXS{(G`MsHThC(5xul4o2?(pupQ#~G|iVp*vQR@TtS)ZNdb@mF0J1fBEsRM+O zG`{_va*O$td6yN_v<#1m37a_WLWyV563IVZwEo`z+_L^JcafEV7<}+AX6SLeF-P-| zMFlsVQFM&UqWp}ZC6)8XI>j~kE6Zr~_o$I-35CrW5QQl*^REXwQ zVo~HbZ{O{NQX+>HoO58gp)rb5tEgst1U(>X zfMK}Kf_Vv{fg0^Wu0OfE+$`>SC4*Zb_bGek0u>M=C)Z8VAB~6_{JUpdqBY5S+XeQT z?h&rP7#dvZRX(rJuS-+j$oPEcWSQ%@o`t23YeoS=<5~;)tliQhwjgk)Y;AQ9R^UTZ z{;r@sxu05$ZRM2eNb7^zA7~VLgL-X&Zr*Ncf8^hz7-RSn*z_9EQ8g*RN6e};M_gDU zK$-oZktLTc0mCL{3(EQqqqB_D^A{K>Ljlt#FUXgjJ?v#CiH65uS}mgCxb|-U7?X!u z>d7siFw@t0zY5Q*nnn~_sLc{orrTB`U=gS0z=uj=r14M>TP2`+!?_@3AE@dO(*82G zmgB$w>@35dla($H-V+#_jmGnN{OLP-+3!k8QS>h``(#-F=q(NN^x04Y<$M3*VSJ0a zHt4R4Uu2+gx7AB%lmwS_KFXZL^K~A;-XHv!bQg;Q_LY40dpZ$Y=Ig&?2k*;MIOKYP z-?3TrE!I*0tH<&%WoMESm`*yQ0!3gy>|Y^kSVZVxzsd2Hx@avkM59N-cnK}kO{c=9 zU^PZ&q_bs-u=syT>F9gvq`myh1#k~I?z0A$EbgfQUEhY^qUz#pWC9*`-@I&n`pvSx z88))usvjg3?t<80R(6F z;>UnkQeHYa$>t(vdDmoSDetFNQGV=oaahL{ot2c2It&@p_NTr^n_CIy4_g*|&=NFj znQpIrvwt_BSKED{y~iRtZ*V)=^V&y6*S=MO9UkK~agv&TZcqTR^k@>TehHU!=Y2))aPT44uOtpaHeso(io(5*)i;bdZ)2PbeiF=+7so*$BCM&oe9?4 zz@X=^%?iwCRqZ^P>jA4DZ)4}O{Xx{?^HuGNJvxf4V_=ASE^J*{G@XG)vAsCCP@R}_ zl&{3!ssbfx;S$?@deAWeW`nAbbd`u~OTngMNn^*Z<9Yk$24MgUDcZdsuj>0@*P2F& z31RTD2_=vIwPx>68Evbh)|s+%|8}n3;fIumTLfru=Q+3i;5`F5t8kb7Eo5E(Ich=rQSc}OK2zIn2_bcYetXXs%v5>gy7I*`9y6F$S+vKN@h zkSp|8(Q=PiN$5BT!$&gy@fT&6eM?;uA1)T(bw%HYHDWkYBo1uqGCt4HsU}9&yG{ZY zs@-SpDa4VVRw6@$CZT30L7x!_gqRn_ZVgJNE3D&pp>{TH#q{!N3uG|l4^Qy34r%<@ za<2&{G)(Nma<1h}>1ZlD&(xhmo|cEKc=wnNN-e;5A-Ozh>PQLLu`6S(!OX#RKZtgn zNJ=Ntr4en4(~)tG{tQ5F|0V#+mwFs^8^$cWe;q)>X?~3V8&+#FCj16+LRA6=^}(1R zg@$@|LOSwSTJ2R%uUMPbVkn!)O7l3NNX#&|cAX^=lBSgpx3=el`*uS@$;ikpoMlM) zCKIVng$zeEf=#tsuHqcg1tF9S2yS*h)&Rl>YP^2LFD?Z&_?(0yw>;uB zcu787+$ozLSHT00P5?Nyl40kio!#JhAIjpb|2qsVz?|~u1djjdzkOaO`*Y9Z+*}G8 zxwnKM%z*ost@_=IVWgE>7Vbr(`%&ffUK*XKt~m2Y6P?0Vx)2Mi5CRTTMe<($}FMd zDt^UQ;%bjd%1m*0@tps2!T6wbR=t-Ba4`tV6+wro+{xv2mzc<;&1FKKR}s zqYy=C^X^7EZLX#$)pwjH{n?a-UI86f3nU%90N4DK4y&f+7zECqfLvqq4IbZ14=Ize z3j0M!hwoigHbDk{Mb=&-QiWS`qBEH(UT*N4}7)BU^7QpJUi_ir@7ZI&a-6P>%1z zrk@+aF0f0n49M`V1l~&XcPF{z^l>hF zh59$KM5P%)7SHW%OmI>$S&=lAC%j2kCUF7GUHD7SEF6}_=&*>3P>N&yzK%L-?$*q? zWQ55$uvk$&P=nGpINNIOPuXYS;g5Bdy<*h81JZf&(x7+<=WBKQug@0WxRE0<*UVFz zLiX@|-M@gYxz7=3p>hIpI?a1B_ix{``D1(I`z=}~{aV-+IyHy*t(Y{TK^lsWWLI*p zH`w!v;EF1BoCOoGp!Im?J9}+Ys9+5?h$EGNjvQcQQ<)y<_8h7En95{owc}|rh5Bpi z2{V?T1&@q-e-&nFvI#um%&l(SrF*D;GmJYg9a4uQbQ;)e>od>UR(e1`LTr8O7dysn z4aQ70xpV46y|cwi)L@4DI`m|^<^Kok^Y>wiNK=_t=2}GM@uY{^>AVrraUS@mfV@mU zmy8JRcJyxw`9C2l{7L$=6Pcc7UBOb*h1P!8@OKpXkhu_3h00>1dsIA1?GFZSsSClgPJz@hoFdeqp67TttCWPy= zSF+@PqlitiPkh64suKIMZ(C5(;0ly+@wczv+o9wBa4oec0@h6yxKA>P(+S5VZ3`SD zxg{b{d5NgI@`-h;O&%v@p5(h#9%S zcVq04!<#iBq#Z#!_u(*Q`w2T!l-z;^O>Tg74*Twe{Ng*(T^#&&lXY5D47_w~dH;hN0=Z%tLdN%HyUx-Pm2F0^9Yy{e+?V&IqHmQ9y6m@vo$%g1Ll@OsMiAx=e zS)x})i;nBUqD-2yjsU}g8QZE;8|F0bfR#>!7TkxC;>|%jbDLzvN1Q|NXbAINCE7Q# z_`pE++N>rDi-r2JoexjWrDU#Isu!W=dNI1VxB^Z}A)U=^9%b}{JFJOpjP+m$paXD& zWjSwLtb(6Wn5LQ(6%!DWPWjYrktW~mL8C>L2~KT+*8r7q8PjTG{>Xsdh|MSH9h}AA|IWF}LiQg`mzI-7SsDtg5Z#kiS zb4$ioh3#TlZci5$uN*)IFRfU2k|LvUndj>!S0t4(#^o)oQGr?2q?7XdKFi$-xl-@; zUdU%4gYN7qQS8&SBKy#|z=6~^kDQw>#FW}s$kQ?+o|s2x0wO2AVv46m@l@-V@IK`L zl9`>(KXSn`eC7B71=#g7Z?i>s49GIjVM_aF_C~&CtY219d!TZ;+8i`av<=1>gbXoV zd!=j0_6|N37yB&m=GBetdnFgV0uh@~>=LPgS3_mZeK$J}&6D;tLgC#;K9PmDj}v(x1fcl3}HjRR|A1UM4B#wMmL%^=uFx`K7p< zz(9W=iY5ltxXLm}RGv7KtHb*x&Hbh)#*FYzVJECV+a`@;h^#wuOo6tFE8eP%g>`Y8 z9elz+;uAl*uY6cUFR?Ifu8D;P6R6=8&yC%BujRQxEq}_*KxOl(j=Iq<9i}0+gJsrZ?0jb?zu5NatQaWr`s5R|dr$z$) z!w{*r_%XTkE!w>|V)88bSdR6?$@q8~f6~X&A@mON~2)H7D+ zEQRAw7na7qxMca8WLig#Hi#^TK8rf!G==x5eFiyY9mWapGWdsENJ#bR=yzOOmW%S) zIW<~zdMk(YJFAdPreg%V$(!G$s;SDZWsb6e~WVcxxVc*AWLAK!-;8vFvwW)z1 zG?Byo0P*wwCTu8;m6lT_LuMQk7j_RtciP=KL;|ozKTHpDf_=ml{47Xfq)w~=C{i?w_?xJSPXoWF%aT7w3 z=N4=6tm<5lp65L;CKQ{w|=11fTD;&AgY<2{u0w&s=p<9o>Klj=tw} zE&S53dOQe)M08x^HkC~@$aH7sjZ4%d;cq#@$f_6$>YqksskA#1GF+#P!*C90+UuOU zp?T#zd^|z8!O_)=D!I!6irxtlDTm^Na#(roqabkk9+vD$Y`u#sZ%Vx2*oG<6z>e&& z*@7);@x4o|nSG!rh@Ntxt&I$^3Tn?46J`l*Knz|jm6*~Zv5~C0Q+da_N;Jm$ji~xD zzQl1p6h4@^_|HW|)k#|+rIFHNxVHNWcXI1Aj;j2EKgH`U0t5G{1UM*ju=mXueA4+d zq&!`4F5a_P&h?twL)wW_PDB7*`(X9sprGF?uv!Y! zx+lDq3~=bXLt-E+rAt?|$OHbNc@Hf<2*@OY6ijzsqcUM8dpdUeM>Cc=@(mqcHrz|1JVd&Oox006J9yj@Jqsz0YxBT^7?mj0P;E61=FPcvxAk4-$JHJZKp33bn$@2gkrwFE z>SMstnWg3*zuOovxRhOTE~Jr5d5Wj%LuxhFhzotO9vj;Em`D8-=RB_5*-nOrh;hMd z1iY5-qvl*wJZ_-|QggkUf8O>nR4(ywG({?4S4O3O)1k__$Tz>{Xhm}vs|13HJZVEt zcEm09vnW2bPi)2BG@e4S9ms72ff4tjHN)WT*>F1n^OXQ?r?Lr)B{1gw*m;>rb`U^Q zJDHHU^1^q-&k5>rH>Vpe18HC9(@$pQ;(-Hc2_2GPT0!VB7ol2*v2%CdeZ=%foe@OC zJvdp2Tu}>bd}{CcP_l4~^1#6L`z=dy&c76V#i8IgiMX>M;mG#0x=LN5W$^bQYqy=K%3 zYssiIl>$TgFQ39R#oLH-jKsOo{O!*qR6W$nqw|$S;#T|Mb~Y2G)X*VAfQ%0Xu{;3g zs+}ISft{xPGj>~PwD2Nhdw4)H%w6(}M||u`nkCD(%|=XoL)SyZIGnyg3`C9md#OnN z7wM0@vB@h80K`H;*&2c0$0-QMJhAVCd0nx}L_V1Gr)&5bPczm}c{HkmeLg#lXM00Q za>Eg~Mo2t3tcStSc@wmVjI;7#GdOScv8Ayj65rj&1JipNp9d!>`Pg%k%#T$^68t7xTe*{%I@+*1Qdk_)&&ECpyriH^L$*7$d< z+3v^sGWXxD)6m1poPAPj9^Vr^6;$v|@lVMowABBOxo|C+dGod~2m5_rT};n*7A*Rw z_vX$Ckz$x*DhreVAM$zbuT(H0&}6shgovF{=Bj^IIZ4ZX=m+K-L-~k4KN_kN~!VP;c7M4nbxKLm-S>buVA%!hw*=f{q24FdbC95IEfZ z&6N5|Pw-+F|K|Os9prmS4}ZF}P={tahx$)hak0<*MwMmtN`O)&C6g7hiZ{8w^=0OqbSl|%J`bl*cnyea*0_6=?`xaEW3wVUcfzBUc zj=)t|(#49|7lDU$^oC&D4ENs}^wT#HXHO84^|4T+;?ix|d?-z1dQ;a?WT|A^!ZHDU#udU;ddTAEeIWlwTzUFGIQAOE!35;9=ZBaA+cSRvLr8jV+|xN^`Gj$ z^-e1WK@&=vwZu0Z?9Ma^=l{spJO)syVUZ);Lg^fX6>2aF@bEmHVod_trYDLab?6vF zy|%F5@%+JMG=Qvv?dYx@EmZCYHv3Bz`^7=zAPneq7UO-|Da>c*EJeH#88Sch>0|@jK`sq92q%y! z%~>F?#i_y@&7grk0%C;^zN{ou{JUYG~Y4xwdPi2IYpMNibSf)+LH|CMBlM*y&U&vwvt$j@HG^La(bx$!r$ z-;wzE>VjLuIm^0hOTAM5|IK7<@ial$#KI{Rh_>}YA$VB$1-lUOjH0P3TOG+8td;#r!fq5kvGXT7~YCfP{>IJ#O37|DBuWWb12c``#ih#K=5s}r|hcU-PZj| zVw{XcjrLB{tv53^h;5^Wy8zj7k_61u#-8I6SM@{Obg0@)uLjnJCtokk$xQTrTZX)^ zK^llPpSu-U9T3e!H2Jmk)X$iVzDKo(m-@@?eSW^*RHDd19?b_1< zfzN8HMZj1}-9)V0%VBH-ehNSJouC?(F)4N0%LP~SjfmUjzeI*M=t5FmWW9J6N7->w zb(>OA{Qr05D9PRS*eMRT>=oyf=nEFnuza# zaqb?JW;kLRxX@sJ`cMmxUeF4(1p$dUK6DhQ!QW`xwdSn7BQ3%KOdIpAIk`rN7V4qj z^TXrr2sc;|kr>_yN{G+aK1KE)h364d8<+`hRm)1@U^_OJoN{RG-3`b~3ddGy`8N(!K z^ZR{I8Z_{86y)_$f($ylurbJxQ_#1PiQU?v`OLG?0tMd(i|cWI3@2JX_Ktqx&FXQi zg>@N)kjdCxFT~}{d-x?(?U~E(|Nk~}hbTGYyhNH6l?!5nUF-mk(C4^m%BPA#8#G3p z-zzCri8S{4ybhXj^fN%OGj#l)hn18@xMxO0i7RKZK5d zGV(!72*$tvjo+E?0p~;^`fsYu$cmEij7r+lj1;fAXdvZ#rWVh`p44JViS6g}T^c~xX89|!0+ zadWdCOg2m+yS(Sl_pRz(vdg)B&bXrDE~>!HvEd2-w-}1jV;Gr?sM-Uqcg5b(6N{+I zq^g@#4P6l3V!0AoigZ_N@DE0ToIYXe%lGFsdk~V!wLeZUW5tmDRz9B6eC+Z*s4?)W z8yaf~5oHiJU&O*hWpeJdeG)DVd?3kN5EaksUB-o1cvN3dsTIL*brU{qlD{aoM5#UiV$aNc8_A!edvRElW z)zPN+O^@~tf#>!(9MaR!;PB*}6`%LvdFA*~k&Ias_c2r9lefNuh7M$HU=F*-q|0T_sz4*6<0av4Q}2|PIS z84=!-RGV?F9`ny%P0f8V

    l{fjP#?{!(=r~`ei&tMjHRL2`aGE>i+bza?GO+VUw zSXOPTyL@#)tj@^0z{4C9`-N+QDX>zIcrS=dDJ~Qs#<3&}!qW3T@7-}Y94>5|NbU{V z_}j(SDXje+mD%JvN07Ea@Np4DYp`8#2g=4EgWpcxO>)6NWCNGjug136dcvF)Q_v0L zV}xbc6Q|Y9n3}q7Cy)rVDzVk2^@d8vx9^>cVo=V;VOaA?$RrJWao@WsoUa9xy30bX zft${@MiWyq>?9H5cg%lqut1@Uv_$kqBB6!bsEVKfadHuR>oPI0zV@`lqtj%yE7#|t z9mo1G#rywcu!*l&fd!bXBIGr;y=fUXW?De*QOEY3J4(BB?8A0!-x1lK-1(DLqOaE-J>b_rrkiba%OU7T&lTY4`d z<5;+xR43KHKoeS=1uM6s2*db8?}<2b%kRw1U;MNA-+;QUrgSXt2RCB`RHHcr#Rj@Yd(h7so0QDH9nB8+_RFn$yoAYLni zBN(@lfV-^pxoWz+U^lk*2fDbD*ziSn-%1{eb+obqm-4aeVLM|G&f#HM#A{LMPpK#} z-ve^esXX?sDhf1sZ^28>6UYpP$k99j#^+t%C4&gV+xl-bZij|pq1~&44G>r4OY9>{ zFoG3IL)U#oHnqt@Bb$K?Gqt(63D6+%mB6v#U7Vgo?lT*T4WsVxlRsaK+W0Bfr$!IC zM>zu8HIz&7I3Y-Bm;Mx(Ve#F>RCoxjdv>AkGCan4uRhJJsY-AleR&f^vHmQ@(sizp zkT9UL1DoF*XSt48v)|SOJ^h4F1ID>lxs|{@+$vz7bt`g7d+4fSRVd!UOP=x?`5If*^GD6H(0!8~0 z(NW{jfcSyY@?#!2AY)S>7`8v#V-UVWmvI{Uo%oJSqC1c3rFCGy0m8gu~U1x@-b>`^lSEpj)-3lx%uynM#zFYnlt!6=spk z({r>caxCY8c)a?bp@35C>T>q|6Z`IcN8AQRpkQmiG8JAUJBgXRhav1KEqsfp_qIWx79y^mlx*pct{zybAHDl_5&*kA_ywrK|)O@%xb3-w~&C!2SmUq_4NS#x?`ITflc( zX0@F!?^9A%j5Z!Z^)L#!XpxLK^F&N?nc{dp&ieGh>P>tt8-kIRVvvk|`+qx*BW< zBH?$>S%(p6f^4BQzICy<$V4sGa8`)O=GnR{c z0^KDO0Z!$UeKES1_h+w_XOd)Ych0(oaZB-s(N!r86(U?kf@!QZVwnWd;kIjgpFs@M z!%j9txmG_C?x{xCur-fjZPTe+80~(KS$D!&ybEOs=F*V;KlT+n*6%_ z8zh#^H^11Z=cVn0(aiA^ZMHANXT=;##zk}DN7;LRab$Q?CJP+1n z#<$*9JgN^L`_vUT004jOMYB?4MmVY9gKKkgLy}o_t?vGTw!awk&sDEAQTa3{FTJd* z=z!a1zhUW@+oi0U)pmUPKWikQJ#4-0s(zq%y<;*2-Cca~@$R~U@#hmhbP{nq$j~x) z7=CTgZy@$y!HLhBth!!yl^(eBc0$Er+Gr8oy~|#!VO{JC^L$KIgKE*LM%=b*SrsUv!&%`n}t32dsVS)pl2&Feii}Q$n1JV~)1# zqg$_tWksj^F=C3jZ&5X-Mx$viK0TE%jOBQbc>@JOWNm55ew>@F!d&K528p+0pWaYc zw0T_M8v-_F^Dg9t%sdH5*ljboWbF7D;7&R8kl!WnVLM{fv26Y$q;`9z`>}Jtl%H^0 zg-d(=aoW&ct@gd1S(!>0{LVF*XgiTLh>Cw)qE zDcDhXVBGk{uIhQ&ckV>UMR2?JIP!px$;(|hWTt|&H=Knl%GvCq%5IaO>@e17v4Pf^;0LY^w*bX z0+>;ihHniE;qYfF{d@wCk8+|lieyjP_MYv+KE41ztPoY20$Clwge$JjiuPUm%WwlJ z7S$Hlj&CAM?zW;@c6%Z*zP0YeoU(*E>LNXkHp+TWq?Hf#01v3EbrjsgKMLQRgmw;x zHBi*C^apXS2Y;I&pWxNZ5j1tjCy{S04QsS+NHe8HA*5ke#|+v!b*+n4kY1phT%|Ek!{5rD6ayNaltOs@QJfUQm^JFB9eAt%%I zI%MesWN%s!nXFDji>GL6BDl~AT9Q$lQIBMQ&>K(IoJ1kc(#|;l{C6QT-Raqmk=kE20|D(^~s;+90i4 zDOG${7Xj>ht5Vn-k8@_kfprT-JW=)(cX412n!yxE=#AK&PKpA&Tx{VNHT9|E=$Pw4 z5ejb!11+0+EB-B@ITB*+$S(S@2I^`wljlpt4eNPEltV($#~W6>+DY!3@l*7 zBqN;Ran6Qp|MLs)f|*o?U6X+aU=PAJLK5vQ1Nr*Jyr9>0lpZSMRu;y9{`0?yHIsyr z;Tnt!PEMNS!a+J>3ueDjbnce~Js?$SoF#eae{TpahG~~uS>zSaz)mx;Vvf(+R0d3=Fj(zu96o%J8>xgq)gVh~9ZCY6Fqoq; zDApR*dHjBNEi03D9FFvw(%GS#+j&{=LZc4TNal(azXo#loRUG<8)$M}< zO`UI~RHRGHG~!ZzoY0(Qiu2D9-buJtPRl6A75?cuX@e+?@Oa1!+@$Qbs>Db4GL(Doyj4i|4KE#bXt6+6A56z4RZ8ltABwryTgo-=RZD2NZ_gAc#)M z4ceaXu#wFcQvi7*(|TFwXdl#ryQr7w0D5_0m5VcuTD$z{Dq}8h=--kcS9+-5Sh~Z5 zmsT45>*LU+R1r?zQ-!1QN&3EbsdhgMQQoU9!$8o`U*2WCw^)d?y zej@yt$#M4Q3kYMa*B6(y3#51Y?>)7vK-()V zKJr87S;Bdjo5k>+pN@tD>(c2H|4Q@+2(x1w94~bTn#$?9L|R^Y;|1*tyK%9&X(h(v_!3#VnCafXf9s1BFeTof}oSCLVvknl-mFc?1HKt==5}(IRS; zECfb?MO=ByErem8q6@Ok&Ct%@G z$3TV}t^=W5WPmjC-=H7NrU>(>K(-9ZrEdsqzf;^^VZm1{QM28J1FR!>)Vb({R(io& zp@_NNR)mu`NyzZ~d?0AAtSQtVc-CMVq&IUGt*iYi<1}JGC$&X3+P9TGt+pM6pwKzD z)GXK#NiwE(>)NP%uY-0Ylo#NcS;R^Ms|Kg#3kSNAUQhwS(jg*WKju^d=&XU z@}WSeSgVMh>H@RBjGsdbnt7rppNs_AHV^T>ti~U5L|?^{WCI4%UNU?v2A0Ihq*Cqg zFag|Dr_6dOy+uaPq#!KbZVlmYqOwPq5=RU>ioy2xSaBfc`w)_VY$cft?} z4KLU+Q=t{~ifS?S`|GxeKYwPJ%~p@OPF-F^zi9`h)_vN3Ml7y3MGIY_Nfwzsqk!t; z;RYeY@2~D!^#UOuk!IM!CV>MJ;}RI>2;TYKu=}YqVHGcHL;eIfK?-mbdo5#T0dPeq zLjR+aFaIAD7ixEM|7=vJZztE=Mh&|~%(fK?@|OAfpFThY}_VRuYvGX)!epY1-wMulZ2sZQ8H zxRgDdTIQO6fx|G?!>!E^7$f4i(d37h)}4j-W@^xxZHD-E_%iLlO8jQHcI!oNK=RCq2|h-T?+vgzGC8lMvz^kYrUcoJ-dPGbY@3_MzQB%;H6)8C*mC(NY>F&2c%ICy4nnChlZq8dWH z3ThpICjM5H7_YNn zs5?MDkPU9FBX4}+9gXmjw5WB6sijU0GrDf1{}E8e*B`!pwY}AYJ4vgThV*h8sKS3G zf_hjS5!#S%amNXn-J7!SG;5xqX${ENVQ~yK zd9|)uBaS}^00u!i_HW~u{OOJQL@Qqp()cZQL_+9r=9+4dfk8XVE$D`iA!IMW8O);V zLVjmcK^l?1Gha(PYJD{`*37GKuemdI{fH3DFwfJn(pGlHGU=7BVWLx>2ryOH?=B`UXl?Yi7B?gcBp(0$Z(ql@MJ3)!d&r*H6T;{RF8`zrfgSYP&nQCzXUihPT@g>_@70 zjWbIp#Nk}%zIr}zlQH70AUR?l9Y@MwRN6~|F1}g-#q=nd{p)n7I;)Bht?T zOLUA`a~`G-c=4t=J3|pLjR0(eghavr2JMS;?-px8H$*6L2Grtp5!ej?$eZXoMriqp zn&^_84JHjNjthD^FR+4eyzwCASQ`yeTYumM?|85+yZdv9m-dT@T_o3?<$vphC zi3oLes05TI*IzQL36Zyj9RixUzpgvtvl2&R3$D{Qp4lul9o0hmuzDP*u$s#sxc>b92KJbc>FiHgk`#dogfBEGP@ zAy0UVIiFS>x6=sn+97Crv?*N?&G4KySA^&`zMU*MLSt^VnE!a(!I)xMw_EQ1s}>iv z+*S~E+>LY2{nLr=D|z%IBhCW4-yb)7lRKne-+5{Z$r?P;cf*hI=tcc?dQNl4_2hGv z5>rUc^tmGxmX=%h_bYaq#i#uFdOd zk=gq))UPxvbnfeky=^2+$>$~p<0EgelLo6v^7PFKH)JrG@AeJ`(3t$f{qQJ9T4*lp z>NG_+u0-+y^A78sR!J`Em^WvsoZ`M&ADzXv^SUvU5Z^XV{S*))%r?@3CaF{?F6F?s zcKa$+7GSCfU7?+3t54nyY!XK|6;OgF7MD!79)$V$pRze3p(yA^jVw2Dv%!{1P$7RH z+hpKd_Li;;(yaI7c%^3}0P|@LA#u+!6%oBa#);dYs4H&KR5*@K9W&K=><2>P3#b(> zg$^4(No6XG(qApZ%m?RCIuYdd8c4{!QSyr{U{ljz8vv*ziqbf&U+EQTkRx!NWGpQ_ zN-8%f`FI(1!Pcmw=%s{D2o(p!X)`D)RWk8u`w|oFd8I7dzdK9hO1$l0yG?SB%N6ae zOCURZ(zb`E%C=vvH#dN^42J6j133(!4S2Zy*%-bV(b{CKBZ=idzWN+}FDY(oX&#dj zyJi#9(NSdshR?euw8*pqDXX z6ANc17{N$E5m|YPRM*jI!RqRc?Cm;b)I_yLauy+k3&u07i$)%m?Q&T(EeF5!P5^B0 zWDAV6p-4Ab{19r3CG!i8EwqyWCF&FS_#y@NiZFHb(#JM>+E;e5W$i~!^_9*4XjB0 zkvMY)zMNXM=+}F2@JJAX3koX0E>-}D&l5ytHpfaqSw}!RxQ-SQ-9tFQP7JD08tSVw z@N-6rYOMC=#1(pH3GvMIAX|wqLp{(a@$@Q2G@(+kaU}5HXkvp*#$%{~6*^vuVl1j6 za%NK9&?}nnUhPNTDNa(b>KCxFbQxy?Jg;{xSq1^YQOqCSz(2jQBZ3(*b8kTJ%mKnp zo3CUI)-KG=RE%B`Dm`U?-V6%r&4Kw}?F}(A!+VS`QNYFo>^PgC)|<DQWXWlJ!dZJ;XZas)7&Kg5+C+`*}lA}+E%g^#ke!(a}`RdN_j~ zcm*1@q;2JIiRXv!hUp;q1*<^XTzpl;mi(WV9ADC}e> zk=&bP>ky2MsB!@Mf`GBXuPe?#Isd+t_Y?Vagw|SY_61~Kz)!K>dQ=iMd_E-6(O2)b z z>z$UN^ef6e%Uw&9urj>L86L+EvxnkR*`t3=Xansa_L}(DDJPZ+QP@9ON5?=PhMMul)SFgfqwBz8D7o%(Gn!{JmPqJ|P>oWT^ zOf-5Jd@u`$czAafnm~1}bSCGP3ala$PN0GTO^Fd9W(4W&bp&XIr%)sBK4d`mKNH|A zbzH2CPtkz^L&tz$uy^Bq!lHpBI|ZNHjJ@mQvX!e5HWOi)u6{~i8>@hBg|inO+B9Z( z2wOQL#Zsl6Rt^C#no?j@!wrSJ`w23N8AQ6IbsO31j*e&32uNOO+5FRXon%mN z@o#YIc_zdQ73yHH?4;kB^5I_B_>$7aT+o@QLMyydzJ3oFyYXDBIvFr1F3{9#is%*H z5}^bswBSTd^-D(q-UwdIMiDp-cM%x9r@*NAyXWb|JgNynHT8UpepsMw!wwj_;h!`f zP3L=}5otNZC|@+OvD!4dXcjgyu_+3qhF$(ko=mj=_L(fMui%36Lxj0pF{mDFnE;Yf zp;a`o=J9&L`d=so$8f#vK?6P|c0?A(gBPP~zRxMIQ_mTet?MEbwQum5SRu{NI!Etl z4&=cM8;W7>{qS80%msp@m}_|hO$J%NK7*@;&e1-o7o-8exkz%?sEDC+bTBqj#h8Xd zN~YZJrj=t#Av1fae=g~z!{83p-KvXVKdg_w?DY2Nw2m?3ak+TOJg@Q~Rh=N!v&>Jd zl01R*0@(ZKm)bRS!GT)1eB2UWdfB5AS+XqwVK=(>YhAN?(Lw^*C21)UX5{Pt_Qzf4 zh~S-mlK0%WYdK>Pa{jGGVwR0#0xO*!M5Z9@EcKRljW}gI?2P07d767AHh$lLl1*6g z@=y`2!PZn&l|U)E3iQW>hFPOtg;|dq&za(T?^P97!Jcdl`n6*fB^gZmQYL_%;{&D? zaJ9>qJO*mrq3j(GIs3u@#*jgYjYVJlos=c)M-rP-tG>rQY-1+>4d-uJYW2!9A#j99$|NLEB82BD$)h2sfz^5GPx2j(k`obHn?8r znCEJRr|c(qX2P^|9$1zu%GKeL;Yr_z*XG>eJ6%qioqG=p5|L3-4-uU<`Aw@g-`US^ zd4h+RvfOj*IvtsXEbb^aM@*wI{BCPAS03ajxgJ1J2`Wo)%{-JLoB|33i0o?9pW-{uoL{{@jg$+5L= z%pzjqSj)B!O)R!#mUN_R?oa{!%Di33=^rS(x9XUNWANN?+LM=~%*_}H;{#TI*xaGk zhtuMktejL?^%B3&f@$c6x8n0Ahk~UdY?KRF<=DFPi7+V)CVhS||5HdmPku;hT)b_3 zM#ot(bQQk0wf)+k-w5q0L(4UlnC5DxhnR6KJ=8R%WT}X5T2>2Vj^8!g$fm> zFkSHLKB0mA)=|d@V`W9DSG8!&JQ(PbjMvCEE!WK?S`m;PJi>N%D8+oW{ql#BWCS1wd5>6-9ky$BvF z5Muhb|G|MO*l3Uivg)f-)rtPV>$iM6tkDs%4WtaI)|4sLbXPPJM>+bzaqcZDn*Q*r zl&%L~w+N85YL&nb?VFNaV<99C!)qA8n1w#!rj3GrlzgO1k4Epe>7X+hw@eS7^gb zg7oo=&n1nHvN^cKMMV+CmgVyN-5Jgwr&x7S*YT{~T&BCZq*xyDKmPNp3mrvAN@yBc zGHHrYULO}Deh6~wy0s)G2NyT4deuD@2x&MbFY()e0?my^44$KKMZgHLcS8Cm$bJ3Da zcNoKe6mc$+3oLMzQI3l_&uJARR@{HSi$QB+2B?NGW|{~qXd+ZUr+B@yKd&jKtwEAn zGRSZR$%&(S=^op=qO3=sB@!IB8*;1D+MsFuD}BVEIUHkL_)!sE>46CDVr6W+yQHh9 zN!S*?`M;ekFx?#QNssqkrPF_){<&ugwH3GT6Aui}0X{*gcpX7c13hTPgpLvBi$^+w zm6Q_}td4jBgBtcN8gM7A?VFvveXFYrJ~S2SqyLv|7`iHu?B6d$i%KV$kOY0l9kG_2kVwF47*+mY zQ0l_wpm%k8FP^jv))FQaF=vn}!y++@FTJ`RTF+l1>QggxSKo79hAxSvzK$GFaL;}f znKz+B`d6&VwB-_6b>y-1#{DSsCLw%eaKFUZNQ++0t51#!DJevWiZoei-Im%Uey@oU zuO6kCI-Il*ILR?{HbS^YLD!h=iE{ybXI zLdj#C8S(^|97k%CQh(@#zP=F49g074pZ*2gf_65`#HS;7y&=aUM`FQf-!kGYeTISS zgg9s!DEcCz%R5L3EWarpv_yqWvH1RH1@RAfVSH(k!kzvTZ7vJd~3?GW3! zYTUmUa0RB~(Dg|+X1cQw=i5WwJVJGAT;6WowR( zn*DYhxEEpg%l3?EV-{c@MWWi@vK!A#q=f;B;jkxn!WtyFBU1VSBcXTX%Ai?8kjht_ zTHgFF9g!-!K8;)CR_uM!SszESF1co5`j&Yw=MhtQbL{?K_pWG3pIAlkLbmeiiy9Kf z{4yEu*@+2!(2+z`x9YWC4v8M@fu_)puvi!rx@gEN8}P^|;?MsGX^kNh3WsBZUTRn9 z`fBus#6l9ze7PE<+@Bla{iPmP#rObvEr{4vK5-eS#|vGT=Bqgh9!(C zmNsHX)REwgmu0FeN|1=#@nvsBLg}qeUodR4V<1@c`TAb^#f%T(?u2$;)`Zu=5RiJ8 zlh8A+K}+Q4{@SihC08*bqm+z97%hB%!#WsettAO>bh9R>pc4+5`2y-WljVGD9uwkI zYxg|;r@d0P(`28$ma(uYkM=I$53f=k7 zMWU3Oy6+E(@V0?DcN#IeDR^V*e84N0u6 zu_^Gq4#yfl_HqXnsD0<5`&C&*K%GEVNqlnDK&*enauJzUDk z2Sd7%S3Htogs{mQ|LD96!{R&7O)UKCX8zEa^Dr8~^{$w4+Z&nrs(1!ZS7}eqb+FTT zSRM{u;o3Yf!3nR&$n84iN@y!lWE73r9$c#{>6EUfE#vI&#>Xg4Qm z(+gC1kfU*K@I{OR+Gd@jc6EfZy98E5Z?U%#6z!IFC`pFc+G^#%oQieq3{F?bhvYPn zzf%8v%yJNV!L1<)__?Fx4XYd9WsPBOz8ghqyzM|P-OsXQMs~A;U%*rhIQ7k1ANYrK z_NVck4?U8s!bU5^Md#JitbS<(j=c<^XflzCSLcYA@)sa_X2kyDiwHH$kKTl97@^_B z>Tu5*V!%?{hXAxom0gIIfjwQ#TKUD8Z1=%7{IZ5}AyhDQ>^k#t+-K>$o#j{{2O2PU zDR4PaZwIPoZjnr7p&+SUZ5fQhC3}ZaO^}q(kzB2|Yb=vQo4JM@=T~w7`p{H=WK){d~HMOW_3WR1QDfjZu$aweobN0uE zQ#ev8?r+vv|IcXylUp`2__x0G^{iz7R)z0^S!xcV7};D*Jqx|t9|B&h1C#tA;DJfR zV;sp66u8;O232@RWgna?g6Nu9oKl_CXJ4y468eUHg zud~V@a{G8WoQEJg+ri>~XrGhChXH^0WlY3+zW%7oq!vYP%vUZdLf<7gjU}D#;Z?K zIsUyStt>YAK@2n^Lp5P+3d&v@zPAAaH85RuuDX2MpQ{`@AFcgfQ8HDgteQl0-~?!2 zgNPU}>4b>0PMyr0ec51cw76Ue&%!1L1zP{`BMy7jdj57{>(|M_-UA;GGuBVzf>I7S zlxtAuD|s2m1jsl?b24qxWp^1SATHz~wffyK@d1#&%9F%*#|AIAv}u!z3@Yyd%pPsg zJ|1SwbPm?c9-^Pc22O+{NlwM@g(oJF3kI!CX!lDo7aO)J2pH8vO5EU9;YjBvtss;8 z(_+UgyZlrK`|Ii)j}}8kWn`e|l)hD(K^Ld3-|i2}x3;bf0j!{efMV&zC=P)#PvB5X zE@XD+MOXeNjB)FA@*{=k`rz({HJWqwlB8~8(gv0e!9{N`57H!9<{*$4%5DV?IuoBt z`+Zq|raj?H%wZ`sn3ZL6oER3%a!((JZ%A!!UNLso1rPyND2enB{dV*cm*2F(QD3oR zo0kHS5*2ehIEaB3L+xcXSgtzqc}k>;-cJ>s@`JZo<5EOPkVAKRd2Gk6hdx)aq@YC( zpGL_&N?{vdR$vDXs#MvB|We5(Ckv6|3P7^Hca1^r@P2)KzByE$P0?f1#Vv zb`w>DL%ncYHrc$#CP?r!d?7~W-^^D3Pxpqxy_V>A(_9n!&2(t2FN9Q|UD%^czbt@R zwjcBo;rC(ydnnzgz^~}jZZoZ_{ELRL|Do2w^h^azn0_3pCN-cd&9oC4*iwNrAZe}c z&Cgmv3-1sFkfZ0l#S0oDXnQDS^bDM7aR3r4xLzE~QD+s-7$+tLbEL~m=hk<7ULpI8 z>ozC$?Z!U{yF~7&MtaCWxCM&uC{!DkxEk*0A>@Nn+Zi@3tzI;#1y zDx4Ha2|SL1$I;T7_=orkjs-m0s^2JAC+ndbb0EEKo_I({^@#S@@E}q|do97wCZqMD zgl|zG>nXh@NFH{N1&(%&|MJRa^1x3mPrFm?Pp^nkZ$)wd&_?^d%5-CHi2)ZiR#sy@ zechNPQBJ4|%Z&l(0sBE};TRArVC zch~IDafa^k`L?ELK2Wr1h2W#Y0E|>f4MA*iiMzRxW!jgKX2>C!I1Gk~0dE_pAmTNh zuuJ3$zJqy|hfmOT&Lb|~L}$3BhhX=(@L!n=N{HQ<_z>drDf8{Y>IUG21rmuIRi;N! z=LoHj>vONeIYGmztRP?TMP#&C3SEAX9cij7t3~~L4-p42cRJgouF%~2`GEi6#uBb! z$V!;9c+2X`nrZh!YtG;z~X#GaA)FgGs|9w&un~JKW9mk|MXxrvv*U(WIdz-7F>Z!;5%B64jMsDDSXwiOFE={_Y zBD3mygvwygmAt_@5`ncUu6wE2hu@H}8nIU|XeUDK+_RdrCV^{};ukKDlv7(*o#9L{ zbq?*Can|ESbF$KWM?M897k=WV8E=!q-JN;9bP$mIxVdHwcO2bP0ZAGmZaJ4Z)+`+wClIuNnA|2N>>gCsc+8*F zLx-3W-^3BiCpP9Odeunkcg}h2Xwhk6$4qZ`njU4$GnFV&kmWw-jb#zb>)TLK8G3o7 z`btoa&qJpyEIJQd8-O*N$JcY&kNv|R?C_9uih(AbCK!SD#Rx6HoNB?C^Lg_^qE6Vt6aI<6KL<2O0w zt@hF!e3OX(x1?4=J*#G*@)gdr*p`)J26%UF_y~ z#+pr&kdohC2ut|kC^@my&2|suaNLIrN=>Kb3j&ZN5>nrf?~dK?{XD27J>T{?X_(6U zC?tDxFeQ4}2Pru`;qlo}u39qQ_QGyrVg*fDD&l)gQQVygmU!_pzx-71EH2lv>eTVd zXWe=S+_bxmQey;|{P+jKS1?6Bf!5vrw8Kswt62Q=t$~s~&2_&vq?Yyw;G1J29$@*R zAT8MMtN?=PFqG(gppIpDa9zIthMmJXYJ5dhez+dSY0l;M2<)-$;&q`8ehEYGcZ0R( z#Pn(ywEJ>y1`B%8L-X4SYGW(j@%$fkC}^Th5fdk8@^r-G-f({H(CFv*ZU2ipKKyc%zsSbcPOZ=&h&L! zhq^98frQr-rx58e-;W3s+_8|fB78Jp+-1Vx zU_#w6xev}V4xT2y130J|-vYl(tF|;-ZV{i7l>?Hm@4rmhwK?F(D9^QLdq<%y(Ob^= zLI7B|m>Y-xSW8t66rce$GQF^Iy&R1o7IER%`b3UN?kJ>_L_}%dw|BG#7i$*NJB_XylUDmU<(K^HeCP6@kHtUO?Mu2JF5A>X056wy6MT9skx6 zdOt*RL7DpZgEvP(n@f?NTk(*vm_iu)aFB3n54^E$&eAZY3dj!bFW@{t)dBt;yH2&0 z1zxLzFT0Sf1S6Cg&-J#vM7adk5zR012K%ftG}Qq}e`A>FlK8VA>= zB;2CFv^ZwK@Rwenx=XtLd9E_&eBw)8Goa-GvIu39%KWED|TBWQ%)V^!^R*YgBD3CT$H&lI~db#2 zF1mpe66gAmbEg#KnA+a;0Rjc$_k9F3xxG14l3uVH>n2#8wcn6o;GCA1^87jC)&F2` zrr?nU7aCquCbA;QF$NL_Tb&-$jM8@rfN*MJ&E zv6XoZ5v9ha%rGTd3(x~VGv8DWW=ht#*rK7WjDC%Kn8ivE&?W31T&2PSS86 z22csiH2t+dMtmwgPfT0&jHma4rl8@6L|NzhlQV%(#*hHoXLC`4X7bVDQ0gkQ^7|e@ zM@Lx!StW;-)z=KkcsAy=d1>j?X49yLRsd06J6X;*K68O&KJ@E%*pWdxT#%>T8h*v) z3AW?fU`$ZwwJ6#WZPx)qX0bcaPfUUwcRG!^_u^ajTf&g7SHXu|q&T}06Ed?