From 5ea36ac18a3d21690a07997132946e58ec7186ff Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Sat, 11 Jul 2026 21:01:50 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jul 11 21:01:50.

---
 .../20260711/20260711210146-Binary.backup     |  Bin 0 -> 194200 bytes
 MikroGig/20260711/20260711210146-Config.rsc   | 3337 ++++++++++++++
 .../20260711/20260711210146-Diff-Config.rsc   |    4 +
 .../20260711/20260711200003-Config.rsc        | 3841 ++++++++++++++++
 .../20260711/20260711202002-Config.rsc        | 3843 +++++++++++++++++
 .../20260711/20260711204002-Config.rsc        | 3841 ++++++++++++++++
 MikroMaster/tmp/Diff-Config.rsc               |    3 -
 7 files changed, 14866 insertions(+), 3 deletions(-)
 create mode 100644 MikroGig/20260711/20260711210146-Binary.backup
 create mode 100644 MikroGig/20260711/20260711210146-Config.rsc
 create mode 100644 MikroGig/history/20260711/20260711210146-Diff-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711200003-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711202002-Config.rsc
 create mode 100644 MikroMaster/20260711/20260711204002-Config.rsc
 delete mode 100644 MikroMaster/tmp/Diff-Config.rsc

diff --git a/MikroGig/20260711/20260711210146-Binary.backup b/MikroGig/20260711/20260711210146-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..7c2e2888b844c51320d92a7421cf5477b5d09f45
GIT binary patch
literal 194200
zcmV+aKLEh*sF8D+_5uL10i|PNo+($?FAM^T*zq<10002|`~QBR1O)(C!s&L=;@$L6
zV|9kpCcuQ9VHK?@Q0caR==@aiXN)43D>&7-nox)sU@_shU1eH=)lUGG>j)H3C%IUt
z{g_V_qqOQ!q5Nxk8<3l`cxcpd<WN(0Z}Pl*5g#j|n%oHLy1?=a=5$t3@_tS+KaRb)
zU(#og$(*PY+rgXL7JxJBVdHaN701Ez1B@T)T{eeff>o)`sUeux49~NDYBY~QZtXTP
zJ<J8|FFM^u8FquMQOAWs8#`y!gw0$tlO&?<aZdlBKZ8=s!fw5ER&GxCwAn0+P#BdJ
z?YP#RM=;U#9(xoz;YY=VejZdAe8woc4Jw;U@p1NBu}i#PnfE2ip<g*CI65W5$;T9G
zn-22Reb5zKW#D`TT7hA&mg#vEj?aMHFR^mH*be)lSjMZ3sA><OMG$ugM3C8M`b=|(
zyupp;7|E?CnYv8?>tSGP#H)o%1`=_ujI{34Q~0!D@3UM`S?Dm+@u2Mm2>p#+%iDs|
zBZMUQeuOW>D=c4huUC8T0rKI>9#DKJ3x)dys7{C%0t}PsyXWTEls+;YBIm9`Ub@UQ
zc1qS6&U&Ut=W)s45|e=)m$on3jZND0tH%!$gC;78)nkFA{4Ja}`ga~?LAhww82$FU
zTTAPl6mfSHn{tGomC}l>fz2YbSP~Lm^*lRV2wRMc038eIKV}2r!!)?g?xXQ?NA0CL
zwSFp4)txPq-4FMIoSucL2g;%r^=_5LsvXAd6T;Kh&#f{xk~EIGUlB>y*vF!phArM?
zbFmW&;>3%O8k-<9GnPE!=GU7-`{9WS3K$wWquQjW%sy97#juhyMsB!hKWtE81c7G?
z>n&6;WIbWMHlHU*KL0Pnm<l7<)<AQIYuZMT?x55AY?cQ)*(v_Dvx*(AmSGNYSLPhL
zqT3!H>V&UzWqf|Pj-DHhZz5i`eF_!AVUw_E79+j3x9r_0Ux_q8(|e^%hq7>kcKco}
z=#8isY(|^NY*fxkpKacw1-*ra6+=HB5$us7Bz7*%wg@<Ni4$!YQsGe;qZc(#MByO#
zlZ$TH1zyf)p=I+n%r~-f+Ti?Gs$k4vcK$jtMDQUg;7_p$P#d2vHd`wd`pciRO;>!F
zx=~wmYAd9yGV{H1GP?JDvyuYws9q{7A`@0S*bsTlwDA(1BY~l6`)zgKXmIH;SHJ-t
zC&<E#PSP0U2C83+I*Tr_NuAXi<v!c46D&V44`$m6-NIO}D5epKF5Zz*8lLh;Bri-}
zU_y|7)Zw&Jv-T}ObNyni0G?EQJC%zPWR+4^0UTNa>(nIFB&VV3#2zvZcZMqnJp}Qv
z^+2@a#eL1ev|(AGXXm^?!<;l|G_ofZXApK~OsJ9riMyW{3~dVaCTV|CxJQqn-klW}
zvbVLt>PX7NS>n;;f!tZHt^4_}8?o6JQQRu++=k{$VltFe$kRb}2}m^7)n}V&@fWI?
zVfMXa@|wekk=bZmqlz*uGLx1T8+9w&p08D0;ID#02Nnt$5?ltj9DVrp$9xoEi7^PS
z?}|R~ir6b{*ZcvP@Sfhcr*e$@@FL)T-+xE3xfn!eu;pIg*m8bM1z7|5nCDeudk+*C
zgIxrFB(kS{=+e2b2bd$P6GIT9I2-DOFxj~+&%+$XN%VO|*jr$S7U6YD9VY+B{kTa1
zE{i%&Dl4){83i!T9fPQ<N0t&6a(3ZI=a6rTf}|8qS*OchP<u%(2LcBkKwoC}7IC~9
zB7?(Z)6hu8Pn6Z?oEU-IOIzgo$EzjE8?xi#9cc9Ws!@qbpe~r?{PPpWV+Ker0w7|L
zCwBfqQfpwP<z?<o+yNz2JEqqp7(1AasrYWXTfYOiCzm@Aaqq`gu8vEFw_Pdt5Mij$
zw_b(31I|%$yoYICPzqj`c1;5m=&CfgYXX+Ok3;#n5j<8#0T1S#qgi_ca!Q2(iL_B-
z#)2%Jdn&-lt=S9iWHYr=nDrQ}3G1+J6^1Vv_4g`mL!Hg<#E7_tFW7?pp{M28OAp<u
z>XqDn`sD(E(ps<Yx3zSjeQVE9vn3on<j?>MF+oWzBrkdtr%Ih#d_g^q*^)pLrCw2i
z^fj%FmzC*LRD)q;v)YB?bYPXnECDkFP#JhK=Vr9+auEG!Ve}ln%-{wt%xixj+=Hr-
z!QK6#P<R9!=1>Gre74WE-<7xuFb!b6NXZIiz~yfg4y7Bw3aGem3chwC#;~xQq>{1)
zYygcg|91D<vybZ=g_`4)Nxka_z!>#CJA+m?ttd$?5jzZI<pk>`-pEh@lFp?Z70HA7
z_t$hhpyCb@45n(B_s5oDFieR%pq6`j_p2Zp8g&Nc_Il4!=o*Q%M=^~!LIJD1gHH`!
zn(taJE?j$!mmC$06nw{opyL-Stqn`ZOll7#F<tLpta0rRseH~-sN*UiZs0rg{TZIR
zBZG#S^)itXev^ltWt4i)B38*lLf6v;zpmnqLN&=C#UhM;<j#^-r0Wc)i6E~2j)hT1
zw@e|9FZ@VSnAjlV`RsCjpDy3W(k9bY8gBF_4$O@2wFt&tLu6bNyF-iwP`J+8>`czR
zzvDx44Jskv{k#5VpQT0MiTMpSYdF+-wR580qh=$cO6H8DNXlK^Jxek6WpeT?`6ZQ|
zW$SZhRQ}o0GpNW)Xb#w$&&@~J!#qHXk6cB&BKgd-blo6|WJ4bB=#m$5=6?QHiROq)
z9=GcU;fNbeXe3M~G>;NQ^*d>9A3mHfn=PY`<A0|hfHxLtO0$)_sU0V=Hy<Eywgj1`
zHdUFdUckV{P1Mi!4;q^>NT9cGT8pz6P(np=UM(RTsh_ifBH|()GnitmVH|QJ+Z&hg
zEamh|pk5?&o1&=rh+w|cNjWxX^VZ~lb-gcZ6LlyB9Hi5jFV+jBXp$WDh|3wjkts6&
zpHG|9EGQ>O9==F1k<&_Y9bWI4Z&f&?ec|v1CE(UD1dWO%rsDsQt8<|#PTbEF|Bv-;
z;}Qa(jSg#R-gLc~&^bT@LsdAtFLEzOK|!xa;bJ0!E$mP@#)y>&#)U6@l_08PuT=~z
zi_yAQCA&1ugquJMMZLtCB;uWY*fuBIq)f6vVhD9I-8w&mTqz;-R7%IunLN3ylQv*I
z+>Ju?UsTb{@O8-CB<Z&0=x^b#DF;X4k5qDU3|O(%Hb$L(fNFGYuwk;Lp3&=e>K(aC
zI?rvB;dL-iXaHVW9|QQUByA8Z>&aUS-7eE5@Za(j$bocC-PA1`nDDlT1{i&*uAJBG
zKj<%a9_Dj9#sA*eGk?N;y=T3`?DnghSIKBxhPdGY4`o^WL|1?L#Xov;zhvdsWlx^<
zGWIWMRb^g4UkSfDGguIgM!QP*W1t;jF)3kDpgydN4J~s}C7Dc?OSR7^ZbTOF)gGuZ
zjty`Gw|%T*rfXEJ`jji-iY4Aygskp5Q(R@Of7T?UV_HEueSEm@1r(E@3NP$Y_2P}K
z6~Cg&7G(TQB7ko$1&$q)g*W_m6Zc023rz5gKFeE?wlA6Q9h7M@<aM~6zk=E4)}?)Y
zu(v4bT?k_ZR@&2)g(=M;lQ07~4By2^kjzzFFDQ@ngqf-UM`o9?IdE(h`4oAmfTY4{
zB(;@0o+Jli^|<f(0mh1hYG#<UJGXO?OY%vsV4|om3!v(O?fFV5Hk+?&YsxeWTNONN
zY4jA5PMTTs*#O|ctm28AX+lY<&ZKVKZ8k8h=te2F;LP0S&Wtym6J;I-z!s=Px!nFF
z1k5Ha5$QO@iAv^XfqKrsYk>wg5e9E@w;d%+2FN)_VKdxH*@M?pEjObxJ5E9Iad`9)
zC{VS&mq4fvDDEX#v}z!b<!!L(!z0*uXdoH%V-DH4<5z4RLxPXf3Y(x?kq764O>}mY
zNH8H7_q9wqI?8{>sTD0FfBV-Es_O3fvuzh~YuDNB9Q<lRI&oV_5>U83g++>aArYyx
zm9-3UiL(En+&VQ)5URxIi<tsGBbGFMpeJU(>_(RKs@!$eO8%s6PUO<iMLCX(PuAA#
zbX68M9Q<*&!(RNiO?po-!{<LUpp>4)d@sL~*jDIzo85}`N1hd6S<^MufQSfdgO=w_
z)Brcv81()0PylTzKctaH8@Xts?zqaXvs4j!bv1%Z3aj6*n5|h9Q|MBby!sVJ&|O;(
za>yq3JJ_mfw^PyuiX(B#FiC3S3%Y7l$pn|-_?9vVEhMp{QXqTy?YfSc5;qBo{WFDi
zoYt=p3(+ikl!1*JTgnHLmmdV{rq)d^dimQWnNze#97j}_GLm2gJLTofLA^vQ1XX7u
zV_qX;duElmWySPr@qz|5D=8LFUk#4*bRGYHcX8Vcn;D*%!WYo{H^(U@laXDMU!SPe
z)U*alp@Fd!B01B$2R&Nmgonmi?xm0wjUu0%nL1Y1JU|S``)=6dSp6Ma<i_ps?F}Lv
z*(xXn>Ni=(T$pm~Peb?J13P9epYftO0?O>LD3s>xZAtSv5&}MaAS0)kiGymvHo)(9
zgtodEwgIDF7M?EV*qe%KZsoliqOSe8(5hb;7CY(%bs)<o<Za#tM4tZ4gP`|*_?Y?8
zq5A3O%<!3rOD_--evpf~CLp~o5ui%B%|?5!fv#S{^ImIw2ze}(Y+I|j*N<g1pmX1%
z#K*JM1jsGA(8at6!X^ULB<}ZIP{C#}qNnI2_l;I5_zlG$=N)(kRGi`6dUaIr5)v<V
zS31`WdxNOS7B|k_nXYLEMRgF1`q*LU#9$iY5|J-ZIr07l0U0$9Ec%eFL8couToEJr
zY(@;Zhc3HDcSxqWW`Z&m*gOoFl<$tv=u;!$yta`8agq05TbfCkLg)d~%2|iKek>;C
zd!#9`CrnN1CQtnl=co&6VB!)KcO~UTFoH>A+gmk|spUZ+eJql0nGo<*!+?%Tu?R@{
z6-%1+5kEWAM3sy_kEamxnsxdxWc#kT%V|udy95hVdP;Wa;?}7m7D2}C-5EH=sFA~$
zOYo+kSZ?yTPvyx2SwJg0ExbIdHw(=UxOy#$GIKpp{$M1BKquB!i(k#Ep8I`VV+5<4
z<AW5!6dt=|7ryz`sG$Da4k4(zJk~Yy{K^v5&jNPig>jjg<VXJg=bd?G!j;})MzCVr
zH1$+C_T;@sfX;!-tS>_1?R9v*K_Rrs6l=56lnJ4)ZI4orB!5A^@AzM?(@q(~>$m~u
zugWS}WKY*h`mGF*c@eA8W3N%5iV8AU0<%S~UfLwyPW)o9Qon+mhVy%Lf{(MAPv;Ha
zoUC4GYZ1DN>(R#nU`-7zvGX`T=n{gMM*JWjgi`-VI#g@{kXX7N%7Um{41xup6ilTw
z69)!~%I!8N&GzW%-+Jvim<b1ncv<y-fn;L9=A{idTMVreCR-_U#*I#(QM1kumKBWl
z%iI}NSa*CAs_8mePqB;Svp0*RdAblS**^NqBJ7KP#;34}zcgpq1QfCJ8+^-}A{KX=
z(*0+q!f4Bj08@0EC@eLdO=T9UbzGDOFzt-z#%TTk;ZNvf&5&Ctw>5G45!t=|p$-aD
zLcs}R$)k{SlX`uWTp$R|FKb~Xz%U`dsR#p8P`utqlbWJ_A-(SAg#Q<QdUZCun1y_%
z`#NoV?cEWqQ`qn{h6!u_RX&Kebr6%1s|c_T_32%AeT%t<7l}J*?E)ze9i2e4BM&u$
zlDPYYGV?Ax##2Tz2T_LTKh&R%84PmG^c0IzHdx^5c}pqlwA4dQtBwdiUd5sx+#jml
z5evp|^nN3XnL=fM)CJc)*AjV6F*&;%T~z6QOzy0a+)VylQ5ZP*T$*ArVq$;$&|rjE
z5X)eE?P87($Z@b~K>W|!vQxGU*wC9XHy@2;G8w7RE~!~<McCGw2QVSFzkaotFU?zw
z>9%!=TVNFyUUjwOb!)E}n+m1<&aGXw6w8YMKKd9}f4X9V+u?X}ZOL~TmhU+5Kv|>@
z@amp3E@55VPQ==^i%faws6RYN;3fyzY`DM&fs-I;uO!Ukzp15l<$wQCrfoXEpofjN
z4%a_PJDk{Hb%c(QJ6)~vARP~O=fW;9CRF==c+vS>o6(<bIcpl6NU<J!;+t`P^}S1O
zn;CB@zUX5xeu$3H$o!_Q1e;x(TEm?7P`(meNv<R5%4$wQupy}e2VlrUKozF4EcUu^
z<8wU<|K%*I(2%p*u};utU29jvWpeR>!5`hi{UJ1@!o$tcKBJHQMdeZ`WSEnkbi>lj
zt#@Uvo3EMv{`e2cKH`rlQkfOj#u1dzgjq@J3YU4}ViBMK2V~yuq?t+;N6TN<jdd;j
zPfQ#+Mk0u^Is@IvOTndqr`a4DjTaOxAAkEkuJbC`^f7Z)LtVO>eMnMm1JiTNm8e{)
zh`_1Zqv*|x1M^fU9&#5{S+#J1$>c$iKk)}P=XlVPaK*jEa~9OC6s&BJt~9srB|p5W
zzHDMnviY3+Gp4hQhL8n2{9GITEO747_(s~=!26{?LYAAqX%sMs;w^p@z!j=n?b#^(
ztw$mYM)rQviF~$G?h7(+@QK92eVB+B@xad#NJAv}7-F;(YcQ=eFxu+Qw)p5^4@U^M
zQy6yadx=lc`PeEi8eg+fiH%H`SR@Bm^+v=%eQT^S2Nf|EOT>ZV#S4%A=g~>TnZs?J
z1t_Yaf^c+h=!CD5scBahB2^B{G3(07uGqnS%hMzzSG<G*FE#c*c#mZ#8@yWVHi;_z
zjI2bG5l;6Rtf?f42_ZTVG<#eOJjH5jOFr@SVV_+wtu0^v`63EHgUF0ty&UoIuMKLl
z$?nOkclQn~l?JW#zJg~;eS4|8a5rqb`$0G3K23fG^FX?0jYO>(B)~WIIyd}!M+&5Y
zXWbhQbym4RcDHTOpTqG)3-=A-!W05w8nF4~ec0ydB~Wosz|s)#qtR|2cwTyyYYWgq
z@fPhQ(U^!Z%#Ah-g@DLkCvP!+3y-v}`DpbDN**zC24e>7{0E4SWb<5$VRG}Io3gSm
zyj96K<FhG<XH@W%zi?VDpMK3duSjMy+ugWlWokiDR(q1m9>c_#3vM+XotH{%JV&~l
z8^E#~?RfN@@uvmI_*6@i!wk}#$pv~cjXMLdkboH;jxeHK;v_;mo;SOP_tP5W*Rd+H
zFD7Ema^cdZ@P1stKVU|LO`#>z0Q~txhO3x0)z$pkF?x@M78>eL?3FiN)@x?P{M}93
zW|eYd@r4u>@a*laDqHz7MLB^?mLH*6PPDI7$rfYow4r-9DXEISi+$wi&<^!)K&Y(y
z{S0yk#f_~RaGyfw4L&+zn&wJo5FRC3+?~Gfle7+SYV^0a?CX*`94;BQ=^A8t2<@D!
z8Xjetrc~I%t>Xm!PQH5iKy1N;qcTf}^aC{V0qkt9JK{854+#r?!oqn<F8-#KxN><5
zd_A-;JRbliJZ-^lv8jNrSVqcfB=xIdP@vN13;n)Hni|tmg=jG=Auc0ex7;SRP>F##
zZD%sPZcN?S+p!y7bdzsG^5H|liSjK>SlFi^AK3RmpaG}<YLJPxXOnXzJAB}r?*#4C
zxmtLRSw2RLe|yWohNcKqA%qvN3<prXc1~XSm7ssruLh|}b-M!F98sp#9H3p9T<3N#
zy4#;PSMhzpY?Wt-53XQ`6pLz8Q%o-DFj^elM8AMJH@9AJ_a`jW%+0az=}VwKVhwXa
z`kmUr4&r$811=M@@nDH*yCNK{Ca~<2Z?D0?-_qIa4xp-G8+}Zz9v(ytpk*@TCfsg!
z0wWCuVa}Fqjy?M^hzH0)8!LmFERN?;@#d}`aeA`P>9H0zw+lZ-0Yqu`Q55CYuE{H@
z&?>WCNKHK8l*gJdWJ*|%vQmxl^2ifakv+~h+nBATp18za4m<&vou?X<dy+hg7=qa!
zy4x;wW+StLJU9|nmG)Gl+3wKk?U{G+Ja7wC3woTN-(oKX4aL(o_WfK0tnVuR1b|-p
zRajxjJR}9rp-lqswXKA@3^G!}APc<EB^|)|xVORF_`I0)Y(?lHckinq&_e*9!*p25
z^3KwLF14`0;sR75r0-U2mXVMj6q4DD3^R4LGb61P@&`6hbB4<P{v6W<uEwY#(OI+O
zJF^(ibinU>k~ZGP8mM;18OEbW9#gD;7b@7_|LEo-zx;Y~l2Pl4Y4-!FaW*pQi=6ez
z{DeA@Nv=n!CL0x4g^k{O4(q3&d$BmTK4Sr+lr`{(TYcfiwVKZ8Y!L0j)pw+{Nvaj$
z=<@Eik&7!Z#XE2Q%u%maqiMTflInBp|EQ@9IB0l&9IwKlyz+eNp}KNq`s3&+X`J@0
zuxKlP(pxJ0vmeQ{WvXppVt%??%G|eBsSLQNJ@yL94uO5FK!0}W2?Hzsx=_{ztuo6P
z-TbO7A7SuY)Vp0nu;jPun}F);!se;L6BI1T%<P|JdvoHS_ONNP?)sppJfwmFSP6O@
zU%!!tJ->G&zgTl^*BEl>8MrSe<sF=G8it}36>3rfEd}>H=k~gEzFqmj5A<arc2^&!
zJKN827Ac^fs}affVy>(1dc_P^tuSL<{Y9rP#KYn=sU_T*-c<44j!k0xo`-L0Bi$f3
z=B|z=F-CE%Es{#ykT;t9k~7c|tu%j-vW*?Pm>GP~F8}4NuGLTtsNpn~OK^^no$pBW
z$RfJCPKjbUVLrJ9xlaAbO)^sopcoA#Vr0yoYIh|n8>3_}GR3-#oi5$RIet%lH9z&?
ziYwqV4@pmfJ^8dH#gOfHtdB~FoR^VTN)}%EqW{98Cj?#ML*KFm(PeqsW!06JguCKu
z0Kj@QpB8b|@D#vG?K%!z;^&NVuwa$v>CO#F2k02%&%x8L_UK2{w&EtT{3}KC;&v!=
ztY@SA);xcW3pdy^;REcScycX!GmIU64=$Ex{kho=rO}EwVUQh$&Jn!Uxq4;7QHAWO
z+m@{ec`+!r!48}t0vHqq&|nK__rGP<QmKy+%Uqtr!~)BU05`Ii^$vGe<PJ2+bsk5?
z@Tj7J{Dg?<v~X>gKpi8QObPx|1^HM;l4`<mO<UO?p0w{Q6R%u=y^Rvs`iDCQ^UDJ#
zmYz{sM47;!RsnsClndp>3>x4lLkQNwR(t*-h0i5Ja;8541r6t?P{wO;oQd^!G6L2e
z_s~cV+J@?1E4&2b927wvBYq*DO*}b{_tfy2sPI)-3T{%MI+7T#NJbNkhOEqacV+kn
z%_)AW48*x>sI>0p;G<pWS!jnbaTZ5j_m2k`xT<PoPhqW4p<I<B|KWXJH1${-7dYs{
zB*iD4jMxtR{b<+LqGn|HCWeDO_hr(?#3R*En$+B@24J(w5%lO#flzu^9j7odD?)Vi
zYuY9~=y{mpIAb3LSb!9TwIc^F&oKMn?n)?^du*|%r{NWLt+-s8B61fx69{+?Z>7in
zpwI;#I|kyOodVM5!?YgTA^E6@o6?(Q5naK?AIJ{2<&2O1TAE5!1l{9ACWic)ba5X+
zp0(4|sHrIRnPI4~KjToHFANFicd?xDY}1EaqW~rnnL*`lc=tf9Gg^v(@IfO9DaWT3
zaqWzuFf||r6hwQYCjVi=-)YE$EaurXLR?jy9{VcD;NdO9(g9*y(>__!4*wWPa>C06
zn-%A?GqmVE9^!9&`odr!y=H*R*_Gsh*$R@$@^C}lBjkPAJ6VII6Y~=QSYgPn<F(vZ
zxfL>KZf?;#frEV0h{yuRM(rpRDi$5TuZnCMn*q5wGkGEnSwai(=p1{00sX`&09y9`
zUO@GT%`{N4b&VfrcG$W2PvCnxFJua2s(}6QLbO};M|%pLlR=*Yac?qO1ijpmHeVu~
zX#d+JpVK79iHrP@r;?pxCArA7HLu6YVIl@Fz<=7E0(^ZkNSr|N1EUl-kSH^?PpMWd
z)_lMdw%+`8v+0*rVm)eQ?4NJ-aYT`SPA7-K5z{VphKLb-PZ-t9*mAo}jEd&gRc2oy
z#GNNUFQCkCz0FJYY0Vt0AbSIXpz#}RlB-8y#U@7WV_D6<DjfUpv|S!1{}Kx_)t&(P
zA16vs=nty;w1ij?%E84=X}^h%6H*Is>@_`63>=ANDej>S#M)R<?sDFFbgLvFB$s1d
z$0^bg=TyI)poxf+ZXU7s00ik^2-ZSeBd64^?n{5a(Hj|-$Q)jWCfRE~3R^--(;~qd
z{ftcDz##JWQ?n`0ghKiV3~IJLb3yUB$fe_VlI`oFAz1mbDSKldi3)=o?G;ql+#+f3
z37K~ve*XhEV2XNK%Z20MV>ES%k;!rl7MQeeFvthbGO%Zk`+@f-n~-`w)>?rM>0>-I
z1esab(l}L1SrzyP2?45a{n(1RSb^(KP8&<hI71w;?}j)U=aM_htYW%YY)W%`Xh-Y~
z#l(qpQMdm>0&yg**xd2N5UCty^xD8&V%N9wbk#w>5|j*GGY--4-L@#-d<5F?M!i3V
z*3PmTsuV*Ve||$*dp@IKzPD>r2RlbWFEbE-0qHr=W`1wFDD9~;Pwj=HJgJXC3CNpo
z+fVws3ALjhpacOxmDP)_qG-fgyORci5Y4J(i&XJ7$&S9ht_Ww~)Tp|G_e!i86WNby
zQ*$+cJQ|%|-qV5EYe#%xyCfxjdj#teBA|iIT=^TmWU5)&XGl3dB;ujwjm}1V?;<jt
z%#m15%TC@T@wzjG<Y#zlkW8>rKtr4HQsM=`h#UXS)?+W&qq-t`oL9rAfv7N~EO3nR
z^QP=v)4)BG!!8k`NL<pTZpA}<K+7$8^ZcZJ<4X#NbcKoTSPSkaQW)6MVk-XwRMVR3
zWKc^1yIp`g9OIzYE<4eo1N5d@#%EHCJlX#kn*xS6>czU9GP$F@I6Q+1&u8y|OPax-
zhuyjzCA*wCHlUup1T<)&Oc}+Ef3f7%YWyF&%*cG`nTdq?e77HVz#VX++`%YVf-m-G
ztmldi;YQOAOk3XjBqx%za2l%xSM8W+f4#)8wLZvB-;uL1x|PLWz*meQjiB=Oaa^;o
zv+lpCt=O^WE13=$ie6a0XVq}gBFLo51sj+%i`hr5lxj>2w4%a`BZIBRY=)#9hn;^W
z5W}q4Cp%DTVLVBf+~QmfY*SL#0uC)lO0MK^JC;RCb9(LW!lOXGY%iLOv-%UjG^RGm
z9@KI~tZof}*m1XxM++Xn4Aa`o7_P;s<8fnDa0a#<iL>G~Ay>XG2NQ!zKg2^&8m%fm
zrZl85fPL^`PUpIN1v1hppOkh+uTrB9;zoFtFxiK}Dmu1G3+yT3O@gOKtO27vLetu0
z3O<OyDs+&wQGRvrSSGg;{qAnFZ?f7V0{#DX7j?7ws8K=r&;C}1Pqhum>m@yaE2@fs
z!3ad{_Lq?Is*SJAw*^c7d4OcOZD)!d=LtNGEh#MlUfsbKwv72c@SME0K&2ipX(o#Q
z>17SqN93ef$ZKf}emJ!!j;CG478Hcd?x?aj?VtIHIM;ee<veu?VTOyb7!YjxFxo_W
z?D@t}erkpxegyz5{k(_~2&Dd>cc?U2l#trHL{v)3ysFRQ)rLnXJ-~9fyczMDUBwWv
zm>ofN!d%vaaOc6WPOHMu#58XbT6{B&l+EDYB>37xH0^{dHqp?NHR%@Z2O+csH4P#2
zRiW9_msX9BKl^`A2VMnOVnDCzd7k!;XcwCbQ|2kjt}YCp%+^0g`UC>40@=T%4-#sK
zG4yFI5*^GG)M`;H@czBB2WExgh2EcUN`>p+8yu}~6GjBN-SLDRx**mdCx?a~%aWI6
zzqhp`%rdc&8d&1D?Os-e*(8*UqAg655{rRqIjMmy|0)%#fZ7MKzGvE2J!jf8Oc%8n
zXw9Iz7naZv3R2-uLd++U2(B4DC~K`Gwf^y)!IRfaDPAyQM~U++Nlwhjzsid}pGLar
zBy9jl1rB+}n(dp`T&A^fh1X<g(~aQb<gg&LX#B@@2TB5rq0{=V6Yp3t&+U3d6?X`i
z_=?b{pGX<e!-JkVTkLsN2@EqIZCZ(F0(*ApHUdC!B{S=o4V5|QHoQ)qenSxqj>Kc2
zIg?*59H<f>ClfWv%lIf3_LC0Sc6T5X+1DiTB1FEa3Nk;UF#MkyYNjB1ZbPM*mBM<W
zh{m23ldI75RRl4FoPaTpLnp(f*q`oY5$J}U5~^3zWM5PU)bUPSn|o}#0VN#4$VNFa
zi-?$J|FZzQM>{&69i}>11gD3<JBTur*CjAj(R&!TqfT?K8&25sI#6V8ce5P?a5`5H
z5I7NyW9w2^!T6MX`yE-Nn?m2Y#U97VA{Qcb;ofWS$&5<16kWM`C;exXF*1yUegg42
zIAulsYa{i7Rp$c5%}6h%TvN%>iaBHV@N>pQi2AOzk$_`6ZQe-fT?u{f5Cj5Had_1y
zd5U0rX*Cl=f82e+L0z}@ZZSxBQHi3!*5i6LIdtdZ+QRs@J}>J$ekgZu@Pt$xi;ymQ
z<mO^$0b7Hn<jMOtOwr#!4SnI%?t%*Qx_XKXWy6kLG1cQO{cAw~XS&LX@HhFI0W<xS
z8My1Y?uv?c4OVw=*!1LJ@E(mQ_&@lar~|aj4Y_Q1!z}NyOb;bU=!TDBedzdJLp}H8
zw<+~k*^mit10pY8Jq*Y^vA*7Kb##hjNi#G<myIl$12P74TV_RR){tpzvo>%kgE&a@
zDob01^EZQ3{cGz@rMR|50v642tN!1P%ag9i#=Q-eOs*7UavpL;o~g7oORGze{af=n
zR{hKlNNfC|k%5!}q~#e8&w*HQ?KFa#ym_AID#qy7dbXE7H>aZC;kQaRA?Z`G<ydIi
z-{YXCvT~k2>>$Vh`09h8q+iw-%PGacu$WIkYm{Kz0@~S|7!^;M4aJ2G-e*9fWd@8{
z=ZB{C$;eP(#hxM~9&x|ScRN*rZ`m1XI<|YGym`=J_<Geg;mDqXK~QPNuGjY@UfBx4
z$#>k^RZZA!<6o;);bG>)gE+)Dm*f|X{Z8VJs|#O0(}2wDH)wn~XOBO6pLfygQ%78H
zRvPS68p2m?a(r0PScSfWFA;=nE#QD~Ui75?sCb>aESthFBY)B(<&Rf0pA{4tN`zfH
zCSj`^kUUz?3U_XYY>n=iNAvu!IfZP~u<h*<<DcX%nMT<>ho2zxPmP^h2+f3cGCl|3
zkM)sQ8LX=NH5y>DxkDx*zFGY>`Ff8M02gGaMrJZ7ehl5gn7i{t%=Y4)SFWT`9skv*
zce*PgutWu~PH`}zdSH`<hyn{lAP*C1>_1E(U$HWL5-_C?C*TFMKqZTwu~E8lJgy2_
zblgO5O7ughe$cPpWT<h)ue+8r2%*T{HMB#WsKs@b6Md&JptZjD!4ccX30Wg<5NSs{
zNuL3#xUSj0&=J0^mXhUi588|v7c16wbT&hYg8=4A9A<V6KYQvdBvUG?&P_Gt5wn1i
z+MC*)kEJE8d!Vu9($a+;D4EP0G&A=q>RIsE9qsK9D0P~bzV|tJz&$xuFIwns4Yn`b
znLoNf{x_NR|4X+2sLH?jrz+;D5k5M(*cagZjmq48^Q3+8JQLYBV)!wl$RqB-c|eP_
zd*?f2<uT{f1-RE<<sF8MNMw~e%?)4&Mh?R&Vir@kYl2=oO`DtGiMwOh+#-<645<%V
zMjplh@M~K$(_HN(YX5Z0;=HbFu%f%@<RhxFXD{iMn^M`D3cikA^_H?gP-~jB%Z)gY
z=4>=I+|3JxZhD>>sr7+@Az4c&u?A<%^JjDMXXs(X?n0Bv8Tj`r-jg%R#TUoLWaMIi
z1^lK@lE7HMiBaOK*F>EH&zph!1i$Rfa{Cg#(weHG$SWNvse%hcEsAx|wI@ITF8WPT
zz!M<hp>}B1-+Ow|2+&nV)KMKuBCEpHA-_j>!}mN51>n~#cQO4y!gstF8`ekL{vVi|
zw1!p3S7VgwPLJEPfC=%d%4!Xw_rncGbLA>tu-oPVvhG-P77or9c<CZZ8us)R@m9k=
zFpmHiVC0bva`u^+ZtPu^ro1X}d<{A(iuG-l?;^{4DVtWsCp@|#|MulwKw8S3VG)#d
z5rmjgqDR>toG?(yo2_+BxkL*k>E&86$d`ZXx&#JeEoG^f{h6t5=IgEkgN=o^WGIgs
zBfd2`*GJ%e&EpiNSd&VwQMPMcpvj-zv3Gzj0cpnJIHYRenNBm`T`FL`WZMsZM@F1G
z{B(`Q*xT18i5dF+f%A)3eo(gThXi=1?3TTlD6Wj2GZWoSlbZ&MW6dY9(nxQEstc6+
zM4m4I29jS!(w8|Pab+5JO#%O<K{Hky27?q>Tv8&M-2l)m?43K6A^7r>kSLt{Gp}y`
zKXZa$4;h#WV$nIk5_D-Q4xY0PFheBMfIfm9PXfXpIso>xJOR-254S)bn!t)xq%9vW
zp&%&X^{8<ZZ|Zoi=nA$XF#%?ch6cgDd+Wq`B?4N)&f~nzeY-Jp6`6xM0ddL)ZSLT6
zC0^7sb>`nuHZZ<G8RncEubqX=*quigYk818>iy_nD>c|2{MOnzi!>$8V)`6Vy4isb
z2$AgEr6?Vr(+Y4GE}hvWQIW$b6X3-9wLXIci~#1PkxaaV@0D3ZDqU{CPNA^U^rxkj
z-7&2jUjxNDt?#hJ7eL>f7v9sS9c_pgA#M3&lBD{qVK&Y29GxX63@0c7s+m1$Vpv{_
z+L8fi=|jd)pkRx~wrcjNB^xq^hgMdGP1Q1iv~gnZ=g-xuz`RE}81{{V4bq+1Q3>)(
zkBxAqX?_>s@b4x+-7+Ot%BJ?`x9mWDIn^5zb_f}bF<`7js#=ZD;fkXtQ6vKQj`;Cb
zp<~ue>3uiKj}k-veWC)dv!2GYx<wo|ro*^fxWB&-5mqo+6d{%VaXJ=TO$AV!mn*|B
z)DZFNk~NHI0+1VSMdfbVb?C$|FH=g7!k4{s+#oTQb0lkY`0$KBa?Oirr1aUDy-4jZ
zaQ#AuXZYK}fzV+#bNQ^VYf3`Aa_f<(CxKvKMXw(w)KP{rmD(d^97Hq4tn``ESAdwL
zV^j23AVQh&k;a^?wy6R&QCN?GBAzjfQ?LODwo-BW5H>gMls9JDIYpcuwGpp8*ZDPX
zY9?P?b6wV1pdA`f*+zy;<{YC}S+-)7LBmJ`R64A~J!XIJspc5(pnyODl0jtl-V)n~
zI6gXWDfxQorcrH;j;(NMs7BKnilO9icl$K#gvRK@xkzWv!K<{lbH<h`s#gHhv9&f~
z2X)df5-qAZ8T`D&<cHZuIu^!5oufSf;Z1>)G=GVkAMC(1qjl*&&fJS;plXnXXp2J;
zy>FE^v9nYdZh3)U-U-n<@V|puyy+}&2P`pZpSkPd@ww#&ixHVM>sLb?5>D{<Q<@BN
z-%A1${G01y$BZEUxmsEZHOI&Fx7;Y@{mrz1a=JSokR%K9{ONZWIpbd&EUW^#uQORS
z6u6x-TMY)xU{<#5BZ_K<*!_u*Ms2>kv9c3{-$-00)iSM14O;urk6*Xxv2|yU+F=BD
z4kD(n7S~XcEd;Q?c|OPHZIzinW)h(8rsc4c&6uh!5GPva?aL#^Oe^?p2L(ZxK_c)S
zMAYtVqtYkSI^~y!5Y8IW7ErP3)-^yvQT*4EAai4FFGjnedzKDSW)P?AeD1ek_Ij!l
zIu8R6u6t{FAuUi_q$|9Pp|g#!MDDTH(o)K#2qD#}AsEv<^Up3(%=6AbCYhbO9z21j
zwui_6&NNj9s=1L*!+GDtG^B`Y<=fDV4_}Ig=p*`tFM9i5wrmPNT2{Z#d^o^=L8**r
zYOE6@tnkXjN8$sEJ{2zJ^}t6+<4X>#gTat$M=$XHold{(T%(foXkqnR9@bQ|s_DN<
zgM!ycAeIvQBPnKF4gUu;nqiC_ss;b1mQ)g|p_lL@^uW^O#AsHEu=utG;5n=b^|%1P
z0&XO3R>B<i%=6l;&b*|)gYODU?piC{j{#uyR^S=>lfZpbRcy-N6EKgZ95%JJE93iR
z8JcV(9TD$|Jv}+V+(W-ooUFWc2c4^W>FGWec@<mV@%~A>Y$oNuPd`vuZCEeP&xnLe
z5&9WDsuOy^>mV3vO-Y(Jw7{eZuW0`;qofH{Jw{?q%LZi+$X-f$YqyLhsN5Zh<OCuH
zGKF^2Dv(`4)-TnKs2C7+-JXHFxZE%?E4}w8`){%-21FZC3PT1?Z_+^(Nz`Hu%C1m8
z*zlg@7bkVBytvXI#iWR6%886F-<%3PJiOf{kvGL(oV155pxuC{A+=u~TUKix%~B`t
zM;pdeS;sidhIX|OW#(qqRk;yoF<H%KA#>hVoD12NB5lLCAE!H4$7;SwMe7I^ucnE5
z+YfJ+D<{}tfE0ge(OI2uw_|I7<#+EZS@Nvf!;%Za_>!0miXglb6IwJ548bdnv2`#f
ze>H~R#xumRlc3W@zV}(o-=N3-X}=FUQlH*|?}sGqHecqBC;0GJM;_P<FY;1Jk`?l?
z$!5>hD4m|Sm4T_5^zqm~CVBZb+IZ4RJ@Wmeqs05-eB(J+1_yTSsgWM_7eaOVW-C>f
z)|;Li`6)ju)RGm%C!bfmmZdqyd_uUDK>c@<-ghxW9{Yag57SsR_cMQA+MdhO#K)in
zXgZkP4OM`<W-;~yzQNrvgzIa0DUT3d0%iT=%yuwEy$TpsxO2pV-P%^{=eICuq+idH
zzfUmSU_>m(P!%CveIt3C@-+nRgM-|9c@;f1gLr2So9jIjtd-55ERb~sWk7s0p1Vu!
z3wZ>K9#A2|T=z&;Lc@RkX96Mjcw{gDFgkbn3cDH*+B`xo2yE!|$lP8#;QB&K2ylOh
z3%s~4D`m@Vr}FU1Xuq`}Ab~Zx>EI;Z3u95ETfk+$PQcc>g?t`R+tETwrWWC|)Uotj
z{flY|9vrG-NHDtSrS16ANVhuV|03GAs|m+4y&kK8@=~Tl&>xyrkc4n5evIfGHOVy!
ze44jZS+5=i*LD!^ubop_5ER_~I#O}o&6Yeu2g|P7vr`FO<w^)};8xsqRR<fU{cq(@
z^uF3DWo;a2trrX46W~RDLH*9h-1+RE_K260^}-o9QWF3{>bziP0B~NCUOSL)x^~36
z_0ZeXpphODEI514RVzNM0jF<8{Nd7?XeIEWQqo?XrH%<qjOPV-+%pj!D2j#Hl=>)@
zi;&LU@>RittWBJWDM=dYcKcTd*Fwk@nm$h`zwb5evI>)kvgf{suZu}=`B{xQ&44%o
z1ZZ5wDBFkQWyc6gO~5k=Rm!u)XGYqNQG!d&;;Tl%4iULTklj0ey8b$7tuG%b)QxGg
zO_iHi)gzRWCUQk{_Deuz%pUyP3Zs8ETdVfN&C>%qBFfT-+Fod4y=@m(O%q&6WZW_a
zntY}hG+6QEe$N|XKQ9dgKM{wCsG7_4J0uxQ^#VLe2jA^H(*pq5atWZUfGuHgdZj{M
z#qhx^SfA2x!HikcuUsY--9%?qxGy(pU2%vcet5(?+3p{!DSpUn7<d2DBPs=m2aKqB
zQ}<z}UYO58O-aqL!Z(n}OrUcqnD7)3-DI%iAYXPyG@5GTT~?Cxdf%>qHNXE^iqbtk
z7epN9v`=iTf@UhVVG4R=4+yOO>-0WgM<qOI*mWDUXYH5%GT@ZxK*;0AEY<z-!x=<R
zUZR0x^0)jM!2In2Hi!1`N>Qd?AjqShmo`4%N8%h+lMEz^yI+Se?sC~@Bl4Vsg!LLE
zlxY6W=(-p#!3)ZgVO4B&c3J|Lhm<Z?l!+5jhq4x~AZ4$0kDP+yl1PdF6kTgxcO#9h
zKT9v3eL!-J8J7O(2G%JiDR1m8#R7{D(TG}|iADjn<B)=5FIK`ts8aGDLVP<AvkAuu
z-Ogt9`_Yw%UjioL9YuHVmjh&+cc%&t=4#nGT6L~ll{rwgYnj>x*&UKB8@rjALC0Mh
zyIJna9UP%UQbF8P7O@<d$7ChD*D=sm(C1)~xKpvGm*`{ytH<;hEMh7UogG6P&Sdu`
z#tBzs#_%w)X6N-v7ENgt=7T@M1qKP*NXS^ar#WCv1Be(#paYLJdZws1^lmsd3;Q6U
ziXnSka4J%jb~Lf5gyE~6;6!vt%*>8=TEHJjEf2wXzvjL_pDFK=U{EL@%7$5pIl_!2
z^wWQ4nAF!BmC{vGase#TfvHMrE}`V&l2xXCwFLeV98b7zE9rDAGi8U=)uby$<byAR
zT7pGP{xhx?+18#})4k;E7geqN;fhqicUa_|T|wj#A}s>tiTd0)grvAlC$@T?(4x-G
zQ?!?@@BC|xU*-mB@nFNK|2`wA!OwCLX=~cYjYi1=|G0Fk9~?&RFFg_39guWn5JO@4
z#WhrbiXbUi<Bk3pN<k@M1|UPgjqfrcmvmt<cQ;o-!Cw8IM=HK1_L)H3MZ~93?EhB=
zCPEKL{gF1EQKA1|3C@`G56suVbAn-J`lRbXFg%tg2HNW>*WP&cq7X0!G@u453|iVk
zT~)^I$rqfIo&+S&>k5Ip6n-R{%jQ11&s>@@rcApD*WNG>(aaHAsyIMRXim42i!aJY
zlp`Fv(ajH*BYI+On1RlxGw|AGJvWW4v;<j(6c7`PjdlZAZ6>GTuquVLYP1Jx)kKj5
z%|f-sp*{spR_*Y0rcE@}xCJujxPiu$qR{e~$1c~{kmyn!QK0u)+pdjfMJO_C3cofV
zbT->^(w<W^-=Rbftsj8MX2_93Z(aBf$9{q{nC78@T`Y~F`TdU#ih49nGc6c(`##vJ
z``=c-SuiUTyYb=$0$~1!NN`Wlu+-_u06R1Ys`i6~PaKM2g83vDtKfCbKL_78@9zw~
z({i$Ni11TvJ-+yL_xVanAk8Bi+xB!#>l56$-}kqZOj4@K-9p1&s0Pq@f`C0|Hz)k_
z>$SO0w5;!3OqS(zj%fu&%{%c{H>QPC7{pR<psZ>}hp_2a$My8B&p4zv3NC)ozoLsq
z<XA3u^Qk%S-N!`;#4I&CF|^8t-Mu7~<#94NslzH^rvnpa=!@7zjlt`LJ2`EYjRv^r
zpwlo|9Ea#tO5Yw6ALZk*y5G)^?ub$E4y*Kk1Gz%`$8}|og%9aC7?wLXk#y&<y@xa5
zG;P)eKIaVaDknSmn#hDx`m(?5BH^>X7KrT9A(V56ISvOx940qf&d)vGzzGXbUtg=^
z_?((GGc%$o9x%_U2>P<64^&awEtX{!wI!}B*-bBJ$!hX<2X2$CSkl{AfLudde@kcJ
z<|`2Q#p_ZvVemY!lLhc6&uosY8Jyw3*({+uGNthxP}IcKWcet7${*<&s(W^P@ZU1O
zWkL=QvCi&4S~jq7b@P_a%Kp>MA-~<B_7QD`!!^`2=mdOG)56apo)?sLu{O&moo%cY
zEoP7|bB6IPQoyb@OFy1J(Y#d_PZl6&DKMnqw%4BkLPpH0VN4>)y*~T-h3qpx_@Fn~
z{4H}d@cny~Ee_vKsax1&?ek$tsdTwUjvP^wMGUx*6*NMPF@M6gDr_U>a_1jwj0pQa
zYwUacZTM%=e3I`UWtk~0BG(s%xFQV~td}K+n`bekt3g}xR&j`EILv~jwN0BOgNCax
zmN2eSJ|zw?wc=5@tNUp%p-m1HJ<-+8)7L1Yc6unxu5bRz7G)1asR9IG(D3oJ==dhM
zre3hL6BYWmGjWD<y7#(r&fkd8``251U8Q=K{-I{+Hth0@1R`+`vpV-dHXUwdW65KZ
zFI=FM^oTdavSM=GNLTG79x7QJz(@K|efGtV<SU|KJwgq{hU{{}qu)|cC*%$uwSysS
zUJs~2>v7f=0-X;;0nA5P7_)7Q^H2c~eKal%i9`-<mMJF$D}<aceLKV0b%DXEa6R%B
z&{iuwF3Pmf8Ao`M1^=KWaKD$-HiN&r!NStrY>sCXSRLC+L{bJHd(|BNI@mH2FxkV%
z#T<FbvPz}s32saN-|Zr&<TC`u7w~u6d;FRKC+}SDJBU{Tg*EtMPzCBjtJ2!i652Z%
zyssTHLMZ34W@}0wb<xit`=9#ux-%Xi=i@~*ywA%pH5;`Dp&%dspV2K!0ova%9q)mv
zYqxSfC7iMR6a9cJul}$g><W1jEd=7Y{CXmoXm5eAMuo7tp)VFxvg5U@+ssL;ByJgG
z8y=t_M!bKLuNxUt)e@$=?X;uah)q^t(3AD1jjohz@{z8WSNul&A@grLZh7#0KQWf6
zz~)H_=vQ-)0En!3uAXtXNA!42V)BLnt&pVUS4%E8p_Zr0^E!U}&--Ez0r*d_jau8v
zLZ%4dHLFLA4p=94lAC;vOBi$E>^Y#AX^@nN9CxRHvMC~{2B8+Q?>0_rGC;SG=eKgY
zN=2{`DNgi(c@azNY43<G=*g<xUz+8EpiCP%>V$o{PbP4m#CRtX=f6id>?V1(@abux
zgkE%bIJg9hCh#7!US3}kCd|MfbdjOXB{}cm);u)>RXH04E8r&~E?FeP{Uk*wtI=a=
z=q;UXnB&7jRi|k|-$iI7EOtn2!fGl?|43}_CR8)<Lomud$)B_1v%T%jpcQ%>NusWd
z;oUEB?nDr2)yLFd<FX9IdrMDT>mS+ZF`NfRI05<<_Da60E859zatlL}cW$U<CQ0hX
zv6lFGEk&k+s**Azn5ypJP;+X*MJm}5v!>kZi#uW2S#DAPHpdBe!0;}(P^8yKVPiyR
zA$LgDGA9#A&}UqJ*kc{exmnp9;%*r7K8~A#gw$#pL2cPJ_|?$+udz-P80<!Ou^$3S
znE5&to48V?e`B*4f`-zYkIaO$WR!||bs&LV8nK7pErnk}J%D|V?d#=bo-@K<_>PCW
zuM+JpvAvSvT4V%B#pfgNToo59Ob5H!P<IoW#r!oXm1L=wSmEIPhi$12h=z0%8!%3{
zL2!2~E~2^Q)r5kT=xerc>m2ASqiVfd9B3p`71D9|Og3c-X!%yC)-dfjwZ9wSTXX6s
z0VVag+K)(vS_J|-^lJ?k0H@%ZcI{^gv^C)|IZ+Mspn9NXyW5A-jsWqdZ?>ZeP^b5V
zY%})_pP5UcQtj<fevD#*N~{&z&@4UVmPA6X=&f(5Pmot=LUL2=6WSWde5C7^1=6Um
zsscM;HIL*?_wl$p=o!Yy%ndrDko{=ZF|FTRZsls}e{DAY>SYER=axH^LMANMzErva
z9og3y5o;dWL??HO9jxq(lll<;v4eLww9&TsZT2^^|M#uqRr)R`%((b(ol;uX!5gw;
zDjrxiV&XUo`Uih$3^06@IcC`q*gcGLW#=bJ0pL<I<x;mBbpMH|@-DH?S?Nwc06aX!
z`!B=l2kwSy<79d~4FJ5HiyaAywszcsJ{lGjI|yR{Qs^24hV4>@tA_7c2257nlBh+h
z*uC4ZjesG!#~a?YIlYl`+At;Yj#o(3BKnK`b|pSn0DjpLCU)W;5KDD#O3|88#eE6+
zasXPcfN28XIhY~V>F->Q6!!0+Q5dSE;KuO?bLy$M9`O5Y@EG)Ap99yeZg(Mm2M8|_
zAH@p!Wpdalbx|8D4$>Lfu0zIbl@FP}op4wojQgs#^{A`qj7&ZWI=@iwuyxC$^_njF
zAPijMZfcqJj5EN5o53|Odlxbxu`P9G@U5;UCSJhk^gSZ!e7a=nYT`=qkXpum*rgt0
zy$)t_R)>nN3J=qf&R>VRt|+qZI_SE%Ou#M?lf&M{(`G<3ECg4*Fcy?$UJ0o^z>3`t
zs{Zy`+K>38i8%oOKLEfvE)S|8Ia|erNUck7DwzCg+VeK8DpGWTs_Hn{9Qwv=Ez*B%
zV8?gvlV)d`bJI4{T^dpM^yn(YvLO1bZRIyg?BKr*&(*sSuN6Jx<+_27C35Hh{Q;={
zH7ib(6szZ~_9W}K4lqf28-96SW8V_^HvS|Q(A_%UW@Z{wNZUoI;XTck@XC9^gZXy2
zoPZlFRV%Rc(yBVxd(94chlQm4Gel40FrIyt$ICjR>#=I7bbk#?>&t+)DR}~fsR{~!
zo{!AiS@M2s+$hS$bXgx7$V-0|4B2yqs!L$y#zmnfe?A<Am8r!lYS#-NgCqA%?v>g`
zw|$(jt7$2-A1v&;F7RM4&|5vYS@lpeOdt9c9zmb5I%>J+brdS|TWk*r`>lUC`v5?7
zH*o6{qC@LezWSAw?zAwJ6{gT7C@sgc+-uegG@jhGfwLH8&;jLa6@mpasl!2=6Z@!i
z?`=8w67BpT;%R&Myo>pGBJSqs*0W37*d~okdSpxTcmoZiy`+1F;2})2EnxICb9}~`
z9u&~B6RYaw%F5^;eT4USUe+cK`29zB)@|u2^u+UGW9kt8gPb+EU|$sB4n|^6sO@FB
z7E~|I&v8<GeCjE#rc#o0BWPL9{QB!<Hz+ih?sUCsu=zU^@AVuydw}Fj`6V>#roHKb
ziR!Tg7&TgQbQJyq-Dt(MTBM%fwmLOyME6*bs^;QT0~54yNujRMR!87S4I}+UK4IxH
z>ZPyKE`AC<TvTTZfVnPUC#?-MemdI<{bnK(tk3KHRIsRPy@tezX+~no7D0zA7SdRh
zz(}+%0i&r23~#=oj9?NI9D)e&K7v+F7t_d`kKJwki*l6oMHY@k0o>!$NbAyBJ$uC0
zx?H%8Vqvgd)Q=nYV9pFRHWCI#2%-l5C%I{~Ao?a?WxFqiB6EWHn2owjkQ>tiH?HG<
zV8FbqYB5SOnpHA>in^DZ;h6nxFR;Dny)m}0?M@=#`*gMzsW=EVvkB@qHC2LPE=|<j
z&^;~9t{@b8?9EGfTQOCO0$r90#0#m4YJyzm!&*-DVzoi#3vr0)vm@DoGGPQdakC;E
znc)?_H+%8eU1stJuN|>bx_7T`J-yq6w4gqAWhZtnXa+f5NX*u};yj97!bzrjk-F)q
zJ?+D{J>&;rgZf5wHJ&cm!p(SH*;<(CnXG(G%WUiP#3P~#mD>&iwh?EyTbH3X@Z1GN
zf61rLq%5)_80b*B)>160e`E(jROc1sD8!H~%{VCDZFl5i-x9y{dR?MJL(f8WUK^D+
zy<c75QmE0d0jJE8*wf~Y)M)<BM8=JPc8`I`*g#}5^cRQDpRSCwU~>5!^6B#L#I$Mx
z8-1_3Ww@PK!{dXjRr6ltd)oGou0Wv7Z83G*CU+gWdron3{XeH3+X;8kPkjCzL-O~}
zhL~s+J%qaBmge}kh~y&Aw<e)mv43wk>lwVio9R2T+91=a9&uACiE{5=z)=h~m55p&
zDAanl0%`AV`178L8rV#>#G}4#n~C_Jo;mOv^uG3D^OKC#(7Cer2>vK$Br~cyhbd;&
zNUr^7KMtk~q#Kv>?iPc5ikT~IFE{)*l-6!BVGAnFbZa7;V1(avkOq?7@!xGB5;d4g
zx<+{Yo^G|YpJ@}BsiHpqPRPRdi|-{=z5hRF9b4nHN$GgH%#r*lSlDA=O~btK$rA>O
zRqSV<KUKWvr_<nH%KJzD7iC170{5qzRU#t8yPN}j6G#~Nji`-z%4`b8s6@>6lSV)c
zwX)PZg;JV8Ow622`wKk|+0Z2H0F1cg+@QYpaX%{B&N6I7pF*7{RroofA@Swh^@(u#
zAc?JsQZHH5ImD5MzM;(K{Bh*I%`4MdXW|)aZs~(>TplYIOPDa1bg6S}XMt`>g-~o2
z_V(f~hoG7!`+;};yv$5ZX8oIZ$r|N61ky^wA7!INDJ*^CkRUYl89;<!I=$Dg&E6>}
z=v8IA6Y)Msa-_Q9A^Kz+AUa-{m-d_nMp7N5JZayy%ZX~S$&9DnEn!*)gyDW!qNdz%
z4dP+)Hz>lj(fdZ<z*oo|1Z;G9bvmvc3kSt$_w!!`OLFY;V_2-c72<F#ug`U_I3zGd
zfrjyLYS4P~Iu5XPI9g7Lo6FG>i)qc#rp>nDK-Vx-pVuO2+6Z=Z?ee9MvIE(BcTn}#
z9nQWjvTR`)L@)6zj^<E2Y9bF>jvb~7)MZY*i6nioXtY(R<!LMxz%gZ>f&_*?xI)qg
z0r-3oI&}5VH%0})tzg4%H|?#Hb*x)q8Mg)5SCB#nx%$Owo1XX?dPzH~`Skmsn71I!
z3{ob<hs332G@OyVN}!DC5)CALjW)!ARwh?s7h$Zo>jqX>JiPorp@fc6+@Qf-d^sv+
z@drhW)h+Z5?2x7*o0=23vRSxHRdm^JRAeT`+%RUaZ#RFf&w|v2EbQ`WZ2*|!VyZ~-
zG*jurkw`h1TMxK6XXLk2j}AOA4Cyq;HALq!uTJ>}BF01lT!5(8W=XDbt;D!FIL}+l
zBb%~T^Q!vKyQsCq4)Z!{01FqjweNvSpe|oeC3;^te}7`FP;wjSdUn?lNxl3B+oOyo
z07oy4F_4<o^G+k{mlJu7-1WoK8y$UD$ilOG)W0JRS;^6POimcu1>~~ENc!df`LtK=
z6O_ItQGO;k1r}pp0Wl|(@HCy^z$AzggVAHY8!ZHJKJ-T7<6d>f?EnV8iw-!D6cc7s
z+N`L%_%cf!8tV*d)mjChpU~B>yE*J0!O~<C>s!N}YWJzUtbe0UvmpOJm%>|3N_sZK
zhM<WtwNduyReE<mszRQ5p2fzVggCNgU&kt0i!{~kkcUQ=oKV581K{+Fk5Avn)NbxY
zaUef1Z^f6Fg3P+W`TpfXeSfg&Re6Q4xNUO-|Myrjwd7c@^ih_;2TIQtkl6;nkMfgh
z#$=pD%2>b(V<(^-zhiquP2v%^!3CP<D&{cCE~7yy>|R_XV}7c<uY09V5gnkdLCC1M
zWOP{Qbd|-Sm6k3&wout1v}}6rIgGGh4gXjLjqlBLZ}s~?UIbBPG$3c(LtoCj==`4g
zbZC%5x1@gIA(x#=ip*uIt)$~w^e;xi87D!(Sh;!MwjB&Z8?lgWy4sFnk13?$$`Kn3
zl<0c&E!Qm36f~T5!xX;_NrJz={FjG~$38siNQJcIJA<D6^K2Q9CHEO7d!Pvr_9Q58
z4mR;)cKS2P{3J78#djK<{rfjlUA}$#2*6kOJQhPPe5GIDgEm-$zMX^nILuA~>f;Fp
z9u~zReGlHeeZJz#b0=)Dr-|ULVc^ta*-**+BzuBVSVw+TrQj{}3i|W?6U(-QpxF`O
zR!z7@GQ4-dEA6*7B!TgWhr#7hu>Q;`Lg$l+Z}O)9IQp3e9_x5CtB&KdvW9*nq3J`$
zxmmAV1=V-v_g`L~pqxregP3O~u<T%s)?v}a-|uK=A_O%6%+S@@Z#8oD^li8(mDaCj
zGOB`q@<gv-zuvD^QZop@74v6mi&PsXY7D~Nf44H&5N!x~ORJVoO2|5K2Ogtjw>^;D
zAG>cy2^VQL!Gkx0-75s7n4uY|4tZlOgSJG2@|gxPx&@aN1FuU-H1{k3HXn}^p8d6@
zH@(9Jb2edS?-8J+%v%POHH+!U9MW-+1EZjbPYkP%TwW<X+v8{JsiHdl6+WBSL8mVt
zkZuo7R`Uw<*qbJ*O*R9zEMKil(H3}2Yj^QQPod&jfuD#b54kr(9ASA(-W9l-;*-7^
z29nu`0@8A!QNA6O=dff#gXwdd-jFHJg6x{#mr81`##-`1^Fgo67Dih6)}SYIYhKU^
z8n^nqH~FQH0RP_AsGr{OXbh(~^g@^~Nt+_7BdKB{q0<oXLwfM4+)pPKzJH<n+V;{Z
z>zhXMp#<Y<HqnHOu567K?QzHZq{pa39JBP*(j0Jh3(^K#<bXDvpMNPCbB#kUg?fY1
zaF~Fd|02<}hMmISOUAkI9;+_FvRK+~wuow=uzTgH%rr1AyPTb&g#XXRzIyv^pWLkl
zRp*cc>T1<$jPtfXn)mvwpDp%AI4px6I(?5YRt~aw>%jHJBkK#PSgzZqOJVYl(bcce
z1M)88P8{X4dVEFiJ70W7pa|}RO#vc`6W7b~tq<}=&b${)A2cRajE<6wJQZAo%LCq}
zs2wM1Z8nK({~GPbN~O%H%hdeFiBH$GrH|JHGxx7(JrI!@Kk;kHylp19^902(#G8%u
z`v#OyGpDD^P|Hro&QKla1(cZj38YKRI~=cxMh{h+lL-!4Ia{|PprCOm!E~@IvICup
z6X#)&Aa>}Iz_e50F{T2!o&v=bckzfS+~f3<$T=uX6Hs>LK$He*!7aR4RTXJcZ<TCN
zEx<UpD`mTEB!F=6&33;J)$BUL&>@)POJM(&Yvs-k%})RRU7|E|FVat)H^H$(r(H{%
z0Y9txh2aVyp{jI6pdc7OQ$b%LjR0R>%H)9aVFW_PVh8g_E@IieDAM$f|30a&$w4Ri
zt7r|I)-v~3mSj&rc@1c<>R|fC1%&8OIOq@xBKkfJ(Y2LKm_RnLWpxb`Xl8>;>sIpE
z@F-^ACimP5vYi8=b#uZ6|C+_YnzkI<tnt@*hH>MD*D~ASEC6#yBm?RPd~9|8HxS+?