|6Cw{8 zxF}HW5{6mBBORJH=k@_Lq%;G<&*FhDq~37Lwh`C=9O}1FIvzEeme94QR0Z*8){c-- z100>Ba((k};HS{tN=M}!8F%p%;-ExzXk+`%Q+O|=6F8}PbMZ4T3=R5VL{x>7AfnzF zHHWjTaOTJ0k;b#n5{jGOdJft?%4_Xov4vAXF{X{;bHB>zL)Uo`)r^5Zt==A+NOM1K zbIugi+AUZ?ep+PQvw^EW@&`{WF|bZ>IT;H4`aO^SZ4vZyqM0A z51ri`%yhXctxZmg>2F=A^@rloytu#?oZA>t=Ad%fU(cdCJ1nl2U2BiwNibOg)^?)} z_st6hQ|=@$i%8!P>4NG%9)`-sjN>7pb;s;}dJZM)_Q;;C;ra(!1rYjsq7b3|v@WVh zbwxlS%?UrcS{E&z$3aufkO+{xMDy`A0}$nzpBt1?8us4?5uz}UuvC_g%J7}Cq?SQa z(*1BE^b?qiw*6jj*v+h5Fh}}EairJoVG34ftBw6&4|uz|glwXmP>x%NXSUA{%x=*M z4X_T8XbI=hkG>3_t{o5v@C^_+Spi_kdcfDC&Uk>W+p75;H%UOP6x;AUTi$DaMDPkQ zO-XhD20{lO)Rrfz#cM8cZYcBL7{ElvI&p%%i~O_SiOowId%NU&;?hM!ks&@Yd;RmY zN28W95uuGg3CjjnL51m@L`==hDHKlFCw}>@`k9_cSm4rphxDX%GiD#?N>iLgAX2{i zO=vFiAGDs2u6sjl5}w7|Pp$4)k=u;T)69A-KQSqn8<~UdKEaI|c#_FFiZQ)t^X8#l$5{INlgY!5Rvty zBl=B1<0z&_Ct8m?_ZcXDy*r?^E#7t2$N4fYXw* zMX_(>eFcRXQZ;^+eGmV13q}SD7V3j?Mi?sn6eXi^_4@P`4kVteEZ3&p-e_Z`<(a!w z>l#TtJcQOTu3K?>Gy)qzG*A%4u_bgHkED`M*0F`_{?4>RX8<_nGJK{=kl}T3T2i`5 za3ioRq2X)v#QTA&^c$bqEntoneB4T^{~bHOkXe2EP-!+$ zpS(lPL?1-ewzY|+{|L8Kf5UTY=-J+vvWZc}+!Fu_9Z47Mpj=QI<$-Rb1*^O;pqHi= zOO(#jtd`=muR_-oKPW@bh-T`y;Q)dL#c*IIxgJF0Ij6m;iVB|}KbAtU(YDwFR5{UX z^wtN+HQaiTnd=gAdeCBCv#Q%NuInNVm-!U+7pn^8Q;zVV`;s`od!X^!m>&Qp;J>q| zGGO)mrI7~#26EG2h&d-@p3n%hB9 zw?7hc-|dZ+1dsVh-D@Zb=7PS5kF%fcoT?6Pc=r_j)L(Dz0z^UCe}R!r%vA>_Qji(J zx1$xI;JbiwdE;cOoMm^3B&43(XaYRP)2yHVr)pjT|Mr0V0ef&F)7BFYyHbENaJW1g zr);{a(x>&?7YDd5&8x^zqjYY86(4WJ%tLX;Bj7%WIyBXX{ z8S$*Fzxz0^{LtJiWnagA5YKKWei7Va4C&dhEv2O)3<>%5pAsFBpY^t-#Qx;;=BuYU zKJvhDNlbE-MJE5hLZs?~$y1Ldf(TkEQFNc=oWHVQ-*htg4b$3rQ*BWjjh56?nT;xO zm{mpj^n^ie+}AIA=`uBQ)XKaYu-W#V_N2CaxX;Kd7OB=OV8|Dcd%_p~J4C%l`F2ewv1E%Y&%=0R zrnDE3!AlH@(<@#S-h601u_PA}rv-AYx0A4b_n-A7(+~36|UBP{+o24A}*PS86!rxNgy&dG{LW#b7s->ldOU?x7hcc&)R%| zvW#J46O>^OX!-K=*+0O-a+qAfe==k6Sr^A>>;^#r=-nE6@%HAVaKbP_tMHz)$6t~M z)sN`(y!9Jc!##J+yp9hfYU26A?BPviGj}#|=>eCVP-WI-mcdNPFl?O%M)ED%-Bd_b zMbH(KAIapL&Kktr@jLaCrJ+VYp>yvKj;I5>Q>Gk<7tzh3-2$Gg5?a?F)>Y|TgQaT* zeqRbvk`GK2zSxk|Ik28+#!%nXfHb&HxuWf#D}!K z2y)TM0*SVFo8eCcgi49nXMHX~TmTx1{F5=^t?o6VZSAg@o&Q{8AXaLDB_k4jf+Cy7HX0UL-`aeatj>KVlxp@5fln&@#Hc= z-$n~bfvp2~3d4o!l%%+mAXKyA*&6zGuXFrV&Y-~TbPtntQx&$c%dx$%ORH#^IWq$x z!2i=N>qc%14u>SKt+C^HIsUhzrOxMN{Gh0-DD1L zhAfazuzcaJ=<=hZgBbeJ*ERdA4vqga5f%VZo`-qD+}+qe!08RWyx8U@2iUK5KVx(5 zIHiq{`ASkb{NHdQmD6y9fx7uO^#H5u8cXE|RON22!B0HWX6k(^VTW?DgH>S(&Vg7`I_TxWljdz8QzJFPlPmw&{I zdNSMb(peL>9?$^;#Y^r0)I0EV{q}@H zL)wr&&`>D?n!;R?ZrsiNem&o=v9gLSqOy#ba=1mEH*BUf#G6*74 zgxi0;Pea}KblGB>G_sJ{zomsdj)UXMV>`e2bPGY+%;z@CY6Ss%} zn&GQly4!c_?LmTog^$ny!TjiwJ@wLN4P)Fce~6LE=M~~#lyzrw|0Qq+h`HAxLAlGS z*Xss*LJl0m=bUd27EW+#vj(tBu1Mur^{mrJu8(ITof~R^VC3A{L)E{n0SPxP!~HcQ z{xr&t{s7&iS!Js*kr{AUZ8IXr8<6?rArGVuTMU@MebQ+cOZa(Ci8|e5g%wza*!i)z ztUJep$n!nG6KbGP!wKNIm%gdCIW|Ir<;b^28NPY2WSOt zB=KX>-lRy* zo&e}eH~FTpc7yhl4>jfj06!x<^#QlbHN>?8R-8*Yv-*>fzffvqnatT1qwGYs6jl?z zXtLGUW?{haZxL0oS4DAaMSD1%3f)keWalgSQLkUI4F?I@`cVyQU`TFQ*CN2&na@Q| zQtv!N7*|6w4d0r4WkS>Qg2BaOq15|hl;Kqya5=4&$4Sq4U=?)H% zV?G{zc9(2>p?Ft0Bw4|Le`%w~jn%kwR1RXTF<0T#v*YPY4zrfg4zepsqOMsefdEvL zIM!;WxRnFHRUyZ;Ddk&zJhMLEHWTTAwJmf|oxODw41mtaf)M~*K9*eBj?9xeyD}T! zxM(j=sDthC9~281G`&oxP5~^Fs2v%-$w+ak^!7K1R>8NZ=jSEom=)ai;`50=d~`)G zo#XRosw?%_2dj2eEu*E!0&T>kNgz?5-l7$x9ZuKYN^og||Hf-;@gqVOa`V*c<&@St zn_qEAC_6hgiz^To(c9)UA`~8@*}Iz3hFHAbl{`MpU8iY+lLz7icTNj%>t6MNCD$Lw zWWL3i#%jr`k<_$9=eaI~EagyAQdHZ-Px2K@YNbm=BcU(CMu_3D80W&Z4h8dg)U+-+ zYKKxvfh#khbk_DBWoIz@gK`Tzbb3z@``M3Ufj_RU$-s)2{TslTms5V7`zB8NJ-WL# zR7IKAn58W_T%#es%8E+4+Xtz4s1SEzo3dfjNK)w&Gqn(P?K}>SJf3vUHReD|{m+IN z<)T&EHO0%FkZWS1hNE_$Nqezi$N(ZUW7d2LGFXWeu3ZC6yXU3tYB?@)3VH#w<7Ekm z$p|-oRq6Se`%mg}1ka5vWH&Prc&W3vZmw+SH>c4-z}Gijg2i>qa&WQlD84 zCXCL^VqA)ErOpTH=o=D+Q#S6n9Gf=@^F7GS77V1~(b`@l%Y+sy!(rSdM76^a026CGn~L( zSEb_^EcE5R$B?inu}n8mdikSZqNxj18ZH;WB=n)D4M?Fx3@~C=8PU_AClqS;hON?F zdEQz}#KGW#Vlnn2eD*tnj>=*ijl*M7ON?XThAe& zFU2UppHOZpqSj{HJNNLFY?7S}XXuM%o8(XHw8%DEB_{&P5yhrDcgx$;Q_1b1=>4}l zGuBIcrrEP*7p@OA&!1x4 zoy%V{i~O5B=tgc)4vM!00A?6}#&;Fy<4GHbe4`w;$nH(zsPs@L-W5D{3J^~g%&J+| zxU+%tLM|sND8%&aU;R=W8FYtWmy_#{Kv7Ts*LAhrTto<4K{CkgSjp&b+9&r)8P-b0 z*#ZF&1k1V9smWE?c($(=0NIKkJ$H^r)&4^2kGE=MZukv09^h2tB6!1 zQ#6WR=>G;@(83MmFE=g!uODK0a$LXwkGCO5o}d6WZSnUcSudHOiJ!SqFA2!Zu#=sR z&)CIbF^$V8U6OXJt?s{X*QDnXFy&pK*5>k5_e_gX9N$5&4fvD>FW#-)si%cR+Q7bS zl>E>9uuy1^d{}mME%q8_4x)3Z8)NAj(c(Q@l#WqwJFl-2$eBzDQ^Te< zg)@F>-|d_|XgNKbyOb%v>ZHDIeJ!Pd8uXb_e5Bkvh%9Z3hon8y~KL`NPlX- zlSy{m?jC-SM5|jJ<~ck3;dW(=()U#<8N_+K5|B1-YgVC~vNR>1_}tv)}Y8TZSQZ-HI* zu}xPII}acn-8Ij-h+}2r%ksZyD>nF|BAU5t0|#A1mTp_8eAT&S)DC~ZXRg`?17%0M zOd_82?0^NGMRm$9ST?Q&)&IixZiJ_n>~x8?NPGe^o`LM(DT8Qfnv7{$s{=}4)2$*g z|5I_+B$h#6wQ>g_e!a~XDC%au#|vnK?Y6d_>SCBiA=#JimXUd7+7$12HvjWf@`q33 z!6SP3sCZ8A?v+r7puHO0ScqHW5pR}Y=u4J?IDkq}=s@he6*f<|o90DZ=E|4MuDIOc z5Juv1o&5J#W({mba<+&H8*~UHoPpMxbZ;q6+m zY%=vI$|)0~NusJLYGs@N2`ItI6RcbC5CYv-g$LOqNAM*(Ton_;e2ALk?~I9Zj}J9ep5SC> z_*9CWs{CQ>9aAz#zHArr3VPe`%Yy;TIwf0jd+nuWd~SgHCc5=aRUqFCwlyIEoF=$n zhjvXwPp9~(z@SFBcyd_ z!;`febJT9B^l-qrFj!KX!bGWrRwQGf{njvbY>>hcv?^t_&L>#`YE6uIgva)cAzPJP zl%A=NFye@b68T@WJWN9{b0YI?oz>o3?gJk zbzc_IfmdH(Oz(T#GhC=)jy4+7$5&QY?d}1i-1`b(3>|Tvo+fPk>yUf67drQZuIMeK zbGY_1Rk+5o+=eab1`TN&(JrQ_UyX~pCuXcOE68>vfekAsiutsBP1WuPXQUk)vMNZV zwJs9xs{juLZ=|3XN)!0vUeN zUiZ=3myl3XORVPAK*yTMn|S`Vj}BUI42Gb{hO=bvmd`Gi2&rllru!OLgg|$gysXiP zWfJO2!5(Apoeq7Kw_9R8OSz^(<52cCW33ifH_Wh=k>vmqE9Ez*asPwx?HJ``_qm-P z51^VjB_*J;P5Rs~Vc``gzN_JIdCY0Rr!mg5XqaofCO!JX^fJHQDtx-cmSyqU*%c=* zKL_%en%umN4TcJK0^kM$i&5ljsO#($|LgDKbP-M&wQKX^WWsu9GUD%-6r^6e$W9)4 ziqpL;c=c1&F_~R~OggW^$%IvOnLpses}K2J`%M|n#9etf4tzy-4FBNqZt_r+UC;vV z{H<$SrxHE92VOuaaC5l4qK*Xq>7c8yzl9UW=MD38P6#!s^7D}`m%6iN&3QoH8`v5X zb$8<^2_Ymp?&ILOM5gXr0Jb|)?_{;?H}8aOX|TU0p;+spEm^~J-}B%AW3QV_l9Q#6 zFsEX%A+_r?19E5if9XA6c)Y&f+v^Zc{bY`YkLDrFUf|4r*`Wl&0_Ejuw{jG8(3D=x z`jSq2QGrMWVtH5`2CNJ-&i5ciR$xwBeHU)~%Ad$J7$a2?m+DK&UAudBO}<{PVUs@;Y>*CjKf59v}}u92%OBDYiX* zow!GuUf*H!qYUe1O^h4wLN}OgEFj!-n;6ry{PO|oIX1u<}z@o>BOE7 z`U4CGeU~pPKS!yK7qA&Z8aeZ?La3CWVOj;gC40X%A-A`zC}r0U7)-jro|R+K0O06q zkYhN215INl!ib}r66kMHQ^9o{TO&jy2m~E9$(zrV&dO??bA7?Mq8VTD#OqDVv^3eI z3rIhkr1XE_O?sOG^Dg3IrqneXV1nk5)sL!=#i%TPRpCvqXQKg2ws-fCoKzO5Dy({%2skTYS({FU9PFiE|+ndK6*)cmyec$kRBGgW- zl@DX1Z(dR5Q~XN?F$+X>oC>NF-$_fBgs1xp9X-f^EmHWN4i?DbqDT(>j+9iIF;a1{ z0`##nBk*KQ)v|;7b3YUrQ=8I?_(xhY#D|}@TByLI+d@38BYR_<=!biOvvlsW|HE-W zF|5aB`@bxJox$~IP8R>>A7{zwn!;U~&W;+R8j}di>7TNCxVfvkf{2yW2bzZMFX1<% z-k;)DC@!=EDb9TdP{Fk&AJFxA3ky=wTpR@{O7%OWNg$DBERowe25IJY#tQ^mXmw8f zx-DiGS9h-V3xV&Y^KZ4;~<&}x$Psp{)<;<{TTUX zZGjpc_#(BGXi`gQdI`8iozcHo?ZFTqQP!dSE}^T{$*_h>h^pop>q1&$k9J-k=nS+| zBZJ%T##rg&v!edSx=TS~fhU@_WIl0Faz`TS1_GdN4^wcQfg9W_NlgdgLr+$TIbTQF zbjc1SaUiugPUr7g_*D<_SwBB@BDma0miR)J6IRA`*MVD-NulBdfiS~=t&1|M@+U+_ z>KUHIG?w+eh=iwim1PejByOK?0{i`nHxs|0)Jm7ifLtu6n$#pmQq6F?$T@mD^DhMg zJ+M&NWNVU;V8}UJU)cu@Z#N1Z+WS!Hp4fANN?)vznMt02Equ7M7CHnZ6nAMP2@k^r^c;~V~f}`VH2)oD9>D- zEleh**dIK;tePRNI~MaA^`Pgfd$gQuEMJ5V z>&}JDuG-NuDB%+nT5cd0a{yeEQC$%*d`HZ$QRIKCg`+fg8=I*tB}*p)8FYzuuWhBL z$M^+?1yue0nII`KRI^{NeTgdR2RkyhxsizqUL(K63^9(C-`ZL2Z_l1n#7p!A^h;_r zd7+Sim0Zma=ncnqlHA(&#!!Bovrf~J+^57+8X#)7`?_U@mjlE^s~G5y2(0d9AeZK= z&xKXa&{ySu82$$79!!Z+*knf$4*vdRuS&yi$Xnq~GEoWd>8e0bD{uHt6D{jS$mdRfxc&}Yz$!s@;#44@h zxzZh6<~cQLv~7{0$YNJ6;Xt_Tq4Qs`)1aRJwN<9Tg<>}W>JHnbfangFj^=mSMsA3> zokyB%%*ORA!e6|)Eioe8B@_OdOB! z+`)z%0v)5tL?+oTI_52mt%l&8@&<%M>6l?+h6?z=%iS}XT>={Xzzn@VyhefRJ zm5&0@L&j%!CH%xLI`e@y=&0)o`DYLSrpO_2@aOr{+nH^Gs>$(jEZ8YdwH_edzw zlr!Ju!SBD8&d-AVu=vhl#9t|KGkL<;H_o->lpXNx*Kh zXP@np)>+Dm6Ch4crvlE}5_k62Sd6yylra7xDk-jJu;+-WA$45qbaST|nBCHR7C{uP z$Di7c_6PRs3a93BoA@~IB#|jQ6j<9|#RcsK8;^?Sz<}Zyry5Ykn+CMt2xb>7vuLkr zyP!=ZZW37V?_~8>1m!uWPQA`j)?`$<#Ro`cHwC}aI=?*aY}xr8AueqO6*ACo3J+p&cttHOw)9z9nq6~Ky_^jOnTL}gHptk=?Z|pDxERaZ4`<4~S zsR1j8YU2iyv@w)OlB@YG3RBNhOUqVM_4xq!89C$*iI>4>3#*(LMc#w#o`QW=8}SeY z-P`l;pSlQI_mW0iP84$Qm*~YKm2`jS=-N8~X;W!HF*mP51Vo-6#VDW9>S!xvICYXo zH=!&(K?$@;*-rhaEB1fc)=|srxJ2)Ztj_A@l8n6E7vqVu*Y?}+*ro#s$BkZM3&Iy) zXaOuQlObj`04sp!mpSgt49sxud^RnKE)f*8x!mIS-`eF`?H!UK!rD;!s#{}em|zo^ zHl0=c5vRc*L{#BBHAb*vug)m+cZ^rlpZ8;ZYXdF#lZqFtL4C`DZIrH1PzX&A$bIFg+^ z`XdWe(`573o8f08G9A-SwdHus67aTcAmZm>_4|)hE-!7Bdj(WUmGJC3WcA|`exYCW zPdNUEX=48^BKhY~;OxGcp1M^vPf4NovsRA`W1~WDv+$^IrZ@&|`kADu7kQc{DY*x- z){9XBEpifrG-D5+JJu3j* zzRoPiNQ26rLu{N?anBfyWv{2_>aa83}A)){reK4gRM{3GOcQD0Z;!@rebV~bvs8BdCd5JB*v12Wc zm4s<{7P?-afy?$s1^R5Sj@M(BDO@=kLtp}E6WA_^qz?1C&YtohKTFGZBa_$T`VpRI zm$*qdckiuzHOPrLsiFK*?79z%ja3%V%kZi-;(zooT-WG!xQ+*jqk9v8mRx%g0Bo@Q z6?=w+p?1r{4;GwNA;9u*YZdqr4Ju`3rcql=C!oc5QrgW!iId&{|33i0U%rEHU0;}y z^ETC?UY&9c`$op?@q$Xz6r7X`VLUlX*C2!8PIJ4spxcKvZ)Gu|9b?4Q)K^GU3=A9o zCMJE2iu`dC*fR@245DKsxVHhNXu>{(`9LtU;|Y2In;cs2U{Q6+$kD<< z<*sZ^O9G}%3e=q0zehGJZ`m8F4J~JwNX?{x&&6A_=4Uf5qCS;5+yXnX@In59IWqHS ztqW}|9HB7L*aNr*?y%n!Bn)Zp%stm8emZ%vVyW4dCulp`xMN{@}MoXTwcQp9lo1#HLij0zhAn8FJ6yXHCA zPSWFHMr;fZ$+f_J)ky`v>c3x6KTRz|H!G7k_7^jE$KE&ll>U^s;1=7WgY-qPZMdvW zSj6Z@3{_n!q>||VL-p*u1?fBD>6%ALUN%#6H}c3*)C!iCnoeQz!OXwa0ncPh_=tny ze1q8nss#q1oib*3t5cosD^(xAFL#!ti@d~Pfsm+$7=Oc}*H31aB8>jg(7YJmYT0YF zsYpa`i?DUBt4mXVJy95TnJF-LrurMj=not{Mn1N?c~cs<`%3$KBZHvQ1>cz>@Hfb+ zud7gxzMihb@yNvJ0RW^$@X8_ruh5kr>!>6U>!UNk2|)(thywcZ>uYyj^mx6=s(Ec3 zop9=)`8=6FkqVt5R-HB3*>bTTQfpha%Z1^;@;x|SLUzdKbFsVnZn!v58Fvf%uQ69+ zjpo^DQB)jjQQ^EmD~@L)Z6tRc>ko*L2+o04xxwF3nGM=w0K$~7k`m*bJ-+j(!fv)! zMq1Cn3X$H>{~!A_-ZrgmnYhYCJ_O@-F%)46^95W^<)rKu)xRUy5>tUq2NlYBA@_wg zx4w~Z!{+#Q!Ur*Y(Vk_A@}ecMkr$m2RK}%e`PI*d0G5he!u4=He3Pi80Rbqu36S!x zLf|SHEfMr}Z@%5@&mimm4qoS~l{6TQtwv&mTeKezO>e{+K69%79e=Hi`FY|`1^`kq z3~FyxRIG*RmwBxU+A|-1dME30ya`j~k&lK7zbAlV!g5;^CSvh\^67waU7V*!TN zp?+xwENkABUVQllRbP-@A&Bqep$nZ+SLw-P?7hf1AnZ{|5~)}0-y~I<4xKo*v|eQO z@yDFs?#N`0AOgtY1Jq3A-sp0Y22vG%H3jpajYOLh3|uRKIenZouMK^D0x2JhAP&L; z=H8m3|6WUYp0T)Q+e@#i&Ts^s-!M&4l977kOTu6Px(5+$WsTUCX^suFky_`ELQ#R;`2-xaE7*j4I$gf&-@bsq$?$cZ^ zg;J=bG&)AAstXR0It;GZteal%$1=<~mrh+W%HiT1&CWxil!dt|lSVhxYx*cUoRb!os zLjz9?uv?&6tS115W8Sji-?!b4>(-pAmzx*J7q4@xictgl5?IgA0Jf?mH0HhoNGz!i zcoOFir*g@!VWB5AzBKIFH9>|Cp8WZ3Ok;YG_TOAEtM5P0xf0>3rLQ{47Nq)m3NG2; z@_|Tu2RrrPO$$V|aIlPGMsM%|h_&D@8KW5O4*gU7s{ZgVrXz|GW&1QM(TW_3s9 z@mTuRTigBE^%4g#UHP)l3^j^!3_>@-nS5qFB|g}eAh>uAi+T&@ebmZ+)-muxI+Q!4 z7(a%WpLHPEY|=TO?nj&NOvw=Vq@&-_1O(Vh)WN?*T$TnPtNcdCUyND{RrgLUke_Jtq`1~3>oXB;6ttnj*E2-oM3#$ksooZOaeXR|g}?oV)el{Dg~*pLNfhrdT0GWTJLy(qfn<61GmYI%!Z z@lUK7ex!%jAHU|6WPXY^mVF=wxC($Isj&DV)k8m6!YlLgcH#&9VGhm-j8;h}fLpsc zqsu^OPwP+af$fG|JxVnX6vYh!h^$Y@ppbgV+@uN^($wZN&2&sw_Rh?hrnLY;N2XLV zzVd<1(NKSmu|gEGPN4?!nz!=0Hr<+N@o5jpk&-Cyjbjei-MQd{bN@qto>~;5o37B7luckfpxQMV75pR zvwAhEd-@xJ@KQv>tj6xGOa`#MquRR_yySR=LOwom*(fB{7-~w)=Q_tr#gnX4ZAg=N zx?kQyv)ZJU(`9*p;CeQ%I6djkncJZe@J8R>ag(GEi#?K;l(dYy=Jn`rjFr)MR=KFO z{y4DBzsXYdqdIhUUR>-+Xk=K1Gh+^jvI+{jeYQCOF_H1*vJ6>gpo^191YU;dj}cHA z`3!a_h%iuoLtcm40wx-K+J`$|*7TUMC_avBZXb)lYF#t-IQhh4yahYDF_wkZX_T;~ zDuIX{mjnS-1j4*?qK)GbLC+L&oq6<6=QJ19lj$foQ+IA!8{+jd5jTcrMs4wGjoS@# zh8f)#Kp5Vhe28zwi&9UP+$?o~tn5dfCmr6TmuLk;mr!mT9?U$=Z66}uz_gjSQk zPpkI%Jl5IMEk082*UP7(^>cbp$7mXrqv>%y+q5!QHCq(%59CwxO5li@8pF0mQ zG!f;bEGD=C)(OZvRrhG4y0S5G9MS5@z7k+gp**yx>RyhlbYRPQz5Sn3#n0K40-pU$lmYNTTC zThIdL^g^mXQXr4e$WUl(MDCpq=|u3wbq^@ikr(m$XzH~f-@k}^wF zm7@03%v3HF@)u=Y0?jXV^Pxs*(Be?h;n3)e1(O)IfhXO`6^=FGd9(GmLQ5OGvaoc? z+yDGdkbd@@Lte=FS}esPKYiH#2Ux_~H*akZwHYn5wc)psp=zA;Gc+zSy1Q>_by zjWe%zZo1a_%5iqbZ2J@8=`B!mw+IhW*JE3^tcW}DcOBR56@hrlK`TTN7rWsd&y9H% z=oRe5Ry@^K>)2S#Vhu)Od#+e00n)*4`tYRFiy?WGIJAk$p(2j&&|J$UPpAyzCt|4-jD1vCL_xh>YoW)u zY4<3}UEcW}GR#fgo`JC0>smciTORJ^!@;T)G7} zaU^KSE|stX_-3B>Oa*3Jbakr}EYw>^$ycaMG&8fsJNVsC1K12PN4vQp$WKnL=w%H; znH;C9gzB(GH5R>fpI0TjZ#VN=`kuZruo8y?+RM3%+kAE@SkHA4ltKuu zDTo0=rZp&@p+$R*6}5wDDON9Mu)%BT!Dr73)@ep1Ak*YLFITMoWfe#SQ*V zq$d2R$yXo3i!+-|U@bQsqSp^d9;}e(dW=Xu?2jY_N^&8p4Q`94IdBZpw1lsp_Ae;- zIDqg?Qlzise#kkh4^H-{i^NaS)&U|N2V9_&)|R_N-~~|NlGrCDy8AP=r~rWBqBUmX zHI)$s@khQ)G3Wp>^&MYPl^~fmJC;s37&>8mi`REFA_^lgFRXw0-g z7Fel&`5gwC2GXF31yP8F_p|Q=#JCfa3br#@T_p5Ou@4>YK25T52--n2ugx)`SBROPB2|B*j&UJGC#|b7V>K)o};*716(Kok{+BJ3H^Z8#yGdzt%P?1z3?)rwf z2_-v@3G^$oM@#KmC&B4t50jn}sQ<2^HOJ^;QUb_31!u+1oK3fF$6tO4B7BuUi6#)( z)5RarKrIj9x9m+yBu;aMdyKHT%!yOy$)?93@<}zHros{WkH)j7I86VhRnf*7J=v1A z_*xW7E2GC8g147dA)a2cjukEsrHH$(k?e_;(#LHT+)BWiOZnJa?Pkz)M$Yr z9l{ntia=%a6Ick4YyMBKy#CBXk=C(Fv!>s`<~08I_CN!GI)Rg)?n7mP*PUQL{^}6- zze46+&edVBu22hu1<>;&I+|wBm2(lG7w_y~wBHS#vUgB$$Zh%E4Gk||bIYQvw6SPE zd6zDee)CwT>J!jLK?~-n3d}`(R|G4#cZ7~Q|A_N}(;ujl3G`fPW?Dxa>?J{xE<_|l zT9{m+#}R2ctd)RzwHo~T8A;d>_z0lgbQ_hD+?TZKAtQ5wvs4MWYPdE1!xwxBozZ6S(2Za4Ng=; z_+)ER=yfnMx{zWbl6-*&54B9dbN`X}u(EodF=Ntzg<>}t`ak7Nc|OE%YA<$aBFQ+% z7vAsL8)!?yE(jkKbV5`Q(I=m;}up zxG1abiAk9Rwt z3NTN*Xt*2WC2SvX+uh&A1O(@HZ2;eP#D^Iu*ogTE3x*U136~%jQl_DcC8Y$=oGAX# zIQo0x7>=~%I{nST8jva=a{HqX83aW3a7Q+K>ec#V4*+^G#>Okx~x-KZ(v zv&hpw4Vds_>=F|(XVb9;)H%=f@%>ytBGLAHHxd=r$qS}Nvsz)7O+unhs76tj)56TK zM*iTg(r%Y)w)Y}6#XsP*GRh*+mxWUmGRh`GL;PFc(RXJ}M1T@ii^~%k*&%}=7pNFY zQ5pCVD!7aL$0S6_p7d1?BP-vUkmHhJMS>`q*Z<&aY(c~dxh}UKdd2BkJj5LXTQp+P zC%rbhd42yVX7VZQPQ>}=3;n3>%Mphm(f zy6w1PFQnp>6XyiqPrsOb%O$pw6M8zRd{^Du@NHW3SuE*_?*0|f^4te0>-K9>9|?%` zw(jw@W!hpbXRw5#;|_xc^-&9quweb0G%$p|229N*(yQifM@Z5{CxIsYOFIn@4<~C7 zDcXZB&V%&O`>D-?jXRr?^Br-vU z_y6CRk89z0zvU<3Su*5POR4YpsF_~8=xTmO{W<^73SI*Elrr!TDFjK9BZK<3z;tG) zuMl>Q>^)BN+A5WN@iH4M?tlSCH|n_-B7)QUvEI-Id~aJ z;Y8w7o(aI$KlK&~619LF1W&RC4ahW$zGDCwes$D-{G%g{Du4T{rXG|fc;8u487tb9 z)X-rMuo`BI!8qnGcEpsB0iyc296DcZ@9$M7b&9D)P=zNsued-;4NhQo%HF7sMAKs{ zKCnwqgO3~|eE_*({Xqz!Z0xf`T9F{5U-jupU3_da9vGlc)Q)RB6{q1jhIg zYEG@CKX}mJ{deKHitY{pnM~w=PX=T@j=!`Uw?}QvI(b2e>GiF!FHxNF=}bPqD-#5Z z5c}eJgKTE;zKdfxhoW$~O37enYA7ipp3#B>JRxRpusAr*wv-$K*@>NzqHPuExLB)N z7Uw1X0pnl?w7L>>=278L(j*>}qhiJAEp|WeIqPDY%*-Q4PVdgRdk(p&7rf0#>dq10 z>BGa@-T|J_hPf9lsvZEHyaaH;R9=Y5H!X{~2c>6aU+m=XO4MN6pQ$;18#$Jqt~1;( zq3XJ}3@!!EQ&2&yd@rZ|%_~FaXSL|9bcyTh@x8&Vn*HijtQWWWdqANAbW(207=QkH z=+32sw-%N?Rda3Q=hDYw#I=242RCj2)SL7y=2{9$@w;zKK?b3!E3gb4f4z|QYQYE4 z_NmgXmvDT+WMsBk$@#e$2p-FoS0U!RqpFWQAYyE7Bk)%bByU$1_LMilxPEM+9S8s_=7#=bIK3(-ov&0P z;ynXsg|;=uj0y1RmGXnr@WXkr>luvp-}FcCxfZYiTIAVawiX_ptHaRdrOZJfGF)na zPcvr>MV;;IruJF-I(07hbOa^Mx`{;-H>lleDMyE>fJnj@rLaC?)21ftkmCrLWmj+? z@FJ6*Ue`|eRhq{;_Yb@y{1xF|k?xB?{@jTfT}Cf2Y}i!QR0DTE_BZSiU5#2Jz`H;3 z^9GADPH^wZt>mjB+-~E!xy-|g++R7ToO70*Gkf{>@ERlLRun6@GF74%oFvsU!&#TC z*{|PE5WSY?=)G(>2_u8Kc?s8FJzVNYba0RNwfJRY%s~SoE^6X^D@Wo;>v$JS6f~c zeJCY`mz)F#6D(O`MuJ2nO-{@eqx0F}YguCf*>gKPpD`Abu<1Vo*j#Q>K@3l^oSKxS zkY2YLHa;CD|BRaqC-Bm~(QqCE&;Je>`<8|OdA0j~7+z(L@M}FKqIY$2f55A`%*_d8wXo8 z#IF#k)ssw%?-9Tzm8B8m$HH(wc`{O*CU3={zlE{0>2PiVd=7g3S+t9d{+$oC`%5AB zDU}N$4lmL8;06!#JHwOx>((dnd@d4EvGha-0(;dD$qOVYge2vbbT$1+3 z@zmc-ap8_CxqnA4;ii)$Q^w*$@IUi{UO=5wQ(eg;VXMrqO1M~zy?SqaBc(qmv5Dy+ zNXVR!`c5oTEdk0s^&0~T;y$|j-e#rRfa8~Mu_D0A8R_Ts144CwBkfg|i^L-9*gLVp zpcJ?>jKX6ZuD7Xi&PA?WFe0g+jpKScVc{s zd%d9@qe!?Gje1(m-krHio@h;aP4^m{UAm&+Q`1xLqG-;>$wf_A(J^CqRl?X zPZUvg?%QLhN^rB;pKJ2UN)|d35R8NS0w%BD42C)7Y6_;G*xGP(fzHQTWP6pc^bKV} zUNO3L1p}!szk#-Jwn)@dRAe=8#Z1VS_SL#Hx1{8n`Bj9fL|w%uL}ACt&5USEWuG&G z5ymLvDg;<@Xi_AH(HCa1M4#V`jSgS2F#?~dz5(Nuh(%RAl$s$|ofXij9R(Qujl$=@ zkMW;Q@tr}Y?a+;q1df+b&9Ksx61Oux&0FsFPqPe)J3(L8#yg)EU47&W^e@ki-}PyY znM>+#`jlDe(HybP)Q`2tLJ?eQ{^bT#8j86yyq3`at?aYw*1^6nNGvAsgW~Eeb)2EP zvL)4zoa@4zuxuTmpewGlbq>&$smULop7;pcDJVU{6X;*~Ysl&@L$m4UsN5TlA_)X{xqZG! zD#yx-)4@)Q3=I22$~rFQ(1mu{PmB45%LpJC{iO|t*fYXB&it*B5PrK>x@ z$DuwMC`OfxDe*f8T%ECl_k71@Q$S{X_W*W@GfLPU*b(AS#)1xGZ8biCK&`pGS&l}FV-KAn zkuI&7UJjry2NyyP)3jMu6ju_8*wj(g*sj7~HAh4jakT+VQ2esPO^lv|lMpsS42sti1Z>T@

    fUGDV1yt^(A3`c-+Y2XZhHt6q@&Hqn*RuMfF7MBcLjjs z9Au`*E#wZ_*yu^%=^^1}v}MhL(*?D~pG=cSd$css8i$ z>)mBMJv(2`3<>0jmAX;fq}&1n&NTxWLL_EyHCARXd}xNNH9D*n&J`HSNt&Xej9=Rt zi$T(XM?R+NH`*&*ggKQ4KXjUhiKwVF{XD4gclgrs72d^1x&^a4f))$KbuB$jlu51} zm+mSUTv_NwrW_|re)?C9rOdmbH-`t=aX-TZ^zw4bUwo&0N<9s=!?v}9MmP@!B8bP` zFPCHDo`^lWlVp5Uhp!izgar*+wCyeoYULaL93-t)hILOf?RICNdePl{#IsH#Bz?g6k8Iv| z7u@E-u@ow*(!V1Ye*cbmtFsG>t#fq_iZqX&(osxwZ@UwU$a{Kfv(9U6Wqj9Y*CP|v z6I#9#Euw#KmiyZ|mUn^!q!}2DVI1j3=s;StmsR48ao;oaCHCf?w^j?d&c(spkFCJ!{RaIyfK)zwHRe@SWK{fWoWfb@H@X}M z8)uB_sW6sCYymFTf_tLOUn&&7y$fkV%D|YZd8kwRmX_pSa7r{+WRT&6SF=l>5T~nU zNUVoEuCislnVoa18PN|7j)OH={!*r`Jj+4nBqI#lJyY8CB}jq##lxB_^_-x>4|_e) zt1?AI=uT@1qpX|lK(nAy3QWRBV^vgyM$_i&JiXz^fJ(ky(!y8^e3@Rsf)7vKhdH{V zM9I)$gMX+4>(1rTI-f?UrA2teA;5_2+do=UWRdHBJxh;N1aZVOu^{ zo$-u|&4z6)#P*v_H9p>y^uJa&;xDOc+E0S%-;P8MClA0l#ffp^lG+Jf?*(2#KZMBG zGWt>7sO~7j&8OUOl)gXrbZUX8nv6AGhY5rM1rl@jV7QTJC3zF-!xS0&WHWY|J6N^# zk@;C-V4S%h5nt@!PM%zAg=*J#APMga*%Hkivt-F$$A z5Ieh6&2s2zKLOCjq>wJgL8J6ZX9&GUGCqLb!|etqM($(t%Za&CTg=Y>a#Ds;g3mO2 zKG?Ro-22*#qtyJRkU|s0h7{Y2!1tr~duM&Sg#NO@BnGB0tuoja{dlq|**SPgz?7s= zn%ov#Dt??DQj&eRCb(j}hI=bSs6_EQ_9-5q$KN3gPWRVd#*@pi5Jk18T5kadrN)gs zwd_a!G0fUnMlGlHekedLqQcPl-+mz^cN;AS`SVaFY`>M+G-V^EV8l~TR}3a+XXbk6 zr`a~*deXBYinAcZq#a(DDJiVr06AjCRcIXp@6)@wYEIGubt6ZP(i5=R%>^=uCUF+n zb`xUmf3Pe45tzZ&M1+4opI!t3RiR&4Jk(GrvUMIXOk6+g>R9EUl zKuZ{=FSUh+l7nCgznm^;8zz%;$5szzrclB6taLlaUn>9Otp63&stF;xvf#qE>}DDM zHa=l)f!whzR1!V}>_Sd|gC$U#m6h?#jsgK=HH>f<$&0aaE7rDs)> zE^UJAgfOM%tn>P@3Gay?;qOpE#;Qh2*OYeWOu^a392;fI zMm1U4i`l}4<>Rbk)fsl{mj3Mk+T%&tn{*JR^`_i5F}iP#M4e2X3nk7dh^sc$iXsww zcsCsvN?n3@R_A#$Zo3x_AuBlc1?yiOp{|_vRXlclBK!^%PVK2!^ESSy$c;Rc%ad(c zKbXFJ%pcYs+W8N2km51&B2h%lsOiOINRV>WJ*fVx%;BF##&OP7T@?S-s3egk1s9{aKBFdQE=R+d`mga!vopzrw^gT!&ZKCs`7 zVrd!MecGh^VV{C)vUhSziri3ZQDy-`0* z+bH(@-Ab5h!Ll7=u>ye$n0Nu#qGQ!m0PG1c6p-_30ekNLXMS}EjL0AexTJY7r80Q( ztODFo->!-o|690RGQcT4&lqH#ilmwD%r6up|MxXJiqOg%3zudo`-R#a?pOZN{KU4r zTQN5}eA7Rvi+M7=Pwh#y+9KeBSB~|zwQ?lTO$}%%a^4dm?3}R4H?9-`WDxwwG^Q*m zuFWt(Z79iW_36>xM!td!(L+Kb9%|Xp4rf5O?GlD`F)@{%b96y?<)7?qU|4Va@LICnt4SM zmX5V3!lZzk^)Itd?jINjrf(vn{V=3&0xK7+S|44S?@jpr@E+aSIN#8Q+YBd<-^geb zyd8~?+TTsvQwLM}0Zs-wJR;5mtPHtQP6ypSN?wt4PAp+KTG>}(rMDKwWw)XS0quq; zDF=01YC0Ti4E@ircY{#QNoso(MpX4EB0>cz{eu;Q@u!GG06{X~A#dL@4--;l1<%R* z^8;&FizO@jnEPE)79ds%b;cW_{2MO#Mfa_P{L8j!@Zr=~g}|yHL{SuXWF(fFcDh83 z{=;*>^5wapf+OiXd4-YMiVPxaOnHlOrn3gv68v$@SznuiV@J@~czD!GF(R7u41>{$ z0?<=f71?W+ya4Np)U=?Sm6fnc`Y)5Mt7!IA&tP31udt7kLNRA(8S(8n)RysfZUkpW z#baUE8*+4Y@k_HZ$9Bl-j+*&A4Bi;aZuwf-FeF?SM|&z=b2W-{jSclBvq>pOHf}$g z*+N;6%z64zI{V6q3!h{N0bAfHsrfzn$mW}ICzzRXd0xo7T*iAXK_BA=0Qh2alAP?I ztm>8JPMpAlW5|BD9cb$!8?PnG2WjxhZQF+sDOydO9ewS*VZy?>j&@NRQG%PUEKOJ^ zvD&9tfmlkbi5gN*<`HGMD23pz?PJve<$=ZdV)v_xjQ3&H8thb?w`ndkiDgr+I^QQE zrpuSi==-+S{irEb)H`qWEDh#QF`vDLF~O-Oq#M=65 zcBN9NQEcEb#@ir2II`hRG@EO)X@u-b=O@O+P?#8riGn@`qW4C;i!I*G9U!c9OcEIM zD+%j`ht?1Bd-;f??RN+2pMiIn>Nvmt7Sq`*hR1nKlpNZwvtn29z##=O5jr5ATD2># zs!0RmW`O*&POgz|IaTlXt!YGBgvgr5SNfQncyD2z3q3tA}dY5jm|zw6Y7AW?TF8g;)gUo$g@VVmeQv zGAv|n*S3hEq}Q}nspxJ}QkDSfpJ->hrNbIyNIiGgY%b{4u7TY-T$il?