zf3XTUI5I}Ws8039DYX6E#6%=%S+U#7LAx}*tC`x^jAy^HU!o6^ehb8ne1NQ`t+qlD
zkm&)rh<INDBoes38AA!RM=@~#iAlBu=;I_t`u?7ipdYl@=RARQ6P$xA#Li@gyRrtc
z(m)i#MM9!%YQ|#Oi@83L$%%~I``po6&&M_+nGq)P8y2#=@q6jBx0tNz@ARd#AvlMj
z`v)Ma?tFL{bVLA=2o?7OcV<#OP}6Q-$_-PaFNz#JgOrjH6{nwt`~)8})^G9BbPzEF
zs6tAU`SS!DsK`e=kB=Tj*25Hk^1yf7c5yeBDSoC#KAjkHPK*$lFwKC8EM03G#gc3v
zStS*(kp3n`JOE$1HG9$~;1PkZ6bXe0blH~M$V(Z|v$OY{{$kpw`V3;U=6@@gsa?=Z
z!Y%xvDsrxI+Vs0ou4_!Q@PeQtM~O|ZQI7>Mf~u=3TCsojc25-GCfwD&g@w6_ZlP+L
zOvF>$P{!)j$)G@=hOlO72kNSkr)c%wap6G?h>B*n#WEbiWT@|f>^enox(Jefv8BQL
znNeS3g-k;Z=7yMr{XI5Nd}0l}y(%$N2MO)Q>PT=nQ5y?~!R#O=I3fY?=Icst>|GPj
z!Ip-PMfv=3G+4ry)`nY5gK;ShIr1m7C?t{-e?1%+0sUy>!Cwzy`~d$-DFXWv393@1
z2N4;I^CrRXRU~_L?k5nujR+Lw@WstfZiT|uSaz4VE!$#gEV`IUe1-vO4uMInVO|$I
zm>mnX)iGhZU5Jhj`QS+tIlS>;6E(OM3%GMrApCA7vCmi#uM&SYTyqrbKOgHhN9C(c
znv(hTMNgz>zrA-6Tp|qSt55ct?}w3euCy$5rm+7I`2ktZL>J%wt)&>SC~_H$L}_}n
zBf2Zm0HUPh)OPjWqM|*aBUnUbl(k@%bCS`6fuuWD1oaBcO!94brVi#yqeb=W+X?eQ
zj~Z&y*h{v)goU_s2v8XfLWD9JN4|i$Ur*360|@m`aWOVd6wtK?Us6$3>5DyZi}Y9P
zmS+|{P@ubE?>F9jTJk(QkdTxX#!1h^@K0`U4ah9e=xoWP(&IK)4Ly1d@GLlQCUHSt
zepDk-HkqEbGfv5|7<f1o7koVn{}fUe%9tSY_iRD!`ByU}*oj9E+Fe$Amkks>YiRKH
zHp*k@DuY=9g=vEJIjsmw(;IU3ET-NP*$X4-jOA;~Qx`!>T^h$wkk;8NXRa85Da~U*
z(Ffn@?OCqYP!9Ev+!NnqUS#YWBY&*;6L_-b!zjXA?!zF4q_aBsDk1N7Q)!TERH7$R
zR2Q7%-7R9Bi$!d>elOB?VK<E_wzc?fsSAL3k<SlMmGtR_%=|wZ7=tU~iED4gR~$R0
zTXmAjt#J-bec5sz<V!pR*a#c~<jUGzzWFmPyHsG16|S%Mh!66C&=Xy^A|u{2PyNU5
zDKgF^<Ut6A1_Ktwd$n*OtlY_KdG=u2+jN^~q*8Y@#aK#rRoHWxSGjg%fJA^1+lT>k
zz&!*ZCH>oH<o8QioZwzAwpv#VfGuU;OjP1F#ga-on68B`T89xIZ~_EUKl~uXk=O)N
zVcm%3lMU1L4|%c;I#u|yT_ab3AbUAmI&@2d*-15Tc~)rU@hrN1Y+M}a?%Jr122MdN
z2GG0+xkP$nyn03`2g~w=&Vw<jPy?RoEjA`6V{$EHJQ_G7&iC}F2Uq5MZ^f-PV7|z+
zezd{`gyz8G;vx6(%GT3h70AG}sMa<Ny2zyWbqkPl%s7Z`qEk1~cux^r*XT9Uf_=f=
zR1IZ?9VM&z&q2t$5%h0oFU9;UI{li+dUCgB_t81Qey-fz#*Zb655)EYJ=WZ7YyPFq
zF8$j>(EuV!y;p`@*s3gxl@b5&D`OCGCeAa^KWS%iLVOe9h~XO@z2*0DA38qiXskyD
z#vIWEIEv*?Eyl0d*IJSAd-1^GB{;;@!6Ns1u&=EP*ua&Yhle=@W>`xxJDtMcvRN@h
zxoo1sWgiYBZoh9W5m0t?#;NT|kEL@>-#7Wlv@E2(=H)<RNksS4>l;=@SqhyQ#o37O
zjs@1^*0TSe_f0`CE1+%tqAiX#H|Vb{%B-1eP1;j27hHg*AJq@*zp@*h09&${(xMGI
z-3N9Qq`GnvA2*a&pjggiC~RA)UMRU{2#0uiP#lKci|6fcrIPd;sv-3#an9G3Ud<E+
z1l(Q`&t-JnBwgO1N2|R(joR{Kq^{61Z^?pw`ulr*$X$+5Z@NBP<^Nj2!1YRd<ZV*Z
zZe;^-I&Bf7AzXi2!rgk#3d9B9ik>Bi#r&@7<P>?ajkecMkmL%bvC^YK{x1nzqAQXi
zC{xlL;KClR0`m0IJ;=bTnM+7c|0l2Z5mk0EF4q7ohHbJ-ycFQCJtYiB>CtePwbR8(
zkie!kY;J7vHkcMbu_Q{4Yi^7<eLOmAS9M}1O68X}%R6TTAtXVb?MO-IShnR8SzWF<
zt#R+cg=Wr0{TxSnY|B=L7-t@sx1hDT_BYj3oVZyjP`K~Q2s@V)k-H!z!naTYLG%&E
zO(Yi(WReXu<3^jRfIH=-^@v7|!ak{77oLB1m+dRB6Ndsy8&KNM88SH=#h^1(x*eSX
z;WQs#@f)(D^zkCMRL9M+Hu5u!P{n`TyM?CIQ|tW`o59{2pTSYFot|pibSdZ3{N!e0
zN8F=Gu*t{6Nu(e$>%}pQ1Bj)QMJaN;CDbfy!)LRy1vke)9|cg(byhNU2yZNjRw$>w
z!z08CGw_fsDtLm1*2BTEA3sB&r{EjL5UGuIby_l9%-k2|O{)d^G)Jr!m2zcTtPe++
zR;d#Gg)a~QI9=MB!b$#k{`RutzsdOz6JaryR<M=%d5ZROj@?rQg`@EA0nF)^1pz$6
zH)e!(ctN)YF3z;2*^A!9R_?j=y5haUtxy9&VJ02|fz@!c5LPUlOU}uE4uHwmc*kjB
z?2)EJuuHc8VJlgqwbH0~3$GLap?sVDNIYkcN|wMkY`pySK)Nc}&4tO22cRfyMYu&u
z0i(n*EXlE!+M%Z8^a?TLK7X8dL{?tA_+{Yq%T;E~l5_JB3VB-8IRG_q#8?ro$UN+G
zfIxwiUFKJSz-f#v#X*wqc=lz)KYDI4qokyo@$mX2P~{s6cojV8HcdHrQ6NiBdOp>!
zmu|%|pN&z-FCwAoC(TmP(4iJ(GUIdAmc><T&GI723$~e7Cw@@dU7@KUQhqZB@sNih
z(M~Xqf?<pE+9@td0ySxJr_q0sS{jd1355>E9QwfIIYQHY81lo@a}a6t`!-@u>2Yu&
zvdO$HbM(Jp$-?E-LDUJu0mV}Zv{2uz`|jPu)_ptxq>msIEXE%p60XrdZov?qTVSiG
z_U{FyLkA@Z#JgAmsnv51H3B{Ne>I~P>T;SszyQP2_h?bIs(Jxx8@-|(^LtZPgEKF{
zRc-`ZFwloGO$ALT)0v@9YRwo)X?$4#)&ehKtxwfo)V<Q1&sz(%Zv9wJWNGGcg~rd{
zJup1d1;E}5d8Q?sy}2g>Fk996CQE1fy*|v9L9Al5*?10vU@~m6?1T%%@I`V=HwgbK
z?w#bWcI&W~TLi#fiJ|w5vD~n4xwwf$DdNsnhe4QBg06*K=MESihz867?f=*)T0;XQ
zo@D3~XVK~LIzp)6)z73;3d-NpQT<=0<xs=Lf}i^RNfBj^vIJ<I?k@>MUm8@I5>~q2
z8@i!gvF+;t1X;z+1c`Hj{;n}C8&}8lxT=r#qQugHA;B`f19N@)bE5$kH7pGsG^R*w
zWk7R%Ieg>NdZsjNDU-93jqd3ItzS%%T>oPiUaqUcwY-AJv0ReY|K)}6_89h~7$V?e
zX+30fbsI$cqC#qn7-V!{-Oi75ug>6?JG){Jbn1}?n?;-xY9S!5f~VyjDkq>Z0f{0|
zjCXceFK`oLFoTcKvY+B&Z>@E_PQ@v7AHp~r*B44|iHnD<5__Ru{tSo!IQrj`2%lw$
zus#E!H{3H73uPTe2rn_GJ6Vfv%N>0F^}G2kzzXUL4(a0sp%dT-*=J0E>p%?CN62IH
zPtV5hW3IycS+=sA#>fQTBOLTs>_txqHdes!7SvvdpyaSwG?8uz7-j<W<!)Ju*gFL!
zwthL8yK9a}?GSL`pta72{)f#z-{&|a^yM#1)el|;m|5H+BWpL7lR{HvyyY2u7#L${
zl6zOCm?|9(5pe5DPALGrTJ9^3g12F&G^cYtR>Gqk4&q|f#0SsV<XPLfP9bf$xOmV1
zlkj1fDu!9tdeIh~@sVeubS+Qbgl?M7YN2I&aoCRax;<}YXpJ&?yj+XxRHw1#A%J8s
zIMGfe)ff>vk74R4=vc-fch7<Ma?WJ;ib&;2`@(h6*bRB>eZUx3l_#Hd!}$=kv*fJ;
zT$D4z-F>qTu`4PHb`dY+%@>&|flspZ$BD-EOkM{HG>^V3w{H*6PCBA=Yb|Qv$i=(4
z>AjJKQlq&~n?Ts>R2D@}kuPy-w_BSZOoT8iI#2TjxqIu<fNtX~b6-81>n)1UuFpMp
z%Ch48P+A{^oWqwe>Fu0;mI1yB#Bb+*VdSSxQ4`>f^c<3{#jPFMD6S}XnAeZ7nQLbd
zHWP<;CxS-BtoPc1RNjTIGsvciKlzQd>w5bqAb2E9Yi+xH<#fB&^CD5CW@(>%+iUWz
zH$oI`1cT@RXYY=jwQnaf4>42|1LPf749$~{RJF}qx(DD;wOY#5)<x6I)5G(bjV!6o
zOLkyHZ@j5MP>=crn8<OLS9{5?3yC4^Sn11?O)h2!IzFwf@z;ET^H+RQS(Rd5j9SHT
zBn~ff-1dODPIT-Z9pGo}z&*#81=5)|e4&zO&w!x7&3l1?UT(_{;bpn65Uz5;X}Ye-
z<OI)iXU`juRg9kkK;gNKlNaAl{Zn@>oj*E1;a;AVlKlvw|8>(g1S}^MrK7fKYKpc3
z{k7Sg7w;zE_UpxY<*O2{!|7xk#X&<H+-MYcuMIg|E~U9)-;3OlMZR50e!Ii-LB&YP
zc)cfr$*pEWHo*5p!d$Ig-dW+jbU>If0I3j{nyjkEznC6<4GS5fJd~tLXWV~3gae3I
z*uXLHY1^bU(-!u<d>=ta!Ax&f32ehS=Q3|q-xqO$Hkn1oJjh5zhdo|K>+57Yv$6!F
z=A*YX;m*%#mJ~bz^XeSFZ+qMeSSVt;=xIX(r))Mr{R-h9|8Z89LScY0UZQcaqCI@%
ziNLz;T1d<mg*8r}L&jO>{yIoEV4LVe{53hlLg(YufZ%MF(In*!>9yj$K)yB1sKF#C
z8cCy3$h!E|1}MZGa>;Ne<x%)Ko<T<0H5l1NOJzDZ^dT*739;fO%$-N$-Nf_QuEI>}
z^+uxe($BE&+}g3g*s?BvDpJXvMeQtAYbf{OhB(18`})cC2JzTH1sMALjETuXCbZLH
zaL|{h5v8GCKO53@pH`50N|?9C!@Az$`psm69J*4nv&}{aCQzykLpjc0s+iL1*B#5o
zISeYq5NN80Jms-+%VJTTm6^*%k&1GKHUn@kl_0phE*Smx-tF4=F;S>HpbE5BvL#ap
zZ;XN5wG7}H-Kcd|in`~0X3gNnUY0j;Mg88w$RFw`X+gg<L}BQKpBtVAI?M2H*Hxv;
zuO5`zBXZHC=S;pvos}RP;x=T>#-`3Qwmm@tmXac6XbAr+pR@}PJ?%GQ$(g?GWuITo
z6G6)*)~-E)h-ttJd?iO3Il)n5Q7UK!PSdfC$i~7i6+2Q)0<c|>(>LYHJCWhbBlhd1
zRM%>%X!Q1zoHX#!aKNL+!v0Zl;kd@n2|5u~!>>P8RLYt1*7=e$y0WB3TJ~E4UuW&r
zQ~YLyH{W%18-W+sD4aAF>RLrq<95Fm>O15S1S;3PJ@5StEqROaXY*rUAApi0AU-Zz
zr)oTJF*Bz^5=*Ca<fNc5U$uNax^N)=a*y`*trjl7W(4D8lMW(Y@jO?U;lN}sPnmGk
z+DCoqICNCNI6f`ebj0UiFHWM%hU8zyjJd0<uFrOI{fj*1p?~4EULXi9*LX-C2ZWrb
z5zMQ8O6ITVK8PqAIVG4`7P*b^jmthSzz;F&=^l}BsB=V0-4&BJsL2ZfypT-Ll?29e
zpAP=fXyqwFDs1t_MB-S}{v@dlRd!B+G0VDAU^N^{GDwzgGGZ%L(-k|R8X3MeT35Fi
zm!6p6=TCm8go5OP6abD!^#W4qv)Q+A-&$)fv~8g`8>mco6(5IEBw78^*X{4{N-K>$
zj#L+ytaJ)i|5zMG&mgVWsx2IPD8a_Sl5HE4_@ugRE&RTTfrN5nAVaBuj`U-eEUCi^
zZMPMJV%X7z9<$bP)8z;m;8}asqsK;bGLVH>MC?v=YorQB-$&o)IcMaSV8uw{N^<kk
z&#~CQwSfa3Lue!dj%)&Ng+pG@*x)9Pib3dUIc-WTvbe_x&U_Q5E*00bqFi0R@x#f-
z07l6e9T{4)+<Fo$&Er6b_~S2jdV_zVsiPEST5&<v*pB%%r<!@i?6GYE>|bEYaU`es
zJN5n5W7is0`E*kwE!^XWnR7=+G&=N+<<wS?Gma2TD`^BGok`xN_}>r6?R<H-Cw;cd
z;bgY~`N-m0-y8oRI{}g}gP2eBG>>752;P(fjFRn6=UPQ?M4;<}R}VZf{to&G&t$W>
zD*F9Qr>Ft?Q5C^>qi7sjND=N(V2AKAR0NrUb}h{`N**{61CU^QXv>ojnY~$wftMoO
zLAaBg2{Ko2s}`YoLS*%MXOxle7x+)P`5<<%(Z~=Wd`R_&dR>zZX5cmRp+p5{h@qgg
z{gieE&>4EPDEU{a5F{C%99s-sZr+lpH)i(5z5GpZg!9*wA2raW=p@L{`tC!@WUF4K
zJo|(tV5Vqk93|!U_9QTH2HKviR&3eXi{TGM^p0oR24`3f`2RYWo_1DeS9y>nl1$J_
zxSsIdYMnF+GDLS=)<SVE7&+vcL=8hxIrmhVR+B?mtDTaM(tr}Icd{w{qQwR1x+ZRB
zL0XU+&%xw(W3V)FwuHyJ)%gUVd&kxRPkGyt{^iNXug7vEl-6FC4N%`%B+FZbzC{?|
zyd54&(DhAS?OZu2+7kHZHTKgoDRM$-`Q$P0v2@9M77&8lXdqq6Jm-q{Fa4u|>kgCe
zP@-vmCN%=<g-DA>^1I$d?V#*qI6yIL@~D$SVYo%~cYR`bvKu!Ck^Ir!+RIJh^74_+
zFT)w%NziNWe(Ytwh&%D$&Ne({dWO>x6Vx>MODS*PexUY%#<B2aMC+>Z?N^$E^d14X
zD5c@k8BRpK<Sg;j(n@+CxA?2FA15}vJs{R<SfCy%Nk-2VVn7#-bnjj6QKxlEuk$av
zB0)v_;Jz~s%o0sTXQoK7vUsDlxST3Y)Uc8xB2oFt)osi3jBi!5D63bAWQ3Zi^FmqZ
zy)lDuRM7IBmuYlUb66y`qIUliw%#?m7pSY=3+DB(4@hld5lH%`IGvT7O6<qnlaLE>
zd|110eoW9mPn0KB!zoZ`!KioLYfLz*iV;eKtI|m)SwvkAw5Lx<mw1=hGIm*KtM-bK
zYd4Gu(7KlY;@|fiA=-|IA&ze+*{RBhDN|tdP+wR3Es@&)34$n7$NnXZaW>Lf{G)RU
z2|_=iu7bOD9JuJv@v~^dB%m+sVNs{7-B9ihDx~Fr_I=r&Vd^M)D=XrJ1*hB~EkgBF
z?hx|=HO5~sXygLiTLxHF()>Z8CPnJE&3e-3Svb}0sf0-?&(7Iee+6M5{su&sLf@tr
zD2pZ}Mf2rey#j++)}iO00X}sX$Yl>&e!$vwSFzm#FKObL-5y`2dw^Of$R1W*8%)C`
z)jMA~YiD}&m1oIHzzqPwOK3S9QmA6E$wW{A4Vmly<_#dE@*TsowcW%31ujb+D^kGZ
z24DcXkU8e}jdoD!%#DB3wcM3T07us`kgi6SVG^&IAxTnJo#eIz)1fSmWE9hF5hEC7
z&8wuc7yt2N?69j$n<M8&CV&FbD#+|EgrW$@`a~Y~=R5JFhnLDpdT;v=SOWLbh7d4~
z`Zbm%c3);^j;{=QPM{{{iISEkcs+VLtSj~iepirQ{!_S;nAG6kKYzBGDLo^bF^DmD
z*ol__<NMT%>a6d%5I>NB0Izb`SWS2GxFvv+xYrt#-nz2WgOCc8Y^=IDLkd9yr59<j
zkz>gKBm`S&)+#Riol0O3*fF$~Q_}_T7nB6Gu7#F_Y$gHtLCz#|FOzGcY>q$6;DrPs
zIE@UaEG-=UBIA=8z(c!mVHN6ZD2d3q*@m=ojIN{Fdqcdd(LSXlT4+zEYMe#yjB>`K
zf?n)W+j=@VMT>P9^MKei6i1U^H2B;=gif{Kpw%p&gdQm*bNfG_in{WDhBVCE1`GzP
z5dZ1yWmh20M0?{a-EuZg4-cGWMdq;vR`RpQ%8W;RT-WJbYc3XCIIn`3e#*x+hRn+T
z@@<)T=Xj~!dnVQ~eOZ=R^>y;+?mBlDc>0994ZlLhr5DnO{^e4t=oA^DKCPIao>@4`
zb&I1%O};eup72WqH<>(jIp0Y6<2I|#@pcs4G;-HlF3rLMrsl35(ST-xC(>;&85kY6
zSwpjG)Ny;vZ;fNOlr(<OZ9tQW(aI^4^#Wl4Oi{A#P*yT&ooKJtn^bM)?=Un?9~_#i
z=7XAwUI)3YxQR_#$hvVhg$c*)5AwDt1L^WMtvi{=>6VQPzezfUmR%1TRuzc|PVdGa
zrZ(DDRGUKQY6rWdEt$<)E8rorNdagq^bifi)XL6$r~J@7<&+6DwcX-l5)U|CXz9`Q
ze=Ip|Gs5;K^XwjlP%r(m^WIG!4MGdnzD*^wlHl+o55&Cg!;JGFs||(LMG=z5%j&ul
zP%ng5`A%EK(3P(u!Cg)}>m!zvCNLAi_a1&xrGjO!jRE)cpHFEA(<&>B;r%*RT}JIB
z(bxEw%-$|v?5uv0Ydl*12VzlBl0GToj0wZ4iud?q?|JD4o3ZC$Q`xAHNj@OcD(iO^
zpO}Q!-bNdI+r;VOKRtM}=9pz%8cj2bxm;cP5|D!P8A4Hl(lz)>!>hS-u5;WE<C&Y)
zuBmAS8*oaHDv3&5FhdMzie8$_(l9I|yUX-TWuD~GWZG7Sz9j>;#s}(!J1;blqibN3
z1P`-E@Umd-MryZn229x<&t!Dg>=1@DxLU%(Opb`!zm*80`*ly$-j`n8Fp({Jv&sdD
zl!H17aMbX7_yjI#$LbjG3xr{2=$6xB3|}-RJZsiGZexuJIvqV$sBwzbVx&M|V;FCh
zXi;(Y52{zjSRKW2)=(p+`~GW7leGjP>EbVbD{Bm?@fUb?@c7AeeFMtVw$$t&IbQWo
zKo=`VDLJP&k7P1eCCw#7Qd|RKuxniEbX>VVR)ABP2+~T5Q3gtyiMDq&F2zc(VJBiM
zLm665I;~l8u+6fchL0_;90l;iY8TA|zdPfcyVtUZ`pi0g{ib%=a04g$yx!JOcB)nQ
zvJGAW{>J>-eB%vJ`jii111Hs$GYQQsayFwa22+Ziu(phy$g|jfW)e+Vv%?g9ZWZi1
zvo`do`NBk<WR4*L@jX!)X6t{GXr4QLtV5)qRGAAU*=DZ9IZRtKPo{CX84142FU*lK
z)}E?BMtm3c4dP}J^ixK>hU`F$09mJHVa}9pm6y8XcxusmJ$al5C(~2hcSuk)Z)IZ}
z_w-EUo6x&skUTi&hzN)(aa~dN0#>L2`3$HkNNS;$T#fVK&7bn*;;SrtPGaZaN2k*K
zEUz&=?n7j6pxvs5SOoBJ!uvU10%siNhYCgiX9zh1&!-Co7G-^iCjZ3>e4?1AVEi^x
zV<mJ4s-ByYHT#yiT``j>pZvkt{D0O{?m_2e^Ut5FbKTc8OfH@=+ygi_4%#1laoRpz
zFLmu7l;9Nv0JUDXAXqt@_m6*H4F%ngRXdkwGl?3*wDz0%z`{UH7vZy50n6ZBA7r}y
z=dze|(u@!oDq2pH)gRopG9}9OLZOVxXH7Z_!PJU(`%}J1D)Y*tJcT32&tr;|dd70h
z7?`SEHEvi=*OiH3+O%8UT&v^zDP0U03Di9+^u#s5g;V7KB!uAjZoI6nw(=<;D~6AG
z-RA_yo&tazEt~N8a+)Zx6Bdd?Zoq21&66|$XgbM2aY@|0gPUAkF8?6>5S+1szMKdJ
z))Vf7%VgHQ!E$l28FD`lZ)Kjw!l$;~d@3SrG4ek`c0=tY4zU#%J&ss1ge_z^5X~VG
z<ZqQ~xpa*FKF3ynHPpPUok9Gw)z^qD5UB+POcqr!u5Vd}LD6-pzhXUAt_Wv|9u+tX
zwo7c7oqG8I#Dl5*!SVdzMqWbhE`_b~H{zmGk1i6t#XojTVt$RNeC*^*zj2!5i4OBF
zT8S;a2`@Th%xmIbpfA$#a!t5%h(SC>9!F9<uqD3?B-SF8eXe@I)EdlfzS!WnH{_wd
zaCDNg6D%LPe_WoFq1$;@s~86_mIgO=nfR5N{bg@~A7GL?wa`!DdrOl^_zf;$%jq}k
z*`6M1rv(LYYi(@X8qr2Ge-czKuL#?y5f|Y@<t!Mk4Qp);g(MN3uz1Zkb%iCoGyYAm
z>YT~_TOE{5Yg9IDfsa8RsNZfeig^G5fG_M^yZa8E<fibQ`@*~Mf~KBOx5ab5qVm$|
zCQFs^$_HvTRsEV%nW<s+jEb%dL)y%pv`<K*WLSq-G-Qs{g?5`{-;O7QK+ICrS#DDY
zsb5Ge&c>9wOy{4m1m`6;C&kkWUQHBKp)E7?v+;-PjMkmi(v}FM$dq`a05hV9+6iJe
z*v~Ex#nL^L)9V<#hmt6(JzQ)8;E5Q>jTB<xKO*zhMWIxCc~9`>bJj|nPHtL0!eD!P
z2;Nb!#QJz8F-f{?8HnnC=2#0W)l!U!VY`jP{kJEWn05i+>FS`fL2=-J+c(!_;HV@R
z>|0twT?in?{E88k;{3^~#1*kGedw5@`yy|L)d>*X;9W@`XFCrI%-<oIL83KLLN**7
zroNBk<n5*u&jX2-(lxOJt>6&9YyA#zct_H<2DtwMDSamIbK#H`x_8ei0T~VO=v0sU
zDmcw*13$(uJg{AfG={c;ZlbrlI79Dg0M-JNAQqDRME`~qqNDAAzsuL0_e1ao{zbu^
zmo5g0BLMI_LLzq?1X0X1wW;#DzTs#f(L#&;JTE8rj~A~6fmm$Qvd%6|H%T6k@^g%K
zah)?a5V9w}Pf!)y4xBb5yVv53A0Z&N9()9K6E`w26~iD)zA)#}=+I+{lnJduUut_9
zhtKz4+=o@SCa2N)WBQVJj{*>3H5EtpxWWXH!pIGfNpEX=UP-JIyGVSvNKSw*r)77Z
z7`C630U85%#$IRFZ3q9)3s}<ApI}6JDuah#cMp(JXe^$Bs*Hs5$f~tJpjsz3i*g5i
zBFD^o6MT>15q~k5IVv6puk-45q-^Ni`QHk<AR9?AoX4NAJj?g9YU4Jeu=z&M!EyJ#
z;;i~=?n@sFy_*>_UrUVN1Jq-f+;3Hp*ezOe)g8l?yut#IjdN$36jGtKlpIME?OU8@
z`-AX8k9tgD3KiO}cj}P@sWF9=>&!R<bXkk&y4-Qwxqi7+Zu8jw1Xg9DTvHk4x67|&
zPG+pWcYKXM*!{qRruBOZP6>VgfiYWzaj4C`(&||0l)a82|4tOVo4iLJ6^>VsnJTSb
z0N`mqyqy3?40bTr&s^04rCRA>Cyd_+Ma>WavL2c6@sxy;M5<g<;PVoFFP?ZMw;ed)
z-n=!MEvn5eJxusP^g2WAbla(o2g6b^I`kn7dLHCL>eSsfU5<cDW`VrcEA=_#I<54<
zh+ka}g@2<0#ON@Sk;5mqlgbvn>C%$o#pGh-P^Y?a23|3EVdmNQoI2orEedPKPV?uW
zi?HF~lzoUWaCohgiZQqb@YD5lk)=vg9xMC@@T;P_Z4gPYl~Q0Fb(!U!L<IQ?c>E*<
zV7Gg?vyZ(qj%W47^4p2ervOr|ZooMVOkp)c{ns*3&~!c#%h$0M<`;2Ve+m{pfNVZh
zjGO?8m+i=+1&nEN2=TY4JjG2^Pak}Onjvq-1PrjcJhTyE?PgyHN_H#Cgb$Z=(O=@~
zQSQ7^-d|>ci;YgwM%du*nVayCsmG5o{CSEsfj#AyA7g+)%<3<}t%kwM|F5ORQP6qL
z&v3|iLE#dQsw7UyP0Fvq@tc%=5k<U3kg;Yt$NItpv;}UvbWrclfCg&9`pooQeguie
zO9%zNh9)G>(@G#cAf(sZ?=3sLi`-xKD=_ySryrJnl!XrIl9!`C7oI!ZJ5EO{pVUP=
zhe@{DBW(vAJ)2<nq7$sQiyK2beTmF!#yYgScj&x2|D%I~Y0K4kzPZ~8&gXL`PB$aS
zSiPEHg3>Ufxwd3l@6~`)Ai`8&j?1&jzkRG9%d%|X{&GKRz<oc=(H}e3QT<6<htiVP
zD7bM>B~Q$M-9JTe`bMS|vd6%0Rt;d|r!hvIGAh&VJ}=`~$^FqWG1i247C`BL;d!U8
z6sJAz)Hlb?sN?Nqq;V!l>rw`O44U`1u5E(5Xh+6p#jcxIpuNYM)buO3Qxg!<)o1iL
zz<*NX);p3Tl}K(d+^Nc3JPQ(wI5{q||Hp5=#*L~Z<^7>0z(VZ5%l;edyR;BW;(Nh(
z-%>Yi^o8dWyq)PZ{oSz;LfG0Gv75PR`u&T2RPGc*{~30rqtwVC^|AQ9IlStD|DZ1W
zb)B_0gzB*eQQ3m~$Jk%{9;(lQ*Ula)Glq8j_#wKEx$ct`ghcKfSyR`53c3+|^F}3;
zPq%1;)uWK!3Xcxudpvw?lxvyiAhT&0lEo`df@=qOYhBRZKGA0+tx^mSPAyh0Vs9Fi
z1Kr!~GW+%%@aUgyMJ(g{X!<BTQcqqFjJ*~FGrwf!<nTfiMKh~UsbO3}*+_gr$B+qo
zW_nUx)+4~JpE@+-U@lG6!xo%6t_??sl8i*nGc9{ephO=wBJw-rS_eIVD9*<wwp4a*
zLNGdBOI5^7yv2o_r|ka9DqD6A=l_*yNt{{?a~=KkdCY76xN^fwv^ha;XUM*UNYi(3
z9(I@7|HQFY5@1j{-&>=g4^0+j<@3lud+I2H(rJ>am+4Vcevd*F{sZ!FF@hkPs}<ol
zA|1UJ_;`cll<&ie1y!+RSUwnxAUnfncd>LlP-ExC#g3C0rFv=H4Lw5vf;3`TQ(m(>
zO{6V80Bl*z&nr?SVeu9fv&N$c`einPVmIOd>%Y*38gypKqj4Cc0@KX>3kW!vCZ=+q
z^Kj3*#4&8|t6VR3-`V@zAez~C_a;jYcjYx}A}CBcWm7x=aSVvH{KJ+Q?d@j+<7sIx
zACUE#tW16qEmsu|Qx;662BkykW;r#HIC1Zrx}Cupb9e=UdX+WELk~J*jwrwmgTygR
zJr50p!h56m!JgwNMEcdmpg6vT_y!fcA4~r8*GSsLdJ%S<SlR}#2wdz0MMd1`U6p_X
z720>IX+p;VFbc~JS^oTY3@>|g5RM?(8%54)6#xfhy`1h8mq%Y?KK8Weodj6<X{?O*
zWEaZ_1$v)=EA)m(H}W(GqW{?rmS#Npg8%eM>RjY!`~`z-Zp@8_De_QL5@U8AOm(aw
zQQ$8me%20(b0XTxc;jI;VG0#%rX$K<3{RGX!yo3Djlq1UlX*cQ7YOjw_5?~aFw-A>
z3yP&`@KnVhU@h1UC=JXT$;I@C0w&w+^)hu3;oKMauuFpax57TjW%o`ilt%M&ai8I%
z5-5kUuH&}ogFce$d8kF^pXghqQQ0=rRO+;TV9S#9)$(W#ad~}5#}X)4E|XX7b5YcJ
zff8Xn`}BhAe{Gg`eiS9;$He}ZGQhXSj?aL+bTeHJC>L}g9I8lcf+s9oAXNI5SeWS5
zaXikrqHgFVD#|A7#)s~9dbE4yKWc}+j<|(=?W5#7CSf$jCQMMVhk=<OR1K2U)cZt*
zHGx`emk<dWi+^{cXj}2PC#$KI)IUl}6zTbTluUQwaVD7WLkTVk8KXLY=fKPw6*ks6
zVpdc@C*9EK^;eXQvc(WN9LE{&<{|tqXNpz5V%od95D70v#KaEXT8o_B1<fUg88D(a
z6@N;xqRyb~1ym{Gg`aSOFfETz6jn(Gk6YA5RV!{Kor7&=jXzj$Uo@D$D;J;1ObUpy
zu8+mgYm&J(80Z;Wd&UW&tyk&$3R2;7BE7KjNdRnV>-o48Ur8Tmsw|=9DigoDL-OJ0
zd>=2YPPNt*|Gi;%102eE##Y2+Aj)Qy7)fm)F0w=yUjl0SUYeu9YX)X$?N5k$O;+md
z2V{YQOl$hoa7xkx7cqQTjlwk1(1hvbW+(qa1$t+z`|a83)RlJa3zW@F`tKDi_p%`Q
zyxpzGECa8@c1NcRz*n?pIiS_3gd1z!^Yd8T+h=Z_c%`vK38--jeT@{O*f?9@Q;d6G
zOj<+N0RIwIki$#*KXW?Vb;$J8bP?e9p2^|3TOK4bnj{o+6lLDPb=SNULsWm4nSdq(
zkI+&)*ono1-f>f;Ggh2$2aSp$8pzyd-zXaym%gN)*}})&l99xVkkD7a!Am`)ySd%}
z4>XJfXiYvGH<LKQ!dZkB5E>Mf4yY=CS6?7{&nkf{i>~z@P%MHEy1fTy7@EOy`_K+l
z(m3<k|LZ&7T;I-j>D{f|f+kEFj}IOzaE8)Vg~)lX4jkRlv)aYF>@ZZhNG;jtWO%1T
z{R&V?iE-pK(j6Bm(Kk1z8D<bgYhv^IDR0_IaLB>6Lo-f4%?LvQ{MlbWNd{35k%1Kj
z_Ue1pp)aCUay3wX>elX#RwTzE^G;!28^=>*n{~FyzbPgPz#cFyD|}gnj=uC>tZTN?
z;(hN{71MvhQxw}9k8?=UOY&5|$mP*JR_u8ZGX~f4${}HML6bZwIMbHS_)6=2h3wJ-
z)yc+r;=*_hM6*^Kl*aqDyrSC%MDEuu<!XBdo_h^Yj>~FZ@%8NmeW2HRZcptLsdzC(
zxQL8kiS#BeWd~`2FnXq~7Qh99WN1f}KPJBs<1Ru#UaZ=L`BCHvdp)0gc-2y~ZX;NW
zcWMnfYd(XX+_w3_6R`Wh8Pls(L+Kd38roVV?4ZmWY{58`^ybI+J+QWyr7pu_q;OYb
zwe-yU>IIz}s6ud9Svji(>C;eKVADY>PbLkFyWH12t>>|AFTF2Zr9~OtTEs(7&OVr>
z69P|X;E6<2>SyLB7sjHST@M$@!(r>c%cZ^<>(3mdKf;G#qA=kI&->T|{7H#?CLgZ+
zvVup9g%Yuu9aWQ;DX_2Af^txnSLpB5BYARa!Jhz{$E!^9_Cdm&q9BrErn?Mw1a)WY
zC0$6y1Vf$ese!eG$}uMoU6WC51U(u;y8F*7GTaow71UoDBq%B;vHKh8d}E?_WmQd*
zy2i#6)Q7_VPJ|Z!8PmB~Vzco7AnI%+$ah^?*1s00q)u~6J-6ryQB6;2eNo&bWJ>db
z@Ffk$DOF##cj(k%iaqu3B_DA1kHb1NI{g%`hf&W)^E06=H^!a*HCamln8=*Q7XR&0
zCKZ;cg>}^JbqGkCcT%$da#Ih>n0a~z9BQ=|IkSKLtE&-L*>iO6S76)H7Q}lrb(Aki
zi4j=J)obJL(|Ze$SSo536soNWLX|svJ;jdwM5m6%;M(LY;G6Q#zruz;D#3$l|JcKn
zKqy)@+elgmZMR@yaK;g*`htGhTpAgfX7&y0(X31JexDhk_k&c}GvVABh)i>dp1NZR
zn>)|bxQZjzm=&)`_=E;T@r^IlNIWM#$~!f8anWo6_-O(PMOUkW@@y5w{)g#7%@~{|
zkc04-q=_9fe(GFNkrd2;MwpTcnc~d0MIj-Q_6955adddL4`_LBrjxFVN-1rbptp7-
zYXlv40ye+@DCiexLae4%V>nUnQp$hs^?~>0mvEg|ksK4I6Do=7&>h_7!Zp2}siVI7
zAJT!Slk%>j)jJD`UNy*H(jZ0RC_V_OC0ww&<9Y!+nu9%L9G<lA{Z7K$yEl5FmIDr(
z=8LNWWpTrgO>&XQ)GQ<XsL46S+BiWcBFudBW0D_wzXgI#>Q>M@q&?GZ_uk~SNu_Us
zHUBv;(y4BddrC!=S;RW#8>7=)7}3cWG|eIqiSa<FD(wCyHUzE2OzN$&%KUA(j-_b&
z6Tp33ThRfeaQ(1(PvqC{d2Niunh%%ydg+n4g+fr&-rI-QP*^%qFMKisDU^-1nca+;
zAxU;tLQq^0BXtl?<5)EUNh}#jrpg04Ax-N@2Q7zvsn~Jwoa}K{n$&s5;DO4cfbHy1
zHqK%I_D03N#)$d}g8-p2=z}yM4gl7xFcZB|Z3Y|e_5T01Z)V~#ro(##Wx}TuOv>hL
zMTHjC)8Vjw79m7Cfo4Q8l?h>&|C7*74Q+X?<yP=NOWTXp70=BQEP3=u-n1ntj(itT
z<x#D`bP6%`cD~q<bMx#>Xkw3F%{dbsgY&EBi{m^qcT<BfA5AL8N6MMr%p!zcyLp9}
zXEv}(1_cBX=8}6tyep8FeU2)iE)Awl_E&(rBI6GVN2lk9?+$_|f^JnId`)u-#$@K}
zVV4ynbyBoQFI)r94_95cg(hAa_9VZ^rF)$u)I7Qnae4GOmX5d~RFz6p<%g0%s#Bce
zwP@Pq&bkX;rf~_26I@B#NSe1D{Tu>(hD37jz#cXhaZ0(sYE+P52|Es~9j9#Wz~rO@
zQ*EH%{Ox?0<!jSy3y6o+yc0Q$XZ!CooYn;!hw(SJ#mAsOFCuCEg-)>_j&VpnBiZu#
zo(+4ll0^0pEfp@^c%^X#aX9cR;Cq<2qJA^A*&YdRSjBzj<cl;$m~@All7CE<SOAd@
zRm4=2PB!?DsRwc!C$hB~Bve+auxw!1RS^Puy^p5FJzQpHnTE$Jy_mY2z50xOq}&a>
zX%ovstSQlK5$~0f_%@sSjDsQVd<|dlE|no=dsy#!vGswV*a+4mU=4%>WXGCf-gjXr
zLXZ%k|2~wOfF1khcToC%)20CbKLEg>Njbiw!*Tq+{f4`T31-u?F_6``tzPW$2PNp}
zfUPRb$*7X#YiD{Q9`W{e(D~2j#QxZ@myNcbOsEvYh;<&-j~bcRj(OofcrYL~aI4BN
zyWB8{*WO?37*7D~=cx(;uJup@4!VpnHO~{k8Jg@f2*&h~aAq7~&`Y){t0YL!oT~t7
z6hPYVVFmM;1h7d(Z*g2(D86UZM1c>mC`JmXL^EFvOrIq2tGwD;mn!>OtF$mr*apkq
zWNPwzs9j?pq5toGplaa@V2lv__cj{CuR|5#EhKRqW<~&0U*##Ytq3<rRAefO-x0zU
zoixGgn$^C^D7+F(Shr(wZ<B%m7Ip^~uu0aSYN>v1NJZxDqSt|I1;BNgOYz;;3Ky0@
zt9Zb*o3(+%IW8yH$6(;r7DSEWXN+5v@LWia(tQqr?GAb2gnjgG@hHZBy)-B<ZR+sF
z7au~qJyYbajPZgmt)zjv@qoD&e!Qm1Ki0%bbXH7ANTwZ#`G?i?+K}{@S|he(s_Kk5
z8+8OilvWb7+Cq+vNh^Hq2o_qABogx-N+{fZ1~3lMVKoP9kDVr5-Kw6tVUq;KAxd|D
z21`Q({}lvVA^iMs2rK4~L6>X`)cBE&L5$ni)tO6oFUDbVitsYp;aKlmNN0<tZ%h~V
z`>rp}=Hdz_%v`1ik^ZAuBz;m+hh_2xhUGs<NC5S%w2~{20uu-CG3-zCqyv_vVg38M
zkm-ywh5lZy#DNqE0QT@$AG9foU_%bb6JT*X8pdA8mUFP^VveUv!6nF6nb|I$C_Xb+
zBJllkL^-Iu5c(gCF?{g4uZK87s=NgGiFNqa=~)K!a<P`<)BrLaV(V}9n*d2&D`DNo
zzv~D^r<n|*OYSI`X3r{sUc|hbCt!;-8hmhRk9NGdp6K!<18KDywgFZJI9r;wuKj)+
zkZ;%6)Qh(n*n958c7d@ZF1GijV+%Yd(Uc-LkNr6m3f5|JM+1W9T5=Pk7a?#Cp=*k^
zBVpe}kN|^s--Vc7n$zpRSVUJVbh=oTxgT!G)vu@C=j1ff5Q8u}y9gQI*-uPzPQCvY
z2b015AdqYFxuE7mH-<!YE+2O*=TCLN_X_Qeq2v9KPz2b0Uk&bLmTHl}Tf5peREJ6_
zm>qC?;xmXR{)Z|G=jk70C`lE_D}YLh;uC5fD})U#T@TJwa%9Her~YdAmkL&rj7TuV
z>yvlm;G`;fj|)CB8zKpMmu&NI>I~aiiCIzL+n@BZ@xHd#+Y3u2s1z&BQL^tfiPULk
zw0Z3Y42bNF6w5`z{?N0i<1JB>D=qJlr2zMcq?On6Ejx)FxN}wI*R=&ObJtKeGA%3c
z=&=#z$#W0Ykl~gH_1!f649`C1cS(C~G;0HWz=m`-+Ku3q(I^epi`Zg&XB@g4P6)}6
zJuwOX3ELZMw_`?04KZz_=J5^;!xuwH?BD=lu7#J~PB>J4?kQ82GG6JW=|^Whl*WVR
z1|=nn!$z6|aN(8m!#kx(R{B1oIdi~*egQR6{T*Nxs98EKCF<fNED$uL<jHb9d|vCY
zu;M*nJZ45C)AoE63<=s*jnz3vLWjMxFOh8l&u%EYm$-l%1;0-TvyjW;Xv4NqSFnrI
ze6K0}@%-Ptj9V9w?aY_Di_BJzRNff!>fj=+oh-9+VR~D<$R&DNE^ty+P_m|c?QnHc
zFq(4)+InjMH}N!S?=!OUN8X%g*)S2}77=0&^2=xGK0bfVQ~t>uo(A$Md;fXlCO{om
zOw?(iVRKJZQnXn{+i)ja=*30X=kN70bu5YZJ>N(jAR=>m^(`lJ=3rL*R!e9M=(3!E
zQ}1cTThu+US25pC9!e|QN&(9mz%`D!E*W4XDH>v}{~juRg)$8{0#_I3@F}s{DnHGX
zzUnE6N}5F^VzG!`Ah*$oHrZ`uY8|*O>jt^R1E00hX8f`rtieioag<^cX(o*I61;iv
zdPeWkgG(n(J`zV=7YZUI1S?)2hDJSRUIa%R%uiF4pDR<HkQh_&L7rV5E0>lh^~Xr&
zU+9?@@U_S9Ns$i%;!%+}@yBk~iv^tAU5RC@G^CLWI0Y$%yL4DsOl06XFeX2=wBt$`
z=`tK6P>$V+cIrs;N)osQ(SK0>w_#T~h}Rznwqe;og066)2L|}td++}~%56O}cRltc
zQ+89r#yKciHneZl94?~dbR@q8HY*vPpuf%r%E2rd>A|ZnZ6Vj8g2HU!6f>l`B(kjX
z#H-(>D2ucF$RlTbjcSZM2&m`w<n&5HHHlw+u)lLZcXLp$+OT+3CDRrRxZO2wnAEA$
z=3{moa)snGG<uw_BWo~?b|wNr<&qi*K*|E9J}T^rb(nAiZzTSk!ldaQumc|FzoHv;
zwGPT{oyxcZNvJCI_>bzuE<>TF7wHc0^VuWBriSd_3_EUJCp8y{*(cgKWhhj=L>rek
z;K>U;b5oCvkgHqHSP0XrS{K=lp$|n!o{uj5;694~Q~|{lCR7u<-1Ablw;N1q@bs^8
z|4vH<!!wU^9f}xevqd#iJb6+y`i0lpS90;h?c_%3^GQk3P&j0zS@Yk$v34>Tv2}k5
zyQ2V46y%^RLvz5vLL%RG#U$}II#fuH5?qUC2gQdppK$u{OgY>8aMAg$zrdXhqm~zd
zv&NZl4R}hr#@4*{a_J56c7B*z_eXp}qB_D;|G=*vH2vjfCgnftxg|LuU)wIgB_5Rr
zH7@wg0P15vt{vtd=o!}{taMA0^;nk8YK=7g_p`8I^9GBRhxg&W;g(A>M)&N&8t2xH
z*Fal7-xC#kG5WsLB74C6#`P&-=g0<BwsH@iLfhkfroJa)PcwJQtPXJhIi1^ccu?6K
zAa~bUoE1=-nvCXA6wr0-Y*PAKff0j^q<CHuJG(pNiO$r3U>52dOUCJ%i=*$8KKBes
z*xfGMwN)r+TaAX+K>ODn6cAsr3h9_o0fdhQS+r}3>UlvPy=sh^Q)|B4wz9)hk~+uG
zV^{hmx8eO-u8_mq-17VHocPcTVV)-k&vfqr_s$Q&M(zx738?^izV6ii6*SkTmuV~s
zo_Qj;Cg<s$LR1#)1P+7SJB7h}BW#Q6!OkmzD0%ny-g-OCr_`9rg=3Qw*I4lI<gA-c
zRc`}=jxj4b15IubJIT@gN_ITt+rj#CiNE|>!4~sp&p$dK;ddQoBAVrvY4SHFSZ5`F
z5(kw#9umQ_?kJvSso!5=WT;ep`7?GxAW$8M^0kK%iF5k$c#mm%{bEp>Sml1C?%cwl
z%t7R%-H`h_g25*)Uv>}9(ZU*DsL=6Ey)5nPfuBvkopPq6S@;T>Hn5ZnsRKcN!uIF&
zS(3?<1E6d>(#GrBKcmMo?JttkG#e<Q*#1m_v8B2FBinIP-Gc__+6)IAL|#$-!1$C_
z6@t)YED!U%1Sp@<2B#~kO2d<z)0I!-i4z*`XyW~hagic-t*GQ*_w%onb;Rl{anD%V
zH&HeXR?3jrNOIliDS_9CLPf&Vmjd|hp$^H5#w>*w)xXa>`DD$33X$9OnWCWQ+gg9e
zQc;u%Hl{AiJpgHDx)<XrS#BX_No?pj(EviLSM#QO8{u%e)3c+wQ6VIaoLzHDPc$uH
zK_H9xL{N!h4%RB&7=3l)PJR60iuMu1hUhC^2?*xUk;X^th0X=M7W&0@rpZ%p?5<Rs
zj9~Be*Xo6u0Xv4m@{+=V&cR`Ujf7TK098*Kfk;ifFpARBSLBlwE2x9!NN=50RKaZl
zM%b&w;SCHW{@3W~51KBc=iEfTyoI-T{*(Cv315NCZ9xF3%cK+qCTH~S!{iv#!4QAu
z1XMZdyl?7T`$z$YY?E(Wy_$<!d&Iz<cv<IU=`kd8K0v}%nkPZy;)hP8K_|t+36dO1
z-{XdFlB!sOS>YV2!rIV<h<ssOO4&Gb*GI<wzSL9<pJSD=i3S-UAk6BNV+IHY#wu8U
zxKHfOrM0m}sDLyW3YQlCF6<ywHLo*xoqvhunolkm%=$`=YaWQCvk~&cQ##evRIswa
zd_pZ{Hz1|Gkz!UIV@$tvu!}}*G=#D$@LQstpRj5c`s~!^#*)bE1B+0K^zaycJsI-A
z2RV<udDiFY)3wMW5%n69rln$mj>NZ=sDD)x;zP_U5yIOyam)C^7Q=IM!Gi)Kwj2)^
zHxQ-GYp9nCUC;Ea&WW5qkUFt?%M?7)v}1cu?Sa-VI}Anz%@V)kLej@2GXKbWN!4Ee
zIFYRq&Fp(<!L|dX%xgj;*u>M3y5sSt?z_zPv)P$-T+Dla>a5!3^>QA_Yk#6r!8TQM
zEvuUvyX1Sb^oBFMOpY`qLX%bB5_iG}HmU3FN`2DxHQ(S)?(;>xDd8AN{4N;?Edc)d
zhBsOF#h7w#Iqadfal{DfUgpySEjc>~%fX%7vJN2GG6Rt=kDtM|!GWL9V-Errv?Ne|
z#C`RW*JERg>^;IDDkMpI*KMB*$|&eG-cRCchcEi)qbQ?B%=UG<`dV0h6bsvITEm=V
zB&>k#-X*FNxP+ngv<=wmZBN#_AoF&jg&VL~JKcg3Idq&0kH#Fp_Oz7DKx}yZ;>r6!
zMa=w}pQXI`SG*Sp<z|O>GKG*?xp`n-{QzGRv_R&(2!*6OJej#a;F>xKA3ymNOMAzt
zLfO;`TSv=y36^(~%%Q&B(81M*cEY-#Ye2i^FAw5THgOpH(i%K#xrC2yVy(XckQ8A)
zxIUBVJ*n>w5@o=0wT1K5Ro?+BOKdT^%1HLLVBdS6!bjeVO!%8;-}FcWiaFJ~4yAYb
za-!8FbBBC2kCxKJut4_RDWcLGaRUPJ1E62Hf|dA`{@N+ks=8n}dy>Tqr>0RQ--`1V
zX;nT(OAcy>N31P_r<X($-4j|~JRUvH9)xD0YTw0i)0ECe4Nm8-RN?Oz+=}7vJxyG+
zODR%q*3~5CsQF3IGude?vXBDAA077+Qjw9~3#L=*aQ^0UW-yk}-fgweA!{U%C%ANP
zHwD`Lw(vS``gGMOOAbU)fAc+}h$4|Mmj99^CY@;>&LOguZFe1WofJsX6s};)ciziH
ze-_xbhNIiJ9|aya+J5utZpi0v4`LIT6JBVz@*+9RhORb`(9IabxxvHm+iYDLB1Kj@
zhBmRti~fV=J~P%mq{~;l0#LfA1eFSaq2$SYG@9MO!PW}3_%j7rC6JSyjseWH_3bSK
zb||(mIeJcBI>R$E1f@ANa;qIa{?2&@c%7K`?Ngw<Q6X~JX4m>!ITnjgJ_)2#Wb^S-
z$3o7L$uf7s`E{u&X%l6v&_uu`z^g*k#nV>nU~USqrFcd@KQ_7!2uwyV-X!dHL|NgK
z6>9`MNxykI5gsPFG`x61@%@3J%LpQ{P_c2>Tx-vpS&-L&>reY2I7Pxh+mR2A0_d(N
zTE}UO!ZzeI@DOiHy2tz_br@W9LA%>SD6AVc_6cNMCV5jpw!R70V=yEr6F2018yUwi
z3ad<Pk<N0Al-nXOetP^VkHk~Fp%eo-J5EX(w@wj0Ok+#J)q1#zX3&1)k{KziFeC~3
znOR3S4f26XNz(nD>f$${r9oy_)A`yQys#R-0o)qmm4VO{=5K}dD_WPc*Au~&l@rwJ
zDb)TGynQkPJgQ>Whm|tc+^@20HHB0Tqv$W$@6N$=pk;~Z6n%d_-Up8t`kMoJT}UZX
zJ@?6pp2A$~t=iiR5zN7=JH|l%jGYz1iQ@h{7RK0@y3_av1dzn(is0z;u~@{P)1g6U
z>p-6ZEjN(uQP))69@*)1cXFw-^f8Vg)iMEW%jCIXVDO|c{Q4SS8m)yq$qw#%2$1zR
z@7&te-+dm~*Q>(qlHx2b;DX^oMo<f?4Bl;S2s}g%9d%|mbQAgWToo9%?pwm#XH#>*
z@jx`m#G%eM&;@-{>KHJ%{_axbcNsQTfb36JG?@K-R-Y&ONr-alGHOeL`{7E|knNIo
zI+k;w4Y{>>Vjnye?S~RP8fR`0)}Syc6FA*~kbsp{*B$;Ou|?pMduEvumZUbZB=$*i
z4zbT3!v%Ue@K|~zS&aEALT5|vRn06>Nq1wR$DP4V;#)cSMM_ng2F}+>(9MH)14Syq
z%y{{_Eh^Tj5E0j)Ty`hH2WV}`BVIlAtS9V%xIDT94WaYfZdCSb|D9FSk<&_<3%xlk
zW{kM*H{(YD0VvN~8?G+$G*commQXDyUktZQI{wcfcO2#u6_bhQ`QEXrTF8${>&?K(
zcPNc}*>4Om1H_@D>?D^^W{n(^##z@o@edSz!}M)CM(N{CzWkX-aAvscI||~1TL6Yg
zkiOIZ)cHK)k%+Q;`|CL9sasO;6LTPXT>#%+Kn{3gOMcWiP~=jw!nuZNf8^8V1>BMY
zNRywnrhTtDww=su?UvR(_1OuitFaG4Hl->%Rx_%xP3Z7vEY@`bS=Zyvk;-XmPrFXG
z0ho^>_p;5B+FI(DFeBFO@4Gae$h@R?uKw_`BDv`KniN0COzKzBaj!baE=#;71TGg#
zW8aBu8^;m0v-}rbIm&dsB;{UHwQvnT{0QUdeALYomavR!1V)DY(ih;$^4n)&{jYwd
z28E|*qKsuR9St3=3NPZ^7osoWqkJjolWViMF;Rx<6Ep~JgTp$$w9}WVt*3A~k|$do
zjcTo*e%1>rj<8~TQj&L46!vL9F78gx8ylDU*4w2rec+OR;*&^IqfjKfsQ<YV!+&11
zTO~**ofquJ!gQ1)upcPJm}qg#!OeO9nxNC*Gj;2&F|bd=X{+|wq?8ONc2vMLR|39<
zhebST%js?MCj2#Wq9-SzEU@*MoId0x{*epkwf$8OAz6*5*i#GMD&+#BMFuCL{1}LU
zJlbLCemro&bc6)NoFfVe@4wpzBNpOEIdT&_jW9ksx+9ZSKNU%3rLRM=x0vDSqT6`>
zF3yxIa!j9x>w{Ymv_Q+BjiW+HM-d7nJ4E82jjfFgIb5^8ldqQj4F-2W@#@KW_eLv3
zShCP`pIph_j^HUjsky6_5C@R$S@7Ql8xF+W>ng2X6;3>^xM12Rgw<4WP+m?o<mu2U
zfhc1&f#nlmcJs@w+QaMJSW>+GCo9_fRvmqg%}qTrK9j0)Q&^CVcwq6yEYgu3pT7yJ
zxoOW!_V)Z@8rk9O@%6@`zi}HTo8}|#Mq>@$SbIZeUEtz}54+gxIw(iT?bPT})s*^^
zAPq4Nn;w1lB31mA_$WaEia+kDtk68GU-LzfSr)Hm09YFvZ|R!RqS96HfV9;k%R~Mj
z-7rhe@s2f2VX2wnw{h^yxroLdOQAjBh@nycgp#fX+1JRTFpkJ%^QF`P79ChX<8el<
zyYi{THNJr!-re(*gkqV=Y$otgGIHwOmDt=LAgB6LGy+~`>dQ!c&#Zo!sta%)A(vXq
z>YI>;bwD!UX|4h<z-z|gg%HY@C02g}PD`+pt3BeFh_sHW3Vlf5V73ND<~g~bLltCD
zHP>3=Zn+$)oa;o)FUonCN}bqT^=A;fcaHH$igx^u(mLX9S;xQ+6rMnL|I-F^$;|_5
zI|T?=``xEYj_dHLqNZGP&f1w|uj!lU{*9YPxV4|I4W;l6UIgIy1-+r58&OcBPMj#N
zdPSEq;Kw&<Y61JOfU2;^k1wodvkRC)1+~lAB(wS+u-qqNWoiQdEC7~Bbaxjs=E~%t
zLa%_}E^HID!L))4GWCG%rboygdjEz2w$d2Fbd}qa=+8!j-7gOafT}SVMDy2~_(jps
z=bqGV!gD6ccs2`M_FoxXr@VXNOc;>u0^3j%_+HGUYL<CE6yMn?Ks$vNDxih^%N_#l
zN%jz;MQcdO<Rv0$@w;@>nqt`?m>i#Qdomsi^8+S3uR`I@^O?CDGOPow0%002C|xel
zR-qUa|7fzmQBx7P_dPiZ{XJHRjd~xU#!P4DnuS$^U6c=NZ27fid<HBq_b5`bXH1ps
zFo&3C%J@7S1&$!^C4X@Q{hsQWc_&HZ+mwdxNq$yJcAV0aXkTw?uZ&3x4#O?em!lbe
z^G`Pl90$Y$xR}~-OMj8QEJGwrZm2+~jE-OKGV2ub0A{_foU)toRua$}V0YeWBm>1-
z-Q?+D>C2>4DLGs^1j>Ec8JQ97>5PaOub47q)9Y4w?l_0jz!kt$v)?0aP$R^Qg76Oj
zv8vwIVi+~Gi^Bf(XT<39Q^4OLt%zAtdh;oj9yDN?rBF%@6^yxu24Z7YvzqC|z%^(2
z(D>@;I<|E5OmO*O4)xu1)0+A|Qnn{M=E*&{&4NEH+1Ne&u;M_D3l5xA@BLqDoXY6x
zfu}RPXT0)CgV*FsTPg6aR;(Jfiqpe|QNrTDYcMA1;t!bGnWV#IRMNPyx#PPo@DR_W
zG-mc8%_o9M;$Hte2A<m4&{(~}_QoyBt07L3ZdM>Zw1o)zS-!VZIA_~VqB&?N{zST{
zqpP(*?9-RRMaTed0$5>krSIwPt&n7AnPUS^Wm%N)0g1)r^ygt^d3(xypIT%~>7zTm
zw#v8EbRTcVpNnqJiE~wEvswO~aSWzmp_h(?Cm|A@+MDl9X!c*)c^cfR2f2Kamu}ZU
zbPxUEzmgy2)2mWNzXv-WVj@89JHugsThVUO1df|S0W^yN*Jb3-4tl{$*$lUU>Whp8
z$7JMBhR^7}|1isT2)lsVDlb9WaiXrei*2#*4e%4A)?T{rRItnATADz~Er;8VWY(O#
zZ>x~EiRqZ!S@XxN^N>XlZ|J6MBCf%eR{y|$D8B|poLGRfVBRA4%EwgVcQ^H}(zbHa
z439^#DK~P#TU`UhIpfM;*WqN#Rj@mt80Ueohp8-DveNJOyd>+qX&?DT03;1r)(ZEg
zMg?(sjU1F!lP=p6AY|k24l`)nTyg_JgaX9&WAejVhHzUISm5?%vr7DNK0G^kH3(bO
zlmy<^V#Oh7OGRL`2hS2w1l|mp<N99$wu>G7YJP`ZP;%uYG=ii3#&alI&OVG?WBXJS
zkcNs#aB={7!Fa`)YPO~UdwkPHFQ;0Pa<O>0g_p_V<n~{?Z+d211G=+LY1LMS1+D)y
zJSoDj9#_-Nc=eY}Xopti&Kn^vjxY^J{B{pVj2`KKZ#37PhjO(iyx5W}ww{nn6^GmM
zT%Q-5j(V?p%)LhZt$$EnX}fWl7EV&3;eCVx)wy^u%{qk$gYZGx^6G0$Y?lrE#w&(A
zM|-0+jfIY!3u0ko<eIKtViVlCecn`B7+850m;UU{CXl|HM7K!gYs%H?xkm%^B92{e
z+@`uTN!z(n)UI5zM+1H0fZW?U<ugKo09^AO*d2SLIA6gF+iBj%nGkq5RYHPk%zs1T
zPfl)@R%3r!-tegsPxy`nBZ{A~in)>~Lmae+p|x=R3cU$Iq7|eCcC7RqBxdM#Q7ZsG
z8cIbpXH?l7GqDhH;f`WSP^5WuTK>5^N#d}{q9ra=$mdQ?(>oBs>{U}C$9cCR<k@}j
zMNC=5f&^4P+l+v4B$GteepM5`fMeA8DuH5^i1F^9ZJ8h+J=svNo*-w8|DMMDbE9xs
z-$$`5VUb;NGU&)i#!JFtb}j~t1IS<g9kVJOPC*$V3^BPL1WT56;7iBLFnJd8z+onv
zgIYPh3CQSfw!dwgc3K;GH2PAJH_0)RaqRgK;|Me{$0N~l{3FkVsFW>By^BS*l5r14
zYTdC~pDTV?rTIU+feGKGwrU~Xbc0@}!O=-0!tY4eptHUs+Gh`sB_seK%qfMYX*jtt
zkTk_@B^nS~BOgz%(&qh>_lmgq@bVs`VEJ0iqg!-9dGoxb!cqMgZ~d_LVNSv~9>7ta
zF5z$H0iM;#u|_Yg8?0Au$PcZwao!sNrUp>Bp++I}+{gDlJhv39mL1(YJr_ABJet*Z
z>UJ$EN?81RUs%*$2Q3nC%x0Y_fBVSa>YoD{_Ei_CQXACI`Zn-q+q4g`prlqB`#vZ6
z^h_Ju_NrpKpRJ*gE9F*F5xAnMx*soo0bgO_{Uyd=+hn~8_JI9~gQyikqnO{E!QIWf
zRDO|P3Tdl3AiS!1Zt3il;%>fX(h+Y*fp+I+DRvk28R6x3_<b@g?UQIoaHer{U0RMQ
z<+^k<Hk;HWNjM(x5#))P<e)FEh8&AY_kr@tG*%Rbz$q1l&Iy}j1_cJ^aYQi&Uhhd(
zVnzwmE)$NW0QeE+_4?dam8vQFf2lDzP&HUpaNdHfKtzO{mpU1ee0^)d1-TPv+>zA-
zO21Wbe8@#A{Dr;W#T%K2WGZG_V};(j!)F&6E%CIvA?ODq@w?0b`;M3UuF_)nw>wp-
zUXdK5;MG~Ra8fCiF%=4ki|Xt3;R7>mv6`5S#)!7nBx^qF%G2>NJYnjho=G1s2%!9X
zk<VjmckR*r>ha00&|scePX2DpUO$Qz6(HFkq$zkONtBQMcz8*THR`O?lhv78h1t_(
zsZF2N85Pk^$XWbNT55Ayw_T>$&o|y!JL%>*gBvAGBI}Q9w@M78gVw7|+(BLqwgKe{
zdL=jBE+v?Xc7ypiarl&HoS(X>Ct{%1g3~Z}s0@D5Sr6g&!_wLrND}3l=>hw#cs@OJ
zzdCGuIPys`Qt;`>CUc(z%C4y;s!gXTF)s~KKG}whalYZc(w#X`g(L&<IA<>b5FxLU
zpUd)Tjm9_R_Y;m7sBFB%kPluG3t2HWk9)vRtNmUZm98&Lv@_|)xJLY&gM=${5eZJS
z0p(l-MA+3<>o#MlGD!Kj(Y5yIyi$wJP^905<XlBw<1kb@m43^HwRLeIv=-tdO~!(G
zzS$||%n@-M&rvjOe{=#J_LvRIC1lgR*p{+4f7-%}@a3!5lXTnW)X<tvjctz$^8+tz
ztA<{~8LdF??UKPPpy;L-s8ELCSYh_J1J<9qb-rV^(#oH`>|v9lHm;IvubcN^yiB#_
zpb%M_be4EN=<YjtM6q;`Ez7*Zjm>^jr@DHG>@e{L%#?9}zQg|!bKhvt>-2#v)xU*x
z2#>*bafU?Na;A&AVT>m=H6Am9d5eXp6aosU@6I)mLfTDGD=|_>Aiaom=WsCx+$=yN
zTv2$Am%9wgfR1yf-ae&h@%@>Y2d_;9YBaIs=;bYQV|IWe?(*MNqxU8q3v3j(Zp~Pb
zvvtHsQ-(rxQSneVDCF@xB=DCk&PK`}Ae;WW5hwi7{4Miu&d0d^$<jLNCwNY|?3haJ
z5+>{haH%^4t?2}|#<%jQ>F8=s)EGSm-jKPe&)g|ylHTZgBR^vm^ykZ<<csPhR3>xW
zhuaq<79)h-es!*!V5r5@sJey1E8<|ET-6F#iStn@N=My@#Ri*Y|4CjG*sLf<=HyC!
zam|dZc3pR2g1Cfh>lzA+5i9$YmJLy4I{0`nLyq2XhUNS-Ml*q)^KHV!oa~4b@H+BK
z$C*6`NXqhT-6m+EBrvJDZjn6976nr`mlRB=Ox(*C_gJ$^l<)-lZ<7VqlBhW+bf?OY
zu^l)QBez4!Cepd7r6U{RB0j$@mBmA9FQk2>Bd;NV-1Eh}&BW_2mW%w{!qiJ<obD(5
z_}*|;Bv`^(SoLtn2?@hz(y+=LuU72&Y^<QAo^EFw_0P%PFLTZjj8hMXpc6-+^=9#@
z03s1?7@<*a6ohUd{f?R2rV9l30(RI4)<ueu&z;SO8A)O76oP(663l$y#;TeW&oj$h
z43i(d9d){Kq47ylkEOK6#(6Si&h9Q@N}{)w?~gQ*8WO@N4Ah1?(|h2p?N03zraVcq
zNpz-~Z=HxT>v+y6@QWh>-ZL)0_kI^7ywg4Ci^{%DCsZ&F0@zJK=X$ZP*ZT}o$LYmq
zUK>Qp^WCErF)NK}fSL-gN{aajKB}lTD}M0a1yh=Tg&nfFAqBu^@Uv%pxoV>9T+&Tw
z)K4fGNuMcb5!5~<=3b79gv6F^P^F#jb=F3AwmSTFv-$FNxT_OjgJoiQ4f;U@6Rj>+
zF!-=Vu^z)xh#NjBa*v9njykiKB-|;F>-j{R?`jWTZE5D7LEy2ss^0m74~(oSWY)jA
zt$Q?>qnwVcZ&6LU{y<9VnSne<v@S@pHbp19KCE?b1S`o^W4IFgp3de#nGJ)nXgDlf
zjm^g;0=b8rZ?P&pyin{_LUW%p{NDrh-<x6gP(^+YNr6@LCcOI|^JP}G`|vi_G*VCZ
z*TUOTMaoqzDjLf#10TLLta-D`S0rcTf1$0J$zd=4v%#{LO`-4-{O5$jJ5}I^%PeEU
zGaW5yE!Ug%%gy-g4x6rZK2?|uEs#e|U_Ob96E|`&i7(Kc(g1QSf%&U-c7D9}H|nIk
zG1X`VvVz3HoUG*uc}}_B-@%r9PKOujR-;?Jc96=KX#xCJ-sr<{wdjh8=2al$<TQa<
z*-dP(71`~5gfJ_nP&Ed6L_U*Edg{c}9NsT;SpIqW=ib@60Yo;Gqp`u&u5Ij7_|qpA
z*6g&gDSFbzJ0{3v`0p{1v&<vX<*O?ajQHX+;?non&+3z0*8S*;hPJh<d_1EpUdCi#
zrqzC;(nmOOWAcl;hQAdQwD9CP9fq37X}^r4_D{*<NWe?5BspEYAgM@k_c%ua43iQN
zJT}-T+IcfUz8krJ9J@m@>{2*%N&q96tPO)Ykh#Iza?S>?!``@I?OH!-Dj`=jV89vi
z>ZO5sv{x#Q$>w3!odm&dvQg~8L%N>DJh*;uscD3?sAKieH~9oC%}sLM(6|)4r?2y<
z&tA9Gg*0W8N&7mE;Jgu*S+mp=OCd4<E)hIcl((S8o>&4xWZQhjfjv3a2IC-YO&d`p
zI;R=;oEgP5I7sej3$DZX<>X`fKyE|Cis~|OsoS<zVbn7c78Y;W;+6_yvRf?+q3{T;
zk6JEY1$IANyB~4tu3vtGF)H_ax;CrdD+^ODNhxXfF6C!dkFDt2|BAbNTh2#O(E|Z(
zr^&6E{1D;8qG__c)(ELz=^IBpx(v=IYItyGmRZ=&9ZKj=Bn^jANL0%7!FYiUDsIy4
zmyKH^LI-&C5kO4q(>bQ=(9?5|gffS6@N<NB#07<$*qtm2!QjsV#DO+(w+NfuFPP0q
z)_vr;y_%FDUey);x=lC22*j1xAXe|lpXQvkHy;)q`3B2sb%~Syd*G?hTJx;tYO91x
zKiy0|DL1%2xrDl@$&0r+b@DJ=Y(CEIc$Zkp0vWagru237|4L;ZU>{z6xA&*08B<hL
z_d4q=Z1c0(8Q)6R7xTNvl~*F~9V;X4s+J)<Qn;*4$4Gjb$iM@evkPLzD)c5Fu^Z17
zcDJ~6Z(|98lB?NSAxYEcDF|q(!4n>tp)98*ehMbqN=7x&7uEpHZhL>ptJkz_%X-V|
zwXTq*H-~@oGlW$3uKn0He4@+sUNG+v6S0G{YKd1Pf%2O6y9cW+teQEed~MnDWb+yv
z9^noi-iRo9nmy|xv>6W&4C-NB@)L-N+;+I*fuap{_)AZ0KsG!Q$5#rLyZB9!+5B;B
zzS9cF0~5l*4aSFjv(Lh~<N@dJV#AVsbYq~)9a|>N0KxL*{G-#7Q`@=?)%rF{8<+Le
z=iK}m!~|+@%rui)Y^unQ_RWIiU@|9mSHFD2nKhKZyLa?DQvr^3j%3(n_Cb411>5;R
zh?@OG1J`P5NwFd8v0}#BcnOvapYzZAFa<zw0l;MCrD`Z3kY5|^e#52E##gRzfEPpW
z{Lx`OdW#+L+Yy0)wmwgBeN9dROB$f^ST3IB`Ne{EGI5@-6Z7%Snx9Pqm+$2HC}aE`
z=?Izf`&bezzZZFsvvwOx9UhbYUNd=h<!xwrp=-%ib`U+=BR*=}7ZCto=2d0WJ0`#K
z#lc(heCYoW=;f3MW^}<^xt9YPPS%G9jD3Cf+nviU+VO_t!Codq98xQ*DcV1fqd~Fl
z=J7Csw3DWIr3E?kyGYr1-(^JvLHXl0%A%H3^aM$2nlFEaaD))R#z1N%`0!?t;%&)=
z%`Rn_M6;5;PYM})6FGy{w<+gtvU&jf6&%N#bdvVG#O*c+5K||8PgPBu{~kEc+qJ@9
zf7>tq2N1s>q_xTm&!RosGx%1s{(k_<+r!(g!IXEOZuzrRcM9A>>S_0_<V8mwm1@92
z3J-oAHWN+?RiWu<yVztR9~rOc9%y-Pk}bvCzZdfhkh2b4Eji)OZveo<ID?$C&IM>*
z8dhCyS4dk3-uci-c?6IOMi8kG!A2xB=&;OLo%-?f7Njg90~wJ`oBIByx^A0k=qb;C
z806J)La6&V5ZORmXL!7}FJn-IvLr)|AB&nA@W_y;kvbL<3DNjc$DeXUQIv;qpw-$H
z>Z+7^m(fQ9o0o8o)KSWqf1gV%QA?}(6ES_wwer~6XePZTL278OSmz1f<o^4rcCV~G
z!t5rbuI~*~$%f79XC!vl1(>j#aSVj$!>;iI>T38IpGNgcC^ekPCG)|xHRv%Oqj?q5
zfzo1jOJ<P^OLw(_@V)g8SI%a0y&%2!-D^R|t<TVEKgn98Hyl0}#_~_Owfr_gpwGTc
z>1LxY6N?12-PW<^g>6#a_>ePxtIajdo?FQmfS_uB88Z==@)P=~Q$WoOMhtXZ(0a)i
zb;g5tg(kw&0kR7o9r%nqQ57?Gk*hnDLvfxd5Vz(T_`r$>&-9qqVH&{3Y}<JmBo2r&
zRrEIitVove<(yE%0@yyH1|y*$ZL7SPkJJPD{7DJu{^-~>I4wSOP?v(fZB8T83`6f|
zqVGHzgi9#th0H5>ytJ1-s6}}6D&uAZsbx;$p3QQOW#{;W?$?wVi%|Qney<@^RXXsy
zX;<ycvg(L+0wv1nBPN5m7vab?6Rey__h>baYc>;Sb=7h}srPA$p=vjt`u@jRnd4N{
zC1x0lz81oekwMsC-;Gd>kLHbd2Z5FfE7S+a3jk;$f_z!4?CRj4n=ohC>(KIoFtjzC
z?Jqn5Cx5_TIr~CumCjPS04RM&c}MNie39z8HPQ{>3gnOJpieF2#+LPl1tjM|B!E76
z2lQykZPM;K6EnJkS+*4)zQIVRkjkg2+$Gm8Ey%t#l_3Tao!{yZT%W}q5ICiKimZY(
zR>3Q_<J~hKC_2votHRSkCjeD(e;l|&Wo}-@GHAYIom!p$ZFOYhZ<l?D`;G`}jFeSF
zq^uVthXmbAT;e1DR}4i;P;5;GnnqpnY^M;fuB2_mAL}<2zIt1M?ab7r62yymK%m9)
zz{@*V94x*4-0KwmN;UL&a^{0hS0)A)(V#)L>m6Kac_L#ewN}>V;(6bvGC=bDYIZkE
zu$k6P(zoa1E;W;ZN+?s0d3LTX87zrNcfsGj6Rdv+?T}6IILM<bmZ_kD$Z09s(i}sk
z>=4`?-Fak*(9w~)f~<W$w?W#xEp;6i9}-2SJ*{B^($rPbM^9whZm$ZBlo)-ygDF`f
zm)M9fIoJ)O@M80D2}YQvX0_-Cur^u3eU!@{Fk6Y)%^wvNU5Hs_P-cP=kQQJaf!i{u
zk3TlOGwtN5`~65VcwEH2=gZuio;ll)V{Q>14U|4BF4xFVdznFRy=DjKpxRt*`Lh{W
zsq9rm+Zu~)7A)H*10cpyqi<mN%A@Nlrw8Kg_D9sGAO@Abh0r_Vr3yo<&EH!t6%8fJ
zE_*At1EMT4RnPexUyu)^Gx62f1Uv{X9QlO=R(Fby!E^+byFbSncw&TkjNV^EPwQhK
zjr#M+vz=I%&rx?9Jd~WR<`M4wh|S0CPC-h|iZ5<M;?f-7=O^t^j`OsHq`)BItjl%7
zXi;yixE!W{v!VCqU-Bq71_Qw`uIAQhs85Or9OaEO)A4K(A#6{^?W6LhQ^52ggan`M
z-_oWNsaXJux|Tno%UI`h_7(dGrImXF0hYdOSUGgiGi}UfYy1EM_M`=GR37-j{FkVe
z*8+qRX&x(~_c?7b@4D9h&reiB9tvHYJju&m)aL8NF%@NutFC0kS<m9HZG(z}Gor2;
z!v2MJjol^2>npW`LpA<o{+(mX{%sOE&v^fd-d>+Kq+(E+^Ptx)t_#ubawV@db!Pzb
z3~$vhUGfyc{#GHsv73T(+nMN5-+MW?Tq$;haJn}?5@gjQ&7kK*aZq$tkFC09RmJ9*
zPBAr6+&8P#+JbsnW;Es)%xq5!>s=#}YMl*-cu=^xHw0w;24S-U0?QXRNTT72fUzaZ
z@s(Rmil*2=)knPoJB2-iZ?rGWyphGXkkDp`rM1b?%Ioh~7{fZNrAUxq1IK(`iE?}!
zSbf3Z*K^h6dB$W@3pLBc`7-WV+5nX#mT`sRLV_aacQ9db-|zx_fsp!qsFpYlg&@G!
zN!~tI8PNBx@ztQ!1Q0`_G;}N>g!}H)SY6VY6sQz54dt8(Ra>vE@yxt=_6WmQD%D$o
z2ZBw;j<wyDYib7-p>PS7CH+fpj?>LIs{6P3BG6*&LhrzMr;4;L0JhWA`I>S0+gjkq
zN-!bO8;P}YuD%HZ$Pd_DF?J^jL5^Ak*PVRpBoyMt71l^9TU7iH7gbD~8`$@jspydX
z2g9&Qssy~Zh?i&2*iwH3Zi=@B1MNo$Po(JGPkbyO!Nu!SO!axt1q$au<%m9Sz6w-J
zvs2|@09cf+#b=yLG1-%|7rj;3zOi6g$viI2{#CX-<KoRf1h3o`dfio*14xJ7Q+f9I
zjll$?+@=(_X&Gu+kIM1v)Z-g#O2@y3g?(|8<p`KES#r^P=Jb5eGBtZFd`E_~T#~R)
zbWN{SR(Cg=?5Oik{ww4ojS5Lq9%mzvt#q!OfN3g(Xll+#)-2)H883b4%JoB#qN|dF
z7_6PT*g2qp>=V}_+jpg-jw;ZAit(==YQcR$S9J8+Lq8fR$xtM}(3?_W-4$=`c>{9-
zscDnye!5xD0Na5{#nudM<m00&3CEF&Ayg#FA*^e#*B=}hQs`8DvqXG9-N5_!IDz>g
zlOe{g_el4%6+aa7X!Bx_v_TO=y33gi!!e@>u03286dag!%KV>GxSm#>Jox3q0Nw2Z
z04+){2t;N;F4MUme-^CwQDz3a*Pnq`d}mtScji5bt(Ql+Y6I72_W<~HqT;rvrYD%6
z%Hv$$KsO8z6zymT3EYsW@O!$;D<6FNmk>yOW)ER}Ocm=bXtt+h;ZQmeG~MAT|4)_m
zUU1+}^#ClK`4LqBfy*<&Nm?m87lv)Hz-eOUjfj6llUm5qV40f=gkIR9z+6~_d3p>x
z&c>fJq?<XoV@=nyX=)^*2ayPSfPJGlQ3f+C5mcjQD#=pIi7$57&Fm>gOQ4#403jPj
zPfe|?;?Ai0>6EOz6O-Yr5^YIQf19raDBe<t{DRx0ichwY82#FMtH(?epsit~1;Xy!
zC&#-GtL?8ib0adBZeRdZfGny6lZH`~y*mufVcB)trFGR;MebmMU}<8CgBe?P)T;B-
z=h^6J<^z7qN!Z&l3l&ddb2GGCaulGi!piIPESi3tZa(yLiEaZu&r0N#s3NCC(z>~+
zOSXb5X5eY%R)pYvwK_ZDLh574Re705CT+4c&Fqevi)Ezzbp4^maOD(~pLGVc9uSGE
z1uuCyv(#+yqr#T_`I#&*F`uwyQji*HN5QfSeLXORrXNx12A$<4Agx|r$yspwCJC`n
zg)i~>ywtgxbQj!p0+)U3sSg?_cXeuT7G@as2FeV1>Ca3|Su}#e;Mr3*h&Rq{FatG8
zk#k4rjp!nc-`<=~y;B`4a88iWr7nU-`GpZT4?l}Ld$d%_(%dw{pJ|KBUGQBe?huag
zY@|%_i4&$HXp7eWw^8=)QgYw}u~MJ)VtZOJtER`fc@zK%-J(~@(>W#SNjYbT_ve2t
zT*vQHFg}xX%jr%CBwgWgv=c!4j5!c&T4Hd-Sa04X{ltZA6GsBSrd<Hf&N>hI?n7pp
z9#uq=vA;t7ifhqCIonz@I*2z0>b3N2Ez=gDea}X1oY$<$m?Lhnwb(d5|NBT&XOknp
zpl6y)t2lqz?0riJ%z{A@9?#_C09|c&b0$*03|AnSP;LA!!=WLX9X%m(1G~<EY2*m(
zOi_c^*#UMd1}DQY$HW#~W}gM9)0sz@RN6HDZoTwKqk%>sa6&<IxOa~4$dJ!@j-(cI
zWpI&;Cw8fc0OVSEXthVi`NP~NPE*7tNb`1<Np4|=u5(#zr(oVEcY4p^ZgeQ!@@*Sm
z00r-jIVOG4vOf;^OxzotdH7|@M$K)fj3&;=b*dnubgsW*N+sPXvI`0<u0{kOv7~U`
zzKu>mtsj>M*Z4xg%#Z+`M9<EAWEQ%6t@YmB>_vzs$WU?SMZ%cFxGFT;>p>Iv+j$Cu
zp4;aM*;n~Q^z1wbG=8XoaY1n#&K5W08ledatU@OkB8|u_%vE)}dRM4nI#$%XPH8nB
zuaf?XqfqoD&sIFhr-<+L`Wc{skO?#{`)>fM{c&Ot95S4kUuD8vLuLJa_#AV)Yxk7%
z5B-<Vr*?6i7>x5b6|Km}J>EtX8B{}*Su**F>+M&V=Fa+Q9l~jE)6I!^qy5KbU3z7H
z1S%h;H%EEY+G((jomLr(dZd?NX&Gx=q0aTvu~n@dCKEcV%QiF+i`tk=kjo75{u~rY
z_$F?d9;klJ_I)MpKipIn|28PKT@+#D2s5TsV{=e9cx*?<LHv>y(myF4QMY6;X2NE^
zIw!$%(8vY5yz1O<h%3qM34j93Q;Q~kLb42TOl*x~;COzOd4@>O%fE$1VIa_K{!`W^
zEP-mB@4U033@%v4S!?_}I9Ya+nqeuYU$j>f*>}ROuP}Gh`Oq!>;`^YEjWRu-mL87F
z{i~ySGh6ES1qK>c^lQFOT%3^<-y7NnQ33ym4G}D+FHx@UH3gh7pSYoZFEQ0JxIDqX
zY!Y2z@_tV-Zo1RM$FDsI>N%sD-p(IV;G`%;08m%pC^EHhR_r`DJXj7W%^W^+A{B_C
z`I21yfJ4ahwkVgt1G+6ImrxSM&|mUzQasB#3slH*lIMn&yq(&2v-J+ttclJm6PC*f
z#*Hvy;0psOaXDXoRfiX0eBrv4kFEKt{Cr&zCT!ZP!tmnmZZI$qpA>;b^U=MJn3KGK
z8A28eIE6WRR<`-+LusOWiyl<yk}1T_Fk(7miedL9E-sTC$HcjD3DC6n%uxY=v~2;P
z$JvH?%I7+o8~4Dfhr+5k5Pp!3^`t$=`!-I73l90dlBo?o|07K(l_)<>Xs-?;j$UpA
z)6;byQtgk)qo-nVPm`=mcV{i}TFz)732S=*<8*(M_jx@v^6rcz=PRJUMp$-Z`B~;3
zPF3<$M-vaxFie_GP#mTYr^)Bxk+~b|`8?mATw1{H2P5+Cx{o~qsQ~>s=elC%iBSpu
zm{@5~ZAP!+OrpATLpa(8qX1P}oVr5akLhQIGu{H2k;0dDgJ){3i}yqk<&yS)`CqI3
zfQJ*gr9>mz=;IvARRa$reUe(~Wn2xqs~pc9VNRudDA<TGxCO7x9X(^cb3jWGDagKT
z??567Y+Kfu@wv?La7oV|nu(z*s{Vp3YLur9exkDJD)p>HhwAY;N>GY{kZPCKI9f9R
z2@1^2irHRl3xrn0zh7S&?w)&z=t26aP`v|f2_VeUlgBbX1!XwWDOjGhg;ZVYuMq-<
z8J#s(3cw>U;J?}@IZ|rgp2E;tL?w1meMbIfB~!&l3B}8v1P&s-c{wN+gIESm_E5Rm
zTi{#&xiXd4xO8p(sdrl!CL6C3Tk=;$uub~8(B1f~&Zcxto^~p){tv!B5!OK}`^9x6
z%U=~ZDk&6Y6J>t>&VDu^R}HDhv~CJp#W3Wc%xVCok^jwWenJ<m6}@t<9dBZ#!P|N2
z_PVbR4Dkk&@`G;k!?6ddsJo34qm-+Selvikn{+!>W7!_E5mC8GD|bkPSxhfDysQft
zc!r@NYT<SZDps9ud-9$9oxEgMNC(oFa>|qn)KJ7nba$htO}O~(V+jk-<VWb0qU{iD
zX*9L2fKL_KSANE~T$oARuAuPwBG(gIfqG!z4eWFje<%fCkvl^<@ateG8_b?xqNT%G
zC=mn34g%RnL9JNyL1Q?gU}DH_;?7Ym%G1vjrl*0CrIDj^p4%F8cDrh_jKQ0R^oq$%
z8#0rRazDa0+KmDJZ3qi!Gm1tbxtoN~ZwY;5o=Ll#GCpl?j73gnIFf*Ro+7fBc_xt6
z+dH!WQDMoaMh1yNjZ@f*!x=|xAZPrPC(~m<gYI8^f#Fc<ZQu;A#=Z?7_E0E|6g+)$
z;FF=<Ta(Qb{h{G0cog$fXgh0Wo_SLEb52m-b}=v9Q4G>>8Pfjcd!TaHo|`%mk^jov
zei$D#itFkgKIq^I<)R|J_VGNp^rH-BcwsklsRxL+6f85G9|WHZYM~nG3KOvl+!MMN
zsM?j-eaNPQA5`J4f944})<*0oko07jgS3A@+3TuZ8$7qSx){%H>JtAou7?J9<s;?=
ztE}}5Sns$|P|<1g$}wq*K48IIEwnJ-Kk|gv7O6$Ruy3o5<U9smHmh#<fC#tMH({D#
zyE>a!tOio(_&`rZ)Kt||f)b02O_}}d5%9|=oxC1Vwu1=$D*C_)Mv1H+GdbQuZ*T4Q
zf35S&(K*F&-ReSkI@g_CHH3Ba;o=b?z52Ik++Jgc>s<t+KJzs?!Jimc3j|lS+?GFR
zLTOesfQOsOcD0l^YcT`cb51m%eG<xD;w-e*0(pwXt1Hkb!6m={x;csX<A&P`pRMRe
zT5C$xozy`qVz~dEEKqrE1mcrFvHQn;_uUBf-8!erddc_$ui*)2VQP}ZRY`BvajHSi
zixyNh$VuumW~@bqzFPd551K9z_cgzK6_KdoYJ;2jq-3aIP5sf%ERLq#)KfB;?^IaF
zMLQu~60T<;64<qfr;)et<MAtfAw6A#LQOHVPeE1$sGE>EtX>^-@zWC9D&&9Y%LhA_
zkLCZpBUNTORz5&WQJ&Onp@O0cHmHmS4X+pn)Rv&jOOmYXjEb==2-QIuzRVwjSYuMW
zt353@mS|DsOtF`+e|r;a@5~}pfH@N1Lg&BfkJ^2_@FWof8F$<w&`WKjH!`uz>arkx
zDg;&?f2;K4XJ7W$ypH`CBqWWe`e>=1n)&wA!!h`8>4pN0ndlaXv6A3|CeR$O4nC5c
z0?Wnl6ec0dFi3beuAz@TmZupO@~$j%R`~qlQCOxQ&L#jeYTdUZ&wO}&INAK__IW{H
zfV6~i#Zhf*)(Hx@h6JeE`e}va%zpMl?a*0wYCkpDbd2EA&{eqheiT)xo=SwL-6869
z=@91*Q|4vfvQa4TC4uzRFKLoyn`iuaaXodr-#M$wnIzZ@G&fLZFLOq<D?ykyQTdxi
zzl2>u2L;_CKc9@*;I2$Y8#$-f;$&Bw^kzwm_UGwtYT<*A${5NMFq0{fX>&3@l~H5(
zzIF|xF=8%h{rr?e(*YBa{~r6MT`(M5(;SR~#DTE3CC|a#TUB0w#gMG!&D#@g(oR-R
zatmByoOy+Mp~Bs<PY<_Hmd+6$S=$+g@!XMCzQ`tXRU?PZ<0s18YzYK|n1CNeZ+#vt
z$u(LNbm(5!j+G5v_O(LLNq$9>C098}x@QaW*)7NHyF*qHIlLdG`1J)v`b?*Z<>7t~
zd@d1_#M?;lva9`i9!@QQ>omw0X_O<%-KyQPg(~>lZRaeR)BJ;u<yM7As3ii&8-e>x
z>Gw)q0-}7IBBQ5UHzG>7@!54+d*`&{*F6CLKLEfvQNH9Xv^r|W8TJcm1Pfm|j{1>1
z20A;sN3GFo<V;X679HnlLjd2XQiY#`@Ov)$|L19^nGyYz_AYsKCPc>EVYFVlglQj=
zh3o18-*$}atr>YdZ_qoKK2p;w@vY{vCiN2BsNw?%l|5j<#NVGJxTHz63}}aIypS~s
zLt`ANCmxra)SSFSv1ZQSo&Km4eyX)rY?v=n!?KxaHS3nVt>wL|nsxoRU7E8{ReKJ`
zh)D9-z?y}_Tm?ycvgtN@ntr`ORH5oezBB802g(1{Ck0JZsP#mc<m}(pYI;aXOlu^P
z01d@gP0OUtx^}In>hxUmmWC0~dV=0O8SX$=dog%B>z)qA?J;x^W*dDfy>WIh&z0A%
zNB=|WVeoMqpWHK}{<BYr<-a1{2<!Tc+sn-M-h0EswrU{CMrcAwKg7TKyQF+;6@hEa
zXp+8ga&;0oTZ|DA2i0R6p3OcR{Fv-#*_=0L=Nb430x27;5!tHD69<={sse|v0+XR#
zb}4{EBIyz)MNa_sBqi_t>Codrr+bxm4D~?2f43#?8!TUusXU$vy4Ls+4V`YXv5j;L
z0eDsum_9kvO@qqmsK8N`s8w8*JlE=2K1<FE2B?$py4G!N{;0mAW5^<`?ks}s7C(SE
zNRnq|3oJ0s9v@rsHl_)jno~C_eo<j=A@?PNafL@|@twjC#siRE2wlMbvso_&FH0>g
z^39GpR3cDbN0g+(ynuxe;kUlfGWx0r{K8DWqHIoS6V#O1LKs<eEy!0PMfA0nl9b1N
zf5fPy#mXKl-R-J#;#9qFb)j%}k`bGM^s-CE)se4r3>av}Ni8P?y7?Ij*)h)mL-1Y~
z&(_M;f$q?t&0%N$ml@QB{m+0#wVR>e+W=~jHJDDtiv{*zr<AI*t;Y^8(g3~`WUBR?
z3xe+WK(k+J;lR8}MWZ~TcVpY2t#brZOW4IV{sOS`izzhw-OUpI@q;Y1m<^F;o_;mV
z<d`4JJR>$C_5Z%4wzorz0~O2V6&rKM=`$$ZP*YjTU%G<O*a-99+Qww~%fVZy@^!lg
zSsgsO7J3r52~@KfT43ygTp&{gxRIxAVpfGhdwDJ0hU^by&e}c!f87%UUY7v?Bu=7L
z9AHf;o|03WQb2zYO@Xr0K#Kt^Xp0kgON!hjxOOr8qHdig39q3$b{1T(<KC+)_%R&p
z`K1IfYkoK{F+XJZv4o@*%y~WT0gTqe;$36q8BYk|)@2e)Q^+zrC-faRW=GG&>A{8#
zfsRV^QJQLv8Bm8KjUS0r1FqR<TfQu1HKEA`!B<7u9FD1B;SMnP*t)ypd&soeWIz?G
z`gE?Yrg?kaC@V{YW>q1LUzRdsKYWDWWpQ{_^94!_4-<SZxtslUENd#*U1}(qrRD-o
zg}OT{wt6>Ks!HC4QQw@pE_#0H$`WcS+N|i4KR0x`k#JJN)!l~)he$fdxo|Idokm8G
zMsOtq%-sa?MV_N5;^W@qeY1pb`jVr1b<JKrI|e|J1EqtE8x^^%J)o_|j$FO?K!;3j
zjxuv%<`A!kF2Zj@TWM%AeC}@UZDua!l?i<@=)VbJ6!bQfoTFcQTnq1h5a%Fv6u&aL
zSNTyO-h-F*G80(&M{vafnJs!By-P;@e+>YD+%>p&jbu(O*Oc4u!2c^=t*0gBa}4`_
z|Gi2aR*V2A!;RldD|mI@82T47ZtFTl+@TCnPpNg;Cpa1dz(Hcu_G;!22RXwqZ-(=D
zjIRK%35w7(qvB11kZ1<BeOp;=D&%R#g;ZqbYq`fh`}G7ss|+{1m{>p%m+wG&uL|6!
z#I!H9q3ywc+xEPS#Vk1)@d$NoG0&S860BeD3i~ZPcrXabK8-yW%HW`ONZp8EsG{o!
zg+aEcOgRo3a)&wG5jTyHCBHeJ$Luga5F;iCUXtOUxTLViYg-9a2Wn{kyh_y(mR|nk
zCqRE?rV<`)nx0(W-g~!xqyl4J3U&KZX-HOJsqm(L?_ZLEv5C9-S`kNV34xe{3rb5y
zR?`pMfd)5MJ8O?8uy2-(?NRc6D`Tqf&1I9|JB>>IUc4t*UV;V%a(A9}f$G)17Hq<|
zE{}r1RB#rfyY>GC9c|NNzOMX#^`$!;{*0+P0aHVEG_(^c5?;lNgo{yD;%)EKeM-eW
zFO9b1+MVySyr}oOE82tu-r?}&XRJLu(=j=6SBLIO^Azv82)=X+!inHFPie5d-YS7`
z!gUwkUX=>wOCc7u_xhC$q1i9zmq{pX{oAaOgF_n7y9<kW<T(@cieYEUZIsY$Dg}}>
zU0|9c8X(i_d9zH75i@7YP+{;1Z_kD$F^DdM#X5rSpGuU;wU5_GvN|A>Qortsht9Mf
zR7@uEA<hl|8#CO&Ysz!Z>u0fa2mg+bln;|5cq)-`Vk4ycJe`U^i1a|P^a88nT^DRL
zqr0`MRTVHIy}3x%{c%$$Cm$T4;x<O#=1Xvd6HR7u<|uahhsFyiNPpI9+c%0mF8s9{
ze}(Nr5t8%yY(WXgXKyMI5*qA2JMeDZHjvl(S16YM?OAU!#A<GYWu4DDa5q~4CmFk^
z6CkSuIvPvJZ4Q@W|B=*o#ReBX4)~(}7>m4WwlRq4Wfngn^6>^Vt5NC*>Gj5=9W@NG
zkB4scE4EXxeyHSrqM1>Odc!&s+W}@vh>Sc91OH8;v2K0OE;2%-2<4D~dUumS%1t9)
z4w}bhWL@icM<|ylPJRW@M4L6mWLnI&pd${UY5m9q3p~jdIz~)MN33i|`7WX`?L2_@
zx&f*iM)byrd>Xhr;W3yr&O5iG7XHO?$9F$r>(Y!U4o9K%lp%=fcJ=cta^!$n?UHE9
z+%THRi=<HZJsfs^st4%M(t~GZUzq{FK-_dqG3oXavEB>sCbrwcd=UPfM8LW%h21DL
zTAzTrjZ^MeYU$&6UO4H#9os84>`dxHuw_e%2jJ~7+ObD`0+mx1$g5+hLIdy3PN3s`
zmK*6sv5SdX`pri<`Fk{bmlJ)$V}?!k3n3ReN5|?itYLY3hM^8w2HP^`)dGLeph|C2
z?Huk?6%*W-0CSrWO&nYBuKzk2yrz%^R<hq`Qf0ohx*rAu7R!S6USR~b+yTPQ%NS?(
z(evs?m#ALfQd5{}65o!a1bHPa++>XP#yc%ROVEH?*OC82mixYMJYQOCoo21rkO1Ov
zuo?cX(ig-}$ZmiO;swSTKT8)h@Zt}o+;fWAS$9@$eryq|ovmMrW8~z%i&ALk?9xkB
zuFBBhJQ)+PlFzO=op=4^E>+-E0l~Hj#1A>>E#N#NQ!JRaoc9PmCW?wma(?{WzOZ+K
z567l&I1}udm_WiN_0ylYh))i!chv(#`#sy8K$K<m-&qFZQ77&TcG264te5-3!EyHA
zHJy#WrDy2zf}lrmzj54N=HH5yff=8>6zeq=!Z$;~-QbsWUQ+SdjN)f`wRye(IK#S@
zl;@hsn9*LLJwVeCx=Y_wVecfga~!Fcdf@2z5G{WWtoJ>-*wCN5wV3{9-h1ioX}H+9
z31p2N<DE6Fqs)QSL>cioC8=tYUR$=?OBEtqh@~c!4#ZImoDXf`1`zBzMl-f5zP$vj
zpRTz2j(IUzwM2y%g=h!aItAy@QrJOvR2#lWYc6S+;`Rk>W`xmQ&sSA(3?5%$8S<-L
zeAsrcqIfF^hf2&%_6-$dkkq#$-FkRd6(8_^5ivv$L^K`C*PDbxyBp0!!((!@V7TQ-
z>EZpPvB(nAN;N2`HYHsXO1G516wgFP5s~>OA)-P~D`^j-f-ll(Tf3%<i=dgP<08$u
zk4>{0`PkJ>x3~<fK2ox<K0PE{suaDhw&hJA_&4QuAy)RNxK%gbQXaRw;*h2z1f<4D
z3e+r8XNAafPdEB}>fa2KnRR96KY?$YD)@tLyXel1;T%G24`ii>B&>%i!0}QRv9T!N
zI<UI66c;}4re=Uqu(XuuM#vV%>ULq{I?3ux1#65l-46F%gL+J_F`H?ul4={9A3i-J
zui~f%cjJFwS7G$GLqyjOI&BA(tkYHw{Dl6#Ow!!fD^p`!jrY~_*5ug}){=a<9A39h
zF5#-n-5J8&in^ukN^ylGdDt&6P6>$xu=f^Yk38SjCmrh?c`L+@p`!?AI;x6t^*}rK
z8LP*7(Bi9oa(TfLD)Md~y+FEmh+M1){|aXdxGL3iR3`})U_(!bHG#m?&X9=28Em;l
zF^53Pe&E8A&`tVbQc_e&JK#E73ymxoE!aF|OiItSfRHDfMFM6hfODfR-%YaufMO}j
zN6sqCI2@7zaXx;RVBI?~Z5{6Cu2Udg8&cd<9;SVT-rADmYFPxWelLMB0q398*z&us
z2^VG|)SYd9A2<5V_>dx4syq?c9akjUmOC@Gz3XnlGenUBUZMx=kO$yEEEo=EQ^SDz
z^u8qA-RH4?x{A-JW(9OR|1>`xq7j+^an*i(|7~;6+A7;e=wpRe20nw`)Ms=s7`XWM
z@LBqK%*{gjpwjH{v*Q1XvS>a-+{)?$Orkl?GDdVLkGu?<WxGU<*PxA-eRpE}MJprW
z^wD;@E2#~^hto^6pBnrJqfdo$A3mC|jS^Xf$4-QxzME3b?m)RUto9X$f&fIQ4`dwM
zIbKL<w;*(UwEEJb_q+jIKS17QJiSS5XpID?r_G<{c2{VCc*eoXtV7&9BAu(xxwf@A
zxwxm#uYOzO`6v<*7k`3Y<KtWx-!X^tUe(R|mhgH@hpJcOkglkLlihRe5yoB82FLrG
z?W#;-u2C*Q@W%jK+Mc^sJrnfb=#y&gCNOK_7`Rm%zoSz)6F%RE&lEejeSrYc<!1Gd
zBL9kT@na8mJ~ke_ib?CyDTD8qF2P$;SB|9AB+d~&nwzc%i-6e7{w2$sa&=AS64fG%
zbyv7-2sZXP?DwVy3Jr0i2m%<aUvqLHcWn!2B+v`d3xUjHTl+nb&OiZEjGP6)D7lHP
zyq9C><i9T~1}(WOl20$6Ki34<cTWVLjGNiFjq>Gaz(Yb}OpZBwvNpW;1?{}j!JEYl
zb6?1eVDa^`FWdYd`^2Y_((r|lVvLuMVuiQB*<7X=XZNdSukgliA$Y)C`5!G<zak;P
zc&Wbj9S#G9M66&KAK#N7OS7bD=fZ*uPjWEDGC19|bf*a?1rx4&w=B(S`o@+5125HZ
zj;d|<wuy-|23zQjebeUcOc*Q|Bpdb-Zi>Ar^};!zXY{f(I9&n5RfgTUBdbcE7&x2?
z>axisElpZdd!HzJ2a{M2o8_{wx6P@y8dgZKb~>&ROhUUQC5S3v?$@#*$MU!?LgmlV
zE=94Msi+X7+sX6N{#TP|EsC&+Z#7p(i95|XVP2(E%x*TP{NK{$k*srF)&-$fsAOgv
zl8++x*;2qVLJRVhoPYeHe}B{9MdiA+OHh88r1(eD0rbT@&L?am@VwKz%OhcMDd|gG
z`XDvcTbryIGc3NuaupgLi_c~8^LuD(=p9!zX}g0-zmk5b`(5>Tnz$-w&yNt#W?bJK
zgVTdPwaU_@$@AqK(WPV=pT)=#_997p&Mi^Mz$g9NZP1J2C-JNjfc%lWh9VyL=*=fL
zZpHPMwUO1#>I1ADI=gqM6TK?P5V)y~b*<tNhhsHEpC`x{c3r$QXec64-P!$L(Q?y=
zfpWkp$bFhXwnuqsy9diD5__;XMMH5PCx*=qCa*T8ocYg*;=T|#E(Md>D`n<E?g-cZ
z-J8Nf>X&X*%M8bGq|Fy#o@V&tFt3i}f)CGFWSD0LUS6bnt}D24=p7}Uzx9$z<s!rV
zqzNms586eV@S3a50(lE0pL@K`6(v;rFxzpqDj@)POEV`CPDv%I$U^bh<`JDIb|*;B
zMkzO^EjLZmiCP^OVSw?EKy8tO()_e<znb8r?`UMeYlA-L&jG6m9Fr!Z_xc0y>R`Cs
z;mjH>m_@BNJ*B#!wOQ5?Y?Hm?Mc2uDb3&?xANP4)>C9#I|MLQgf(XsG6a}NVARos;
zhdao?V!M>(ifhM_Rxm>*rK?uEifm8ZE<5XND+MEMoi2rdQ^OdnqgV87EZY!M-0A1o
z)T-+z&T75W@>YW0566|rS{I7%Vl-IeURUcfRGBAH%Iq^;asOwt^C;dL)8ix?Pbqox
zVPrH<VRuU@1uqRm_U=5{OEIi=04`<C{M9ju`r?0|bho-8ZgRKumD%vkj~vr`FgJ8`
ztE8>D@x^vh&X%YTI<9^4^j8hzG_-e2*}We(Mu3A8AMQ{}vTy34kTaf2Ijle_-{QkC
z5&+&;;N3O%{a;LJw*&=_l${nI!Ruq~obCT-H8vdG6#JKp(2QSN>4b{ZGE}YbnB{LM
zI4Yrr8Db_}_+A}_Rf7ou7>t<`didC)VI3kJW_kEk(p{@)uN-oG9#KAG4$q*{s53W1
zZaF<;vY^;mCl#ai=K^@ADpa8jx}l(3=P`rJ=);o)g0sjm7Kt0rq|~hJ9l8g|?p81*
zEv<m#AP@-Bi3~&~^1r{<*~157hKH~dXtG+(APlu#TK>b;cmITPAO!~4jWz$S?t3@i
z{6)uSv8m@9iY+z1G?;(I-ccuP2EK1=qEpPl^UV^Oyf59?8=vAw)8hWzP_^;9)EdvC
zZaK5y?;he$@9H%ZzM4KH;%;nuvw^=7XJ?QKM?t4g`-Eo3wr1Y%ED=fuAf6feK;o_%
z5N5x*LmY{;&yL!-6PJ~>^<<r|eVfm-<jEe|<X=bob3R^|9%t;Po2(n11Y0Yyh_o!@
z&1l=`?288B(OyEZYXJCI0a<#VE_(_={ASrg0fAH5(|su!E}K)pr_!CY1=Ij#2RpXC
z<*%}SJ1`|VzGH2uz_c1Y^uHCy4U9c+;dy#^C-DjObn;<J6hZ3Uv!0E89)${1eE5wf
z7=i>GybaB*rut0>Aw&h-O|*nfzvzEtu%tr$ajS-#W&hBxvb;>@V#_7fi>hBpDmnOG
z+P=u__l=PJOPl5b@=hbXpg36MLzgNQ;x5Tb(Q~@qZ;ZSpmtG3T52uEA;e{CzEcCn>
z0t7yByk~zj_YyUx#vSJkJM`f3L@gEN9&z#ORWR>;BK<lg053_HRgun>`Z`N;xjU3W
ze3UY-E-HRWx?<yZewBv~R{iWsxmU^1c$WVhCk2tG&95dm)v%1rM}(~nc<coz^2EBG
zL=p_?cI%O}HWuem64q038Nx*K4k30yb;S@??J&AlN)bx;OG-cJ)uCm_?CZR&Z?{s8
z*<<ogsW0jP$+5;j_I4?Gld7DM*bZwYWcg$0{Nz53S4v>RlYrRCMM_MH0leJ(z5N7r
zSxjVkAHdBgFA(h&RiaVOWAhxhRl@XmT*Ahu^mK=i#g3k%%a?&F#E^pPzR>x5#uzB+
zTZp~tn7P0UjhQF@G%d}Bf-bJ(Fb?f@OOO(;bBp1w1X{q(H~Mof-m%E6Y=pq*oNvmI
zpjCb)@T~I&@EfbKLn<xQ4ZbYpW$tedvrWn-l(U%YfjSgR(@bJ@XyHxhPO*Z$Fv^*N
z*zSZJKJcPYTR)Aq9gbkuveHC$L#_-xo>^CMHsl)YliGjAavngb{4Lw@Hh?fRX+Ob5
z;`EJZ@OWc2=vF{SF8ONey@vl^erUOR2I-^PX@R~cRQp9(sl{xAI~`?PyGeaLo0qe$
z{T(Y9FdV5}Z@@?C$EvsCKfH^^bNAgSD^xBBW!ze^!2@v{Z_|)-2FknR6)QlG>K>ez
zh9U-vZ<I!Jxxw7FKpwx<aYm>n=xmFi0+e~Q7hEepGe>s+@D+E)u^%qL8pguJpvS}3
zC5ZI}e@Nx*FI$lGdOtmZ`F;5l-l3*uBWifX9Z4XA^j*g+v%4zO@e8M+YmqS%qi<hV
z`X~zlpmUk>hmx*3B(7ha>wJ2$>x;7gyfJ0=^l>zZM4Uw%sr?M{u50_DG1`SXO+<7*
z+~S!lC(DjIiw78aCD(#9+`T05TC?8h{6&Cpg1R7Qmb#`acu7C*b31hsJwebTxY$^=
zme>4zQuehEn?{Jq`YZo`(R4p4{yKJuv8~nGNVU+tTGjQKzTyP7aHH>1DorkZL#gXV
z`m*O7wsi)~%CJyJm^||u*2M}o>!VZ@5Y!;TMu`G#J}t3I5ykhd?`5AfQG5Vddj|4T
zR@Qbd(tJa9*mc8Yoysk*{$7PIuWB@v?eZs`p5*GHS4jnE2#iq0Ss(#mybV>*fb~6b
z0-I5q`@w^8v6UR-n92$2_M{$rxZnFqn+OGy!@;9+p;r=&bplCdf9CAp*G-TJWF|eV
z$FHihXskCc9(fM8dna#1QNenD*$<J3inP-VYW5G!X~&vuX@AvI{J>~8TVw$OlYQb3
zd3T4w4N0f^nPCEux+koAQf)KTtbV;T&qZo}3l_)F)ZAVzQ-Y`cM}`ff8V<Pr6P_X2
zCm4m$OfoYQ+DCqAiIVCA!j|UZ2^Wz5U3WB6ytU79ZABsL#K7WD*8japf#Eb4bk0gb
zM`f6!2{Pwt=H#k;erk+s{He`24u9*ROBAH*pF$<}dd4Ovs?DUmw<1}J`q`%BjQYiy
z(kz$@qg-%Ez=gkN3e|4c1X;a**Ypayz(%ptQ3!Lcyg;7XoC`$KdyYQo>%!JR?EmTx
zNU6L>)6UD(@yIQg`MqIQP{hkG@G`Ev`klo=!E3+W{C|8JmuROhgNlYUhjLMFkaYx%
zXKL}*u$N14FF_9kc+ffiHvGAt)hiPLME!aM#548OAqcfCjnf-ZhSlFrRQ&&J^NWZp
z8pGsTxDzQqKi^ME%MTh=g8#c6BHJIoir!b6MEDGQUKSZCaQ?WjcBWg<v}d4T6)Kxx
z(;*WN<Tg};cb(aOe{x^%iLCtekCf>;pC!`KBs0qB@5&)KW60@oRbGLZWp8b?fww*%
zzec-~25-d>BEowh9r0agNvb_Zamn8!yZX>P6&Zq!8R?mLi=a8{UPT5qg`04&IPFq5
z&c&UEah)93sOoFJa5mB$?VFl~k=O-Mo)XeB_0;UD?O)l4&ek2Z|Jp$Q`NWA8rFFbx
znme!;(a3QObC|b~#~9d=H^uh9ZUIW%AXYwONoekOhHWVAjlPRz>92S9BO1~HcOtTB
z7#hrz>D~61qP(xLIYb}LR|MlHEDQY!5l119zPZU?+RE~W)W^#qCB~Dt1~x!LS*ip=
zv$Rr&1Of=QC}BI9oIHJxKG`op?3E24hN1=^$Lws<nc7;+-}7xK58U50Q}ZiT5_Z>~
zBvZ`CVWbVp4DEd%fMclt;=zMi#8%Jou=ZWbf&<J=zQb~A&?5V4BnxSznR_k{^^7*M
zB5GbnyTLcq{7ATy(ZL<pd+tj$O_dsT@3$QbU)z49bJeqBC|qq&-{znhScvm~2P0!*
z`wa89Rz@HN*4pb-MbY$PxbbCnmuZoh<a;({z(ex;Z1fnjrrUtsoCI>g^+jEP%;si%
zT~C$jUt+&k<z?b77e08H>bQPNRpG2<+#pu51ryMOm0i?@Y;^k!L}){YAqIwmWyDc3
zJV3*#>a^4?+Uu&H-5$;Cz;p<Iv+ec6s{J@*x(diVNcN?h-Om+2nBVYIMQy>G%ndG`
z9Nk=NI(bf+KVSEG>^`Oh-&(k@BMimV4(K3u9JU#!@Nsg``2b9P=TC0K4cU66yx;8Y
zdUX80d<~Cj%&NnAgWI1h`iHhPp9K@k>5}Lb_p27IXpKk)kAHN*HL1}AS8hpB`+#lQ
z`by;fB;$E!KMX_C{wAgP-J(79KK~~gg^=%<OTrJ_5HD$tfa@Cu)2-7y{nglNFur59
z7u4I@0no>vDQ|+!2v?~sn9j+TWFSAN9J_W=gyHveJXq1w!AZ4wzV~5dsIp!L76SUn
z!IU`Hx)&c3%LrxCN55vMukanOoK98k{cVp9WhgBnD$+%|thIAm*~IZ%8aqawXf`f<
z$cMsYO}%Rnz?`^S+LV*jEnAM*-$egV+kwgGzzqqY63VDzK^vRG<eU$U>pzd<j+c@I
z@*dgzWuGK(kr+n%T3paLrVBy0eQiD?#N3|{Ze0Ky!$%7bi79h%o8dEl1EDZM<?pER
zFrj`oiV#n<e@fq+npCM`A>nwV!y771KB8*3yDQ{rgvzkjoO^Nk<CCyATu5&}`8G53
zfdrFxGm+yc&jdXT!KT*;K2WKMD`~_vEjHZ?`(G9&>}(5SLx`izcLc7Nh~N-}$#-!%
zq~rpxjxP09wXlID=|6NEJgqY?IqJBG2zC{skb1n_t#-&B;nD15RyIh@X<%s{egAKg
zF+0D^F-ho2pPg+$%)U9fSGu5b#JhcS3s}k#WDcaX7@4k%GD2y(K|iupD}7IOv+_2N
z;JQ-Yc3?E;mj>Wm+jE|$HKz?Px?2b{&~q2Li&-4Q!Eryy%vxDWa@Ld4yukIK$;tr<
zr^B8t2(00j@)2+7!8*ReL7-mcM7!XpGj0Y~E0@xg8zT0rF4qyolRv)wt!F`rW4~|k
zfu}el-RI!?4O1>0EA>G?I>qIkASU#h&<^NvC){5Cu=BV*RHzw`3=%l_54~q9cjDqU
z0;e4;khBXP5^zWjx$kuFM52I6UYMsWMZN#dwaNp`Vl)8NXbo~vAk1(zlq4pD^5v`G
zcwH68$KgX<E#g#nvE?74*sl$mn^vPdX-`~OWb8ar$Y_pzf)$NQz?L_8FY>`YV@|(i
zE70^YpdnJYmQ<5r8LeM%ulMo$i?yJ6lIdlK1e7e~!VAu|0&X_4AOc#nFZj}Io?r}v
zZHUa?#mYWkNQ3XYM2m+xR5vjq3>55lXGV>zU3n$h{XQVmz%uWM&)9D|i4Caduo5ld
zTm?C8Z-bADOB+jsnOO_gK7m%583U%f*{NyjL-+Oqw$)pf3wx9R-BDx%i3(r$!h<>L
zCbJQe&;>?p_<>DrsB2($^rY%jOv(I+CMI1^VTBT4l>CiQAlhEsD#!SfKFCtX>7bey
z*q5}cB!YF~x(CV{pio94`aHpXk0qz+F=Hg$Ai2NS{u1rW;Hf!Zb?K2-{@K6sOSsfn
z85DQNJtJHQ%$J;Y(H!EJn%SVCnb-+e6b62-Uc~5GT*8!U(+C*jEBz8-KNdE{dWuDi
z4V29jD}&Ru)?7F5R2G1H+z?Wk9$+0h)Efj$zS{U@K5Q_?@FF`X`x7u9aCeY6b6N<6
z5>q)~TRmV>El1O_8F}^86n|xTII4*Ow8y0OFDT9QJij8a)IngyiKxG~ytAEHvP*6u
zLz`*KlYKJO@V%rU@8cx9)%%LEgRrtm;;+9o(AR9odToM0+B$4p{jH|`v4)9Xky1+R
z{4sAW32#p0DF=^A_BquGD%4#L{a9>^JRf2s;YZv-Oo4|uq=G58h3Mj3b5}#Os)WYB
zf;@k9+~Ig-&A`C%43bXg`=uL4#E}FcEFieq%x|fs$0)^roW}zJ!f)JIu3I1BYfPsn
zb{nrW?pK|Nak`q><((a2P|zhIdaR*C#@~M|;`?0)BYZ7v(6$j23WL!Ib=tIDM&(mK
z?|VE$Jh#v)_2?E1^xpdXr|;j;jiX!O0}z|gq4aN)g{XSa2p^!WbG_hAZF4<4Rc`Ku
zGwfCW<|FW|sTh-P1HNhO?oDy^p)V0w3#`w4MPBS{;`%9BB-i%}sUj>VvUblQGxvV|
z-$4}&XLuslxIH>F??um~R;Y?FNV_1UmZrGc-&>RfD8Wf_XBnq?vEbj?rgJL!r$&dI
zT5QNU>1CXY9z*4c2Wgj-#lt8c-{^>(7@gLb>%y?m57q>kgj7<ZpWalfNPj*4uDqOT
z`JLmGdPgE-Kdkf@n-Oc<P7s(B(?3Z*vWB6gz(YW%^YhWF^zuBxj=Xp*uH~g1rp~6Z
zFZrYE(E~l$SONqK6RpRCfnmE31z#C3Gx7YtI4-5>d1d(;(!BJmHI?gae$>y!8JI~K
zY%a*s@XsI4uO~xM6~v|)6dg+$MsYiQR$vZQ+g7%K*+*|1>`hLG1;+IjM|OVdcckFE
zO)*+mEqdV(^@ax&nAswzC3p#3?`nckXkMS}Gg@F~sds&D>MCCrD~aZfsV`bDC`z!1
z`}{<S5Vd|nZ#{BcP$#<YK36=doVtgBgaA%qLMZ_wWo(m!?&3K@fP==O4frwjh@_Am
zJx_eS2MLFd)60b&>zuuT&je3JC(7HY-*U*Mlvqt-TSsfg^Bimb6HV>$di3DX58gd>
zm?3}a-$R{u=g5O%l2aShgX(U3aP94R9nPPRdsm`0yq{f4XF)N9AN*+J`Un%Sf5cG6
z#MQD$dzjX}IqnS%NVwpQKPdQNGVR^Ug1YO0=ap8qK9@%?i~eP_8C&D|iIYTK^6=Fy
zzI@>dO5Q7LOC*dlB>U&IH~|=l@`B@WKi8VwMdV6!v`KYZ^6zo)T16rFBDt5+-~zKy
zyNV$A$y<8Ut$B)P=IJ9F9HykfOO<mN-ysUZovQ~5B5WR#HwP9wM0JTqEK}SBUc&tQ
zcCV@XDfCN^(C=sM^BZFLsg877^n7Agwemwho8XaHO(=hZ;%)FC^V#)yeZoWP-UQ2a
ziG;Y4JA4fj-B>`BjQ>$UaV28|sK?d97a<|o_u*F@@FGgt#SHPK&P-%}76k>(iaUE5
z&`Mq$21<y*hFZBgK;=>rtfXHL$y8eH1B>bM+nO6-VxjaU3a{I-i|BHnO=ylgX4a+a
zyEq=krgl}1(Wc(!ka_Ri{WIz`(7u5Rlm6Pp{f7r>Fte@&nf-$El47GqX&g6=RGkX(
zALth#x``^OL7RPjyn;L>)pf(D8Mn$LU1AI(mY^>$>&L?OT-mmeZu{Ie8rYJ{I))q;
z9qdsV(QZZAoA$CYin4!R?kPsF%?F6T1?KX~AFW6TPtWzDSpv$@`JqQ<Z0|R;2;iAm
zm_w<dkr%24-@=K>nC{RfTixoV5h^T#qxfNF_B3341{wEFV{&~g5Azxz7Ms~72(uB<
z$XL^-Cv;lgG%Ux_(pnWc(D_Yd7|2NE;SCL-^c0agO9E5RVx!1CwLlaB=;3SjMVs#M
z-}WtzeotpZ0>isXb|q&@c-mUiArd=(>K?X1zp09#qdkyCgO&o?J)*^ru>n~+Q`v8U
zKOGZ=UBdpCApWVJSKD)$y(G)l!n;!U-b9Ul!+SJM@8*d>QI)-RIzx0oZEeMs6@J5O
zIRWrd_Pav7nPR<yL884to+$BuE#%alJjKSV!V-e9BUTryZqY?)X4|c?7GI>QKl?Hf
zD#(JJQHOB&2Qn=NN3oqAKIb4|tW-(u&d_3Yuq0ugV#1uMKIt@w{X=m4bBWIuQ}YeD
zvoo*oEHlND1-K3_I%nnb^_`NF++J@UaL;{O^3YsV3!ih7WTBGPMoW>rFYzP@nZHpQ
ziwQwi&QqUC4JbTN|IL>zxegGr+4U0Y?-EJWq9di+X;(cPI9ztC74|Go-y)v@rq0TC
z2_LOk$K3%8+K_lcTej>M<~EbxSPh-8F7rD~!tM>p_vviCJgRX0kQyMlrzkht1vzcq
zr}FFX|2N1^EAqsQH<Aw%NAE>Qbev?oqS?!uESGv?)E&Nzevpf~nD+`&3EM@W?Et2w
zZ{1;^l#2?^z@ZZZ%GA#<g?fg++KrV7vdtT++Z{hx29CxzvPJWYYT(viI)L|-)Xy{;
z5yl{ds}W3*<oH{J?5!|K!PTHgE&Y3PzL=Iq56<{OufZ>ftza+|t0p#{rCJYoV#92F
zj9*E*q!P86Tr{Qpi>nY%h8=oRHhtK=!`ty0np<}ez^F?d2X==TS3%z<#5Q9gR|4CE
zJ$<gnpq=XJ2Kghr<IzWn^q)TslN0_G>94-3y~SDaxguWT);EOEia+$<FA5Flj-m+f
zV%W!HQ|L3CzA{PdGn$1jj9~}-;%Q*&io9^~7hqZs0zh`0i_bG289R#aKpUPg#UuA&
z+1Bg>B}Ltm(g1~R*GCJ<OcXtpI(_M`;X)`cb~2Lt2sPht1m7#gT#Z1=Uyq$06nnoh
zQB_gjEBl~G;-R4Q)0!6vI~eS)88ES-cR9#m9?o==)U9h?ieQ1roYitTSCe)_PR>8Z
zqQq@7kr|#NoS3Sl*$<)YuLO3g=*B8yi>Tev_jgQ=4-~%jxdSFF+(pJ@p=8|5R=wU?
z|Cd8BzIsA(oZjHA>e)Wx>2fAX&3#)_C^F6Uc5l-AN3qk|$m!s?yZmM)Ts05H#O%4Q
z9)|Byftk3ubof~}2Qdd*-8b|@sB!r?{J8TRS)P>R!k4agf(#R>NtX@5tP6-j(N?k!
zz34hcujshPg9SQ`?8h<x0^CetI=kBi*FM!r)`k~SYp6|yz`W~4WQi{Rp=qlO{lBYV
zoD;5GrHf(OIDmU*?+P9drd!JY=0kbn^P8&Nu-<fpexsF1$1}9ga8KZr=sRIhu~Fu<
z=2G)44+K1|aS3b9yw_kxQZ@~{5&u`f(^;TEo=y%uWJvqM0qimY!;ZpC^m2rJtnsHK
zESS!vDLi~um<JQ{77R#%K)>J_EQD+_>*56RMU?VZLfea<;#?MkH2S2%%)5>r89ICN
zKxb$!tF*hWb!vnbS^>9#;u;;N{eoL3k;u1_@A1}Yh(v=ONDDAw8^Nug3y+DBnLGbo
zZ7T6a9YNTxbX^&V3s4D`KCqei_AjVlmueEZ)g=n0DdRVpC&H|LN~^Y;H6ue^L$&1z
zjd;wzqDlnQHXc;bsC%kUiJ+lXH=4XA!NhS{GPv8=A7SR(lSg697_`Gdu!aoqWC&Pq
zGbLz2Nha&E5JH#6`oYZ>zt)ulJPn5$UdW?c8Ap~08E;Y(P9m-aM$U^Sgs3vO*M7rJ
z)_CL56jC9{yhwZ;pSBt9>92?mX8PU^I`UJGxhwpXf<d9UO%4HTnCl`upa5UA*S3Fj
z|6Yr6+vC;VZ1oFH<e}Fh*&uGaC?SbR&ebKgYzcLJ-=eo5p*J?UV=R!SF5?;_g$nUd
zjNi|zEn?PC(NR_GXNuwPMn4+{T5a`b1F<XH!uM`0bpy__`I=0gtfx;5gKVpa;<&0C
zy8}%-Ry9Z$e~b=xc*Y((WWJ2N_$<PrD#7VPV+fgDT6P+6SIbsCu3tR}r-bBWw&&HF
zP(-+*unVgP!mS4iqk!`%?4pUDB^*l$&*xTcWU;*S#{G7nVyr_m>#gc9avH7tiaDUO
zss=j)NGN`aTg{q5w0au)&Q<G`!1T!A$!Iq+#CRUdqQ@G_<!xAmO8T}s){>3^`HYmx
zm850mRxG}~Rsps~LZ^+|76*Pt6)Q@6%!+WGio}s7$ofUpQQsI$^D$hA9<MKw4l`5a
zbP8}QcNnf}2JPaw{Me<MMU+28klPDBj~($aofX?tKAl@qMa#mQ{M-M?)Yp>lES-=a
z#7Qdza4b(l#O$`C2(-o(c)Z|gHwT1PA(uM4tLR2l6h95B{<jUPy%TK0)k;Zb^(eJg
zYdjAr0VU+lXbs<V41<svkDkciQ-cq-`Lly3@*Evlv#VH}z*JCDbsf7R*J*^hMU{Xm
zyxiuD#+In!(SX(Er85(U;l!^Y%ic_Rr?XqpPBD2Cuib%7R_@wbE154#<&rUF1+v{*
z-+zINkvYL!JZFK(?@2V5rvB<9X%~WKZT^63R2Q17q!k85Ov;7MdYG;U=aEw;r~k7$
znF#`628hK*Cv6}lL+sLy&{{`<)O#2)ljJg21c=0k)b{9Yk<uOxsXGN_vkb_qxsu))
zpKaMGxjiNc3cLWtY^~&aCuoNY<6^SQe6$N^$0*UU{;Nz3phrRZHE+Jp#4-Z8%}`BN
z%F(QsX~*&SPY&U1z3F1p0#%pnwiJBGnR|{|VJu$l38YcZbQe6At&=|82*IKF!6k?|
z5OX(`m5P?dOpFT=9ia6i<%48n$&Khc2eyIb%Kr}gN{B-$pEf-SI#;N$$EQm7t;4#e
zRq|I9eyusql4E?M{@4PE_)(84rg+0)U`UySo!5PylrY+y034RLQ}dvfY<bVB*cVHJ
zIEQkwl?|4Q!=wI3CL9QB=U6F;Uy)+yX*@Cn?7I;_Z>xDxmgD9x>)?mkY>h9}<FOt!