^4n5MYR#=$ z<@^|8jgvrf8lNnvSGM609s?m*ih3TRl&zT&K&T5_0<3QTrrzOsxAfds1d`nLQs~-< z-}NF9Q>9?BlqqndbE8l+sVvYl$}I>~7jA(GQ{X`S^bj8>IHf;c0kpnpPdRUPkZ%Ix zkmdig_>Ob9o8XjFfrJe*c1kM18#spT1ie7&Wcjhu<|H7g{$VRV-O;N=oTFbzMGuX& zC)lJ`NJRJuL6O7nbHM=dcjR#=I8A;a88CS@O<`HOsR@?K?dJaelq&&Y&cMofrR4+b zf^63K3$XXC-k_vY2QwKVYdqX3^ugH3jKHB1pk=?u2`?d6R?E2A=O}+Ep$nwC z3bb-_Y$s_Q{d;8WUc2}F2wV5=#a-0@RfakSHDV^*FYQL@;uxkX4cmEzNwLN+*T zQi)g+`Yk7Qq*^u;h2CvV*GW&t3{+PpO8{r6zBhb~=d1Psr4<98B|V>MQtvo?)i_jqpbvNu(;S5t3z!l%? zyW7Q$r8Y0~BCHB%F9{bX;Cgj1U!_On(NatqIO-J%D^+?+LN)tDT>|PhCOj`_<`2n9 z#4^?69SN4j>2P+NqIV&O?j`&htU}HyQ+y>16m2PL-N<`q(T72>kxg~F%{Nd!2!@2z z4J!!q-qN~NCguRsplZ{O_5n5l^1p6ZfkD~>kgDvCHugKnA90~{X-D1ia~Yn21ZT{6 z;5$n;fMe{kOQXjso8h%S1HQ`uXYPCa@X(Z13nV!~>_Xh_~w`()K$pG8omogGfcI#X=$)c3;Q*WJ4ljL{Ama>Hm#y3z=__T*=i+NW5 zLQmis*1f%@L_`#pa*Tb$vwQDr%kg8&9e4Z-;LQtM-P~lRE~P6#6eIfojJM)p(kn>( zmGhCeRAO~ygZI{p&Yk5Tq84&yZ#xA6xUJ}d7h6eS4S1DXgBy1EJIK24IJjTa;{&x6 zBkq3+;S9d?2lTJlByEUKZYbtcQ)jzu#9E2I9#5mqw}Qc?abSkomTgp+evFunU5}?y z^D|yn3p%{=QTj?(9-k)Nm21~p1)93V01kPyKJjpAaYR9_P%*iA_@KLF>-l0 z$(D&h)lz`)#isis>-p&4>E z4K76Pudbb4YSk=sW{8#rbY-{`!4KPYCh4RFpiVx69TWc3q#B*`UoMGIxx7`Mc6nA- zEI>F0;2S*4UXLOb@t;A7XKHjIM(c1%fAcMigaU@=21AidIih}E56Bc+HmGupcIu^U z4ZG(PFq6voq8JOgA2%>tKTgyr1q09Vc(9iK1zz>WVH%s?pssmHvxzg6h*K6+$LxOt zS(Mu&Ohi+5``&)2H1tb1@&Z;CJv>xhpZ|&ry*m3iz2(0Yi28zd_6UmRLCih z0T)pUh2^=fZuLt{yxsB|-xX_%F(+tVq!pw=RDKb_f&v15!bnrrzNRJ!YO*N!6V9TG zq=2xUNx^mK2y|xLs0mf}?h0@sS#`*-kGqg1+<6&XbmeJpXgJxVTvbGbx!0O%whCHMHSq>l-Wi3qy@?1f?Zs zle~lWT!%3X44P0&e^msbQ#S2y+f!&ZpkpslVy8yiJ_zoj7!d$Oadt4vrk|-t)c{la z9Nv^HuKj2F7f-IYK5i3+yiCh+BiS->d)0}oWEu)wuroODHBT}APn3LNNE?e{1@lZ& zHvqXxha*y#kj+f$LH;4nqfcMAg{JK{6tPczNjw5@>Mxhofq7b*{F6pmxxY zaTYBmE-~kTpdAAD<*29}L%XtX8NAUk8e&~%5P6t@M)(l?8@e-uuv!1^9_^JVG4QC;G2P$abAudo477^y zx`&&6j41u4xer?l@+D!YE~z(E8}o$VeZW+@zDlCLEUl(2sx3zS-EA!zvHqj3VwIRl zmz9^K+o%`#qc_)LP6#t&9A{wwn1PFB$7|dr?HjC2oIMh|JuaKJrrrZ*0%OJk?xZmrixGx53r^2|5{QFM>a`FJF{vb5&ka>zI$Z zCf=3@^+-~f7NOlMWz^0E%++=E$V0O~nz0q4f`xeN?BT_my8dw$NGC#9(Vm z*1@J0yGCYIrxMcst2%@GhTc=9cASkuFhh`yozz)_S(%Hs7tc$%6V)-o>%oG5p2g`4 zZf_1ypMv2-G4=jtM%4HO8t4m{Q~()e6|gXViM8AF9k#syDHOO+lqBrI-Dt;3L;rwh z&}sO2&ExpNbN|WQnRr%zHiPW#rb85DFOIC;^NMF_dx_iX-1FCbzNqhBPb0>xfX}V<}51&szjXhXwlAFqsUT zB18acgnT^Fc8qx$dpZO9O}C-M&ALy04D-ywgmE{@O-=5OwGHSFEzKZ#{Yvzq%Iurd zB`BJVLO23oe6QOXBWyG5ee0dK=g_2Kg8Zf9N8~5lw4pHlV4hYjk9wXJr^lw( z28bWQuw**jc2MV!@p`_;vM@&UHbEI(hp(u#_%ta)<&;H%g^dy!o}@!>cs zUy)z!dB-p`rHqBYQ@#VEs8YTqJW6L` z@X{vgvCwCF`Suz&>B8KorxuO_?D``aSI`x%RK`I6T(tq9c>69TNYYUVJov3N!>_mi zElBqgT`)8CfkF4Z_0=f;Egb{dt+UoeC3wUZ@QqRao(AJv`Q3QoSvWo zAwl$0No{0kHAo6bc35$WdpL^O84lAAcV<_;E7FkCf?n`NaM`c-triD>bpJ_UPMnx@ zz(tn)co#;$N4TqPoFribok^>993?MPINW+bYL~UR(g7K!E%y5U>FC4F%tEG$jr2xK zEISw=0Wnw0|38@92#^%2dOq7isW7fhXm+1j27$I2JTd)KEy%mEIi@=X*8w$b?`NGm z?^rf&i%kpd#%T&Sjb?mE4@ig|Jk8FOzarF4khJs9bX(TijLn5+lU=c@@HrBvxmsFG znXZMUyM{B`^i>H>{@x;wxuBJunb$vBiHiIRz^_0?NlauJrNB92!bdPR6noEfBYs*) zA!e;To!&N>wYtM?qC3|+y?ppq5BF>xO@ z2BV6n(J~5=HKol})aC0qIO&x7loVH2Wk$Tc0Sqb4A>D4s6K4OkZ!Xmp-91ejr_zR= z@RWhTt$@*wyH;+*`P=XDV~8vZ^s&rxc%u%SsE9P>4b&Z5l^6m8)2<3<-&%jxHsCee zI58!H4wDd^k8Zw+pO0F{Txw{dlW(hHRRagOE4$bEq?pp1&KUtTkO`mrhJ!(w6LH)W3C(!d5#)W(iu-82&#BYOO_IQyl?`isvA zH8rR=w5F7DU}txfvodYXE=q30=W_XfvN=>nKcCM_Z~H2p*0cEmV28}Sydmo0<`yWf zP_S++ntJq}ZGf^9$!f!+9{!4?eqDtWNR=@d27akXQ|b$2+^KlLX+ys1wypnXm}X$a z#Jq6|tRsl_)~SB@v~?s)x5EZH!M=V)%D z!U9mtx8HWJaA71wdaQSp(Qc8N_52wgIlXaSb_<#&a&W;~yaej{b2{j8My01BIdRE6 zL&xh|?Mkd>b{x>1@$1WuhtFi2G4<4rWb)_I+R0dG@pL=BA=PZ7v!b|UNRCt-BNg2N z)?P-~T4vSMAPDJ1MYEEfBF#(0);z4N^kJIu<-L5QmVJ_EFiwTkwnXy28f!9=ug^vZ z{m^>ZqaC53xU(FuR>xOw%AvBfry{QRXN_0U$r2+VN3-0=rz=2 zU0ZnRMK`?LeY9KR!{jeschRuY$y9Ir4(lx(Z!f2D9ui6q?}QwPgb(qfSeq|eUyt-8 z6DG4e7lJFk8^MKd$WbQwfq;Dy@EcSJLkSv|XrWIlQo;fKTP5~_Zjauc|ZzEX!DeRF0^ zhuLH)ly(c@57z~>$7X%Q{7|wD8c1T2&Y#Fcq>gG zhetSSl!%dYQ)X3e$p%+>VNVj|3JS&YM6H*~-S+`W52&>l4xX>wTy6veq2yfv0zm!0 zdjP}(KCy;j!DSB23lkS9zP44iqS@CA%R5)D?q8&h1_*%XJj#sIZKdauTQ zm%x#`0>9hhaOO?LaxI zNPUp*EQ*X2&uGXWv{@+~X5`7v6<$#8W>=!{4F8q9Fw)liysZN2cXl?jxN1(tjLi~^J+ePdasI|7_x!%X=IBlU6L(cj$L}mPe+X-aCx{+Gk0SHDiNY#M(A6QjL&b7)?9jtSY9G?}J6 zYybXm$H=8}{4Zu!aJBYNS7bfV00);jRi3KgJvS=mzv;yq0pea-Pt`N zd-vGPPwe;pG!x2Bp+$}QKRmw5xjP>zAZXk0%Ir^}uI0A!U{HGu=UDr#VGy2f0z{0B ztw>ltrGb~8e~Kq$TFKejVA$WJ?Ys21(54yrK&Vf5J;AI}V$p)ARIQ_9E@a~-HJ}wh z)MeoB+gPQ_v0A_`9@=30Xd;T~e(BqIYJaoD(R~bZwKO&)$S;*iP*H(d<%GpUvH^8@ zl*g{^c*sMikp^4lwX)b5J}J6@0fnf(yp03hT8_C3RuG{>{Ncj=s0RMi^;%GJK=Qjq zACGP^5E)GMgv%x!J;*ZiCb=q34^#LZlI*@dAJP7vZdIR$ zS6o=@T@2hz(ZCmJTokitZ=~Y0Wp0OvW{4YDo3)PfQuSWAYQ;(=@wK9giDeVEpaG9X z4eF!@$kEG8qi^jSIQIDI2g|7=9j3S{FZtt!c!AMF63Lf%-D#T$iJIT-P7d;`Vae+{ zwYKF^#-V@|3XuegLm2Y%=M~Ltw1bDfVy(%i%6u0R5b8))Ww*`W^C(ExP&1xm z$o`@grSLg3w ziezhpEN}+w#j^ewT7p4n0>Q1&8Vy}G;og*Tm_@XQ4I-U3y3rZ8BQ(DoJ_?McuW~65Widj|DwL8F>vObq9TO_>89_IpKaS zn4H|oz&eIp*8Po|qKQw-c(&;G;Mg^J^TJ0-@vvOy$(}MpiQ{>$U8j71bcog1|Au%p zg~g~jNca23qKA2RG44&1PsDY@{FDKS%8!sVrI0cD=LZ0Eoct8k3HY}qCTB-s!LITb z>4JiWr(GYClq&kKtG2~ac9QorrsuV(E7z=utr(5W&6{y9-2Pmgn?~*eA6e|sbPKJS zq5z6>_Mh3MtF?}B-4Ty|&`&T%f!x+DB2r+RVVcv-oIljbHlF-n*BT$P`m8HE=#m-m zOJA=S;c<{hyTq#Wrp29=fn7L9|JV0Yq`5NCUV^M=0?=>?fgt}=cQlSi4gDU7r|tP! zeml+k#&lqjEQ8aYCj%)`X^qNWw(=e-6bgs`*eZw<2D3Sz?kRm!PyZ!kBiwEoH)s*F zm@4GcGSsA3liNKvct~2J(h?{&!V!>N?Z)k|_P7cH$CD_OCx3wmxiy8!_xgay-h+}+ z*lHjTXwqnJiR88~5P8$;JYsXZ4rn=yyH}9`?o@eV^)JOA@x%+R_W~*7A2E3npgTe5 z42>|39|=lt)#Nro8I+aNfu2C(!nWkjBsuIC&>8w+&V$z#H=?@EG(Lzs>f5`B`9Ppk zI;$=jR#bV3-)U9{eU|tjGSfwn7+W>Uf6*^ZBXEBijg<=t{+o_;mE{JrbU%Masq58- zi%AX;JeNIzaH2z3IQ*S-UnvLvEcV{ElT9-D@BV&td0JBEf|~=K7+qYC1){(Uxpq)Da)oLAR!i z<(1Eihw(`#SwXj2>P|OQ%-oIRF2ILy%>-hJIwKU{z47#W(|bgSW5(ZzoRU}(^S82} zo3RCOR(HEp{=4|Y+$XS_J8#TqFtXLd6MMN?N|~hD(MXfR8<>+^DZ|63XXJQ+6T~2n z2DI}e-fCv90~XfvIS!ymx2suwFa<)q@nc3RFglQTqm1Rohy<1Mb5q=)@+M`Or3{Eo z(EW53S=SG^d4-~Kf~NS#%e>ySndf|+vYIi4nFiOS-g1jn02SK$4Q^(pEq}T-oJVGK zQJ^}-38YtTZTR?C#oddgdNIM%L7_45d?GyrhbBEIDytGOu!Rw&7^1 z4cg=Hx^a~Q=4&4};Z7HHQE)E3MtoGJ{fhM&Vsy@-XQVP66(;_1qEw49?5ZbF>3G7g zWxHh^j4cfZ?U;p`VeMX^|Fnt*Zqn5u6i64Iwn{f!hmT08;9JaPY5CS+D(AIjM^WT~ z`d9^nm~8w^a+Gne+1TmibIi|W<3~HX&qctwTV-?KFEVkTn%;~snyMG4l zD6!VZKzP2C8vK)VRdl|Po~Pe?-WcO8I%;OZU75!l6pmlWS}{Vl0)3Jryd&|{$M<6w zA}NPY#@679#ZtjhBTxk74^$suAI2fj8uAU_A(wh z{xwUkn>OULq)3870L=Iqcnqkp-}Pu7v=FzzDAdR_kQpC;n7C`KvSO^ZI!oVp&zv_2vI^I_tc9s2gJL!~(ljHR;^5Gd3I zUbty-`~g84ry$ZOMGBm~kx)fP93!`vzkCy9qrj#&5T3A}V8`sVDCJQu5h{~OhN*r1 z1J~|Auw}8~b&hP4oM4DG6Zm}h^mhY+q_@3c#OT&DX_bYS1}9ODkTZ2*&AMLPomS77 z8YHq5%1P(bd1xRX?}0$Fe$HYEt#6LV667JI@Iq%_gQ-n|jR@(f-uN4pCoVb49`dl` zL}YSW(bp(t2GUUdA3r+kr~m%v3YCviGtTJT?yaW#wttf3KTFE@Ts^$bqGp*xs}Sju zR7JxP89{GjM2`A=P<4vM?Pgq8JK_20kUrq#k7 zhD0aSN$r<6G*Ty-q;-1B&oqZH@KyG={?rK0F5uVeZ@e-tCwrw_ zVOC!xO`Nyr>Q79Ny}+9f*f;}e6B%r>8dQNPgrC+rSJ>F7?IjcyX=8h;v}F;pged{o z&MKNuf1{!($|T%3U*u+cUq5TebgSK(sMkFV^o$+|?bdqe33X}ALD3SlP`B$Ey@kH2 z!PaTeW8^8*;hy4L4M_3$G{ABiDi{lOn#z$n`Ld>5^|41+#LC$a+3!K*s_eai_-+3j zAP*k;1P`q0(LdARZ}x&teuFE$gi3#H>fr}O&=49LP$hV`gTwua)m0l0RSBEqX&bK? z0COf3h#Uw2PciqKloevC@v5p*U6GoC6>%zRk&SQ+zo9Lu7=kZ#na3tzo~{KKBl5aG zTn=)kNB3MsQ$hGDrY!F`+a=AxjKYz_PUeEMhKCqa_A`hUlu%_Ww9!R3n(WD4eFjLA zc#z%WzEz)h0alz;!_fKvvDP}YM7CHnu5pSk5k&uN8E$-#+)MuDuZ4lE{#ZbC39!K9 zlfqn`+k3oY2FhgLs~Y;t8OUKr0_|}SQ9cxsR0vmQ=je7pIVmcK4Q{A+>IJ~5s zDxZ7Cm*467*W2-AmqL@53P0E>@^}`nFgX8{gSYZCHC?f91gOhg=jPY43H|7RZssr6d zEO`%bdiIbAlNI=Wbgz9%S0u1Lv%sHW-#Hk5D_t3Qscs_z z%_yjVe?+j?XlX_zMBN#wPgGuDnZgU$9(`o=%fC<|C_&hu5B0UvwQw|!KYX0c)Yu+y zrB!M&=2zi+Np{vQCmt-k<34lag6{~HQ+F>3=!9bw%5iWdE6BOz&48o4OROC9A7}8b zSs%o$MQ?n3Qhx4rg*FTGM^R#uSup~(b{W3Uk1SufbypCq{3+!r0|tpbWz00X49Py{ zQ*bVORXqPQmtCK+N*+H9_K7K;^Q$K9kcDI!S{D7Ai{*Rl!^ZsIl^gCP#$}@mi?&zL z)1eR^Yn6+1mNAEaI9(hioGMSpApN`Bu_CO#;p+6y>kZJp;odfpcQS=Ei%bA3#moIM zg-R7)M)IAit$%3QWxw4nbhGhnoP46tECNao0cW_Lf(wnz z4k}T=V63W|?bDXW7w4}vjuQ)yr{q`QJK0LIeJms%Rq%}^1q5z)FkCS?;*jt7scvW+ zrcp@6T4*0BFqN(arRApsn1AMo+8hbZ(n*GC)SO(dC=NH9KIVx{tYYDGVu$I`(s`Q;LGsH4|XI~zc76A_V`#=3HB;vDE1Dlg}0$>0o59Ex;( z5jY7X>`9<+M?oca3BWBO>|eH`C?80iu>qOQCY2p*ie%r?i+aj?r7q;?ccb-ZeSAxu zeUs01nqLTDdZ2PPL~y8upY3$ab4_7_fUbctD%7|FoQ(Zl^+~kLrAHEzVZtO?IqN z%hyPB#k{2=*Xj6gy6^f9I34QJRYLG=_BR}@T>;qP_WHY zn#E5b4@>Fld|PLuXu2uyA>|<;S8pCatWj+)tQq5vL7u(BDYcI>4bZ1UMPUfs>xLSs zX3C=joWQWAWu(cgBbQIx+)lKPT75wFQ4+`=g9yqmC$U+vqUTQmCwU`8j5_Vqhmg<( z_^QHB`kI&o#RbsYn7cFH9c46Tp-yH{yZ#HcbMod^z}4u)HjJe|LgZ3tP(4@)>zFmu z-XJ@mol2W9k?DO;f}E9HcX&rhmFGX$u8&Eke(yC(f|u7I#Qn!E#1S6#Nd!n|$QNl> z6COfM%lOhQ^i4)(KUf{uVH3kzPTy*1?=@*EIEf@-%uNM9^OIOB&{HAXu5W^`jm($;i4(YVqpGJ7}~`A157@CQJ9>|2_+Ycl54T1U4f zw%N;KQB^}`qdAWL1^dndUEjWWwZ+`v5@o=!pakX*&Qz_Xv0LQf=QfD9bcUmVgER3& zWQmCd>pb%Ba)!rs?P(x<1@?N|>RH0u`bOx?zd0*MDbvP1!E;cu?)=dS@}MEV4wQ)d zJQyQ-5<`0Yt8(1X)7I&Gg>)BOsEsUQ%>;GRUcz!mQ8#umYMUFe#Z!(eFCi6f_IWPb z68N}~lGQFwhqKW{9kL_P%{3=SX}gs*KF+t@sFu|J#@#c! zgX)5q*>~Vj<1!3ZX-;27>km)Ga#r6;HF|Qk$l2FUJ}1Z!;zsHP!B5a~|0r`I0y5GA z(Vw?<58u%AO9w|h`o7zUKXDdzqL|yjj7LC~qXM!3A{}(GR0=gGODkR$odwSGZH<1L zWqDv&L$|6ZQQP38Y}A~%5SM1ce$v!;!qrR1Q?8er(=r_6zv*iC?*j>f`u>zL$=n4{ zAa&+R9hNr44hJt>1{GT<#ZK=x!b`}FE_8oVvzh8+YrR?yu-ey#a0DcoTSOaW4gG#D zwESl+E>L2_g*x>(-m<{$MY6(IcHRCyL8eqE-hypMjpVph%5fxy9ERy^BW!*egX?|Xa z1IzKn%Xmq7+_SK{=4}Y0m+{2@7;&j~JJn^$ zaiO|({Eo+Ngiuv1dZjz)bJdtgU(5rO+}60><>%TdgxXR&c8#H_peqkrxw|9PES&Qn zIm`mf#BKaMI1aocnP)&=9q5e*6t?Q@dXX)duAA$z90_xkg4*8ewVwjWzCjIAbKNkv$I_gJY=OUoz|wApd;sc*UHFKsiKC}Iag@_HJM8kd*-vv@O~@DHN~!8ndadgx#!3IWRF_+$5ZC{pIygEa8d7v`k? zb>d}vmW1F-;j3%p+N1Q)(x;07+h(V(Ct^@6JF3>xNK2JOz7V+) zYp%xS6|!b>QOBMN+J6_^Z^e65yAL9}m1l(u-Ffh0u~Z-pOj<>q?!kr@vg%Jk23SdU z$CWhH@w`N27M~}$jqnX2CtjJ+*wmNE^C84L+x)wM(7>=HL2Ur1ZRK&HtdG>x)-N)| zO$o=rqyxXOWcwmh8Zza2gfOov?v3UI)o*W0cJI zkxmpa4Rak zmF@AsGKtNjJ?`hvV@K@DQ7mUSO1jD2r-=9a?|s5}W$8vfnSrbWz#6#sz23bb&V@*K zYxM+U956K*Ya5WJtGd;XHC_F`Ww9ut8_sHEVEk*sRVBN<`$@;IeOy2zr=>toiM9Bb z{*t~?0tw?@zf`t1?+_o0t9VfoE`L>lMdVwTPw@&y3z^k8`~p`L*OL*%;l`YXlNHCz zCKjzrz9jY{8O^gnw`l0x^h10DNs)-h5!>^rzvca&hE)W(wt+m$jII~0;n z%9M*=AQxho)bhSMsvSY^)K-I8>YAxsiLNWVJ4nfAKqZ35)4&3zIH1-ftX$1LTBSU~ z9D4sBqoC+|2YROt)sC0832}|ZHn7?e6`GJ|10AGqANs#9G2mcU^cs2lj(;+utx|lB z?Hr;gk`L&6Vq}?czr1JG+EX5+W1~nu%+IWwcHdtvtKpgPniuINbCL0p4SE@9)YE9N ztMM5aaAfqtq7oofQ3ckg^Si*~IZ0N~)tlj6VjrH6tS^GKPmQ2FIQbIh0sAVZ;O*bt z@B!j-gMR-xkw)Sx**2%j)RVf^!Lh!3446P=>o0Z%N-s2e>Qpu0g% zcqd%|2U18yccOarKaVhz(;HlzxOL#dW&Pvc27b9EO`E}Sg6a4I0ljalM)<%>U35$` ztepaL5?8ytC6TD3WWPPNYm8%|>Tzg$(X@aIzS46H&vW{J}NaW&mLmvY%x`{E|QkSU$7Pv)ciEOSTn@$_QhB5L)eE;mcw@8fQAWi zFx4W3&>_0}9%cqWID0-3Uf0H72L4#Du}2mHZlXyveQ;pZnP?XtJpo~5!}V0( zE3AL4JoNsclcXtxCaRAR8`&+xHpZU$puvvfrQVKYXXKp6gys1PLXLAxG>E>I9Jh(2 z*ZYvz_Ogho>sU)zpv6|lQlsX)CDSU7CDJ~{nq6#+gIxEWQJ_WEK!{9uj^l+_`dp(zc6z%cLx$S@2S~IeUq6_nYMkTy)3&~{S)d(;i zt1_&ABwsXs^3ka|o*+qzCEW}n@T#M|0w4>(qGKp}-t?lP6Ftmm0Phk=pwgjYAJJSX z&<($RfETc$rWhs$i_xEf0}>jjZT$aCZ5q9$Grl#0k`5jhf2FaO6_u#cCLUi=*+A>U?+(^@>8dwWTjzS7vx zj(>a0?D5kBiu3APO2H`^U6JsvT$KigP12bB1!6Xj)IAn!Wn46N0eM|02R&tptv>>FZz~82dD26475G zwNI**s$O|;1%s4hWM>kHdb$#e=k?d96$Lp{Cd41EAKC?v<%tiPe?Dl==O-0&s2_&_ zHxgVfSQvm<#o5y`89ao^usIi{z9wnLTerA*(oX`;;No2?yhFIVf zmXhqJ=$yEB?AcC5kfMBX_f$O^S#5cc^GHh}%WD7o#=ox}Iu@BU(*YGM3+IXz8Y+2X ztzhsNMe>Ce1a?}=EiVL72^k3Lyyf0ZXnh^mo2u(!*t*!rQ!t38J{~{86ei8ksRyy>`ko`^O$d`gj~mjY1HUdn)tkBJQqt)B0=cJQS^V zNS=YwianrP`cuq5afL9(CZd#%!HZrjKLE&*%?%#?$SUW})+V@H28&M|zh`a)h1Jc> zw{n{Vyx`}UsM0*4S;Xy<($bKiUoj}WqX_wAci6+e#yYwskG7bSU{4PwP5@#*;N(>M zw;v9VFHWq4)t9ZbcbXr)&BR1XV;hvHu2r>*uuOuHSTzmi_UcUkL@q@9(P`w*wW|=M zuQe9?QX}4@C7q&U4L3br@M&I>DRbWvp{}m@d+ex~@(>WaJiuT>nO;f@EL1#sh_Na- zqKh`XA0dFs#t0ueG660`i}s@FeK=n8>P>zcV4ih$BAVI(&i7g8A)UNV`#8azw$`=o zNDfsSLhL*!?@jNqEIkpq+}HBF`U39%(@7?1-BvRC9$=0IhR+W+wWF{Z@Q6N+7SPs+ z?@~u;Rqv%PM78N_I1QaP&D?m09+Yt&jof7SM!)D^Bv#2Pi>vk%yF9NC#EC(7!Dkv} z+CfV+EsY!?I=evUZWiBJaz(vqB9O0pNrkN*~ozS#`Un)pUdO<~Vp zXwggMb3D6Tigvflx#h0gR;l0w3(Nsq*G7oU24x8J!oICr)_r!c%*WL1kvzhsb`w~>;uXB0MI*+%{{=pa~n(hww`)N*M^@dXD zIlu!!K(bFvH{%WtE(9670=>JJ(G+c5u@R(GQ>?0zBj5WdEWke4rjIl z`p&S0lUets@<$3&Dxzm+eWbY|Q5+042RQ%=WjMT6U&%(Tghi+1+3*Fx8!`3E?Hvn+ zF9O0B$f{!bA62QllyEbTj1<6luFSi)1wU&qPF2(&gLgn#yC^grC8)E0l57me%3{leto6Kx;NC8?tu;j7AQU#xZ7Czct3Hz%&Nj3hX>9-zK9qwxZ(y1f^B~+TcPrK>*Eddr1MjK9H=) z>4d2N?VWQVGtwD#^JGl52`Y78-cHRwPYJnz9zDGppmPQt+^VibZ&N~eEX{cB!k*5) z{0@mWIpOqkMbWrfc+;^p*%i%$7GyU-$kq-HQ}dFb8TxP`WYupwUx1H!{T&C+B=RoZ z3p)GY38fl6=FA|6Ceug9fMPY1R8WYkj zVx)b(A!=r@v>`YTmPW4^IP~^-0h|pPmNZ>_n^I&LXlD!yWcg9z&66j#!109RNRNSz zM`+I1WfgQ`Y6$cGPgbbqG&z1yMgLU7YabCHLpK&d37&@uMW&&9ag`#Pk)8UfVdP08 zkCvb`ldRj}SIe4FB-s3w>QoL_Le}X$6FizQBR8P4_f#?W$_o-=gTLb85Mr@ozE?Mi zs#d_Cqk+#658jMZ%N8jxFWVqo+sQh9HZcX=CKHb&#?BZzuZIh^X$cnS zX4vj>CJT2q8hYVvZqa3?72F8sF7888l}+XcpJNCYO|Tucr!;L8l+oL2ipkg2EW)ay zoE@@!Zu?@(ZtP#C6b#sp;9rBY8L*#))wE6X!vbD zpC_Zo4<&pG56F;P_$HI??QE1*vS34chk7=X`Em`reFq|u&bdtRH>V``?A6J4r(mU8 z1zcMQ;m>oA8XM_EOSL4uH!fB@x`TG6=NnXv|7;#xWPynox>f9iP$?kXF(<^!?v+g3 z7dg=N?}D402t}|9V(DB-rjCdU`nzwtGXfUl=L#th_@E-3L{0$ADLJuTa=bV5m*3+I zp4yBEDVPgebHMb{Czu^m5X5$T6FR2p(;AN{h(pDxe+Wo2?~MG{Qr%Cx?*KLy4%GVE zvdM_&&E$1?cr(a7L}lc3Y|8=cPWkkRda*P##B8!n!$5m@62(2>ze`VH7;~K=q3L== z1f_+_DVH5k<#n)ac{kI-$!4ofQJ7N$+sP;{l0VWhGH?73n`a6QwBd@u$m{lrbFBwJPR|2 zzCH=@BZ-z!65YbA>K*WN=d<5wKv0MMzwc`;0MRe+Q@D<95YYFwAMve#UH}n4`yU*m z4wM^sZrIUFotu6KiV~el)ExTfs>8P6W1sT=7aq||Eqytf!XcIttSpX!P!=Ovh=n0< zqW>C1lpPy2&~ia198XLG*!)gg8k5X8i3#Fs1BHP}aBQOv$c;h*m8R}9>YmO66DuWj zk7tU9Kc~Mnanw`fTtWOia?z@D|8usu2=XlfkKAT@lor>r9xwNZQ$la&!ECvL>*U9E z-5RqBkm1hI{4UNhk(r1vwj>|d%Z?$*5a?~bX|rZRRTFP`hxBmZI6lX_d*1+^{_vJ% zC7SxO#0dJey7Qh?IR@Pl1AP3tnE(sc{qQ<7E)%odTQ@(mE$_GrU^L(E)_E(>^I9U3 z0r(lxo8#5eL|;K(5)$$2@9w)KH`IOfkp`B22!UuYLo2&w>SDuzjNUaO^f=>mQjy{E zUQR6;GPtG}8$5-SzAsJlR~3-Ez8WGhE;YwY$9F2^q8~8gPEP1wzR7Ejr8Cg@%oPMs zn@QL~s+%hSwD7LxIGBzv$J8%zWfOVhiy_fnzA$d#vknd>Od_9_IWM-xq6QrItMvq| zy7IXby%$SdE>9`q3%HAT_y`ONj2qGr%QHkwiBw*@zjc9Re$sv_*_zQqMc=2VAM^X8 zp^LKp+`s~$4987-r7goJTDDx5{rpvsz-UWjUL5>$EHb884{AQ`bb8m$ z>tIi7LdJUiBL>EG1A6Rg5v6;##LabahI$pW@R?jd?0-p*7mb~va_6(Hq;ImtqCfwV zx`v*a%p^Yn&yLVYN^cvJ+}v4Tuj%61qh`ry6jLMHk|~D1Sy3cl-N!np$+%B0KlQji z=UbX?wFK^yCgeG>o7gf4(Cle)`@N4_WcQru-ufdBPcRh3pn&d(qmyZ2#gnX1ZKFQ- zY#3Vn@zd-KJ?Vvduj z8ZgyDD%YVhiTn{-v0|i~Nh4UmdHVKX1M>SXB(78wXvffs#W{IE#1S=gtt+9-OkD(Y zF*fK)FMoN~2yB6|I^L!M!AL1vf&IDhmMi zVIqJSaZms0jjL|y2SHs(u8J`EZ7Xm}Kf3H`x3RPkiNI9s?RFuJs zi-%bfDr{_4w<-uYr(=LP&b7;DZe;<;WQzj~iC;!i%*DgK{1e!9Gn)+^DKNv@zV91S zRGnbgY0rqlu<8j9r0sq!)1e`+nVkpI>@-*CWXMhE zq|f>ls)jr=e0!@`kJ5Cd`9jF6+<=_%-FnPXlWH^6dYcOynzvJ)QQI;6os2;wTEm?iY}VM_?7Kk@^?J(`=!j2R0kNpfXV|Fh*d z6>r2Cbmjt{54TJ4$QDBsh#nUFm`o0|=AlxrNCFNa_^7arCxzMEgCfS;lb9RaaqDou zXdT?7*6dwBtg$A2_kKBmBSgGE0oX~P86&SJCR~kR#L+HmFC^g(nhxQ*Jb{ev^Tp6j zE;tR&ncC6Np6q$V$xU*P`pyG#18T|J8d1rI?-0MouN?BGJC*yPSs8?DV3lUhN~ z3(x`=Gt_xBUMH>mrA1mOsTp$Nr~sPjwN=EHt(t24DL|J`N6OOk#;|?4Fe|?lDK)Ss zX#O^W$WjbHR@DTN{F?Y(GIO>mdR4(G+E}P!GRf`PEW~T=PNF>bmIh0f{i>p~W|PJC zQ$fraZ{NC`Tmt8PvY+M#DaFKSp{MRv0=)HTk6qp{NLDIj#x#FR+^>jXt#;UCEhjJl zIa}kSaAG@s)XKUEN%Y!jx*0n;cf0R@s{FXnhIbGJPo*U_wAAWySYsfSHt07AGuQ_s zqI4PAr>jzhE3M1kdJse57x3A`Jt*59r0IR>443Yn2Wp4Z2-%mv`9uiG;i0-t7 zIqI@!Qu()-@7u_xU=JsS^K&33iZ_V(!)Ou2zY8OTq?`){!isrq+Z*cDV=~bDMMt2s zBLPxIKJ(#sdySV6StqFMBUIOC-Cm5~IH2dSBHZICYg0TN{$cp+J!ld?FlxBHzpbbM z=;!EV(0(UWR$~MDTGJKEKd#(Q=$8kPR|ya!!b%9x9?AVEwuS?`uk=)ga=5F7p^p9` z$xVAwPfrvI!3)H-{?ZPjLLO?I=49SNpEpfU#?M?+$}3*o6LS0TIuteu<1=o;YIY0( z^cyc?raU05D1ZL-W<%qG<%a1>&xt27mt3cr1DViP5pDM=Q=ZeVUVsCDC3$U;e&H8{zJ74gwDZ04e3F-j3FT{yc92T7wLn}!NP>xD|v5mkS9XruR+AMSU!ip8`4 zVzqHRjRP0MhS53*b%b2OuV}pEcGcs=PB;%x7FaHmX-Ung^I%92AF%W9AA;x@OH>*X z`>sfaH>B^|0UoU7~o7$u0r5sby+V37bupwis2KVLEBY=2PQ>C(<5S;_yI zyrez<$2e?ZSQe6=ZQ*S?&V7*om(pl$!2Elc_-*EN*fPrgD`wa|Wx!h`ah|}~JbAC? zzqj+e{NqQ>fbii&FWWot2beh)PL45TuHX-+yk(Z+tQwoOh(hD@yPL!?j4?md`-Qgp zmGvej-&F)?3H6K*9H}jHJ~b0K;ojC!^%T>3wn!UwD$6(iMioNkFC$_QD$2T=#m`3w zb_ioJx@H0XQ*Bg%*+2PB@V}H!>Gb<{7h?r~s<-R96J4Z&SJeT3@7#}#)4W_{LAe#F zvXwe(Q%{jQ9VmjBEVcOt<)v$gea;Pb34})os*sj8Ec(~7NQaH;jVZ4 z`FY>vAGdqIS*v~uCA&qN9)ifTU2|tc=nK_p!ka`{gBlFl^-?!av4v3DV;vnJOSp@U z)Uh>=`nK8|OOm02y&Tm^W|C)BlGEYnoUg|93l(RI6ya>M8jpLf5A|^0SHK=|TRtfO z!2{`6R69Yn&|5JX_9O4gipwsbhFkC)8Y7LX^R-$g|KLF|m+5GvD0I-wbXeHb59|U3 zaNKnJZN+Z>aIQn2VT{~t3||r60DOR9!)1{i_6yhpVZ79jR3)wzv=0&Gk#|FSvi$cmB>)1R~Tm zYEWfbL7zdwUczBtaF+6#mr`|;$MZOGvKV?M#YM@ini}4ku)wVmnDhF_3O>{0@k~@m zDjuLr#Vhd19PBCu-|ceGSvpk757!9ck6;)(P)TG$wot~=5OcXAa(*}{Jd^me`FsbD=x3!x9l&lh!+5xPbnY@8*w%HB9q2R<_;RmtNF56 z4YJ|Apj%Tm2oL{+wqT%?|I~07UI2ge4n>nY#Be)lAc@j3Z(a<238+*;v##yOpL4{# zHvHmrCqwGAx?ZV0i7+5}Rc{eOhL5l}-WOz>I`~+94Q?e7%gDuIB?qW(u-2u*gF3MfRws{6kSfY4!D40Iz;%JBNBM4qi384=R=7J!$Skub&Ih_h<2b z0?OS)SvBXn#y2`*Fi1fU%JJ?Am*Pd}FVT}$z#Q#@y8U3_rT))TDg|T|$yvA6Z zG>*jWuqG+Xjw$0||4vGch#}t=gsuaC!D$Sqt%c4Id)nid6uE~jTZ2y<9^LXP17Puf z6ZaC9XsEI9#`mk1R?1C#o|B@Yly&NX%6&yJcB&1h$jY@YEsWTm_|-s2@UkSqv0QTO zXsN)njrBc;KNzQ60yHx{T}D2bmBV)2(?LT%^f&s+OYu&^j*zy+Z7iWNGlvhG*`1>b zimq>pyuYi0iHS_(l^GT1JD2~N9aM3}U(Bo_fO;2K0z1k*oN-QJI7#T!^nPga6FalhjBX5zgYDfIxBf5t!XWM6A(Yq z!e%1rZx}PzcTn91R~_(hwSisBgf+CN>U^>!0pAK5_?m+@E0$AS{+cSmlH3y)q5twv zNw?G~+%3>YHTO0RlK=vQzO1m>;_~RaIxT0!|>TG~)8k6*4zi@SX zT%XMbw@gCnMiUR57VvPGZ&<^ZYWJ81QpN~J9AAX8-%TS{yA2q)?V)K@o#alM<7kQi z>+JTi_J#*}?>AQi4#$ON`Bpe-Bi46HA@n8pId#H4SMDoWR%6AI?JT-uG}1`n!Ycg@ z?H=|C?45%q%n$FV3w5Fj+Y=y;{-SY>FK}41>D9kiv+7213i? zyszs{oUn3&7fh+fNqGd_Jyni~K~8ajF!V=62);L8_PWzfy9dp=r=1C{RW&9gyTr)s z%jR|dP^P#~H$L!(e(8+u*s1=`&w)`am8@S;{@fQ~lJI64}2&eG6 z1K_kH+z~;jbzOLX7gm}d=YWDY9w&bUy!C1rjXo+PQc{cM+zLt9j>JQd>S#@@t1%_d z5|=b0I0Y<_812~!+{MMe3%WFyyu2M?Wk#9+k-*kjQowEw8auf;jEpm3z$O3LAdQ+P zC#=-5Xs9V-O?POk5#1eo)BhDK-Zx=Ddqj zXktnVa{>dpv&5CH0*7J(!u=9z$Ry`n2iq?daWO&hmO=3H|e-ezT4Yc4qYA-*)Sa1G~Rgf8tIS zdD#Hy5{Ar}UerN51%ES@L?d-tSfza7lp3cvw60k!jOZ|~2?!Q7y&c>y%Aq|b`m}H0 z&}8bTDrOD8y(MRyQm)0IAFf*|&kU8zpt=iq(0so7Y!4X4)P^eaLvjo)@0~5J-%b~! zYy~i>TtAF)n2=K=X7`t8JiuU%$r$EEL60#~Wacv_fWAHl08H=eB0hAH7AnXHeEpAR z@TRJkfgM=F1N$R)b()22{huZX;VMk}dLZIKHq{72gEyJJc>D9ISzxpzYxIWp2DrP5 zg|UCkGW9}&7CGtHV*Hom*E5$lb0sfoxDZDa_*!{wcU4wki{OLa5-~#Fvfy2v^uR-s z^b*9?m^<^29^tYCQE(TqeQ5@=n4o@Y11L*^@ha`Ok%d|myBgF3`Z1>ta>MSz7q{q84pV`i2hN6+& z)dDy$EyjD4*>aDUMzk*SgEz!b3mhI}*~mqAC!IyfD__tb-QMY^M|k9EXtFu{$@ zBtCU*eFs+32ae0C=}*VWEWp>3p7uw0moe|W?gYd^gS*SCbV?c^WBdD-7G$V|aPrm?fRZ_3AdEUCqRj2?1{Gaav8r-NP^}?Yc{d>qNCM$RsZB07LbUtRA7U_BzMa$B(RJEP&pU*#PV3$WG=kGO!uzaqys&IE2M+cG8 zfod4Sl)MQ0_!qGK7KPK(KpMj*f6?KF)!g-c3STPZSXSBbz%`^N=Ke!W%fQ`kz{4qw z@cz1!hidLHO$C=;LJ<|s9w;3(UO)NIvnst^_q8mtox*T$8dU~Fa^3(i=68gAjRArf*#?V@`i>72uZ8_WVLvYLr9ik0&QPC z)%|(dVx`K_=s(7>7DR;u1(9lOCqNfo0`9T_xI(?$>$5-^!)o!imLM&rWyF#jDy))|6*w!yDiN_M~-*amo3osJU(?s@y zkgdRJEfwTn^~4Db~$P&wZaK3XfI1aH@l7%r=w)2E;#O`tl^M zdHd(9m?dJnxh<~3*B{KbSrg?3J$C0d6hG;X0r3v%g6#Co587_-4!m8}^KL;^LUf%! z-2*uOl?aZ=gdoHGGa3^GOaB@_JSy8^E-=Nw+TGKPZ_yB3s8Z!