zIZPHYuyIJ1_X)oRfCJm|IQr!$8)$GRswltvh_&peRsmzC49maTos9uRq*~`szU)`)
z<4Bbu87U}+$2Q4e3y7MJy~@Ik77ma#|N6+I?ba{h2<<cm29dX*B-`{`%YHsbST!5G
zOhTI1>VJtfSr)VjK%4fg<5(Jk;8sf;9tL;qaSRX5YyO;&+&L(^2Zkw_vIhp=RuuhO
zL1{>E`F&E6taOS{O693`2VzUqw9wfyQpLX+X5>6)K0wJ4mG_p-pFbqN>e3Pku^K%0
zic?3Vi{qd=9fp2O4;FcJd#eF}-u^hDgrpU0O1V!b(O|TLl~5`wy*^Y=g`_V292czV
zf~nqIjH(R%+)_mGQHdlryehApH%XAq5aMN|UKHeS-8lN)K|sunTW{#bI;@jgd9?@t
z>ZM=cft5$?v`kkwUUWroOkXkB{IE%TpTmbRDZ-mNP_4N#OOG@TIxao1(PLCotOA3O
zBv?$^m$wY&XOeY*ob1@(NK_Qyh}JV%ruK@Tv@7X98j5#ISAGK`%FimfFP~w~6tGtA
z%L)zQ+zFs?zIw`5b%1~-VX}@ZBrFcx)~4X}1Kno4;R-8mK8fZ~$%_eH-O-BFj+i(e
zRJg<G=>}q3Dj7B<k6_Y436XNCF(^+tG857BcHh5!N{Xx<l&jU_CO;@^#eb_JZig0-
zIj{K;^%4~AgjhhGK+jJP8K;Wn1Lvt-NOxE!k=!NTxsXmm#ME9pqh-~`)XZd{a`LEZ
zX)}|(Ou|P{GY6<!1)N>nJO>@9)RcF6Ah06hh3yZzIGe0nQE_UR`8yNph@@y&;a<uE
zT*C$rJs8+$#uiZM(Ch}&YJCg!^K;FDq>1jB;38A*G(97O^zNUV0x6-6jc1Uy(XVPw
zpsXP6pu(?U&ZZO8&q|RTcoP|Wil`mNtS~q@PP`rmcRW;6Xq<!DYS=2Zj*v7ZzZeQh
zw>j(PBTGv!lt+BsIfc-S{ro(|GGiH(Dwm)8rd)tGBg9Y4E?}uj`Y`O>Xt$?UQ>mUK
zG2@?cH%Qo6Np4heWd(arY%H@q#ip?9y&#F9C1+usU0qH<ihbD2<+yqEBfwGz^aK9d
zN9X{|exyj{aKc|Ug{{f3LG8jT7XvbCce4UUcamyF)rsSSe5j<r=p||2G-9S3RR{7x
zQL`9MP6}t~DR%D-i<lUceopjEDq^QKXqH^&45Nt0rgfZD`a!uFzfl9C>lNpINB+zB
z5)lXP1*=X<yjT9FUlEiF98-H#At+!qggly~y`qI|rhhy90iHmg3AXTw0kZoWMH65P
zfh2)M-Q4Znw}m#en-nJJt6O3lQCic1&=e`x@xNlz1y_t^z7ngC{xS+r-=R`@@i=j~
zT++Q-cb^*%iJY}`CZtnN&RVzl**I94=95(7i{70)O~;%AndQqUvchoezdzCB0J*dF
zg(<SxLqK$?F};NV^+xBLg}rC{UQJufZTI2%v*@laySECy>>i_U+GikfMvBVV`e<~c
zpYeb!^auUo{_1yy{Uh{&O}Yup3L-}HWJwtr!ubA}2E^|@Vuaq3UuXU=KO2c9EUyA;
zo>-F_QM015T2oAlYmkv#+YW1~Dj7y76jeB(fZem$!1i1@&U*g;$g3M}X(2Bv&Wz7_
zPIJ#!s~4;PS4?42wTgi2s4D8tHTYzvd#O!1@R+&jFoHTs+<5g-VEfe-lmI<_Tgkg|
z2VO%Jp;`O@Ewz`7yenF*dHLPjkwyI2EAyQd9={!8A4SKBOo#|SaC-81mgt*{ut*6i
z#@nu=j54ws<tizI?yikH1pyM+6K<PcukD^H&{h2?+-A{9q~o`b;L?mdBY2a&{;`#w
z>H>Uc8xQalz+{Htun2C5-rb<DA7)QC)pY{_LNzAIBPdYy+n&{kLuZGz%ZV}Iy7(?K
z0sch)%aJErVm&EqbZrlVos?T^*eQq;;mM*q6{0bPf{0Z@=&X+HwQB%5=tGRo=Ts)d
zdl(b>RLF1p<jh37<oE|y{cBJi8{Zj*?lU}#P8s*=E3%er5*+d>&QU)?HABvXy~|1D
z`d0r7AZx<Yum68!^=frF5ZQ7}RVxpdjmvg|T_#Um!!Y6R1l1g4X6~=zs+C!lXYJm#
znduRUk%@e*?<TRczEOf^x=uxT0FZvUpQDpXYJ~aJxs%XL$J^mJqGR{ZmtYH|wl@kI
z$vQoo`+TtkTF8@S6&Rr+M7IzdvBf4?0$+-9I%Y5%HaAVXzx(jb$oH80K*>XJO|F*G
zUvN7{H1>mDUfX7t90s(Jf<&8aW9be5H~a6c^^ZsdG_1)xC0Isk$z;Un*P2@q{t$8C
zKWsjI8B@!)_hKQfB*7qHUmcK+dCI91kFJa}=q8@?4Pz%1<diK!=IiK-fHf}5KpqMo
z(s8^DfM;I0RQSGeE`SvPDawrE6NPYn56f8mtRNH9MhEjF{C3<kyBzedi~qyxtF{A;
zA=&uC#h`QAd>cLI7FR0&InqO_L+7KsbN$@7lak)Srbgf-Wb@hNz9nB(hNIysT#G!U
z>eQM~H@_@OJjnQg)fA@k+feZd<UlAoan|lM(kO{RL~<`Q7n0{Du7m7%j2pkY`LiaF
zj2d53CU5A~CNjRM9s|&!x6q(x^~21zjj^DA5_8Q+U0n%fU^R>F4Ka!yep|$-^>~|0
z(ixvyM00*+A*cl#UEv$ddha=BO6c60x}W`NmqU($?a+CYE^<;XhV~QjEYCZl$r!Ba
z!4JsFIO%loY5v&i-F>%r3L%!hlRyN%632^ZbW-gj$-<M>Z8&zU5f0YvKH*$jjFtm%
zvF9W|b<tC^QO98g_O^jeCEJQHM(~PZ08Xw-j~Ccl8Kjjas)bVk(MuCxEzu(rAQBZk
zm3=b?=vO@7Q|*=VJQ4(4b1_13K#i75Mv=7S><N}hhKG!9^Sje}46nG+aK|QjtDTvN
z2}5{tGBJ*+m!`7OSEI;bp`Y>03}8OlDCg+sJD5fC^N>>pA{zC<nah7&F*tlFz%kjL
ze_h53i~9PedFO!5G`GPgMs~Sp`tOAexrB;9V9~`Ep7h&wO?QVEl!I?98>y9Y_D3wJ
zigP@;`w9!L3Eq0+FCko@?DVE`7>_kcfU+jpJT+^E_mwegpLxU0PIt9(mhx&G!AE2S
z&g#on!}iq-ADoDld4NI1UtEYs+@W%*6;r`%^1sUHv2tI43|mYyLB+E=&n;97h8WYS
znGtKTf!FpnD03s#NRIhti*!le357-Bk#N(OI!g?d4`kBsZ`efu*lj(21J5R4kV3+a
zKQwGc{z-(C*9~}y^IHK-zZ)Qn^~l7{Hc+i=<_EH+=k<{!&3PsDqqG4$UXi`8Y;I^4
zmqlbh=&T_R8iw?=U>w3mdi}^#N^F%5TuCOi=?eKhQ$!>wK5)2|wc%1<BsrdoTw~?J
z^t;{(IOACjAjWCMW`9bwaL|!iLiY#u7R6p?^dj;mk*T*V-O&kQ$qV?M8Bt9&-l4AI
zPkMbItx0y>JG(g||5P}#zswx>l1RKFAXWq+?h!tykMao^@ZNU%1dr6+LJJNb_{?Nh
zlk|cG+3R}#9;FhBA4J#LL3Y$Q<MaOE-W%08+!#w!h8IaMAyN9Q(-`SV<jg4!H)@j^
zy+cb3C<S(VV?ymjuERH~|Nj~rT9Q66pOG!6Nn@mf+CJ2mkgykl7ZnbcR&LP`+aw1c
zwf#hwH$sr76ESEb+~}>VbBb11+$X=CB3Hfx(qx5nhJ7$OXGl}pgc3^^Dk4e$yU%_+
zFO5caOl!Ss{4!fww2TcVoWdfPZoMd|a&rL&?U;Z1p4tGYD;RatkC3><LM!Rlb`?%x
zXBNfH@(W^CD~&D2VR>?WmMBg-=>KJPZJ`1f$6h(9eIksHgH$e3qMz8)a_1>k+x);f
zOrVrO%m6yb<r%WG88B`PQt1;`rd-75=vI{gr5t9A7r}yIWv!Lbz6TU~Ja}ZWY&>&9
zkT0rJlERix<MILf7R?I9uW?mZipt@b?EL6}=nsy!ZjVS^xVN0*(GstbStOZrAtU!l
z3A40yc;1B8G6{umA?U$o|MY&7ZjOd_mu(?(5KD;WGmg(%-$-`<DnrP2vpWntI6H_R
z4#dy_G-P*oqlkVT-&&-8VIt5CNPr^+$KPFCXn9)=X0`Uu$5bTuw&#)mH)5`MC<i)O
zgwJ%a#1evtPw0BM^q2U)t5>Wgyh!3JAs*U`z<sHgiKs0-fOBmK&^(F;WN!~%emTvF
zv12eyE;bW=IVps2r9Q*9#EE}ra=y!<ZWzFoys3nsjiT{4{m%ZoZDmHUu2+`Y%56oh
zj{?jo%Lm(T1&_Es_*j-)s~yo1qrPfK>ngc7cN$?nd{|6eOPqUCnRX5$8YJ1=tF7x3
z*qM35#>9@#!K+pQmFbgr1ljW&RNRQ5AK4P;qFNCc{h=u-#t%Qv_Yw@rkp|@!;ytoK
zvLRNErI2xi>Ey0?J5IlBQ2B9Jvk+rASGWTpO=m38opDJcA4D*t@;r*mmodeeJThgU
z=6sGWW4l$GfbF7iO$FeGbIR43cY2{*@skNuc+Yxx8u=^>=Z!~_lJWh3dU$D?n_ppQ
z9<n(Pk=nvwT=I2$;3x01zB8EAX_2z;5k(s}D7-8m9nCO_Q9!|C!(C6r2t?n93Y51}
zR^55&-|ZL`yKJn1Pun$5)rH-A#EQkrsj#)r$zPpSk=oB$JzrC|gpr=falkpqL9=Pv
zBQlJ?f$w2OGA<E_c`dq%Q+X69F6T)-gfl_X7S+c6vm}ubTo+I(v|c@=^Nx=n0DzIj
z!z}Eqb+&SGz&$q3FcOMF!6TkPt0wYfg$;9((Ul?mdPi0mCh0qr7t%2_lm(`|%A?k~
z*Dq5YT=<M=9p6Sd2J!p>B?^!)YcQce=9b*GEu*iQ!e1y)pMF@ZH{{*0ntrD&URvO+
zN<OReJ-i^1yM-@92^ix@dRG<P1Et`OTsXskNw8s$w9b#|Wx*E-rME%+@<&y!T=1J6
z(1Okh0;e&iAevT(CcZ|8;<|mkx2-f!bF)8(gvKKJz+9IL7jN*j&^i582|f1#>87Tx
z)u*>o6`S{rc2fM{iNlbf1kDe?V8%2#1VF3Te0f(*nnbRBnRx#P<nqSLyL8%TGIkb{
z+**2@6KmD{*&}a%TN$AjveCP+$mwRBko|9Evjwr;F5aXO`QCJ!%~fh^6=*OTJ<-}P
zf~5b9`w5pT?2LIWgB1uZR!;S!6`e<nPX7U@4TPQAuX3uzS$&4|mKE_a5Vv+p%Gz%d
zTjP{6W>86AAs=6F-JW9O4wO$o_Z7t9)r~p&9i{XaTTR)!=WQ}TBKSQ6pmodT4v4>#
zt1F_RCin;SmRu~xYg*RKZ^u1dA!c!XCjAB)r13<iM1cY^Q<1iKk|aZO*6h+$$S7LI
z=v)m>dy3B^*>_Vvh>>}C{z)hFyk2Y2na?vp7hQ87?ax%OFcS2LcOwv5)@H)YH}{%5
zM10ZYr)~b<a$*r5VDQ@NBM)^BQvmE|9d--l=j~$xdQysq_f0WGvo~lGHy+rJa^`_0
zeurB(w+uTog!h!P@TUzXsA6#Q6QBf;yLT^6NG;>q3nu{oKLEh`av^AJXpgl7N%5ie
zJqvOT4?AC580Fz3I#q9~`VAA{4Qa>Z#?=IAqDO3X?-0a#0Zr|Me19Un;Gn@d-~$Gb
z0MukT1s$?-WtV{D^_79*vE_PQ7LSk!?^c0$!gSCE@$IV0k3$SlN@s~-8=lY*L6^t_
zND#AC5cp64{Gip%`yJRq9Tb}^!A1Tn1E16dAWdfA80*bZe*3?A`%fIgUW`DcW&E#k
zp#G`9aiOLD-BOcG;b!3UJy6Gvs#ULE;VlY@7%WgOkEP1$EGINN9|SL_j^6b=t6;qj
zRIp$B4jaIR$jKX1fRAu~wCr#1J=~AXMoDCC7Af2TL<1K%k4c-Nr&7v5C!4TN$JX7@
zf!h{%43x618n3h#u%@~3I>=zGQ&zA~E@<t=k=da!_0lf+$fg?_O6^HEA~QD({0y(*
zxjMw5XX7mmDngId9z42O^@ztQu%pacQt}A!-({be_S1y1<#^scJCA?JWwdUCC51@C
z?|l9Wg=z?K310FD`1+V{Q6)ndH^SvBU1;)-&oGfcT{3wYRK6k8rIbwFHGXSPlEage
z=YDr5=6Fda2IYMVk}@0=D)*7!6{g#vfMC)*q*Zl}VL1Kbx9*Rx=J;5iGr|+qMW+ni
z{ut;m`tb9o_h6Ni-R|Y7o1vTo7mpyo;@tDTwbGt54{!ICzGhVhAIsaWNyaNDzOrO+
zLi}b_BEi&@H@fW4f<-8w_2BfKjh<Gs(N%;3R8gUNL~Jla5#B@5N2u!;A)2x%7n0+)
zqc3&FBT|QEaVqbtzHj4{>y<`tRPw2#p1J}@qJ?MRU9hISpy<lqg&>r}QF5+tD5nq<
zuMOkX{t?S=j&jxYUKh4P0tNBBQ5^eG8Pc>>Vi)UJNYZR>$dulc`HY;UQ0`b}wLzo4
zO~M795{<*^EO0lG4!3Hv4-W+I6OLdE>HxFm$41m%FU+RJ56ln*9V2D%v-Q)2@V|ro
zp3_ro5mC@*laSlwut@EfUPjUSG$nj|(cvvgQJW@#di<2*GV)mPwnGDZNpz&K=eoQF
zTeGhytJiU}Ce70{ae1Sqi0FES$Zu9Y3O#_pxN*1gz8<HI1fT!SG!SodU+yDu&KO*=
zsj?+G^6XCgD<$#jN{ga|Jw84~kc%023BZcbbpo9aSg%@_y*3ymf?$AW!Q`wdfhB%#
z2u{6w0{O%YY_l!k1jO^6_9kH(l(0^o0k>F~V>rrDDekX*FO9%slv1pv+^}kW`UtyM
z2~Ag^f)g3HrJ4c17SLKm7gNpgB=rcz=gUGV5q+crAe3s1=D)Z`VSHkW`BuOl<QZdT
zigVN#;FQ^$9*R}B?i;5Bl?cQfU+!pU;0~Nn3xdC9C*H+*7HI9{%s*|8W*@7tV#fp-
z?AfVXzFj#g*h@N|m(i-NoH)?nanb#BSdd`+6Gk0AM0Rg%xGU%8dR;Puc5!(Z(*uwl
zxnM8P6;XBlRQ-83NSmHbhdkwHqVXT=u!jY8MqD<ikgsJ^sp5kP6)22EiKW6WS-rgI
zCp4~-#9*mZ3bn3tpd4X*B=CeZMcLW_ahU)Z9RkRgZ^<``CURPP8;L~n$aXw8=sxrB
zuTGNS{>az1-1DN^2OB|fJm<uAF3z({HY(br$cLy#u+^EGXfprkD!Uh%54R$}6f7x~
z*zPQ%-ou#T7hXjs_v36#*LGfjUt<~l>BpBdumJVHf`3{mp|hkIyyn5JGEou+Y9=qK
zST_eR*9I0ILCpmBFX>IQl?hD1L06naBfet6t-e?6f`66BaqE1`P!frug2P2gC*LkP
zw-X0;4f(~Ok&W+iz0?Q8jx%q=TXrlS6qp>LZ!*e-5LY%M4&8koitn1j;?#7g5>Z$o
zS$5pTiO3aQEd95&kobEyX88G6phNL7^{*wAeR(Zo%k*~_AkLMfBS5yAXVNg#cr@K<
z$fCOyZVc@H8s67vcOi8;<H&p&wZAEqr0jItZ;^?xjgyMa3XB@NCqzS`W9lC$5veoA
z#{i-s>ztF>p6kb$WS9TL2VskAl-SxHBVJK!b0-A956l;mC1eRbI*se1<V?=PAvql1
z^w~6*ISH!K9|Eh9Zx#y5aTy;?@FMA2hnsjuNVF^Z*_plvwR1gH!uAA^ew^pEcFWEP
zBarpj8#FceMcr-EZwe4<J$4@&fUQmyn7z|?nBI7L5`PBY6;=@6u^1BIxY;?#-rj5W
z@)Y6Un;prywrwk%1Cc-K_6&f=DiTd3_IRP6^}-^DKR~`%oW<aosl^JEac>@8UL@50
z!PBcvIs;}E9#CRkXL56(56WJwQ}8BPmH4{e2pN{HxKXyXwjStAkCK)qeV)}bW+Fas
zZv;^1c?Rm-8$W-;hpnnL*#3lLrN<iLfpl9gyLgRx0BruKX^gZ$=y!4{N&M&aMP(2H
z>mO4yxeXQ$CjRznLA^&>h5Jaxyq*7Ac{b7<Qq)46j=ciGdEjH=aM-l5VV#M#Ar_@T
z%DFTof)O3BMPP%SIGrq|Vq2EkhaShv(d|ofE$Xf4eQhW+)|I*1!9~o2Et$`74ngCM
zlGXj1-@GY7>8Z8sCJI6=$nFvm?nr$p;he->$-Qh^QJf0rohW-}N0U8MV?2NimQkfD
z3@yFlNibu)3b?95JpmEBh6A{jf_CsGFE8{Ch56(DJAdFzFW(3SiT~Pz7^zQQ_bI)V
z9r2|$0#M2lrxSaw<?~GmI&Hlca*PVWBAx@lNzenQ7a664@~@3acQLpnep~<EXga9A
zC}{vo8z_8PXb^(@X{bRBlP$opcptiV5kwEfQGeu@^W<i~LrtR<LR}SY{08YypaWHM
zqG;CqzaZeD@>-^dgs1ZPR>+yOYVgz^f-YPPbs4odvJK}<8I<w~=4sIG9ure8lq;KW
zt6v(iQY#Mz+}PcXe>CiwRipm>4ASfdgss2^*mg4?k1Zi-f3wV3UV^I`ROPo<-4Dn4
zY=wmM$QZ_*c6nbJ5%=Ge+I2v;be}{-GXuDwgDJp%q$|vIDEsD*1~ByyNlJQe{(_}|
z$(N~Tkee#9KA(v&Y}364knv2KyjB}eW?0&K7i~8Sl0uS^Ig1U$|Gk>w2l-q;YSi2F
z(mp1AEi-f^!>=4KgVw0=-qBI9TV6~PbJmp><NIx4R_LQSQ%nT7qTvm^7XUE2OVnX^
z{^1fKs584J=l*qlV>!m;`s!)V6hS67AsC(}{%8ZsGWweENJcti<*7L{?>%K4I1Jz@
zbLwcC)2zyp*l}&WFV0WYWN=*DfVr8v3vmmG6p_``=MWJ%py6_fY*6F!tF<h7_yDUn
zfoi-rj`v0WWJuz5iJxA;#iSN_>Oc90eU$|2=xSdF4CC_NRzb$D!gs?^S|ByfbzCdp
zXU!oWpY#D}<KAEhL;FfvG}$S_>^OQ2m6q+%L2*z>N8I_FYN5oA>n@Q2>vKgg^jRVs
z43)AB06;qR)*D3R#&JUF8u{!*yom%&GjYha&0&|pEpGGB+?K-BIl$7@60>iAke^(K
zg4@6}A++Y{YuJ{R7rI|TsbE%fi!<e50u5*&SLD_x`D~7P)NDUl>I^uUwg52=^Bn?!
zJI@pj%vs7u`K?{Z#xe%l-awH}j8ngn!bScHc(wwYkNr#fj3zL2j^iD{`QwrRyZ4;(
zIturkCnj9xqran5HnXo74PU6jK{~sbdw`7`V*9{9DB~wqBCq3mgjsHATVQedppQvz
zaLpDy*+Oq8O4o9t*jP_v3oY1z0{$IrNg|}f^Zmhq_M-U$p%~JXeXBx%V)sV;=WS0=
zN4;Rq7}?=PFdJo5PYT^8Vg?F}@OnBAy8pV6GSL&cAA8oLn;1-ip{e5YQ3ZNEjx8a6
znSA^pBXBgFlvSpgc{HsFX2c+mHZcmZpnzo48)ujQvdh;T^zQm^XDk}b1T&Qt%%>;v
z`s({!vBnIXM8#cQ!y8z{_xzO)w}486e@E9t*>);?(w`Fa)7jBG-yUl~my_y{IH`cC
zY%Zgzt@SMMHgL@l9h$<J>(s7&owH3kWpc3f&P6disY@P1*9ISWU?RS7(FR4q67iG_
z4F<kyiR2;Jrk7CllG!YBHJyAF2_kRo;TA2-+*H#`93uta_LFTDWm(_Q#Cz;wlpZLi
znU67PN=0h;I{#rDFk*D7=P0Gue6B4PR}9bB%AZHLJ9$CfnS^r3_s8x36!Ci{rUV$*
z*jZ-hAmY44LnV;#woQ$3L>!)AL9i9nU~DKivaRNbGlS3K#h|g0vkb^irPm4|BgBDa
zK9Tn5{<vXAg$$QnDNSx3hzTWPkbov0>3#O@&hXM}Dh{1#ROmwO@gM)~n>nm@hFnE-
zQk|pK&)h9tzf_ILOW5;~iT^yJoCRahPmd!)RGvRd4IGz%L!P(;kt6j8UXko&A<CaR
z@y>=6H6jQ6gbt$g&;;rZhHZI+5jCqYsw^04YS_nv)yAI}pP`EO>x2k4i+GF&9XRP`
zkFnU8$@mULseRnWXOc~f8w`NEq`~$B)w`$8p;;(ezOBk_k)}!L!n}ZFo8|R9Pig>2
zviOqRKldY^8}Y(g8=p!i*#Yx}`l~$38d)QbEut-Eb5V^wvIn1zrs2&OvsRKT%ibZ0
z|J2iT8bxHTp$)p~yDahu)GB+2iMBko>%Kt*BOdMRm$A_$_JX8S<a_sZi|Z&h!VBAe
zbBMx~8%Af#Iz@b-sg*|LApKya18WG-Kpg)gRKn+!?I9R!@{65TLtWP`jLv9oh^<C&
zNZ35h%zZ?4Yl+#72Qk;_2o|t?wT+}RiHO$}<!?q)<XeX)x2Z0SC9LOVcIx@XZ^7-D
z%VT_%GMdoLj)<)&4t4oDh*o;9^Vj53Pocvl8UWQkZ=fRG{pR;8-J-)v1w~vZTn0(~
z9|CQgIc^TJ(GfO}PAn0~X*$7e+TeJf=Y;#?{cySzv_4o-0Z@3-!MC?BKk|;(SK080
z7r;wpMZCeKoJq^5SS9gLbxfI%-qTDz;~WR}!>>2r!xr|v+l~}`0uO&)NopnM+0LN>
zNWJ~;2%sD&>dj$~EGeCRpw?z+dJ#l?iFTIFD{<yT7?qYXvrNk&rOW?^MaBC|W6f}j
zI3Mxx_y3{`J3~>Nn|{1q+00-eW4W{Z_cB1fC-;O|!CCCd_bGV!b{lvgvw9M5oj{NV
z*hPhdHPa-Ql(lAbk#g;ATWJC6v^=2p7Z1k0zpF`iUa~@|?k$qD#4`g=bQjA;>e&ow
z4ZHIC?QCO|LqBG@lO)fk{}7&CNzYH2iOAHX2Y)Pn6_7mw0dK3#NMfQ%oMQFY_JTd5
z-%P*MwIedE$BeK(#$lG7rmtGUR4_1!tsBGJ>&oFkWjbZxUEZ)CijyAH-fw8;%A906
zMDIp%2QFqM+8H^8(nM&Q5nn;mu5VX&0fn4vOu);3(EQ)p3OUy=B|r;rktdxS!^kaN
zMpnn?f$|@9TKz_t=_B?~M}0&5unjveLVh0#sbnHWntA+{*ce+ND?folo8MQ0rxDV=
zX<OwS#6b{e%$h*P_?8KwR*Q1LH^wX07ku`&NE3N_*McNW_Tp*|k$_V4ivG$Cu1#+v
zjU$q=d-JN$L0{W&-~G6euD1+0M*FMDRv3nOD=vFRg=9bUg`UIcv%yfk8T~ALx_N5J
zHK`fXuwIf%r*}#P@DpS?mS~|w#wr0TxAnKl=^B=F0zN<e(X*)$<Vk^>z3kBHrMXGT
zcKrc}r>IKs9Dj##vw*%ve+~2>HCy0W{i&Q)1Fj@gK|Ltw@+!R+q&#jqsJD8F2D_Rf
z_S8}a=H<d1?Hz~ML^iClw5;#?WG_k%-Gk=+79VbNm7vNGASzPy9^n0YL->z9g3URF
znH5=}i4|tSzM^;id9Z0U^s@VVf~I#$NABb7%5KYsEKS>dhF!C#64@g=t&DU>WkHH-
z3`8h5Q#P97{KjguTwl8xgk8KUVhJU9pX|rsuRahb5S0%|9rs;H^F2-kri5*+1b%lK
z4QzBX&#H>XLKodpkolLZd)x|eItt-J)0ruji`SfONe5SnS&e*^&{(eS0g1{ARqe~6
zXj(pEIT!FvGT+@R>_EOySA*P@gg~s}Zh2^T$n{D`jG1Y0+@6&Z>ZhBI!9CVC2ZdIZ
zX|*_M-6+IhRFm_(S4lDJMtFD*?mtpiJBN(w&6@mg#l$Y6f6Ox1Dc#7eCVN5#nG{6Q
zSi@IC#j}!5Jllqzl)kZ22_)#PSqr*#ktLCoccT$?KMrCIkj3KV;J!*>8tcMf&^HPz
zV1cknGwVSYm}0kqe%|4RTLR9+2}W9X=Se|oSCfJ06xPM%hPlM>#Ezs;U=VlTC38?^
z0(2?8?yF`t^z;7v_~$f<G~SL@?4piqg*hvuKs9uby^Et7C0q6&PO_^Ei}n`z4IiHJ
znM~-wh@A6v{^#Rh)=tE?ry15yl9bQg%wWkF5AzG@Z<sG4TNEf8D0sms%$k3<6{N8%
zP`Mb6p6biI1&%rIU_HZRjXk+JqyqZ7GArm75q)X{hZupnW=1q;p-zRrLKaq%-2<%E
z44;y2@N$@l_Yhg$@#*(KeTS9dRQ?LoOMcr>RKCl*tqv|?kuELjH5nHMQk@jY#b{Oi
zH{{ogx_VZF6A%sICH2<H%#yl+i%McJqS`8qK!sDdHiQp!IoeR?J^ELPJ@@bXo@GS?
z+Qp;KFU?|{)t3H6pydavE|IK^+Ov@!YqDBXCd;0G05s&~__YeHSGyHdKXy_s4kKiF
z(f9JxZED|Ys5aV>I8_^=5a}gmCzUgLA2>L;WPT$aEmt8CUh;0-m8~L4M{#2dX5%k6
z)|XmYbvQ07T2OG!NW3&}BQ9cfded%efW$_9TBKrEsS|nwx5>-W!worF;q#_WHU1d@
zLDflRdO^i!QE0SPld)G<KOw%>B+ihtvHxEmvD#mEKq^)W2E^uhLIb>gqzUGPyEE}d
zs3Q5(U@LAW?O;z8Vet_(mNZ$?9D%+wSNJNCF>V=Pw-vigYjaw;QAcatsxY<P7UO4x
zYxgQ<a@>%ZERfM=KM4apMd;mqP{K@xgeR~_?c5Tw*SCY-5834SNmqYFDuIc3Vn{FW
zUN(e`7iYj2FCh(x1iUc<SYE?PGbMad7hHAY;qYt}GB2qM0{py3nBkr7M;VkA4f2=8
ztSHVVsGWX3C}i_n>K|An#pJvXjPl_VrZ^5f;xOX4IuMhO0W;}5Y#0*2xEK8K!u1HZ
z<`GG}A7#~i>M<`JX0Y=gbzRBLJ<$PI630M6bwas(FDC?GrWrP&0;n|8E!s?QbiIem
zxDF<aof8Tre`nIGtrnI<$N~y)N0jsIs+dBnuPOCPo3H|K98Z6@FB$>VFvw$q`wW>J
z`+Cx=(}U{dI1>?;9{|wWbpU0|R`eG`h_>+bBHwonWN-rJ*Q2dY^jEZ*Co0dq+LJ4U
zX*c#8E;7%awz!9L$leX}l$^M|c_<6M2b?o(gI!na!u8zYjC7*`PvK(=c5L(D%xG_Z
zZF>~bJbx-|s<v9L>gv|o2bAhnJcjH|_K?qg%XT2>A(wM6(p>b6mI#R>HNw*VkV3Qt
zZ#5?p#BzQI{4af%c{D%GTbL#QKFdbPX(gzjv<q5z#c~PNaVGk#5?jgp*{j0WYX?o!
zp*C7l#oMb1Q;*_@f8LHhfwttE9J}?ZU)>*A`qEyZvfm_mg9TT7<Rga5?LME>Zzw{T
zUM2ZT3U@MAbBBKQmK}u^2&%!;nAmS)&YBf7MGSTjL0oEjd;%LHBj=L)4t8ddJTz1^
zt+iM}5hawbxY$URYP=*ok$vwh#lPv3s&Nt~tC(Y=UlLq@bP}8y4p|z$OXE_i=3yqg
z>fqaAK+!(gQAPeP_0RwfvIBx2w%j(A0$D{|_c~5Y#Mf@^Wjlr<MLf|vy+aDvi7>^e
zXVWT`>?WVNcDz3T!kUiFrW?bNe})cTpr=be4o>M4L`UdVYbp_6S#$Pki*soRkXuJ0
z;9381XQ1-!9;iJ};VJ6qBrAi|wuW}!h#ro1rWXX-msOf@_k5kLB6ILxwsDSeLEcp*
zM?XCP;jOi@UUVJFpsD%3DsUNJh%|J3{g^Om`gn9-s$3ZKMlN%f?=jwvQ3NOjGA3Jo
zYy#-4>)FF%Jh@Zb^ST%#F4_KMdJkX+IC@9AM6K|T+9m&&P(NIq!@~4e(`%|7B3dlZ
z_rQXOeeiaol5?{Bo>LD0cw=Q{Chsv-4Tv<W&lwDlg%W6uVme@%uy{))B>b^QHUF6-
zWJ>T&FjxeREvoth!K`!QB08SpEAtM-ObkWhoD4tOtXdnPpB;B61-mKDwuBzPM?E<M
zC#YDw3mx(A%Z7@C=nxwQW*bwRHxeii+l&W)r&7=W-ERq){?nHmmSVb4DtG{(Km1S}
zVb1TgVi=$p!wDRf){6ARFb)EO5$er!Eg-yB6h@?%%{HI+tjnvNmf&klMetm~IiE`M
z1M&Gh^k!7CHM6^_-!%(IY$TI4!BpC?%}|f5<r$&Htpyahq##)9H5A(XRRH3@_e?e9
z`1cL{ukc>q!}B~38le35r?XxuVQx76y2Ei8w9269tv>nvgBZx<-(PS+tx+L+ml}hL
zl5*@%{Qf4`wxf!dsHQ+28vR|_I?S~f3xsD!QLoZi&I4&uV{7}(uJEIB+j|>3Ptd@+
zmyEucbG>kUTy=|^Z>tNusG1p{OLnk1%Ny;DH_xFgL9Lk5Q3~SOTAX5O;3J(Kk~%v+
z2e>Ng9?}S5pS)!Bcj>^KF>j{-UiyU><WK0(pK^i$<OyS>pq3hW6{QiL37fOUvxW?D
zj#yd&zj;-#hO^lG#rPbnv`%oF5m@KKVE(V0_{fMs3qVAMJKa!2riz-mE=q{Q<Dwq{
zmg0`RC!93>bcl@jxFY>XD`%7R=t$4*78sbNwd0HCriv5`N7z@3%o)Qi2+8abbiwz&
z2G@8ci0&$TXxau2{-`hwi#NQ<6bjhJCTQir14JK4#aP1>TRlVfh;1A1gcMKn$qFWj
zY+n3G){rkphg<_s28iHUyI~9w-F$moo6#2Q^cqg&xDy)8Qs4rMS>>Bckuax06BNcs
z%O*Og4L#atc*gPEITYetYc8+3Ig?az97#45*ww}WBvlv~dS>!6-n4Hsq1O=cfbGUh
zC?43|{F+fSMHaLlX4AyPo;gu$nojej<3^<}?pQYa)1od~*s{JCPpJ?kxxn4`)$`(*
zXF2R_R9xLI2Q_jUjnKqL^<fN~t=~T;Qrly|i-tm_uCS`?rJ_X=woJhCsL&La5&2S3
z<%6U%9uaMFQwaJxZyv)a?l<O2u}=7bEV!R3r=!t-ZicwgtzU{R3{QW660>_Xp#zN_
zr{qt7AaE&bUTb@gqtJ9&hm@rkNEGrHhqqLW$nyGv>9I~e=4lkku8=|R$M|McL`MHu
zz?aMzXgp}Lmt*4$cS$=2!@fv+JqAfP32k|Hbg2@?QFUht=6OSe(aTPu+JUPfdhDcU
zYHltC7urNoGL%uRiQ*+Vj(65||J~QL^iI0NDd*Ur%$x%Q=(cg>uAoLtuS(i156i5q
z!plwx26oxYE!>Wgd^owBIx_j04upHlzac4?0i4SCFP=D(nQ#&nS6od(do{}VN@vQY
z=*LuQ$<a6tg(${frFn&brdfr~hVDu{@w!YX@AD5ysf56DNGd+j;(BoFDNtUctne1H
zf$Z|T7$SB>Q)Zb<oS-H?i~Hzwz~{j;9L(I=A}@=o30CzGkmB+}Hjpm|&|yBk#B2g9
z4#~J-=JWyPy@^8hlGCP)ME9*M#3P2|LLj5bF@Sfu#Lu`gBMjl$<D7cdf6^0|-#1*6
ze;xM_qak(ut$@TF4FE5kwMYnRJtJM@nisV7<4Y^3a;`A07;H4yRxDL%>5V((>_UR0
z&!B6KjurYHre^2?)^tA}(35NUinX(UVrQ<2N%x|-PPgJCs>Kbo%^y~XvRdS1+Cb*W
zxijxr(O(bCrqaFH`sEG}J|K=_8nmbQ@=D`11KYvGc)CLI(r7RtvWKq<CEut0ZCVHS
z<J+v@)5r642fM)GBCZXMAnJO~wQ2%)^{2;NjZ(oSAti=QYVcOftPfbuT{=ULz#u#X
z2xtA<K8QSi1nh9l>4`hOUpX1FA|I_>HMrfNe(s&zMi@4|JA>hB9vg^UURnWHEIG6q
zmTS!s+Cr{5^1t1|tmq4u8{b-H$uCagC^RfCG<RqU$)4%Y0^NF{`oY)w*0G#$D&8NU
zXT08`RA9wr<O@b{E|9N{O=gg0UrXLCin18Ai4#q6IZX1CuX9nQJJ~fsI!~fyj`Zao
zh3F=U3y0Wz9(OLo(xr_SY?&4p<y9WdDZE_!310UF)Zo&4l#>cuJHiHfsn)j`!}FuY
z42_<t(;{N9dHT(+2sCj8+X?D8`#HX0;Xz3#ra+$`R6hQss>VmquP)1e!P)=QNqGGO
z@*h0%4Smzs4M0wGs9jWR1L|STXRU#~@%hXS!7f>gc<nk~o0~`XP`&ABLt@y1U3K6b
zvR$ub{r|oH49=@(tg5VSP1CB>&FI95+or6b@eWkIxb@MiGYB+m8|{Isttu`q<JtPQ
z^E<pXiu}QQ*RsN}XHcO$IseNmEOJjor<yYz7Z(t_ZQBhhu$4ic;{ZDH6@t>NfcYvU
zsdg}5pWs<5?-K^p!A-tpE7)bvvc&ho<g0a7mxeP;ET{5Fh5=kzOOq-H`5Pn0A;HzI
z0acFf$nQWHevizU(V%p(Q++T>5v#A5E`$!r*jM%D^qoJ<a5Y=O(8R32(HN5vg!n0h
zmD!8ih0YTNBWrVJ<O~4SFAs|3LlYl)ql0-?{Yc%iPLrODT<EQra@yD91_ZDc`tB>*
zaJ`P6StE1%sNZw&HPjCGco#<bGC~RG1=+8{avYz6OI8BR@{FNRxDg;CiZawCOnTBb
z5~0r-fH(fpT$LcjS7r6*jx9m`G4g_l_?+0@vy!4>L7TDYrWz>3dZn|1PMXx2)^{Lf
zsJN1SL0Z7$`-g{s0^o%vvWrdn1J)V8URs#KAw07tEJvGV4SMcrZd=QV^s4~@t6-3h
z9roE?H~UMl^w4|CH_g%XSv|g_<{1H^zv(0P-?z3BfPQH_yjiz7@Kgzp+Zn0V+<HgP
zdbFBLx@~aB0FCtTvO+fA?e*=M2FTb|Vkxg=+lWp{mvq}_vI4$d2rL!_;idOCD9&Tq
zS3kWX$QCM6ls$*0XsJ@j;<;>gphY2JS7=N8@S!|=!9W)7Nk|0omu*MI+3CQ9Z9Jjv
z(lR)aJ(N!e0mN+%DK@DV3k14ZK-M`_NerkbbMd?npiwC@!X^~lDEjVWvPaXi>^+j~
zSZvB`o%UAHbe1I{RP${&2cSz1tWLvKdJo<N6Xknjt*M#8t~I~iBSu|<+id<Dp7=|0
zpLwSf<x4y9k>(bV_GtE`^n<%9dm1D^`H?ztWP6BIR2!gCd{cuia6`2bqiA8XL7=z~
zX*GS!&1s!yf6<hVgI9(L`4{@q==~d|j#PT&tXjqs?8ODbFdZX}EFp_SI&fntl<0+K
z;cAZH-ofGe!kH>4<1NPL-}9_$P2V%hJDvo_W{8|qTRt-(*&?d;Lf#MYBS~`xjiD|q
z%74%L(YIHKL0{|MPgxYG;4k}Op`xZKYNT%S;QrJkhHOP5hnJL|yu0Ty+}FZ<K@(au
z$8+ioS+Ft+ympspU7t8}<E6vR)Yngkf>XVDlcXh6i%n)}mL7qj>E~|(cYjXH{c$5J
z;)eQ7688V%il+^;Z$zI%tM<9OZwUeFV2b#Z{a6G_-#MoRK=|K232FDPs=is18(rV#
za9aD;47uL7BpZ&%rq3co*ZIc4GLK4yDB_3C!B}+HnPi)VI&8MNzwdaela$m=?_bad
zP)R>a<zK{tV?Znc1)DaR-`q&gV^bq`kX-;k4V%V>c#*p?cdL#I1I%nfxjcSXDjJ=)
zK^!v=snv!pG`xzt7TtkxW6G?YG>D*w>UrUjw@Z_VbjiPL8e3O#<{IerKF;a;VHlq(
z#_Z|xB2$*lei}5zsCaN!D{AzW!x+7%s(d}nP?ru^wXDOCB6EookClI&);RpMqg`+K
zl_<%gi#))?g>)f!+O0OT7#sz~H!)tqj@>Q;;@(%{V)hY}5yhRhAA-_si2J|7Bk+#&
zc3EbCc107NNuPQ2WfO&82QS%l?Bk~7QRo4=6NcZL46v#O)#r(n5_|qs1E=)#W$#v@
z^Y8d{M9NXg#P75GXSoE}T)FIC57>t*R@7Y#vGOw4jJ-V8)!xo}j?R+9nqM=M$c1|u
zxF|2BW0VIzI!ocapT$PwCg-0RmQYu15t*GC!P?D#6I<@;{Ds2RsfysMbI7;{TlETj
zyvj(UT<&jB7n0@6dgg%l5djV77=;$c%HsrQUZV6rp6wx|)e{8n?zzzB{z!`7p(x{|
zr-&MT6pw6Y-J`!-|K>)z{wh?2RfuSOZ?u6s02ze(EhRSc;3|cEvT}a*JNq{uA28Xd
z=Y4rhnOUz&#9zG!0lsU$=c(}eWW>+fOvsmhu&}TYAEYPll-lZ)s~+f2P(?%-3~#Rr
zjxwGyZ--<Zc`0{mUfo)hr{Bg%$p^>Z&55zv@&Z`0+jcfkeqvVsP-%Mx-nnRVhgMsw
z-uM5u)FFpOcYAJ!kDWgXKSy*bn2VGyID!4_gtR6FWqr_hX4D1UM?+ozA&hyJr37WZ
zn7O0sB)i-X=C?YnOjs@BEK6VJhp7enkC-vEx!Vw_mJs01`JyL7^vG(k;b4(ZiD3%O
zhU5}~O${Z;pSO$r3TV7(=N1}iOOHQQlPVj^w#w5NRAF={`_nVgh3wrhXlti>7&by#
z`<nt(6}cBkD!H<vJ3h~K;Yjiv8Tg`f#(!_9UjUBiYE^a77b8;5kG@Dlh<fbKr>@@!
zPy@N}BPb$cbIN_}Q{Ru2++ejmX|=DCmt{Dv!34e&dDWwQM2jSs+90eTgHOy$cQJZY
z6jb)~B)=LVV?&57b(`oQqv+kJcUe2OB^rV|X*q2^U!TV%2_@(&h>d)+er?Se5`|+E
znFk)f9sS!DbLZ)<(_z%2lc3~Gm6{yXN^CJ;+hFEz9%F=^6(l25RZyG~MGW3P0wBsU
z(5gZ%BNi(3q1<E2>L=01W@lC<i2+e{7v^yf%BnO?i2qPO(};ol6c_PYs$i-KcZ8jc
zU^c9=Ol-h7)XNGrJnVR@*1ATravZYkQKfwiFWyFB=9QRk)2Cv{f1^i{T`vuDYH5Y9
z*L(4g6y8Zxhj14x81d6nIWTXs^#vzQ>nu%d?fK`Yhu8@V3sQ}4+|sj%H1(bI>lC&;
z)RXW56ooObJmI0q)Hz~1nYgD&cPOdW511pS)CQIU2cMRNIhT#DeF|iE*=d*xdSHHS
zVtK&=E-~FL$b66iA=x&f=f%i&#ZlbgB8WmoN7SRNcyyf@JJyMh28$XgLGDobykPk4
z=JgT2yoIeIMcur~>Rg9BxrzveRkoE8MI}swaI0Xh?+NR@5xlx)iIq@E9M4W~`vEeN
zz&V~>R<)^LIW6S4N@2F|-^S8wSUB9I`nLL2Jum|YM@jlsr=FZ7X*@c)cg0e0#TE>7
zs&4OSq`rHJf-^@v{{w|d)eJy}$U0;2RnBdDFmu6nPQbqv1!PBY3gtzsvyWEfk?JWo
zS%6<W^R5+r2tTKtyO?Y<6ePh@Wbgf=o}E9bgs_m`<}8{aQ!tQ-P(9JIKLv`wTk}W#
z*=|<TRCJ5|mwXTVrgyXN)Az=j8#RCcu?Zr8TN!J38-1<S`F0`w^I+%6xZ6w7UDa71
z@wlppO7OYD;m%Bo<<@o~0zD<734ZYUv$3#*9?jcG`@BUgQQm@1mUs*<Byp+zTl9^P
zMUlK32tR02i0?R8PQQ1&!zjKvo7uaK!<WI<U<IUcu9-!oTx!yi;5s1TO@b>3V!}_6
zbaaRro7~{aJ{s7je%^7$SLVw8a>uND$mRZcEBRg&+=rvk+C=cW6lgE{c@}SF4gq6M
zLt)ht=$_Mxf*z^Gw3s)SVTp3;DpKBHg}cq9iMr|rGgP&csR~(x%CU1h1M_Qu`PY8W
zdkW3{c1y1(Ci?H{cO;`JhvIlWM4~gsFB*#e2UJ&kG=(YIX7XT-g<{ZQMI|FTNQK^H
z%Q(!u>RgM04YPUS=!V9KF-`hQeUMGf(heQYfi`->5C-b-0?5B}CejZc306*gNCYxW
z&Y~_Tt@FSa^n;5!u!4I@jUGJ8ZF=!))paptsiHCfCh$#%MOcyh>HZk<I5l6g{atnH
z1^dA5=-n(clVGd{^1fC<9BMg_iX^^yJ%pBfP+~B5Jl+Lzl_a^5Scj$jR1Jc83Z#=&
zyUtv`>r^qfRsAZsW1kPM<GD2J6*R9BRI+hujz`K5DsAgDHdX@=(xOFzIb+ATV2;$}
znHLjSI@>Ku;qS4xH>dzJu#lwa@{GAP2m&Iafd(6T3btJ=shl#D4^%8nZLV@Gn)L6Y
z*c-4bNv?$tbe(q`vkd;IB!uSJ*wSHg<D?w#jwWdz>GL!radu#D)LVP-j~!P9UHAI5
zf$QOtP2B6{NyPEh`SJ@;NpD=G{iS1`;NeOP9)j|MxIw#x;QWlR0Q|MtGZ59%)k3aN
zwPCoF-DHmDgD}NKr?PuIB}D|=k6I<fyirM4-Zh(-fs}~}o6y~WmeJm6`E5H`+8N#>
ztiukh?)$cwrO2n2@YMhBoG3YrxG?X$5?M&fklIet``*Im4lMGZ1*Xw7gri1?Q8=C<
zInF^Na6jF(4$5Uk@N-JXBjmYa{IKQthQb!6b(p2s(TMm#^Xx&VO}!232C4{p;#M7P
zH=Xvzy2iq#@v|W?oOkn(=&Ap6@j$;0<{#G{nB)WM(+qoghtG^Av)(4UwGcp{(M#xZ
zdJrA1i98j6qzT)HcW6&_Bacc*`~nx?s_=?{3LD3$Br-fOpkL`EO#~63`o7<&&L8rV
zuFpuVf$k}O>iBOw=9XNyStz7Pr6LrOay|k;6fO|RKh>`02&}|{sK7SBh6R>-8A#a9
z@OBW|BOQ(yp9U$_mxsZeY-QDJXw@e*H=j4Y$CVchITh3m1kH2fy806Q-J#<T*V#OZ
zm=|N(j<LIcwWKPFl+T?gxam_IpzkrjIeSq>CpU1;D5r80@4Q>Jl`~Lgb|a^M;EB?9
zrj1H2t_yWSuDMXb+sbjG(tt1)D-!+%^7TrHL@;fZOmn59|5{*v><-~V=og>({|)(e
z?s3(4E{YQ)kBKngSNk2Rutkn`A<F4#p`)x9I=XF=oQ+wHE#lIN!+x_YM6T@dQUtTh
z$g>rJRjgu<oGlG-V@uZ?AdHM+*v%eAJ4G4)`}c4VejMvN8Ki~Y^2qh~Vr1XKR#<JP
z%UM)oW5``vD&OC}E`SkFybvCk*<9X_8M7~t(ao=@3nwd(uk+fU{<&+|(jHLYda*DR
z2MWrqNPS;RIZuei-|9&#nC1omoCIGlqJ?=qKvbGFU$22UZ2{yJ+mAt!Wrx+d0Ui3K
z1-8JgJFvH{er3~UNGE~q{y{bDg8xb3+b^l{5M@C~?`}O8&&9zQ711^X<`RcX%~iX5
z`xD>@EKS29Bzo%aaeHeR*5hHOF4~Pe2T1F27(;Zel$^NKLVyz_=eH7WZVD8&moVv6
zPV1S5DYSjMU5-TiNQ)H5JdA;JWU);&NgmR8Gv3`3O@+Z`2q*>uvxwA8iypq_DutFX
zW9uO<xTZ}>8=vJY4X<ziVRl&2|F(|e%@m6mkP@YYOqACPp(wnjdV(Yw2n`G_5SDHG
zho^~&0lrLZ7^TbbDc|K%R48GB@)uIP$w(k1VDZKlkbbq)YeG-USe6uGv0mWT!vd<O
zju=@SERKxX7M7;A=?pORO>0=5_!kU3@}D87P!$g^Ej$m78r!;mnx^zfoe$6x%{IN7
z0L^I_2NW!EIZWz|nmB}ePuwh3c+$Zs11}1`t87X+mo)P-57&nOqkN?KGnV`>n<>Y?
ze{aMJeIoL;$@A@(pQ&u6Fs}OGE&tmd&hjz)SNo>$d7Z2ZP$gGw9WWzqtMY|!>nVKU
z!6ntTnjLk`4Tbr%TCh+IyG=TerEfR1z>R)}tnjR~Sqv1R$JdQ!6k$o3m|mZGA$G|y
z2J-8d-GC^saJ$-Sx-^@>1AQ%iw+p$K)H$iP1gIJ=44WZLc`AefNZC!^BbrmKRlk3?
z(Z7;ETLdxI$b*gFtwCFp6b+IfiM_N8%?8%uD8mrtDxe%d`l-wUYivrZMTkkwhdkK~
z>t^7sv9^#62z#4UXQ~DKv9%xyY>Wa>knPb7%nTq**it*-H!6)dX}bThd7lPF`0w=U
zGtZP`brsf8hRmjyBTuZ6DLaB8y|<g+sHoX$!@l<V1A^96RO)wD2aCeD_<T)0n)5|P
z6Sw-F=KnCxv?U`SA*xHf0Nd(YmUeT#^m|9#C|kFq#r?htJSp$wxoqeoTrB62%yS@x
z1OEXKDzO*0_e&iH4(cN7H-Ebr>KsAcKq_q|!0@o5NK1Pm$@llG=fY%u1P%2pSW0f%
z4F33JA_yk0sjmj(@3SAPeaxNG-=6usVk_fwu@6PI#ul!JHYwUQXtsT_V%djyZKs8|
zbv76(aKr*vO&|lNuIzSF?0F?XF)Z&U(-8v9ZhDrB!)Cl9PvR&B&FAg?F_qvwd%~wG
zuQ`5;^SbM~i}A*x+yGLf_M~_;8Z9x~>c0m(FnlhpX;^+8xbeNB3pu!P!L3)H4~m!K
zi?@+?-op~*<7sExi<tKPIEUX@s^PWVFj_h*)af~|d`}IkC_6+DuG4#egPfmEOvDCL
zk-EEzqux1*V48D|BIkpqhU_s2;nn1bo6@M|UI=BXDnK?d7My6Hs`T_>KHjPY@K4+M
zH}%}Ri?`Ua1PKC$pF6Mu=#2?(*!Qx|NxA${HdB>qS|`(d*r(cR=`L@A&xgisxv+~|
zRrK;(VLFfABRy{X1_9(@L=?VtT;?N4{|XBZ3^TR$scW|7$D@0A?&fG|J2LczSK9Ky
zTWn~1n*t`$=-a$&yClV$YZ`<W*e@8PgoL=q-Xm^G(MA_?%2R;8XQ?QLE}g(rtu}0O
zE<(nlr=1;cL3qgZ1a(<O7fA;O{}1}y5-QwwtVD6go}9hm7t|f|C>5^<g=Ui}t28#K
zTy~rl%)Di^1w1^VlhM?qg;9Thxsk8cJm<zC)RDL&<(O4>j*2$94(mWa=VA;Ei4q<F
z7Tn`r&u4#=!x;(Xb?V;QJo1M8SkHTcW=MFQBL(MmMXG?n7Sz)8_to0}mczi{ce|S4
zl2WPsI>xc|4`MJAll)UstBizt&4t$9x2!{v&EA!bMqfvrOi)U-Yb7LfW(II5!($&`
zJI&T0MHr<nrd!B)3DU*YI3DjN4Xzdcv|QD&8KaerPgYJPnG=G+$#iXexy|m}7}(-k
z`>0{nA)bXyXP#&Vm^m8q|9br6Y-LBUxCiUU>2JXxdtS{m)_xl~7=pzce0Z8+iSL~8
zCnOa!3;a>C#*%<pLS4e>+0Ll72bLx0Z5kU~tW;@C_ABz19rFVz$;~e}dKxKzgwxj>
zga#tM_cdWp^cIlv50toMM+{thEzAWuX$5l`kK0*!=hGYze2k&P9gNQDx~dQanm9?f
zaJLUQmT;moLwNz~5dH|tnQ<3DE7F=s-z2Me&u4&=dBGAJ<d~_JMHQBc2nSgnsVIwj
zhK97ei=x-QgB`-DnJMD8MoYt<ugO!~ZyivHkEOteiH;gYtV7Lo+x<8FkRss+Q?9d;
z(P!0Uw<S+PsTs6r&LNl3xAGtUeb)xXwhe=i?)=uZxvrx!2tEp@atsAwJj-hW{vTrb
z)l!SHfM@<jS^!w6>_?)~3eNf5$<xxOVHPFZ2{49fnR|j~JCh5wQ9wOiA1#A?N`pB^
zIk&J^+l`fdbIIaCnH?Q78Bn_?mAE7HPq^hu1_&!CPCNb-h{Twct0Q9`qd{^c)T<6y
z>aTfi#;}0M1qgqnx0dy|N4qi#C%0Sqj#J7sf{X2cyK>&@9QQhj8fV_M<T5^R_JgNk
zj6498%A43lCRW1K&~}tdADB{oaQlKcL?^F<POTVSC;KV<QO95gn56fX0QH#QZi`>(
zo0HG9UUS|ri5#YR^j0!E$Dt%LOD9sx%eDGY;Ve%pp)}=^C0oXbx+V`)s=S1Vp!L5c
zxYG;;Yt0=emMUBC#<_{KUIPXXg{ZL;U)nuTa)JwOf21F?ht~0e^$GJ*{+*{|H?LxX
z*i;$I)}E0em0cDJVsfsUi$Gsxp*p$8XX?hw*K#gez)CF!11^shB4xM%<(D#urs&xn
zdshScRPZXjq0n10FHRgeg*g~B)(O1_);BjG@dz;ZCFBQ;7Tnu-)(TMa9?B$$bFMt7
z31?x)8Ens#0T&w6U*L#*z9x7ribh~F-DjGtFkyRbAOhIlWtrb?nBTP01WI|-$WMi|
zaG|e2P)s8|!z|#)t3sA6d)nH>0pLAmjr@NxZ}?0$|HQro`K~)r#`z!<iI<2!g*WBo
zVsdMqKxD=pql3;g%Ue5$#?)MsSHRpO<Rbc76@y@keP^rB*O0K}7K;#W91Z+^7mDxx
zH`_w`BYOQaJ04SX!n`$Cuf6HUx6_`FwHYrxaTuDM!+r%73$Mj95w}LaU13DQJu!pp
z;oY5R@ZINK6nd{a(~yF>8Jo*PZnVchr6F|(>frxZoScko1VAgt--PIJxg0z_oC?Am
zy6fq64EMb`D+(eC0UNqsAeiQSE|@%D5fCs#AlS1O&~H74kc3FQqE$y~7Z~i$PJZJ5
zZe@#gf*5_H4>?OV+PW4|ILDpfZA*V$<e9wO!oU88PY%kFo)hqv9kYGE``@V{8T+_l
z*?|giw(*^qyfxVUXC;Kn2f0U(d%IYJxrl0OIh)zs2j+~5CGBJHr*|n2;rfI=09HK3
zG$BT?6wmUt(8fifr9DPRA8|x2={EaRKguaDqwl*OaHcFwk{j;vwk7V_en*3Er3sfN
zISO_cjU11_i>nY35WkbX#!1)rgON#XcHkjvA}^W8UdtZHegxxf{uqmiTcqeYWm+Eq
zw%AItp$uVmzZe&@V3caew=wT;FR*U1;_i`mV@4Mf76-kay}uP`C!Brk&zZ@h6$h1t
zYvgg&GzC6~Ze64Td5@fj!*-)9&X2fj5S#LHAm6xA7C+;Vjw1*5lMZ+y3g?X>-P_4Q
zm=@T_BHt`~s91${saDGpUMJC~kU1KTn>+=3At(2XVr@fdb)E{@6L0JgoPd@!Lr58}
zY)B#&2k24}k_r1^fSeMP^%}C7+B&-}USvd#8lWt0<QvTubw-;T?tE3!G_<G0eI%IR
zPrj}ARu?K;Dv{;;cv`24iG$mV3W2<r3AkxK5T}D~s-m-s01a7VJ`kXs9`A*5srp?Z
znr{^1ltN0sT#v*INbZEZW8uRY?X=^|bh!varZW}4qoeWspy`re*O^3_U+e`sj#M91
zgc<Bw!B)}@(Q829`hwN8TcqU|Gg*{e6Gz?nul0T_v=GD{n6$_rCzGW&^%?|_XwxPG
z+<UGQl1d6oIcsLq4ybY(Z|0Jp=*xEpRx8_;fo_;skoweE?^RvorSaJ?Po%)cYTK7H
zmW)*b!!GvFY}3tXyt0y6An82}xb@pyH!0(1^&_+A1DU2pu|Cj+#nw!?fgVl(utf*E
zV6HFy=^A~uZb~uy2$&G?>9`@YaeySV*xvOUBMWB#2lZVJTl3gP-bEQz<hj@4+A@;h
zgkkVFKFFN+s5$LW1A~_9LlkatQJ#mN6vLGd=H+5%xrq>2>J{brK5hRE0;@e9Y=5cS
zz0ZOtFnVKNRq4L;(KCOI|GCCWB*&TS7O#y2WFTWm3z*S_*!x@{llY@x6m<a9m_;U`
z)e2NfbN8iW6<S-$R)16jf5YsRIsdn&bv9kLh*bL-z{?8U6vZj$6@U4x5qK>}jr2XQ
z-dxmax;_^hNn#Q-=qq8KLCcg%a!+yO2yMeP%PlGIz4kZ^t&w*0=-fva+^HqL^W|>a
zYyxVT`p;AFTH3T|vjw3Dz5da>YgOr4Aw^aB)c*C6C|6dVQxv1h7JMhDQL-qx?OkU2
z7F0tE4Qv7U?i5u4*ZxODGK{j$Ee>pf0_Id_R1og+x*FvzD(T<lpUF#$3gC$6wduPc
z+CuSWPKaanx-^VZ8(#_Jh9(cXl<;jC!$;V|v1D@(JlmX!7qJG}^XG!EU$ZMFg{n58
ze%WObJ5-qzvuQkRmw>MRp&3J4sK=kA>?1JrA2{AUN@~}gB_fjU5pn7ivmG>Lp{qAX
zxdKy`-;ue2$z^ThW?&Y@@j4F8(Bgg9xr}tf_U1OGe|JmO_N>G7N%9R_P}Us`$ES%+
zcU>(on>4Wnn*Ga1W9YzugEEqKMTPh7p(aqR_lG_U6`{fKS5$~y$54XApL3Kt#o;^J
zyqB-<S$t$z`Lui>r&Qk7?dlAoo9Ng`vI3Aqk8U}4%y2p(>iPN&K;q;>3l&qS_K!Zn
zInhSl@xyouxFtn;!KhG8BXm_fUbIqSb;SV(mq+OEfF;#s*Fc{qd;O$^v5;A^dY)x8
zeHFX<Tt<K<YDFP1-z=iwSxGVu-oM|t+VqH|lRx^Zv&9RJL7tBi5~I0RaPOOrX1IQ6
zkQW<rv49OId)b9fED|$AKBOAgHHM(`zMK+IlXyLLFov*fVuvfg;K~L`J^XhceT#+f
zowG~1>gY$LemEIWw`CW#&%RA!nXWp(>EavI<d?Ba_ked~0}14SU-+&gaUh4n2yudF
z7jEh$2L(iAQwj{(p*SSBF!Hk=<y6VDLNT+14!+aoaLzRsj@hFMbrGQVW(2p9KE3f}
z-*t-PLNiM5F3ZCTYt)-`5X@5oAY^1Ookum5NpR)0<1#C{hJ9K?S`|;$9LDNmJ~TQ6
zuFOvmi;s|<@$WEeNVJ3mlpMgLeN91t*(jU7QR||L7ID!{Z`-J7Rb?f<6*ZNBf4J<z
zBCCVRcN)NMhNKc|-W?uuB|g!u*UB1yB7qa$3YFg|>gsaaSKf>mnEb?Ge(H*58as-5
zs5XMoS|jDz%0Bj5SL0*Yd?^fYV}Gurp(rD!EB?%}ls;4mr!K7XN#<s4UqWOoRKV6?
z(Q53spb%HmY>9XH^P_D%U0rY1M6+0W`gy%rtGMf-I0yts`(QvwI2<UiSDxVoQF?Im
zUI$k&b4i3}l#cDAK~o;Gct!>=AaFKB6{cE5g8(9`N*)Kw2P;Xff0hH5R+0J@)zqTS
zEpdrk|J84=UkOxmh^)yC0=;#S08^KYOR@nr1blz2y6PyzKZ6+(>U0<@7(hfvi~b8x
zGTf`Ve;6P>Dk-!UbeiU7TPoB~j0r6~F#LK)(Qoh2%(Bf>G&g{M03JHfKJf)$#T#Mi
z8LU^KrZ46a=~p*zwz@0wHuNPkMw4uYMIF*dE5g~(xY7j;+{p4h>yDc`yKM?DIcJdJ
zVv6kVCy+U%gq-ehWSLHXXigbMsYd4cHTg{Z6rHg!BL)ZQ8uC-=NEtrfOtRo;UfSnF
zKX(@=v^N0D3F230PMQV8`2i{dCHoHHu2*nPH=vixQEm>GYXS{DA6fwaKLEh?hP8(w
zzYVjOD^GBTE3`^3S65=r?FvOd!I*A?RClZ6b$V<}1T!a&jWf+<HO;;CoyZePA{u#)
z+DM3<e}T$C&m>7?+5;tb;RB+)Z76JHY6_i>dNK|T-pKs>^Z^ub>6Ws5#1h-SQds7m
zH`ke4SJ_y6q>x!Go^_g-T<YWHZ77}8LRHmB0(|@!lDX4PE>G#i%m+6Z^)<ewlS^j3
zs*OB)F{gsk>RTkehR_~39hSp0()#YyVS}g{j~X$#4Z;i-({6QAs8b92F|*+};9=O^
z$7XZG=~PuKl2TM#^pt3EKwcX>iWwQqr6ejXVi11XuRw2afA*=!cnd@4cOqC|;~oUo
z@rG#GU$_&Fh|#U#xF?^uT=axR@j@pHG~}y)9MwV|^rZIHrVo5H+hNJ^<=)#xVV_cY
z=)7j-Qpd!werpWl_jzVtWSVCsGKH=JPR%7&T9I+pVyF6E|6~!Ixoz&CnxwlJ{5!JY
z3l;#*TaidENCS+JZB`cyQ*2iU2tR=^e%$$i35i2ri`iDMC?q)dm~J^Pc{HRPvsQ;G
z#L(#;ap0djCvCO4-dnlChphkdUnj}w*7ZJ*1($gGt?ou_K`Wlq+xq0`UXFBuD0lMI
z025!IcyZy#>XpVkYKE%dT6TVh!My2Y&4(`R+$R(%63Bm&J*jYuial3j|DV*2@_3Xs
zF#i7_|4OQt$F1A73^cI^ac3yh_S!E>?-Hq<(<i}_C%XSXsZPnmcg-Q7J}g5j!2QT$
zp$sV@g$*^Ry``3QO-kYbRSgO*adail-nEM;wXnza*5)8O>gvS^1cX5c1!oDSqh;z3
z_oE_ZGovx#^c8qyR1Zm*Bo4i@>+x^6@4dCDGV$HJyC#`wBF=p?Q|(_~t2RP)wbs8i
z>A`G$6lB(Edk9P2Z&$})J_?fhLu5YJ{D<hBAmCm=uM1ptxF)c^cCMp4P6zIE4X~at
zv?0Qw5OsI7EwW(+u{7;_e>!S<F`q0jQEej_>U|_#RE?tk!Y{m7l8gG!3qEL4?}8&g
zIh&l9jl@Czf$m>@S9p7~OV3N>K3|B;vRgPn&hY0_oq7L}xPOvF*vsr+S$Y}l%eufi
zM^dBn<i9jWXD}Y}sV8w}fJH#5bZhqFgudjxQn!#AXmoAsIlu%TuL|^TeEv>LI7jly
z3-AfuyA$EXp0Y5wWW8(oJ1X2^aIG3=2LU>{Y=rKm*x&`6dlwa02o=f%!M4G!2S-U{
zvjm~*!E+jWg=x>a2wz+k*P0%5J?C;9V98~sqa;FaNy=Qk^Dc}JkaQt=*g%EZ7N4$h
zJ2A_Y0XM=fiLG72SaW9xED$MR+BhRK)gQHj-@b1-eU2vfuGsjhYh{J5IHxINIWa$2
zQW#+X>`hw-u~y6BjzvqX8*f5C#$L$0lI@#=gsiTMuCYW7K3E7u{dpp9j<K0=$2>%&
zY4SSH4J3pe?qIv49&vnOEyehzrTgJ3bAY2%RRW#GQil#JBcy%{q+B~@*Wa^5PpWf&
zcD~y_%NV0MII(#buTz&76$Ppz2d&64si_96p}!m?NBK0aINS^3Mj_5_>BNkpyn@F)
zT;-e)EMT|v^&qnLhzME<a<XSJ!=g(F@&=X3m}3q;GVy?mK8&k&86*E=_I{C=-332K
zk<!x}uE<&q{U}4|ryjbf)$MVJQLRu0icM$Fq#v{8_EPCaC#x{ZQJkn^R*tevR|kxF
z4Q8|GmMZsz;pxc%S~68VdZ{nX$zx(~Db@&s_@S#ZU_t#T^yAm(5{dzmGLsk>_T{#u
z^}in=bAtLOuRF;j$QXP>$O=nsbyO>)>>Ktbn$y#3rqlHDJL65O#|Uag@I0;?*eR`(
zWW#s3Jb4j{s^zVk8%b{1{gj-T2g<ZIt=TOnD?paT>y{{>gNLLk{qz-1C@aq%N%sNR
z*jA5kAspq?c*naP)_8fsnnr|32*u?2>-!dItN}%8B3An=d{{;;eI9ZlCs$jz`^vd<
z>`35*xz2_x{T;$^v4f;}N8xBH!biJx@G)#KWQ$k$+w!F8-=5ZjMDDDTfvv5ve(BD+
z*m{*{{-JQbgB!h|Btjdpsn#gJ;uZ~iq;3^NS`8d0YFH8i?+o|fAh#^Y->|&K^W}PY
zg~tfLR{@oT$WsN#y-1SNVD=G<gtX2<oD<bVV9EVQEN-G370o3Cd!*L?ri;sk)sWC|
z$TNv%dSjaSJDE${mcwe+zrt`T4(^kheQ~U>ega?S-fsp&<g7QCNQN;Qzbb<(x^mn&
z%a7d4+6sS6VOrYBmca^i2~P(G?p;H~`lzHVHXMPkNP4LW)u|Z5Rd0VsQRX`-7?t)g
zX*h5(RVVT+(~5Ea<i)n8-G!+`;$p^c`$dx#={m0j$}n}WLn6l8x?<`v?m}?MTPqcf
z`9jBW09ovnoHQ@Ivz(*OYI$iD)O~Q-&!PUYspOe|UsLl=GUF5z+3WwK8yk{)V^7U)
z(>b}LlT|as6UvdZWm6Nu&D+EG0oKEzVJ{2p?=5bGGHO%{48aMA9%AJ^?BOuBg!;gh
zk|xQ*8@S0kig(l|a9aOOBHX2|5ns#=ioI15l_g#9ThsA7+wXy(7IRPx5j;*|qa~La
z@*^pR%b=CaI#x&$b4uu{G8F<T#9}3aWA6TUf0E}Un0oqI=mC?egx8#LX3%t<Qop#|
zdZwLW7BJ&M6pY3k=jcHkhgFHOXzV-VBrdR5nOd;LN<f0p6O@2sZWeAs#KH>0ip<)y
z5O(ujFj?3@*6A9@cs$t(I<4W*&&|0{>j2_xOPsQo;*%J*P<ZeT*rQOf@J8yjh1So(
z4-tl(?Mc9i!YlCsP!Rb#@}CNNixBkKHo)5eD|F2!qF+Tst&S!V*q4~%=4)o2R`u)0
z(Sm-bMZ-f_k~i}QGTHoYfCKiBT|Mp)%|{w9+v(}FQZJUEoAX$Se2kE-`-@vWS?i5!
zYvxenOfm57b;8WpiTlF)x;{|$p}a6Sqa|3ZrnLI3RB3kPd188mL*MO9D_?6jI}lL=
zyn8CnmRJ&mfEtXC-^i~~{o}f#4KLh7U;D_v;O_DG<?GQ_?~*5_N|m?K#n*Ygr$Q2e
zl0%NFk(17!HV~G`n|M_ke8SyP_KO{`MZ}c&9f|-5bqPC#Tt;+F?&X#k_(5Lk3I)_g
z3f|%~UGzQx9cj~q_Hk^eRLW6XjsuM&H(B5%{iGiP-0aH;=`2>w`@@s$Kyy+B0JMP~
zGAW3ftjqO2<8C_$pSONU1{z4ynwwY?cTGtYX5&F{P(VqsK#OH|a@HT%^Hh-((z0w*
zul4yL%_11xw3nv4?`6S%KZqoS_$^TB5D;K0Ec*ykD0;XO`0goF$Z!0vAQA@3X2n2Y
z&5;`A#`~kW6Qhw>x;4(Q7~)lHETJzYj<wND%{^{xzG>Te5%!IeHpIyF!#cq?|53i;
za%Idp%23v5c|*!*?4-jl^mmE`#8chS4s>JVcyMa}lW*|NRF|=_3Gf8R-T2iMngmNr
z%7HjM6r%bRyEw^78~8*i>bd6k|HC#51D}KGt50lyVKc2L3x(cO0Vdvy<|v^yq%PZ=
znImExw-=#m+OP`BLoorzJcg0F5xYr*G_@*(SWsP`4EdnAu7&l~RT4XY?Jx^VWx!3D
zt3TRaG~;eEew10%pF=4`>^V)*f#<;a%yCL^^QKgB%U>jGrG@)E3&x_9&37-|v+JhA
zm3!=CkzMdLcW&YwrIqeDXx9T9I<2R}!qN_|^J2sBKhqbB9mg?JQ&ZnO{K0B%f;ACG
zU$>(P2kQ)oMS4$O+dZ+vOU?ISS4kX=Kop}O`(^$Q{RS&?q*`&Yk&YSR0MH@wh4JeY
zm|0ieD*yC{?C^iouJk!V7oq||C<5eB=0du3d2Zj%jOx~K7>}^3pL4AGd*vOi|8g0w
z`RUqarFnqtE-S=$KMeeD)O(Ib?eh#dQi)mN84ZYGYY|kmNBRRoKy=M;Uu#(e#6)ki
z2^yC!PI=>9P)^>O1MAp+z0C9Qx!492xt`<^9#h1UBhWs5whdGw5TM<j@|KI4XB00S
zbsQ+B&VC8W^Nq}a;_tS>VOL|b=V{i*d>3dJ6gZq5N73J2WNhK65-!!n9=Sh3tt0D4
z$1i~iTET&aqq?D5qxxY>pmzCh!ugr<ZI*cz^(?E$j0ep;E}_d;Z}?a5ypX`B)Zwqz
z$x5>!U=PJXRt+BbSb=f8v5{5XY1U8BI%`uV^<)@Kj?Q7Fqf8NwM5&74+P~|;(?wV&
z9{Q4|WD5Fr@V)C;`k9Czz*N+JQT!%EhiFLD;&M|2A6W)pv}FRE>|vZpQT!`toXZI)
z$OfRDNB;SsFx2^~KtCGPz8SB8Sem@sSzmjq#0-hCtEhIw0@kU+7$RlU!-Ce!n?F0D
z4SHRA9#uua@<5OjJ#(Xl^FsIe;Hbr})g&c}ZG<53edFg~Ss$??+l(X&SBl6r*HpD?
zUX-ZykA=Re7rABaYkSG52qw6fm_iUdxXgP*if~D9H|YU>pw%&a4qcYkR{*R?pv^=-
z)JQ5z+>I|0npjUf#0_yMTHD$SQyCOTRniP>@{w=7%D13Uu{LTD9PF>k@AUY;(~!Id
zaa~uLGOeqQC*I_^R4efTPpWRSyz2yA)?#^y9pWk193Zx!$YiAASK-xEJK*Y?(G^sZ
z7%Gy9tAh{Kl42`xBixJS&19u#gK~-__Q_LU1fgA|Gwj>_@4mW-Sz5-*W55Y~MGiGY
z={JD;i#E=5vvx5!Ix|fTlf!C{G2S5ERk#B(HF>xauibu}Y$}#I5lxSxS&Mot#3oGN
zXf~${6vlj)e9bEr^**r%=Sxp16Kxu80yoSI5$&X*FbSP)3S5u<u*jGrHwl_%?;;Pa
z={j%*BYb0m^m;1jN*V;com5QnYJ-nO$tba*dl?r}oI%V{al1yg?u7ql1<y?&{S8@J
zOK@3tn-Vy!<FExDb_jiMc8THB{tC7RsGHF&XL0SnkIH4Y;iIch+9?s<H>ahH{(Ojh
zq)eO+=A;djgKWAtQOqSdN=ng%wXC!Af&9rrA(Mc_*hNS}ydLV#oezA@rM_ETr`0jx
zPnBS+4$`c(xZ6R_=Ne!|@@jx!`|0z594vp!dNy5hJ`t4&Okt4H@O*_q{xd&TWO5$g
zMfXjUOv~?sPuiOVL+5Aw*1gy;ls+bK#EAGcHvo!r;&V&7$GbjYVahQQiZ{hjh&gqw
zDIy32O)^*k8FVWoWd(|Q%OjNyX$3Cpu}vTy+YB|o=Ugp?p>eyvZ+&P4X^##Y7;<uz
zvEb75o)<hqBSSsqDIjYHRK9Z#QRn?HWF@*uKkLi^wL?hr0b$PvoZhMruBO4i70l{k
zsBggG%jg|#XV%e#|C#_anM5<Z2uhfDei}4Jpi<wYWP#FFo9-qEjbI$G@+Xe)Iy>XA
z3Py07t~m&mF|+2RYmnN7d~-n$woHQ7<}uB1pMIwuwp1w#^O2WbgBUR+TvUMM86z8B
zO7zeIiqKHiOG5lJvbJGiiKN*7OZVFcTdMVC{#q>#A$pz{HfPx{1Sc1SP#rKe-GL)P
zBG6iH{1dG!6g1=iGauLZgM<xK2d^!NYegbD&m0ZPTY7$GKJT#G_ktoNr7*pL+2ox0
zJP=j1uwr(hVz;kKT_!Yihd1K=%(ic&7u)WRj;delZt6s6(a7~1rkG0N8M$Dmt*l1c
zo6mLTtEBqmK>2=-LM83J&x`R};N2U*QD`*QNYv?!b6fQ@<#o@P?G(qZUMS|jPvphm
zubUssp{U~9%L5(gu};QKi9+QqOL9LB{ReVC7P43GS>{w*kQINzzWMKeJ^zW8EB-EL
zgg<(2lbb+kNFZd&uHxaY8~Of)o{TsI3vw$qazK@bYorU<GH6p~!66MMQDNI#yl&JT
zH6nmX=L}%ot$T~&U+ZfLKcJLbq!ET?0y%MP2~Ck{jAFFNa?z{RS9#*}==Uh)ju#Yo
zSOfEQXB&BcV5fZtdBDgbAQNOzyyLl#cA(_))q>X^Lo}%xG{d~qqZhxspjy07HC|G2
z!Bi!Voe_otw<-=|=<|tAEwP(o5biv@Yn?9E0kHC!;VvNuA87WCk$vHQVmCaWgMH5J
zzHCq+4N0qN=6f9wr5gWQW_&p47=Ke2h+gyPhqP2A2uM_h`O;}GyryyA-*w9`5xFy&
zvFV2MZ-e{nu~eYmb7@nw1(SMCN%7ym2ddY49h$#&G^PQ-VubLFWNzIFGVAiKHVh9s
z^u|yIfT>JuH>)>;S>oJG0JR^B@A0GWgd>#*<-=+3`1T|N7GKx1YDJ?z(^ZkZnE8D6
zxR*mjHK|RQr>F}Z9DrPwR6*kI)fshJyCQkt|D|=JZfFZN;4A>Y*BfBvPXhBEtPhA9
z#aTK@6{HE_eR?+CCfRc8?-#`^ZVmV4_yxffl0E6%aMQO3B@`JvE9EF6(L2kJydq**
zk7r+PTC=s_$W&xQrIZ!aUfEd&D=pdmYaTd{JD18uncZ8ZDO#6Dc+IgW#NU0Mh)pE*
zh4o$Vz@)_I3bOgvON1wx#F+-lyq+p3HFJD5sm^5#Gkg08C3i6Dn-b841nS}=qd?9d
zhjeL8TX-*1iTj}gIA8-E%cnJY7uEh=;%qZL?a*-n9{;z1Yg5&yK?K#APBY=B*Af=!
zb-k|7`{iJjMVV^lb)-6UD_$u6f9~~5iX8j`p-y>LC%O)}K?r08B8E;3<lfIR&)fK{
z`%`o^o0p)xyG=!&=l0->#9UXevGgb`N`3XX`J>-viaVyaOSKX;w&1@)_7*3Z#4Zkd
zcBM^PH@!u4#76EV4VXxQ=`4tw>xZ}K7jX4JqAW<rLZR-3qF}=!?a}xNR#)lke7@vk
z{)x_#w`cpz!@b?YD_7rbgJg=4U(^FZ0#23#pu7bTn2ON05(^i=^wCQqwMV@lB4Rqh
z<k+ibhyL8uu!l_1qF+p6nmr$@j|<UIiU0776uSaqCQD(Qio|&Pukhq#Q62g~`9(Gd
z+b`k3UV+fIoyv@$S9WPJPAK&B&2A$9t2{vC9~mT-ejFOeP0vA-MVK-t?40@tu8&i^
z$BO8N;yHP1Wso<Gfma~bu>kSdN2`uGo1S^b>9B@$?&Vu${}8%|pX~6C3LKrHRPI#=
zqQ2_*XBv4>k*t^r)o1dMpVV4TTwRlAz=!#`JrbYX8qy@r0tst`7rg@m!s}m;90YQL
zW}{olA13}N*fFxtM;?y;-=8D_@HVZ{JKo2Fz7w&K(U5a9j|u6=EKK=)Z0=kX+k@it
z<Kx9qS_Nfv<>(&Hs!N}0h<$vv07|p;^G0N)@%v^B+C~A-+Iu<jF+R$FS7gHrj`(`f
zb;r(y`6U>EwP^@YI(W?b>h4b5ERM2JLJc>l5L=}pB~=*|e}R83VtI8P#5KulR)XIh
zh`i}9fs(a>*jS!Bue+4L!_JRN3%GN>UwkmROeEPKe3Tk>ZoNIjG4bZN2`(IX1~`O9
zB})&By`(aN@a)p<XqsDpy+`3k^=6&n+i;m^q`J4T-CxN|>#_v={-)&##9hjBMXV58
zSsm-Cl(d0OH!uKGTur(s3@F)z@-eC9#KFR~u9v8UA?)p5n;C)Ase#HhK0NJYRJ<^I
zj7BngIa3}j7c}vQg!N{?nk>akx)I;^KxalSZpiL3PRq&`0M|@k@=+x;M8gcQpC5>_
zN!VHDtsTU^{}1r#KZV#MH#z}sZIxR>dI@rv=lPQLhiXhc)$>HZvf0jUdwEa|N3YGW
zO4>gHVMCt{g`8V3CO&*k|5;%*)B_7pE!?kE8-QvxsV=v~1_jaC7poGyq@p&)f0|X7
zMZDZz<!EpZ85J}`VTu3#Qh1h!@Aqh?eC%^s_dg7{yR-=@arPOnrp5b@Zn@kU60ah{
z2GWUTGVnl_=wReiC>X;DxK0{TqR;bI%$Bbh5}&XQCXcMAfWTNGvri#gD(LfoGhp)$
z)z2hcLxfJK#eq?71d;RkIQw%mIX0nrgEJEdA~}SoYM@0DbkmiHoh;f!&DWR$izx_q
zv$76D$i*KH&9+W{+I~4}{G`D^aWyN|vruAgEZx>Yc4MG|;*~~K#&E(y+r>^bt{VR(
z4|pnm;_Tp@R-OVm=13q616B*f4limOj(e|kl{w2qG|`|h%nEZ|`Z%l)^SC75*8<#v
zxM0mDQS#v`3;kmS!@}PMvS^xl^lNfdg71fF9n9~K1>b=hgv$reAW)oE#8+-0v8tHE
zw^V)Q6GAr^DSK9C8DtiIwBQDZgX=s}E%8uSRNW5xB?+cwr?t#(%1|3_dbUJshB~t0
zgiRTI84ob6!Fu>ghVc64VJ=23ktPXN=DR64!*OSHU4qZs;`d^oP{$)0)e6JyS%Qn?
zh7T#DM&to;Yxd(zxn4BT?i-Kyb^vYAqlpO@5`ppRN_Hy%(;D4KjxWF|6uZQL@YrHC
zmkQl55@I>EN6>#X%Qfo{r^)Ts=1W=EAjCC_7(av{u87|UaXU!-qhBhg2^C`@FoK6+
z4Zt&_fZMuOgDO{(+#mE59J19VIh-jz%S;VU<Qvo5-!8Pz_PkFrKPIh>K!tvBem{ii
zus;rWL$H_0$|7|QGoz_V08*-O(qj^lt|Y189i62|mVMDEqp(WO35PX!n=f<z(kxl^
z;j>v%yPPVp$ZOF{*dO^e(HVj;v4RsBq1iTML`_-#)hZ`Fb0+0#V4JuB6D^rys7EXE
z-PXbSk;6<)WB}a1U?vovel>8Ef1va}p7mP@MffS^kK9uF#4eQn;_3T6x=~}{nW>tS
zZ`X^o=Fmx&k3{^g6He1f1WiYdk{;HPK2;0kB$PMLa3$x=;H`S0^7`ad0w715VW>8d
zrT!N%XMI9JUZ5*##Gti5FF@4K5Inv>4$=oTk1{(~69H@zh%u`?&^?aKRZdlaEMTGK
z;1VG^;`J%SnNJ%+r`pmC8hC$ig!K+}wk<&>;5Xqev04dh?M9vl;ib^GL&ur4tQ!0M
zz(vT8c1pn_P!o0R@fXubbVAc-hih#8OhOtEJv%<V?;oBqDOhYs4FzqA`CT0l1&v#1
z?DNP^L(Dmd8<$Wi2^S49)9s@F+Mp2qQ*n?AtY`l+N0xFIy!}h9>hgZ>(8~h>mOu>y
zpKAPym-KuZ5Z;tSs%Pg((!U=8Awnq#TA)#H)ICZroHwU-Zbzt_0iAzqUic5EDCsYj
znt)`)u};`>*65<I48ID!$kpJ4fe1c^h>pWz`nY+vfX<DgZ_ENTqt4K(BLL{iEc_T$
zXmhGuWoakIty$=Waw?~o2g$Zmq<{BfWz>1{o4$}SMy^B(Tiv1Ju$3(qiHKt^xP@q-
zO*I3`NJx~C$eSA)X?A`zzSX?FXhWI_nU>ymMU62zmp_5tp;A^rU05K|<?4_h;G5(9
z%`R?|sS`rjO(P@-Nuw{*^e0L>lZ%7<PLhG$tcqIC7iPXJn+7WCh+45JG0+D<%ruW|
zTZ>g4HZUz{^eAMo0gNg~aQ4b(qWBJ2VxTG3A$a0|@evf~4PlWaYu!i5-dV0j;s>tS
zozTvD<cexz$$(bLqWF7(8RQ7wOk|p`UgDc>tchtMg$a1(t#TPb(^?5U0-qH9tu4p|
zp*;{qpF0nxLLXywbc_rkaSE*~K@?wgOXJ<pvc@kZ9UN&gL)fJ*=LZeL7c+F-XT*!G
zxt^CRSyec40o!Q?isS?HbUhZ_)wtQQ++pBdzhL!j8|Kyrpc2Z^oyuOh%}N76Zm(gK
z0aDnG-r0<>$CjUN*?{N&TtK-oAP{|tQhoR7$=)bbSu}QL<N}Sy21zhzpDGVd7-hFV
z%)AF=#`x?3<SvMxR#!yJ=A928PFo#U(;{V^`6geltI-!9K2FC@OmN5$V15sAUt~R|
z*#Pelo{PmCAF<!vp}uo|qYecX9}MWBenA!HUmlRV)9+g}J@17Mbme3Fk~~(>E4<6P
z(eP%27A?7Ny#`m&uAYi^!Hg~jt({pATD4&sSg0FsfX7wh)x~1G-D+UfNwok&hrU;K
z=}B^(s2Zn~NURZFS0V|KiI0^GXN#8O^EXa{HS19CVs6?T4)1^|5@4s~gP`?s_u*UB
z8L%-Rkj*m^+1e@QZ&W6obmK<u?ulapbnhJi&7JIu$g)_?LAp187CD8fNNv48XF<Ou
zxl8xB$Xf=&Y?(d&;e0r)_XcWtoG$URxbbR-?W9-rhHQ{^XC~6BS`07odB<Osyk?J-
z$$uPaCL^3LjQ3T*)&=UZ3m$mY-CYl@2(B<i7eotAzuSw<`lRCNCOE{|2~>(0ap_^P
zE8X8`%V9RQc?CM@wsepI#+^+Pv+I_0V{h#0c$oqjj_>X#IOYsaSyP)b`cOTzQspQ6
zEyh~9l5Ss~muBWw&G_ichs~971bb9UK=mhnV};NpgZ$t7s(IeHkHYwBgyo$s3G%}q
z&*iRA%pb~>1pB&h-9fPuG){+YW^-2AYNJ6_-Ex$N2oN0HM$+<`6h@s)k*U$TVZlc*
zc;Vrsyh3NFkkte``oQDF3BiNj{yst3I5;*Il8vk-{1`3E!-%`6z4L*>hNb!eM|cn8
zREtt(@RVauzVvEZ#vNh&(XgUe?syHUr)A+`vV4dts9qB`sB9@i$ih8C^9a7&j<ab(
zD^FjVv=_%yZ)d;W8|M9DYXCMGss)5F79FY?QTEX5W(Cd))_`XfkPlH8f@KQ1=>JiM
zMF{}VzJ4U`8KN`rApxgdPQ<@lic-Z{ui*4AWs#Oo;V5Bh?TuI6KPeYH`Mz${(usf+
zo6RD$cM5A;eNMM|Y4)xEfg9iny@#xvEdyuY)4D)$1~cPKOeke#5_g@N*r)D2RG1sJ
z<-!1WpscUW0S?3p__{*nr?zI91WGf-JgTBQwDoG@S)yH#4EzQr(St}j_<Tay?!e<v
zhRy=&V1qS5*5369Y5E4^q@?Nz@*)a6PRs1((}sT-mlIWRtrnzsa05GQYzC*oB;34x
zb7CWYUCX6RHR#d}%t{$dSl_^AWb3ikss%S;Bu>7kD8nUcn6hc|{}w<<jKf}W?PXR5
z(!0IF=uOZRcHmva{V31O$?^Y?ehGjq+hK_`=N(G&JW}J>Z1adVo6=%dgf!azMDW!`
z?;kYL@UOANv7#*{>V7fix9H&A!##JB5YWZtaF(sNvAS}EU?LTnVg+A7YmC1eJm1R@
zNLa%0S8B)jQTkYKG5jHk+xTB4Is&}MJ3VG|j^WQT&_gJ<ZGG)9Dg5{^G_4VRUafD?
z=4nv?V}KRtk@@vbbzVux{vA|rCyWef+sDXVEEgtaRGlOROd^|5e_``^2DaKuU+AL-
z1_&(nEW<RU<*ein??rCN+ejoPN?fN)a3$g00)?=~d#D_a#i_NhDDYM=egbWFXDt|{
z?s@QdZeE6(v-Kq#9sqXT{RF<k{{Cv~voI1qwnMLqJ#do|r8wNUnqsea96K~rF7z7&
z8;)ky{K`{75Ki*j;O1uore?il4s`w1vwAytMY~6T=RFqhan25OOpnnv90>WhO(H$f
ze>R=@yiVu)3hFR3-zL!J>qJ6IjuxvWxOQHrMrE`O>*fn#I#{hij^3YZMgch0V4G19
z^@5y`P;w$SSI*`}lzM>|mu_;Mf%#ku;gBu&tu<%|*A+}zCd#a1%S855z?hZKk*oG1
z>R9VEj1F{S2k$Gm*gM*mBz7Wo;Y7zeed4&qOota|)SdV-W#Y$?ps5Ov+^?GTMJep$
zt%irW;#b~KupWy1@D}_WUGk=TCCHGDq<Q4e`G8Is?+zs{s#xa?J`1%ms!?0e93Xj7
z-V+EEE3jO7G(4hJBiUlfB2Mmp!|RqzmVZ+vhGB6g0-hkR$9z*^Ey$e<bhnf49YsL`
z4V=o3aDFU=j@gDK-;?Ge^!ON${1E~8HFsw5l4Fw--`bw@nDT?FB}@shB>2u%SHic=
zk~kZ<3ff-%;mJ9BG+r7@p9~->r@MqJW)ow$A176_4}#0lPdDi7@{z=Z^-8LHXQ0#n
zqVV$zSI(LCMH-MJX3sXCEx>|!FO#Y%Dep%TVL0u3ku`{)G9}nkw|YU%MO9s|_xJG1
ziDeBXA_5oN<n*NhSQn+S_Q%qUDkgBH|6rFnUvK%@n4{No-9y|Mq#L2W2J6j|>W_4D
zP(uD%cSEYmOs>Jq=?|7aHm{Frjax8T4);Xw>-Lq{kK1(l;I<Gwddg5Ban$P_yck&n
z)Q=SuZtxH>`Vf-CJ&=P(ywuy!1)S6Rbu;Utg{NU3>D{NoN+hm@v0WW(jl4amu{FM`
zX7#xUL!1Iz5Q+=cvM`z?UVq?p3ZP<tU-}Bb3EWsV`MMrk$;X#Mozd^!LGwXh)};g4
z#Wnek;Q5VCOPNHrtk-N_8g^p#XsQz2DK_m>JWGh3rhpXYFWC&3h2X%bqKTFZy)Q$}
z&{80$-htWjDzPKdYs6fJ^9&(uUsg35HsDRozYpQgqFNMsra9`Qy6W#ozT9I&4VkX~
zP2VDvSvdvW$2k-^y~`~=yBhl9U(fxu3;VXH>sUp<IU*Q7LUz}=wX92;_?bZX+MIWo
z;~n7!A0x=h={{<9y#rNxI8NdgNS=u?v|7cY02{xV;zx0k5d3mNdB1Dn&uRhfEa}q<
ztW$lAc=5l>zf^7PmTshLflJ;zT$ODY?o$8Q8anKce3>Mzi&+_)M7==T*OwU_6l-01
zFO`@uDo>vo1%puE_Lm|0rqCaZSwED}FhSfi2C_o8grL&G6;!g+km0Me=<Jva%H&gX
z!Yj(LXT!@!-L`^udh2+B?4E6MC0o0^ICM*kyhel{BwGB)!H`KV*B}sU=ET+^iGi!+
zLXY+0O0b`W?mSrK*djU_->K=c`@IeysE21il7ddL1|N1FaXsrxVvoXpmfdz#jfd?y
z(vAYmjGIJ`xS;a;6cONuCN41?E=eMj6!!ko$Jfcq^+;<WowAzJ#-Zx6k>|@x1l>c7
z6%@z_V*d@9hSSI8Bu`#Wa?<4Z=zziOq1b8eQiB<w@}37@E<YlOscuK}mW}kOeSErg
zU`qNXEGT>Cn%T@6mnP_~AmftW6SrE-nmX^IlHz)a(zml?c@%?e>z3#Tj-Y1vOcfY5
zH302?bCO!dM_^4TqVx4`jz^#ul|gA^VHhB}Ng1rLSxIxEZGbdsEv}6>{^sW&UxWN)
za=3f+qSD^Fw8wVAx~B6qXg|Y3;zJpMU{iQ0<T5v1r$5eLHPVg0T5wW;rmSAbR5;jB
zcOXVhvv@YEo)+|>c#Is8><gNg>w0p=xK%jv%`m93oIu|Xi9b6!<_<e%>gU&9T^P(t
zTbIrc$u-QDTBrl2eMm*6{W>t9a%`OhG?tX0tl+hJhwx3VdDIzjJ8v9D-YjLG-jJ3H
z8`TPJJ=oy}^abUg$rk=$0TtR}DeWm<iapZhWivK*XVdkEe*^a;t))EXIfpU&GFh28
zb^B4g`fg4@HhI&W<O7^(qd6rBi@HG3c0_ad5FQ&9%R~!r1Idt}KybbC$Vcr_p{xDj
z<aqIJB?m)6Y3x(r;DqDfM-~4z2HFp14{DT$Be00KDh!PqfV)S+V-FN`e0tDI)@c;e
z6N^I;3965g?+2OMFW;iEc9A@jn;AE{5@_<b((;}V{FRLUI1O7O%E^^k1QYpulU^;B
zHK9eA#}a}S<_d@I6E^<B!wd{O`gysFD%g~7dXk6=Hdhspwt@rs&+=2<G7H?GI3aI$
zN%@;awH%Uko5rp-`IvhP3Ph%^F#Ph%8n}9HS!nmU3AS~zn6&aqkz6m_palf{dq+Ff
zr3W5X#k)=z0$UL8pKUvl1&nN^pL3N~f$BN5`vc~Ra(|ij@c;s{#MCh4&h9r89qWw0
zm%H?zQJNO2?27lKHS~|W*}RzUUZUTqe!C7eS3M4~9=;LFE$%6<pjl-Htu@~YvA0<E
zkgt8fNq4_2PJtS`d%eWS?#Ap~0k;p342uB#K47^?58?7#MP6*am$DhATvFi!X(COj
z1xzUIS|kpGZ73=4UUmOfWlL;|&P2r>^7P_e(>1PHe+eC4L=$SRVLupC^+{H110t%M
zEx=x3EViBW@8TbH(-F7yT#1=&CgRYqdiI@8X6V`V2C-VE?6j?%Hk{Lwh0z+A*TT^P
zSG5UQPT!`@iq51%_xw4C#q4l2qGwvZYfG|`k1jYsz1^`M+txIE`ZArarwmBBdRbh2
zZcVKnt8MU|xQs8{xiQahe)1V!{N=f=H@5mY*H-iWl~t?fgbhwMuOKPd?t)Z)g;aS_
zozO<{Up&5<WmwmOt`_p8R1f}Qjpa1HRGuX~v@<NoXms>2V*6=kb~rxl?3+eE7aIZQ
zggx}A`6|?ZN>#57;*QXRfJv;0({wWg(3mB;*1&d*Y>Maf_R6sWLz!=CJvAH2FP-*+
zkssPn?zLv7Is0<euntw0BHr{j)xN@Z4*xHBFwEB(!BI=&uWBD9LV=t~d1to&l=O_o
zir9j%=PWdPWSZOg&_;FdGk_EGvgCijW)73X`$k*R$TT+0qm9rEU|lvzpAKZP-1HB0
z`{pTy7WBel*Bt+3ceJ}Uwo#mLD)ohKyk><NKy=N)2TLN9Sdb`~!*ka~divo`aXRJZ
zj^{Z|NqyfhwoL}>=9{V=z}BNTnoi??qYe)y)^S`C1e%&CM5#b-Zc=nzI*%|i6!R&|
zU7H$4Xd6u{f;}}IK~&%POPiVob&UAIC{D=D{}4X2NHmlbSE}q65IruSCztVU4%lwe
z{OGmLR7_ApWc?;97G+1a`TqJZC6KKACjuDTJDC!ylT}IL-xil$M9+^0HHN(lYnUIK
zXJ#A;oiR~{{TP!2Zs6d%zaTTHa}HLJoEhxj8)Vpwjg~YDX;r9C&+%l-bdh^QFM-n}
zlJMk}1RoCW;B;ITd|Z7m%#&vqmB1>$q}XH(w`JWOPEXJlXL4_I*QMI9+L>%&J;s~r
z<J8OXY^j>)G7{}o5TJ#s+oUS9SM~e7ppNUd+@Vjbua+?V+)wp3Ii`6Nb*9Q=4ZoM2
z=!(l-%5~bD5@Gmqo@nQET~D&hUwX4V!=%e3N3I!zjE26mfq+Tv)WuU{930iuz1oa}
zTdbT!`oFk>Nwec#tXU|*MrPtF4^x#~pw)vu&#_?bxqsm=NUMOX4HPv!0Qh1<Ugm3B
z)8l=xrA#FRv(O7wC770vTmBk~cVEkrieVHlaD~4^mTsIDjj^Waec+C31{wys(Btx=
zqcWGF?Qq}uu{{HNA8?p{8M{m>jnZBjUJ5699agJppXz)(fQ+v$tpNUHADNxou&zgj
z|FNt$*1C8w^g{jPckdKrVJhR>20c``_TxsV1V+uA_c1D*@OimGtC#lLj$lPB*;>2@
z;8)%$oklp8yy%P)GIDc@r1GiEy2+^;+;R3vE^4WYY&5rwhY0Si!nVH_LB#=Z9a8p-
zkoj@Ue6Mbi*s?h+LjOZw#rS}FaF?e@GI#T8wEWPVO{I2iIz^K-P4zE@T)_JZkEEQr
zHFdB#QgxM`38FHI<!*UY0`2r~PoR1#jFU~hWCz}STk~B4KSb&ujMKv6(54ov2b*Gy
zv%VeY2wj4RjiWhB0J_@;PP>%6O>q#*S&yEsec2vY^LCW5>GXC22emHs1NUF)4GD%n
zelwY6lCYl)^XmoU$tO57&me>_l%=R(OM@lnp5Ej5`z-;<EJZBIej}QXMB@YO@zcTj
zao0(C8mR#ckHqy01xuReksD&+(+L4A&e)}p@JM>v;2;{yL_Iy{?O?QjUeV~ad(w3%
zwkOyNyjd$b7yuE_)i9V|UPs!UQN^xl6UB?(FKGp7+CxjNiA&}EE;Pm$Dz7rMHs`0H
zeQy<z-p!<XJ_+7<Oq?jq*pP`i0KSG~lv5dW-Aq17ykW;6-C@;^N10`JUWzZ?q4{0~
zMb_>ROo5Rsfdtp6N*9gyA;-^AZ#N<V|FgFVd>{CUy7(1lh|YYFZD4t`-7mB|tFoLw
zEVlwc+Vo8nS~?cbNd)xh>Iy5aw!xO^tK*!`SGruhric<MZNe4I1SV9T!bFmH`T+ya
z_;hZW`>Kzoc}DI7++4m^95aauq9+qVoD3M{f&BZEd*)Sc!<<WiQw{K<lzsVAXh)jg
z0EfU!yB+4gaDyhBoBRxD!L^Jym6h$k?ax$GXwUPAqLcwo16<@Ki65|GC5!Y#ME`QS
zROr(>z8tuoy)s+K_e1Hy*PZVSOu%YlgIG$s0f*q;$wlF5=zP0$$q<QFKC$Ze2z(yQ
zxO>C9jI`QxH+$jk-)?^_&AXVZLxlW*A7I9cx_;%~<N>NU;E(!j_8F`q_8v>gb-frs
z@c0oIhE*G+OQ&?%Y=FwA!cwHbZ?Gl?M{yBdk4R|-4^$%VDO@vZbl>3kQBf#Nzl<gH
zw8|sN<FCWd%g~cM5%AQS?EB}YdfNf7!_Ssd;RjK^_c2mj0%}xTB)p8_!RHQ>m99=W
z0(2+%YHep=@H3cJ@wA``it?Y#ol!t#D@=Kf(=Syzxt5o%iT)%=C!D>xe8;inirtAG
zSMw`4>u}&F8Cj+EZP?~SMr3D7g{NbLI#g&?Uoz#-5=Y4-*6HRr(Q?3t>049W6|slr
z8rM;Wj8{j1_Mz(WT_jXIUjptJ@A6!#9VhDnFh<Y8SV}2DfE=%SqfL&xlGJM^LfOrC
zfF87|6S+XMJhJs3p-eCwN(59~_bMbzEVEDoF#l>1_A32&hB(1pup`&C72JyHjz#St
zy)~c2Bqs>fwsWe7i784c&Tjqs7q6_UiiEYg+<xr6y)#H@t3kI6P23sv*i2g)sDItj
zmyCbxRz;f<2})ivLY*;G>89vtSwQ-Q%HYi*+i+khA|S2^BBM-IaJ=omIpIF3`kX8C
zgHyvRn9F$Rtucr*Fzw;kkx_-ngHP75WBQX9NJt~eN11#DznQf4<g|1YQ@_{1XyCjn
z9yHC=;M_@{e@j8eX5;PZ=5x4;U3nh6MIp4u{YrNUwqI5cnyE1f?MLR~N{N)Ovvz^@
zFW#B;Dxgm;bo_(av(OgrYaPBk*A2!CUs{2e;?-ZBq-c&V-Tk*#XLuP(F@mcFaw-~T
zShd4*6K}ov4;Y`?>;w=a1Eap>%(e<7@vYny@8E+rw2<PONdsmaCZmG$tzJJ;dwv3M
zAIa}8z7mL}-FZ{#j9UxWMv6awh%i%NDfkWHwq33|2pP$bd-XYPfERfC&%&^`qsWU&
z*LXk_Ap8sg9hro5E{PM{hkQ5!ldRKXt1e&8okUZnxWo{5v{W#}`a6L03n=|ZSi$_d
zOuBxl9Hw1E=;!4+#vgC!<e9MG26HY`o5!NA{2B~=U(02s77AHY*=IL>N7mo~96iq9
zz=QiBNdA2wWu6!FNc2z<%ta!W>91L1X2iP788p!*7;JAZnrL;pEgTdakIdICgrPN`
z;o(o$#>UYaQ=)r4(yOqwITU#_7IFLmcb8BJbPvl7hpm06_&+?N>zW8YLGFG$8~x!E
zDv@(?`n+HmN(MbGEJGmxb_T{B$w_~|LxWFYeGkZ(MM)j6Pn_qQ4L1AsX?8ZxY<>LM
zf{BQXsMG9RhwE;4`6Np%ePT^?xsU<6FqQ-y@n7c^#~*%&Hq8$n{r<Ej`Ea<6#WQh>
z*Qii3-u6a(LIUVUcAJ~0K+(2)E}#mPXJ@y0R3>coGy($lJxH-*^3Zyg=d)DN(O~o%
z<|M@?_GsRbxAkT{v``B*$|rR1V05r2CceyJHF>3$2CrYwzTS2Ja;{67*A#eG33hhr
zm{~3APaF}_!!K7~j6oPG+9gy^P()1XcAI=r-Otlq#rG+@3A3&D8>^dl{G=0~j<}Y4
z;^e;w?HxJ`jcsN-6RM%YBTK8hc`mFA$R>@|Z<j2o&oEV1B;9T;CYs;>*FS!zxDa3R
zpw*^s%40EU&uf4L+MwGl@0wGpg(h&J)(dYjZ!^(IF7DX@DsB1g7ShpB$N(xtl|Ozk
z?^bl!Q9d8#VA1^fKA?_MB2g|$QqoQzdS*88@GGs@G7xM_ktyjusegB)av|^WZI4iG
z?0PA5<v|IWnK}tqiAAdg+{j`eaTe6cX5)v|Av*5_tJG;^W>*sj_pv4~D(10ihgQj~
z+U>4wz=&m`z<cpBM`^zfi~N#~POxz?Tawmsi^o2BDDH!z{pyZq8~k-ijUi>$p+Yy1
z&Z_|-xRIk{iy!!Js4zt#g6K(Jk<V=x%EbmEsUpxhh{q0khSl9=u7*4=Kk~;^fBeNl
zo$O>OHBHuUzI&rH@8924CpobQ8TehB-wTON5GMtaZXX_CDC4C7X(C%Zm-@B>@d{=N
zfb-@$dF#>vaBH0QA*KzYlCf59Z6k9Fk>1`mUMI27uVOM9S>Kj!<XCRY^peYpL?R^@
zti+;Sic{6JMDS!tMk*OJ4o8#RV%VVNF-slA>xguMGH`7f<{~NKbKtc0=Ab=Z>LL2i
zK-79TU-Ko*$iPjBNn{U_A7d)~e^Xrygj)t0C38icVz)vhYW8Q3Bv7RIYIom3DSL1(
z9EYsI(b6t*xx=TG>1lwu&P8B(?bitLGFF{4y3>)dt;nT8VGfI&8^`OoWZ}F#)<D|R
zNZ_o3mPZ~+)eAW=H;)gTNX10L&k?+-7F=5JyPBn=;uz9piXj__xkaxO0NeF?6@v*9
zUeW>W1`ITW*$?T5<101E3wGqAq;2yXSO(@zajWKCWS`o?-kP5v$j%fuo1kOf!jFeI
zP5`^gpc8^>UXL(32!AcwFyEPE$(;1W-`JlO9^39=ezvw8+c#Xu*3Eoen5E5aWMEp0
zQ9cDT&>N?PMKY;)u_j>hV+w=m2~E$$k<OraEMe_evoc$NeDqX$-)i6~9%r&*QWiM4
zkD)y=uk!sqX%IIsrcbdQ{)}RETTrPUa4D1qoaW^W^&biF(Jxu;sS#~`C<{tgWGDUC
zMtz;({|wH2XT|M14T@FiFbc>VZWkWgf`DpV$p!N+RKxWrbD&c=L|J_x(6d}OD|*FH
zldB63cK?`lQMQ#EQ=<ufR4#;5viHnJB)snUA#Okk<z}B(hd|^z%BB)&YA8)*J3S^!
zA{3P=3cLe!lcDk>0k+QgZ-bYt=R3}|E56T7Irp0OjF}_-sMIAzDr*vd%{5;fgsD~F
zdinrd5!?!LUwpnXGP|FO`|D9JU50mUZ=P$a8f=ya0D6Yr;OuZ9RUu<TIs+gFX|x1k
z;V1|Xx(R+@SP8l=WBXzzFQm+;!;y-vNrxyk1yBVP0E>*&H49aMJn2<ou_9G*S-yTT
zuCi9RKVl;4*_zK8A(|J9@{D7xdFNv13EGS&QHxIn0E6Gwx2UfVru(QPo$_N>My5W3
zCDY!jUn{dp-%aWUk`pR~RQ=>wYEJV%(gS@<NP6VwO83Ay(hSlFC!1U9vH*>Nf)z}r
z?6r?@*RgVZFM&a_COqUhPX$^$I=44S{GABYMTQpevhP0Q0~WS|Oo&F6u+PjvKrTF^
z2p+~eF%w%qQ)5umT}hQ8#yYBOH|k=?_j=1be(p~46>pdMy`Lgzk>rt>>PPny>;IpC
zb}%ecI@#vJrgYIRL9=KzWYs)~TdXnA-VuJUV&W^^Xu&&oKBO%-8)OLt4+E#;)pwe{
zg9O?!9M)Kj<4TFL1;z*wXBEi+H!M2$2r4?QY{$BPjs<%V_Qf`M*CZo9Ix)vk3T9dr
zhd^-Tx%5{T9+7WVA=2Rd2$T%(;4Vg6TywgBdtRV6Ujn3C{lg+IN^{j!rGc%Pm`~g5
zoP9w}TimKld5}sawm+Tslf(YxnNS*x*@;aaQX!yY$`Nku_E|pUgK<{i$U$=mR(Z+#
z#I?Z!u$$tA5z3xKK}zs_p+=1Ke3naJJqzC$e~|QE5S)}j@mZ&=c}&!{NPlShcKe!x
zfPnkfPU|ID^W*(4nrV{HEiP5XiPOn_ZsAkruYA${8Aw~+oYjyE@;@@_0sP+v;wM)-
zs=_Eh0bk%a7X{*c4(sr-SEGQ_VIk~si$FaOFS#NxCUI(G7tyLD8M^A8Lr4N%9-~0o
zRG}h1pKb0y_cf~Mpxg}lb2+eZU5X3F7`+vP><6$3RD+oX9jL26=awv!yC>+T&r{Qs
z$$l)PbnesHJ+L;$`CHU9qUn8%wGTnSq>(vwySgM^y$7_1Qreo275ECS6bQjqb=plu
ziYq!fFPE2>5$fGikzDl0^u0Nb4(y8NADalZ2B3?f*Nxg}3N7JP;}bL_acix@9u<M_
zz9k<gy!8-$)#mT)zqN)7JNzcC=W8QcQ_gOb9zGf2wz*8@#Thp}7CP9YRO_btkW9iE
zz9JT3l^F?2ix>-?e@oll=8L%dA^sfL$Bf~7sJmz~*H|E2hmN(50-B=x-Xz1&DgE_J
z4ll@c6Zt_|Ix)($&vNS@FJdE%+9R7!*E#8NFO)E|jc0Txgu`%jYSa1l8v<}d9}%{o
ze8tsI7}?^aRGd^|nYRRy^w3>47EnxsTAI~jj@SM<#L+MFqVP%V>F~z|mGhNN=f<DB
z2j+dj+Ng8tiH+A6tT)iCwZ|QBAYc>acy7ZM%9pmt{i;Itj6Y8#frc*iR!#+Smj~(~
z7?qUt2fSax$h-Na%$6&82`SE)S&kJgS^tzAPdtq4#)}jg5c2{REAHAH!&Y%p<t%4n
zf?}@1^WnZ*;s4B;1wF0?K)UX`EH0*z3a;0qF;-m+*NWY}i>UdQkmuUHg(&_IQpj@Z
z3*_AIV-d?AO%dUNQz7SjF#%bl;>oGpaM7AQRHMV*I@C@UXDNviwx?Ye+cZ(0x^ZfK
zw4v^^qBv&8qR~2&0wf$h`N})HF`E$CGt&GpDHZcg&>4HPaM<Ma7cPDx@P^dsTLyKS
zYHgP4p2bH$M@-gcc*~0~hmvc=xX%&_PcAnVw`}KUg44VK^~NuUnKnRhqp<!d#mQAq
zdB#u&-tmru!$mTX`6-lFW1F$HGND9wM$yVd|C9GG=MQzyoR_=$t*XBr_xGq*R}t~v
zn%sqKI?0537h3qoaK@0Wi+)!vF*a3bA>R;EqL%ot8Nm2<H1MD+Cc|K{*AT5<O0O0;
z%`v{kS2T0*<9)BO%LjtxpCy~${ctQ1ek>y}a}|4ZUSjp}I|-B+O&II5MM!^PO2JmG
z_)JULKg8FQw&*>+?cf#yf9~6}6kJ+Mc=m2&g<Zv>XkU>TKyqtOFB!pyYyM3#eSiX6
z+ekVfO<Cxhn^E%A!G>aOo&v?aSH74hrP!_R1>;!SI-|A@GMMVgK+|38Ouyw{jGYgL
z<C-d)3QYj~B*iA787FM5q0soEtg}yx#-ar7UmF#XI?DPcYeHZ7h5Y_IcGBgbJC<*1
z%Xsb$80!Q*r3*F`jkY=8%OxwBW7}RO0CH3z3BZF<vt5jQFv*P?>m-fuTaXF!2fmIz
zYUH?WYWXuAhSdfp=&sUui~%h>3L0f%=nFy6hobZcGf$cG(EyKB!Rf)~;U!2l(nIne
zVi74!Y|9HZ3J1lYZw4A*EY8?_+=v!btUp~GJx>59{zAA8&zn7HFA4DU5!6AA`;vC8
zt16{|7XQi$46@T#h!+x{7T3JelHd=DWp_j5@b|@`&o2~dvpo<2fOvZzUEdn&L;C;%
zK>feII?4`1ZpS$JMa0EiPdEWy55ulN)<*l4{gBpKih8Y*X~sNGc%n9BliG8tG8-tG
zT_5I-UEI1AUq+B^dk=bY3=>!4-2RX?JRgp!3a?uL{Zb^?ed`mMK&xK*Ef6C54y6|(
z1Qn{fsw>mD5FkZPZrSj`B8p)Ad^u)1M(=$dXz{Et_rWW_Fh=*Xd9d#?HM>bJm_akN
z{nwx29gU~w!74Iq85Mq2a<aK*wv@UmBrH-8pW*~(axe!pHHlN!9~oFG3%hgGa}4je
zwy8I0&P0lm!+c4SALQs`*nx@JB(O*x1WD_V5F*j0^YkWq$Y+OH&wjV@cbmU}3>V(&
zBr`ZQBwCf83QDE~>U&8=uq(woCIxB?DXeM8-yvITE48RTrDkH&m>nGIccLwWpSou>
z6QZTKP_<!2XtEfBTv}EZqn>sM0n)5_whDse<&{}vD|<bVx_~_;<{3$$smsf{N<6iu
zOD2ay4JYf{q)%JME`6o-Ufdr<wTC=Z<whQmO>0?ay2|&ZY8#88kH2>Nk+=E5rIg3~
z<42;&JLICgtp2)jH0_6Y5Ci;ki{g~bK_qQgEF@n;=>#4PcKlKe>#G@P_HM0+nY8Ge
zX#d<KsUdTLj)8X<l*m>V_oDKw%84!CwVv*c)VcW}xWoglgUpK4QD9%Pv{)j|+pTZ;
z*!&CSb5VrCB8<y1ag<@rIN5RrQH_6T{N9L?o?f(6Yr5_bBDj<I`@q?^e2O_T;elds
zeo0X4Nn_OuvO0N+6<?-0!@WTFwwH@@>2@_ElXA2P#h*Rl@}?w33tgZ<s80*Xzk(WY
z=uogu%Z|OpK9e`%5@W`P*LKFEhJ#(f<`Vtv$Ts&;mSC7#262rov8q!S<I!t5Uq1J@
zEQ5d62wtIUZts|Nxu>lu1m&^#erf%3+{*_!FG&<$hpcs1m|r{7D?R?dxi?p<F0_K_
zMHqf3Lb`WivX36uy5O5>YvLS$;hVOB`0d);N;fH{#%cT3AQoK?Et4%xI2g(fKE1lJ
z`itMq#m9dXv0!?Iyj*DQQ;WbVkE?a~uo$(%GW0gQT#K%`t@1OWCtMgYbpujLf(?p>
z3<*K4co%&e@O{;7en?9Bu9)mV!|Iw`pDoAADgg|F`|DY*%^hT1KoF1_=w#nV1E^U=
zscdkTOXS8JoDF2@kAi!a_#gfrXrFW8h+5uCXNDBdiGT|0mu&7Px;C<S97M|-xU{Ba
z$d=q-G9yt_+{{0pXauYV&jAcW77lPdyDJ~$ck&6D2|0UnG_XaZL_h2rrv7D-K~?}D
z#d-&!18S*oz7z`jk7Lu>Zc}wj7YC)%(fqXg_GEiUZeZbFnL=_o<ZO09a5GD*;8gnn
zYCa^VCg4yK{-`jM{CRWY_=S>Vub9a}BZd+u1?v@En}v1i%=U2X-fEuhL64sw(g#JE
zV0wYn;ej2I?lp?N!5yHp-FLd09J-+cf<@>OsjRqO6-YJZO`Hh-(S27;#{6_dT{*O;
zk47g#g_hvcG7#X-GBsxh8TP1_-}rRSMQfv@9_9F|%l3vM^J2R2I$~-`-~Nf4a+%I-
z-1lTU-nC3?5lX@_U_X^)Ces5nP>^nMFCLRqRS-(7vN#YjT+z4gjYL+@hVcf?WJIH%
zI;*XzR$P%BQ%Grg8q8`SQ8O;mbRgSO<pGGTa+W+aO*1m@tObXJ9%xP-xHXbuhy11)
zRo_~-090+7H&Vz?)!rI3XZq~skYv3kIESp87Xpaj3CotM1Mj+`?zrf}kZ8kn84m&M
z|4^yOf_ph?+!IgStdSo2Y`><Sp(Ds=3`3IF?w5&gufYhYV7Bx29BRg!`X64pb=<&D
z!|Q(mA?wlk++|NI-)98b0!!uj45nH0CFSmaw1Ij_`JM^%w$a`T5~0|+VOXewW@0wZ
z#A%xOrf_TSHM#$BMe$*bRA69XpdYeYEj9^-{h6B)G1-{z+@2pkFKj$QFe3nCX3heF
z`uB|QWW787qkm#o&9+6RnXv!fuA<5wiyVz3oM)biL_JWP{qcRb{_y4N$-EL^@8Lpv
zQ9ap|t0G0`Nh2OBtY47-^LC5n!p5iQ0N*1p=of}Mdu3(2H=)8}a(8J=4DR~uDgR<(
zEYYlW-Za$h|C|h?I98;n<9kyHR5nhv-*Eg*%$y2zg|d(lT@r@Ab>FM%yZW(NKcuHc
zG!qycoAdsaC{5@|I%dss%WkohifX(*#cTlFU`H5POJ=)&xI01@g0CoB818-QzHxBa
zfX;!xjAWW{fn9^-Kh7I(3&(eFe#P0`db4HIVuVsv_SaSr=Dk7@9haD2N6}DVyOMuC
z=a7H>RZAxti<gxY!0nC5<#0py!yQ5w!=?br{&TPRXXIX-y!FIcqvHrW0p+@8>`aJx
zCH8C=70vmj7XIBC-?-@{3Z9x#JU>Sm7aPt82H2ayk;dQ4ZgK%JK)Nu#ctCR?a~P7D
zcPi2js-;ESrynwVICe);k{NdZr+q86eB_dKS+;VQGC<IGNyjz4fD&wD&`5x&Y?{+1
ztqqVlgVkj8WLOKjCIUz0h&!sYc3kW^20j`sx-Ua0?`HC&rr*&e(={6Bu#cxAJ7rA~
zLM*$XZws1$L7L59rj>UA3L?R|)e@(alDPB;CLGq%_}g}iKc1g11g#~YL^fYhSNU`G
z|5RTa1z9!YbXi1=gnxgG(D0zoN9B$kL=U55g8BNN)eT!t?BAS|@kx6pt$!e%{&f^6
z=Hb%+gnSNPN<{^KmbAC`@Kq)XzQMR+x6(E1|JAWoEk>TZ%M{6a^j_?&OsM27@#9`B
zrRaT*L^8K9c1Bt>%O}!Tb%HPmBa`~^PKz>)0WJ@SkNOj$w+e+N!tT1O{uedS0rE=~
zZqbMDm5aBlTNPJ;F@z<}m@c~VYXao?=i?M?C$*taw|t-mw=TnC@Q)TRE$OGpMfQ(N
zyssVL5G$-+cp$tY3+|v6r37?;n9YlP93CS90&#dU)U+OUh2KDjL^LMI_@dF?9zLBr
z31ZEZxx8!my;Nx1A4BN4%FjR>@$Id0We#Of{T#FH;t>g&e)1c{UQaMhX10EAazB9z
zUuJg(&bf{p21&|3nqqu)V3PK5X0tn2HNK*-%~85h30H!D`^@(Rq6VL{u=~^-(EbY&
zEjyhNxZc0>sT}H=B2XF?`38n@_4isEy9NOxc#Y&{Ju6P(61)};KL8G9Qe=XAqF@CN
zPRq@!m$}b{Y{=zv^co_}mVoUo93qvGp5*grqW@TKuVB&=Xv}~f2+walVR03C<spiw
zj+EcaR-m_K(s5CsF%Q@T&JKc4fhX^tGUoZO3t~ZnSoyLA31S%dK`P*u_6E1^@$yv>
zZ)ua;PTIx@riRK|H%1J>diy^OK}p7K%=lA+x(w0dAw84xp2(Tr&0UwF*-nE=ln^N;
z5W&(AfqIn7RNj`@3WrH>@8MCD(@o!|z6yx=xymH<#^m=-VHF*p@25VCFutci+UpqX
zg?g>5%Y3dj?$h=%sm_=aOU~ha&{p&cW-jS&-Tcq#(ztO^bznFMi+UnB$6i!Ym`!d1
zi%~&<YqDl*_~gz+VlI8VHK=g3G$;Mn0t7+DCaF5nC+l_#90hEZ3m|{~H05;N-;~X#
z8!^GR7W~$Y$c}$FFLjUjZ{)Gi4e-AG;lHNHee*mpPp~tB%Am!=1?;!ag0Abz?a6Wd
z{Qsq!GZ`PHqhFDWa_U)TGzQM=E0V^BY06|i_c0DM$zt>t&p-7ZOsDLo+s~pA8mGr7
z)a|`Y7rg6TQAMx#*SScMSIo^1+-h8SiJcrfU+NM6r60qwsl{r(7UURg(=c*l+OAIk
z$?yC*AB~D=UNx`^tjH-2c4f1qRc4}YaP&Q>iD-KG%D`Dj7saL+0i>p&<TlGpW$dxN
z$p6d5+}d&I%tI=<o@8PK(>Yr6uR`F{iK2kwkYe{bSO~mG=cL|)&0Hx8XP!%ZtQl7o
zX_0{ts#`}l0V@;X(EnbZ*+V6#AY5jI<KisOV>;m2iAbNQBX?0Nn_Bg%E+7gt?NHO4
z+jOF@g~5SyaZU6LFRFK>BX<fs7Stkc@kVP2w}&q|kPUNo+Acc~e3VfHl{G=TR0pkW
z$bQa*-~*}{juxA8GLSvVXS=_wv8jSvL*|<;TJ48VpZvyulgubD<Vam~Y+lzVSD~_4
zZaEc%ns{q(pje^$BSTUm@u{`<H;scz%k~iu&)ZUy1dDB847$k=UC>E&u<`&LJo+5g
z>z;>+k%F+PsiHBHB5kA)ynxUPRF7?~V98I&DEqc&4j_M~UqcXraLxfZd)qOb@+;lM
zYDD7d33c!LP^!()<mV+?>&iW24VHQ0&V1i62CSfhD0JfBsPNWE`-6+TA<bHW0BSgi
ztH&HC0T{j`sgsBtCG`ID{yhX$z{O}5(^+wiK#tiI8r?E|Rv5q#n}|fS?3bS0Um(MW
zN|nze3sY}=pCRQOG#y`kuk^Pbc%a&l-^6tFRg)z!vRTlv6BsUaphajn%EcK2^$Wuy
zf*TE_MKWp&R%Dnjj2h=iYaP{k)K|uFxkToP&Dyf;-2G|HdUPnfEL1jZ)O*^4#8=02
z)i|f^QR&=?=<f7%;a5B2`TU04TzbO)kA|E8F@BT>oq@^?oxT=^l@n)PI+tcBnSz}~
z!XPPz3;Qe;35_@Tc^t=A+nF<2wlgPt-Y_E!=qI*bEIuxp==IWMJHFNR+;%CByI7|9
z?F#P!jR962p>4sTVM_-_SDDtFtJL>E>V^)jaI^X=2pLadsS?2~DUlQCyPX|3G+z^;
zJo!*N2>!IFmHuSHY3Ab9=SSUxzq$%6B%G70N*C%VL!^qqC{hBEh`mu~FXD_hC?N8h
zI`&*ov5H2k)-T|Dkq2*#TV+tHQl^vIt~d1sCm=oT4U^zk;upf!)`07p#Op-}v@aC<
zH^?1wV*F^Jw3G!7kSZ`ZUi8YNP#5mU715#CvOY8GnfVBransHvp!A}aDmZru4)Rp`
zf|Y=AtsS?>qdKHw{J)-~cUYz}l~XE)nEzUW1)@Da|LXH8datr2ZY`d1p%b+;`BxP@
zBK>HO4?)fz8dkjLD)@2T@XUBA?cw$)|BsGOfi<ac1eQbeRyQT4+P=T}vy301AX*gM
zda~+UylkBv4fFUQ?9{{3Ud##*xEI#CBzRm_ap~0XK`A;aXa}80e(x(NI(Z{tt!W-a
z=juf8`!}D?hww6Kx(^)&A9%W^--iv=6~7{4<p@OVfr{g0M2;V6e#bA5#Y?<uagQ!Q
z;GcRp`MnDK79{l|HjG1wa{FU=!1&Y&E8vArBFW3nCI?2@Ra#(|5WQh&pb0iI5O><u
z)ux-fvyG6{Tx9InjH^y0(5&=weF*2<<Eeztc!D68(H9}>6HgGwcuDY#El%~?T?m$d
z9ZpU!C13??lh9?)i?Bn;jqMrEJvVl-EBG6D94Dt}Q(E)wDJ#a)qADvK9=e+$5Qn}~
zGbvpnfR9}9p*2hIixh{he`~f|2XLlrwzo(9k}~JWHV0Qk2HDns|6tv*hD;8yg(6sG
zB9VQ`p540YXse1z+K9$Y$R@Ia3oJcikM+(0ss;xIerYm!|8H{ou%Fk#2Cllu{XKn|
zXqmp(_LTm~OW}Krz);Q%u*G$w#=s*M)Q%ykeqSF0FRFAQ)j`^MBukA*I<>vNaF(SI
zX01hz1{l2^%u>#Y$m+p(;L*H+7!4m2U{x$%3pZUgUMZJ*EF^1#-x9%@Bc`Z?HtI^9
zgR!kODu4{9O2@Kfvou4CFO?(!fyQg~!UrMQ25wRKU7#R3qWw`~7LC->!>;V2UKem{
z5$T3BX0cNRewb>XRu=`gVGv`5_SGc50I8`Hc5!l)K+yf=Cu1t}JFS}(5@i&msO@M2
z8EGTA4Hf@vB0|icVNaz%iXy^bFA;X*0mhp2c<{Seh%*X>i<3=wt%O(%jmy34uHOl$
z?&?oFT2emGi4_LQq=mRg`I^9Z$xKDaZLI7G_}=XK`r$)!+U$bY3elT!1nm^D;MvKP
z1Qj|nXbjdHyOS~x-_+1Yi-u#%?#bJRSZ-MIzs3#FX$bU8kQ?GkS&=e#Fx}4kZtVdR
ze~|aX<;$Jemd_U7YUZ%@)^;9K>{Sg&jF2Iq1oycd!7Qf{k?qL{!<7d=i?xszs#nb;
zg3wgE+0Td|TF;NJ7c)-n#&%E-38sT;x1LdD{;1p=JQ4ErO0nuqusMxqfXuoMk#kAQ
zKi^~!McBFX-fnSE&=g>2Lbx-d2pn*rsKKY0H7F-{kvB`b5@;|&WV*WYVf<Ww*ySCR
z55*O+v&-p5Yo|rS-%4xoYl4<~0G~7+rQ)FO)L+!lj>pVbapPwwtNhfg)*IAImloy8
z(k;yY<^?90GnkAV_Jgy)!t!y}946L-!9r8!`23#rkweb+4d7K=Eo-T_k~y=DZ(di1
zTO$k{t%3YsXz?I*9$o)gd(5Vn)<ym|u(tz%7lzXa|4=QZp<*gjm%^_L6pE9sOT9?{
zO9^93v(fj^h0wduGDdV5U1+#I$rqEyqPZMjQyc8*qT)zX!QIVsj!js9dm{RAWu4q^
zTha7-pC#s47SAT*uB;~q`56&t5Np#ii(49aE*|ObwLqtgIuaj#b{-ct&$Q$8(9U6|
z`fPU;m?cmSmc$~Y%xF#B%9UF-^1*8muTi)K`eJ0n55+^&&6qzVpK4h|xO6i&*jkz;
zY#9a(7vs>Rs(wR708n@x1yh~X;;ko{4K`WAhJl|_Iu!z^*J9s0v3n~60y&NK?prUc
z<4~!_NKSA_W4Q@I=*cgZQ@)PNG&3|hT?t0XUfYsTmGY@1{5y#IVJl(B!Vl*u^(_SE
zMNASPqIj|$+DeMN8eR?}B9w*0fcC`Wezmysj9`K_css72iVN;|Os<8Sm8Y&-HfiIn
z3k)qTGh>aVd7bi-0GuRL2_45nQB|(EU3JrhY{diLxS0Di@}l9f5bQXB$M_8->vDDa
z)b-xk&xStk^w~l{-5|YQaO8j@P-;f8`$#GZe99eK?)UyuHkdX>8zNUWzzZ9HbR!Ce
zUbX`4Zo{<llziH56L9_MS<Qpcj7$`#OcVh-0XNkDMpAHUI{-)xCg7hsL|}!7H*@rT
zu8X~&spU2F`YA~pMTwi|F?e3avHUANaO9w7V#_3E86Q>m{+e~$HIjk)#@$6UX8zA)
zTIyP*<`EckBBZ(u@xKi_H*Uh9QX=Zt57uIu^K~Xln^$KXoc~Q8wwxx7sAWw7s^r<C
zg~LceO&~l$(opvm^F81F<mP=Z>vz5EQN8_f$FtoaNry6g&pAx?B#b&a<E--qLHx_T
z=8!@>wD)H#mLcInr1d(5s$Z@s%DNZO5nuVdTV!1~zE;WT@}S0TMRoI(Yz*fL-<E|d
zqwFbBT=-N1Nqq_X#^W+?S2NfqMgG_1VNoXh`HhAV2Hl$e2`gD1pK#_@($PIUGF?WX
zS`RE0%C+Z&W;tv+)LfM=Nd;y8n86xoHHP(P;x9RQ+8p4Cl9m1<^%^gNPvi$Aug@wz
z)KpMrBlZRd;GZX7yxt8ev!_LbcshR+V{CcR?}4R(nD@d{a7)?i9D4<+N^vf8JK=3i
zYU?E51t?#nU`PjPW21hFwgR`L%s$<w8<0i2^}%dC<2Vq09)t?dII0}^44^Can)RY*
zmj8@#&3Lte1}ZKXClSn<qhP;sadgM$Cy#PQ?2&tLpdi1(w;O=>)_Tj^acB)ZLk7~V
zWCzZZT{0V?^D+zFGeZTGhJkd0z<jkI0$OZ>nonz9_wK`1d3VrdB;?8%!F8l|pp0O#
z#+OsgT;p_y>&E1*<aQ3THCG7RB-kE4@~SuDJYHNXGM_{5!pgm!rF+FJ&_l{)qRog(
z0*>xXavvBa5}yA$K2`9w8*|`PiL2iQxgnkU?Tc?B+7Mp-#a(Ef(?_U6C9@!a$)ke(
zzu8erE<9*U8h{MW^?ZG{ES^NY<@!<}zYV_xI*bps<EANaEGsaj%$e~t?AdN0I4WdX
z2d+EQDKhSNW=$u!{#x>-u6-qMyDxHlYc~=|-@?v|#I=Ge#%Rw*W@=H?R<>A3w-bNL
zxR|?bJ;hcpQUh!pyX;-X0hk!_%{D=N=?^8@lppHW|H5`J$HGfP7W2>6Dj+ly)1l?K
zgvFf~T?yE2_MVSF9&zm6G+KL~Pjhr&gec_};C)4+fAt(oVmK#d?}1#77^2wu$}&yA
zN@5z+$z$@~gNQqVJk1b4Ha;k%t7saE$+IUaI^s>Z<e_E*>UwT+<VnZiStiKwc#xxd
z^NnT+?eU1K=*srF{i%Acv7;bMDG|QW<hh__YPXPuh$Q3XczU8&8g}0^P#IA7rPH6d
z+0knP_s3;w=vvv*xXIcdhK2Uv?wWj)8%SP@o@*(jz6S`@+YuRo_cJ2S&3tFjM5E42
z!G$QKK#&SrCZyXdv*9t?<<IL*>QwfUH{(dFL#aArlmk}zh469Wi8*8j;wv)Y{4n}G
zwe@Hu70Lq_v2FIrvhTTd&}J_;(m8F@)8ft(fNZs6>{Z5A$*xj-qoxx;<j_3Hb;oy4
zzoqm1=LjM1&X9tFtSDB{UI|6#)3WSxk;bx)e1dQ9lDfK8QBeCVh>jwBdZ%5jcCaag
zB`wFpZfI1LVns{fk%(0Klno*@?hv|9cHWgT1H*zzosZ8z<mP3l!q*9yE=tzA3fPqo
zmLen}eM5|aJCm!fG3|F;N~=FP`aHLDMSSJ~1m7R%3uIG;AJ1cX?PX%FP=EC*9g*Uw
zW5g#(P%7fACN*&h4n#*PJDD8$nl1nFmMw^bJA&9<UGQLC7sd2;8cJ^WY?XiG-K)*!
zEALB2Zfb&-5|2>o9Md{;ywU%07ba^r23TqP{SR~R<!*}zYjLkUO_Gp9ykzZb(w`^&
z<HeE9NYw2A%6r5))x0m6^d8679A(OOI1nJue-S=W5$}IKM1jD(k9woRBKaac=hC*Q
z|4jk|b_4(SHV%l^PQv}tgHKBzFX_nxoSCE*=_>=EJn7Hsy)<o4I&HG!h!~RmHuAQW
zA9G>7Vw-fzOAA=?vyjxl`ErVuv5x&ieJ;VB839-zmP8ierz3QRZ@iogw4#7tbyoic
zz<N;(W_(Z9juh-oBON>EzOwFE<tZ5tj<U9kl{?PYyOkP2al0m9Yw;aJS!UJT?_(;?
zL`XgJ=%)F}FUUb#*TP*e>BUCbY7u~Sl9=y2(qTeZ9umWdR^mVL-}i7dl0pkhVUhp%
zfFpYc3*tsnCRIx$`d)XS9_>FrxTFe>yaDs?Ns3{q6!$%NMe0?aB%?_l-YX~>DnTM_
zrNk87CbdZk@HeNh*=~p@0TQuX@<cv+NI)xID8gKQSlDr30EXD<b2|-@YmI`RwbNpV
zQ%N5l9-F)Bo&#4^8qOMPLzeSH;rq?R+xnc5%yHgVQ1?$C@?xVkwX0IgUBozb;0AiD
z#zqL_iUukLX6Dl__azKO>R~WPHZ=N{5BJL)MU<)>3$HiMcSm*$6H+5ZZlIQTCw=!f
z^^#)pzRrtwOLAX6dG+cxvkf3$;OdsPpU<e*yZ?aSjn+5CY_YK?4vZ#yasLOy86Mnk
zoma^Zvf2Et>bB!OAf%VE!EKIex{~dGqVeI6N#lQgX8@WUXLr#y@OXsAw&$6NRRz*<
z9Ac?u6Ng+_LsuV%EjN^sA~89&Qn}^brfTJJ6>>$-9$FVL|Aj)p+;$gxwVC^V4g7+Y
z#cl~cFeSwnF;14M96iR-!L<96L$r5fudI*4H0R6B@iQIpnyf;nz=95E4qFuqrvY1N
zo)Wz|oQ%NtZQA1Mb~*_XtFp_0A)qL-DuQj_8Z|)RF$tg7jLNBtfBI{$^5)R)y~3j#
zk2oKk_E(JnI?S&agM3DoG2vsToqpXi?w~u}{UP4MU)gQ6{+w!&&E@y;kctMc0w@h*
z6vb4G>_D)uSmNNe)&_?Oo~Xo)1SXPLyUvwU<A2>$wxmP$JkjVMITn3wb}uwB(Bl|$
zK@S!od$sPy3w?3P8}RveN?T6X(GS`7KXPyYmTYNZQ!zN>Z&rQYj`reGG11`q6IeSQ
z3;jlGI*o{@ocVs!G!Rrv&)R1NbpFc#4#L*W)lh264<!>hPEgp1`^wc4Sb%O|NNTiT
z!8$ktwMPu!*qW{mPs4sbs9Shf&M~z=L0LVXElafr=%@_@o>;XBW1BW6;|QMVX$~A0
zyt58NW?c<j8FCJcHHlPkKb(Mx+mM?fsadiO)B!;$PjGp7^H&5HD(H=6m)B8f@R!@-
z*V26N1^3tRsoC8Cvu&UJ1F+lX&E=V~>x$X>k3+a4s9~~|)Rqe)2qvvC(3y-B%4g6O
z2yGmh$)Hh9qu0EA>IA82yLvt}S)M0vu)!XLpZ24IFHXNX@g8G>CNDgJ0Z?U-1S{Lc
z4XQ>$wSRwwb*To})R^}$nt`46&*H(tf2jE@@Be1jPzUuli=?narO-Tg;No*SOWHc6
zciqj^=S=;v+ny6z_wvQ7mr=U#Y#WsWC9uj77T^hOX^_<M@}|5-$1Hmu&E{G}@1V&0
z^0#DV87i=UA>EYBeNv4GH%e?@xM475QIDlUfglo(gg!fXcX?e$s{HU?kPC55o;!Z8
z&rK8$?YT1Ut_z8>c*08teOV!ELJ(4|C7^<0DQ4)BwTaz;Q5RP)65Bj`#7V)c7_Uq+
zo^~rjp3<>LAZ6v@A?{#H#I5N2$yiG<-drlg!A{>Fm$iPd(*kkp2{(G~&s8-2P;%qM
zF1#46zW=B>!i%wX<M+D!As=LU)TR)1Z?lsAJ~BDrAZ*sMfk(v-k&X1co~YSa@E2A~
zdz6$j?D2pS%ru09lSB<YX}CkVThMsJES27-YZCn~ans3?x%HsQ84Qy~tRkNYHNoeE
zh!0t|&A8WyvsoIFk{4GRfYMG~=U8hUinNdp>O^<{i5LX?Uw|q0r1{kr1|S0{Ekz%2
zGBdaS+gpEkU>y4ln}+^tJ@s-~0oD_-W7Hsz?kmtpay7hpeP&;)<8NI3vyk!xM2laO
zgDlJ9ZA38eF9cSAK;%zW*bg)DESB~`A>&PuKYnQyYgU9P99iXr;az#1MR~p!&DUBU
zlaXa_cheeh8>BvT{ae)IQjUu)d$IObH;hxL5+gGbpk(XdZwdXDXVme=jD>z}KyZ+I
zY~~#5ss^xaZR)xyzaMOk16{9VS4vXHpP|+Mb0Rn*)!rg9!aFA^a8uS1*{~VIxjCC6
z;O`6{8X>~FMC!b{iyep$lh|G(mAI{|R1OZyjpdcUwWl(|G-GrAss$zrn+KyRjhLWE
z2D$Ybu}ruk0R^@R2@#3F@dEn_MQd?bLycj?@)mcSTvwb*uxF;#wG^mOa&RvoB@_`3
z%@eOadA~gv>!^z2#j->uL8MEC@@Pqc(chIGJNsj~MI6|jhX-2Nq97?=6(v2?HPGDa
zB}`)uv<o<UGvbFmm&M)gLPIl8DC3L#H?3YZ^!PMHk{l>RAgB-T6|ap`IcC_gBNA`2
zDCsLk%jg#Z%dOW7v9h7d*K%3N!PA98{Xi7bWKKsiF#I(q7w$~rHuX}>x@ebS>&i!I
zz{u{G8bezj@ncQl{j)aSWUJS1Q3A3af4Lh(SRt!*rzm7)^b?dLzaxhbBVo}k{$%7{
zYxd(zP|RZ$Rg|0Cr`xU<dYppmR9NS1JK+MF>y*e+a#TFLXF7kRJ;-7<*$}ynz*h_^
zWr8wcQn>`xzr4Y;P_eWKpu$%+>anGL+cnoXin9KitkWgXvFM*DxpWhEa$&ZdQa`&%
z?p=#;@=Az#koOiZLQZaI$#j?J9iE^D05#lfTa2XG9&~9?0X!4C1FZ61m5cXk6t$d7
zt`_5{!zh~ZIFSk9VGr;IO(5;Bty{;1y(f)x>skcfYlMN2FlGORe#!aeGWx{VoD$5?