@FgdG6v;O5R9W(71 z1~{GCJ`hDTl?wo9ScMx*;)!WZQq7)}TZ9-o*(FzOL|EH7AQvd10OUVN8-Bu2$rw%V z4EP++)$3Cf3PrDXnX=HvSMjl?Xce)2*H9rmyNPxZuR*|$R+2H51x8_Lq2~JL1J?dK zVONG)RQ4C;kfEh5z)##K0>q^dd#q{VK)h8Q3bu{>jb^8v@BJ>xicTF5828R8P{7TT zY~d|-kJT=DuppD8;&~Qwc+l~#pHlhxW_|1HzcYpO_IGKm_7t_|FlVA ztPPt05TY)nvRnk-q6-Bv7rPK^cUJkc&ZG(Ei1b8Xprm|k#J53x3%F{CxEPOo-D74R4u+z10mV&sgk; z)h;)wheo*ejm(d_+Wwg==;r_~Im@#CEl<$W-Q3o z)7n~4rp8%Ahv*6m1Fo~0h(B`$@Z#KRWtb)HSDw_e3#1!qsdkJx94!lLNUZ1R^=Pi^ zq+e$84(Kk-cCA{EnFgEM8TuIlmlHjI3U&ZIC_$#N4u_LSH%cjlG>Euwt89w1@-zbX z2d=SAHs{(9GMDuvNXvw2cF)CTzA=Cj%JoHpx!HPklr)<@O=QPCMrOoyaaFwnf+$Eh zxYAAeC#f5i36^a8sAwum7zir=F~B{@BasjBWgR_;X@CQ{rY84HiN})yJ}n9PkC|MI z-%;nKjo>VR>_)wL(!twQHMAqbPOS++hgKwfTfUxNFjOcI)J?bD=Ps^fVA~u5PG%l6% zbj``DyW90`uI$4HK8@$Tu%ggT{uJMsIO%MMsVTg}%4C__563fgb-5kYT__FTjeb_tJ62xCtkQ*aeW{ zmEYtTnV{e3sC~_c8?o^fo={4pu_jfJ#_~Mp{wVF`0OL(;f5B(ZVky;7J}#xz(#2=4 z3G%3T9BeP?m>_R7`o=IaUfb~3haFim+hOM6k30gLSRwM84wh=JyQ=@n{5?U=6gSJR zv7%#u-O?)Q+DqO6y7lA_^d8pTcwh_Wg{1NhG4NguhmQ3S5?}4d$zAEV(K*ihYw208 zgpl*hc$o{0pqT@?xlhTw&VM-QOkx7K$yu8M3W zXfqHhkc$Q2VZ~5AQ{C$zNT}l*w#3BpKCDHee@la-pC*a1qK(j22v1QjMw(xWSvyb+ zjFGc-v{>6Og)wozEX_}ywkIeNtyYfhQPy$?ETGl=weUH897WH7l=E&mgNcdWRD6kU zo9EL~x2tto!xqY7wFTJasc*R-(XCC6HqI4c&!2hNt?^C91U zm)$IRdL=ka|Mecl6N(vJw#1}PamEsS8Yl&$uf!)avnhFF&O)NjkC$QsKZ)Fy?+h(g zG--eVS<=!d(TnW5;WY@A+2VxP4u;;8$%iXX8-BUC<{sYeg&9RYPfGR=`@!3Z6JVS8 zkYa3u&sf;V%pyjnunG;3NQD4yHZ~bJmkcsIGf)pKlqI;UM3W`-(nnM^_OTHt2|{Ht zelkE;YEkkBz81<$^^#H)DvYoi4d!h~hLdbC55Rh3wHNk4gPi_zR`2TIroV2 zX(@><+%5!gnzpvYPH)Qp^6BolscKE#W>;pq5@fKBeK${S=15VKaHFZ7=SARfhf)@XoOncxn( zluQkJIabvmMY-Jh7kYDzizE49Otl*(rzDHk(8fRyfb+czt7OclzUa-Z;W?&y7|&}j z_QlC`gv4`6?|o}z6?i=&T;V@OOhCmB#Lln!RR|kWK#=5e3DT7~)-$#vHHmal5VJ|; zTtBUbkly+5%j49+(&v`L5+Fj0JWAW6;`PD=7U+~!C{-KK-S(Rf$dbHT8Tp)8tGf~Z zn~YZK6;BXijF7<6kzfr_t9%Tw)Jhea3JPy78HT_g5<0AnHnVJ=!<6;rIzpyMA?4~j z|BxU6{Y`q);eC3IEFZu1So-@BxwGfW5~gZQ^OJZY(ig$lYBvXQ^fQn;{0@=TGwn_e zyR`1l+J!X%p(OUKoJft(RTX4W(`7D8dNjGm(3p7KfXeXAPM{Ijkv+1v;!3JA4lzKn zi;MW_i)Q(R{qC^jp=@iQEu=z3R$ti)rn_e4kp>jm*sonBB=`gBMe1pU%8mui#+!BHXVTGmbuI{MyVpqXTef!t$cFdDcnmGy&1$_N)SAEIj@H~DVQ_s$ z(5s+X8TFYFi0i@VtoIvX*yMc|mCq*%X%FuSM*?6ANKUCub!=3MejPmTX)**Had`lk&)IE>ifgpgAn5XUm@vde@Kr% z4}{fRCB*2U6$o!dfZtmh$?GjZ+8A_YfS%1P*(aHjuf=34UO)wRXv>)u#>N?Q3A544 z4LqlgCa^q(;CW<@TE-kyxiw1SpvG>Oxc`~6)+%@rqAsyLj+f~y2_1&CDb4oeW3pw? zJFQZ~i{V52{?M~@<@i^oxFh}I_L>*b&F!oyC9KeJK2xjo>?COhaSJJ16d`ood(XXO z8OC|OARi$I2^aK`M2&&PID4OpZ%~J$e*R=-lM?OE0bIh*p1U(+IRK%CdmIMp;_d?; zI`=@Lw~;b>1iQW9=Q%=czM`-|+wLsx)vXFlcdx0)f!0&RKd>cuopB)0Ztr--QNy(y z&marfH_&U6XT>+o)`7rcR3>s508=x9hOc-Gwlf+1yv-x(hJSS-O-sbp`#H)U1xnBE z`xRjZPEo@|R;*0BNLkP66k%N&Rhn`VqA5t)c=y^#TX9NIG+e~BFJ7r;(D?Xg)&R#` z$iME7^&8=S68ZVfLNZSRBS58XuwrmMSUMH@yvboFgx1{ZtR@f0DI$ph@**ik2zGg) zeW${H&CWHJs-#wBbaNG`ONENET6!ZjOId6#*$ptk z8M{EVqo6YS_=7^0O+aOwl%H--V~mLNQeA%^$ay^F%#u%FB%(WSedTK7zLwcIxlC0o zOX-#jB&GuQ@QaG^r^O`z^f({mD@()4awc?&Uh(e7Q4?Xwc)us-CH$j4U;*qwklQzn zOhVq&kyj9#BKh5(GO%$T>rO$JGiMmBmrThq<0XVI`Vls+){c#296V<+7y_0A_Jpky zIxPT4qf8|Rgh~u|qH;WqWIE2}z~HO;$@_H@ctP7y(oWr^SdgZdL&IsYF3Q+1VpWR= zfU0s~B8MHnE9#C@;EYb=uq6dcj1Py|reHz&c9>A}fWWFXbba*PjKkb(md+t;aqzK> z*O;gi%0f`c#<|t#4(I+^wh55FCCnW9CxPw)+$e{0%PvpQaoj*h-W7;(fIEO7Uo`Om zr)D(E6cN^oXaw-vQsxxlrm&RyimU!GJNcf`5i|PZn7bQqYC_5>ZBKJN*STUE8mbJPy<^^yIe zicg0DXLlE)L~F|S1Urq~qxgvs6K_%_w2o;WPiIyxJ*!Mloq7S5$Mz9lUo@L!lNNY+ z&bwiWPUuC&(wMX^W?MToD2eT}b2GC3Z^L^-hzPQ+9ls4Fy*LQ58%WR#W%W8q+c|ee z3%xRY*BB!H!eIt5hDf63MOL83%hAM;1!hs=Ds!ERt7{BsUVccqBmfOSY4byHG3V-Q zS+xOGjk3JoqrG{!T>eaUIR-`jnwt~riIfOQ`l2s{<$k19Jc;l%>R*J1j^z92pXq~3 z%Iu5UPPYn;-Qb9$gQBkQqZcw33E{CfZJLC}XW(x^7=H-Oq9!0zm^>FX#T~@L6n~bq*)a3T%MCtCG8k#xOjVc#4d}E9 zx=&2W5&!U7Zyr*NYrDA*SoNd~A{=y9U;_1&8gc;$Vw%2`&87+$BUem2tA$FZl}@OH z*N(EaiCy@6pz!ipGUqPyR@t=7#g|zG#v1Q%CAcg0+Vce2yWz}V#)tXGqlcHl7sm#o zRSqHTl3twfs26W3Wj{DLKqap%RExU!4EC!AA6)wt3lhx`AL^gDdOnzx&r=`UdM6Rb zU~z*~{q>G$%`o)PL7N-I(P5DbKA`d=JFvE8G|22RhM9fM9YRRLvBJci^Fcm6c<(&M@%!eZ-_jb|I)unV{JUHBwHQ3{nKFz}Iv@=Nmh7 z%2~fqS45g4Eu-~)fyp~{*vmmYjaB3lYf+4`38h6m)#3hfq>jjtHMtszpOfb z`ZYj%q+h^!zjxHX8KUZnNrS|8H5g4b1@`u3JZE=qn)v*PIrk1a&|~~~d-fX+M8~!` zv-v=%WOdIE{xUhXW4B_(B`Or6r@8LM-#a^vV~G)wVBh}IgVA=UD!jhtLcMW&MUVpw zOv_(52+uU4IslA}ue&X+_f7dHr#@JcFbi}wV~_@52PP_$5YVZ<#DL@_ZI9!LR09=Of(U^C!Y|DkM zGI)YoY}T?iu+V@G^x6;T3 z(w)#l{|J*h?xK#wD*Yr}znD>>Fs@9=d7yuZnm~DnMZ1xkgP4G0qY>5DfZ^u7s6p_%ws931}(1&t71vh>AVf#>EQ?y<^ zSK)!Wk3`^)`6Q`Qp3@vky)0wpCp1MW$f@dNc~ZyV+XW8CKUl9te5HwrbW8h%VCP>2 z>Y>(i#wF3A7LO|P=wBeXjmxF5ZhT1S5ETzg1r{pC6xQC~QIt6`#{UlLazF5$1Op`e z=@jl1h0CWVL44sD5#$PAE+7q6 zB)I$8-2{gHRKI&q-SoY%V^ZAs$@HGKdsQZZ3IoBl{-0A>crGYJM>|2QE3E!l?C83{ z3`|d2___A78W(eRf{Kd*;jYj#ftHs1<&V9=S!f52S$td!&`w{cKz>EH4xzz*$SRHO zKNat0L{7um{*i>>sYJG;Y8If&l{mQzSK$njPzdbp!2}Y|@CjaUUKMLHshGO(bS*Cs z7&f-$ls_ZkH|aR=AwN6hVqnH#M5M-gStp~Y>)Lcvzi%V{2^Q-2f)Z0YQ(Sgm^%A3F zp%)u>KSHM)!->sdzcO$5`$Xs@AwOL3Z(zhSU=5TFcB)z+G#AUZ>8JiB)XtkF%S?7scTx`!9gx2;Ej;Q@;P9rG#O8S|bY1?QX`FywU}L`*zno z=cifgZG4f+(^Fw+WF)dcq>7gSEA#9cT!1Pmj_^}$m`sf+ATZo8jf>zVtw33L7T^xl z;g`bF1yjAxisseF*EW~M6TL`j0?EB18Wd^pR63_mWt)b-tKona0DY@IOSL}4(-|#B zQooV^zuoA;*X|)X0P$KOg~?yBKMB;KK2RtgVKcGIVwkul1g6sO?0uay-m5AZ@Z0sz zXY<-^gXcQ$pU#9_lD!RXlS@d-lE4Sit)S(rg7KS6e0!r>{}uZWVv3sW2>g}*!tL-> zLOG`kJ@CALl`ZMy!21mo_2A+xjj5^*^(_K;ht6L8!w3+<&$$#NiW)faZPHr~MJr13 z`&EVe~+A@OKSGvMOs~Veh7rn(UVqzSLsyn~bp9DamL9Pj)gi_L0VJn$oo2fhG7!O`Fk}e1y5YW z;UgRP-Ye$>6_$q__Qg(1CV9<;1`n;N9(hEV^w>uDT@3k_-2*A(I(Bc@{=aJNi#q z1sd;s?_fIzQ{OyWzAJ>Ro!fn00XJ586Qng}Y0X?Mf zaL?O(1GW}DINk$==8pVM)>cRo1lfo8=Zd=TnI&?|hprFUL?uFje2kC-vyjBg2cZvg zyYkb;3=ZerjWlS6-TY7;q(=n=HtE?I+YmKCh<+*=f07+{0MyJdbe&Y?wb_U=h z*RTRUJdtwpP3L{j(;yt?!g}6L#j89PM&-;%_y@u3rq{7Al%BkTy#I{eGut#Cgo+ky zz72!BQWSYcUhdhZs(0~G5hLdEOk*X2zn=ED^_a|a+N&#JuMepJth0KnH}jT{6_>yC zO=?lHOc3xLLJFz)jH9T}_vEJ5L5@C7*3H5@NVdBb4W(K%BBjcK--7AKj6wZ%2Zcc^ zFnZpK!_PB}GFu=4)WpZ(GDVUXmaoJgg zT6dy7O_Sr-s3ybQXrGD=jf#@A4b!`RFSt3p0j_hQ! z5PcidGUgf z0Hg&X5h}3}SWHl#jPZ#-X6)-f;scbKhxJ(RGxZ|Q${(2}2iRx=MMsU!4wA&cH?I_> zoiQl5oqExCse>)n_FFW3{92(T??86$S^NP45+Mk6BbyS`o%W1{=#(uybI+0K;hQbz zF;gs2B!lGbE|)Yk6v&4hYeQUub^-w9(xSS$!Fr8poTZOK7OD zW{A}>4LsV~u1B6AT)iQwICr~D{sss8BmLNXah``la^{^K)l&4>44ZSic5!7hdf7Iw|y2M~_AW?5$Ec$g8uH8`E9-ioE~&p-y}p%FlGv-f{!J zUI|#MK$%oP4s8lkC`@+Kvwr=FhEO7rWP4sPF{0T4e?hVyiiFRbN2&PSBTqL4ZQgnh zgycG4%~45eY#83WS%PM01J3JSbjB`1Q}-UNiza(_pmZsVbwc_#98qd?rG;bgRCk23 z4SfKpSCB8c7)O-2iCQ7Q5ZWT=q907HmuwJc!@g+x^Y*Qem27=ZxM+n+o48PwvMRa~I0Fp^lY+*fybq z9|;A-CbuY!cY!jjv07&XGNZLhm%KZ>2^BqCE9~!+G>`E*iplwj-QloA>X-`qh`Nc^ z4Yg`-h|C<(9_;^NhTS1xRcJfv8^V^@e$x&7gN6M=&o!19bR1?9#~iv-;H79zwM$Ku zgjw2-h}5|#DN2ocppA-qii=*y&hjBY+2X}f0*UYeieNox!inH56c}%w2%%7@ZsF;r1XSq^6}SDN74!SaQOUngIsw8DIKhf+9(1#q;0dE1Llvyswll;*qpS@_^XDFQ~s%@rJ+umj$qU7m_+0q4L z5_LHvj(-n+BSFYA%!~xSs5xrV&{$B^&eqDgqpLL61ZXW{2vdS=!8GDqrgdcMVfBU=W{X zZv-MTUp1$}i%30IWND=0)x|9>RMrKkt)pTy<^`A*8=f2}zitcB3ynw{{d(zDd!A3Y zD4UkznKYvsRDFv;SIWSbV(c~y3gCPD!+f7pcLK4rFmo?qhOJ}Ze~?N1@N{@r7>5Yp z&DGy2o5i~|<*=ir?O8r}Pz{i!$$z3C`yI)!G39CGsx9&)4Z5lA|LlRVF^K9OdOsejIW=j}y-!jfnz|ZL$2U(f!|v89y@b&DMraff1H2QX zv|7jq+$_Ii^QL?5lo*rD=W9znd(f!S=l&GBFrz*sqi)NA&;I+-U&T!4mC_X=cyu%a zrRzH1_T|sr4XQd7zh3YX_1Zj^I(TLDLrkL`5aapPDk6d0&j9?xVovsM%MgKkU*9Dv zx#SJnU3_-Qbz5wd&7pB*q1~sLU@0Dm(SML6d#|3Z2BEl ztheEd?!wZC(^2hS#j{ys#-U2M^Y|tsS(uS0$7~gJ;p)HW^kkI-R4i3LI5eYD$@#fw zp4>dj1W1X{3DjNJ!lDd0D`HWP^BQ>2G_75g(IbTKFH4??QaccBJ=0hDP6!GaHLY99 z22kv9G>9upt=d`t+X3^l92K;fM|DgA*xK7FY?2FI%yk+?Iyasq)Li^q6kS;@MV05A?^mLmYtS-!NKuxGhqLYJ1&=Wr~ zA+oe)#)m3Hkh+Rtc=A&K^ov@zr0^@zq3>!j3!Fby;;=~HsCHnM5fc8KU^>H%f`iupxx>s*UplOJOq%-#;}+m)qyb`9i!6PYwM%0`?kwDGM0c+C!rx3{-v@vU>tf*JV9sR zGQM4t)&s8pJ|WXUBZ1l@L=l~ou;1G3WZNU3;?_HosI(h>sn35<=GPu&0VH!)x9f*f zQXVk0SRV?r>o@8K_S1rqB=u*flRw?OI*M1m7M#4V%FfFup1iFru9C8y-I+0-e_Ag| zW8W8Sj{QpVOI||U!5&{8fM4n0Ox@)a%M~2Vuj)bg$-FGW+(Q48E6JVD5fB}nFN*fL zV^Kn$LBx@aX%oLze5jxZhLF5>W%bvFx{i^fredB_sNJF{2tGTqS+U zq+GmR#IaBV5FA3sqfKoBV_gx5ONRiy+F-iEcwf!Mj^BWb1h9}UdD=}L3UrgOjz0_c zPL}r!)wduwyO&MQ)EY%35_t?vqx+g&OVgJZgF3LGx6De7fkvj^He>TS33TIt_Gbwk z-t6~cXfK-9NdSHyxvhstLAc{|3o^ag=C6;q(eDi?A8UQibHP0rGZC#0;pa1*o>J60 z5_2b{Q0U94meeWmJZ4{h4{o3wvO{K`z0AnNjHkX3Nz@l0e|M|bWJ$s|&)zkN7Rn*V zQb+U;-?r2=E}2YIo5Klkt$KY&3=-3BY!j zi+FwB&0B8=@-FdOSG}!lS~S;<%@uo8Q`YtJ;TQLGEIt@syo3**|ThV0pbd}vW8bNam}x*m%U z@j|toYT=Gy&blRSukerf2u+8hb9{vN)O|FqtfhA~0gf`KE8xmy4_@E5Dk5iSr{E3` za4ltLG*MSqyDnG)UGQlAyPFt{<@tr0y9JbxPn!=Lv^UblY$hY?-Mpk46nI@)Old9) z@Q~=lT~}be)PXlNqlK^q@LSgTtt=gmX{XExj90;n5AQTLb$Pm|Fr8m_$9YTi{;+tS z+E>JGFaL)i;aG+N`>_eB10h|I6ti?>Ik4~28wCeCS7SaQ*1S2B9Gj)(nahh@RZ9VT zt6GIAaDtxY65>?^?(y*H<9kYe-DA81erc32fn=WUY6aj*Gu;OCS{E&EZj?Ut;jjpD z*|N%ysf>deAS*4+vYtk0_>}m0x?ll9f46K)xb5Y**(w@LU^OZNjIquqIzywEt@92( z_lWT=sqOZa@7!!AV9HDd9ag=nE1nf5Rlj49o|BM(YU~uuhg@Xb(|i}g2?m%p$udk> z8bK165m!(#WfCFgW@mXd=3ZE+T%vacPqAI4{i9H4IpG@1-guX4Vkre8jjgKpVzC}q zwTtnS&nPZK?m1C@nz{a2OgNCQreGHUM=3=(iB=pBcQ=tF9d_4h;ii$89o?1c$amri z*m;2TH6|zv83gi&Cz6#NAt=J=wcBfhR5|K|W@uRtk~hXrs;w89VBTVQP`WE~YJ@`r zv+6JfWD8n0e)*N~qskyuVnahMH5u$E@0sreg2L*nHq)}kd*%NsRSRD3zF+xnz^X2q zk>Abn;b(VmVmcd-ZGgeg+{Vr4GF8}`sxkH#O$@;CH_shPAt@9ZZ$=J16j$T-fkMj| znd5g^*`yYdE$NHj9^%8{iIYpV^nt+ZqP-$FXbt;iob}-KG6ZQ<&zgKE^U-mrhtVDKNgGi(291H=WRp};m2Cu@@yVzI(qtF$QP=-~&i0ZJwGiu3K)3(;r5 zw&EzMb^Z%1e?OzTP!Wp(D)){fyWLNtXB~i$dw~DVy%HjYlXxc|#(or@b-|wUh`+Sc zBtfh;*WGa-3@L|UXsL7y|!0F+8Pl=8QJz z1E#TTS#CN8zEIR$3MTEA?Dr1AOID1ZNHD8Pf)P%^?{(%?s^+AQ^n-I1SVzN2BbseP zdQ0h~UxaRwuV)ljCX=|H9gL;y;Xqmy)}MJ7IK@MAA)y3XrQk;273-qkc{j}H_mVYa zxt((^+I3!9t%dLI(0To^_@{wy2on7)_=v%iFJ9`j3;JXT zLLt$1WU8u@EQz;f`?=%mXKJKxgIO>`Xl)kahB*!5P$EP>Sbfd#WM)Dc>@WBa0$xE} z<~G*1wCb}eb^D%)pL*+>Ro`>5e1DYSHIc%2HXIWj0EZvP&3=E3=kz3jm57aHMw={Y3?^JW~?Q3i9tgWfa{srm#d7i&;EFgpmFv zlqO#n5pj7@eOj7&qWwW@<&WhY67P7Hvje(-yZkQfUW12wM%jIV)u-nZb+A!4FaKH` zkKa5(Xs9-{adO15MjRL0K3wkhPR4ID+sVB*oGxdT_}J;D-WV(#=a~BIcknwQ*-dl0jSMk7c zNLUWOty8q|Es3`rr~=_vpIZP$i1%8HEvyk#|GLd|!kRz{GqlKFpeX6#RoEl(nAV;4 zE*t=EK8Bt6j*_0iFJvcC5b5I+tOTn?>+9cVCd9b~0i3`m$QSnL*C#1{q63FhWwY$9 z8ffva4l{A2`l2zBTl_>uPHlJ|)=>RQUO92dDd(C5=ZY~6US(@GH6HV&o#9h;3cO{Y z=I^FOuVmCMG+TuM0{S%UW~!%A7haPFQ*!$Ktu=Uj0a$)7k@C{p==QBXu92llyeb>( zhEK-e!Qa7g)paEJk}-qd)cloutWz&OZDoEsLeAvtsAJ+{sSy47p9)+`0cq7AH| zIC2Hu1>G3!R*~R(>DyGhwmiw(%gxq1@k#)%IM2|=cJ9|z|E8J%UNd;hj#6`AkWPzVWk?yPmAWiSYe#pcTk&`O{4}x|y zr5M@MI;M48l!_M!SsZv3say4CFLmT#`(R1G9wVi!)3@20<8R!I+ z{)Rvt-q5_a5%f?H%Q30Wa|aL;qK)SH+*MBr=sL=KugIE>KD5Igt9{u$(Te1P*ueMc zmzxEZqqz`W>}{0g@pwDbgXd^*L5>u-gsyc)HO3cEX2aY6t8rLhmpKHHZU=~!4WESi_Zc!IeyV@VfA2` zY+Pd?In)I34`}O7vy`S4DlIiWE76ymDS*5R)qKZZO{HM#30k9vq~5eMn~au$2ChRb zo-ermu?;l*GF5*jUqB;gr-~SQ9$n!0X*4L(GCw9fr>Lbrg(9ldm>A8-bojN?N1IP4 z&V706(~if47^iToq|;DJt5J6kUb*u=e=t2u; z#+D=RU14W0j@`{B=^qxKDSp^OD%M4;QSoq-9PWN!y(Z#+uv?pXkEnE`E9Jh}7C2R}cFa{Jo*Q>Ggzx@lX4M)K7GsQ-B+LxEN^$89HNLJ$v&!Bj*SqsCyyVl( z31{5Y0+Kw_2iqa~s>NaFZ)MvBd}KiE4&+@H>lNXxET~cHl zEQ-Vn6_8nw%y3czg35vVR zxKQjf0;Dz-0axE2Tl6Q-jw^kH7}ktQLc7?HL(*Yv6WQ8_;g@wfG)CpkEpwsEH;gmt z!*x2DJ&M#BnxmJe5d5Je!aEebfX;6A!d@Ua5|N<`YqD@&ngXBa=UBQDri~vdk}`xV z#_7{h8gb<#Hq29{o~b|7o|a=__4Sb0UsP^bj>q;TROvLdE5^=A+M_`Gv%{h@QzlHU zJt{!m{VgB*N@l_1nC;fVemC}1i8`ZDbEVe>*s0*-ZN$)q?bZ+$ucqJFincXkUSHWt z&50R+Xb_T7ccd3$_WHm!d_^i&Yw-@hn(*9dh1|>YE~8MqXyZ0VvXg*TR$}l}bHjLT z8Aoz$R9wITd%|a0sevRcE|(Z0{x2Lz)>I=}NXC8H{s(Acs6_4TV+^~n_DXJv&iwn; zaf4?9`qxGi)m@fV5)>hFvl!)>A^T-O8EKvP6`5=oYaBG`wsd$0h2j6?RNYT`N$Il2 zD3!Nw7e^MXZ0G03l};BZ-7kh^-+VGxB8PT53Smb>-NLY zl;1@0D8YlmFpdWh-xf~Ie0ZJxa=*c`*;OIYT7F`8;XDHno2Y#~5prQ@Sp1d)^i}&> zb;3)`0wtp#MjGWXx&VnOz7H@u<36Sx+Wny6;M)dPA}ICI$y-hva22VhDq?giK66Si_1Jy~@@8*^`C3neKfJgPcI=lPo6_)e?^v3~N$XsAd`BJgwi8nsi$oY^&Y%ThJJM}=8B+FH-BbsqV}QzE6TvoVsg4=X`U2#+T?RBG!fn) z>+~UQd=(TGFXXuLB)is&-2v6ICI?Iy_7gDeZt?Gl@7-FPLiSSMx^S_UC_m}^Mq_ZM zGHQZX|Wd)l#+)Oq}pEb%71 za=kagc#7$*eS;+?m*4OfyX7eZ%5D)8dgEJz;@hqo`w2I4g+5_ejUoWYAgpg}1#pj> zsyELO!h?A}yG|pyc{e=F+?Do+j2obf4imp=%k-1+9?HGA*8tEo-uAiDNu%c%EpG0u z#8iNM)VY*r0M)nw;oa_iYQ8-QsY!j64KKCDf$Rt*+gZ#WNfm__WxcASIa0U_WDpiQ zvZh*ryTZ@n65p5p>-!vsX?z9 z=%Er|S?K=a;zdQiO03@EBDSZ7sxwgX%PZ)!vPYP&CepxTToF%aTR-@kY$|oN()7ex zAqt1L<-<39yhUAG(fWiL)Z?smM7?lg~w12aF%(M?P_?K8Lu0XxFvj#AE&;&#SJnM8>!gWh8Mj}lAU z`DoSi0SIy%W?_V)4R+d>w9or?v3=s%EAN`|jbtcvLbKLyV?Q@XAx>p8d&46!M_?HsV`K9z!aNgeRIO-732_h^m62*SMU zgL`^X!``xZWxP=npaQrMp1sq%hLb%|`%nZMOM4QXeVDa3U%iIw1r5IH{P=@{!ZKnU zfvcyJI>#_{m!onUu2BxQ!uuntxEoa3fQjCVZ+oH)NJ&firO3$ovM@`G1l((2ApWs7 zBP;=lKYrnf88);36Xf{N1Z%pNI+!7Z;!tOg!VS=e6kn9wxP|5IX%LLovCF@?0;zui zeJsG333wh^ZY-p_+L+J0yxjVyp1Ts5O_lTjKMj##!l)9!0|=N?;e--C_=@3AZOP8n zGN|81g`qY__!^=UFyX*etmE}CK1Zf$`4l6?aW4xh{F^2#Xo~zW0z=YpVPYz7Wgy7V z%#g&)kCrmPGWPb8XxD4sory60B4!5{ttBGGo3pm)Jo=6dR9L1|h}p#v9w4W1?+J?m zkHITN1w$x~#{!hin7ogv2L1+ftBm|f(5QJ#vLjra5ARS3l932%_o8>#^I>T$^e2jd z5%?NA6Fjt2lzqW?YeF(UBOgz8OI9aB|E?lV@6%MxCoLszVR`Vdc5C`iXc{D-*Hp!@$;;!yS!XX>d1y2B<*2^;(kb+H%1&v zX^$@s7WDdan0J2z{9#s@puj`f&ZYeh%Avo(Cra0Z79;0Ye#k`JK(|=IZvm4?jd@;G zgL?4f;!2rophvp5Fp2CPfcwOHVOY^-qjG=^(rHN9a!m%3N`xFlgH6=ch}V`BR>~mw zL}Yadpk_<(642yorz-p)hsBXL+{PEraxmk?>Fz?&Fqv5laSKSF#3aiQ^sFB8*yfC7(c>d6e;QG_I!9C;0^YpSV(~d&~a$a zdwn>7otnREL5~eoe?1(W%G0P~9G!ZF+@~snsVa2`0+8XNh5+QeVhMkjUY7X_aUN?E z$<6z6z7NNq@s{^Ye5P$(Mu0Dd%E}h!kao`rT@D%z4&CHzQ%wxoClyOo?9bk66PNPM zx!J4BB=E9?CB`}0;ikkA>|faP{}pV!FCj2 zFG!VfWI;Aia~B3uUeN&mKLEg^W+z@$Uqt~F{%H!HnW<3ckJR@_JP90#4M0`X*K0`c zT$pY=M!s--%@TOx2pw4_E*N+S&r>}JG9C7{sug3yEk}t81l(iC`aLxJ+(G@$%6)7u zr6BfL15WR*!is{<+8c6iDoo)+O#>o&Ce@EMgl0XFIzV3tAP2_z@xDGeE1}kY5^6~1 z-xeO{#$wJnT+lNg#O{vovx30as`Y*^jmSrrpIk_G33oXP$MMO- znPL9I@`t~Q0w+HIIQ<4oZ1xH(2xu*v;dC^=l}{J;tLe)1loMJuN~0fFP%XNq-0w^w zN9-oyhjrjXeC7#Dz1LX(`6?uMo4>k#d0aVjQSX$v_MNQfIsd<+)oMHf(?;o4zQn!ouUyM96<0!eps5w{d#h8-tXQK>nFWExelvj%~2A|GRDNS_A225 zzphC`g5JxrD2==b1#HHN_!QZEfYgsf&T>x*gzpWhvLyhaZrOFV^La)hFqRJwtr*&Z zUt-r097xTbL+{{2!Vneaksl`Id8bnd`1uw8#?eT7W`Y>Fv_*Ow@Lo}x?~*ugfp(YO z`Xb0e3vsULT9%3{SDrH~7L^m12KN^3{twE0qcl z?BV}oPcC4LVI^4~%^W?|)4%)BA=H54lKwJBZuDpwd-J)RW!dtC zK$L*}Z)PjB0WwOdQE{j-58P_(~D=63H{bygrV+r?VUTq0Ekx+-z< zZvKbhsZP&hAp%PY-AAGzRO^3Er}`6j{0!3l9eyXKA$9YB zoe2k%2lP`!DiFP)&<&wxWrjn&$RH^$IL5MpvUoOPzs)l9TJL2ph`!mc}K(|C<=`eR_)NR zqS~%I7aHN*uE}&`x14-<5e4nmM>J+ZgksnAFvf>&^Mi&4%3u-L#v!v|jQK_VDYdF^ z>!%k(BpuOuK}M=g*nc4I%C$AmSl6M=SxN~u4FHcBplQ>%}W&S~hrK&#~z z27BZO)gB;4*}y4p4Pv`E^M?q_3Q!r$4JZ&$uF8E3wYLd6YYbgrLYCwFLLssPP#W8< zx*19Fyq%ocD%D6UIb>vJ6l^A|3s-xEITtL?Bhu*6FxtNGyl=-@NY;d^n?Rf4y)l9w zQD{cO`rrK^Z)5TEO@J_!fD~zdK)q6{_ixCRx4-d4NN7kow-)J5Pp*xHl8W`&jqcN! z*OHC@lO89|*9=!M|BND1{TvvNb{B2~;&*371G80VVg78emgIkpGFr7@DfE@AbXFQk z15}3S$%hn4iG8 zjG3UKES=3>I1CT0T-T1g&+IF2Jwk9(6xC=-=mX?=zN)Z>j+rb(LOm5`;-Hd(=EPrvy z7imM*7oE^>QdqM{Kev9OTULs1f~VsWCt|hLm!m>aj(n{W+hnFktN%xby=c|88|m)d zH5G&@Gzqy6$0`oTM|d|+Bcgh7ztk8fqhv*!f$&1Fy2Ws<+oY6T1IOMDN8rWE)kB7B za!s$g{BX6bD=pkFSDvV9JSGUNY#W(+f(!QPkhmaf?cJC}^#o)6e+RVLSq)h|gnW^6 z;QSj$?c|7>5`#NsXgx| z%AfQdZqJbQM(=mUWLtBp=*+(nn5(P!bw)b#*KeP?=_mRNLP$JQuokJ91?adX=xY_c zfG>3)UU_>*UXM{#z6(Y<<4HyBR=Vh0;H*O}&KTrM=e=zJ8}#H{Go;tIG+N~1NcPiZ zJ_Sm)yH={&%Vgd4J?lkBQKHAceEA}59^T3KFFi{Gz1TK+cLYAA&PN7C@Jm&3u2KS7 z<|@mIsFEnZPI6eTYQbVq^THCa&p=!Jj74Xyi)=(5PYmD^Zb zqs>{;LnG<7iN%E<0FWSwOe9&DJHyn_!Z_O%IM=XuNYOE7Cgr4(bQ(}o1L;E+0fASA zz|$K0Abem0WGyfM#wWqCdq8J^>U?>Y5_&T-2Bfe4Jk#+;6s@)xcw^_fxOAEl$0nFq&RVt0d1BFwlEr(zk4{~V=>d~!pmd*8^))idW)9eMzm3rpK z3KM&ZS<>wtmMtM||c-2!ZwH*{pyH;vWJ= zq5pBjAOd0O=$Mo!1ip~#jN2BC+zdFNhR)}^Ju>YRiu=`l6lA_xmqz}^Mmhi-5g;wNxQP@)^PSO z^aqxvd03v;yrNqm!6bUb2)RwKqn>R7tEg7gG^`6ho-f>W>c}e^wMN^$^;jce$RxztU^Rz^2#Z0g0(2?^_+k%|6EoBe__`=zzEra z8>_OL@&o0j*;_yXO=NszAvL=72#!6?j&>t3T4==sJ+cz>V|r!f*=)>q-HoF%#Vy`2 z<_m67%hOv8pTj(dkvxqk^z>!Ueb*KSLXkk#@-imEUFYV>TdZ`$cJC=Nh*SOpsC2hQ z9*-|XCI~4uR*OKsXrU=>0=pLn)4{m`*(kI>CKLH*R+hC<0{Yc+NA@j-P45jfn(Ws+#R9?UOU;*jUd0m{gErB zIgfyXiidhI_onMZGD~1nq@pBIMG82cDE6p*Z7Ii?C?6a6$Z$}_rZEuXC0;ZL^m+VN zE|WR#E9J1^;+nVIilkUMn)x1CQvF9oGvyH;lU5qmL}o7MiTj$v`D+my3?XN_6yeaB zWoQiO`VyQzU4EFn8ExkdunpvrFiPp}I@nOJ5|$p?M;IvaI5wr+qgnc@l=RnsiJe_j zN-#J3@$qbh^lG3%wWR2XFFq9v+!>KH3<`RugyyAm7Sdb1-@9}JsI84MmRX#3+_tQe z_xjppwl87OcU`DL^K$8lc%juC}E|9%qEA1^lN^4pE6sNlqw7e%gwT= z^`?)&+NfL0hZgNA?aMCjIEoy{S7l7)Ti?aGwf;ODe## z4mXTd#61E(Vh^*rf!3U$YwE!|$w*o>vXHdv5!eUYBgveX&IVVR7#v?2Qv^g+`x|Es z?EMY1$%SgtLGL1o)w%%a5d^VW(agUP0?rcB>O$gRXIO8jn&ue76+d=p(Q+_{D}DWp z;>t==nfr-6+(~ae3zB!@kmtO}HE!n%&gh*{l!Z$`ruU6x%3{?w1Jy|hLib<{Fi`w| z`eHfXH^8u`ld~r&u~bbsvr20DkouO~G=lh97zt(^CLnTnIUMet*0A4b0gIZ+w>7BN+Wl@%378Om;Y)^opml>?u zs*t~Iue8exF+B-OdBYc}Wcr952aIk{beOzz7?QUdq3KnxW@-!X@kMYz%YWhAu9UJ)Rh+5tEJLYwr_z^Uq8z9#& zBG?4HYN7lq@g<{HBN9gzhI{E<@)hS+JfGOV{!SUJ=3J=E?L=?(fTUzKP3i`C17c!l z0q8564gnR`$x>0a1)g`tAtD1|XNJDXVATABdR-e#X!D$D+%aDCn#9Q4OyWFhqw_-md)Q%u)O`{3>EQ7jCtB5Nftu3FV!omOSb$f(_gjYs`(7e3 zan@MGC74LB^j_dAS!6n+#D06SIy@K7B7-U&~NZ)AmGZ`F;s=PBn3s*;*XvYs!Y<|EChR!g>W|ZG3=r@sPvr$KH7O+!Si?0 zG03liKB#|^*YrGsA?>y{js(5~75^d~@ckq;avS^ONVS^Gf0wAvPicBYFCy$-I;j|N zmgy3?LGu=YJp8Gf(*BkQ0w^dAlcdhr8f#E3)Kwc(ty!D68^F`>PuWeI0f?{iFX-}C z*vWaB&H9NfTz! zV4xm5n?RzTa?qI?-tSrTjM@mOKSW=+*&z>g)ebeP5qVjWibX&3c_ z>~GadZZAU^d$biO=%|R9J!z2lp8ZlEde1s#b1{UL$M+k%GB`aLD!>Q*01jg|_FCOP zMJ|hHkK&J6oX8h6RDnUpCn!lU{#N95NaFe!`+j!KB&z(=L8BXN{U`XybZr2G;}vEq zovs_i-{=MbZ7`<(aK42Ow zmTr&Ynrl;s0d^;`vd?;19Z#OwBw=6urmD{t#Q^gj`N;ap-1HBuamvRhQkIdxZ z=6J&_BRT( zKCe($@!lrMs_qXzf05ZWJz$qu)fizL45Uwvf+#365ls5)>JHW!8FDm622S>o%Ne&I zVDg|JGXr$Z4VZi@gVHK$2oE?I=~1;{l6rLEaK6 zE74@tOu@{sKA~oGC|=UX1ppyw-y--t`OD+G=kej2%Yw94qoZMO8FKU|`*Oh7%ESMt zDzUr@^Mfj`Xir{g2g{FJyH%vlu$Ve;tEIFX0 zGBV})(>;zHSAkt)@U>xpKAj_N3*jK9%FYs~ylUV;#HYsA-z_nk)Y9K~o-@e&0=S`= z0rk;X=-)tZR{$~n46ZAq?EHEj=j<#KW8wtG&wBYxr(R}* zVXR#Ux3ZP3hdMRy>6qoq^#I8szifl!^*tpZrAp(En9IGZ-yhrpH_)JVRe|5IN z?&MY(JIM&6;|at@0`HG)+4`hzN+>n}nr*aRJn4u_UQWr^oxFw`4s5nF1-CpCVv_*z zR0Cok_X0ihs)HhnfK#j*(@|k{&D`PmvCk^3cKd`bFG&6vAxvG zt4zljUGP5mV6^ge4g4My%#!s*um@E#w`Hx+T&|umV(MkWmmp~`w|K-Jv--=_FKWJ9F^3ioWK32j+#`zqmZTgWIL2T5bdU1%15=_m z)FW8`Z`WMX(y_y>m`^D$$9DO}S3jZJisZ$P$6neA;6a$?-aEXou|GXmqhUHz+t zwVZqP2pX-4(1aC5&hJ&I${l0iL&NAG15+wY9Pa#6i3m47#~=bG@`fREJ>l^?@sXMl z?hLz{^U_ewM<5x9fyQlEKkwEHw+R}0pie2hsrWs(f!;yq~KQyWEct<(ay8vZkGZMxw!#Mjrd@Oq`^(2 zlV+B@?_$q|hmGV5KN%^c_E}#7_Tuu+zZIk?>p=?eW z9ck@JwJFB3T8b9UL=TrZ$Ca1S(?Zg9j{ckmM)AG1?%1&*wN^5U35l*Z2`TM8N%-QK#BqvrY-n3jK=?`6bS3<9vkBnv3nI&Ql;ZE-Quy zTq%vA`$sXovv^+wwb&3dp|}3Ois073VZQBmQQUE@VO*Ql1{Z4=chxlU-Qo_&5LRy?&^2H_yR@ew9tfVZ zdRP)0nKU~Y(7PzrcfdBf&|MH*>?&i?Fjwa$7eGs6*;s6dYzDzaA>Ps~W`GE5bOh^4 zo2Z;f&WR(%NA4@H%!n}kntaFVA4St=Nsg;is& z&h_tJ6`G>Rsyrm+aXgyXgo>>8m_wki&Zt=&6C=gH9b4_9}bqDB-AJ_#{(2{^yPqnFQtX<4Q9~m_K zYXCVXnQXH&cKAfe?Paa1`L<$TC-R%ta(ae}As16V*UMlW-Z3zNMj zi3txB*2N{!RxltURO~5vMCzjQ)EdW*QGFQA24RMp3qt2YCvIfIx*DEB7=+Nr;Lt93 zs%Ha9H8W+@rNx7~Ntr1d^Oy$keDtdgiO+PFzN_`hADK#u}X#Vl~<2s?>*e1+vN?;Fdw$PGZKxOTuw@C zCGyHEo>9GUhVQq5qsU$CRToVu;`tcLaCB0fy+-3PiTwY>41xng>EIQP#0|0Gr&S3) zg5ES)uSz^Hj8aYU*&E0^jOY-G&;1ZOQ?=F_>mznchHS!tokZysU`ifWE)QXbu$!L zrALo6M)7egKF8();eQx(Q{KbdRk=fjZFo_BffZ@I1SrI3CyT?*RxVFZ+_uK`tCH!Z zIQ`TOZ4*EVp9y`%i#G*nLHSGnrO@rtRS}{6-Qo%Hm*BHOMGPxWVCeSQE5RJTc_wKN z>yPds^Fa&K3(?f%$;hk84`OD0*Di>R(!NRv5pAiv6Knon#BEbOP?9nRCb}|P#^lrV zQM}r7zgkNcQOdv)dzdoS4X!U3SmmLc(1@#^x7ssFtN9gsG2B%G2ERKUC*v|NHVmC= zl7RxC?~0M!rgj4TBLp0 z|7T{U_co59nUuY=u`WFtF&(CqCgBdid1i&VOD$5kJBBHssDsdCwQ%eaqF45DjP^ zh@wZ_N?A%r+*_?%45z{n3sA9zqNcWza-os=|+Or-(o3cQ4bB*5?^5#hj`fX*0s(Iip2RIDQ+C5UBceKtjB6R<8 z5d@6&b$vb=DHZsUBDLL6uv1x0(KV6=(H4TF2guF{zME0eZ@2M7xc; zA=oP&WIgT43cY-|#MUF}GD3)L!*yJ91J)pU%QFt;tP3Ckl|;XGxi*Bbd!VdKBuHBX zROsfNshX_xhPqZ7iQi|)>a9$}QI2Zd@<*xW|mot6xw{WrZGI%Vd+af5RATH@y@zU(~mTZB0cy{ z+yG-p+OUS|>}Rp)$jxNdCP|EI%8mZ7WAw%zKfXqst|@}0Mf-8rl4|cS(w4i}cr^o8 ze`}lJfA__1^~4vSUN0eUN^vJ;%0%S8?{!28t{h$Uu&M<0Ly82PKy*?{YuQv^6Pg49 zT{F!dttffCV#7R}Pb!#jT{6vAY$!VXSx8duZ7i$mCX|0oe z6=fxR8#5c@WA$pzcVvi&576l7zpIH2oM{vvx_6^X82T!5!b^4be|P4C1Anm{-#h9^ zcM`-2g7$buw^W1XRRc? z!>!?Pq#`s&o&BWM6Y{Do-T0=LUs8=rCphbr{qq-sfX|ZI5XT}}+Tw*Buj#VhGwdq( zYRx_@Y_wf%NpEa^9pMNRshagsb__R&&tmT2xn3=JA8RLwM89Y%coUl8?b}_B;KK#I z+3&K6{!umm=pn)TU|62>r$OL`g2|!zFQ`+XcVu0?IJ%_Py0m|NUW)lYXWRvI#!6?m z->R0PI4_dF=Q(a)GiUe&YFEX58N$rp^X=3&=$nKoZpi;?wnM!1f5<(Cdq>_qe#nmv zxy5%b3fw#m%B=&v=wtArPFbPL%M1#5xR%{t*Z&Bh0rr^QUJGMQyj9D}EO-KV-F~tJpZWajGaG`a7dwC!y*O12&uiq$JIGBE&YI z`$CF69pzTQsxaO(Ib)DU@$lc87vbVH_Kt19Po`nKyl9$|Ic2Anyat{;ZwYe+8E_{$ zZ&HRZA!ItrE6a56m(Qj#s;#u6YK?ks^XEKvu0DR(V9y8eA|A44+0Vl)Ybu?Xn0HX> zM)m8OLNH3^f+d=r!@F#Q15NhRDvj{p5KB5+4&o!~W?PAz$?T$KNtji=uT871rN6sU%C&WWkpMvt!OU7E%6$J`Hx&nyj$?`hHiJp0xS4sf6zr2sqxshCc>H}VBOZ%l&q3(n|A#!Fs` z(8?Vd4(2wkj@Zo1frq^|>`=NN2%sZqfz~G|Z;*+QgI^LM#>NGkNoW+#9NI5hswKwJ z^do?TxsO8%X8_ECH$TrVmz;*jJ*;f2HkA-t(%}o(EaSzz?tbatO9eX?LTAi+ax&vE zKy0KHH@Et$LX>1qV7z1|mKNzVDkn3X4A6Y~x3B9aHA3UJJ z698MIkYa!E6O&r4_^O@neVtP8)ziQp4S?v!-;qPBYUYPZ%RrfA!#2@f&7gj}-o}~L z73|rO_*FrPh285+;U|C3@P$ArD_`&dx~eK+YIk^zYhQM^&Nno_d4y*3|F!5Ikq5a) zptFh~O~hK@L4Jnif`Ve>=U3pOH70oRC;6gz0mw1&54TuSG}ToyyS-L7yz!*WaW?+g zmPSBElq**%FZ)azR(Y>f7A~|m*4y0-y=c4_Jw!i0p}aaBPV*9^$X646a!3ZB7Um)2ri{u%9hp?)U=$xA(`I4|%ET>1uS(B38Cx5JG@l219DF2mzYqeBt zg=*!a++^`F>t=Op{#IKBzxKatV;%&?1x3h{xXW=Fs5+P%oL9UkwO&?nFJCYufSwm3)K8dQ+( z=;s#pu;TqhU}9tTl=iz<788=_w;WgM9sYmc2a0;ZlehxoX<1a1B@r1-x19UCzdVsH14@;Q>f;3ZfU33GNQyH#&JLYOx-8V1D;P}Ha^k1TDBG_ zzle}GS=DI%p}J`!M$j?kh>T}$PH|nNc>sg-B~Z6RCxKW48?Hl5gS_|eZa!gEVawP2@duw?+7nnq+a;=hMO z%L*5Tzh_1pQ+JwWJJGEQCM--g4C=3fLYaICA$UWs>hfCEFH#;G^QH|XmS#o z*g#eLIH)(~^D>}|w~&P+S(tONTH!g5`Zm|!L8ZkFlBsxoJ0<4K0=tFKGT|2@hjxWn zKK@nJlBRLwWtvy%4i3N*oei*vSv@$Bc1v)Vp@QD3jR*(bh+7A$0A330ni<+4AlCew zRGI~*f=8`lrZy`T&AD8Ku3rfIOoOjB1=+88ql|V9qe3!vxidKgym;U6Hbg~scC>u` zySIB=8qiu?O|rg`8-4qkvV$Ny`}w%KSmE2g=F}gkw4pCP84n9Jpl-|6VIO;4(elMA zu~*Q_UgD;j-}ja(@LHy;J@;}CTD{lJXJKpD=t4)-+sJy9**D0QPv@_`?%B^p`lf+& zay>7dv^mv8!$}Fc!f#OhrPNk@xQ3EnTptk|N)0!rn$GUK!ftN5i~&7=riIbNosbq1 zU7Eo-N!m#oJ8zHy;(T1y5Xd&YR768`_aw1!t5U(DN&Me}8((ku>*`O5*y&d|^F(x? z`j%5pg6rr0*SM`-cg71DVds`W^SM1-!z&njh6naXqB#2qYDEl>tYI90&)J&lZ!b0F z3?Me1^ws8iB^QRLwkPc~GWg7pOD6p5JH(fXD7R9|f2Adyc+hF7qdNLXa!$`AWTRRQAb2Ev zOCkRtBfFRocQrn!Q{#yVh)IL7c z;32R@E~p7gt8q>pN1;!WMw9abD%;EuPrgd}848(xvCQ34dPLt^B`feU4)obqT98Ln1>n-$8}j3kLF4*(oKBX9+UY#BM^0{tK;F?v!had2goJeu?}ypzZFGeVqP90wdYbtDeFeDMPsw+yKTG z<2>MoiVwmxc#YR-2ZINi-U|+-nv54wZ?aWtMg___&+6jU!@3U5G)a~{X=!u7 z@dky{=5hsp$WBrvm9VCQi1@+5#=$AjPM*01EUWPjU&@kgLie~Uh!v*s30dltD^#Hx z>u@U8+p(XZ=kp%*tD)pd1${+W!srCR?x>t0Xn_9WOt^3QTrQwMMA0N%k*UYB4XT^?&#xQtOq8EXAQ*W z9B(ARW_%8qxnJonu2cSd!zuuEinD+9@0zGrnNT1Z0tM{w{4&4ZxZVw$!OVn>FrxC!g3qN`N zJuhH|YwwwXVf!H^&s<8j6iw+@Q|VSFwsQ?){{d3Pd;*YwzL`0b)rpvQ10__irQL*g`{vUxz~EjLo^vNGNZ`chEZCB-e2=&kv3uBPZW^S~cwJ*`o?5bib^&JE#pfGKXAf8Y`fL#Ml z!GKpcU$TQCSyd_Po46BU;vxj)Ve?EvH6K^H71OA&KskSAKi-^|l^6jOJhi~02Mv1^o0>_aZ zDPeUm-MKW_a(aX-7!9V0=p6N;FzIKG#6`Whxc+lRf9W>W=-mqV2EKM9LuKrKf>oc-P~^|Gems;*m$x zW}c(nM_;w*Je#%EyPs?}!WqKDLvJ&gR>&^z=EsbvsN-JzK8REQDN?LjG63ZMHfM3} zSO=S=j7#E)6BIXS{F8Sc3Wc=*o4df(>R$~j>k>WzSO~(R{l*8@;=d~i`(h2Jl`B zj6jLEw)eg)+2fk2&b7s}Q}c16_vM;l&ZzFLg0)IwIk4<`h>jK&lKHS;HBcrU4(>te z=rswRlv&r>ssZ3F$9oGRwF1IsGeIGY)zjp4l_pko=KtdbJ-S)<+AwUIm|ESlev8A8 zMo$s8;#?Sh{!oo!@Vh9HmD3wkrNPi#kxJhZ52y;!V{Cy38=`y2660nH`2@8W-GV1c z;Em+yE!XKTofvvV7_esCx_&$L?Wm^KMoKeCkt#_L-X`la=Of3@164V|AL^ggRTO86#`KMMA zAq*cfBm8#qm|^&b8G;(*o0_#+mn5p?*xz977g=Rl1sKy~s^NxFCjm>5{uF*=A5a0K zl!H1T+EO}uK{xZ%doF$Dz;Oc{+MO6mpnNU^P0 zDQ>$t<-Ej3Aa}ds;1@Jl$euxHw5Pbrf)+69ye{ERw;Kqf{#FFGK9jr?XVWTz=VXwO zmT-SA1zNlVVh-&l8K2f4*~CxvZAn~&csxG}K`y#&pN0i=9u7C!;AZI`)sN}aoCQ}{ zFPj7KLBKA)Lh}DHQdW4d*m1VIE_xPU*Z-F5A;nXD6?39n5hq%EVcS>UP-!F>(^Xpf zvErn5z3xs@|&G9|F^@##av?gS;s^APu-MrCP@yBAd+7 z@Tmoo=EZmPakPEpmzw?jspjlokzP;xYiK8}ZGBo`JUXe$Q41k@i*2-wddvc6Ming( z(~OV>$#t75sG5ML)_b?c`Vd=(2(!hQAC_sc&E4n+%qp@8kp|LXi>C>4b=n5z>?1ea z)4z1YrF2?@$g>F;xqZOhsEF`v=?EO{DZxee%C~+eR2ii_;?m|A%X9tcVn_mzjCr)& z;iOS_cH}`2&s_tu^-N2I|15^L9orUkicZhVHhkf8Eyty{9E?|$v0so$_^wIGpQ`6+ zVs{R~jeIrirQBBhC9(YgOrLDw9l;xL0NliVkAQ1iHWFJ)IYq{b#)vPxXF%p;H^l-M zx}eGfuihfvux%_D^jP<>uaUa|RT&lI_PbU84TB}Khy$mR?>C`1KB@@+GhR52FK^st z>F-1$zp(?d<4%zC!P%Id(Wi&D;F+WFdR9;ZOO3)e#7PrbZrVqJk11O~JEs))DQdiz z$efon)$UH83g~ApOtHO~vqlH(1S)hiR+%;Q7*u6pOrhl z_Ot*!=8*R04d1{&eY(gN?W<|4bCR*)N+1#tjGs1qkQ5dV!I4HdEs9?N9y(CMjEbWh z(&aShb=9$og2sXIeuMaR-Zr^c(?qMNQ0W2Rv_{`FJCVx}3k`}aoPl_^rkvh?n9%i^ z0$<2^RKBMR7~`t*g0NLhh+QXs(q?jphp|A{A!HVA#F=!E&XkZXlTwf8F0uLBF1#=U z;UURuli4~3$3DcUAONsOec*^CwgbU*xDq+&vdlU3VeT|W%bSQ<%PD_qA<>~C%lhYKs7zas?dwf*YYRw43MeS zsJK`eu-xjBX(caArc-#pyA^=z_5ZnaR2u)&_NEfZM(6l);9FoFUH_)i48IFDqJxEy5k?7Cl~)#@%DWzh5YL{?D2>_xN+)NDcMN@#qw7E?rR#QbwCJ^-l1H>Q{CJ@P1}zkQskDNBMHo)C zj0=~(>_T-LBr7r7WTF{xy*>?4oE|f{U|+?G;o7DGNplBxI!B|1upY z>gEOA?ue<9wQci@&Qs~u=zmY;K`%h|vfq4W=7!57!;Yz8#RrET*Dr*IJrC-?mag4b z=!JT4aJa53u%oE#e25lK4_u(X_bJlvs+RKsQ3jB4?B0vSxc$b&dLCGzq!gs~&#hH) zXgF0Jj{QQE8|kfhbP^}adwp)QZ07~0`=f2C`fU4FomSIao7Q)^hlBMv$|}2ZHWvR9 zdmPrrTSX~Z{cCgDtQV+{xgoBS5&8@4?KBV&LD0;+k z~DUWi3`zA`_l(!Wjoc$^h2~p$qmXG2q|t*T(7Q`Ug(@<2G6(zBTYSq%9DM8 z^l0ln771u3?NIwvqbuPHI+Wz0UsRr2A=lf|oO{VxxI#B#s6HSv%@x+4^`2hw!zW62 zvEoG_d(ZWH=ed6KW9TDT*aX`2(7pR2C3YNJX|C7 z?~LwSz!ahS7(XI<+~`vWnJkI{G9mTx3dGzFzb={a9i z*h%TxAnd$NebuvkP+q_0dQ9Yx-KjHav3Z(c;*n_EqjW9cFpwc6aQ9`m-WQ|Bh;KmJ z_7&M>!2tGY@R}Q>hrI~69C0|Hj)||l*|ifqI$&QK0i0-n;y~a5&(Bm*%Lf6%tT5WD zSZcC@Z7BHQF~BTs{)7Y!-X%h{I1(p@WthYP2XtPW2pp^0zYPr;f1Z*P)~r(ykN!qW z`aRnTNV)ccOG1HJhbZS4wFR@&% zjOh#RDQS(9c)E+RaPDQUw%Sq5?`Nz-R@gloi|J$8pho-vCv<}|_&9V(MSyT+R{|>< zG=u;i<$LpTLW~hv*RFMQ%-4Fogo09or6X<#N3a5l5OxtP9hLzW z68AC`**OKlcBk8FA!{iWYXnRbkY0@%;6CBK%snI-sWPMA>`3>*<-H|X;j5{*^(XigbGC05AuoUQ~+D8RmLT(iUzT|mox<&msFi>SQ? z!Z}>H0n6G0YV2eJn&qW0d@x{gmtNA7YcE!-AD%Q#MUc#_tZj462l=o2v-EYPpj7A> zl_e5!PTMhx`ZiGxzsUZaUJ6C-`9_O_im?$w#$&}h)tOSm>XP^`y89UB)+{ygPCQ$G z0(?#VR;aSk=0L-QF=0llD{G_}>t#w%Of+If!9d)e5?HhvWzc` zxJ~3?U^nQWa@)Ahh0&*a3zb}pF3_XmQ23P1y1F3;b2Sr|BnaCVSA?*jCeM_9{;v_` z*K9k$Uov4=W~K0&9qIv&zp|JzC-1hrWPKblDoIjM=CVa3nW3j&sRVrgvX>#{`Qq3b zF*loe9AsFPUjluj8?h|a8uj!lqfr?-wz!CTvtEG@Hhkigm*kGEn_aT}4~G_clA|%* zQd$pKGO%hXbL6(azJ%8K=|3+I#a)050f}#Q;NP(x88eaWw7UlC}Y z#YO|)l^vQwDVCv-Wn?X`z#L_1#!*B=azIaA_U{_ERGG<}rI+R9WjYV3;a`$W2YwN_ z=Bx^83~2;E=WEqNH~y~f$NZfIQebh4E&Ub8E{SZ8WP~`f7n=fKQ8qK>bu|-u(TH93u0(?v>{EQ6Oji@#lC0LGxmjC zbJV#4|Atd8C5m<@t>DRkl23^|T^Segi3PUP3{0>9J$Ilgp_aOGed*8yW(bKDM_rR! zZ3IKRNYWac6mz0)PQ-sHfbqNKADV%JdelUNWTGQpu;+K{)ktv$BeQqI zkBDIzotI@vKdeP{;7eEl?J`IS72ZbWC~xc=nQQ=_IztiKV}*=Sn`A_mKIiNZHnCDl z0%TnNnV!WPkl@l#Xe>484%=H!b`+Foyt8IdN6MX8++&$1vYn~|+tet6=S0!Qr|+;B zP|e4BAOXCLc?2&+pXKXJ@I>?bVMT8x%y)n!bhB+W zT^ofgrt>iwGnw^QMRjgLzh87&sNo*MoTVHHW^agwB$0Aa?BO!=8Ky$#GuqSNFLeLk zu*%#d)ZNke9Gv?_9o6KrOgd9b4cLYZ=J9*)+PjPYlys5%2Micjol~*J50AAfeZ0g& z^D2wl0N4}slSioqIoi+7iQ(|m!ayg4$*2e@#GKfp&TII%)m>?_ixKSuB1Ol)t>Zdg z+mST8E2S8_e8c;K7gc^pnr{B~C^AS>Mp zkC%G_;##R!TIO5nIdb?y#Yr`q<>m$$7d0P+I+*W~JaH_0HuQL-O5*ayWj&Ha6l$0R z!44rQ3{IH;FyIJ_C@`*7eV!+oYfH9~zO8qWPcf(-bQ|w9M8<8S1m>a(8$wV8-lC(Q zWN$SWDKPV{N-7HQZfH+duFdG=G-(po-V3Gx;^820rB{UQsrfJ3mLr--=tclV+M8K> z;lj*1cD(dS4UqcIWm{W}VsCytSuf&48|w1514qsVdAz35I^UE+U+s@&MZ{F6Z48lf zzt{ONSX|<(KPo|D$!&a@w=cjfoMtv5b9Uj)_3g}S6Lx`IK`BS=+w>)wmiNYej-J|> z>8Fsz-NvqYgxFM^gc$n8LCx;AcN_lJ*D2lEVoOU~B+uW9>~9mW^CWYdHl%D~lx$L0 zncr4G{UcDW5OeJsJMYLA0X~0!d>#1Jw?gX}fUFdMJPWW@cXIHC0{j@3U>o9M7Q z_6XtiMLl!JkRKaKb-)DEel%IlL=cD=RFdp%r54GpDhFIta0R6}{97v&#ZKk6%5uWd; zX_q8OZRN&?Z#j2P8;Hga8S!Jl>|2MA7EcrBYNOAB{wRb_v_kT0kW^A=-M?|^aQzG1 z$}&`8uo{2h%hO~!=17SPGy;2S1s7WhGeUhG*0dO$Z0l##_Fen4|LBF+$@{T{8w|+7 z%m*>05~Xvd@mK%N?Ex-F%gR$tw^U?Tp*$+>x4A(NGAx(^`wB`xr;ft3RUW@B#t5Hl!y{hGFH znnnXe$J{`EJwdO=@;h=FCr!40{b|^Dxg>e<3W01C0e6^mcc_vee@}`cQxM`IUyNQp zN^BHLvpwe2TixwEt;iC-svoi+n6TJXmh`$gZUlFRh;!Lry{EH=2Bi_!h;rISiMwbY zV~vCIguCXTwGTS*w4UFAAv^!OtkTdMC*+K53!JjZoPQb#YnkqHK>ki1NpT_|vE0Q9 zEYC3JzYlM)dIW{#sUw6DMe5CJk?K@gz7+xh%;J-*=SVY)$s(Tp^T0hl^4o`d4E1B? zZ@h=;c&@$Mb^Mx%-DNy3xOU#hgfmbdoUvq&kso4q8+TAL?Oiv0QVa!MrbeI7DU&du zP%>Z-V4WJvc2PK6C7B247!+^S?`|VorwvZ4=76-H#bYXy2mxa|8`1HL^K79|A6NE4 zfELhl3b>`fo`f|c^*0Ajv$8B-wS6QvWPtlVUDP^rgZ^jS9?${!V<^3b9>-xEr<7dU zB)xjx^#Y?p=z($O3TDeQSk?|RLBG@X^L@J;0W7q0^Y@z1Fv2_>hcg#k=qB|OTNcmu zqMZ@zGTV?AzVU1%I*V18w(>1xZxjk}>2VxuTW*62JDM8^2^0u1GKU&Q9_chV}U~{_%2#9*M60meYm}%hQ6&uLg?hnmq#~Il$lUC^b+nNz&m1!=Zwpb zQ&L|I?73`i%vCMbFJ$(kay8dc2EVWc=`aaM8}#Z0B3AV4A4ub@;{6$VPS^b)+11xo zY~0l{bFtyu>Nzyo=DpIt#YB;NV=l#vCWruS8i{%Q}L|D&mNid*B zb_CDqM31dBvDl>CD{HJ4=BFM(%o$zz4gSGsdIvjX(|YKaknF1IEH z+kUpL>9DBa)`_P=do<_1Oj&OW8_iQdoDD}-J$@H%qBMzN_FhVOl4rJu)LAgpg& z2k>BG?N_jEx9IWcBn&S2V>L2|CR-)AMy%N%ls|<6V??*r=6^L4nla;=XO8cinX92@jApeYrv4e-}tr#osuju{ja7&uZF{(F1(ug zWoHl3{Od~yj58vA%c6^&gP&VcVX5hxdDfGF-4uo9S=R}E|>A}n# z)^V3DFVCXFYz}Px8zHp$jCua%&^G#4(d9RN?Jc*Ly#=TGk+S;M}-SSwVl_xD7(sv z{=y^dA$5t;TETteU4D{EKz}^Tziox4q|8> z=NSuDA1CC*GgKyF0@gS1goeXyP67~i%#!*1cW7WA-K`Mlj*f6fSx_ufrELG3f0=R4KCevh7hoRnwLqO}(+P(l5^Cp5DJId!icut&Q;y+9MbN z1!AoWgw%;2v>M02j6krxBekp{atmq7qdFZ5f}&d^V}r9vsH1xb){KjIyYr8{5QwTq z8JCN_NuN5BwEIhuZPAiG?dA9Nb`0F`GDnWza*dxWlgsM}Z#hs0P-2Dt@=-tN&I*uS zy;5&sJq=Z{@sBBaF}yi4E7FUSNbr*b*b#paylD)Fj-6@#A*(${>oifD=cGk|E#Rt* zbv@^^mhY^R?S2ghT*vdJ92C#Of(Dsm{Qxe)n5n$~LcypSb$C{F+S?K51Up{_?{%Y> zQ%wG6khYsZ7Vj7T$qAON7AT~TN*!VVSv(*&^_*5 zA4u!8C;LSJ!k;^V-`?KZGjGi+#}M6n_H4;wzC6t@k;YGq{!@BG#Hs9!CC9@bMt|qP zQoi1WdS(|k{`G!20at8JtibB9Utvm2J#sn^o$gz>yLN$)@~pJv8S*ubFi;s661;^~ z>02&2gC6sf-JI^pD8~lPT$AvR4*@eBVTIaX2^3227?_ihg+VN(C&=v;48wJu5gp=iI_BD*I6FJ>XETG3-U&G z2O(X-O`@)Mt=gv-sFja;2@pV&hDcpj=ejyGX#pWiMU~y+huZPFbm3`4x^%U)J(?DX zIJZ6a2@wsTxyOR@;H#VRmUyG`uu0H#BHs}l8dW}j z$hr;0V8uthFg=1hd_fDolv743A2Ha;L$*n z1a(4zx%$FNBdxm$Ce`iE)}4OQt2Fd%KUZ^J%NID%tq@&Z%qijY;-r1>mYNAQ0#_dA z(apVDQ`Qea@i%>t7~wNCos9`9r{Z7JwPM{b!k++XcBWSjtw#O}>8;iNGyeZsBf;$h zptftb_-h)7zvY6_b6)O}4@%=cLzHwQ_R-6IEY&snWbkl>@RkYb-^y9VHQtSWd;(0h z#zEbId0FSVLinm4@pxE=6FK>_gI1obnzk)7JLnf5qu_j6%zD%osV1>mVX~)UU1)4g{lTC zOM^P{eW*8k+=IhS)imKCA&js^G0F_3C7Ed>E1)|}yMRaCw&5LYr8ot{@r+Pqj!t&?Gv zzq{e}Dk_+vlh)JHTe=Y#@=5J4nmJ{0_;>76&$MtlRU| z%l{m$ZC*lb7_90e@I$)-)d69)XlIfOM=v$ffYr}A?&?>x6$75~CQf`0CE`L_DXc1L zXMLyTxN^i+;K=0aqyPz|Z0m2$P^OP=hoi#ugMCKTsM)!}TDOQIG#pCBpFZL%}&5mq19{?pZxILMjKWQx%dgu`o~? zbQ4U7qLWGUn$w^bFId@B6kOLw_LqEzy)x_>E~lNR~}?{wrUHH^L^wO48xFY+Li zvT$r9@NPVD*S1S6a(>63ss@vR(}@JPPTx@XHIn*-)!w~GDvogOa0j&j z8?)lvGgw&JW0t3m(BPNBTJsR(QhjVO7jXPBK_gVi!xuOsrsJW=Psuso9I@6y%FVYY zers;_NF*fTw#423Gy7r=c$l3J9IIB_$`N>Q!m@)Io7Mp=Hr19rHpKXDd?PRkysKTz zNeTN$rH{Fy*Ht>a^br~@Bw6%2$4(FxMKsKLVH#jxyx3#?b+2)(_>jKmwgCnX4V}+V z(hM@gC-k?drYq{|+Bx6nxc0497$geNjpS{Q(~MI%8Tm;hE}S?UK7!hPwQ@U{>lm%7 z(OOEPDcJ$1IwmA;4N#3^1={RV1~dt%X+2=KWX4zrY3^59?OHi|PsbRL2r!r>ulJg= zv4~UJ5X@z)ev5&@TFIPOkx&XxC`rU~BX7RQrRS{dy@{;S{E8zBk|_FG{%Pv_sbnqX zKWS`6Og;Yxavu2>v1889$@j_cI2~}nXGLJ?{xxa7*+6T!!>!zbc3>30TxK+TyJL2? z0!MpDEObR5j6i9?T8LLGcnT!!0+*PNIybGBJ<`e#4`0dRC(awUnO)o9?!1RJOi~nI zKuLwCIt|WCJc6xDD#Kof`^D+}rz=4`ccoS_6jmx#atB!6Qe~;kiGvs@yrRGr2hc-iPiE0uMHfpQ@(>Y?2DdV^OIu|qGyPpMleK}-Pa7HPe!p#Cn^i!Q4 z()v<>$o*beIHAVQG@W;`+*)qXD8t^ZsGeQYyO9+w8>s~-YpL3Er1fb*xe?dH-^Yti z4k=kNTPm2bglD|MgLj`TPRzE{7S`IT7S$QDa)JtQIFJkrtvQes*ilI0(8*Vgf3C_Y z8sfx=`G~{$-8f-*PR0yZ7cY)8e{+Y4;qtoQsPk{Od%}-ZZ~O_p)WIa+65p+(JN&;f zIY!1ZY9wZBmLTgN}|YS`B`3e+~UGYs4cY7 zkVasFz&mnCiaWsYsPwV+0UEr}_?oH;agthCGk9Z=#+QXDTL$G+emC0d&`<>K6UiWR zyKe1A+$jA!%s4BB7eg#zA*v@WJy-p8Av|L~;nM#Bbk(gtc3;O4rUdK9TtXGuQF`;? zwLz!xKqX2(j_eN^-w$kkdNT6v&k1gM`eoEgp)!95$5`k8hL`>lrw|$Go@$voi1An) zG*-6N6yhkXZX^r?G*{E3N)qvoC@cfMBIMAJI6WB4%DY%rc3p_^B!hE06{#+y+Oj7N zBahxT_(+Agru%K3dYmfXsbMyNKk&6vLp{t-<|OVubjn2$#~ScL=3Uz)*8@$8peG_Q z|Grb!0azq#{-1MaEHySjLD{As&*T?MlGo-q9rqZh<2S3ujfhN!F!Ihckt@bMtd)OCV*%0knHF#;VQ1li0>=%^D*W2Qg?-$N!Q|@c02|X*)t~63mWLhZ z0P<2bSMAv|8X^)O;0fVZ*ds>9!xpuw$yZ$D%~~?@q>lV5zV!PqGlsq%&jI)3(;ZPV z+X)@X2xs!eFHni0t`7^3#*_T5-NI9vA0GoA+;NkvuzA6sMyuK9&@%S=ixkW}-wi;M`c8;l^{PzF%Z#R|W5(p{4yK_m$+_k{p#>iEhuiS2epv_=yoEC>6r?VXCfK>GpN4ZqrBfYcg@Pf^SEMm z)Ud~47~D2PSY#1@a2if|6%QpOqvVhTB2RFoqo?~*XEq+#tWcplUsfoz#vNalKJV~J z>B7!aZuRnA)U18sQ%?u6GImY2%QwIdYf%bQuK)XNde4Vlu}Tv~_mFITdyGfbio8u} zgTp1ol(|TR)vqBQ4FNadO_aM@Z#-IxGy;j*(9eIvkh|fhE{>^^9>?EmJ=lwb9t(PN zX79V2ve9#-8`Iek{RYxi>0bve5L3Mpn>jRh&-$Ms63v;=IkQSIRL}~GV1C>{V_SRi z3f)fT2^L#AV>40w;zd#&B2lh5+(5rzBc^+W( z0TzX8^|8iS6d@Gpm=khAx~LmfZ}j=SPXhN&X(a4OuTn0x>}M)D35T$f+O*yX_&c|x z%LFptxEjNDiH+BmoU^OiaOZL!CIXL+5KZD_<{J0BXlp06a~gIT-K4%7PrCuTSdiAX zG|GI@*@mhNRB53D6+4kdb?x~8Lrrkhy741HmuiB`*puC}j4fuy1uA+f+oPYhNdVY& z(NZbE1EzJPmvEbXE-F-Ym?&UJGdCy!cdL&%mipsOx$Y(bR#7gB+iD#(wdyu4M>+uM z?gHUOdA5{yIhAE&_d}SpFTM;f$xO7ar+1tS*Xb$lX#ay?7#C;$@{r0o9G8rKULywh zomes%rTb#Nl@2VOdk1r0En)*MEHtG_4>TzyoCmZfABQ5ys3uTv?Z&ya=WiPrL|Szx zZ4pTlZ@F|<{I{%kjWV;@74Y#e&>1GKl+hPkLF4hT`bEHyvy)RO7J(UFQqfM|jTInLDG{K{rf z-Zcb|lE{tMx(d%VRM9A4s+DE3tAp#oB|6#3cCOksGtifd*o@88?%6*qnVgq6d_3{u zUSI#pPM|AE`!>C$8;^bzc`2p$GY0A6V1}{Q#-T^=qJ$5TUi%LYa?mETAfSPiEqB4} z7r_emN~pxs!B_aW8MWVJ5!qPLseXe<*qCPVQxARajYP#slK46PW&W~Il**vvycezF zrtYu{r%it36Sjb!p)2C-_Z%LU1Js4JA9Hzr4HM@m*=^&@WNC-6#ex*raZ6Bc)9B{E z6tM>R&E2Bkx=h!MKy>5My6A(eNIPM2TTS=dTM(s5LD}fv_OEw29#s`uQghyr=tLVC zz6Z6k@~_=ZlCvL_!j8)kGw8QNxxi`ar<5U0x$4b2?yWi!FAVkLkPpe`USfcPb57cw zBq;9xLbW3X4la6I)%~>^7Mjtm$jYm+tF2GR5m&WE(L*gUc7Y$=twpSHhjg>FwpTy# ztB)8uq8n_JAk9eev7ENOx8Y$2Zav&(o{`$8K?+bmKng8Ap@Wq;-AzOB4`~H4Z7Vo@ zA$J$Y$J;!uZcc#Smr~O+#7pj&+hS2t8iSH7d@wG_*>oW^;h_k;0-$iH>r znxO^f@R^{3z3FXvwkCujK+-R@`q6qFw`G(jm9RL5=uWn@JX-TYW;qkPS`npK=3vYCv94;xrr> za2d4dE1N|BRfP%$P!mE9AAYCL+ijymb+_IVww;$af!=A|z9jfdI6BH6k&r)Q6=8p1 zL93v}WjZKhDRyvDFT%XcBV36>GJSyK?B2P((?FaH78h-NZ{N6aq|4L8NR_rk#@G0? zhR5!*-opG5>|rs>R4G!dCCpnXkiD&mh8_W*H)(42-M=nM)tV+@gwvRw(R0Af+?ROx zR-1OLSSep2Da@>sZH>`owm%8Hz3W9gL$y?Pb#XZ}lx)CEUb_j?7SCw^xf#!!ez6=w z@~MJEr6BL;k;oi}_EAcRw4u4N8d9PUMfC;P9kfX3SHjW`amf#m0AXc`n z=_UdTAA6%hDnXNIb#Zp?{W@6o%8G8C)o+rMR66e=Y{d+KIShGutSO2D;fn2gyOWW!;Gm52JXtWEQh zWQQ1aeZ~7CHVu;@>T#Gl+8(HK&`n0t!g_A#+mCWH=hAZN9-qkC&0+EuKER7mEPFXZ zNK#M$l^(<44|AGNq!TU;!~#9e_L$XrNmLn=$kqFs&Mekj`dB73qPO^Ie2{sjg-z_2 zNOnf=ZXYvl!goG|WV#YPB`);V#i#O|skz~APRwZ&&pohG50WCW11tW)oMo!cn*6ms;d@K2cbAa0>67hR7hAlJ=DnR{1BlF_S>dLr(Lb(F zUDJyfs^*XNBh&KA&Y1ux{qL%N#a1*5%N)w5o7I^pHcbH4bdaE$KBR6MiZ2X!X*O|X zi!AibpilhL2uYrKFA8Y7bo4|n;ilU12czne&_rIfK`cU$7RP%$-I`EhK=vSeFC}Q2 z2Df#y$=+>G03JV|GaLwC(y+VQwNtQ|svxi*k%Lzie`A^w6v_?S+hY59vwr1 zSX3;dZiMyv&82)FDw>)Hro!#XOw+JMs_*T?i6F*AvTRe(}O%A%a<9k*;!pV5k9# zl88PZ=;EcuO{7-`=brU5q6i=(sQ$lOvk|aK;?pWsRp9w`S+&P|<1@aJ%#;}FaL0oY z!ieoDJDK{@o$9{v(TBoCW$pqGmlcc+dyEmJ-FUzxpIyL=GG8i1`D=iFpbH{(9Q06a zA&ecDY(j~@Zs>U(QJ5E{t_gssS-EPmk#j6Yb0rNI+8-Y6g&~yO|7|TDfxk-`9ggIC zJKEphjt62|R~JKX9F6VPeA;oHxB=G}Tz6~4dRss`l`MCF{1J$y6b@o^v)*0n=k6H; zQFWy%vj1;w;O9C^h8M>6m_-d1loNC92Or~Cks7Cqh;X>CkdpIjts~zM)>P|JA(8ai zl#Z`U*HM^xn#N|fHFUC>-tv-#$$~J4cLBO6wf3xVxYkV+L%ggDE;rE6pKjW_FOqZ1 zoX5Cu*?Szy2NZW?y&JnZo6#OO@}EK9+jm=#*1+xaON%+N%+=~(MfTD@OSnlaX{+RS zVFdf}X6fhfc8QZD(lEKFVpmPn6&}zcanx*dr<5%Gm^?{+(ChsANk)9k^uPt~B?RHW z*Z6Xlw+1jx$A=Avo<1j2C14MZuy$lHAJLlM+rp$QC|l4J*EV;*9ubNl)VAaIe+|XY2Z^TyvF06GR0ZaL`+{wy=fFX3*uGTiTp1GK(DZ-c>)4IO ziOkPmCiK0Pau6uIyrkR5y9I1OT0}|eDSMkg08;ConJV%LFG2|fqQ`FV+m7Db38R=) zZuFxd8EU}aUPYwlWGIs9y}HZ+nSb0nY)f_1+C=$ftq_UHn-P@s6(=N;*oxuRR8|A| zE(Vux62a+i!Bg+|si&7~s_vjKHM&zEoAB|KG_V6YqlS4(b&U;vn`SJUAx=Btr5Qbt z7a?i!k6>&Kv@5Sp9VZNwj{jcW*$*L@xOOt1VP=UB;l^6y^sXyG(N2d2B`syp?j(gb z1eTCZJoXuctOC{qTP&j_4cb}tRSP6U@!ZZ2)=ukQ)^Sjy{CP(7M-)hKD2@hLv_Afz zPVB3uKx8AMpmON9$L;efM`}I#mG5zJk^!GJ>gmSd9 z07`Q7IRs0fAz-$yXJN1Y6JE8tSF|^FVN9V?IFagM(HjGDK6m{x$78j)2cC1Y6@IH# zJ|6w%7%WX)nsTn=541fVo_k|$X9#rMasm7(`J2Z9u3c&D`YF^dRG(Ei$JcP#UEl)< z`M#>3i2G;^b``g3P#HON#~x3013-}F`RH|Qf$ac1pHD40*8p2iZI;xc-2pq-h}b#7 zV#}R!Dc6Fo^q~d6Ibk?PpEJ6;YyF{e*fxn=QqZof0w~c3yqv+pU3P-!=enc5ScPTg_tqN^|0Azsm;_zZ&-~N7IzF>@n=`Ho8Z#_G%>h>m*WIclZ;w^3aQSC zy>G+lou@K67e_C(kCtNRib1 z!s1xads3oIJAIi}f%s%!B}*hWyEvO?ya^X2lMrhA#)0tCD!8MP6C!{v{gX7udlkHj zl?Me+&2j2=cLt2{GKz@(0oL@(9?}h7;L|?b$5j+f#~>ku&mGM zD-y?j{{X6-r_T%Dn2H8!E$`nM7ZFkhcgy%;AwqpIS@!$3`&F9dX}u3Zzw9a;uSSEWp4NwHS7L)3g|mPqR#w7 z>bwApY+TSHRN4MFCXgW&!MNRslw8rpKx*Dlb?6s&R|afjCgd5ZTsJYY%S`f{n;Mnb z>!2cmhj|!TZ=vkB6UyaiLS$Ah)Mul28TW;ua25GW*;Ss!6p<6B*J%{jXA9154>0*E z#j$Oo*7rpq%=vwS2Puk4R~=+Yl7WzClw&!oImN^EoY%o;RYQ#2?tuK9talRDE|2{m zAhRXlf7nWW?nBZq8t8n8JswNvL$P-b8k911u-micov7+e75C+pS*Y2Qx56HZf2;&yfTX)JyPE5~?)CCbPp1SRKWSBd;)z zG9CR6tA0$4N|7eNuqU;J@8Cz(Hf)dv{LT7-;E%^WV!rTGKh4qdzg&uEMQ z683wqYeq&UGSFKReHsC7>Jh zmGBdWGjCk$5Qkuq&ozb>pdarQHRE1a#Yw!2I~O6WF+{M4^2oO6%`bJ70OO#-f&oY zpG~od4k%qsldf(Fo5>FhF(P0LcEMwcEn<$DWkn#jqptSEkyyq!eXzS`75?eB8NDn6 zcsS#Ic4WR9C`pl}CAdKYZYI%5e|V<4J~ewX;Qe&z`cm?7;{oGREym}%cKrfC=o#aG zQXk)hbGBtPlRYexi)zCEBxt zoF$3FJos}@=+U~eP0TGa(gMFW+OB5-rX83nXgq?{gwTa)=!rbu$d%m8SZKBgkTxv9 zHur8cn^)~)c zLFrM~7OL`sgu45k_2}Q&;>ijo*b;GZPJ)7FS`Ek^8@)v|R{oVxiIT{o+o`n^6i{FW z==%Ru?41`_%d`3nx}1H!w&*gJXwi zA)2J(Ybd-9EOkGbxpvtG{Y5*sFxI#@Ib4Z{9%L_bHG)lD@^>;EXL7|s@N*5pP`^U! zAXF&ys8Oi)P@x|VlC48)%N``<&KbXtzSMEr$K*s={X}TFODsX>KFY^nB};2 zs+A;zTI75qlD6lkAn`y2YPjp@-D)YgX`8C-t2gH%Bg60r#l3<1A1+{V#h`#!IkSLD zd1;sfajTdty|l?CHVn*@D;`v;y}&tp3zr%#BN>VrNpEkb1<Lh2;Y0roZ=DQ@9nxnvfECq`jI2)7rpo5P{i3PRl>6j z#{|3yB&ZV*B416fFjpNxQU@Aw;Gj~|-Tsya%ubDjsUTDk*&=s|rWd(BeKKPnp#i@U zP*N&>FaF#`4AOy;;(HiQlp}}~4r49A&200g)-6g1GzVyGyGSB{+l2eijIIyNK$lyT z-zZx${agl~YtaVwMG2lW(a?$l1c*%cD9+Ij4}KzCme3!-bGZ1ol|u`-w&H#L$Onp{ zm%M_!*w+~D7(+E68?PEh^?0Rcj$VslD@!v+KK4SKfnJBdyV*b4C^+$&pzWE;Zy;RB z{7hZObzd#Q5n57>g<7a2-mpyUtoAZn7+rbf!apcs+sw&7(F`z9UFLv%Z+Rs#k1VXO zrr!ZHp+~?7)ILuD5;T&Sj^y)pr|U*lr9%g8e($?bD$Mp@w9we!5jjYsA=0BW@BVy* zsTsZwS#=+{r(Bdqnl8u(T~|oM`Pw!aBLGo5y8?=o+33Jt^F-$V!y9v@Q!$}G;HDN$ zw7AbjrbfH&rF!HO!>BbIZ<^`GRl2tLPDJK}>|99#(<8uR#aM9`Prh91x7xD8Lu{e6 ze{vX!H7A-S@{)X83J^GnPlk4--hUUu9C14SNY?RK>c&Nd`)Vh^%h*-CBjs6XVvwss z<&ddUg0(6r3V$xZLm~AM{b4-+Z4IX+PGs>HQ{tOi?iI^OU$Gf0(OZ#s$WwyDS%*Hd zTISLxfFXOvb8^zzb&LwI{i9pq(Aoytz2ATb-6_;bz0lWXsMAkS6U-30GLdl|*6qZ7 z*CbT#l259q^#e+xjAUL@V9P=_7H@YpojV!)r>`R8I3rGsvS_(0^7Ju#-~w3*(%Ka} zHiH(zAkt8W{ySya*xo`S+j0j=;>PZ;=%ThxHcAZ9Ff^_$2LV`#> z?