z7lAL$-VXjN{NvV!8)tL86R-tSUJ4IQ<Bbypn!&Bq!N-$A>-S<)%gGbdyI!{|WCm@Y
zeeE3yY{#F%7lK9Ymm%Z@zJl|396fGSbHLMm5-I68tl768k4`Byx*{=ME58H`*}3l}
z{;F6v;B9I`uC5|a`7h$mZYtC5d%6tejFXq39gyITr-rvF;?~hd!MMrmtlR5XbpAji
zyoy{D3Z0RNIX}#;j%WEAup*EDE|Xb#X*;tV+=-|~x3(t32qju_@?kA6_z0CCBFq14
zIP4Hs+r#!X_Ouv};b1apf^gZm!G12JTwl1s#*Y7k)gEkA*LWymow!(jJd6!@<KzBw
z%(CY3)Xf%O5zxrj^Up{Ejw7g=+R3Z+9Y2^Qq$?ZP<ek0aOass~;^VPViSdS9NWZ)#
zv}gvG7^GBx9LtT1FC|ciYsn>sVLkK!g|?K(r7~8zyv^_cYBHJYS*Ft4j`Y@T<;WkU
z`ea4SFkg;WQD%Qd9=@Ozuh!i4sHqI4SY$4fNfVXhSB|U@E;KgJn%yJYspxIEXh{qI
z?A-uW&XW}Tj2mh_LcCgfzHds>gzYLYqnICr2-Bj3__Tx|CJb}Z!_vWB@2$!hsG|2s
zQ0BB?`?+BHw}1#k;a!zc-I*9aX`jB-xA3#fG$JO9PF}MYjK%FruEV9Z<le^+f0(#_
z5kR2@_rOdkZP-}UY*&;FrJ6?pEJ9SC=bp6Q2out@hUK4uc=ZkM61fyT=uM+9K|$YP
z)CK>p1Cn+Sv(Utke#W8eob)Kl)<?{P9h@mNYBk0WOO5aOUeHwu!6~6@+g_MC&Vll`
zHm-&1cwX!!hmS1tH%YRh1cx49CMouqV4i$MYn>SwvlkaWGH0X{cmOHZL_Io3NGen@
zH4>s>Q|G)+Rp6TcYH=W}JkejUMZsbdjh5?=imd`A+)a(nK7<@wltiuIK5E1kRGa}J
zu&CX`=RUCxR>eAZtZL!@!`x%B)G&S@X#KdVk208v92h08N0fk8kSd#osx6$dY$ik9
z)`)Iorq@<5BOD%TMIA4c7cAA~tb|ISB>TW??Kz2wZYFQe8Z?t}FlY#*Q1(7UH)5$B
z8O_OVZ}>LIe~W&8Bk?~TsX7Y{^3Th8p_f8CI7Ons5N;P5u6T+M8h-u16G@o=NRxK`
zdYL3kxnDJRHWH6~YBaXvU(;E0S8Imt*SzG=FA4tMp(BvftJsJ)GY2OurMYE^kFV`m
zPN&SJgr?BP50pmkA`nR5v_4Sl=u03ShS8UQG{ieH_3us^UxjHo1zb!W48H$vR+n5<
z=d<)KFzLVrapP|5BAog_umxMw=ksAiO|E6aN(ugZA%^{TVu3HvmWeZGmS!VnEZ{>9
z*cQesIR1)MM>sMfaN#=1XzV>f1SvaqaZtu)do&<|H)<1HA+o24QE^83)Op3nmoDk-
z4eeldi}&%;g7dU^W>LN-H>cqUA``-v4gejgJREwn4T2z~H#H`ZK573VnaOapG&sf!
zxXHN{jq;-RL1kCL(250`zHWWm5uR&q3og9DaE~u+SRM1is?I*Ui**OBQQJ&j$$-WW
zEuAPMn!?!~2daMR3(c-dAtA#ahGq%u90Jk-BrgC32j-aVX90FLTKy6|T7rGQvd4q1
zslEb#tKV-hnK$@7@DcE%c?D}ENLg=}Y3SK-@{AbapUxh)mLNtYg)LmQnaSU49Vi72
zB|-!DB5{>KLlKwZ_zf!S0<LCbR^3HD)0bakh4T2-5u_g`NyF?ojX@2@7ZpNg-NSq(
z1>@YStH9{ZH5S8W#Ge!0Hk~>H3{_$HT2OVLG5R%LJdK<w@=_6VMOe1&C_&>DL&jvf
z2u$mxCkBWAxVK*>kmPtb&b`|n7?+ELXf^yByUXg-_#L_bW~@CGYBpK1y~7gVSHehc
z-c+5U+;QXcB@JNd#Yw`fKM@tiShkS(V&0AQ;qvhYKOQiAPXoI~y&2kbXJ90Ajx3-_
z$;%A06+&~cB*aVtThNxFu0NyC8KU!h*1GX88}znYLLp6_rpz(d-F@(BCPpg~WMVXX
z{lkReI}Nb)h(eI}Cm?9oF4Hte{Ew8z_yvw45LTPWVOqoN<b*=dW*0;P{$sB$4`l*f
zRdrtv*)Uhj9kk72rb3X5%%>PuUy!(cmKyR+`)p}CSn7GA+Xv0xhFsDt$_UbrDmQXa
z;HTzFyLNC1Rw;YY3klYMSs~Xs6@<)-db{_*`lP<obKg#rR!C;q-G4FXhvHudP|_Ci
zkDX(}EkN5Y-vySI4sG@W7JC(T6^|3UJEu&(ya!6MN?UJ6x(`ji)NHF3E{7$4QfxEN
ztrM@Om-Ji0*}MaXLckXXWIp`-sTM#gpDvHAc1@xVtT2>is8Xxdqf}AeY{;&X-4p7D
z>51BH)nVvDu|1C)%BLe}wZ#egbB)(mFnr0@)~Nxz%#@PgE#4l|_`D?TMN%8JD9c=^
zm%YDA-5~_mpSv{1Obkn%eC~r~QRaa==$TBH2A?!tevldD8vvhQ*J*5Z=0yZ@HK0d;
zJ#iPJOCagoB~qkoOYYI%wQidAs-sKV$)tKpaf`<4wm7b=A#IHp8Hrh@$^YEKQcw#j
z&jb-8MraxP5mpjWlGL1@%uK+q6u4<PHHnvm=U!rMt8Y!9HM&oEN(zq%Fe)CKtfJib
zqusAjzVkV;oIB=J``=V>S8-i?%)*zDByv#>QV?k$o#Fi;yh2-##ONV`S^*5by9a{#
zB<T`*w8QXKmB$tf$hm#wL~$y+X3Cy%ya#rld{DxXqLskx{WmwYpG%2v6sy%H|900z
zOXn77g$a$oiaV>yF#pTXeowAn6M$_WQ853JLFchaude`;ILZ$3hw5Ym&@sF%tU4Nh
z*m*A|zy4Wzt?+FmM<}9TZ}`+0C1y3>ae)jTyTis-Y9l8;o;<n;I1CwGH!1X*Vusv|
zcm7)BE*pVo%KJ1YYb@-%=keW|$A;+0U}P>N`;}uWXNkE<)$aADY}}>_kL$a^Uv=W7
zm1TH8FkSp`-S(pVYmHkQcpArC&&OF-;8h#x{{*&Atq>d;SN(HCve|W5W;N(w(W9_l
zbTE{}ND%58N^kh8t9dQ`fTRn}85t3DN8tK)G@xS5X+i27lwqwafvZA|&<4<-A~-(<
zUFh7~6+LA38Vq4pw6cU33p4v>yow+=l6e|3;kPpY_^~G@Q^vT`>CM^aFJquxN6jN(
znY{`}1E$7VI#T^Imk^b>SJ{%L2SP*}o*g_fqx$hPqdq3;$bee5gMpfZDBP+wmhX7q
zg9RZEiY+lx;<zx}$pxl8=Ma?<+1ldi2XFwHKO*ABH1m8Q(BToYjJ@}R{6k+J3(zC^
z9oQ}_cbEE^DtbRQwOH=g;3KNBki1kj4dNCeiXQI)%T~>XLgwlUh3zaw$Ib^J6E)et
z6Mu}6lOu{5<9&=q#e<cyrVU3r!(64Yv+hs5Je!?H9e3r%A#$r*&S9;pv+pwhh{6#W
z0=9uNy*DYe5Ka#bjW<?=m4r2#B;=;>RjY)OU5$J}({B5OP<CI?`vh{6^NoQo1o$05
zHXrDwIe78P;eX3E@+93-pqkpC%|Tmgm_<3IyWBPxBn5Wz4e5t^KvSylrg%pa0(aqq
zZXzve*1};Q5v(Eu!=)XiZwt`T)!Dp#APXpCJhsNHm!E@m{9JpUGf60}laxmUwHWd@
zTfn|)YPteC7AGQO1Hf!b4F7&>DiKz}^m&SXbZ%k({lQ3Ao*H3*7B5uIb*TQ7o}2&x
znrRq_Ep`89?J&0=1_0iybOwgSY!-atWQPig_k@>N>t$c_=on~t%vUm;VnTq50Nfl|
zKZ%%ZXD9EBit)PT3<fDZwoT>bEqs3j!BI3kOJ-lva!#Ffy*d){phc=997Lo`h;kv`
zq(<(M&UuqNNMknMoiOH^N9|_btW~Nl_AvVE#iP!&JIdb`hqks_Xgn;K_%OqIQCM~Q
z`=(Iws$dpEbW|yb_&2YXKa2zJMIw_a;8VRVh-yf5eA7^{P(a|VKaoMqiUM?6uMhLr
zyy`zqzjV34&pg%Z>-l`nOsAY}Ku_}>^}PsrHzf>hMJ@Xw(&_nPgHn$r+dL5pr)`%v
zH8U=*5oGp{HTSK!0){EV7Q#phlPa}k1|a%eJq5w#vA04bm&isx>*6mdKR>%60nVeV
za*`JqNmMthT@!m2D1?AWdFT=Mr-BMfvntBxFeT}KcCyf9v2%2aPV=NDp*BvM&cvaH
zB^#QdZ4586s&@Nozy3zB91<lyr8x-H8&v2B&>6{YvpgpfAl}{FEHubQf3hq_7@Un(
zlgh|7h(oJo|8GD-g;OqeoGf}U{yLrOLjID(i6^4*-QQZFLdVRVlIehws*=Knx>Q&=
zGH8%(T%awayjE0_uF@6;RxjID`J=|cXI>z_U3a;NJcRMNhCP=C&uD7UEfQM0PcH}+
zU7nb%iqP}^I!zB8N=|?<<VcL2K5@ZIMxIz7oUvPOXNt<|gCJA#+wDhL2H><!wEOGn
zjrB<7^nVdqb&uo+N4uQdJoOZcofT7RI7>q?>I)APdC2ey-OB&tF-N6Z#SVtohT=O_
zY!_8Zy#8u;{#dW>R##`qZEa%e8@-%xKGflIM`|Pq0V~Km6ZwSO)|3GnslCw3+&h&a
zEn-=%|4Iv3BBP1dEns5Goy6|R_^ZaI+oiYKN-$Sra?ekWblb)IEdvKF6bXYR3s<ym
z|6Vydw_UQiok=-#!WAjqPA)zz^@jz<!N;tz2mvPoEBHJ5*h6$Q(%Rw~_-3rHa{A92
zX~EvK+ZzvX{`~9^JQ7l9@eOUA3ZJl5aWbe!o}y%Su>ZvDNZncDit_Q|k*}wJe>`66
z`re68jW#08_G#rTHoMG_RCnodojk3H6g$6XI1i_ymTj2bkuV-i<YHFY@@<Uu6?drQ
z6AQ+p-E;_``#&*C)C`q2!XlPD?Ly}1k~--u&B&#?pFW#pMl1nk^KzzdrrN$xRd@^L
zWBpix`(5n$ZNaEb%e-9F82vBxGF>5x&(ArT^l`Zr%f{`5;Y*x47wAz`(P6QdPlw*(
zhras>m|bG^2sF=`ejw-CXe+(n@IrK~zM|I(7+r%T>9J;`fLz70C}*-YXNwXXw_Rul
z^8vaqmrlgv0NMPnB+`EHBY?Cn1Y@M69hOLKw%-dlESIo)FF<sA4Cx7d566~a_zg~G
zsxraMg@p#35lnH?mHwvj#+nt_77(@q*TH<+$3zL~WHB+mfcOXv^}&fi+BVBQ!YbLT
z4Xun_G2br$tGeZ(CcGM0rj_+aEYEsS=?rWjy#r86fEM9Yiq)vq5K@yvd9ehGgCarM
zq~K%b!=94c@VslJtO}Mt2zOhuRy4}1oo9P=jgk$R_3~<=@70B+f?ken{2mb4<gOPk
z!4BPZ!TMnXP8B~Vd;Cm?=AKo2MznLdF8{iAbcr|_^dAqoe6LWR9`bHd6=@@ow(#><
zaTc+NlJk3Fc*Nj7^Ks}AkD{SAk@o+dd6-3;CyYG^;IunrgS0wcCQNoLq+l!>bB4do
zO|jK7w+XHL>aVU3lvqh0nI<naD;aKr1zvCJ6xuj(?NbI;l%+T8tb&_kLGr8~m=D*O
zRcS}*c!n+5<10#W*;L+!R2<>z^b}J|`c-+<BO!*r#}iI!q+%Z1g|zn>q@3-kT!obC
z3Yfu_+^&{64j>5EIaw{>d8l1*S|&d9Y?qg_6XTcDrSmqG&i^tnO6W^sek738Q!xi_
zriOboF(BdC-6j3Q43WMoE~OS%cNa}R9OFe)<URd#G@87w^ByFPxx^Kew&M=q(ii_T
zEKM3nJ;<tRBc1gNl=s_f;z4^gk4wmmSI^`%lcnbb9}30?39EIm_7=&YAsU&8%4B)S
zNi@A^aNt$BFADoRcSG|>iAwc+&>ZO-AY!6M<_(?O{YDPXT!te~P-%I9DG);Zs(m{4
zFdG?L+d(aYU3M$zbN9#yN=`KyH&~)51X}ey3n8CT%RtrxbQr#jNK+8(|0~s7g(i@x
z-0tJ9X^XZ7HGgmUnD{{%W3&nEoL@7QApvjBvG-ttHJ(rFzi=&}+L37DskRWlRZPxP
zfh^Kw8SlnusYuO$LL`u129x;q79C|Ou$){WX>0-)&)WN?=^+xI#_!*moh2hkyv?9b
z_woE3AXdD|f6t3_`&fLPVo==lE%wO&Brs^$$%2rRcs1jULzd8MJan%Zkkh>fAInsQ
zg@g)Jdfjd4>M+>(hcE&0L1R|2iYGX`^LLnRRiVPsx8E{nY2eI0EZ-6ezIus6>6G%j
zFey6vQ&d@Cfb7;-Vy)jR{5YE|SnVxfjf2paPc<G&i3(G<sx+?d`P;Md@}MM*t|4N6
zkDhq7oQSGG*@mwuajDuJe<hQF!&b@CK#}vYip-ieL=&Fliwy~K>xhCI%hL!}^~CJn
zxq>Z%G7&uPQ8+<XqUc(9SrF{TE8T6kpVbozD}Vcdt3Dsaw+~A+lq^_R3qMDL|L<Y3
zXz-Ic1oJJ$8L#Q8qN`Ta(xP1Z;m^h(Qbb6?J7@^uBPua3=D&R6z`Y3G!hD_y{Y1V@
zcFos6jGLDrIMzY-(CQmS{{|?gxUE(EzYiIf+W#(@1xHz))beI&c8;suEyt_RKO_X~
zQ`#8{*}R9DMaoXFt%);w4_CP@Lgm(S9{&kG5_2S>DyU$UDoX;Ux(<hxW0v*(8h^m8
z@L2&^wS!L>7o~HD&1KQARNvBVIW}1dIn3P*CfR7}<*dExgyiuHD|IEj8$p3N8dPFQ
zRpl7Iul+&pB(4&RjC=$bqb<i~-g?@9Iy7w3h<Z?-?no(gp3uE73XQZOk80u&g5YGI
zhy$EyiKJ*?Za-YYLMS9N2=rF2O9RTWHjUm*lfm(ljtjdfvnL-XjtR*uK5@Wui-Zs8
zLQ@31^hU9)>CZ>5qWQT1(-Z(lrRS(sgq<o(FJ!lfM^UG<!xQ~V0m5+<j9GuphCKPg
zl5UHcgV@b!N01_%X}P|Q#i!G|2XSW^0CIF0kN9m?YlM!d;)a2~eQl>}?z=xJD4#`8
z`_ZGK<3O#P+k&uoIy0lNayi8Es2(x-?845Y>ZI+Hs}3DY!YwY~h_eI}AY<MNhr%VX
z^_&-%8-GB0nKt<8OZBz%>cNt&CZmcza-%dvvs<Zd+*fH)vRsT|ohN{pX=z8M2*y|w
zJ_OLwwAmbQ3i47etDdko-r?R*-Z%UiWr=F@AG}#6Hi;JY-+RJOi$dh8v(451KNjB#
zRFf8HEzf?6=<fag&@b^Y>V!&g4OT%D$(GD?`|0UXD#YHr?U(33Mm4%Ph}~+tXu*kA
z>CFngcRvM4tKqxbKLkZNY7zv0MuYxDouk)(vMHi0=qHUa2X4j&nM>vZsd<x+I_a%`
z@8KUr&4o*g&0Os$LN?g~J#`N?%gR2Fwh+?=5m5`{6gRVyC$IO!XW-%BMA+@$-A5Hh
zW;;sW<V!A8_JMQa%RXB;tsy@ZX6nAI`~A(i3wGRKMA6b|^11mIjBinnR!MnA!++4~
zKkh}LN1$DEcl^<&XX2YC&^iLaX5b|!9!yX;NeF#jWWe^)Eu+FIRukb#bxD(Bm_LRW
zGfCm>QzjfqCmaDL8b@=icP0k0nJonlTQh~NqjoI8$`zGvwk}a*<t%zv>w**P%e(vC
zFHZEB6mETFime_l$LpvwTVK!P#o$rk7POw19x*AfAR2hBwh&K0Og#5^s$l>Wf$6S{
z(pB_Y2safk*c6cu!(UH2iZv-7SLy0D@US=c)qk#tPl`Y`jf;G8X#vEkl!vK@DDs${
zuOE-|DjUjCfdE{`M*q4@VHUY({@@nP56DD&{ks1?hKGg*D-h~_`K6GzP5(DGaq(-M
z*j(ORNN0GOW9)YW^STp`p}LC?V83g|hw>^{NDNb_t59!usqZqdYIHYlc3D`TlvVJZ
z!y$1WMX<G`Mw&#%4`Gn5)tEJeIx?X<{eh|O{JlkTq?IBsn|J)U$F4f}uWA$_^%Uf2
zNU#!2$FTTBo`RgznPc6pCItPOiRp+Ganc2t%E`^P5{4#sHd%;?BB>o;e<ISUp3?HG
zs7fZK&8@zYhv;16k^ULE%Fw9H&L1(LJ;z!A=$|A7@R;^*4D`C6@uf^fBSXi@K4<3!
zUd>c!<3Qkg|0{v-RU6`X7hC~lRe-hJjKp;>Td>;p)Ckz;mTDtxND}LfLR#+HA7}v4
z6<qf&G4JBWg!u@cWOE5DLQmhaT+<1|ql{}_T;#+eci*U^Wr$2tm4N=Qc*WO*1=U8(
zE4X2v(gU=N-7nRK!iHPog=5a@smq7~PX2t5LqdZHX7N7`mqV_-Rt6cWspUIxz;TH-
zQ#2t;w%DyOxP}i~!x?MSR`M59^%~Mb05|`VJ=2}Zs2)$>Z5vvM;24;ZQD)&9jfhtA
zJTvMMe{Q8;%A1|>E4J+gQCgW(*B=sRtO3HRM}#(HBD_L)io5B&qaG^#OrT+~(ZAEi
z%OA6La|j?+WkMB8hG>7>NR+vaoGCjP$!>1YdKeTrb3!Pbz#C@$>91~FOgja!9j|KT
z$d!z}LFO57B8HlIyLlyYas+-suejabO9M~BJkr({1P=p@99w6{Ijh-=Lv*?9pP>O2
z7c`3>r@(c#fcadd+?9=kKJ|E$&L71h+fV$I{+j=-?SSIXC@D<tFYg7*><dC3xkQ@n
z4SrZ`;kUzB+vjsg--#<^Ksmk`BQ6%Ju98WCK|nhgjYI{c^kAji$wV6w*u##1$$x3d
zfLvNA1Ja%ZhM6fP1uTkN(8lbX4@G7QEmVxSl3E}p#BiRSz^_6T=D}z8+KRU{`mact
z4rBjJW9P$c3<<-i*;|yKN@9bZ7hS3U?q<09+9Msy9vZvJf>3fy7qHlZK5l&#VX($v
zR>**mgIT2aJ&z(E#`nH{@tWmyX=FPTp49zqPRkQGCb&Oqp^^ndNQS`_Y?t<9->0%x
z&_ti<dLN`F#LawF9|^s}yaMGuVEI^J6^f4ia<`{H({<{_szci%OaBh<vi7Li^Zllj
z@nAHxQLlZ<KI;v2=0CORN<}qyQ8MjywB*`h5CYcOQi%Yf_<4dPTxmG%F|j8frC!OC
z;?d~a_HZ<t*Gh2Yb+2r_eYoKP0KQ0L8+Ud2SM*H$rgd+Khn!Z1En=@+uM?%eKVgxD
zm>5MT@_SmohGD1e6}u(p^Dse-m;xa%a?6XEx9JG0=qLaeZ0m@JV!8f-v#)W*yZ+8?
zIBJzB!6+Ewu=Y}QtsRE3I@pnpu>gZ6;0)rAAT7sn<g-3l#dCR;f2mf^kyzFy+It?E
zI-p8R>c!#3QZ@F#SjBa@AWo21%?9r6X7&<z|30e8klO<K3;#Rcj@3_sA7*u$@s%7E
zG@ZjCcIbx4MAJI7{jn+>nU*JMRL)A;A2RqeqnTyq^(9;=VRmP8-3)xAc&&Q->HnrU
zm9FyVZYyXrG@MjBf(T9`)~XVAK#SejhOZg5c`NMJ9B>VM--!j}erG}MW24ekR=<wa
zl&G)SxaafgJ=w`>@{H%3nCRROizT(2Fwd7t6mV`^%_-$b5#b&Ku<h0VQSP4T6>=3~
zV2Gh<orviwBF5Z<4H=oN?oaz_QU-`q$1BJRnhRv(bb8f}RYclVE5Q8Aoq<Z7-_W#4
zW7k!?MBX-joB;nn0Kj;$C?j-4UF;xeO4OEV@gS6Go}Q&WyhQ}6r4|_DUrCmyl(SpZ
zKq0y9ikFkZ4o;904hhz7-+&EVTRrFoZBC)kyt1@E0_$h|^e$IxfC8iZ!wQ0_H+d_W
z>LEUm^5@OLimq2VKxm_QO{+V9W*B%=5hGn#kmi7mqo}TKdQdmjD)Yb;-=jc+Hj;+1
zQo!))JIrPZH|c$WU{B;b#AArNRYNs)b8)UP_l4Y)J5bidf898k{L!T<DhTLvF4t7V
zX@!ahs;kQvlxal(AG9ZIo*4`UbJ)A31zkP_7VB02R|HYOMaZwMm7d5}A$=D2qD4Sl
ziJG#cz6;OClrEq);wqJtDj1Bv?VJ>)3g`mrIii>u-!VkUBNJn+1GO%ua*4;HDUUoC
zc6u!g+$?)&!M05=z+{zF`^Q?1xC03G6qg}lkg!vyU<)ALJFejccpLW#T(T<y0kMXd
zBKk(DitVrZS7rnM`VV<)xFw(q8N^7EAJq=pFwXy>U;`V7#7vif35EoySud`WZ%@?T
zY&&ioIXbgUpVjnZ<zH9E4ED3=Ir+4Eq&P@56)OMo3m~(e==&1BM>(e@pseW>o28_-
z?VO9o<yKh^JESqFn*@yRJMJZUuE<j)k4JxK;d~DK&+XuJ;Q^65CEwU{D{Ac1SCVEX
zn|3AM!7MR9y$wj481r^l;YUK2lxNrx$RXvNeHg@hLNN~PB=TRMhHFGWn%ktj@CAs4
z02PPO+=(GW1etZb_?;k}TS^9!Tl+*&lVo>G9gu^@gCf#c;orc4#uI3nj!`7_zNhpg
zJ=g&L*E5Q{_s<@Fh=V25HDb#zSib@#86^ZZEVz|S%&au`ECA2x>Cvmg!G<>`e?&R#
z$Ib(a?|S@x0Qs8i(7ZAIcxhWl2wQ?dQr&YI6n)q11VI*pW<F<IdsrASmUO!*^7d)a
zf`@u`uNdpGx%kPI!-Cr{8|_ME7@6ob>6jOOEb4Lz&k$m^3?*?x{_pGiuJB*(tzkr7
z-k+{Np|t6GuptclVOv``P73;<W7Cw|nKqfI^9cE$A#RA(xoHV<%bQ$>KX6Y+*E|29
zxW&20>6DNFQxrU6?pG~C>*uP=TiJ@o{uG7%tHBEL+2o%1Wun#}7n*A8W*9b32J1ti
z&Wf^tLlbqg_$+x^wgK<zrTr@3!qj(OZ=(#c*ZqAuFoHTCFUA(ctNq}|({4iWMgRpt
zXjJBdr7mbJp_0Wy<RCn{y16fL3+~}QdN&a~@Z{oGmGc0@VaIv~wDzzBA(cBgQ0BAH
zu%}+y^EjR9+FO|p8@0u;T;_m~a6BT{w3RoBa#!NkHpcq~nou}nxe*6jSt6&hSE*E?
z-_FASkywqdqz&@Hm-XE}X+s@-nc`bm30?Gx__rbs;>|kJf)Ob(g@3bHtWe`GH?tH7
zPFNcy+4R%VH~13z)#>q`v_FW!q)D_Jl#}@Jx{h-l=mnvl@;O`QWb&q4w~xRU%vyE`
z54+a*`}qc?YkPa*!Ne2snvA+*cPyD#lUESPq5R|P8OF!^lc|I9t~)xjiXq5TxX9e3
z9W<J@&A;?!w}JjnQJi;a5_{$5&NnEyxm0g%+$gw&GMBZ-KwUg2?^Kn8XwH<B_=dSL
z4OcGxI01Qo_sL&f#=2-sWn_@{2-9Z$B<n}0fUGjkJ<GXAq;vU`twKnGon}8|Gbx8-
zSeKxMQUkb@SRwv-_r1&<<T2(ieQVBdR|tsZ<NCm<ui@Vyt#?ash(t1{O;#!EOC~?K
z3LonAsD@Cik%+uZG&@BFK2FGzX`q^iB|+Ag=^N-hUroN17*a==ojATktjkz7c@pgs
z=Z0qYEYLi6#c>gU(#_MeWCz)^HppTZV;zFHU=A8get2WPg=U9rP8{5GBaAZ0y2zqI
z6D*XUC#FuT?%Y1q3nKYdj%CD!ZaC$cgBw&IXGE&lq;gyVwf9a;eiY9lgT}43$|=s%
z(M)NQdBFfugNq8w!E@C)(tz-<fc$;B8}Y45nEbhwlnRg22PnYt*$Y@qGHIm?QIdD=
zC*hGM#3q@iT05O@kZ(ld(6NZPf<dqcYAUYhUFYa)zKXwZ?p@Fi$%6ioQZs)*6SB_L
zH_5K(Z$4;dvL#blr06Esun;hm?azH!&D%ckbAAl3otiI$GwNxw1WkLSIgb+l_7fMy
zyI+|P2&8v=`I@w#!nu2OEIg!MBi_4mE){e8fmGfJy<Mf|!%sw5UY#`O=bL9rRo*Q+
zek}GHA0dmyD+${CGs>e|K7bwfyH%`5(%Lu?i#ghB01+1fvVLt>3u(Z!c&CiIiY=m7
z!Uf(4>lFv92nVgsux3g+i}$+7je6PFHZouHWZa<HrVSQ-lf^zs&}#Brf-nV<(_?8p
zezB)gc)gw?BxB73)yMcPf=Ws;s+FIiKQ<21pP@)}9Ypp`O7Cr!YA#<PhG~G+``P8A
zd|yDf@yq+Ka#D)kshbyxlR_!RDLsU>I4npjM>|?|t_%h9W*=o@VS^L|Iz!ZH3<5Zw
zZO~~Px?-NC_H&JVQf@>4e0erVd|sq(+k}fmy1m&ID(8EuX3|%W4VvjV`|Hym1mCjn
zr&%XltX5m062p-DItQBY7*~lKpoH*aat6MT5_40vUE+q#xYjlk7yIg<=vi7RiTR>>
zQbl&zPQ;AQIzu(%jZsckTHUFqQIbmgn?%)o?taiBO94*>kHO?K_zrED@FnB{uF<cX
zoThsxr#y<f(DTR2#O$GFD5n@##3s;@&HZ%<Bqexu@$TqzooQ*6)hq3_bOimr)~~}H
z5^nw2j@LRNJ>%`Q)U3Zl2rLA{5X_O}<au679xE6YW!(X`2V3;c1C13Gv;nu8KG2^d
z;9&!Ia8m-b)I)AdKN_apv2*S5d8MCLYYgF#SL?j)*XacQg|#+OkDj6S;q0_)79E=M
zFvZ3sZdiy8h25Yem6gU$AGOc>zWprDWHEWTYobYIQ$;*Uzj{7h`|l@>|1~mhN}L=Q
zgO(U0(r6y-bo@Nc^J8f~;D953a;Mf9rHh^Vf<=cja0~_e8@CR}m(s%dm4bZ;jg2|s
zJbLc;+XTWFI&Xic_ZACs$RU2Q%NtQiyNJK&c-fL*;Uqk8ILun^p(;(l%o(jTANMrG
zXo{U0+D&gCe$+>NfjH9-wmdL~jac#8-jOvnd!g{zfYj0tMZqRN<pm>gg<+H82xZTq
zFF08LdGm*Vd1qdTD&Z%~Kz3m<SD2K~!?%>fLyIjXWjd;b;jj^@f;=C%+Va1HtHBn#
zo>qfC=I&V>XQiwr=lfBplav7igt-f+?@zR@qC)R+yAshv7I+dgu{8_v$=DohG!z$@
zn&31jND5w<@EYLGe(nYjItlnFl*_aY@i9Ems}|6()8ujatKQDal}E@9dJur7I=-2Z
z%+pnaKk!dWE^31=D-<~}tFk8F)ONw7Q3#Fg9fP8d3qf`bOOBXRv|{=`W<Wbl`^MRc
zr`I%B_6tv!ae6EHMSS#rD%#Jhp4<Yw=FeF(?oh4kzS2Jgb2`6jp4yZWN#jRM_z-N!
z%QLeZ#|4a~6qpL8A^~wR$Jg8bZjfC0_B8a<R~1l^;9S5J)AXW<DuNeW{tiXiKJ#H0
zh>2x-_3;^ZGYfr)+?{@zb;kCo8?z7<4Ff5JDgoj8=c`q9XZ!_;+?gujBMT!A_N_&$
z3JAdtO*GOSPu!4f<Ahl=wF8{N(1HpoTpVR5;SLM5Fj^&**z63#;Tq<rR8)EIyt5(d
zz{O-3T-9}1mk)5@tRAu|171o`4XpBLw;2*1Ql_><2c{a!i_1)>*Rs}f_h^FsWE+Y*
z5NgP=`O@}o-)}V;ezIFQ3);I0HnxMcBs6<?$Sc(oE@prXROYE{nT0-%8h$MhIqLe7
zaN02GOsBus{`cGYew3-J-hDU~2uh7d=A7H4AHwUq=BEUO<~#QAprGazUBoW|v+RH@
zDjIB}x!=Jlqg+W~WsXlbbA6kqQj>u$rVlr2cdwf}PKdUARAeb*Dw;qB=sh#XgYG;;
zh3Z1@qV_Auq-pVW*4`Ssg0<)sBf$y)!S3!Qvn#J;1C-x{JaAA$A-vx|-|3Dx)9&g>
zzBovHxpnQHvMIuwqjzVRKA;O+`LoUpp8Go|4FZTVhW+@cIgtjx?;p`H22kb*`XX}L
z=B7%u{0&t*u!3r}WT#YHU>zCw@kc=G>F!G06-Sn9n}?J$lqi%82jeLbk8mB6St4>6
zGQN{FCvF27*+ldg7GdKn+c*@Il-J}v7g05pQPb4Fom1Ris3ZO7IrwSATAWfri|b{m
z?#lDr%%o%n|D473<4t^*xnn#-PhLpLoQoB;tQ=4O(vs=pOgwXdiR7XWj~wMhJK8m_
zVAF$2URBlC-{1)0Kq1^aF>AQkSyK2+7hWqH_Ckx-;~9xM^6Q(9I$aw$AGED0=Fra{
zW@6Ejk71rqlQnE04m!B}dO^JHOn|A4|1DIgOEE00iaR{51(IHMBeE~kWpd4|fMp{s
zfIy{ER-6^|{$Rd7@DWtCJVv!9eokm&*q>1ZMd5x@unN2={b#(})o8Y_5ra%n1^H5h
zl*{5W0SD2g(8;pBkT132?P+px{8*gjoZfaRIW8UQI9Q{p>b_gr3DqN1i(IeztZS{s
z-N?{PMDX*E%ESq!Cd2qgdz=_}Y<|rr&5+AZTdBgwZ~iSfg5FB#LOS&4ZU~4n{g(x}
z=aiD3cFhc`?4+fbZi6Eu<5%{6z3~KrA%Fxti90(=pqJ56?u}MIs*1$?GL;&NhMNz(
z42LDkzUAQ8<!-)kZMb_6h3JT1(3%c?PmJ&r)R6_TbkpZ#9awzXG>Y~J%{_n_*>!1l
zz9&G~Bc91^!rZJUll6nqSD-Rg)e)#!+o#43Yu4Q@aOo@-5=Iu7Lf-HlIl5y_h5H~l
z4kgN(u#)_sTa0KH!hS7`vryA7cL%`?m0?4wtg2^iyG^`(#PGzE5NW&}2Vtcu8QrGg
z8!m4Df>CGV8|BwEelJy4+_)jDRREY{JU2p?Y>sVUL&N6)i^}#~_Bd8oC%Z?~Ulc>=
zOArPEQk+<`6a{U&d4SIK&(Eg0ECbLKqD&{8eXl!*&LVIE75x=RRpWSjqOh->JZ}83
zpA~7PXX}tRVZ~__m;>yjMSad^R8EvN{#rW0EDjCJreuS~t8_CW@*Ms&XqYz1L*kqn
zJ*o6|KXWGGfI?icvTL;&)0;kWk+W`M?L!7(nTAZ*wz}n)-n~!gGIuxJS5B>cdu$vr
zA_L&;&-l>pI5cl6^*yp_CN*#45tTR#i6(IMRZWGk$qJ`zv?Af)?%~MWt6l5Vj>L?K
zAPYe*1)4LDjGs`$h4L**6CLfI)W#(<U6M9w{5{4S;NPgk0Z(<+eJ_j{WrOz&;fFpz
zm#(q7jE{yLzjJz#JrRqgL5MN2M&5{>%U?AAqU(p<miwEuu`AIp(jiZG`PoDlvmuKV
zDZ6ZIZgKf#?7g(iHrY1j>1N%|B1?%7ncA+NeeZPWUD#}>s&7BHIP5s|uSFskvNRxu
zEXJS|PftpaD8lYOj5;e!J1u#UiHV<yaKmo%ryX$<ul@N`F<l_mcL0O|F*%UdxDOGf
zohgNLm&-N0w5lGX(9r?FAz>A#OkrXG!dT3^Zu96Dx*S*+wLzkw+zIV<lYgn@Ld;ty
zIg71VTZOK1>%&<Q=%vc_0p8U_FtAh8`~a`g1jhHrWG4MlgBaC|Cmz9H9@ZZ>=bKfu
zb)pfR%X!auJ5}_$j1;6{0R%PKcHu7K6ryZj_5K>RbV8~vc`RYwVtoZY#<#@2o3>A#
zs}{@NUs^OSF_6y{47`<(9*SLhhGe-plIW2xj@xFjc|;_}9arsP@nl=vG7c@4NqtIf
ziGO~dnM;+N`;1%aK{l)}=&U@)4<XBi3cYt(+6v0c69`BRoPCT5$(!&;IIm&*AE>8@
zwO(?_p@=Gxu>WOx;rqRJw-uihSbYk+U`p+FZQ7rsWgg+_b;2^-*=^2^wQEe|nC^oA
zXuP`j<x-FXm9Mf-FPv}Fc6J4)f!6C+0m@o9l19n$dH7ie7vkdfS^W}nAp7<zP#wWU
z6R7bZhPa~QOqHJmn>g=C)muW7VpQi9{qsJsxw6Ng$1_ydYl-)pXRcp5tt{lGcn-mG
zAt|qYFhJifj_umMY4CQK^o})Kvx;N5g3JpR;{q{3+CYtW^&Wz=&B0pz`M6@KNNR>M
z5Eh|iohDX*VSLsb?ns=l8pr}H{3cBPdhNfh`tS;qJfj(-p&Xj6<6Ff<^F|`+asiOj
z47fHy<p)z*(Jx*O@vWO}wlsLE{I^1${!828a)}&QFs;I%2bleYtUD{Zu1Lo+PAY8n
zQXC`~qEmOBl(`?XoF_f)&F}4jf`7w|A++x5Y5v+Syh9<mCTQpOT|F3V-K*2O0>V}Z
zu@G4><Pi#|_{;3!k$mgR`<--$VAsV3@1@|rP?UpD>Htie`2?W$&#k)JPTsXOGNzzr
z`9I^#OAl;t1*_%=1(dwV{$4+Z0Hm<AraZdII-wIK0K8jao5wGjh>{6BFa=Ep*}|E;
z>Oeuq_KDPR4rM(r1V9HPm(>rhim4@fT6+ntd@tF~^_ZPvoO*W+zaT>NEJuD4a+W4l
zzzj33K2tgCwp4n-MFJ%iY3c_axn7pN4y|XGI&_XhfEUa=9FbntNczv9=|;q2&lBz6
zTgB!V^DXF%$qw?n8L#dgsAcb}cB@^ZN9~O77r%FEXLTV|b22QGPGS&CttT#*_=H`d
zpUJOXUyQ2V@#L(%?xeJPA=Gq30c{bkiiGyp|0DCAYaH2tlo{dKn)mPk#t}b(M*NMU
z<g1czbJNXm7mXRP))qW&5^p@3*ox)id9tP65XXoayhHiUJMiL7=u2neU2&r`1Z`!g
zn(Cz=sw1`j+@X<k|2f3I<xO6JZ8o?TN;O2@s#L9uh8BBQ$vVsY+l10ha?xKI81#LD
zs!PWA+SPsYNm-Va;ycAVHF*t?aE{A+eEhi}re~WAf_+v|&?N{ak+2+cW&5N<N0^4S
z$zRiKI?09pRUP0-mI8jtw<k4BKMdUIRg)I^oyj>St*{vtK+kLq3QXI+F4%xV)}%Pf
zyZ#d`C>c69a1<eDODn_^S})*fNv1v@i9uOBIN6F@s(zcR?xlirxi%T2ru<r3ONEmA
zQ;Ei?591z^thRCr(5FFh!?|YWrSMR`R-)e?w<m!FowKbMB791IPqwmo^B%Qg-__~N
zYB|`EX4TkLtCm@!$r-qs__hz#-AjnLY?!s*;#i9`5*oG($K&gNvp`+jQTkkbM|odL
zT<KAU_g__MTO@qeP<GEaC6a8wz`JKe8wPeN-Q}wkHEI~I$h{Igs;u{qO?HR&`eH!>
z*$3(e<IR*BV3+1u$bR}`c8+Et?tdYFqZNc?s~x&S3Ec%A-PD?mrmB{rAAz(#OCrkP
z!?Uc}4XRs=)em{w^W|JbVR#x`toCE7!d9`XY?cteGybb)Z}XlAx7DkwU65l|LE%w}
zL9Xl}EtA!StisQEoVE5pf=Korou(N^qTyJ`d<OHRdmywtc0M#UFoKE=+<5lj7KybT
zopdm8&IralWSW-*-P$L#QdAC7z{YdZ{_*RuwDNi&yX?p5L4jUj!YZOHAaFM6#d-Mm
z1+9+Ap^QvBWLaS~4^e`x+bO(n5X6cDApH6@9Wa&Bdd2uMxbutYua%qww3^qUU^9sa
zHLz>=o?`{9``JrYu8wl+Oen9p4pg+0#cegU741>eV%B(Ae&*z2^ZcrY7PGR93bAM$
z_~9L&^9PO72;7%ynlcKL41d*QN^#K+DJMq&6wZ;maKKWiPz+KGvdxTsG{*e;xmK`7
z5p(UR&<n!@1Onai-$^&nv{Em{vCKZ!|CFb+!Esw8s1Ye1s10Zkj>0N;q`ixNTD_%r
z=>!5m>uyHgQ-a7Qv|T749%ZBV&y7AMv$1y}+9&D<hy0IlJ(Ps6=<2BB&yWu|Be-Z`
zz5#m0wbZ*1Es66ooGc$zSTaQ^J9S1}%*iN8(f$-!0P+qYsFywtTec~!O5q>t(6-_q
zY-l=~Zb$t#7&R+QUAy&cX%F@8a3{S6Ge>Qs)K}~zN{$hyJSQD={#hN)Jt%0lWqIP9
z>gY}N6v6NKWN2no5kQGD$BS8bH!67lSBuqa=96%LaLWd&eq8%moD=-}GWxYpp5U>g
zbtX1sS}!d#XEDx&88kMEpq}6my=z#Zn|bc%4Vg&?N(X6QUt3=fBH$^I+jHWU-N2OB
zOGCjjr4dk2gzu-Z=Je6yYY7V=^%3a4lt)Vm%dRri-v~8)dr^j<w#_VESJGZ@7%uSA
zp7^UA_=|;tXl8Iz@rUV#g9e@aS0=?f?b4koh}A+T#-G3Y2NO<W(qk=SjTr^PgvT*k
z&L(IBE3;=4!Yoj=Ak)L;+}6d+*3el(QYY8*km6-YUB&h{BAFKfHkz(K_-`o!Wr#pZ
z^fC712qoO(T5AOZ`gi{Ubm39cp%)D}aKRB0hkylAB4^b-R4n~=`?9htG7CLbYVRuY
z<GgE*J?~omIM(i44Bi7NUT{BqYGK_*ycC*+qLNKV^D88K7=9LHn&QGwtjb^z+W<Ta
z{K*Db#LM?X7H!Pd`SPCWHqIM-h*+)zVpYp7Ixx`cHA$WIjDw}kVSV3sakc4z{_4J0
zJY;R8uu@->`g&-TC~bv|A^;=JRVLDn-kE#%9yzVsLO-!u?uqniPyS=3hsvu=#|wY?
zwP}qKe*m59A8+JB>OWEk5|(&RzPNlp^ZF4PNd3vXWkV+kuVvN};1EW`_#!b?%3hI#
zg+<KI8!1wA=rV-UD)(Ak#lCck5a0$Vznzl}`@~3x>nLQ?>33Bgrk7jUkg)JKIi9oA
zy7^3T9wz7|avt2qc|DDBUf&NiEQF%ybNlc5hSDN(7h{41nwT|iD==v!dBryr5P~AJ
zRj=6A!A+d5TS)o)Yf~^NaKdJid$W!x615$+D3Sh^!CyIbarTNi4X?X6#X)NWi&hyq
zRj>phMMJ^&&VQ^4vqOmiQl7Ujf8yOLRAoFV2L~vSvhoj2u-`PSSS<Ne{}w#4Z3utH
z+5w52G~x$7lhWhbgdW+$o374b7vBYH9PpkDmS2W`&-Znmy4J2iG(IA(j5uy#Kom!C
zV9-6M;x6avqXb`!Z%|sR)5iUvk64A4=Yvj14$$nnS1L+spV+}R*G6}hm!B165buS6
zEVe<~8`F!Oxnn=?m`CCz8K&AO9Cm|YXuuH`{FYdNPS1}S3(&TY`Dt_f2FrYp>dwKW
z0H%v4WxHiEi)h#iV9Ek$f~qJr!!TCZTWlF$5{)sno`D?}So%!i-9)4}nq${^awsus
zDTe=CZ86)eW~9E+MCb3lJ*NjQttV|lNW!3TsR>Cx!Hf5+Cx)B?XqZN7f)gJ#t&FLx
z@U(=$<U3j4@iwx6F{ZgeR?I)B6X@KMV%2tE$l~%3Jfgq`J6O{W67E4gAjk`*8yaQ$
z1z=8R&0oUu5#a+5!oJ<h*FB;P;8}Kul|^Nnc;%f_Fh6hFHJF|w?nx*TAMx{PU0Z{9
zE3&0?iu+D^+$t!SMOfmO2;D342$O28JXA|{)h76CG`yChL{jeepO~$#4*~}OtiBN3
zm5wvYvKBB~OB*!OFkMnJ11>DDGb=>F^5R7pm#Q4LAVffjuD25P^!~-$*vVza3ygOw
z@&v-XhF^niI+L5fTOAD}vqCcKPz>b(TEFp9i7_Me=DwaKrVXM{J5(kDrkPI}Fel{2
z@T^}N+FV|iwDMG4_97T4C%XpSx`Z@Y6UjxApQMOgS}|`|Td^2O4+6leS1JvfTJ*9*
zYP?)v&e7`XG2k<31I<+J<3|r+|5e0S==|R{pbqq=lG;a@{7EGGBpK(Y9!@Iv_!oy6
zy`qR?9%pTH31kMl!Z_l;LwH9T@;ejFvoDNNiMG@}q#?%O$d?&vo93EhOYh`tMMy79
z!yHvwkRj$dbwP;5d~}%eCY!p8h;%#nPY5FA8Gqcx6^&ATpU??=qe%lI*#&U$Iud+`
zpf+d1rBTlK>l^))`yKnoR2$147=nm*LzU^Zyn@23ty!}$Avu2}g5~IInArY+weDWy
zv)eHq<73$J@kDb|)WWFq$dZ)+c~*TU9?yQcId3Q)6tcwj-lR!n3uWiTOqXa-e0(WV
zc!44eQ7y(&a0GVZ{<_n??LZ~nR?>l5MlK-)l@kArZmnI(gkS)*C&4YNS%^|nnzlwm
zBpb$t0^W$CtHs2(lg^w}`yfVtuOQYZ#rzE1IGHzu=d4)_5nzaIwbGHp$JC)+G2_kc
zwsg$*o7ys+9^5U1YTR{Zs5GMg>#$@&kD<v!Qshd&&=uy$n7W>6l}CncT|7h-q;a`}
z_8<>}8nG+MbbKf-tf4^Kh+Qn~zJUU42o6_>F$3&okvm?!3s-+~GP~5-1uL-%%Fsy;
znm<5%pU&ZZK)<x1MQ3|@;*XH8#TU6et2T&+>#w6$mvmar%Ui@Qkl4%Wzwxvk{!Ywz
zWEqGjX@|IRYf+84iKZ-+JAlyJ-?e)wl-Yibh_*Zv;D@GapI{j;tR&>p_SM*;m5Gb0
z2`n$mi3GtvRg-Azac;<@N2gS)ibk_6Z+(3SWgpXCJfZ%{pQe_YDfp$0C6t3osG4b5
z!QA-M8}B(`Wqg=@`p0MbAcZ&s{M<-k^=f%~Ry*`k>P&M>ti5fR$}Cw|im3AzCN|1$
z-NeKJc_;b-xS7w^hLX7^-)tFZWTUTF8v4RhUG2sW+xMLUT3-~Pu~lH9Q$(2jER9Hh
z*sGQtEbo;+)usD<JO~x=-Zl;Q&L^@{-mN@OA7L+Di?*G5rDHrW1g8|%Z2QLA51{g(
zk9cN=tt`Y0Fcq<=$g$oy&R~#1t1iPf7t9zNZOqrg&N(DPV<F?j0l|P%-d`)^$A}Rp
zdryz;z`<V;u435X-Y1%O<y<id;);@)OsT*@dn1-7s*}3jNWorNDyr!pZf>^JRmHq}
zVqqO6cMSHNp0)ANNd`uF;=J)nh}NX6W6X~gp598v*8Gerh0Hpxx$1O3k|1sZrEvhn
zIVL-CTu$k9lRT}r3Ao(|+g-k)CALSvf@3Dy7-2q+B`h|WGeXUKqR%-f8U3}<yqq2H
z%J9;(?qn$F8*_Nb%1FK_pr+9Nze~-KwqTY;U;tjaT~GmGBoT0(7W2gFq{0ls7BoLc
zSqA6+E*~;lFbiKdXSxkvRKWm3`eCvX$Jz~i?(FU8pP(}AMK;cN%yp9&=Agd1|MTs9
zL6|Br+ma1*oins0Rp%Re)X~oeiHK>l2D%2G*cUC~ElF8`gvdDJ%2#oM^QU6Wb?NK3
zH!F6)rE1azZVQr~0~51G3XW_NW@uHIIbTsE<GrJ^2CIv}YtXjE)K7wa#do!~<7jBC
zfJb_fU__L9ABi-n(7APp?l>YKV&DJvfo$hq9BdjBYb-%g=y$j=8F?*xHB0ERe5%OR
zJ2(cpYyll^2ZbP(RMLZ)2`4aLzt(_ABSCcHzNxM3f+~E;qgxWy8wpGI&I<yV9Wm%w
zRg$*OVOI=`m-&<?Kd&}1#<)r0nXqS=<r&HpJ(;%oD8(&FiAUD^z#Rtn9=&x!CJo4C
z+fB>{;h&Z>o>xz5{?9Q2kps#m^t4Ld1?ORLf;;~QnH{vZeoO0_B*%Fhs*<CHq@;kq
zy+&m}iYjOB$n;a`<6$7w#KG5jWF6~+dU_NG@4Y|W5yYqKFY{#I=NUc^E`6tsXJ4Bo
zCW%t?n{Xxq?o(ZL=pn^<wai#~W7;esRpZfM89r3oN>28=%8x}d*f?NrOU8Rbe{Ob(
z54Q8s(kldW!KG3QdczNcYTma;=XcRa^m7Fv{bbu})t4~;%J%nOZ+w>HgXUXhWHKty
z_eIWNKkoGaAdBCd@!NSlRB_=H0zJ`hchY0<n#4S8!5X%l&B2qTTFv@_iiRq3_Uk@m
zY1vC#Du5Q{8U;aJzxIz&#v!cS!~!Cg_5pU(QypCMy{OIGM>cH;LS*^y{*x;hlRaj2
zf~P^&;N~SBAc*KT$RvSxJr<vHIlU{=0bQP5>Gxe*eDN$eJURoUMrHuew;VOk5-}vJ
zI^+2=0sOQgC?1XQxc<$Qi}|-e<;XfxcYt_k!04TF0r05Gu5Xmsj5Mci9$e$gq~Bi}
z$_R;%#B9Ho!}-~~yoO9iES)ZVwh{wGX@VSpUTbX5S?~#YfNDqL6IaVZ0AbsP?g5KO
z7Z^9_(4CTa6doYSe)ODb<zU$m6q;(lI#e>={1ylyN3aAx*R07lLtDN26*Ok@S~2Cl
zM%%|fkMWoHfnL6coKY7^me-%W)t*341mxq+070@?N2!r_`J2m%dQ@zRC$-C28mMj@
zwT0EwI6-jSzV$&DYRgT7NSgB!Sh)Chs^IW$2zB5a&~o0Yxo0QoGTogxs1W8xmc!(}
zCp7sB&RQDQ)pXo)HeUwNv<DC;<sV(-uD4gp1RrsT{$hyPy&wmMz`^hcXGl#m+2*0l
zJ^9ab9=8wdt8gn>mhc~FrGttyUq&1@lysQzHltiE`ZHS^HuQkj-kJq0>2$GSdSH$M
zcHGk>E+@VQZwT`h;;04$lpEAx9?>9w9PiP2?46x|lZ>2Hh27myb<|9l6G98wn_L0R
zW$3l;I0F{p_ni~au)AOM@r(WPy<rjR9j2vKv6phHW7*NN3CRa)N)6Qp<tHQz+)bu+
zV<Bbj)brg13gpusEF8?8N^54kRj%i%AYg8zfxRAwk(@=P?6RL$kX1VzF)^-H?k6(w
z#pFU@*JKWO2ws#zM4w&cDUqD`?OSraIK&2|c@P687bN7AOp4qKE5E1gt&Kk=P*}xl
z&|aXaBU@IL0YM?hh&LHusq^x5!ACxmbh1%Rj$bb<vgH&U(&$B*YIE+e-*eOO{Pb5>
z!~c%`=}K&KpYbTwK5pi*<fQtgC~}12<U^+ipr8S1#og2}mMM`$&<UWLXP2tijV+SA
zHM!wsi!}WIx7(Ry8{T|QFk9KVkz+H(JMLvGmqF3`jb%ySC1KjFwN$2L`JTxoL}1L0
zgGIMoJCmrL*UbV=Vq^mA0^#lFDcu3gDP?c^Qer>x!$jBA?YL1mo`*Z%02^mS;aI8X
z6fD>#h1w;27++5J7YS$tU?bx3lSnjMvxEP`XLV5Y#ZAu89oZncx+cyYuF(B-{VCD`
zT<Pt}5%}Bh9La0SUMQwi7#4inC?^B2gRWXYx?bRQKR}6euF5}0vy0y9S}NQ{cLMYi
zGjpN6rC61YD6n3K7GcFyAB`k#Zg-;LKXDKi;Tr($T(e$LdW-KHr-GRI5a=pSuV6hA
z(!bt8i`Zaa!|y~DhkUvyL|OgG9F{t_#9+1({yhJ3>uQXO6o)jfO#J3~|J36*^O9Bg
z;K(=;e`V432Geh?OdX*NV4S9sc37TAq%24pJiIBRKzs=%VuGpv9t?>4|1M7<R%s57
z;VRkK-n|}8@7Ai&cf|@yzqR*;86SiSltJ6=L}mvRkfHu@Tq}nb=A(Tj-c;b-ErJHZ
z%lyLwGIA+)yjYAKAR*g;i5$0SKxqP|wj;PG-9h4=X!eUhToVEmw#;0qfe~9#hfoj7
zuq_Mpww$(6Rs>V5Lg+b5a#<|ojfLS~Hg*iCG3aK|bUGyLh7^Dhee*B<Sn!(IJxo3?
z&1KYGAD=bXdQ+nQgJ!W*Xj@f?=73W`E8KzDH~2P22NUEe)85cZ%ypl$EC|-;vCpTJ
zPYbRSjl1D<j#iapDy<WYSvhb2fnZEr$X2V8ShrW;mwxINGswgq>SP~Pz}bW{f6-=%
z@FJ%Z;&WWXFnp;NLOUuOUBQ+NUG-Sr)1_1`aQ+XO+n7Q4=Jzf#L0-SCxTJ>NUTBCH
zm_9d{m?;Mripuqis)a)9^6{08MLd5*tV)4E?7aZpv@ReXZfuMOruZ%TJ}mZ^e<9Y4
zWbgdE=lNOn??g{t2SIqB->L$R@my2kJycibVG@dJF})m`*_N5GQ!^Xy(XgKwLDKY7
zt(t}nt;=HjF2$U{ite3RqEG-WQI%mES(PC-9^)Mw8$a_h<nMJ6nO!96sTm<$sKDb1
zZqrjWYp`Q3fIdTY)~{|rGI!)Cgu7C6UABi4pIHgv+<^1-#<_y}7z$sg_0lcvy9kLe
zb&cEt?ywn4{a;vXH07*$$D-JC{yCq+dZ8x`1#c58o=vFk*2QCFNvG0GkPz*nj4&J&
z8(>STpZTXCXz|QeEOjWP$<jp8%c6(n-Lf-5vQ-vU#aR{?G1aWi$4ef~O0?UYLF!T{
z5SvKTVGFau+SL8k;7rN6+u+u$bfBq0_rnxP^+_an{<n<ALph1a(xF@H0P79qAs0%m
zXx&2lNj74_Is8q#*}88Z!T~0qyCJ8*nwE%-ZVr!Z@m(2C#xDZ4?^TI@CUFng^1m&p
zX5raU>iS<qkI&I%HKv3sOSDtrMe7S;y}{fj%0EF<?0RfvS-p33d%CqrQ~>yqWHoPO
zlDL|8Y)l@=`5;24Q*&9>KGS|k96E;U0V9{32h1aXc`Q4<(i)B!Sd@)7caC<?cojEn
z^|#DxlQR0}>Fo@s4V(c0CNbmam@7OkNw{P21H0#@%7?JB{i~9rP?{rOrXAK@s@z^)
z5ol!k^-_l_8uliG1qcc3w7vvm;*8lxKk7#4Q3oV?hknDBW=)ho>v&su6ui=g7%|Mh
zbIbPmA0aYyVE`OHj|%^TIJ&#$YC1fGl*VsiWM0K1kZ-Dt$*Aia&E2s&q&(mQ2-l4;
zqfm!L)op%iJUZSA9B2WQMC=6_0Y|qn=>wE-3tt=2Tqp&dCyF;NrEc!qZLelLFoQq8
zO7(|+Zco(>A?g!?RzXH=wA&~|UB?zo>%}<NoT=cga%vwARU6X?XN8L_mc6ubpt3R<
zwW3kQWxSVUm}5u$-P{}Ys*=J7u!+LM6+rwSxq?q-$HyOfI@2o;xtY>VH4}stz8nz1
z>5L<%6rJ2YxLQCz^-|sd<B^uCQ)H*QGolI*Cjp$W8j<Jg&;D~K%K3R>9=F;eAs}YF
zzSz;MM~X1U=fZsHvxzVV$xFz$azU7KFv;E7U$lznKcq{0`41R{zpG01Q4Q5kA8wyG
zAjxbf)&m<ZA#(<+d=D)JHRYHYU11`;!*t#?xG=>>RSgL@@kq#4k)qI{U;Ew4gd%1r
zOPk@K;WXCJV_=}lmU`j&GK5F<G`8ffB}=s^-@d|F!Hrx6ZVIYF>cJSs=X;cO0#d-&
zF<yhkm=0|wjKjZV0wbk33uaJC@7Ws`H<bo3d07q$j9C5K1e<L+N3KYl5wG3zHA0o}
zuo+$kjX5-+#_9*KO<enPUiQNomq>?ey(=+auaEABwR70n?@hO5dT(i02G<;h#1}z$
zhxNT%jZa*Z1EH{OlgHeItXnJc*U%3}T<CP*^Ae{kWS<V^@j!fFRFZ9W;51z$W4EvL
zS@?Lsn3$jSk%!zSiN?k8yVdrPM1g(uN|*T!q+e}h&nFPs*w@&RpwiDbFWmZVlt9@>
z*$s1N;QO|Bdcz$(G$mJ<jg=5?a5KsPn$mFZ#%m1Xv87jT=B)H!%&OfT#~|v8I|&-R
z1_|k&MEw^+aVjd9f35GO999H@5wlHniAftx7oqt1$8r_pxEaA4!?3g`hZ;OQLYu5Q
zZOR~PD#dluCe|Au8O#*WVje0=L&u%D1$wDP1zS8X8UZ}iqMpJ4wY=O3o@B`w>D~|{
zgLY@a)SvymoiO9s?k&kBT-bDdqN1OtP**L973Oe8agZ@NWQLvRi$e!mx4D>9Hia~Z
zB24$F)U^${9uIJkGt(+wj3=6!061yA<ZJXq<`L(ed_i<$Tf(Zz(v5RB-}t$R@^RgR
zKcNj<@iB6ZdMD!hG!ul6>r$Xu);c-2)_QN=E8@Vv!0?Yc{@DetJ9b!(Z+ZHAO7k4f
zR{Ig%BQjWfDK${a9t36>V@^asPlfH)Cj9nt(F5J5|FISiNx!)`#assVd<F;n5~cRM
zPjzG$?e6OgNm27R&6o;Z1~dW#NIO|@)2!CqWX`=xV<yr#u%80MYF~XNqO70^)ew8c
ziwD2nydgoS2u_^4C`y*gP0N2s+d{X-gFTwqj$LmA?ObtCI~&<sh79wmII8GM9DuKP
zjk3CH(YehhkKcHCpAAnCEegXWqpS58J~j+MiP1i*OHgDWP75b53P~NfC}(H8I0gB3
zngtq4U9j;AZ!S01y@VSP<zfNFNE*da4JXFjgp`$Y)cOvrNYPD$+pQQih>XX1U$weV
z6H{ZLu9$V0*##07aZn4F+R1ec5P~rid4Z8`-#9!}SP`c~Q3ICoS9iAf8NdStZweKv
z7sP@eYF9+cU$x5|JDNQn?BKy(B*KWnDN=-tFFxHA(Y5;(<0Ks-q>=A<LjolZ;9%|*
zNHP#3Vu{w$FpSYC5$w!sJV{qtkn(~E$46a*3R-J;@R0Zw@)dnq00{Fh@!s_g5@G>0
zDr5)>N=B<-Z^8$7CGb641+&A%yE>@njPpz%ly9VIZqsn;^aTaK2DYFoBk&Mmq=WrZ
zf{+Fq_F*@QBICAF{`Nf^DWTk*u~vucy6d;j-VX5?-w6nHh&Ja(utKetH;vvQ!kVq3
z$)IDS3^Qe|POQN$B)X9m$2D@-9$+W(i1$SXDNyG`o4Qp-(Nkn40Lf`TpC76d3ow^n
zD2JUtN2+RBGn%LQa5V$&Cwp0wxYuy1H|e{*Q3TY$N3E}Z$MhPkX$&UcUh=1Jv2ckT
zI$W$?Ee;lhq8Cq%f6GrVUFAX4Zp-FUq+L54CR<T9Ihd=y5dv5*>V<(uU1@|nF^1Q^
zt}MSWlRu&6p#Y$(!#szX=*ZB{U>u0S_87IOvqpNxw@%R9z7#5%?!6`UA;NWM5;LSD
zd8o2tdjAmCIse#fAMhqAZC1@9R9G_RDm%CNGlNh9ZUS{OCC^JaLBjX~IB8AlTuIA@
za^r9%-D3M(y9w0yfgQm>$f{A=Kz9reyBah;%_I(<d>^Tn*lGA4B{jn3%K{A1t@R^i
z<1;D?6R`;!FvLZMm6haF`*_4!kOa|p2RGa2Z!A760cld^f_ahey_o(MHxE<4?yH>~
zKHyOdHjq}WTsqLON-6OmH3mk)ZO-+GmwAZ*k_@_srHU+F%KaV`^y^7m>sT4=iRlGG
zvh?VSs)Nl9n4zCD=PIa|bro{|<H$f1=$0<rha$2mmWhjo;zXolb4cBz)P$rLDu35O
zRGc0xcWV+oy^4-RxsxFL{IIGngD)_Opr}Zv8+xf}WQqs3WL{q0LS_iFz&>HApbPo3
z<K4|a)+g`nQ9lqhz9<p)_r$;4ZgSk>#^QTCks5?>Keh9FyNCRp#*BI?79aR~gO_?}
zvPdB@{B#e%qnmPvScJvLQPP)CrxI)+Ir8v1jWFq%u70B&t`IOttOb3tx-Ys-uc^KR
zQEx?tt1VB!=#Yy8!8GB+r+r#P#B+*TTb&0#?a-W1XEWZxm5XMoeD7P+?u*-d*vI>>
z<xKS^pQafRwJ;h+gGFaA?`dgEodfBy?!uo+S2X|vh#R0N^t~o}Agzk-20c$-+8-|3
z%*_>D-qJP*N#UmvWJ_B08B4&0vA_o4Bcp33%m;6>;IH%aU8kkb9*(e0u0PNM)KzO2
zj)`FvbNO#;+|g$kfPeu%b{ir5vV6!_U*=?%q-e#G5u2h?tl47!2GM>Z8XJk;X89#6
zKi`#;Mw7ae-?H1*_HvgsyI^GwxDFhz3lYS2FfG`!QaZH&$pKS{&v#LlTtW#NO@WwQ
zt`hWlS@p)u0S2}o?y?QjOPdwt@<3%3<6A=+j6t_y=Fo;_Cdn`yiSWDwy2KaVMxsk3
zG`^}ni>OPR>C!<ZYVx#^_M<=!KBJ3>hn)iY{JCwPu8W{^H}6j3>RK(2=qe~`Pu#%$
z&M4h)x?`RszfvM_01BVpO4!&)gJp&8Iul5kl|})v;dux5(ozlAcTvBLkUuo~|E^a&
zUmMyjRZHaXof}=E_{}%Xb<RbL)=ZvH1gy^FxlmIxkkBdGw6fSyEjX99kk-+~PmvRG
zHC)cKz#CuXjD<QO;brA36KO?=bSw{(Y|cvN!&CEr1&1v=qn=E(-?9@hFA(rlPo1fe
zcz16Mp>GX#nu7sZy5(hU8vqrC)-?inFM62N{bxu<Ze@`hyR-_6i?WPcDXhaLo_mX(
zr-ti5n5a2ya&32d-+blEu`FZpC!v*sUoLlo0J}p?*)End%Bs+|>YV!OWV2y%gN$%k
zd$drlrXb#fZS;;#ZhnNriJVZtY=t9b2Q*L$%CxMlm3BygZ$4$#FwsPsOmn1oPB`%d
z-)Gyev~>vjJkh~@78DP@oQ0DL20e`gs4m5fz)rfvn7~h`^mwwx30SkTcH5$~47a7d
z{Q>C71ngroIu&)-0$3$7n<SrOn=LuxfJR2Ij@6hhQ*Q%@ruVXIrv7*97^?2R)(LvZ
z8}43k>ph*Q8bRF?s(5=`ts*Q#Auy$h^ap9(^>(V~*2RxbSQJ7}m>F!GS02aGHMJ~`
z=pXwyW<Tk$9@b9o&HLC8VV<VrO3@WM!kTV*D9>X)CEe9EAbPn8#8q_8!i{HjY6yN`
z<nm7_OP^oHY=lx754*EhF?hpw>8EO8_j0tkd;Lc^+DVu<W~fw2Kbi9k^r!Ck1myog
zOjEGv#_uw!8cIm|5HyfsitQHU?Z@_y?a;j}D+KfKCDl{a5CIwS-a3}5A8u4Wx~UFO
z)!|I8N|_JZGh{;Y>fYZ^tk56$8A8EbE?@m_IOci%Z3@Ugw(YiB3`G-@kW%{#D$;?8
z2tnuMJ|@DW{7h@=;dn$BoTjR8mSx*Xk#i+yS~6I3XYUUzPD;pI7*eHDA3tIlRro+(
z-2_<BgsfpxMO(66Mt=}sGu$jNxhK9Pci3ie&5HkOwjUQ<5Iq}z=+Kw+EcnT_X5uIE
z*iiGoTNEZ%Qj66O^0SA4W^4ZF`Qbl_<d~(_&CR8;y20doq4Lb6j2KWZ-uCkjfiwz3
zgdfp(NIY9QRem(9eRmyeO<NZ{ko7;N3UA{-2}Sc#()~OaYScX*=%9FB5cFb{<ZqeH
z*Poqz8j0&tLhGv|#N%41&;js-jUyqLT_420cHv_zqk;};A_;;0(PPC;z8k8+=+(hT
zwYind!=|CC_qoI^s<q;Vl^MYNWp;fyX7iF(CHZTd;sZgd>D=Nx4UaZC1(%~uV}2p*
zo-IZ2?nabWCxSVbx;j#^DU((EWNjnchd}C-Tq7cFJROW}+<}?gX4c_qs$0g))Z((@
zEbIY@gD3(Z?&)|khH@Z@v6XbMx`)sOQ3NsS82)`67t!?-g@z40OC&5(E1}Sy<!Z8q
zl5C5zo==3F5-g}8y{hY6`-#VvDqw~!r11wV2FJ-`|0}ea%2YHjAT~4}T$SMTKR*)z
zqdG`66YM}uLzN>X{9pJ%cK%7uOiu}>pU=NkS&Oo{Vslk?gBvf-)7|VDj2k05!E(-W
zUv?thBB_A%y7h93cEd-~aR9x3V-q1s#bLNSG$%=ySSFHKb4dTyaiZg8Z<tVT9OkLM
zPLFKuP?XNuf_bsbb2U9Y%ZG~zyibvHYDR2AMw=&Cluwnd`77gAfrXM0pQZB(wG&(`
zsT|!bJBoTmhj|kYLDJ?~gvqXxV`ks-O)n=N)VK}c9E}<)%PaOP^0=TLo`sFwXCdf}
z%TL9>vMA)KA2d}#uGKLAYuw~6$@W*q;#3u9u@@BAqb9QwBEdaivwEzBc|dy_tZ<J!