#4$f;~MP!I=?ItsY|N;Expw!E2~Gz>A&-${imYIklJvh};l>lj*$-YfEZ4};T%vM%cwH7Y3ers3h;mob;VKt~ zPZ7d@1)EjETXvdeBGUtDv)X6|jhn5OrD5Neqjbw(UYIm$|KtZcRcejF6d;KH*J&CM z6n)ZC>Lp-^D}F;_UnWIi^P1##Pwf)M^`nEb9g0FhkcQ|c2}0C93Am(}KN=vHE?tF5J$2lQPMrJ^(At?fbm)TQ8SHvco^7BRcB6i3vMNC|0=; zzMq#atHckvamO(3*qjYQ_FuN!uwR(XT6m6lepTVWiB)2W#_diQIluB?qHdw&c9TJ1 zvt5C48xu!g-;M&MAXg-gOxXg2j?#qvBatMFJ)%eBUEkoVyX^pKCe}<3;CV$Z^B+D) zVDNT-OSAIlpYOU=fp5*ozVDsXF`nr@GU;*&c zJ3Ycof4_%l$C*Gc?e?>t;nGcMLI}JrU=!SvI9>0Q63gCUEPZ!b6}haHa*byF334%X zGUZyG(R^e`29QY5qn=g0!&SbAPa?#-#5=tX9)rQ!2A~yD4wU3^-Xuj1Hx$YLK7w}U z0NPp{zeK)c7K>alafO3tf;-h6kM!qQ8e8xKO`Od__k{H0tE9vItd\"data\");\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n\ + \n:global MkDir;\ + \n\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig-2026-09-1211:58:18.rsc owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add dont-require-permissions=no name=AM-Fetch-Generator owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n:local srcFile \"AM-Awg-Generator.rsc\";\ + \n:local dstFile \$srcFile;\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"/\$srcFile\") dst-pat\ + h=\"/\$dstFile\";\ + \n\ + \nexit 0\ + \n#\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n\ + \n:global MkDir;\ + \n\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add comment=awg2vds dont-require-permissions=no name=awg2vds-uninstall owner=\ + vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg2vds-env\ + \" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg2vds-\ + env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n /ip/route/remove [find where comment=awg2vds-tunnel]\ + \n /ip/route/remove [find where comment=awg2vds-dns]\ + \n /container/stop [find where interface=veth-awg2vds]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg2vds]\ + \n /container/envs/remove [find where list=\"awg2vds-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2vds\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.20.200.68/30\"]\ + \n /ip/address/remove [find where address=\"172.20.200.69/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg2vds\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2vds\"\ + ]\ + \n /ip/address/remove [find where interface=\"wg-awg2vds\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg2vds\"]\ + \n :do { /file/remove [find where name~\"awg2vds.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=\"usb1/awg2vds\"] } on-error={}\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \ + on-error={}\ + \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg2vds-uninstall]\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/17176/0d89ed8d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 02:20:04 14.09.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment="awg3vds installer" dont-require-permissions=no name=\ + AM-awg3vdsInstall owner=AM-awg3vdsInstall policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-awg3vdsInstall\r\ + \n# Script comment: awg3vds installer\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n# ============================================================\r\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v3)\r\ + \n# 2026-09-12 08:41:48\r\ + \n# ============================================================\r\ + \n# 0. Check prerequisites\r\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\r\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\r\ + \n :error \"Usage: /system/device-mode/update container=yes\"\r\ + \n}\r\ + \n\r\ + \n# Check storage device\r\ + \n{\r\ + \n :local targetDisk \"usb1\"\r\ + \n :local diskFree 0\r\ + \n :do { :set diskFree [/disk/get [find where mount-point=\$targetDisk] f\ + ree] } on-error={}\r\ + \n :if (\$diskFree = 0) do={\r\ + \n :local baseDisk \$targetDisk\r\ + \n :local dashPos [:find \$targetDisk \"-part\"]\r\ + \n :if ([:typeof \$dashPos] != \"nil\") do={ :set baseDisk [:pick \$tar\ + getDisk 0 \$dashPos] }\r\ + \n :if ([:len [/disk/find where slot=\$baseDisk]] > 0) do={\r\ + \n :put (\"Device \$baseDisk found but \$targetDisk is not available.\ + \")\r\ + \n :put \"Format \$baseDisk as ext4\? ALL DATA WILL BE ERASED!\"\r\ + \n :put \"Press 'y' to confirm, any other key to cancel:\"\r\ + \n :local key [/terminal/inkey timeout=30]\r\ + \n :if (\$key = 121 || \$key = 89) do={\r\ + \n :put \"Formatting \$baseDisk as ext4...\"\r\ + \n /disk/format-drive \$baseDisk file-system=ext4 label=\$baseDisk\ + \r\ + \n :delay 3s\r\ + \n :do { :set diskFree [/disk/get [find where mount-point=\$targetD\ + isk] free] } on-error={}\r\ + \n :if (\$diskFree = 0) do={\r\ + \n :put (\"ERROR: \$targetDisk not found after formatting.\")\r\ + \n :put \"Check mount point: /disk/print\"\r\ + \n :error (\"Mount point \$targetDisk not found after formatting\ + \")\r\ + \n }\r\ + \n :put (\"Formatted OK. Free: \" . (\$diskFree / 1048576) . \" MB\ + \")\r\ + \n } else={\r\ + \n :error \"Formatting cancelled\"\r\ + \n }\r\ + \n } else={\r\ + \n :put (\"ERROR: Storage device \$targetDisk not found.\")\r\ + \n :put \"Check available disks: /disk/print\"\r\ + \n :error (\"Storage not found: \" . \$targetDisk)\r\ + \n }\r\ + \n } else={\r\ + \n :put (\"Storage OK: \$targetDisk (\" . (\$diskFree / 1048576) . \" M\ + B free)\")\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# 1. Uninstall and update scripts\r\ + \n/system/script/add name=awg3vds-uninstall comment=awg3vds source={\r\ + \n :put \"Uninstallimg AmneziaWG...\"\r\ + \n :log info \"Uninstallimg AmneziaWG...\"\r\ + \n :local prevDNS \"\"\r\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg3vds-env\ + \" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\ + \n :local prevTmpdir \"\"\r\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg3vds-\ + env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\ + \n /ip/route/remove [find where comment=awg3vds-tunnel]\r\ + \n /ip/route/remove [find where comment=awg3vds-dns]\r\ + \n :do { /system/scheduler/remove [find where comment~\"awg3vds\"] } on-e\ + rror={}\r\ + \n :do { /system/script/remove [find where comment~\"awg3vds\" and name!=\ + \"awg3vds-uninstall\"] } on-error={}\r\ + \n /container/stop [find where interface=veth-awg3vds]\r\ + \n :delay 7s\r\ + \n /container/remove [find where interface=veth-awg3vds]\r\ + \n /container/envs/remove [find where list=\"awg3vds-env\"]\r\ + \n :if (\$prevDNS != \"\") do={\r\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\ + \n :put (\"DNS restored to: \$prevDNS\")\r\ + \n }\r\ + \n /container/config set tmpdir=\$prevTmpdir\r\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg3vds\"]\r\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.14.100/30\"]\ + \r\ + \n /ip/address/remove [find where address=\"172.19.14.101/30\"]\r\ + \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-v6-nat] } \ + on-error={}\r\ + \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-dstnat6] }\ + \_on-error={}\r\ + \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-v6-out]\ + \_} on-error={}\r\ + \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-awg-in6\ + ] } on-error={}\r\ + \n :do { /ipv6/nd/remove [find where interface=veth-awg3vds] } on-error={\ + }\r\ + \n :do { /ipv6/nd/prefix/remove [find where interface=veth-awg3vds] } on-\ + error={}\r\ + \n :do { /ipv6/address/remove [find where comment=awg3vds-v6] } on-error=\ + {}\r\ + \n /interface/veth/remove [find where name=\"veth-awg3vds\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg3vds\"\ + ]\r\ + \n /ip/address/remove [find where interface=\"wg-awg3vds\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg3vds\"]\r\ + \n :do { /file/remove [find where name~\"awg3vds.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/awg3vds\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \ + on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges.rsc\"] } on-error\ + ={}\r\ + \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n# /system/script/remove [find where name=awg3vds-uninstall]\r\ + \n}\r\ + \n/system/script/add name=awg3vds-update comment=awg3vds source={\r\ + \n :local cids [/container/find where interface=veth-awg3vds and !stopped\ + ]\r\ + \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\ + e=veth-awg3vds and start-on-boot=yes] }\r\ + \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\ + e=veth-awg3vds] }\r\ + \n :if ([:len \$cids] = 0) do={\r\ + \n :put \"Container awg3vds not found\"\r\ + \n :log warning \"awg3vds-update: container not found\"\r\ + \n } else={\r\ + \n :local cid [:pick \$cids ([:len \$cids] - 1)]\r\ + \n :local img [/container/get \$cid remote-image]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \"\ + \_\"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local wantRunning true\r\ + \n :do { :if ([/container/get \$cid start-on-boot] != true) do={ :set w\ + antRunning false } } on-error={}\r\ + \n :local healthy true\r\ + \n :if ([:len [/container/get \$cid image-id]] = 0) do={ :set healthy f\ + alse }\r\ + \n :if (\$wantRunning) do={\r\ + \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\ + y false } } on-error={}\r\ + \n }\r\ + \n :if (!\$healthy && \$wantRunning && [:len [/container/get \$cid imag\ + e-id]] > 0) do={\r\ + \n :put \"Container is down - trying to start it\"\r\ + \n :do { /container/start \$cid } on-error={}\r\ + \n :delay 8s\r\ + \n :set healthy true\r\ + \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\ + y false } } on-error={}\r\ + \n :if (\$healthy) do={\r\ + \n :put \"Container is back up\"\r\ + \n :log info \"awg3vds: container restarted by the update script\"\ + \r\ + \n }\r\ + \n }\r\ + \n :if (\$img = \"\" && \$minor >= 22 && !\$healthy) do={\r\ + \n :local imgTag \"latest\"\r\ + \n :local rbModel \"\"\r\ + \n :do { :set rbModel [[:parse \":return [/system/routerboard/get mod\ + el]\"]] } on-error={}\r\ + \n :local bName [/system/resource/get board-name]\r\ + \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50\ + UG\" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\ + \n :set imgTag \"latest-armv5\"\r\ + \n }\r\ + \n :set img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\ + \n :put (\"Container is down and was installed from a file - pointing\ + \_it at \" . \$img)\r\ + \n :log warning \"awg3vds-update: broken file install, switching to t\ + he registry\"\r\ + \n :do { /container/set \$cid remote-image=\$img } on-error={}\r\ + \n }\r\ + \n :if (\$img = \"\") do={\r\ + \n :put \"Installed from a local image file - /container/repull only \ + updates registry installs.\"\r\ + \n :put \"Reinstall with the configurator on RouterOS 7.22+ to switch\ + \_to one-command updates.\"\r\ + \n } else={\r\ + \n :if (\$minor < 22) do={\r\ + \n :put (\"/container/repull needs RouterOS 7.22+, this router runs\ + \_\" . \$ver)\r\ + \n :if (!\$healthy) do={ :log error (\"awg3vds-update: container is\ + \_down, and \" . \$ver . \" has no /container/repull\") }\r\ + \n } else={\r\ + \n :local rootDir [/container/get \$cid root-dir]\r\ + \n :if ([:pick \$rootDir 0 1] = \"/\") do={ :set rootDir [:pick \$r\ + ootDir 1 [:len \$rootDir]] }\r\ + \n :local rootDirOrig \$rootDir\r\ + \n :local slashPos [:find \$rootDir \"/\"]\r\ + \n :local disk \$rootDir\r\ + \n :if ([:typeof \$slashPos] != \"nil\") do={ :set disk [:pick \$ro\ + otDir 0 \$slashPos] }\r\ + \n :local verPath \"awg-update-check.json\"\r\ + \n :if (\$disk != \"disk1\") do={\r\ + \n :do { /file/make-directory (\$disk . \"/pull\") } on-error={}\ + \r\ + \n /container/config set tmpdir=(\$disk . \"/pull\")\r\ + \n :set verPath (\$disk . \"/pull/awg-update-check.json\")\r\ + \n }\r\ + \n :local newVer \"\"\r\ + \n :do {\r\ + \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziaw\ + g-mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=\ + 10\r\ + \n :local relJson [/file/get [find where name=\$verPath] contents\ + ]\r\ + \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\ + \n :if ([:typeof \$tagPos] != \"nil\") do={\r\ + \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJ\ + son]]\r\ + \n :set newVer [:pick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\ + \n }\r\ + \n :do { /file/remove [find where name=\$verPath] } on-error={}\r\ + \n } on-error={ :put \"Could not read the published version\" }\r\ + \n :local curVer \"\"\r\ + \n :do { :set curVer [/container/envs/get [find where list=\"awg3vd\ + s-env\" key=\"AWG_IMAGE_VER\"] value] } on-error={}\r\ + \n :local doPull true\r\ + \n :if (\$healthy) do={\r\ + \n :if (\$newVer = \"\") do={\r\ + \n :set doPull false\r\ + \n :put \"Published version unknown - leaving the healthy conta\ + iner alone\"\r\ + \n }\r\ + \n :if (\$newVer != \"\" && \$newVer = \$curVer) do={\r\ + \n :set doPull false\r\ + \n :put (\"Already on \" . \$curVer . \" - nothing to pull, tun\ + nel untouched\")\r\ + \n }\r\ + \n }\r\ + \n :if (\$doPull) do={\r\ + \n :if (!\$healthy) do={\r\ + \n :put \"Container is not healthy - pulling the image again\"\ + \r\ + \n :log warning \"awg3vds-update: container unhealthy, forcing \ + a pull\"\r\ + \n }\r\ + \n :put (\"Updating \" . \$img . \" ...\")\r\ + \n :log info \"awg3vds: repull started\"\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\ + p\")] } on-error={}\r\ + \n :do { [:parse \"/container/set \$cid ignore-remote-image-chang\ + e=yes\"] } on-error={}\r\ + \n /container/repull \$cid\r\ + \n :local waited 0\r\ + \n :while ([:len [/container/get \$cid image-id]] = 0 && \$waited\ + \_< 180) do={\r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n :if ([:len [/container/get \$cid image-id]] = 0) do={\r\ + \n :put \"Pull failed - retrying once in 15s\"\r\ + \n :delay 15s\r\ + \n /container/repull \$cid\r\ + \n :set waited 0\r\ + \n :while ([:len [/container/get \$cid image-id]] = 0 && \$wait\ + ed < 180) do={\r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n }\r\ + \n :local backUp false\r\ + \n :if ([:len [/container/get \$cid image-id]] > 0) do={\r\ + \n :set backUp true\r\ + \n :if (\$wantRunning) do={\r\ + \n :delay 3s\r\ + \n :do { /container/start \$cid } on-error={}\r\ + \n :delay 8s\r\ + \n :set backUp false\r\ + \n :do { :if ([/container/get \$cid stopped] != true) do={ :s\ + et backUp true } } on-error={}\r\ + \n }\r\ + \n }\r\ + \n :if (!\$backUp) do={\r\ + \n :put \"Container did not come back up - rebuilding it from t\ + he registry\"\r\ + \n :log warning \"awg3vds-update: container did not come back, \ + rebuilding\"\r\ + \n :do { /container/stop \$cid } on-error={}\r\ + \n :delay 5s\r\ + \n :do { /container/remove \$cid } on-error={}\r\ + \n :delay 3s\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.bac\ + kup\")] } on-error={}\r\ + \n :do { /container/add remote-image=\$img interface=veth-awg3v\ + ds envlist=awg3vds-env hostname=awg3vds root-dir=\$rootDirOrig logging=no \ + start-on-boot=yes comment=awg3vds } on-error={}\r\ + \n :set waited 0\r\ + \n :local newCids [/container/find where interface=veth-awg3vds\ + \_and start-on-boot=yes]\r\ + \n :if ([:len \$newCids] = 0) do={ :set newCids [/container/fin\ + d where interface=veth-awg3vds] }\r\ + \n :while ([:len \$newCids] > 0 && [:len [/container/get [:pick\ + \_\$newCids ([:len \$newCids] - 1)] image-id]] = 0 && \$waited < 180) do={\ + \r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n :if ([:len \$newCids] > 0 && [:len [/container/get [:pick \$\ + newCids ([:len \$newCids] - 1)] image-id]] > 0) do={\r\ + \n :do { /container/set [:pick \$newCids ([:len \$newCids] - \ + 1)] shm-size=4M } on-error={}\r\ + \n :do { [:parse \"/container/set [find where interface=veth-\ + awg3vds] ignore-remote-image-change=yes\"] } on-error={}\r\ + \n :do { [:parse \"/container/set [find where interface=veth-\ + awg3vds] restart-policy=on-failure restart-interval=30s restart-max-count=\ + 10\"] } on-error={}\r\ + \n :do { /container/start [:pick \$newCids ([:len \$newCids] \ + - 1)] } on-error={}\r\ + \n :delay 8s\r\ + \n :do { :if ([/container/get [:pick \$newCids ([:len \$newCi\ + ds] - 1)] stopped] != true) do={ :set backUp true } } on-error={}\r\ + \n }\r\ + \n :if (\$backUp) do={\r\ + \n :put \"Container rebuilt\"\r\ + \n :log info \"awg3vds: container rebuilt after update\"\r\ + \n } else={\r\ + \n :put \"Rebuild failed - the tunnel is down. Netwatch keeps\ + \_the router online meanwhile.\"\r\ + \n :put \"This script runs again on the next schedule and wil\ + l retry.\"\r\ + \n :log error \"awg3vds-update: rebuild failed, tunnel is dow\ + n\"\r\ + \n }\r\ + \n }\r\ + \n :if (\$backUp && \$newVer != \"\") do={\r\ + \n :do { /container/envs/remove [find where list=\"awg3vds-env\ + \" key=\"AWG_IMAGE_VER\"] } on-error={}\r\ + \n :do { /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER\ + \_value=\$newVer } on-error={}\r\ + \n }\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\ + p\")] } on-error={}\r\ + \n :if (\$backUp) do={\r\ + \n :put (\"Update done: \" . \$img)\r\ + \n :log info \"awg3vds: update done\"\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# Daily update check. Skipped if scheduler is not allowed by device-mode\ + \r\ + \n{\r\ + \n :local schedOk true\r\ + \n :do { :set schedOk [/system/device-mode/get scheduler] } on-error={}\r\ + \n :if (\$schedOk) do={\r\ + \n /system/scheduler/add name=awg3vds-update on-event=\"/system/script/\ + run awg3vds-update\" start-time=04:30:00 interval=1d comment=awg3vds\r\ + \n } else={\r\ + \n :put \"WARNING: scheduler not allowed by device-mode, no daily updat\ + e check.\"\r\ + \n :put \"Update by hand: /system/script/run awg3vds-update\"\r\ + \n :put \"To allow it: /system/device-mode/update scheduler=yes\"\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# 2. Network infrastructure\r\ + \n/interface/veth/add name=veth-awg3vds address=172.19.14.102/30 gateway=1\ + 72.19.14.101\r\ + \n/ip/address/add address=172.19.14.101/30 interface=veth-awg3vds\r\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.1\ + 4.100/30\r\ + \n\r\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \r\ + \n/interface/wireguard/add name=wg-awg3vds private-key=\"AEU+diR7SCIEOtwOW\ + SWR3pEpkw6v0Qro2LRF0SnPpnw=\" listen-port=41430 mtu=1320 disabled=yes\r\ + \n/interface/wireguard/peers/add interface=wg-awg3vds public-key=\"MMWjD/T\ + PNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=\" preshared-key=\"r9B13bB7gUTqde6zgB\ + DfffFIUN6puP2gOWdK5zVS3nw=\" endpoint-address=172.19.14.102 endpoint-port=\ + 51820 allowed-address=10.31.31.0/24,0.0.0.0/0 persistent-keepalive=14\r\ + \n/ip/address/add address=10.31.31.2/24 interface=wg-awg3vds\r\ + \n\r\ + \n# 4. Container environment variables\r\ + \n/container/envs/add list=awg3vds-env key=AWG_LISTEN value=\":51820\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_REMOTE value=\"89.110.101.1\ + 7:31031\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_JC value=\"5\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_JMIN value=\"510\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_JMAX value=\"952\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_S1 value=\"138\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_S2 value=\"105\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_H1 value=\"457615290-457646\ + 150\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_H2 value=\"1307355386-13073\ + 63580\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_H3 value=\"2441734303-24417\ + 81787\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_H4 value=\"3719180788-37191\ + 95844\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_SERVER_PUB value=\"MMWjD/TP\ + NpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_CLIENT_PUB value=[/interfac\ + e/wireguard/get [find name=wg-awg3vds] public-key]\r\ + \n/container/envs/add list=awg3vds-env key=AWG_S3 value=\"51\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_S4 value=\"22\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_I1 value=\"\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_I2 value=\"\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_I3 value=\"\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_I4 value=\"\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_I5 value=\"\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_HEADER_PROTECTION_KEY value\ + =\"FkGxbrW6ds3YPWNl48OWFEccrLC4tF94z9MnoKUZUsM=\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_CONTENT_PADDING value=\"54-\ + 119\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_REKEY_AFTER value=\"102-130\ + \"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_REKEY_TIMEOUT value=\"6-8\"\ + \r\ + \n/container/envs/add list=awg3vds-env key=AWG_REJECT_AFTER value=\"174-19\ + 5\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_KEEPALIVE_TIMEOUT value=\"1\ + 4-21\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_MAX_HANDSHAKE_ATTEMPTS valu\ + e=\"12-14\"\r\ + \n/container/envs/add list=awg3vds-env key=AWG_NO_DF value=\"1\"\r\ + \n# Perf: give each forwarding thread its own core (4+ core routers)\r\ + \n{ :if ([/system/resource/get cpu-count] >= 4) do={ /container/envs/add l\ + ist=awg3vds-env key=AWG_CPU_C2S value=\"1\"; /container/envs/add list=awg3\ + vds-env key=AWG_CPU_S2C value=\"2\" } }\r\ + \n# NOTE on MTU: the value above assumes this tunnel is the last hop.\r\ + \n# If the server forwards your traffic into another tunnel, subtract\r\ + \n# that tunnel's overhead too, or every packet leaves in two fragments.\ + \r\ + \n\r\ + \n# 5. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g3vds-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\ + \n# NOTE: replaces existing DNS configuration\r\ + \n/ip/dns/set servers=89.110.101.17,8.8.4.4\r\ + \n# DNS 89.110.101.17 \D0\B8\D0\B4\D1\91\D1\82 \D0\BE\D0\B1\D1\89\D0\B8\D0\ + \BC \D0\BC\D0\B0\D1\80\D1\88\D1\80\D1\83\D1\82\D0\BE\D0\BC (\D0\B2 \D0\B0\ + \D0\BA\D1\82\D0\B8\D0\B2\D0\BD\D1\8B\D0\B9 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\ + \D0\BB\D1\8C / default),\r\ + \n# \D0\B1\D0\B5\D0\B7 \D0\BF\D1\80\D0\B8\D0\B2\D1\8F\D0\B7\D0\BA\D0\B8 \ + \D0\BA wg-awg3vds: \D0\B8\D0\BD\D0\B0\D1\87\D0\B5 \D0\BF\D0\B0\D0\B4\D0\B5\ + \D0\BD\D0\B8\D0\B5 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\BB\D1\8F \D1\83\D0\BD\ + \D0\BE\D1\81\D0\B8\D1\82 \D1\81 \D1\81\D0\BE\D0\B1\D0\BE\D0\B9 \D1\80\D0\ + \B5\D0\B7\D0\BE\D0\BB\D0\B2.\r\ + \n# DNS 8.8.4.4 \D0\B8\D0\B4\D1\91\D1\82 \D0\BE\D0\B1\D1\89\D0\B8\D0\BC \ + \D0\BC\D0\B0\D1\80\D1\88\D1\80\D1\83\D1\82\D0\BE\D0\BC (\D0\B2 \D0\B0\D0\ + \BA\D1\82\D0\B8\D0\B2\D0\BD\D1\8B\D0\B9 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\ + \BB\D1\8C / default),\r\ + \n# \D0\B1\D0\B5\D0\B7 \D0\BF\D1\80\D0\B8\D0\B2\D1\8F\D0\B7\D0\BA\D0\B8 \ + \D0\BA wg-awg3vds: \D0\B8\D0\BD\D0\B0\D1\87\D0\B5 \D0\BF\D0\B0\D0\B4\D0\B5\ + \D0\BD\D0\B8\D0\B5 \D1\82\D1\83\D0\BD\D0\BD\D0\B5\D0\BB\D1\8F \D1\83\D0\BD\ + \D0\BE\D1\81\D0\B8\D1\82 \D1\81 \D1\81\D0\BE\D0\B1\D0\BE\D0\B9 \D1\80\D0\ + \B5\D0\B7\D0\BE\D0\BB\D0\B2.\r\ + \n\r\ + \n# 6. Download, create and start container\r\ + \n:local prevTmpdir [/container/config/get tmpdir]\r\ + \n/container/envs/add list=awg3vds-env key=AWG_PREV_TMPDIR value=\$prevTmp\ + dir\r\ + \n/container/config set tmpdir=usb1/pull memory-high=200M\r\ + \n{\r\ + \n :local arch [/system/resource/get architecture-name]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local suffix \"\"\r\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\ + \n :local file \"\"\r\ + \n :local imgTag \"latest\"\r\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\r\ + \n :if (\$arch = \"arm\") do={\r\ + \n :set file (\"awg-proxy-arm\" . \$suffix . \".tar.gz\")\r\ + \n :local rbModel \"\"\r\ + \n :do { :set rbModel [[:parse \":return [/system/routerboard/get model\ + ]\"]] } on-error={}\r\ + \n :local bName [/system/resource/get board-name]\r\ + \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50UG\ + \" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\ + \n :set file (\"awg-proxy-armv5\" . \$suffix . \".tar.gz\")\r\ + \n :set imgTag \"latest-armv5\"\r\ + \n }\r\ + \n }\r\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\r\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \r\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\r\ + \n :local filePath (\"usb1/pull/\" . \$file)\r\ + \n :local altPath (\"usb1/\" . \$file)\r\ + \n :local rootDir \"usb1/awg3vds\"\r\ + \n :do { /file/make-directory usb1/pull } on-error={}\r\ + \n :if ([:len [/file/find where name=\$filePath]] = 0 && [:len [/file/fin\ + d where name=\$altPath]] > 0) do={\r\ + \n :set filePath \$altPath\r\ + \n }\r\ + \n :local added false\r\ + \n :local fetched false\r\ + \n :if ([:len [/file/find where name=\$filePath]] > 0) do={\r\ + \n :put (\"Using image already on the router: \" . \$filePath)\r\ + \n /container/add file=\$filePath interface=veth-awg3vds envlist=awg3vd\ + s-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes com\ + ment=awg3vds\r\ + \n :set added true\r\ + \n }\r\ + \n :if (!\$added && \$minor >= 22) do={\r\ + \n :local img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\ + \n :put (\"Pulling \" . \$img)\r\ + \n /container/add remote-image=\$img interface=veth-awg3vds envlist=awg\ + 3vds-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes \ + comment=awg3vds\r\ + \n :local cids [/container/find where interface=veth-awg3vds]\r\ + \n :local waited 0\r\ + \n :while ([:len \$cids] > 0 && [:len [/container/get [:pick \$cids 0] \ + image-id]] = 0 && \$waited < 120) do={\r\ + \n :delay 2s\r\ + \n :set waited (\$waited + 2)\r\ + \n }\r\ + \n :if ([:len \$cids] > 0 && [:len [/container/get [:pick \$cids 0] ima\ + ge-id]] > 0) do={\r\ + \n :set added true\r\ + \n :put (\"Pulled from registry in \" . \$waited . \"s\")\r\ + \n :do {\r\ + \n :local verPath (\$filePath . \".rel\")\r\ + \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziawg-\ + mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=10\ + \r\ + \n :local relJson [/file/get [find where name=\$verPath] contents]\ + \r\ + \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\ + \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJson]\ + ]\r\ + \n /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER value=[:p\ + ick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\ + \n /file/remove [find where name=\$verPath]\r\ + \n } on-error={}\r\ + \n } else={\r\ + \n :put \"Registry unavailable, falling back to the release archive\"\ + \r\ + \n :do { /container/remove \$cids } on-error={}\r\ + \n :delay 2s\r\ + \n }\r\ + \n }\r\ + \n :if (!\$added) do={\r\ + \n :local freeStorage 0\r\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\r\ + \n :if (\$freeStorage < 262144) do={\r\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\r\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\r\ + \n :error \"Insufficient disk space\"\r\ + \n }\r\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\r\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \r\ + \n /container/add file=\$filePath interface=veth-awg3vds envlist=awg3vd\ + s-env hostname=awg3vds root-dir=\$rootDir logging=no start-on-boot=yes com\ + ment=awg3vds\r\ + \n :set fetched true\r\ + \n }\r\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg3vds] shm-size=4M\"] }\r\ + \n :do { [:parse \"/container/set [find where interface=veth-awg3vds] ign\ + ore-remote-image-change=yes\"] } on-error={}\r\ + \n :do { [:parse \"/container/set [find where interface=veth-awg3vds] res\ + tart-policy=on-failure restart-interval=30s restart-max-count=10\"] } on-e\ + rror={}\r\ + \n :if (\$fetched) do={ /file/remove \$filePath }\r\ + \n :local freeMem [/system/resource/get free-memory]\r\ + \n :if (\$freeMem < 16777216) do={\r\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\r\ + \n }\r\ + \n /container/start [find where interface=veth-awg3vds]\r\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\r\ + \n :put \"Waiting for container to start...\"\r\ + \n :delay 5s\r\ + \n /interface/wireguard/enable wg-awg3vds\r\ + \n :put \"WireGuard interface enabled\"\r\ + \n :put \"Installation complete!\"\r\ + \n :put \"Ping test: 89.110.101.17 via AmneziaWG tunnel. repeat 10 times\ + \"\r\ + \n /ping 89.110.101.17 count=10 interval=1\r\ + \n :put \"\"\r\ + \n :put \"======= NEXT STEPS =======\"\r\ + \n :put \"\"\r\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\ + \n :put \"\"\r\ + \n :put \" Route a single host:\"\r\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg3vds com\ + ment=awg3vds-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Route a subnet:\"\r\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg3vds co\ + mment=awg3vds-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Remove a route:\"\r\ + \n :put \" /ip/route/remove [find where comment=awg3vds-tunnel dst-add\ + ress=8.8.8.8/32]\"\r\ + \n :put \"\"\r\ + \n :put \" Show all tunnel routes:\"\r\ + \n :put \" /ip/route/print where comment=awg3vds-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Update the container:\"\r\ + \n :put \" /system/script/run awg3vds-update\"\r\ + \n :put \"\"\r\ + \n :put \" Uninstall:\"\r\ + \n :put \" /system/script/run awg3vds-uninstall\"\r\ + \n :put \"=========================\"\r\ + \n}\r\ + \n\r\ + \n# 7. Verification\r\ + \n# /container/print\r\ + \n# /interface/wireguard/print\r\ + \n# /interface/wireguard/peers/print\r\ + \n" +add comment=awg3vds dont-require-permissions=no name=awg3vds-uninstall owner=\ + vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n :put \"Uninstallimg AmneziaWG...\"\r\ + \n :log info \"Uninstallimg AmneziaWG...\"\r\ + \n :local prevDNS \"\"\r\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg3vds-env\ + \" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\ + \n :local prevTmpdir \"\"\r\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg3vds-\ + env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\ + \n /ip/route/remove [find where comment=awg3vds-tunnel]\r\ + \n /ip/route/remove [find where comment=awg3vds-dns]\r\ + \n :do { /system/scheduler/remove [find where comment~\"awg3vds\"] } on-e\ + rror={}\r\ + \n :do { /system/script/remove [find where comment~\"awg3vds\" and name!=\ + \"awg3vds-uninstall\"] } on-error={}\r\ + \n /container/stop [find where interface=veth-awg3vds]\r\ + \n :delay 7s\r\ + \n /container/remove [find where interface=veth-awg3vds]\r\ + \n /container/envs/remove [find where list=\"awg3vds-env\"]\r\ + \n :if (\$prevDNS != \"\") do={\r\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\ + \n :put (\"DNS restored to: \$prevDNS\")\r\ + \n }\r\ + \n /container/config set tmpdir=\$prevTmpdir\r\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg3vds\"]\r\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.14.100/30\"]\ + \r\ + \n /ip/address/remove [find where address=\"172.19.14.101/30\"]\r\ + \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-v6-nat] } \ + on-error={}\r\ + \n :do { /ipv6/firewall/nat/remove [find where comment=awg3vds-dstnat6] }\ + \_on-error={}\r\ + \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-v6-out]\ + \_} on-error={}\r\ + \n :do { /ipv6/firewall/filter/remove [find where comment=awg3vds-awg-in6\ + ] } on-error={}\r\ + \n :do { /ipv6/nd/remove [find where interface=veth-awg3vds] } on-error={\ + }\r\ + \n :do { /ipv6/nd/prefix/remove [find where interface=veth-awg3vds] } on-\ + error={}\r\ + \n :do { /ipv6/address/remove [find where comment=awg3vds-v6] } on-error=\ + {}\r\ + \n /interface/veth/remove [find where name=\"veth-awg3vds\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg3vds\"\ + ]\r\ + \n /ip/address/remove [find where interface=\"wg-awg3vds\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg3vds\"]\r\ + \n :do { /file/remove [find where name~\"awg3vds.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/awg3vds\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \ + on-error={}\r\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges.rsc\"] } on-error\ + ={}\r\ + \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n# /system/script/remove [find where name=awg3vds-uninstall]\r\ + \n" +add comment=awg3vds dont-require-permissions=no name=awg3vds-update owner=\ + vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n :local cids [/container/find where interface=veth-awg3vds and !stopped\ + ]\r\ + \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\ + e=veth-awg3vds and start-on-boot=yes] }\r\ + \n :if ([:len \$cids] = 0) do={ :set cids [/container/find where interfac\ + e=veth-awg3vds] }\r\ + \n :if ([:len \$cids] = 0) do={\r\ + \n :put \"Container awg3vds not found\"\r\ + \n :log warning \"awg3vds-update: container not found\"\r\ + \n } else={\r\ + \n :local cid [:pick \$cids ([:len \$cids] - 1)]\r\ + \n :local img [/container/get \$cid remote-image]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \"\ + \_\"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local wantRunning true\r\ + \n :do { :if ([/container/get \$cid start-on-boot] != true) do={ :set w\ + antRunning false } } on-error={}\r\ + \n :local healthy true\r\ + \n :if ([:len [/container/get \$cid image-id]] = 0) do={ :set healthy f\ + alse }\r\ + \n :if (\$wantRunning) do={\r\ + \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\ + y false } } on-error={}\r\ + \n }\r\ + \n :if (!\$healthy && \$wantRunning && [:len [/container/get \$cid imag\ + e-id]] > 0) do={\r\ + \n :put \"Container is down - trying to start it\"\r\ + \n :do { /container/start \$cid } on-error={}\r\ + \n :delay 8s\r\ + \n :set healthy true\r\ + \n :do { :if ([/container/get \$cid stopped] = true) do={ :set health\ + y false } } on-error={}\r\ + \n :if (\$healthy) do={\r\ + \n :put \"Container is back up\"\r\ + \n :log info \"awg3vds: container restarted by the update script\"\ + \r\ + \n }\r\ + \n }\r\ + \n :if (\$img = \"\" && \$minor >= 22 && !\$healthy) do={\r\ + \n :local imgTag \"latest\"\r\ + \n :local rbModel \"\"\r\ + \n :do { :set rbModel [[:parse \":return [/system/routerboard/get mod\ + el]\"]] } on-error={}\r\ + \n :local bName [/system/resource/get board-name]\r\ + \n :if (\$rbModel~\"E50UG\" || \$rbModel~\"E60iUGS\" || \$bName~\"E50\ + UG\" || \$bName~\"E60iUGS\" || \$bName~\"^hEX\") do={\r\ + \n :set imgTag \"latest-armv5\"\r\ + \n }\r\ + \n :set img (\"ghcr.io/timbrs/awg-proxy:\" . \$imgTag)\r\ + \n :put (\"Container is down and was installed from a file - pointing\ + \_it at \" . \$img)\r\ + \n :log warning \"awg3vds-update: broken file install, switching to t\ + he registry\"\r\ + \n :do { /container/set \$cid remote-image=\$img } on-error={}\r\ + \n }\r\ + \n :if (\$img = \"\") do={\r\ + \n :put \"Installed from a local image file - /container/repull only \ + updates registry installs.\"\r\ + \n :put \"Reinstall with the configurator on RouterOS 7.22+ to switch\ + \_to one-command updates.\"\r\ + \n } else={\r\ + \n :if (\$minor < 22) do={\r\ + \n :put (\"/container/repull needs RouterOS 7.22+, this router runs\ + \_\" . \$ver)\r\ + \n :if (!\$healthy) do={ :log error (\"awg3vds-update: container is\ + \_down, and \" . \$ver . \" has no /container/repull\") }\r\ + \n } else={\r\ + \n :local rootDir [/container/get \$cid root-dir]\r\ + \n :if ([:pick \$rootDir 0 1] = \"/\") do={ :set rootDir [:pick \$r\ + ootDir 1 [:len \$rootDir]] }\r\ + \n :local rootDirOrig \$rootDir\r\ + \n :local slashPos [:find \$rootDir \"/\"]\r\ + \n :local disk \$rootDir\r\ + \n :if ([:typeof \$slashPos] != \"nil\") do={ :set disk [:pick \$ro\ + otDir 0 \$slashPos] }\r\ + \n :local verPath \"awg-update-check.json\"\r\ + \n :if (\$disk != \"disk1\") do={\r\ + \n :do { /file/make-directory (\$disk . \"/pull\") } on-error={}\ + \r\ + \n /container/config set tmpdir=(\$disk . \"/pull\")\r\ + \n :set verPath (\$disk . \"/pull/awg-update-check.json\")\r\ + \n }\r\ + \n :local newVer \"\"\r\ + \n :do {\r\ + \n /tool/fetch url=\"https://api.github.com/repos/timbrs/amneziaw\ + g-mikrotik-c/releases/latest\" dst-path=\$verPath http-max-redirect-count=\ + 10\r\ + \n :local relJson [/file/get [find where name=\$verPath] contents\ + ]\r\ + \n :local tagPos [:find \$relJson \"\\\"tag_name\\\":\\\"\"]\r\ + \n :if ([:typeof \$tagPos] != \"nil\") do={\r\ + \n :local tagRest [:pick \$relJson (\$tagPos + 12) [:len \$relJ\ + son]]\r\ + \n :set newVer [:pick \$tagRest 0 [:find \$tagRest \"\\\"\"]]\r\ + \n }\r\ + \n :do { /file/remove [find where name=\$verPath] } on-error={}\r\ + \n } on-error={ :put \"Could not read the published version\" }\r\ + \n :local curVer \"\"\r\ + \n :do { :set curVer [/container/envs/get [find where list=\"awg3vd\ + s-env\" key=\"AWG_IMAGE_VER\"] value] } on-error={}\r\ + \n :local doPull true\r\ + \n :if (\$healthy) do={\r\ + \n :if (\$newVer = \"\") do={\r\ + \n :set doPull false\r\ + \n :put \"Published version unknown - leaving the healthy conta\ + iner alone\"\r\ + \n }\r\ + \n :if (\$newVer != \"\" && \$newVer = \$curVer) do={\r\ + \n :set doPull false\r\ + \n :put (\"Already on \" . \$curVer . \" - nothing to pull, tun\ + nel untouched\")\r\ + \n }\r\ + \n }\r\ + \n :if (\$doPull) do={\r\ + \n :if (!