z7wbKGv_YYpl~GN=?H!iI*b#lX>NkD45T@)!b~gnF!7M&}H%p8^$&8SS&?_@ev1st&
zDm8>|0aKzJFxwr#b6QF<MS8Rn;FThD>R;HO3?C@tp6bKthfgxE76jzCka2<E13yuy
zOS;lVHENCVJ0{{Pbs2>T!oZY*szpFsOZ8vId}NH#&TJU$Nbf4?sB=Z`n6|2#koo~$
zn{$3#&5%b<h%;nuXLy^1(|(D~6z_@GYf#bS^bD<-v|FX!diHX$^p|V_A(ViQ>BM6p
zk6n(E!(cYYQ}&pY5hY^Zd5kD(adWg{Q-yWKd@wadH{z%g-Y>2D$_y~|VEK$q?iMI^
z7YDc&Q^KgJ%f2d85tc$9>bCNJU8iHH?M2JS$8Hx-H#Baq%>^lrkuJ2lNFP}TAO}&n
z_v*RL?fzMng#&NL<r{o{dlQb;mJ|g46&2%D-B6|OmFGF?a^?*>k<XjP!+G`Caxzo6
zqdM7SB+*-EF?A>?OaVHce1M3c`11-P__+lMr0acKX#+<C<r?#6(thhU{(nD3ZMe9s
z%OQ8a+<@Y|H&}OZe!4_oC+<~@x=#!A$YGnPObPq}nN!0?1ilNLZMo4WT7fy&6L&e3
zx3eaSA`OHtO+xezrV>n|)lrl8t3P&WOWH~Jo)a9GW4dIlLLHbQ7IC_0G{|TO_Ra}#
zdX?nqlezdQ6vOdmHrK41-g9#nzpTIA@#`53L8GBhg<6msL;3^PkdU_K9rI6jGvhX5
zDs!tZQO>1lu=B`(!?#ho!zZtoFz_xgH^0xMG4@dHMy=+t=&DPyT{$THIcvBtL7{Kz
zyE}huFB4Ci(g=cRzOl_^H)~8TNxku*<w|jFK4tB>&KRkTFmdJC<exnDlvK#_?rV>u
zly5e>CF>AnxU_j*yk7#1y>V*K`lHYeD1Z*|KV=wrwp~5>=g#S%(0;!3ptqulN*Yj^
zvh72EN>8HN_mOU4-JPXbj_QXuxgjm3bs_xc)b6B;D{u5jk*)=fzqj$3#YvtB`N!iu
z+8XodYvtzA(_ZUocm7yYwDvX0oeZ>R$keT6$=iO4)(XgXVkNrrTVPu=|M$wQEK-fx
zKGs4@F|Oe_@0Jt|UbNAD5olXn2!NK4x&7!mbKCL-Rz1~QyNd45X}7Z&)*T%}#3885
zq{T}DtYGRS-t^M(1+oZQ2v&4>90JHEndj7Bm@6ksD!A1^3i?qrf)&R_N5@JIARbgl
z)S@Pi<p`%!V$rTIC*fW$$FTC?`2$_60-n2*f{!s13l5c7IKkqUt!k6D5VA*YoyH21
z&<+6l`zR3YGr1SK$CC27Wu#pA<eaIkhRa|tA&HB1&Z#YdD;^FlfzM||eQJyEiFHgm
zDr#=NpqS9!RE}e=YC^$&S$?O!s?9BPR@xQxqi<c0r`KxLU!}N}$w{6q8c5C1;d6rZ
zf<tLTr0ir(aG7vaX;TjFRFzO1MP&qHNAQBb`XgKhvS!HHhTAl^MZR@!4&-0;Ikt+}
z0x`BZJW9H&k?ej<9&HxA6F<A>8L^U4_A|z#W+)Xw*V>Vu-Dy8FIYnS{JxFIBfnY?C
zxlU*JxDI}$iLr9<2yL4_H1y%~yMws`MQ8T}7tx*FPVi(So<1*xSAY<rE6W1fk{Jv}
zj})B7X_mKjSxT!H^c@eKE)RpRPwYO_WSb%h1m$evsbRgzEV~56>$E<$&6C5n%urYm
zZ{a@vX_NZGy~8X6>#>c+)HRaD!XrDf-xwa+h;DX{3L@c)lAMWJnDiO)5jCP&zRJ8B
zj40Un4dMKS+ub?D?&R3UF#rNU{l8+-Yn-**yG-xO<hzsIP4^>hkN?|g)s38@eSZuf
zhJQp$EeKNRz+X>`3BEn>4UoGa{GL>#<N!h7is<=k+aLaTY`w0GxJys_6<%3>u>v>S
zMIi0|0eI4Gz$Nd7zmDI<m2o3~hL^^_w`<j<vi&|^pWPq2dVgPKl$mi~ut#R&982p{
z5lLSUXJ_ogQWjM%UPlFNlKFF^MuJ_^cZM$ti24{)*9soYe|2BZFSfxZ5uCB)4?c4A
z)|oi<ZvcaT@<xutj&Lp=5h=KafzZ!3c~!~j6WBs$>WQI-54Ywu%`yP%@QIIHq6Vwg
z$edRaz0Qkji-D>YeBky@s4Y9<A2)piOc8Kse$B<94RJ;+VCHikqu#VRgbNdU)reh1
z>z=)SOBo*o#SA=kgq7{p1rx-HFq~wQV18umhD<u=j8=H3>{4hU5_X$5CtuL@@$4dN
zNJtIL{_-T07c7fgWt9!xm4i?IVyfRF5X`p14b4N>bsL$oD?%u&=~W}((vQ_^B!<AR
z@r}L#*wX*R<pCO+J&H{vGw)p8yD(gnPCAE5(g`dk20Ti!Q+^u6ESBx4QeV=@489=b
zhMnCtOfcQV`OlCp!8pC(ZPj;;qnC--k>O-h^#>n!kBU-wUL*bEl^f(NS-ZC^ZB_<@
zgfu|G@59yTtHjIK>Q>e~v8*GX`R+^)P}#Ct&H?q;S~$BUiWX;aMRJsyGZe}G$j^1*
z9Y~mDRA?S$_H)}sr!bByvGI)vuTR(YMDgwsL9xcGK-_r*!kCFPylX5GqK0eTgeQf9
z>0GEq7;>!L4xBwA*~33v8eFzOlywUOy+WMAZj>>u@e15Ah=d>G(5)q*NrTRYpS-=B
zz8vkeET}qqL!O5;UbFDIw2HZ9!u|KzifGcTKT-gx;~i3AEw69*q*|^g>zmNadXuv;
zml!MpXrU+|Eo~R?*-a$lC+0t6l|->fx46inU2+;yXxPr#&OA{CDPl>S4HOk``OXpN
zLeH9%TSY3usoHBMW<;OtUQ{glGM9t~us2Uh4#at<(px~CQCe&Kg_%xP;P$u@ajL2D
z-|mF)PNFiIJQkwS?fuh(rZJqz4Q);L{N?`p*Cq%=38|wnmWod$@2BPvq`Gpy((aRd
zA|#J<_A_haE7-bA*P5B39pHg@hFxbHOP4v#P7^NHr(C5}H5?#HgY;pf(mE(+Ma^c~
z<64~p2K%~|g?ECSNJ#}F(s!nxD1w}b(kaTGsoO39ZuvA&u9gZ-!=0q>hqItN9XNn=
z--8}|(!{k@9a<pB5YeJ1gy;~D7)D4PIt=9lL(%f5j?mlw`qopy%9BUFO;8Rt<&2Fp
zg+{`Xe?qoTQLWR7hXRFS9UT9R#E;pNL5H&>VQ;pLQN}G`BLyCAjWUHDsN!Xu6jF?Q
z4#+d_yZ=t2<&OLtHA@^dRs%|;k)_Q-IVUi7ju8Q>s=F)pON>JS3HFi1seUOyfz~<6
zq_bhd(Fy7KdHFQkkfD0e>499_)Qh(-VW1?q?)1Q-8B#&G=Nf0pbM$M|=$>kJ6QZVU
zaZ6DV^xucAd>!v1)tx)vDB{S>+i|Tue_@MetAYa_C3S050cmtD+l#&J=5YQ6YB4Yo
zy*^6d>|UE3|F^Pgnule3#G-Y5Pn<R$NMn}(txHhw^QxWuKQW3+lbX4YGWs-4UTwTv
z*xB(3t}YrsZv3-V+{}#9$%67AN94H}yej>ojiHIK>p0AHHtN3A<?gfL%^n?P6a`|9
ztpg(Uq;ocy-iJ~=P(>52nXe8L^u`D@VNE-IBD^(hC$0me^1#=Xu6R^`{Cy6#PT1}u
z0t_U~0U5oy?EUg=L7YySryfb&uKy*&io5OP_&BOq#5D2HDpUH#J<4`$WL?!XX1ysy
z?H0PjrU#j}a1_JKh;VW|EXYEbml9*GQt@0W=3GsTX$0hnrte3adH;^nbg#(CHAp53
z&e#?-wfR?Wpb5MTeb<-U)$JIP3iMc@eIn;~K0Knu`CWMLZK?JPAu;!M-4Rv^50V9S
z9HD9~hX-=tDAfET9`lZ!(i)UgOJSR0xel6!gVqj#U%(sDhC5%E-EAbmE9zrYcxXmR
zxi~5#So@-kpVUuhN{{CQvo9n;u6gm&wZE^n*C2d%JF9k1A3jVL)$D?(zD8#Y-!+~1
zwz2gySII=_<z<_fMw|?1bf&E*n_1QzKjU4!DNdA}Y>6HD{fd}9R3GpQ44$rin(Z4S
z_V80w8mx~(df<nao{0rHj~^$>35L=smlL8y6>M=Hz*ADuPQ#0MtD&`tw6wf<+xj$H
zsZY&lf!?ywQ3jwrl<I+*dHN{vjyB;&6DOm_J${3Dyt3BYnMR8y;IMF1C*wk+6yG6q
z$wJ1r4b^WmFRlPUa@gyEORsB#eI-R_+@VD!ocbJICSYg6m7Ir`)<h57#PY5hoEsV?
zh!O^qNk+5>3eq1vtF?iz;xJ8A$(P>|=8Wv@RMQtAaNqM$MnkIB*j97#VSV@KBmp8M
zXkL(vY$9#rX13!fm}B`8#<d}<C+U4wl)&t^<bUj~R_CY{eHig~&Tm95@Cx78^bJW1
zRvtB)8{}MO)EMT`q?l4N?c^;=UnS1jdz7o#J6O_L^eWGz_2Z!a2-9_hs8F4qx=vx^
zh>*7OfGfN)l0=4}kN9{wnJxAB?~hqsc96gE3Jxt!o_zwJmEY7%Sk9s@GDRufrlToe
zn||4Qhb@01n+r=B1;M9DHkLV~k|&wMWvpdcB$k^3J4?OH=|H>WUqE29tOmrjG0Nk%
zy>LT<^b|#HdjVg%>=osI2t8No!V?N}S8W#^@Zf`HHj#E{jeaL=30!z=OE+?pvzOaa
z=vR?Z7_|4PYFy{p#^dwjeSIJxkM}09)bno7V2Ai~N&wLxNi;_IG|V0;s6ccbu^D6j
zSwY|AS=aGN$}qLy1ilPqmFpI&7wV&EaU=iLCrpy&mnc-kLMj5#@b}KV@^rfODM(A?
z8z?g<&ffCGqInQSkrr;5;grGSo_fPG`)do<x5(U>F{P}=8y|?h-~6VQ5>O*0dS_F?
z{Q0<+|BZ>j?gWLyV0M*Uo*O-Gv(qqDB;1&BV{oXD#h#IIYt9BBYmuV}3&6Jt@lhMB
z2;psTAS8N~c=uzMM^b3{CziZDdB$FvRITB8qCL_a^t;Z{qNCy$f#E4Znw&%1ZOo+}
z`?c()!&jLPuijI|vB`1V!Zso;pZx>9c{DKh>Ds85QmdVO!Oa4UaD8Db+YY*VT`>?t
zahAtHI~Klss9vN5Xkr5jDH-fi0*t$~GINTsN!X<%c#bI9`iq+v9P4zAJpxk9(`ci*
z^JquR5=&aB`I>7K7Y@Ow4J7`;Pkxz-oolDd<wFy;Q}8TYK5W4}pU;DUUCNnP4cgQ!
zo6VEEN>!c48Tu6sTb%uWzQOBodq^YPt(ZPOnQQk~aYz#oz1TIgjDba<FL*XXg~&h8
zihi8s1D|gp9asRPRGw~R27~m>G^<7Md(#9@W<G}cRu!?dHAVAaY#4K)$Q?6ise_m}
zVXWP8eC*~g6;cY_0)oNsuJ2f`FoUIYU6YT|l*#N=N@ENKuYgajwgd}P<N=c8A>~zA
zlE!wbFX~V%E(=aIt7f~h%FhFDvN{@vm2r~N(no5814{J8=CV{CjPuliuI>I*LCg7p
z$ww_a|4HyeTh2piMuf1NqCJ`SDxlw8jwId=3CmDrtr-K;Kuh=f|9adD2<>VeJ5bRY
zzcTVbsQvXrRzCR|v>zG+=4rPzRfk(eYSH;+iSNNZxX_7;k+tD9!~YvH`U<7O)IPuC
zmpn1Unt`4lL+asj#PvRJ?0$Vsl$$Z*gPxVFF=}?#7=wcsHGGQAwe>!Q;z|`UI%BNi
zqjqOo06sX#JgOtVsxBt)wkeAnGFTy9`-I@ntoLE7SkexNC9v@w+L5mMuTs8{<BGLw
zSHbDAAt4PWJ;&dcex3^?e!9--kt@}s_vK~yiq~ZLr2A2>5ed%?gtYaG1W}jX*{!+m
z0XfvbQeexN%MRc$imyc|pkE^Fo8nq<F!Vrmp8FD$qhIc9yF8L|@G<&L6b->3{2}W2
zRi%G&l|G2u;X`)O`l1tpox%S+TdR5h$j11P>se$H==*QX5^O=nk!c`33lfG6p3y>N
zKomKCA(kkN-w~#Bj2>_1QOaGhwpuFOyn2jkM?o5kLTuvXO^OlJROGIOF|7gcF6J{`
zaVvI!HO_coson;<kq~R13wNhm7(LxK8vq8eCaGOX&Qj{TN`70I&bhJ%w3tC_nK>^O
zg>gO(B#8qf4byJf>NatHq5JVHHi{>R8{A`uEnf>W$#~M6iak;Jn(JMycjuZ=><83&
z^&WFywAG_0^0uWq9#Yvp((Md{D>i3ogNv~foKd@a!MjXBB@Yc=a*MQ24$k1GMolEQ
z<_He{2xx@mFXBxRVnb<?9R1ODk7>fqa&vyhHXYMpUJ?h2?d8H213s8n){Ye9c#pEL
zAlMyfe4!<64e$`J*te+jwDzP2?L4m;MOw-rWe-1qIOK;V2X|a9o!A~iQo?2o%;}v!
z1E1RDm!9KV70NQQ^^jf+^Q)RsI=3+M&V*kLDW<jyyvT<y0-(h9j&*EX*ZZgZh*|JD
zaw`}X?o=wF^oPc-ipH7kJHgzre)0eDJYp8FXlTjfc2&4RNaYteVssg&RzTH9Fi7M5
z<Wo(C>-4w(=~6cD#BS0g6^JO5znlUJ>D>NAvGd!Dk`^#@(lr$i!(qH@yUrZb4y?U_
zO{~Y$X)`}#e-C#)&Si$$x(wIGGEx;nt{bFHULiu{V(0aJLaGks|A0y>y=b@|pT%*2
zg-*EoPYCztG=fa2sz8PZ$e(eqL8^!0{&-39ewK`y{!`B_8DyoXLt_;<A5U>Dx~(CL
zY*cTr*5YysQ%i<GDHr)gSvs@m$#O3(CNok@Y9ms6Y92UJ*;R%bBaCMcIiV9pxKmjI
zif2pX@trKJxklhgPCW%FE1GR2Ia;aJ_yM%e2tD=k*oX{7;qAh;aDidUP-Zz=SHqGv
zO{~hD{~cACy;ZV>*yao1Q$0-aU5axJv=52c6x)#7<PBCmyti{*C%|yhcT%xjAc|=}
z6MImRGA&A5A`Z?EpJqN21J(NA?Y*Rv3^SI2=e++I(*NDVnwOU51d@BTWn*1UpNuS2
z{F}nah$cFFzy}PxPvy2xT(6Wm&I{COu6rT$@=Y(mP`U?#@2)3YKQvhMd(ew-X4*j9
z7Y0M6-@9T;u<8pCn6M5+VFhI<Wv;Z6l4e@@DZ&D3ZdkP=BO3D~%y#9}lJ<RaLwW-T
z9%2mKt_VN}p4bEQUQH~!mV$z=YcFrHYJ?pHo2EY$&J(S0BoKeVE`*deC$T~3<UN5|
z%9wsnc7Uq4e09_2ciaVbKu?`q*)OcmsJFX;VpVVA6+JwQe=@Q6M|}XRxx~Dc=p%RJ
zPl%Fsp=j-6$LQ?7to~zXE`6iJqsL{5^qE5OZT6bl+|-4~Ll@@<N|$+ra0K7aFdP3t
zZ0&qqg%ZNZbY;L#uw4%-mZ9xP%*-p48;FWRw;gCsw5(Xg`_;I7u@)hn>A>i#H?7FM
z0O7jSkgiWV9jMieX!PWV!vTeMAe)@Sh|UOsH@~61IOqk~_bS#Ry>i*@A{;q-PN?U>
zWPTArsQX<Sl~^C=HFp+0q_xfvS>IK`TYk4=TCThK@NhS3JrbPUo7TGF-5}ySbGF?h
zZd||F7j{uJ79F<+?jvNVGYf3V`iNQ;+Fo-N&}V8=VuRfOfzyK&r|K9kYud`RHDWT-
zqfX63H#I?Lfd_cih*u#(yZDKbS%}uU83JJ_u!pi`)-ug1t`Zq?XvLXs{@x6&Pk9r~
zd8uLFPrPq=8s&H*N*4D5+HyT(`UEBmpe?ZM%sR2zWD{A5OCqY)%?6K+#YlB^I9!N@
zoMogEOH6Z$&QDdu^Be4tL)5yOE_`dqe^HcCx)rHW3-gXU`!;iNnqfI8dst<hNMY?`
z^WOa7%gDK-GMD}!>Uu2m@iC1^J<<B5O>d}0G6vWy^xs$mDQ9_5i=1g1OqiL0Ml|Ms
z5qmKJnY&v{e%>h9F{xdJ-Q4@*bvxHtlX4f@Aj(v{nb*TfCk{x3<p5iW!?H%yF%CQK
zIkP0ZR!`N=^?2!~qy7sG?@Uy?>zHpjT23Q@7(>UTl8VpaYA?NUzbV8H)GO%cmH(+!
ziUjP;S_=E>wMp0GAGIUPS%3vVt`2q~0gxYbD+C~(M43C+N@~rq_vsBWL&3SAs2>25
zL*GXz#`=CmC71Sr(#j=}P&N<$h=7ekbE&YQZ_2M}WWx3t+W2}xpv~T{VH8@v7M~@W
zSA_Sl<v^effoD11@A<olmgdRZrxw(ZcK=F7h#c*@)n^vd=?`{19dl#4r2o!1<ZMf{
zh@ucMrVQk3?AG&X1F~>iF*Dkd&d-!B&5FqN+HDq(V}Y}8_*pA#%iYD~GdFza^jBJ%
zBv&L8;O(!6Csqp5KZZ$O=Z;5pP~4nM&HiDLe7=RUw`DoS8NYYnz0r8X&50z}#bHv1
zB;8<8B{>NOaHqKfPNuYJ&Y5W0#pyPz=RlwWXys=<ooqV~dwRQ|^s=!)xX(sYCP~SD
zy?gef&GcnoN{jVQuB#hQ7GzV?Kf;-)9GKF|t@+izYZOh};uFsOX(cAJF+U#WCUc}}
zCc4}3^ci&ppt8QWyXh}f540{4L$)ko{Q3@wO^}V*z*_TYu_=b)-~jDuHBV**W?O7j
zJ>5RbQ2C%YbSI2t->h~Y#r3kvlhm;bxFwe*y7@ejz%<mS#3*{7<wFPX@?6Y+YMX2f
z;i$U*?Tn71>{YRoUQGYK0Cu>Fz_b#T&fv*0Fe=B8$NYCZ<pmjwP)LuI$wjFbuoRkk
zdO*(aN=0;u51<%F#OT?5`+IXqQXd1WACmxuj51!2RhnA>V23$V0wT`sNqMvPN`MQ1
zYGYbb8J>2W;lreEb~Da0p*79sD@0+Cp!39=G*<k{fWCvdu1(QW>2k7KsTU;ek#{iS
z2S&E6+4S;{DlPnJiK}9!GmA8~X<?Xfxi9lf7apJ`YG|i~z?rx`Pjc-stu-|N<f?Hc
z69niVN*?nU6o4zc9ZJDUYTX~wb`0)5fY4~hN9Dml7i7*U@pZc%tV}n4##$joxrj-;
zgf)_kQ1*ZgjAff1y(SD&ouSLb0QV49Sr{XP&lQNQG5ZLbYGMt;YY&H0Yud0_kM78U
zW!c{lx3Z&KTm&X5Zmjx`Hl7{Lf<X!ks!3rJrmGiR-Z3mnJaBplovGVf0Lbquir~|3
zaN>3xrSKRqVief;$NtKlWr3_r1y;=J(!u;?k#A=K{S(FjJk+-yaFPh7EuqRoPvdke
zwT;i^uQa0_Q%%-H)ajs)A;*BJTCb%+CCQaIIKXeP=3RsEJXs7HhHMfs75O^H={X(Q
zc+Jldkt2FVl$e8|OE;l@CgCj~0agi#A7sh|F7R9MD@p&S7>(G4$kQ`^#;ddA)K$#$
zXnUiHFSFAnHt}Qc1_lHLH&n0`$z9k2ZmPQWE`h4te}?qTt<>ZJY3>*ttDx3<6iDA-
z&ie~>hBd(=$G`8QrLDY~-=aLA&c`;$svbjezT7Nx@%p3vn8O&$5lL|bMR9q7_euWj
z6z_@rKYP3V==xM2@)4zvXYf5aQoil#9a!$!b$o%BfY{WRaN|>v#yQ$oMV4OKiJezV
zqlKXjl-)pn0CFq0>*tehlX;HyUV#9p0cuq5Rx9dj7}|R^m7w`*J9S~(JAgUOur=?z
z*a-Bn*REE6*azai2KY7F25|0X?%@6Nttp7~?+0;ssJuCb1q9IYhU$M0s9=lp<1)qi
z7@h9js+-bjLmS~4d$GUQVa-T=GQh+3hg-I7*}2=C7E-_M(BLfAw1J6~2lXt+6i=D~
z(>~1DC~naJJh7rw9P-Y-nTv5fV~d_XwluDPeSW<8;RtnU*(nJ)fd}&MqJMEYn|bRw
zT^i8fmP6(*oi<EjJ=sw&`)|RdZi7@P^?C#;Kp}*uWTg@}r7xR|1Xs9N(Dt_WTWPU}
ziC8_K;vhWA`p}bbb5+GRwo;SQ_UlZX<%Ixf!vO?kMRbmBiWe20aU*BYe&<y2C8Lj4
z&S&}I48e>7(KwSmx&g^eJ1ny?%ilLzO9(8q_2$VTi*I8)1z#sC$YnuuT#h3GXpj1Z
zH-1Zye{EGMABm?&Imv}q81Y8|7TVT^3af1@FhbjuDKeTYUVa}!Z49C4gv-8kIry}V
z^moed&9UB}LgI#)foxO(-)sMZK4kz?Sje5nA}0H?Qm@}Ityf=@P<3?o&G^5|JF|b?
zq`vHCPw<CqhreoCPk!#&_f!QIeQGU7QsM={+oc7c_vG)f(8PS;1?bHPD93+;s3^o>
zG#VxfY3N&YnH8MS^`_W$viOcLY8u&+o;rk34-KGy*Q^)_<d#^+Ge`+h(qKJQ00uK*
z{QC?vZ4wP91-!s|s{<z%u`Ux@>a_HBD+6vt5{aD1D@ho#7fPpiHejl8I+LkhcVUl1
zQtcDkg)7C^qom>!FD7(7$`vMnmMSoOLtvw@!tKy1+pLC}_6TJ*>~zex^?WE6W0LXW
zi;FJ0mU+hj9EWOI)3$C`7-ZOZQs$4i=rSx)T2a#qBym?flDO#T@o$9SVL#Zptb2iS
z<V;a=1N{{}-O-*pkG}g2ockVo<`3aB)%nYJSXg`)c4g+GSDALpa+cB-Pc+S#oEaUN
zp=p4m2WPJv4o<j6z1DXrI-FrQElL3-`2kye?iut9Z<@2d3pnso%p%k}GYf5HO(agh
zY^U>X8>rxye}Qx}qBy#<XMc#fj5*f<!(nltroHD3sMDJ$g3XxcrRDkQj?d0*Wv+{p
z-n=x8aHB7T&H_&arQZVD;A%9=+2P?5$b1wrfvlgBX&C3T0y;jidizSthmM{1_*9`8
zJ-Kv)w)Smt>VVHbVKMqwmhMx|oO>y2`YZRFcJyS~X%vh_)7fb|Q(+8RaKnK!WY7$$
z5{8n+-Y&Y>wl~<(_a9y|`Ai4=G}#_AL!ot<GHE?U7w8z)3GQ}RP{5CMN(J_kc}aP(
z?z2unBQ0A}$Z_eQ*{?$P>m5XZfkTdAKj|>k8f7x<g5iwup3VPrJ*Nj*hv_@0WVN&;
zE@tX>JWRH$$y*}HNR=n3ke;bc)HaGJmK55OiPSqgXQevvAu?!PL>{@1KA`yh^?Oy+
zy&1OM{UArvhkH`MFWSyh=*1quO3?xD`(XGsI;QFezLy&G*zuP+Ub3BoD9-)Xc!qSE
zsrS^pZ6{T}xbqdZN9svR%66IZq~Vt?_*|IpT~rcMe$&JI<gwW_g8aLY4r&)2)|exn
zaDKM(`gJWfV9-W{9PnbwoqvnkCreFP*5zwj)GAKnP3Y*w#b25KQzo|KO&9_)A-_ag
zk7F2N$#y^jPhC}|x4F5|q{l-C2^1Wa7~Nw*|6#IoSx{j-3an)Gg8>Wt;49TS%u-ae
z)yj&~*+w^{dSPK3h9*Hf;sP_K5_1;gCuqRSzfJhm8yUato7-^xuDmC$+ZidxLPGX=
zZXX)b&f7t40XRPpINg47^|g~=YVE1uQJFjDQ{DcD;#In}ElxQN#S2>MqGatCz&@B_
zrI3NbgoggHB?ym6#~^xbU)w+;#vRJ1!%kK9t<idSKALRrN_|GZDKUEky&250wbynl
z1aLMY-E#c!dkPY=#a6=K3w+?9>&U@3L;K<)CFU3we>2%BijRL`goF#V+CUJ=kGfpk
z7fv()Q0j=#vCGbJdYNw{3R~oif<C(s&-^wB0~M<^(k*a_Zr%R!*G~t58;!<st|y5L
zmr&tL3SJlM99v|krbgu4%TNUIY_>ln8exI)-_ybK_M$7|okRo~Z53u}CjxkiFRBB>
z9!4VomzUdw5!kbEeYeu(#DMTA>}-aw@4-tw#=Fp(H}=cG7-IeJN^bEL3Pg9OFS4ZQ
zk&6+7=R5cw4o~r2MUOr2aGxr?eq3x(-|8}xKBNu%ly2HeFF`}x=wrsr4_Pg?752I^
zSULOnI+AdAvBX{nA=9?}FX}fK4<Q(NzeO?PiJp?O+DU)dQ3(H8aB0``VAuw>aOom8
z4}pUsxYB=&A*$T4ue-<ZE(CSQ6#E9z_~m2beY(SipR*)A3b1&N;V<Zo5j^GbQ3+{b
z6pvj;Sp3OYHVu?Q0r*|q`R6@-^UrKO{3N?qoDX~ck(`2eY;DeX`!$C8XJIapbTF-#
zmgeu9kNGIlMpm}W0;VCVG7|`_1219{u}iI<OV+NnGu--$!CVcQwp?og0MC4w7vn|?
z`gYGF9WPZkWJFX|$%Fk}M%VCiq~gijgsnj~IogHRQK6KYGh55rvvD502lP~RA0g-N
zvJk!H9fo5tmsIEM1ua_du)Y^2NN3uV$vv2OF_`l0RHR=W^v<GovIQ%}4P(XlpEi|@
zWmHB}3Mek@Gc&Lk#VR@}27mK#c1^ziX5H8e{?$Q6L(;y8e@UBs!P&QRnVmV^!dPI)
z(T8g;X=^(i6hFl5U#P2yrJ47Q=`4AespAeR^^9BU78WSWS)rhH9GKh~-a@YNdTSaG
zxK(?xw03IZY^ukj-(+xz55Q1*^V7v91dO{LlNk<(N%lA>T0F?5zy_fH)>S}CG6xWE
z%r7#h%s*p?dR;y|7M1oZ-R7Ehk8aN~*m2BWNVn@!5RJABFXGx<+shuRXlni*UYejd
zMD-_dIg>Hgp>lzWR`5#}Fouih6lZn-J<-u-&fNn(0NW;bu?WiZ{uzA74pt~}F>Z7Z
zfSNPGt6;;vpny8E|DA2*xBzgkSNV5KGf&M8g!oRi1N#mo*cqk&NlLUMQ~FoJE#I{4
z42M`g*UMw{37X~v?VZV?Xzxbh)#uKKcf-0Qg~t}A#hx!nmx_vy+Y*F?bvMJ~O22Q;
z>rA2if<&3_^7wnyK@b2dzCwAlSq`Pe2Z7|ZG@a4<ZJ%hWfwUKY42q0f7js`&a}rf|
zDjJV=aGkCN+}*dn39t9FHwb-{-_2U^7ga1V5{c5E<DC5%C<BV?c@N-qZ})Bw8?&xj
zP<=}g2{!GGfo8DJxUh_8{s3peSVmsBHRWyj*`I3y&CQz!N{{msjDm{nsvF?tCdA!O
z*#^P`1Ah(h;oOu*R(q2a`R$^_1b<sXuNFunv?XtDMSh=q->+}#RZ@QwleBKwdI)Lr
za(59NK3$tw^Soc!U+r$K7)_819}rjn;lOw{hJ|;g7cFba8q2%W66p%_jSui09_Aiy
zynpJ;KN*6UzMX5Z=4g!!mwV}#;7T7zb-c&_7F1E0JLceLzZ{pwc`aDy$Aaodff<w3
z2jCPx(cKsYyTLMPR|RIm)HCh}V(Ogk;|}|S<{r>;puM#?wg3wJ=xIykL_lMxx@Aev
zukzc>g1MJSy~Xn_Mmq<z@EHK!e(%5sQ@=p6S&rd;g{*|Z+}*Qst8sQGCEF1sRtkj?
zPGobtwcc>osx6(>(6?H{F31DH)JlnRS!D=m5K&x7peGL)neO44S%GT#Q&(p^k+~@1
zO3Oz5d-!-y_NS&FgkOc$#m6kr#?6gd=v}rm48ZJfyuqj|o;px~j*kkZJRKr1ZZ>f_
z?yicJWp`v5g8pspWjedyfavtX$iwwU2@D2*!07Bv2t!jo`7sZ1R-6^?F^6d4-e@Mv
ztaVz^r-D;~uU?sPo0CBTk!=4_=EZ0Y9=|Jklt>Hp&m)~3Hch*;smp;x_0MpH0|6U8
zg#pC-C^SnjEqJpJg8=f#wl?G+;E~pkT{s~8e_nKPcKgkY>#nh?8vHb;CR64xI1UAD
zQ~*~V>buzE#*M-4Z@`*_3aGdl#2ckZpM%z&uCqW~Z4t~+w;z4q^#3hvo@ovj(PFo~
z6QR*u;fIl1LRn0ULI5v?_ET(wRJ3!|P6$ctAC9X_wC~SUU!o_TeKG4;ib`+Tn==z?
zd%=~_z|l{lu>MlqzF|jDWPn2V);YO{^I@GGz2-+c3g#&4<CE<npEcm@3sNA@rv_F6
zd<{a{^_tUF6+6w!I+dgKV`v4`Tu3Rz%D1M7pcCFWGp*g~KZ3Ba)Fxx)*PMg`{Txx9
zQ|;S9hKTYkx<x2^x)R`OO~(SzOyn`0=B#lWU^c9Y9+&Wg@zlOozlgCL8fsCqi!K>~
zZ&ABGY1{j8XK{B)Q)6QnrODOI?=bI~YrkUuZUiyFMYiBQ&4VVfzO1<%&tKa*{Z4c@
zQ@81APF;ua4)jDT(4ud*NKYe{pLluA;r2<*^&#B-3Igi}KS9Z2fr&@WfijJ1r`P?V
z&~31aHp`PhK~&(lDvlD~&ZcHFl$?KK4`#NH<QsJC;y~U=LZ3eeHsxL{wIx!bX)vCY
zL@hOkQE%O?@w=GOr>iDsz65-^6qo<?7V?!BpHS@^yu;0{u|C+a`g~Y?g57>GK`M{K
zo5v?h(Zvv}Erx3hDP4xi;+T>E>ivkPeDOcSB#`WblJBowl@przIo7rr<m%12O`<?l
z88u>X`!fJ$|GsdJA{d#8GHiN+B5j*2TlW!jH!66=hwn?7(8#3ZuVR@wg;Nl{?<8vH
zrX(w7A={_A;KEB$A4NLK)7GjaFerk`^h)bM=VN<UeSdiS)j5Q=lzEZDF-P6!F95?8
zjkuyj_s#ReRtZfXFhi|Lw*VfkR5Lw!7RG~zpVAJ>s`Wgz=rxA5{+Yz~qrDMp36orf
zhGX!dQT5EX6{URRbGN}IL*g--W-!qySUVxwG|QGv@{XXC$mi7@=+PK(Mr$=5hBrf7
zX^fT{F#|p=5|51v@u~|${4WI8W>d<M!xrO=9seD@RZ3U*=q{WEO?vpt^u@FH8;A+5
zt`nAOdu{6D^CRbXGgv#+QU|C$>m-T>_266glf?BLc}u}W4IDnvZkLGRbpIbqL4ixD
z%A)^2_#AR=AQuYX>mp>L9CHyO+?=>;QY$beo2xShon->~RQq&;I@@TN;n@sxCEBRF
z1>%km(qcHlW1i<9Oa<R@SI03b<_TpLn3GxWbwu^*N-Kqg_W;v&dVaZPVGRHYRRfXL
zvqUqUT0HdPI%lAv-zE_B!k={+at;If=*};|UDkp|$79OU!-;47Dn>0xYUM3Aii}4{
z$d@qOh3mO~p&}MkWBm*Z(bjv&0}8xx<UMluLIyIoD!L?u`$Q+}LtRmZP0&2rvR>M*
zJabU1GUZVb+?Pf=|DT@6^+M(s3jra{PiX?!%T2xj=vH0XBkWZX$$4w~SQI2Ou#gMK
zrHk8+^1j4#n)N_fA`;6+0G;jhA>^&$KglFxvlqg+%oFQ<e_5clI2b!;<4-4-m{lp4
zM1!2CoMf^uW!gHg!vs0?QFD_<+Tp<@L(n)r(8NB3mW@sy)2<s1zgMLrWPm{}RVD4^
z^jIIIbDL77%SY`eXTK1XFD3>Pa*enXPBj@qJswe9)C7ONq<0m-K3VzSK?F3G4#?VJ
z!eW`OQpsB+e`3BHP1Vc3`Rk@S0KbR}f+7J_#GuhvjRSgddb=R;g+b??l#VTaS5xXf
zP=B~;dUio!4E=RF@u=FFsV+cz$SEY43>zcq<tnnn5wlny`1#&`X7B}vmR*agZVgXG
zZWH@TDz;&>eSAU_y`Vlp7LvU-Ufj*OT=kt%q$w+Ym@KAK)U6!a)R~3w)hk%m?B9-Q
zF?E;#ye)PzE8Qak2r#o$+P<ttU{)EqKQr{UFo7}l3W3Up!@?Y;o{FhlFz=AuC;x1V
zTBc3|tAeqBwVX;$m&sX<>~ZFcf*s^JqxrY~yS+D~LlvNdVtaXg1=YDQWYLYy%xgD}
zv4=g2G@hz0R0zA~-KD{%7hk;J0H?AbwMtq$6!C=jFqB>Pt5|%eMxDD=hU$uixFi-{
ziF>#k{+GR4uKv^!qlG*3$?opOB(H*RHW-taDWpKp9CVby08q}dLh4nd4V<cT5BpTt
z<<{$rgnUXN8kz{V(T;2r@z0dT&a9bu`l_`76ysbnD5ruJ$>|ZGVcp>@X~ZTVG4X0}
zYT^W)`L(1|KV2<SoLv4h#vl{hGCJ~Dl-;SL;TExoPO6?}hVsu(0JmXG^QQ_cXA;dm
zd<>LmxfVGHZg0ZwlmJ<oSKSjk-OTmC^(*`D8RO)-HR4^qA-Fa`Lw49FlrwwkXa8a{
zH+=w0S@k!#0FMyaD{`8Sd$t_*0}>P85tEj%9VpQVWXEZ_1jB$0N3D*7uUMMO|F}K4
z?t5b}Z-8pU0Z0=5X7Gfvc20Ht`0cpg%(|;hEATzXRC|JS|A;x)NZSLB+#NwI>=eg{
zFc83eGZ^C7#@T4+pt~L%nZ23Zw{Pzrxt6)opP=K2HIxfv&&shWgiQa~Hx~;i)l8Dl
zbFJ+-4+6iLfu-vA$m^yl2LtG{Mk3iFzDFVu43Q;^6B&s2A2=?mOq!43_H~<D9%n8a
zVHe*;&x;}#{pQhWXQkIQGuY%-YsmO4`6kIDZ%2suvNuKpy0Wp(2@ll2*dy;AWJT@W
zPsXgusB_opnu9pXN0;~OP-nL9B-p|B7TnW;O?MGp>B;cr&NrkFNFv^h<^X(!pRU!E
zvj9v0G*DECV)NS)rQ_pyv0_loRPO?rr@|qg+Nxkfh8EcuTSb8nMn2)?(*%sb5F8kT
zv>vz>T4V4=Mx4QGM7JJV_M3xlY{i#dLYLbDc5NMLFrKT~{DZ@>g<^h3;$K9_`C;Nr
zUHd_T9-q-QgEJVmLlvK;&Y7-!We3tY`7T26tAq`+{|8mnAOsF}h5;9Mfs_{)dDz-M
z7(_d~$0DW%lmfv8oA$G8mdD#|E8B58Lon=G!~{|61)sG;WoJK*WEceMHJ5vb;~|WH
zp&`63-D~xapMHS~dg3Dk^HwS=_IZC&k&k*BQ`W-(4HH3-;NVD4vY8T$G&?C!r%^PE
ziiNgN-8V=09*>Xfm!BSRL9q6&y8q9LmHcoiSqCsD5Ysj4{8#gk^VAfBb%gWLgofUi
zsC$KSeQ?3{<z9)J&Q$&}O%_j0bPm_7r;047Hq!bxu|Sw6>`Dq!b(*Xb+aO_Y^JKZa
z?6XNq4__uzci2h_g6ChMX^8BHZLi&xa!{~Ad6%Q#y}NF#!J>BnqBcG^zi7EN+{)9@
zsuAYDTeAI7tJfgyFFpE#167Z2F?Ug#?~g5D?kE}kuv^wlVNh{Q<;62y7s0YRmI~dB
z?O7g{S(Pd?Oo9teCv!F>mmM$(uU1wtFzOv&ZZ5HRkxVQXS4!V98l%<vtxE-fmw8YW
zB`&w(5a!*{OdJr!JqAmKQHp2Z=Tda?-<8*;yjP`QSB7Dex81F{O>6R<3E;F#X&fEw
zR*C9zBnV6RQraw!T8jd@sdIKwaU_h2CmU6{pj(Rl`Z%t#uOy^3Rl#CEo429Cht}>`
z;Lf)imOyz~kd}3c65IUH+@+B2$0URK*SW3qYN>WQ^8#kDb2Cmb+i}5ia+q0DVQvSz
zMxAhNV<=o^KE^RS$=U2#^V69l?=Q-&!&Y`QgimIreBct7SS~GK`Q?X-+UKfQg1h6-
zl)W+Toa&VO-0H7KOdz8*ctaUCCHmodM8#ZqGBe{1tO0IP9C)JSv1iw~atzghm#`#}
zd+h6~A;JJEU~D1T0xrROtgS>MQC>{r!AxDm5;xj0%t6JxdaUQ^(`0(T@DJ!kS}8>I
z64`a6I&~R6vJ@UvGA_7PJ9RLOB4Wy++&|zXJ#o_`r4cBB$hBO5vYHhri7Y!RiPecG
zK9BQ!&KVI_3|AX7oAKU_dY2tkRbOkWriPzs_gmImn>AYLk`hz%x{1dETi*SB8gZx*
zzAkzA<*KPJ1$u0IL;f~l)Hr?{tEuAa;p543DSmT`56OsQe6q+T3+l+r8uo3ajl<M0
z0bm;s1^}om{q`3Zi@mrhevYKOv6=CC2*EJZC*@H^gxT=8iy2ynZWm_bCs(k*vc#H`
zv1daM=TU*b7;8-@iA0HV^uIXJA(y@m?)mDJzcO?vQY!MNz2q?&<LM4^-sZqvwwUst
zK+cO_eyK*mnL09R=%U^?iQGVVTYCcwy&h{V`P>FNwrVb`Bf|d$-_KbaD$G5pz5+t`
zPq>G#lMJiJ9$MqzV<4*|C>rH`%}FP_%CZD42A2#bRZ2nkRXF(8!1PQn?Cd7fC27kz
zWp;iR)nDxi?J=I8btgn0>omakQeti?1#h&8dt0&E_!t`+5Kl%YYfKpcb5u*qhBMKX
zCG8ALcm}jQn<=(RC86r}CBHi>Pq(F*#n_r$tvi+<?$-=5-`jjd3;oxhi#|{t04@?H
z^W$UsXf5u(nd!x8zF|OVQZzf~XmPOURN-hT8<sb!OL4pCUyqdQ5Jq!jl_2L{QcQx#
zl&5{$wuS_k=6ivv<XZ>#6uj(3vBEzce6P`-3C{5Ub7f@Ks3Tgv9-?m0s`@q3os=Yw
z!8l}mgsMee<KsK-<3DSRF9@1NXgb*pw+t4U6=X?H`BCFsA(I2fKv!VDp=ioZzwObt
zu+p=eGgl2a9^SV<!OPAtmRA?sE==jr&VF!3qfr8pOyTLG#J=#7r`imH@vG%fV$3^F
z3dgYFUJx_tU2R??)S6rZ<?hOvnmJQ*GHn~?@rmLNT?R>`Wy%FiQy{{7iUAenf4`Pc
zm*4jD6!GTL{&v@Olj}y~d5A{X4I(`*o%<GywIE=L_qf^kXOitkc&TlfAVbOPScITe
z$B#q642thrNRk;7D9Z4D{*}BdXc}RW7Vxc<izN^W{1-@2GO4F5r$EPcgX%U0Z8vEy
z{-;Mnc5+mvSC~jMt1DZ~AA3BNXSpfe59M^)+N%l|f5YFk1xYWsiZke1CLiu}fF;4L
zwc3Cu4#Frh)o;d<h8cwWH|bx2Grez=pIRDnmZ^Px<0U4o`{=U8_J`;y5yK-Kat0Wd
z^rpHphr1%Im(zj<ka{yhFgSITUEnY?-xB>O32)Rj-iyX)nESI=n@O!4t$en(CjnqM
z&XGEPhA?lR2xgjXEAGk#8Bk^Z!7O;O>bG8IEcUDK1E0pQ8}yty_Y`m&lQZe{7qdyl
zXCo+2!RNu~DhkOWz#A?Eyjt1W%|thW#aFbo&sCr+DFLK0gj1kKM5tDVil8c$I}l&~
zwl^*&SpWrnksB*v3r*;5-d_yQy5Rnzal-X_cU#OW<%5Tens54fJ)DgEC1~&(If@1#
zd{MDV5z1euWI}ouSIiNm=QcVfA_NJ1>8`MjMF>-lV0wW4A#gS;by3G3n$T9o>C>~x
z^=i3>)52u5W&IE&$O2+$52_5kt|o8hxseZDzt8}s3b(DqU&yx?gfB{q`Wi7E!>xYo
za~wKVT2B7oNMDL>8t{3D3^SUbsWlCCcwuQVCqc`B?-XrB^hLeJyTG=;UF3}9mg)iD
zlC+_=GelHh>DPI_B^IMz4nn#bi302H(OSsoC&^>d5l6PF;9$(Vk2HJGZenCW9>INn
zYvzcV&T_LX%E%5ffFp>u0hhWmYR%J<wzj*KQ_|+NkKxli8CQP)WWcaU+GQ&fR!)+}
z7jqH*n#E3bxmZ(&WkC}ZC$(NUvhVpG5;>26AVjvdEotYTH2OciS$mLzo3xwNN1k$)
zbyF<fq}mgK_$Thzd*+|FUhTKk-{l%0;kU{nE0&t&Ey<s+PIC6FcS$#^Q++4CoA`7E
zD-|0T4&}xl#VW=hTVgY+&E%pUen#)1?24hB)r^f3bmOZz+QheOXdJS{$Lstm9=qUp
zCrO_^VGvyMk7H$^6X|3?lJ^F~wb@yCfYeSPAfd#OzNH2wLTGil%*p%wVPXC#G196C
z1El>0>l1ei=MaDd%wr`ZSS&%Ep;*ONSLqVFDqHUI&=9tp?F1N;Tz*X>6f3ImTxxS*
zZ^EmZYr5kJ*U2{-)R^pz@N@mjJM9o;QarYK2u0mRc|ux;d2CGXU6`!KG~*xv6}<vx
zT-irR>VF4p(5`Fi6baYm|D_&W31uJm^An#1Q7f}}Y9v{GUfmPu>_ggm>x*J-`YEkp
z(TuY*hu6O(x1$Q<KpvAbT@GQZ9wh|lukD++6W-PFFvY&}YG~i;2qmIOhvhIee~6`Q
zES<o+0F81S*%Y!NLfNB+HN!;dSV5jyELK?FPMS){7<EI~b>cugn;RyYlp%$kS)9fa
zygC=@0C!qUvKzR4+S+vIj4Xu>1%^{8&8zZ&`s0}0)Kfc5SbN5Ml}i)8BNYU38(}uO
zaMNcKk2K7eN)n4QABQO{h>06>D-bzq1Bx8SJ5Rxesa4E6SN-xd-&h$h!?+o<EZoia
zY=YJZd54>~S#tO>e&Pj-(QC0p1<D}9-|H-ncBHX9qtpOP25^2t*oZ!{z|`^Ea_xlZ
zY3nw&V05$LhRRbt^qyDpw=Dp07CO+{;9K1gW+RL^5roJW4Rj{|itS*M4`PgB^`!eg
z+P`*WLA{Su`|IRIzchm-*3~lA-%8-LAA1KxnF3Fgk#k!{PYaYfH3ee3T&wcZ;aB0=
zkXH2<QOZCGM^n}*urP#suK%V&&s;f}Ri%Z>q8uX`x=cr@uU3S`>{q}L#4yPbLVMIH
z=ooIvo|j}7MQ{&mF}go7iD&c@0xAVaM<jPOsX4gXx1#7ir!(vnVC@k-R2qGvw$T(i
zI3W`1N6^cFEk7vPrNpn=<Y-0qCmQK6LC6yr)Na6b3<h3dv!KY~30ypNLH<6zv%dNG
z)y>gMTEneKXt*Ym&AH6)>SMQ-?75EvaPFZI@uX-_?=syam|W+P{eAWb%JjSYaBuDu
zP=Yo(jH}4;ldj7hXldp??>aY)9pC3KK3VAej7~;?=;uTtbh3Q%f&#%_y5PH8BoM>R
zcPEXzny`2DrW#5<RFKot%S;ogYj0FO$(r9L4`P7^j1NGL9@Wa`5YLPKx=VlAkM!ZA
z4XBU3AgN398p2s4(&GU*k>E)Y8T_9%*CsG_lT+-U2=FOzh=*UYuZ5>%(#f2lO4ovL
z8$l#FGXTE20zSMR^R(7~n5JOHnyCc=?pR2|@VmKH`cl|Y`mCz4M;BVh$i`=ImtCK9
zss!Z_?wQ13ref_~AsIf1LnU@%du0?*QX)f=Wy#Q`8?CvX-+{-a{(^Dz0;hp~*_e9<
zp=*cRb=@pugJE7*NJ8-^wA5H`0We9ICvh<^&Q$VLUPPb6i1!1p5^kH|vRbakf5e#u
zWpk5w2PTJ@xT|oqvg%DlQsa>jab8w+rM5R17g%th{b>Jux-033Q4=G_IJ7%a1{&!7
z*3F|rBIi%-7h`ED4rex**B&PI*so88Pq=@(l{+LDM)Ogi!6j}33jdWMFhhVcoHXq6
zbvipDf>7H_E|<(ma9pC08tq{}1j8_NbMozhs^E@e&}FHIl*TsGf0I7u5w>;vqXKvO
z0&xP1rjYcQ!uU0}T<DgWCoj{uWu)GcO!;2IHOP~Vky5jms6-dBDW0pqT@hRl-xdKn
zKGv6jRVCU6dpv<-26L@0xtp%P<Upx#QAHJhkWv&oaaZ*RgoD|<l$(@4vF((cbNUh<
zqMq1|l++D>P1b?{-<wGS2c-J#3iUY9Q0Rc|0TvKhZ*uNGVEX(acG0isNx}fX;OvIl
zHF4AtA2~8<)$|*!!m^fs?>*t^!9;ZbJLB#54xjYYfWA_6J@pp*twZ_ceCx_U6(e^d
zC-j~v0ku`u{uXPvDCin?@%GE53K}C11*ITBBh}8Q1}UoB{Au0~K>>Ga0p>ZX!IN=1
zN4_OCcr9~8zR#cS-26Nphri$(;qHxY7%9tzp(<w{Vuw6)LJF%Q?~@qsczlAUnqKbY
zx%vGQUN%m_#DMgcsn^uY0M&svd=WC94UW&6>`}5;7?3NjBm3di|Am5i#onHfGvlo<
z?2lezAL&+@DOT->9{F1pHm@RAoobVO&SZTgH=J~-d>%O906%@93=9h1V#UT@T9DWH
zG|{ClZ|Mo_sUx%}S?#tA%5c}_Ww#%|y6dc(m{n7X_pWCR>9@03UI1QMJkv-Gs2_%R
zTM4B{agmp$k0*G2lkfo?J~SnvgdbnA(PWL!RMUBpdGfToGF)ou*s%eIIYiQz@i7Wf
z5U))!qYkQwl=)LKfGjD_WnMxUm9!!mm5MhhS<)+BZ^^D-Pep6%3xTywdU}(ZWt|eK
z^|vPtOnNS0H!Zlql{{2P25A|(dkq4SR=FGw5`%qfq5Eg?s6WysIvhu-_XC{gzX@5~
zG%pjQk{W~L#>dt8SSk-A-op5h6esU<)`cp$ERXz0T3Y#Cx(_DwT>=Gs<1<}j)f>CE
z#g_?&eT4J@kse;kxH*)|v!qR^{tc5~9sKo+P(uH{KlY#phRiY!Xp9St{Qak1bj6va
zRZj4@ub1tXu(&`^TVp0j)v!?qpkc3rK61@4cbJ^Xuxf6>pJtgWNW=!H4*L+4h#GO~
z=-;R}ba7tD-sz^-WAZ-=xqxN|tquliOWYvOy6|Bc(~eRu7%^#{HKnMJSM@rH<kCGS
z9G|sz@6H=uLeLkl{ck$1p(lpX#bCdBP?5&ds1=U9Ewk!!UbJP4>}qX2Q8kFRtq7T3
znQ$Aw>-TDSs`$bT6?6uQJ~KH@1n0x2_jJ-euSP(?F1DZC#P*7nav@B}4|pZKf_1$t
zZZGflz?y(dRMfS6;DF0dI2+D{{JayX#9W#c8fcHxg=yxU?dx`*=DgxVyT7LY;61iu
z_z8GbwEX(gV+*KsZRUD8)wXg{nT(Xw;RRVtNaJ8Zl37LM@)ZTgz&T)SsLEW8lJnFb
zkH*Ixc>TsYSMfR2tJTFYCFPE7_wY^&r*tbD3wKYfQS1}g7C2mjyNVQuZwMwm5f9g~
zclO$4lsHwswi*f{!0_u2p418M>Zqc|{DcFJ>(CBJFfL0<mKxD?5s%h!<QzFgfcpkk
zKEj+^@^lq3IYfMHp_wuWg%G!p$90c|PRU)IsS6lHVzaag%GwjnSWOuGxMAT_m*RVm
zvUqs#SY3w54iCkwW%}zkbe^Zx-UcL-NjdcarWfFu24I*;rWTf<&$OL{8|~I2!)4UP
zVQq_K!Tl^z=$F!JYjw;zM1vL`P`#Vhsmx4}HSnzk{wF;PNpwcMk(xZc#au4|5AD7~
zX{h!Nr?!UMhv$0VMVl<{u##{(0g@IQiXYkGWq}{}XNCo7!pSDXfkj_)!Iw1fF-Z<F
zf--b@TGzJPvqspR8H%`42}lW}F6(#iQ0swBjGQYwkf#-wdgXnnu!?AM1KI)AvWX3a
zrS^ND>jxQ%0Ud;m4Ls2NAm{`~^`_>(axhchr$=-THn>oI>d7*jY#h-9E*X_jC+R~$
zw8QC-9F53m8d=DvBa$6vz^L3yz!_>v0}Aw8KRFQP)s^G&|5YB7S08YUQGz_Kot}cd
zx3_)(p8j$AUjB7i!{-^m`8n+(Ay+v4&unHxv@nN7V+;mY7^%PdC8Ch@W{xe*<4rP#
zE=h$2*@Q9Lu~1WFx`7eG*M~R4`5~?+8Rc;v4#&h_csU(b?C5H#5Zn>}wNPI2PharF
zP{Ao$8~h|A^=PRknxE+7ZoxYUI^XUb@z^kf2S9@K)88Opf6~5;MUKoB{}OV%GWAH@
z<Xg;b9XFkebLAeOsAlZw*<)>6BW1Be4VK9g0RKM#z%5(IIN#YgZ?dBFJTVU)htJ{z
zfgxS$aYj?#OagKrPVdSYN>P|1tQwR3`LHd}J$$~1a{mtie6o(A^jl>(BOU6sR!ZT>
ze;?ICQ_l}DP3Q}6!;%LE8TS5ss>xfkMm&&gde_F)A<mK9dHA((O@R#^_7iUkznPRY
zWHN4gr0lYfp66aoao*J%wFRg3&UBMQ-&Vbh!tfgOfVvX1s>|<0qn7^C<!t9r^1E=6
zZZPE^<~BYP1uW<kZ1Vm&l$&pos{>4Mhq1<_zt_wQ<6M+22SzJ`{>BISlP(W3;-$M;
zQqyMWpQ@@NA3aiIrt7%YF2eUuM1vHCP*d{ndFnf*NS7pUueU998$`+@QN{MG;*L@d
z`^RL1_+TZp;UlO(%90oF0Mh)s(gQ4qeWvN8Q}Z805lFbRz?@vift<t?8jE}v;k$rD
zokh#|YlHXjoQDYR66y10WE(V(4~vO>&w)ugW|ll(i=`a=kI2bZwtv)(Xsx9Zm0(6`
zlD;&k=Ar<QBRZ1EifN0>ZN&D<zA6T_2)Z(pEg7$w$&YT-LGK+t|8f->2l;RMY=-p*
zh#j%lVbye=W4<Xm@|Ii&0ZP_yLNF7v?$0kXrHZfYX8@H?<P@^&4?ik>mA7I;&2xsl
zfcSv0tQ2lc*QzNCPb+3BHS?a?nIK}WK6GGb5q9g%ghyg;O7`Nec0rSOQVGVifG0>H
zTP@_|wSRmu$0d?M$0dShrg%5xtO1<XQ`ShFKP#GHfroeUnTC>-HtV&9j6~A)Fi$c4
zMMyoVbb=T^;1j2zcptelY&f|$Lmol)(h`brcPF({4cC$7P1(ckY1k7kiJPbw6AhW+
zWL#sog#lEi;|7{MNn|?CJJs{T6V`;@d<^ptUN-mA93{d%FHNY9UhAzaE<Y$%!)9&o
zLxAq_{v4~ZGrLQdy;J_=TQiS1@IJJG?9x38gWDBqbxA#;7u@#^;6^_WZ3pGR&Umwg
zq%PV^PZ7h8@qeoSOk9E|od;89lK<>0HvH&K;b$o2xYL%H%g_Q;ebAn!Cr20WEk|BZ
z>WV@GTZVC^E+rJr`V|U2P31y_OKzfsAN_{q?+(^CRgYABUFQc+?t>P~xSKSYhcx$P
z4`2V{ON$tA`1z?EpI^8{*T-P0OL>0tI7Av}h->P7X*D|7icAxE+zNIFAW5&q=|_s?