\$healthy) do={\r\ + \n :put \"Container is not healthy - pulling the image again\"\ + \r\ + \n :log warning \"awg3vds-update: container unhealthy, forcing \ + a pull\"\r\ + \n }\r\ + \n :put (\"Updating \" . \$img . \" ...\")\r\ + \n :log info \"awg3vds: repull started\"\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\ + p\")] } on-error={}\r\ + \n :do { [:parse \"/container/set \$cid ignore-remote-image-chang\ + e=yes\"] } on-error={}\r\ + \n /container/repull \$cid\r\ + \n :local waited 0\r\ + \n :while ([:len [/container/get \$cid image-id]] = 0 && \$waited\ + \_< 180) do={\r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n :if ([:len [/container/get \$cid image-id]] = 0) do={\r\ + \n :put \"Pull failed - retrying once in 15s\"\r\ + \n :delay 15s\r\ + \n /container/repull \$cid\r\ + \n :set waited 0\r\ + \n :while ([:len [/container/get \$cid image-id]] = 0 && \$wait\ + ed < 180) do={\r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n }\r\ + \n :local backUp false\r\ + \n :if ([:len [/container/get \$cid image-id]] > 0) do={\r\ + \n :set backUp true\r\ + \n :if (\$wantRunning) do={\r\ + \n :delay 3s\r\ + \n :do { /container/start \$cid } on-error={}\r\ + \n :delay 8s\r\ + \n :set backUp false\r\ + \n :do { :if ([/container/get \$cid stopped] != true) do={ :s\ + et backUp true } } on-error={}\r\ + \n }\r\ + \n }\r\ + \n :if (!\$backUp) do={\r\ + \n :put \"Container did not come back up - rebuilding it from t\ + he registry\"\r\ + \n :log warning \"awg3vds-update: container did not come back, \ + rebuilding\"\r\ + \n :do { /container/stop \$cid } on-error={}\r\ + \n :delay 5s\r\ + \n :do { /container/remove \$cid } on-error={}\r\ + \n :delay 3s\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.bac\ + kup\")] } on-error={}\r\ + \n :do { /container/add remote-image=\$img interface=veth-awg3v\ + ds envlist=awg3vds-env hostname=awg3vds root-dir=\$rootDirOrig logging=no \ + start-on-boot=yes comment=awg3vds } on-error={}\r\ + \n :set waited 0\r\ + \n :local newCids [/container/find where interface=veth-awg3vds\ + \_and start-on-boot=yes]\r\ + \n :if ([:len \$newCids] = 0) do={ :set newCids [/container/fin\ + d where interface=veth-awg3vds] }\r\ + \n :while ([:len \$newCids] > 0 && [:len [/container/get [:pick\ + \_\$newCids ([:len \$newCids] - 1)] image-id]] = 0 && \$waited < 180) do={\ + \r\ + \n :delay 3s\r\ + \n :set waited (\$waited + 3)\r\ + \n }\r\ + \n :if ([:len \$newCids] > 0 && [:len [/container/get [:pick \$\ + newCids ([:len \$newCids] - 1)] image-id]] > 0) do={\r\ + \n :do { /container/set [:pick \$newCids ([:len \$newCids] - \ + 1)] shm-size=4M } on-error={}\r\ + \n :do { [:parse \"/container/set [find where interface=veth-\ + awg3vds] ignore-remote-image-change=yes\"] } on-error={}\r\ + \n :do { [:parse \"/container/set [find where interface=veth-\ + awg3vds] restart-policy=on-failure restart-interval=30s restart-max-count=\ + 10\"] } on-error={}\r\ + \n :do { /container/start [:pick \$newCids ([:len \$newCids] \ + - 1)] } on-error={}\r\ + \n :delay 8s\r\ + \n :do { :if ([/container/get [:pick \$newCids ([:len \$newCi\ + ds] - 1)] stopped] != true) do={ :set backUp true } } on-error={}\r\ + \n }\r\ + \n :if (\$backUp) do={\r\ + \n :put \"Container rebuilt\"\r\ + \n :log info \"awg3vds: container rebuilt after update\"\r\ + \n } else={\r\ + \n :put \"Rebuild failed - the tunnel is down. Netwatch keeps\ + \_the router online meanwhile.\"\r\ + \n :put \"This script runs again on the next schedule and wil\ + l retry.\"\r\ + \n :log error \"awg3vds-update: rebuild failed, tunnel is dow\ + n\"\r\ + \n }\r\ + \n }\r\ + \n :if (\$backUp && \$newVer != \"\") do={\r\ + \n :do { /container/envs/remove [find where list=\"awg3vds-env\ + \" key=\"AWG_IMAGE_VER\"] } on-error={}\r\ + \n :do { /container/envs/add list=awg3vds-env key=AWG_IMAGE_VER\ + \_value=\$newVer } on-error={}\r\ + \n }\r\ + \n :do { /file/remove [find where name~(\$disk . \"/awg3vds.backu\ + p\")] } on-error={}\r\ + \n :if (\$backUp) do={\r\ + \n :put (\"Update done: \" . \$img)\r\ + \n :log info \"awg3vds: update done\"\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/container +add comment=awg3vds envlists=awg3vds-env file=usb1/pull/awg-proxy-arm.tar.gz \ + hostname=awg3vds ignore-remote-image-change=yes interface=veth-awg3vds \ + layer-dir="" name=awg-proxy-arm restart-interval=30s restart-max-count=10 \ + restart-policy=on-failure root-dir=/usb1/awg3vds shm-size=4096.0KiB \ + start-on-boot=yes +/container config +set memory-high=200.0MiB tmpdir=/usb1/pull +/container envs +add key=AWG_CLIENT_PUB list=awg3vds-env value=\ + "LnLYVichmfWj/lDZqn2tk7pj2XII/1tnyZaOjf40Tl8=" +add key=AWG_CONTENT_PADDING list=awg3vds-env value=54-119 +add key=AWG_CPU_C2S list=awg3vds-env value=1 +add key=AWG_CPU_S2C list=awg3vds-env value=2 +add key=AWG_H1 list=awg3vds-env value=457615290-457646150 +add key=AWG_H2 list=awg3vds-env value=1307355386-1307363580 +add key=AWG_H3 list=awg3vds-env value=2441734303-2441781787 +add key=AWG_H4 list=awg3vds-env value=3719180788-3719195844 +add key=AWG_HEADER_PROTECTION_KEY list=awg3vds-env value=\ + "FkGxbrW6ds3YPWNl48OWFEccrLC4tF94z9MnoKUZUsM=" +add key=AWG_I1 list=awg3vds-env value=\ + "" +add key=AWG_I2 list=awg3vds-env value=\ + "" +add key=AWG_I3 list=awg3vds-env value="" +add key=AWG_I4 list=awg3vds-env value="" +add key=AWG_I5 list=awg3vds-env value=\ + "" +add key=AWG_JC list=awg3vds-env value=5 +add key=AWG_JMAX list=awg3vds-env value=952 +add key=AWG_JMIN list=awg3vds-env value=510 +add key=AWG_KEEPALIVE_TIMEOUT list=awg3vds-env value=14-21 +add key=AWG_LISTEN list=awg3vds-env value=:51820 +add key=AWG_MAX_HANDSHAKE_ATTEMPTS list=awg3vds-env value=12-14 +add key=AWG_NO_DF list=awg3vds-env value=1 +add key=AWG_PREV_DNS list=awg3vds-env value=10.30.30.33,8.8.4.4 +add key=AWG_PREV_TMPDIR list=awg3vds-env value=/usb1/pull +add key=AWG_REJECT_AFTER list=awg3vds-env value=174-195 +add key=AWG_REKEY_AFTER list=awg3vds-env value=102-130 +add key=AWG_REKEY_TIMEOUT list=awg3vds-env value=6-8 +add key=AWG_REMOTE list=awg3vds-env value=89.110.101.17:31031 +add key=AWG_S1 list=awg3vds-env value=138 +add key=AWG_S2 list=awg3vds-env value=105 +add key=AWG_S3 list=awg3vds-env value=51 +add key=AWG_S4 list=awg3vds-env value=22 +add key=AWG_SERVER_PUB list=awg3vds-env value=\ + "MMWjD/TPNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=" +/disk settings +set auto-media-interface=Bridge-Lan +/ip smb +set domain=WORKGROUP enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-Lan interface=ether2 +add bridge=Bridge-Lan interface=ether3 +add bridge=Bridge-Lan interface=ether4 +add bridge=Bridge-Lan interface=ether5 +add bridge=Bridge-Lan interface=wlan1 +add bridge=Bridge-Lan interface=wlan2 +/interface bridge settings +set allow-fast-path=no use-ip-firewall=yes +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set accept-redirects=yes allow-fast-path=no +/ipv6 settings +set accept-router-advertisements-on=none allow-fast-path=no disable-ipv6=yes \ + disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface="ether1 - Unet" list=WAN +add interface=Bridge-Lan list=LAN +add interface=wg-awg3vds list=WAN +/interface wireguard peers +add allowed-address=10.31.31.0/24,0.0.0.0/0 endpoint-address=172.19.14.102 \ + endpoint-port=51820 interface=wg-awg3vds name=peer1 persistent-keepalive=\ + 14s public-key="MMWjD/TPNpupCvhXLCAw0xHXV4N6jgtQkg9Pl6pcQhU=" +/interface wireless cap +# +set bridge=Bridge-Lan caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-2C900E832E04 certificate=*7 \ + discovery-interfaces=Bridge-Lan enabled=yes interfaces=wlan1,wlan2 \ + lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-Lan network=10.30.30.0 +add address=172.19.14.101/30 interface=veth-awg3vds network=172.19.14.100 +add address=10.31.31.2/24 interface=wg-awg3vds network=10.31.31.0 +/ip cloud +set ddns-enabled=yes +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes servers=10.30.30.33,8.8.4.4 +/ip dns static +add address=10.30.30.81 comment=defconf name=router.lan type=A +add address=10.30.30.81 comment=defconf name=master type=A +add address=10.30.30.33 comment=amster name=amster.vados.ru type=A +add address=8.8.8.8 name=dns.google type=A +add address=8.8.4.4 name=dns.google type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.4 disabled=yes list=to_vpn +add address=10.30.30.98 comment=vados-len list=Local2Vpn +add address=89.110.101.17 list=VDS +add address=109.107.177.79 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=2ip.ru list=Test +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com comment=vdsina.com list=NoVdsina +add address=vdsina.ru comment=vdsina.ru list=NoVdsina +add address=youla.ru comment=youla.ru list=NoVdsina +add address=kupiprodai.ru comment=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co comment=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru comment=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=vdsina.vados.ru comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=8.47.69.6 comment=dou.ua list=FuckRKN +add address=8.6.112.6 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=myip.ru comment="!!! Check IP (MYIP.RU) !!!" disabled=yes list=\ + NoVdsina +add address=ipinfo.io comment="!!! Check IP (IPINFO.IO) !!!" list=NoVdsina +add address=cian.ru comment=cian.ru list=NoVdsina +add address=hh.ru comment=hh.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=spb.hh.ru comment=spb.hh.ru list=NoVdsina +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS UDP" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!VDS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot DNS TCP" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + tcp src-address-list=!VDS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 in-interface=lo src-address=127.0.0.1 +add action=drop chain=input comment="defconf: drop all not coming from LAN" \ + in-interface-list=!LAN +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + in-interface-list=WAN +/ip firewall mangle +add action=accept chain=prerouting dst-address-list=RFC1918 \ + in-interface-list=!WAN +add action=mark-connection chain=prerouting comment="NO VPN" \ + dst-address-list=NoVdsina in-interface-list=!WAN new-connection-mark=\ + To-ISP src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=All2vpn connection-mark=\ + !To-ISP dst-address=!89.110.101.17 dst-address-list=!NoVdsina \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" connection-mark=\ + !To-ISP in-interface-list=!WAN new-mss=1380 protocol=tcp tcp-flags=syn \ + tcp-mss=1381-65535 +add action=mark-routing chain=prerouting connection-mark=to-vpn-conn \ + disabled=yes new-routing-mark=To-VPN routing-mark=To-VPN src-address=\ + 10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=\ + veth-awg3vds log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack +add action=accept chain=prerouting comment="SSH To ME" disabled=yes \ + dst-address=10.30.30.81 dst-port=2222 in-interface-list=!WAN protocol=tcp \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=masquerade chain=srcnat comment="Default NAT" ipsec-policy=\ + out,none out-interface="ether1 - Unet" src-address=10.30.30.0/24 +add action=masquerade chain=srcnat comment="NAT for VPN" routing-mark=To-VPN +add action=dst-nat chain=dstnat comment="dst-nat for acme" dst-port=80 \ + in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=80 +add action=dst-nat chain=dstnat comment="dst-nat for amster HTTPS" dst-port=\ + 443 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=443 +add action=dst-nat chain=dstnat comment="dst-nat for amster ssh" disabled=yes \ + dst-port=22 protocol=tcp src-address-list=VDS to-addresses=10.30.30.33 \ + to-ports=22 +add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (TCP)" \ + dst-port=53 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + VDS to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (UDP)" \ + dst-port=53 in-interface="ether1 - Unet" protocol=udp src-address-list=\ + VDS to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat disabled=yes src-address=172.20.200.68/30 +add action=masquerade chain=srcnat src-address=172.19.14.100/30 +/ip firewall raw +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-static chain=prerouting content=spb.hh.ru +add action=drop chain=prerouting src-address-list="Honeypot Hacker" +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip route +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=wg-awg3vds@main \ + routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes port=188 +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4433 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface="ether1 - Unet" type=external +add interface=Bridge-Lan type=internal +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid disabled=yes +add action=accept chain=input comment="defconf: accept ICMPv6" disabled=yes \ + protocol=icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + disabled=yes dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." disabled=yes dst-port=\ + 546 protocol=udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" disabled=yes \ + dst-port=500,4500 protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" disabled=yes \ + protocol=ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" disabled=\ + yes protocol=ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" disabled=yes \ + ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" disabled=yes \ + in-interface-list=!LAN +add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \ + connection-state=established,related +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroMaster +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=time.google.com +/system package update +set ip-version=ipv4 mode=http +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=awg3vds interval=1d name=awg3vds-update on-event=\ + "/system/script/run awg3vds-update" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-09-12 start-time=04:30:00 +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add comment="doh-fallback, doh-url=https://security.cloudflare-dns.com/dns-que\ + ry, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 1" \ + disabled=yes host=1.1.1.1 type=simple +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, doh-c\ + ert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 2" \ + disabled=yes host=1.0.0.1 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\ + \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 1" \ + disabled=yes host=8.8.8.8 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\ + \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 2" \ + disabled=yes host=8.8.4.4 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\ + ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 1" \ + disabled=yes host=9.9.9.9 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\ + ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 2" \ + disabled=yes host=149.112.112.112 type=simple +add comment="dns, notify, name=ns1.unet.ws" disabled=yes host=91.192.189.2 \ + type=simple +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260918/20260918054001-Diff-Config.rsc b/MikroMaster/history/20260918/20260918054001-Diff-Config.rsc new file mode 100644 index 0000000..aa239dd --- /dev/null +++ b/MikroMaster/history/20260918/20260918054001-Diff-Config.rsc @@ -0,0 +1,59 @@ +10,12c10,11 +< # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +< set [ find default-name=wlan2 ] disabled=no mode=ap-bridge name=wlan1 ssid=\ +< vados wireless-protocol=802.11 +--- +> set [ find default-name=wlan1 ] mode=ap-bridge ssid=vados wireless-protocol=\ +> 802.11 +15,16c14,15 +< set [ find default-name=wlan1 ] disabled=no mode=ap-bridge name=wlan2 ssid=\ +< vados5g wireless-protocol=802.11 +--- +> set [ find default-name=wlan2 ] disabled=no mode=ap-bridge ssid=vados5g \ +> wireless-protocol=802.11 +24a24 +> add listen-port=60585 mtu=1280 name=WARP +69a70,71 +> /routing bgp template +> set default as=64999 disabled=yes multihop=yes +71a74 +> add disabled=no name=warp_table +607c610 +< \n:global CommitId \"main/17176/0d89ed8d\";\r\ +--- +> \n:global CommitId \"main/18038/819287c3\";\r\ +610c613 +< r: root, in 02:20:04 14.09.2026.\";\r\ +--- +> r: root, in 02:20:04 17.09.2026.\";\r\ +3459a3463,3465 +> /certificate settings +> set builtin-trust-store=\ +> capsman,fetch,email,netwatch,container,dns,www,api,reverse-proxy,logging +3537a3544,3547 +> add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ +> endpoint-address=engage.cloudflareclient.com endpoint-port=2408 \ +> interface=WARP name=CloudFlare public-key=\ +> "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=" +3541,3543c3551,3553 +< caps-man-certificate-common-names=CAPsMAN-2C900E832E04 certificate=*7 \ +< discovery-interfaces=Bridge-Lan enabled=yes interfaces=wlan1,wlan2 \ +< lock-to-caps-man=yes +--- +> caps-man-certificate-common-names=CAPsMAN-2C900E832E04 certificate=\ +> CAP-18FD746E5814 discovery-interfaces=Bridge-Lan enabled=yes interfaces=\ +> wlan1,wlan2 lock-to-caps-man=yes +3547a3558 +> add address=172.16.0.2/24 interface=WARP network=172.16.0.0 +4283a4295,4302 +> /routing bgp template +> add as=64999 disabled=yes hold-time=4m multihop=yes name=warp routing-table=\ +> *C8 use-bfd=yes +> /routing filter community-list +> add communities=65444:900,65445:643 disabled=no list=COUNTRY_RU +> add communities=65444:900,65445:112 disabled=no list=COUNTRY_BY +> /routing filter rule +> add chain=200 disabled=yes rule="" +4294,4295d4312 +< /system package update +< set ip-version=ipv4 mode=http -- 2.52.0