zRN};BceSQt3|<h0k=JX&VUymw>^{Pai>ZZKb{b)J5tsv0G$4}w=vA&TysO`6m!bzu
zo~&bX3M>8qm*$&$IKtYNph^X`QRZo8ou*g4-7NA}#2+O#1K;@js-44nbFP_xwOGSl
zR#n4~pG?w@BTXOu72M?kQaP<ikd4Hx{JAq2%6|rgnU6)xG{A2*#UDNPS9G4PV^L$W
z+Spi+r6EQV0yWU06e|abEc?I`r@^`@PG!aC`cU-3a#_}~4n7`Qk2*91zqNr<k?%~q
zmdZ?6zcX-*rk`lhlAzK=p;kp4;kn>|irB?1IVS(RD>xvC_~bn?ukxfcyy!5vxXsMS
z)Tyy{mCQ8w-<r36&J1)?=KN^uco8qR{_So}c&`s>`)SVc8}khf2kgH4Uif?8ypfH*
zI2lu&XA0HAa+tw`mEO*n(f5{ESWl|>%nT%8<hsoN4Wm3_^Dl$yw!z`m4epUAxkQ$b
zL4<7|`{UonrTn}xEz3f#VGUt#YBs4uu;o=9g9<ka$by6|cr4w$1F<}CL7u1;Auz@G
zhWtvi`1|X%d#GHqmQHl9u!|phq-YfND_Gbc8M`G|ms4*dCMKrnc*kH(wK)MabA;+0
zMQ7(PL<K?`^G+nOce!?)g=3NshR+>1p$VDBO{eHvitN9#P@g<zFS2T(x0B71IgN@B
zNgw&TkuR)C_?R|s^%tEZS`xZG1l?peg^almt^10X4mOVDMe;R}a!m#zq;LlxR8_F1
zzpE2CW^tE$S{O<+Xpt;tTo?~Xmn9@46#=9HIG+bt_s0+rm$|T5Y&iy|Eia7bThQ<V
z+Ox!?;!p+L6BoI1*&539ua||U?V)6!Lr*?Lp{M6ge?+usCf)W&YRZDx+N4$usZ2@q
zZDl1Ra_ch=2;|nZgICak)5HjF<~c`>npTv9C&cR~ZHM(%vVt^y9vpFrJu9*1Z8Y$s
z>pWBMQ*Pi9+5ZAP2sV;M4y#h$NpRQ<`8s~N6E=>fEA=<yK~-&0`lf=(k*|@zoL4@m
zB5I^$5c|4l+R|IOT&vAj2yrY2dhgErjVV`H8kHfJ;PQUV`>OtLU2~@|Ic2EcqO$-(
zG|OA9W7(BIs%{+4Z2!=5MXhpeo=b%vo`74Gf+eBN<Arq<$65&c^_=Emp7$kT#QQuJ
z9vag`iuqe`dC#-jckpC;$OR0Y%(q=f@`e)94F7?`g7;DxT27eGO+=8wv5L40vx(By
z?5bF+yT%m1HMihW+~s@5MErIFv-<Eg<Sr#VoMoNnKd7GU*khzedt&m`6X}GJ*RPB>
z6$}PR<S~k_Ti#85C~KxEbZf2yYHZZL?N~d42n<^K;`$~1*=$H44|{vFyU2Q`yg`C}
zCiUhUCTflZeJC*}ZP|)B1;}lJ{dnz@`thpN{ODI!M~CEkUa;Hfj*l7t-=a`BK5W1N
z8oYIh6o$_yPTbv8zTBQ+OKM>hae`e@gz2u1LESApUsCD{I(Ql`Py)hPMaL^lzx-eX
z{>7OHcZQSix*}Uj;g0DtuGPQ#+{KuzOAtH9iJJHI-&PdPJr}UDLnYnJeI7N*rRj&x
zG$!$$wy4Q$DT+I+ql=NV85&&SM2sG${Cf!aDFJA=pjdk1woUg!_M<~@oBmPdb1bPk
zDC1DnuKJ;x^fzj~<z=hNX|DnbT!kunt^J|OJbQ{aJeZG_v0T}tlKoap%(@2=2kr|7
zJ}rZro)LY~PyH^S0_^;B^fm!WuET5RRFNI!lauWqD?=!{u2;7nWrIW9Y{}FFJv5W=
z!Yz~$AhjV&_#V9`)5r!5^9^yYtugH1Uu1c#7tsxDPUd)*(NN*Mj$QTQalX+L+(zH1
zWXHTGWs`BMj{XHcC*qkXo>!d{o2%t;lJe~$oZ<OqwPOZ@mn-AMb(KSwdwr=8Cj89^
zMQ?##$gAP?rXt^dpk}pDXqt`a%i3imD@9T~U2X+Kc}dqmAT3*rfDA3#eDzR+{#*Dd
z-x|P7f}4^m<y{>@`I$shA}Dj_^N~1!7@zVJ@^MQ-XfNhX$HvknVO?tmnBdG`a;HF0
z@^u%|d?S&k+EJey@xj2-kdgbC`Tuly8B$lM%9lu^X;0sqa|cf1Xvr%mx$)h<O_87w
zshCP1N*Mz|`PO#`rTqhJir9I99N9NG@7+E8_blGAK9nZ-Rb(DQC*_sPk~f;m&gL`b
zsf`c1B#Vec{|EXf%KRg)<iIgW`A(S^M~YLlW$;mPD8Ydou2^>c_E448RO0(+vdxm7
zlX|)_Rz=#cA@3j&I-vzXEl2-Q(_d329YzyG3&sbYDwIRnfu3%%d{l=%NzR+N-%S<;
zp=Xbb90Zwx@8FHAV`TvHnR*uOd?2|rZ8wf2n7Ect%rV{kjKU%GtaXRi_zHz0BCky*
z=UO-41N$`o+`{^6XRDDa^GWoN9(M!oLE|g#a<_(ehi8JkeZZh7@Q?%#1-wf)DM1;Q
zGSpx7e4C#Cs|Y#40P3e=<_*VN))&>j5MmWcEh!lh8;XO27-*={Dz9O~>-xT(G)xVI
z;A<uRw?r2CPB{Hh>oEV=8)#6i=t*IsKWrv%%|LSydX|hKGh8m**XuViR>LpSg22)0
zQx@v7i@*_8h1Pajs*@*DVj`;axy||~lh^IT1X~25ElY1mfr1j0l2Devc@LFUw*p+f
ze*Cj%Vyx`)GK#x|ZlbTETcMXg_ePY$GGcAV`9>)M-+R6<ZhLnaGpvM(@}G`H9poWm
z5`u{O0Jhw#Z`8kjTI-mfO_id7aZg}bt4Mq_Is3DliP`>{4GG&B=3sBz&Sp8)cZ_@s
zPLNaz^Nm(7H)@MTefslue2Z$Kp%-Ij?6uS)vJ3D$AtA;XrC*e-9|$580!->QcyF<^
z`13?puuU;GhvjiV@5oXH(p+`M+X2+N8?7u0nw>M8zCI{VYBw=+j#z0?dZ6cmHEM7i
z%9+k`OE&?mbk#*^q5Knas@4U;LRm1kwrQTh@4gPbrS;Miw+ojEMlXcT)O2VrIkfjp
zvG9p6s@8*aftye7AZwUFYZw(rsx}>j2hL80U9KP6Qa1ozt)~bQ3xMgJk{GwwDJr(V
zRNoa-`=f6*K`}GqF%p|H6eI0iE}RBKZGUUo;q)#WDBfs{=NjJ)lenT<P)tl+GST&W
zgffkf(#<E*i|*v72nHmcOX5Syev!OI<3u@tR-^cs9V1|UtL_bNAJxuTC~c+}@`;zQ
zI|v(?p|Y>i^5c2OjNi(FQvT*CG#(&Cbj*e(O7AgQOewi|f1cGL4Ax|evYM;kDZ|h_
zDQsYdfvwG7rxLfdpnnoX?{Bz|5dVCjSG2@0|CV*CH-7yqQiS;e7)_v$bQ)z=hVbbW
zxA_^EyII?opdS7V1db5I8KnN=x{9mmQAM9gQ-4h%?$gx7xw?c0lI=;XRKS~yH%u$Y
zMFo1ZDZid{h?0nTS(vF+iLxVZoCg!Pey^NkRt+{^FGK8d?m!t(kN0;6DJNUCKo^#o
zG8*Z~N>le&7$d#Idh8&H`W0~^6;t)I4Do2{orb&`E3Ry7GRL*KRRG?td629fDUJcE
z<?f}Cey+A6j+C89983HhW3NF9Ig71nE5?-XPj26%ya9hs?7W`n(GK*Ued5Z_*z=<*
zoa%I?Ts5%Ea_Fx*$Uc`|Jmf2m#o5WOv~6A~8L+}G`^1%DZ=3jS68RCr>umF-q+9%@
zw?VVM@(=-2rI6x@(+=W+*@6XCGIQjh*1-Ms$i5Rm>JID1N=OU>2O=u-Ttlnxs4GN1
zEFfK4Gr+Th0`curZ~2q7qwm;gtWrY8`Bl$|j49Unqc4Y`-O~spQm)P}WxBB2$H7Y&
z$=|9Z!Yve1hR-DLn0gMYA;P-vowkBvu}tOqgTm>Lx`p@xEQD`8iwD%Vq1`Vl4r64(
z<*KaQwg@;Cyj1Fp?b*DOVbME-xD&UCz!(Ht>}>}(4lSri%r0OKzFs6yOtPSee+e=z
z`w_$QJW(t;o8)<DAy`i}X#PRSV;Y-}l~@8g@c+mRhrVZB1GF+p6v*_F$IOo_=L3ZC
zwpN}l!qz-Fb+HtJa^ard%v}=Hq&s=r{aV-rH>x6oLm!aY=>0CGVA27ZV3eeh*>5Wm
zg<Jnd1o#T{+0=o*=5<4nt}#YkZfnwaHqh~iI5AJn()9)b!8!Tm_i{B;V4RSm`W1z=
zT(1ANbnHbIfb!$Pk0dH_BC+(%aZvCXhJhS%fR}mKC<*j2PK^^UoT*12*gp+<xA2F%
ztmHBT31H8PpVJD6Iv90L#rnbHD__N?&0hU~YqIF@CSf$6FRYoW0LNX1V)MBc?nhz=
zmrm%vT4DQZib0BOF<^@b-FAsVer&wSyOMLF-W-hYeoqnn2|8K2&zt-X%KoKPgA1gY
z#kM;I;6JiAVy8?Yxgy-`AICRg{~Q7}HcbJz3OBFh4>^SBX<*TGOFI!jZ}Pl&oz{hA
zLIM5%Q<(CZgVjPJeQtoj@FlE^;Q-&^@V2aqL?dfMKba^{eMBqneXExmTRS=fx^haC
zQ;x)mU=BhOck=~Tl#t1Ro3j^e4{qxh=rpx_dYR?};(4*p9ENn&v$~e2dpAgeXflC$
z#HHzKAS7G1z^~aiMn*&;Jzz-zMc=BzrTu+^Wrq@NTV2_Pw)oEdx|BU)jL%>QFA!B@
z>bQoWa(90$8~p^If+1(!l`b0hJKXvDBc%>fV4v<r`{3V|joq+#rXTj8KIaqa?8rOv
z>|gUtn#5pK|7T_4!c;Rc_H2xYOw5=B?(V4Rk50A{+9p8N22!fHR%8w4DTpejfs5b%
zBFLKw80dd=up862<u>RIR0pL%jazNQwKYEWR1Iu`blUV(M#70g1``=6O0Z?o#&8+0
z+m>^#AfsuR>f-uymW#76$0p)BgR+Jf<N$laZU5;?m9kk<b{%f;cGhcQsOi#ZJohW-
zF7g9#67h%4>+`XRp3d?g89d%3vjv%IwwZ6^y7CvK3`uBLT*rw&$F-cnb2dP1V;Dg^
zQfpJ(8$C}wWXGZLe_oBQQ5Wux1g;f=XA|LI8Z*xQzDwGg)Pk0y=mlzz)$#Jj)x0wK
zyr(JdtupoCZG+XTl12)bR4FmMJ?`T9ns@l90b${gSY!`g$OyGvc}gGzInrhwEhFMd
zj}u{y*;K-0K?kr5Ht)W6l004D_Yqw=x$1KA`8B3cts))2bKaVGRD(zFN?rgj)3`Z|
zbg8FMBE5&`E%04lDtx#l*j!!oSHyUbO7=qSG<4;lZSb-;1HbL;ZJ>{S*lIoL*noQ3
zo<<fzI+S)X!Ji^Or3kiYT(7{drBgIBuFTaoVDX?X+<OQi1uqLCQ9o#RHw@Ubz^I~Z
z85doj2G)(u_GAfWQ`kl|>xLo<<X1UwM)RP@U?hBH`?I(Psx7w=hA5EjJ285|R>){M
zXqfM$*k#G(MG&mcCiolkuaYX&(CE;ldVpm9@C24tTxJ^>aEodPLKDI`zHw}@Pq*r;
z0z-pyYn>8*`g4+_Y~lgeNiRcvss1UtdO4$;l>yV-dQGw~S}TjOU^sXYN{A%f3zhG^
z`(AQ9O<SGzmCC-5VKJ<bEg+NMZ$u3<J<|gQP&jkkYBD%fM;?!G&mkkqN{cIXIt&@k
zq|>#6U&iiiDdI_il~H<vHsH+94CP*74i%E1XQ3zs)v|c}R3&#f1@3q!b@Dao1xY*C
zpdUbR=wpE|oPt#G*0*o>mZCCbWp>8BBzWqx`M8?W>>4funDOlZ?7!}m33PbHy;c;R
z&$JKOcGlJNmn)tkqZ$UkJHE%x&xzTpA?F7HfM_5%;}i3!ZVDog_G-@_tn}&=KGk3<
zRUeS54Y3lcqAUs(9m|vG6>hj=MHn;t2~NNTT7Bl>pNAeGoH0|b_v5*=?^Wj+T#h%6
zJK*fA`t;gy8<8;txlEOd=YX#6O_7Jprr^i^JKTfCFbG)qsF^(0mu^{40RRREo8084
z(S$PXu-oudPL=St=jZ(q8tM4d#Eg<{^{Ja41P+t4D4E@u=i}<Dp2%zhH4keH0R*3j
zN(6El1vnbWgJ$Pav*9JR*)d4x-kbbkszmBdX71WZtq^9cejb5NwzTn41PNO#AsRwf
zlI7WnsA`D5fle(-9c;0c>Ndzd^1_#T<H(Tm2c=IdT>YP@5HoHQlms*3n9N9zrfEem
ztV}_?8g2Dk(VCc}{bDxboregYM^&n}o-X8=vH6jI`4-MN3TGJ6K&w7V(Xb;i2E&*A
zI?Y8~N~(wPUSwVE`t|U;YDN23w=lD(OR-tIc=f86tsqe2&M&5i);&?EPrAvk0FLXA
zCHKHw(t}iR7;X%qgMmZ(@OuQY9Ic6H8^3=_0?>K_K!8VQJz?Vmn^2z*pk_Iw69QaM
z&==p4CS|f_EYkc@5S!kz|2e*<$pJiilZXlY=j~ABhCwQE-k`^}z5L#oSym6KzW6in
zArNI*=YQ;eH}38lRRf@?`cicqKtEj%=Mq7%+pPtfy4LiC7c?nCp{wZ0fH;tK){oZ3
z|1ClCVPv;FNkE&z*-$UA4Q!BZgpFFWUUsC8|0-_J;<q&Y3kRyGLW#u%bO|ogCY7To
z6(7ILOOV&S+!9*K3om+zUmg+FV*n0`CYoe7)?Wc{M)E`V>`WrH!-rh$vt#|lKn=`7
z-lp^-<<&K98kZs;OG1>Ls%%XMh-4|Yn{so{xKtv>xiI3rh^(TH`#jxCPRnCcMB!4!
zT8wD@atF@yM}4lvp-I3Gz=f@{d1%Y>#rT`JUGD=yKOf6cc&%QEaO&!yEi!~W$z@3_
zsS+e1RS$bw)q~*tU%k3buLanu8AqM~Fr+9p@t_^}*b4`A4($QUB5YkrgfT9D67J4c
zh{oH{8mb{Ao*ceqex?Ddhn+2bG?sl1FWcvb=>OtO%!vID7V*qO*DijeQ;^TkF*S4A
zn+f!OKsD;XLKwi&)w}aB2^a(Rsu8$+c9d0H)k9xEs#ucM&0a7$0Yk@6ACGr|d;U7N
zm`Iy>Sh!c2|8Nxn<Vx!(_Dz-)!lfxZ-0u@wvPk7)`m<X?SZu0l;f2w=<~ON}_F1Dy
zDDaywSM32yTJxU)cc~4(n~9H2A?9WZzQV=HFGC8y6Hmz|T%c?b80~(O?-~7Zb=anl
zvL6_{We&MKW&IGgJc&sVK|C1MfTSpYc)4G}6p`EL7QT^k><(u|(P0eJX@$`5hdoX4
zPp0a@HeBKG&)&f^YRFmz<ESV&%>5G@C>!zaV|=Mp)w~&uLF)L0S>NOb=(qHDKl<Ym
z=j<p;xknE!Zs={k<Cinyo}G7N%vlUCPFun?m?hDWJlcf?X!{0pE+8VD6{%(zXcxHC
zz`5?7dW^<$wYlpL9Fx<rPE^Ix%PRpbDcI3J3zuIK?A7Q*3=M&0`~)iaPJlWk)N+qH
zui1QBB5T{0Em>|t_`}{)HldgJq)7}-Nc3L*xJ6_5kg<tAbbfvm;Cs<Z-!`JcZ|f_^
zO%BGp`{3R}>Kz?=T#yNa7LR4j|6b60kmSh_Lp@MDmp*SUOBZU)9m$ht|Jg6wcQI&H
zNgKZxD;dn_zRB>62kWSYYJ4pEl?WHRgxcr0vXR0O!Q0@6z&eL?xaG<`4CgTpmh#5p
z4f&BPLI|yw?>AKxFjI8h*hnk~zZPuM?oKs2u&g!d`Ie#0D39#Xq_f8K8U}K0X3{UL
zGW`QeQO)wVmehy0kn29TZ(>(y-!v!0pU|dis^94`g|cb|PJlgeC~cY*@I1^jyEN)@
z@6{JX)HU+fuz~%{pE!;S9v(K)1Cf?x!dPm{g(7`<J|SPpsX+F<5O;fuFBDJH^1jUe
zwZA>xb0a%DqLbmNM=In${aB#JV~)Bow}tCBmAk*~23-px*7$-rLC&7oCQ6mpOg~NT
z)I4;_Cn9f*dFTszQx^PNaTF4H@L?;|Y3@!I=+GWMWjCis>Q6I++~HRZ`rw6MCyiZ_
z<l3XpwB!Yx!-h=SEug&RLb5}<io`&CD%y_YG`CC4ixHWQ3VW}ic~!o{4&v@C8BgAo
z@;H#F*lLvr2o3{#fSR|r79gBw)qrD-N{OUw*7L?|EMej(FB|KCt8(Xyb%8y=yrC$9
zzULJ%F%eo))gYc_#P&f+nt8Z{=GGIb$=v3wAouT87Vg<fZFr{M6O~h0Otg#<yJ{&u
zMPCZA<WP1y7A%|-!?{K*Y_mKlm`EL>OAA;^WHSmojpatL=i;zb`7t%p9=yFDRP=)#
z$d$qSPVlH-_gbnLYX(JyEq|Ry9R9DR)g`XE7qhA-(jpZaE1u@STsld@JJRd60#LaD
z@OUrsUKAVNmqPwc4@?$>tHZYrrKkEU?>!}RQcL>w!SHG73uRXyB~nwHYpVg$XK}F}
z9kIkUSMd+KDZora&|3O&`0ZnqF6U+GE>*3#nB-`jWu)o-)b1$?{C&{u6^xpsYQ2Fl
z9ZbIvQBmET2A2m2>(XxC-zC)`oJ-9cge!*n{}OV$i*GO^4WV@vN9ex~53*^i%Stc-
zFuWX?OTR9$wL>r5u1G8u+!mQVTSq6S6sfsyrN`z5>9*yZwF_S2O_{u&c$9=iQ$?;P
zr&ouG&%)VOAqYDfc%5gIbk91c({DTkztp<CG7%f*p2h+h20Ab6!_FWOm_O3jx);{D
z+tY&pKZguCA$*j?WDC$F22OJm%S7IKD(A+Ze3jiEWm^$#9xpYMbMATYIC_M|OaXpD
z*{6E5e*&BmF95{tv!vKannxOiCG?_~@Cr~54RsUmHs9wc%NzliQ+B5j6LV{?A@-7C
ziG6#;O@AvobLB0AKA>$WFwk46&~;|nxlr<u_k~e=*}Q6qVhvSu;m1iaE7LZZ6mU5~
zHY`)A@kOnS6z(@TUmU02tnHB6L;3n&bfEb9K9+-%ltxjWXX4}MK)kkpOdD2t>WZTO
z{?*EbSzK3&WYHnp(~!j3n$t;03>}B<MhjRnxVg{V)(P&tVIV)DY89ELNS%MuUP;B9
zu?9jn^FI|(lU;1cjqRyoe9f8#eEYdvv8-GeGs-h)*x1S|r6imU`LBSM&Ak%n1aM*M
zgLPjFfXp$~THXEcN!egFVo$(d3Db^f$Y6N9xL!9a2+&$Fj3){=R7rPZOGiZ#H1Iw-
zEVYt=3*XJW!Nw(}D8y#!634bMN*#>ew%p*u|75$Km#a3B_|Oo9eS^Ps6_$SwnjPMZ
z_Gg8#b(!>u#KO}GZ#M4SDaw;jlx~1I!SC}{*RZ2bOT>D#a96;^X|R?+)Wu5)I+A||
zI*m8)(aU@WQvJP?Jit)j4LSrH^h<hGO~=JSv?i3#Zgp_?s(=v1U)hTl9u!3}j!hPR
zqBKO7-MEzPdVvIWUej3sS=2Bo{{Xj0QySS0ro@&l9yAercJ*(`9;tar3Nl?!$qb+V
ze;*}1$8bg|0pFFK5$Og`UY_9|`{EgbkhUXz2q=NTl9i*1i#fQ%GqdnhWoq^$mK<F?
zJ^@lFJ6m~IuFbhcuW!r8O|DT?!|gft#oXH<LxwY<0++Rm4}p~`)R+x~26yW`Ox^js
ze$Gd=w~_f@7E9(AnXpAsf~e~+4Y9&wmn@tLC3|R=<aXuUqd*S$8M{#)GA0&LcyR3^
z7Ww)GMq)P?S#xbzgbu`5J-PFU(hB%@RxwL;l&Q%7GLHl{j999cX!^e@aVzcL<vRav
z&klmm*0k3vP3oG1CTFDI`6J)@bks~G^+R!2?eh+N8y!J*1d>7uV!|n3P(V@u-84xm
zH(^PODkQH}v65j$5`#4qc6HRN=gl>{y$gp?Y{If9%=kMo{+VyB{Uv=O%R`7zx7R#Z
zG-jN}Si<vCqw$0)NN!~5|NI9%D9>lv&N?&YL{yQ=9E0UdtT4A;686tHC2(I(qPS&B
zZFQf@fnc_V!PFHnuTv^QI|d)zrff+ULW<~tD>@o5#7TwYNm`Vhc@nBq5T}}!)g4A;
z=f8G*w>KIXbqLivJ1)@MCeC0}jtKi<!GSayDFw?ON{31@crZ!j8_uDhGx3S_4<Hu&
z?THF%pJIy#X|4>7Y;m_Y5=QiMzbU!aTP@7_#J@SvAZTmdfguhn*|8p-rj7Q!*ieNC
z#F<&A?WeaZfbXFjF!M6Z&8lj~Sq7SUtCdon#F^E>g*zz^{Zv&9OhaYHauE7?3!VH<
zk=Fxhb6?>!32{#~7hT8tLC<&T=&SIAsgoj00$dDmUK~r^BVzcY8*<vX8W>IB{bmh7
zX80R7D$W<DN}iGuX<EPXg|IzzAF)-D!}kotO&tb8|5mgs=GQBtVtXrHNynCWh2WO_
z!$JNS8S4(Agcrwyih5QXD*F*R!f+;7XSqu^xZB|DF4<ZK68P=*3DHtVBn6DiG+OMT
z(?xT<5K5CN;Ht%ji@{|TnpU|s4^zoYtNA|TQUX0XZqM5NG@TYcvxPI~HFKQuQvysp
zbnzn4ZkFvnXePvC)Lng(xLGz>-W@QxD%o1kfJORma@;b1#lj)f6uyC`^dKlX4Zg&^
zl1=iBckRhsAEYKE1+S3d8-t@;I&u5@bNO!IqPFQNA17884(V$1h2kVOvA(IA*uyJD
zP~qlnau%Q#0EJv%zv12}lED8b+|Q4}(v)iTNRx_qh}X`V(skOSpllq+$UQt%SMOsE
zjONvO55aW;)N8u69D8z+^v4WMd7v)1X^zlFf~K^QNz?@jIV4qm7ll3blbfURRhzcm
zW~vQ`*zq4w2?Os=rfwIDkM1;H=~r;F08Gp48z<z_9sRPWW6@4@_NfFD3OIxn(Yco(
zQ^ChLr7(Ffafz%d3o=xjECyOs+}~(#3e1Ep=2u7#8#LC8YT7J|@&y!dk9E(NV)08%
z724tYA$pEuhPX238t&a)j(gEAbf6G%F-(CAFqy7S1+=YLeKnoYH2Pr8GG9OQ`|^%6
znvX>VY69cqK!;fF9)}H|_@-H~NMuxxAEAF#`KAB_>@d7#1H-2{&+!2f$_(BUX(xoH
z0a)q&A(Qu1Z#enBs2Q|+b7i~qWof(gk_V<GAy5>OAmg#iTgrL;JQd}(znV8Z;PvTa
zlvSTt<KQ0<IOO_d^>kR>IlkWdLp&3tMeIkQ;Ekl=%bL;^dB=0LDa){RPY^p9q8tjj
zIJ4eUZ44%#T_bAX>}Uz&_T`Sw*7T|l-?=@KUAxPyL#_&8@u%q=a%8PIkG6wd5H#Fd
zcMc7$qD4ugGA2n<9u?*U{1?5NX~9k7bHCw>9JUiHkh7(Q`}?lQ1Z8CJ+$p5}8wvE$
z0kKwappjXp^n-M?l=OoRw?SaF=BQ#P)dC+<{;IoHV$}}17Z~WZX71Rq+`s0{5mgub
zW^n*+O?B<U9?`^~{?P#itz(~6a#uYN9SW3hH9gyMyOkFj?mN?cfx7EQ4MCy3Q%48%
z_s0lS)T<p&T2daRG$R%lTN-SD&O>&?I<sq38P1kmtD!1KSl$@j=xS}?t0r1k!=>y6
zy&B;I&#wF`Y-iH>%hbjQZgx>T9z};%2bjiKh+-1yBOF*EoH;F!+_!3D^t$e7KM<n{
z5F3x*z;_co3*+I5IEg*L1>30~Bt{Pr=7H_A4`qiLoKL9Mg?_jjvf!8FhVDJku&Pk8
zeQu?F6vjnCUi|`{hEoeNXFfdZ6q11L$R`3S>H8BG*kq%AD6916bny&{<kmvA4iHi(
z#7F~P0&-Nakn`1EeEk=Dqq2n+f6dT0&-cidR(cQI41%{0>hfCTePU?A15Ad<mM#@^
z5PTar3J;YbuEG&^N}#r!5lT-{jjmxPEXOBD^LfbSyatru2pU$u3e{d`6zHV|>4Gb;
zV&0LzOU0Mk&Oxl>m!EWx>`39Q#v~Z=DrE3RIvcK+UgVA}BVYWIG!CaJFk50ngXPi$
z>vJEioq2h*z{v#{3w!GMTdY2S!GW>Z6vd2Z`f{G?niB-v2(>%Fa7;-Al6987cRV5h
zU{5_=_h%0Goo9V!7nCPl3f+~M1p`I%d@^#`4;~B^L>rRWNkJnX9W>4QO}$x8fAM|D
zc4~xsxP*u^g06Y7k*z)Y8Ds}+Edkl?aY!Sy7fWyx8ebiOT);c+d3FF0d$LPi>@{sC
zyRYCXZ+)-VQOS~Uv4gB%8%cA)mKDRv5F7PaNAeJxAA{;*VKRSKdxZw=G_w8Z^^Hdh
z(n`*4(iw)FGd(#Kq8+_&HnSv)5qbr+|H}+3pB;1i?_CR484$%~LS78Nf>qxiJ5P;r
z-<7^^7LBaev9I9&i;nnHg$pZDZ}VVZ<yr=&YrDki{@e5Z8l9IhKeQQl#Hc~Q$e^*J
zXn7^^pHNGT3BlJIN4N0{H#^ar>==ZeFcq|GEg$9I!>`xU<+TL*wrZzQZ9mxJF)aLL
zJWiOG)Lnm}`Id^<cW8l<9t5pBlM*mN3WRJJ!H%&emaI#nb7{CiQT146FilzE=zX3o
zz;p^@y@&m>-jKewzQ9<`k)Tc?gm5<c;!ffpvR~|7(P(qsPgS}e5y(5NROPXOAFfcw
za^x2?#*_M-T?{(OJw}44KA2j3MOl9N=@J(C#bq-|rMKSm8vA8GZK!AV+O;El#E&ek
z3R&hOWWfWY^jj%{=h+(acWGzx^gPj-6TQzjW<!PNFCDNHkk7+bQ3PiOkw5T|g2tpA
zdK+SRCV*wFIWT#FEGe1AWQBQJve?!lMLX2y4)Ug4u217)N0{Kj4h~$?6gZky@By09
zy%?(1M~4hBf}dgcd)`_>k2yY{Op!EB>6Fe~vV2I1u+K39JwijGu4kv4H-0cAB!nM9
zGQ0^l(Za{plA)yq(h!9jAb|tFUyE$21ZR{KMx#0~)rjGzUwJqJ`~IXUJ2WYgRp76R
zHOCW*wHnG3SHs$-MZ}Z$A3`z(Pd3~TwzH@~T2Ul|@~CZvTR&x$Q>%`}*<WACamlF}
z-yi#1Y4~F=;+Eth&EH*8v|0z|!(aIkCzZQ#=xgGwln=vcqPzio+~ZJoTE4kQy0JAF
z^q-hoGytkc$;HaQZ>4pi{PL1p{rMhtin~9NG>qGtr7?3zDL=P6GxZ;4+@X0tf{;10
z{MvbO5y4JTk-wXc0{~NLkALg{<*YX<r~_&yu9nnoYS6YE`;47ste);U@|KPUVV1;4
z1TmyQ5yq(NiA!F(_CtewqF?v7;Q;Ckjj{Kn5Z;A!E!TPUKEj@#fCB9;&Ii2be29UF
zcWy2xeypk`5;K47&tU+Ar_veZZ_I&>ek1Jjk^27Yy~Uw+iG%7JoX*=}E@c8efhY_0
zX%Sl>px6nHoJ`y<liljBS(vBomtpjN&(^h+^UmJ-4R*ii5QJcbxNn`AH2N_7FW1!B
zc{aAc`QJb{_ys+Kq4~xR5ASAUcqziDn$U@(DAgzt1*CYWQb%k9(x=3?w-^7&t=hfn
zi(Sd0IF>q{3!#vV#D77BCZ^*wKza+Yqn&9;bS`(;FORH&_m2XqmL&$&!XoO^14CNS
zmQMHQJvE|I-%BU+VzCzGD~yFHRuHX7X0NmJ15#zG3=0TPAtadoz$0935oy%&Fkj~g
z8!ckZHdm-=SL19pZSLHZwTG=8W5bA-9$~$wGpig`m7sUq_fA(6JH)JDBxXR?E42eb
z;7{DtATK12ueHnxtLYr9pm;@5{(R{Dm#N#fp8pmBR*Z4h_T}@E^__K5P6eXUQUw@D
zLxd&oWKEBls+LbNprN{{bw!+y6{z9orFySnhF$=g8K-Wi1#%$9?*&VK9Q{KkU^ng@
zkiHVU+71!1K$DY+Snm`R+CD!*lP3+au{`u7u-hho*uQI!Qy?4A6%Z^Zyy0w0paWK%
z$IXpddXAE9q&*?e&OGA?Gv9~&Dw_)8$^BQ8{JQPEC^$?C;PY@hf<rOvBMA51PTpqa
zV7Mp^T!{_tip+jk7b&8c)8@X64ReU8WVJ6IoR_vsITOi)_?DHQHXukMqM5fhMb~h^
zh2R1~yeUR9UD(^M=lRokALS3;OHNpEMu5haGNfYp{?SIB*5obmvD3<Qx6~w9E2a-&
zbz&N4OR-RyaWjlAAH0Mb8$8Xc*-v!`+E9wRJ@*v^_{Md!6rQbxP@p9{_ROGA8*bv2
z*X@9vEyCgX_jl)SPMi|(75C(oArdW9(PZGEwf*-x!N7&SRd-mKvFxMs_c2AYc2e<a
z;}bR)l8>Gopv3h`HpAX%g-Asr$>li6lc!zhgCRw(AY`N)AQ!ym_0=avdIVNu%l@S%
zwA6dgU#fdsS_X0_FDry9mkL;<-QxzlIMO=B@-9wYL;HR6zW6_!OZq4ec^TRvdKYt9
z=Nb@cm<mPXkSr#SR83WJ=C`c=tFz2NnGUv%C`BFUP#JrTI)YBr515ZV*Fn<eGny*!
zQbWyyA>0QoWv4-@klhBi4VD2+JHvE$tWQ!UoZv;GL%jtg`1$o3{;5+2=)GC2ml&k>
z$ql&)`f%1MCmLPmF_YU{%f4IlI@N`&KGV&jBbNUD-=><uxw{e3L8Y5TSU+p@<^zXX
zxz>UW2w#JMdSaEaZP<@DSXn%K&fIIBZN%)YFPm{x5p9R#(C+zV(PKMJmOgfWHhboh
z@y6E0MHje?II*+Pe|C2)PUN|fT6vL)?`mb*T}iK+6~|MelGZ6-3?RjJpGTKAvR30~
zWf*mf0kF7mpcRjbnWj-e-SmtakDV@umF@D|Xr66dtbnKTSquRW%FsMeD0)$C1rXnS
z=@A|6h8NOka;lb-b<QhFVTy~CqnCXNK<E03EYk|{?;%R`U2s*6`Z7`a3|h%v@z-y~
zlduB2*Bo&A>$g{_MGQCrB=4DU;qE~rz_m&|JNJOQeyFlz{P(h`zXIwwkyJp=Nm(`x
zPa#QUq7vEpi$43ci?kfx%x<@8uZ^W@Rz-kKeKTA=+)&VtJI=6&*bC>%B9?x%G!XMt
z<rAef2NC3=ZzA83SjuOaG~o>YsqYL?o{tySc;Y2vnL&kyqIu+IE1dMD+|=YMsy9P(
z9zplOixWvCQSs6u%V=ZbhL4N-bLm&Knha`q!0u_?pKaor21TNl>qp1Z(w)bk5hvT|
zY&USgTC-^9KyjR5+zx|G5_ok<d?hRtFITOve0ysmGgDM!F=+b{LRMb6fZPI`#G!~G
zSC>Kiu{FH4$&#5jbPXWi<ka#<80X5014fouP;4rz+JE(z6w2KGR7MijHVFI0@BXhF
z3C1#Og6?l|o>#3{^ha$i(3MJ}M9u<g^n#Znz;ONh7yEem&hRV*$Vgz^vPiVf2IyJq
zWustI&RHEIEN+O>F%M6~S*?*1Zg!2#eov}RA?DlnIwe0p&35ur^6DJ3)3NKyoN$Z!
zBE9H)m)fOg3Pp8LWhT#ScIFq<^6%K>O~Z_7uH|`*NBU@^gNN#Bx{_1qGC3>zug3HO
zd}&Dm_vw`$Gr;|0(odbf)KS}p4gc>Ygd)f!jl+(zVm*=RIhiltS%e<#dQlyMz3C*q
zarLC!F=By{_e$~_oJ=^DoD=+j(Sm)?)I(>3VMaHq`E`DgN71nqnz1gJg17%P=};FR
zG~D0lI5r;=0z+NzJp*nV+LQt6F@HKc;-JQ(blH+(!>3d)mjucs5%@OL>vtlOb<)!H
zQ!g;=4<6CkA-fEQ(v!W20xtF~i5U+humrkO<}aR5qzv7}$+sfI!5^z>Y*&rN^PaRb
ziglqkSv1<c$bxF7l}R_SwZ(V9NYC`9O)DPGx8#F`Y{-O?<f@SgY3BEYU2?9FbNBmE
zF$21Ad<3RpfWes)rg}XBo5k4Gh$kt5f1v}}ywwFg2J6EVGQ|W2VyI5q4>?430=dWs
zKRI|)q1m%~cw6SucZ;*->4cJ&1n2svn-o$!5<XvO9*RVFLdLStz^4J99eOiWeX&Kd
zCpN%M%X<-aY*?J{80JyPa1CV=1beQpF+d^vI$=Yu+~+td3Ei5>Ph3$>+UDUNkN#_l
z<w6;%39z{_WVQPV>Dg|G`65MyzWN?P{NhJDKbH%)P~um6nU4g8UWd)buDgQvCFqtp
zi3DoW%ZsAmM)DqF_0q{)N`gP{eV%G-SCo9<GX#WZ*EMx-o-hw&nfpECVwhZcAU;%S
zK2rdi^YlgMEz|#NL@qiFymtT&dT7T`b-G~QsQO_%BV4Dgk(dnQh$aE%N4dNl*;>?C
z%rJ@YTqi&o#SYN2LuwD@ZHa<*7mct~Gtf~)`s1FV9q$_z6S|=4Rzi^Gr=zj3%ER@A
zixVOjw3LS$eC{SV5Ad!P;{*z3PZDKeB6e!d@zG+oms~0vHz-Vu@1t;D|C`tCOZ#bN
z#F1+85WfUnj2tA@#)lutV+B|In~7(Jnc#5zT0b5MS_IX~<CvtvMUGEk1^LmgpFB<K
z*?j6Uzbh^!Jnehv9Zxjjow+#nZA!%u4_*EKGA%zjw|Ez!W8x3IJ()L-(*PdTXD3}d
z(W@}RkF}fqU|vt`?-^#yIO`2ed5!GI2a4bu-UKAFgXk@IF6Ed~dX3eYt{Ajf;5?=F
z0;sX@g2wGIR8ij@a?CQLV)dM~#WU2>SDWUK=uPAK8lnUjZvidd_#h(J;w&;l5jMQ=
z#`(AjXk)DPec1Ajg#xMm56yMMAqzZHlurV{*n0v&Y-zG?7OQT2AH!?~m}7`QO~QPy
z$|8c0c(2usz9_)!c1&J&HjR|C7EiMnWL7#|wz4x=ya?G#CU1MPh*QXTB&4O<!8yf*
zy&jib<2(l86Y@s71xBy{;TeH-6_3Kp`o{;ZNoBKZ1C&&jtW#0f;D7~gBH|Cnh0Mq(
z*xolAy+LnT-5SyusP`I_;7Y`(v+nXP-gNHuXs$QJU5fS1oA)Ne7c9q~mR(IoDP%MY
zJ(=A>Pxj;3hP0Que855mD!sH{9bqBg(dqw4%r-^Hk5f*NzjyDA?6}`+;xTB6Dp=fw
zKzVV0icv&K)L%VL5rrot_X+q=bp}%%mU0e#^b@-<s>3+h>V?q0Vs^>nE4~vev*k8d
z`f}H*@P5gFXF)B>e}xA339_T+Zf46k0gbXF50PNPrzqx~-DEw8bQSn{WaBR+coI-E
zB43Y=&Mh;cFf^u<P%{&Y#g?Uwq=V^=L^{7U+?ljvy9xQQ2FpAdyY}nG0v4(uv!%*d
zpMK;|Wu(>T%PuN^({_f+=DEXFdOOJ#KPMp1yN3CWYUf`seQ9X5io#XGQ~H{=_m}Cz
zzFf&J>Ql95ob=!AKQK|Z(%|j*?=FV(`xtShdS7zyM_w*0byV?$w>4s1yIyr`4jX-U
zel5hN3&(j-r!v&R<LX-Qp6D-ox<#?NAfkR}+EDAb*S2hHRBNd84NRJnRw4O|*S4*C
z$~0b}jZJ}WAWgS!m<iMrd%&Ragz5o2CK3fr?^;0N8Ld@Y|C8x$&eA=-LuS!P_)Hp?
z+QC*w1;u~y95bP<_;#EUqwzY`)Og5sO(K&}4>u2Uv!6=T*ii#-((qLj3Qtn-pd(`t
z*k^?oQnFD4D5G2noN2jmi`Go`Zsj7y8v7f`q;wV&Je{pUjJCc(lSG~@t=+r>UOJ8|
zPA=tC_vUM#&jj}W#G_5`6;S&`(RNt6joM!G_Nw(iY5R6V;-ZsG(uZ)+7QTP=BAMf$
z%hYw_!mYy?5L~r5&nxYq{wz%tvZ;a6G=Vy{uBfN5&Kxe{=Cd{AZrpCdqfW`igYvzF
zRiLITzUG?Z0<jt^CHxEdaW>&WKX~~21A%|`ZOPKuruEHiUunF63xwAxM93W3P49i4
zw9Ly37(xdVLq0<nK)y!oY5P@)g0X}{i4B}$0OJ`>VAq&kuV#=CSy?U~dLN{a)(huE
z{1-An1Jj)w@^*QUFXYrrbfBvIkO<yl&<Rra;{x+$1tGLmzAHMJJ^3As4@Nba^Wzs+
z5SXd!70FgeTflBmJEJ`@*do9WOGb1EsJgyzL26;679P~D?W|?5Zi#(;88&RE?~CM2
zuum&e&thJ@38I|QU;}1e6RFLg{tp1e6Gvz60CegjIv&ROHUjsVP>XV0H%zjec4_nO
zKfEV4VBt`4>b$ANgxvbnkW}xy&)98MYkpC);M=qjN0?44sE79dS$(&E0NwTNu2D>p
z&W*s`^$rC`6CLhRYxH9{Zk$8eJA(z(eRKMZCv+-T6%|!s^wDXVOrHZ4{g$}Y=hlQr
zjnIdmptRLCr0Cd2eTI$0xqI+yMTR0cM2LB!jt?~KNl!HH=JG=NpFpCvac>^Bj?ZJ}
zn7<(b=C-qcn>=sm;+*}>I*-b$123sHttli_eJk9ELxA+Khj(+|l|-X3qPyJ(%7Mc=
zNB)tENpV5>&V+y;qg^Ddnt<7mbY*3HctqH0|9dewkb8Jyg5T)T6H8UP!NF>LqD8WL
z@$>h&XA#LE<)QDut*Ap7UYit&{hC&jO39o5U~~nu??qen+PhkBk!i!+D@!7|$r8F{
z4+v)>An&NP_;Ik;T=juG2I0=Ez0B2EezC<|>4eBpl9^}VlxRWnDFG~JfBD-pAKw?t
zpSUsUO?{W%%x3PBwSv@CYZ|bYX!vtEaK-Iy75zS*0SSRPu*B$I7xs@E^xyL<^t{IN
zottcOodD+~B62ntra-Qpwu8ovklkY?8e1F{G}lO>Xo}TjLL8$J0eC~`4#Z4~aDn{K
z@Wrt_66vdktUWZxcSQ!>ia|!3r}ZiyoZcAtCC$^J#eYx1rsD6?37o(jI+sYUE&xg_
z`BPPh#SI*a6@G+id2g!y5(ELtjGvd=X1VbP7>TtR$hkbyXNzfhq^w5kzG>jWL@oX|
zXcxM4gIT;BmW|1DMW8TkCFJKS(qw)mp?H>WzaP%di#*kPDVXfmfUGH+wL%z8ftk%?
zdpA%2CFoXyWCnq?p=Cl29S@pj9IG1S#5N$CFK$aIl`yHkiQg}>!1|}nY2$_(JhKY~
ztRCmR4iC>_5Rb#76~Q$*tLg=S^@Cf0wJfvO?JelGhdCtXOl?(vxhZoJlXR3$PCNbp
zPhV?AD@?O%Xc`z%%00I(P(n3gKs2FWg6JgA=ObbO;xw`~9-n6kYMzk|UP>Mc;89Y0
zYBJ|DX?9zz$@rOSQEL0tg2{vI=HettlllO;^bYbFIN;?DmX4K@I}<cipxm%v{>}a_
z;762s8%0RZJa%Mgp8UkN8Bh|0HPjau=4qkIxv4J|MC}TVeH{*|qCsO0(Hs!^v1Ux^
za=upr_OO!jrd=VY(o~z?H@F6#XiC27pXr{H2=@z1o;6GAgVzD@Rk^aV|DO{kMO^h~
ze#Kt)yi0)KH<zE0D66g690hg-_};T<zotm(=+y{_Zxv(c5NeLgX}9X`fX;0udU_Ij
znH4Bc3efAdH^EMPA~3u1l0m9&3IzvITG}2LqSwMg?K}RzV7=HMT!#UYPutGiX9Sej
z(>Rs9!G;!s+9{?@nT~32U}+hi9HEvdVOgu|Ao@-WqVI!0#>SFW{^VGEk^~GDUZM#+
ztb|Drr0c62{4eJc-j!3FB<GIj+%>=F-{vlTe@GgjFAXM&n6|R|h&@3_VdD90wV=z!
z`YQNly0QGe5`GsuAS95gP*Nse{m4A^X~uIL2`?p<7xp<%&>hfysJ&<t&2QJYM{{Qh
z3-?U$nm^pW$D|hbRWdY)x4K;ekQ=UyuuKeYKLFf-MT)smUM(sOR!#Q=tEnEYNnPA+
z_&R}b!JLIF#?(xXb*IS;Pd<)Y`1XnT2tg^M%Y!S*`9sc61(}wbxfo<E913FJ#EFsB
zD4K}_jj^B?Ve~e5D*#rJP85AR))}9*P9=qE&z$IM@%bxAr0lfwK41*=7W^$~QYzR;
z|HT#uko`t8grsWQkW|w6E{X@FJtF_asF3ihiQ+7=ZslNU_94NIrC6m(K|<27F>ds?
znVs*qq1R#!66V6h(UdvD1xz(!w-L4vsDCRiEb@84w<fKGi<JO4;_`ULN&fN9&GC?@
zYQfuta;j<o&6EWzrGT0S%Qg`K_+E9G6pUqlS!IX$-T9|s8MI&+vli67E)?!r_OmzL
z&ZAW9XB^w}W!jsW#x)OAn<SoK(X`A+5Y}8;yq>=%>tf}+fhsh0y#~d_DiC7<nu-#d
z5+TYGZbv0_!awXr_Z-<zbd15tsbGB7(s(r%Xy=wLVOwI0*DtAEvGoh3Dqw?f_jE%O
zLjoISrT~gs&ZB>pVD`m0nP}z}YMej$iN!C<bEL`b+6vc(iLY6vM6($yRcBySyZWju
z)Yq%Llu0eMr**(6H;q)00E(oHXOM8iKk?|4cGqvDVdP%ai&D6NrFD*bzfsv)`M0cl
zt&{CGxyWMRqt07Y)Fvks^p1X5RsWN<>uV>;=n{UnkP4C5ecq~`FXTzBopDXgVb?^+
zTf)xB3*6EyFg5R-0@5Bm&ENQ%Oo?06w%b()2-#0=K|xDk9uzolBv(JPGZfGHhbZ@9
zClV%Ptn%$R^O_nZXi7j<D~P|t7#{Kr5^U3iU`}QbDy<f$0RKM#z@1i>IQ4^NK%+h7
z+BKL6lEo*3*3Sp^6KN>GxpD&F3+0ZH9Xk-Nje{}6Iup2R)O*wQoNTPWoVN<ezGV!n
z?tDF^K?S7r{5%-Zei8Bk())!r0t7~7!9!<E0Fqw%30*6Ua?5`L4t>-Yd&V@8SGUV7
z)1!(l+DA@+3t>DVC2NtC*wZx32=m&?_(5Hx21WQHGJUSjbWDE(OaZB1t07aR!E+Mi
z;eUWR@bCnrym>g1Z&BfkGd8mtxI0<VFFG2i?yP;^NcDvkUz(9v9@SCNNP&f5jr*A_
z=X@U~ou)H1EHkAonNnDlUOSil5<y{W*t1rn%Vv;kury#jVh5~MGB&LS1Y%uahU%Fy
z`ow2f4QpXW2*@9?D(t3saZLc1kNNW06^xLb5RhQs0lG+kRmipbmH?v7qjNW6JCwCg
zheOqPEBm!5pPB$<lupnGoE+r{nQ|rt$^+?<wv+fFZs=O)>}AaTTMw3wqR?ook=3Hm
zsr*|CdYa!MCc+t_3@!~&f}&u5+8vCETQOA<SAE()iuBziq$Z=UqmLH9#)e9UENT=A
z$OgzuI$<7O^S%^VzK9_Ql8|b+A<thf*#7GI4?XZbuFPOn2DLZ)IPt^dd+cWM*r7S`
zPn6-EXl8KgGYl(eSX}AVs;uzv2{+IsP*XL^d@&LMX3ClJoQiF+2`k1=QR>Y0u)M>=
zU*L3gWVQaC8Ve-8Y$n1lb~vc>bV0rqGnI?C#3#Y-+zjA{DWiiDJm4Uf?g7R1#)NFk
zzK?HV&eOS)|IYN<W?VhcK@}waDx1ud8hRMGooxUbzEow3tBA6IdGrddBtQHKWIyh|
zU~_uYI|425tfFp)I$#4#2+E0)X8F}^P9$W}%5SOAZB`2+iNjP>GiF&(IH|#&W|wQR
zf@*(53w~-nMI_>7HHa~LSJLFUfyo9~Za`cy8Ywn+<3ufW$jBUkjjGCGRjp=2uvmKR
zncS3QM8MR~?W0}D6@#zVUlJog*%ZdqNQf4@wSVt4M<p%GVs!B|)O8ttLh*M|J#WQm
z3mvqKKCECL<Si;bPO3MARtzl+S!H>j9GdNRNyQ`JANE1N<5mrIz=+#7&}KgY8V5GG
z@tk`e#<6<>Sg8vG9WlMj<2M8|-S2D!?&z)DN#!(3HCnppa+bLD?YWrYK<`?iJ`enz
zvwOB~s)lORG_ESiYmGc0TpaD8@^xuU#7aY4AjFZRl`o8i<ZfNKDqhw!1)S&uB-Igz
z+K6Uau+<QF{|-+18Q?^Q6ARf&UY!LYUz;ym52<R(@JJlcOQDxk<>F+BYfE6kF91J2
zb-lQ9(#NqcP`#E`@TP0#1hva95>?^qsxaa_OWrcP!u5iGWy<c6rv<DovG<Ir`&OxC
z+q4|z^QQ*31N=$N;g|gU$r0vI)eY6GP|2XaJkB|dyPt*cGgtbYKfOd>;u7_XXihc1
zkMqGs4&DWF!(8Va+p@V6>1B)Ci?^<24kZEoL7@bSi(7ePm?J3@f)<=6lu&C<q=&h+
z*N|`?w&@zUA?DF!&@=5$#Y8JTumZ-Bm;_+TlW1o)^rUJw;`LWp_+!};f93p?iV^L+
zn(hxo{)gUwSqbdtAFCOJXYK1-bWY_>)}~yzWii*~)kj1%3e49+WnA)k8*^ji+vl;p
zJ^(AkTnJ*&8U6ba2rDO<aAEsXK+Js7VY%V`*O(TwX|g|Cr!B_9!H;O?abf`@K}~uY
zj|1gx_0I@!sIqb|kU!wmY>gZUwa=b!iym;Rcze6bDQVbQY|z3qD%>;fB7?N`BKBtC
zA_d8GVk;zio#XEs)2sIf=x-ZFW4pUk;}_T-{L$2IK?n!$Tg$UY=EuUSLFdi|sed`@
ze#3ZeI`($T_Tt&Z6G`a+0uKG=o-3n$UNc?+o)lW7CJclr@BRZ<j{GimV(a_hOQZe5
zzoR{}yuzYn$kN3L0Vi2mlOtI8*SLLruq&H=0yc4l`3TH9WQ@*52G5bxg7mh~Lf3Lq
z!v!mUklxoX5J_IvacgIrFs<h~1z}$l8%{KgjqY{tiREonU8T}$CbzOzU=HiR=CU_!
z%#>bHIPjR7YONHhd<v;Ns!r0rdI4W-4#n<^7IjK~%UU?!3Z*dk1tN^AOG7YsL8g6D
zJdALA3FNFjWbdZ@Y~k3b<5)9(#~*V5#H5_gTSW-G1MoL|36=NG@iOq*d9C<gCUv=K
zovtc|Bp@z7`-ByKcoRAd8C!c22av6T(?u}giVU47Zf%-U-YNtsmCVi=3UpYd=4!ic
zOC{(A`3$lQS9rVYLus4e-xy2C4FrpWZaC<0Io4`Du@_&RvvTA@H1&~bWn`vP?2zZl
zb70(-u+~e?t^nm?xaIh!wiQ<&+x9^IeR<7;##z5ors@QF$+%+l36P`Du#AVjU0-ah
zewJZBy09-D3x{#!m<Ll{)=`k%rLAwM&`P(oix`f<|83`dGtuT|m@T0`zx01~IKWbJ
z63X6TUWmLc2H_JKWA8O3mA+MQar71pf-RQZVdoSHo9I18&K(h56v+GA_IZO-@x-Gj
zIAuTsnU5wKk@wsXvvrShp7^mwkoViOFTTF2h&ef;qEd+ei_V6^N=aif5OtiY`Y^pk
zojw5OB}^i4w!;b{81#ZzzhYRrCe~5E3A@Gj697}Wg3BknemhGHV3<lf3@iH5iXL?&
zFUi83<wogVW-d{njiUYVR|`?fbvE3^qx8gM{=2fc4=b=<yjKKib=`}U2kqLk(NzuA
zJDfPLPg`22!fmSiTK!$p#7*ixxQd65Xd7M}5%H3QmNtkr0~*fosP}I3ItC2Kdov}%
zeVg%6xnu`mw`JA$Y0|26QF1m2bZ!KM-fV^iRVU?t1`q|<#~rp~g96+s&-?7xbPkx=
zD`q<{I765G!?$~>$ZB_n0ZwUvPtTE6Jq8%B7_C1J002+n9DW1i7itCI+m3>(ed2nS
zu`e0WDtb5`uT#v?yV0#>XS~rZ%YqdbsUp6#x$c%=Xp=TiAp3h|59C}c>)gVnt+3)-
zTc^p_uXEa<On_v$BHZMlfx5$MN_<OYiJ`xVo9`w8CUltF_nPI*QSigHCLMN_inje1
z3|7<;6MS3sNvJtUfLR3Ve<<8K`9i1-7~|1CF><?Nuq~$4*MEF0?B6?iPUbav4wEyU
zHBUVG?1&8qxzUOk5fo)P<vCw}*sA(=pHY7G*cBVWGMlALU0WU^^k(5|7rVo?iE7*G
zuP>$3pzld%!^7@!cHW)U$(r81SQ`Q#ivKA)7}20y_0wkQjnVdkOFU-dJ)E9%r(8`}
z2NdImHqV1>qOi8bAI1@Y*!n0&O1m(Le(hImaBF<_M_4Zd#$3<>$<?@E{|C=_;q^~E
z#EDK5e=><lbI$g7pUhSx#=D<*IH&x=?>_wY+#fa6?vyeD?HMyAuy^C=%PahaW@5}L
zM;A_aeVl+mj1u~lVtkH%Dl~H!aG@%!=87+(u(#i?cbb7^5XegtIHCb_QS&^MS*Wbr
zRiGr=GqFv=${(m!_51?y49Kw@JMgs}$xv2om=U*tBYlf2-dA!%!3;4Z0WjwDNHYC~
z4oo4{H8!-Ho~~^*TzrUhUy@q2c1}6B8P7eEf6o_|ZP){wt#~ss3eq%^ku>uu$qT`t
z3n<HuB6=195O~8#L&tPD_6X8C-Y`w}cLm67f}%cEY~+3O+s0I|0TNPlVCGH{Cq3ou
zY?c3=ElpG%;b64NhM|4ZuR%6k2@Ab?*M*<qw`V!_tT6Hen870d7>_r{C`)SerIg-Q
zbNuuAP<-cZVG74;3u%;49hA=nG?bfPA00PZkIPN(Z!@0>p0yU$i!gD4gtX@3qRNzB
zo1ObHb~`Ec+WYXq!8ElI+a?A{uK`@or;6s_cnPX?*F-{T0X)sL4~A0*>nF<-CX5;-
zz<wq3tdzi`s@EGWzK)=T*P6x|6K-r-oq$vgFw`77{$uA&4N-+h^aLpoVRpyY2nCR!
zun>?5$n6A;oJ$L9{zPQUTk2jxnL|aJfe7dy;?Kbrq|f`sIzUQX`E~7C*hFSynGXp$
zSnY;`0m4Zf89kx|{zeY!aXB5m@X}6DA&dZ_Zd6ejQHd=bDfiGS_F^3iUAV~B`ACJe
zNa4)x9h%YgfGs=%E~KnM7AQ9`@z(u{uteTU3E^h8Zt**A?G-`JRmt=|TUfAbmbI!F
z-T%ELdR&gPHqpUd_V=G}Q<5oCSSjCO1jMYfOp4wcrR{C0>uA)-m^K!$NLuh6rb^3i
z_-c>Uz5fRJN~v)VshRD;kP-fJ0pth#?Vp8)!Nu$*>#Wph`ax7%u&lkkU$JXlhR%au
z@sv;A+|9ac9{5vG1OE`9vi>wI-HO_wXwuIpHG_=$1*JeU+hu4I&_LvSO*1bGPn5vz
z-h-OD=In4Y{jLkKp+#N86UsS)i6;#nkP8|3FmtEL5u9klj506iV%G9s&B#6RiX(DY
z6}f#wmPHqLpvIWN1D=<G0a&Po{nB#7CBoXOw`^#;74Z*z>*Q4~kK`arN<>V~FSV}a
z6I>fCk8=fF_2QCRoX$^(t}5vlA8;@v<xP})C3;V;NVWbU+`~1{>4|dIR^IU>>6yp$
zSq#KRm&ey%>0Ms`^R3n1pY@W6^?j|*v8G_@#i}*8k(%QC`K8$9j*jt@12aYgJ|dNl
z<iDV|vKM?6q{xf8f7?gZWD3|5D9$wy=(wJGR=htU;PmPRd#^(5I8OqD6^RYZ8C2K{
z5uSF)7K0JzS9vOP1^PucMN=vGE6&Yo)%d=m;PH_@3R&)Dz&hh7fiO-ONpw39^`xJ;
zm4FVi60c51+Zai>YpI96C8AGp=PDcMdKm+n<=0g|6=w|n=-^~lWhC;=?~8r4d0pVl
z9m`*8x@f-*eBR`u<tQA$5!$a5<Gkisk_XPjJ&8*u90=L~SdQrKLF}l3dR?(J2Moy|
zc5`)A6Ra=FLp=C5!DXpMtV@&%$|DE1a`5_zzeI!8-q2z%PG5j{&<-E?bDPdxB#-gU
zv47^E;B5zMC7>E@V~xcHr~14emI&>iVz3<-EhEh1NFwd*hML8?AQ()Z>@!c26TWrn
z!K1S2c&ih_SF29%RtXuoN*&IwaHKxx25v?ztMoqKOcMbgF^oR|n}1^gJk^f9i}Kp9
z-vviF%#P(<*TvvEm!uQzIDpBVXVDa!QUtH*F<}x{fZhDyz+~Wbqd;2M*maUlW%?e4
zU{MEU9E}P$T4HOVt-5yU@S}$*Q99S~!;=)!NUk<QtX*zKB>Jcj?@3XDa(V=ZgfHph
z_ct!Fv~fZL_Y|H>EhlW|@#`<>L3xR2S$XE2u$kqy3l<U7W4(oE29*Jj;<LAse2*s-
zs>U*>J6`i^$DfI5j=r-s{jMXlpEI(<hBNCv=D*&(KdOeT57t`UfyixZOuWy*FJ35?
z=)p4A0S1bLG;Vyi-E4=rWcqK<Sb~kR@^5i`2n;1oF=`CrKr;Qb^N+)0H2jsZTnv~s
zhz~_PK>Ds^Qh?pkP8z2HOxA2$9b6U+?})z!P@M@jsG*y+u9k>XkQoa-rT_mu^|Ttr
z`(giav)*q}Aney38E}qwmM3U)XIx|x#x!3@@4n@p?of?6{FeYIQvL!~U$zWx<pq#w
zp4-HAqV#}6{x!6M0Z!w&!62^w^cuz^G*&WnHn|IX-NN6rn<78=X~q_7OTZr8;JM52
z#sqMHFm4J@7yRlXv5SAwmbr99_clD_uMU?|FX;o3zL89(`K0z%3u}LksC{N5a!G`<
z#3uiKvu;?u4&94fUX-@~;tioWLgD;+p8!ynLE2mV`0Ct^lm}X{!k^XV5Q-TgW^{^$
zKZ7xyDXnGAYTfXzVg-oG42av9vz+k-O%$HZMK5N%DF*f8O88W?g1Vum7Fxuiwmj*R
zlE!*>kB<{!iz6HfB$QDIhT}j+Voc0uL6ve)rtK+`^A)k&SiDM8Ol5WSa&4gf*A>j8
zK=ci8W{Nb2zR+!Y@#x8Yd(Ka5i!Mk!)RS;$lYM!$#ReP2ivqP}kxcraflJ3cSO6f+
zy<dgrEFhP9v0?@1j3q{QgY1_z1E+2Dm1H7%B_5@HUCr<KP)6a&6{`>it=Ii+e%m6}
zz$x&~CDO!|@SmsS-<Q;vO6YczisozFHue^?M_pbls6^Y|TgDx9-jC^4|FyZfhYds0
zu`vF3UbU`I^?kpxtQUGbR~OUIk}7RXM>1B{KuG2(yv;nz<JK+@-xOE@L0yp7vpQhT
zi*RN%YfUf^1ZX1y^m*C(Vk+8Sv&pRI9Bj8VkX9O-cq$}vuvcOlW-pskmc1I(;;R6O
z0D4GM<@YOv4+a66O_OO!8nx>;bX#@Dqle6G8R>jxJ2}Gai^qcEKByUDj=Z=JF+~6O
zvHJyOZG$*y=Q&XXf`WScGwo9?6F_uD0`-4_<z~--DLk`nC$(?4Ol9lkbp+;5g?qu0
z%<|5Yqz$<JJfrW(u6taCG`{tdHbcYkLAB!XlU!P)Cj>qJ;Z_M-yZOhbzk%Pc#S+-q
z%T_Cen#9w}lC~Lx4+M+|t@2-#X~dwOcSJo5+ZhXLv~z|bic7>ohIoL4+SiG;$vu~G
z#>>p-Z@5eJ<7n&NDh~qn1L+1pB{|o}cMzH{U{$@Es>L(dKNDZe5Y<GY?8P@lI~Teh
zF~o%7ivLC*%ad84#Q|oc6DkO>m1-)Yg};J}Ie4SluxBIUygFU1HS@^71Fj<cX@Cl&
z=k!Txk6;^a?Gg2|J%z(jdScfU<{mQk_;L5`#RmY+jpb<sCqz6Eyn;53Ne(jZ%cOG$
z6Uh^qXCQbzvhWq-!359~n+DJ1!XycI+@2P|T$zFk5mI*IR%ac?NSg(r#noYkf%v_}
ztSVDWiu9I9{IreXOGeXI^b(#J-ZogXmMtXowFyT&&HW~Op(qq$9(~j$WL>-qzl6Am
zHxz;~)15(~<rb4BEVx~D(`j)H=Mm9%Y-#(XPLcn3d;lzDR@7EnDXI(`UF9|{%cwox
z=N8sQ`#KMQ<F`DZyob{+jEzVk9k8XBoEC<{?IBr&0d01ZiN6Mmvu=QcwI2ep>@XtS
zy>s74B`=OJ+`(SH?9rRzqyyFwZ2O2LYGCgI15Q^u{=`=6Fh8S`C<M|0wdhyKJiZ;a
zNIM>SNNv!>PbVxTcH6~H+%+I#8!A*|<O3hVz-j|oV^*u<N+_1eRJ=f4h<;EK6nUML
zyY!<buRtzdb7Q!KGuP{)V*qQSSt_jyJyc(N#*#YNKLXBq<6aK8WVJucD(;$?4s%#%
zf+{7li|Y1S{K+8BORCQ-%CIOQS*hQS+8G-gQ$622I=*YyOEhG>v71PE6oOi#Ow17U
zSP=omOUQ-(_hQ6yhelMeaC<~c-?BLX+8`?(X6k>>jAoa*VWQ1=z4c0qXpE5z_D-1O
z4)qeV_{so0|F~uJFn~=~zy^PKKrtc}oxGt_L<~9wt0{EMR9t^hd8B^X;E1kME}>!J
zq1`^yu8)za)}g~+0%{QWj-mKqstn<L<DY)4M20_(2z`L>e}?|uJIBGe`be1jnF{=t
z<IQ?oHM_V*(?BW-K=dg<WF|@3iM&|qKOjpR+?b!ed}2^OMbbRH@k>FNFGynto~Ny~
z9xYSW5G}uU%>^*I6JLCOI+)wlExu?(pwZ$Ma<=<#|BZYhKby<N$x|J{AtF>rKn9nO
z_zHlbL?0j9Qf<Ce%A>G!+(kUFD0Ea<6;iu>38^PY=*;s{GjoJS?W!e=us{OtZuW6}
zej1hBSMV?84Qi9ot<o*E$jm&$9I}p7eRzzIlDHLuX6M58MDHHESEXTx{+!S!74$*I
z%nOt+CpvJ+TFV@v4m>8xY0{T)1)@hCySc_<!83`%u)&{*9hyR%8g|$Bp83^=qYNUz
zZ!i7BJ8`L7-hy_p1yS=NX!NZNsgw@<`Km;#@=n<SVPmuzwb9g~a9!-1B-}GB-*IAy
z(8Q-c9ivde%udmnJ9{ay>rAlUQ7L{>Xe5ZFuVgp00uj=VMdxb9gp{cH9p1*Db*FIs
z4RTt#wm8>|vZqTNmltQUBc|J)z~SMWntWgkb_CoWI}#X0DOB?&8<vzHor?hM4ESG&
zsZD~7oVVB&!BBx`kdj~iF{-tvEWsbh>{TtU!nEFa@4&87%Ke6{kRXW^$T_+5XzC31
zAIO75PQWtLwudta@v1=XhtXp|p0uX^2=A<&m$1Q{ln~=4gA<Cpb~?ON$D~oyX7!xM
zTxR)v^Xw&~C2KRfUbvLVhW@Wj9HVW?cizT?3i!|-xxxLuI?kJ4k1hin^pTXQZR9FH
zFnTnqU(bCaM6TPosR3QiUkMyPh<>oL7LN}*$CF*0@Dw|8kGX*;#}`Ku^<7zVv^?@F
z0HI@MN^;1%-y!^OHhYZplO5Z`>S}hcEJ&@3AiASPmQd_HtVAg;=Q?*qDy}shckIHt
zH=q^~sJ!%RA=^Ql)}_{~VPymoL`2efJu}@IuDtctWVAfTj&ehMbJ|9O@x<_tc0YYz
z`;8!@;roi++W(^OIw~(Hn(d&tt))Y-uM=$D(><jwuOQmS*?hbRBcY$9K8jM+hRj!(
zqx^O3o%=Dl6TTnVF}I3Tea$SuPS(z|XN!rSr*&D$Qs@23{<q|`Cdzjz`J8ZY^Qddy
zpZHB94lXftWFIM$QZ!+rxl;k=9H(NR@v~k!-dp!6A0Ih>Idg{&nW;tlfEY?)#z38y
zUmG*Mr`?}<UCDd8`|Hru#j%8+W!Ghjs`J5$(Dbbrt4)J|uie7R6ik~{1ER}Zeu#5V
z%NAY6yl4k~S*?*xv?M>4PCnkoJ_DiQF1+A!C^peYEAAAiLpu;*>qxv#6KCe=qX3GX
z4O%t`%1@o2GR~E?EPeTSnJJSPr=fy@b(tJD=NzSXkF7MlI@T~{hS!}B)AsLH`Z`#u
zHJukmxq6@v2>e?NROXH-25QlwZB=IN)4$aOXkGW*7Q<}^wY!^5h?l}*;y8MDJjC90
z1y#HQBqM?_IaeA_UD8HeM5uYo=*c(If%(e~<nL{9-+<)bn2;z>E}ASUD!*FfVbB1}
z*WYbQ**Z$ZQ=16Q((-q-1<mnh!d#IB1iu@i%%KxBMMAtY$-a-f7UGvKs(HvZTZiH-
znD3BmA}x%vBt2VCyEb^S!>XA$vevwnht||WpmFMWvJadkqYIc>YDp+y$_P>Nqvx_e
zX1;Zt!q+(e@Mo*GhB4hqZ_3;AhoJR0N+k29lwrY%iOYrXaE1V+UflMn-WehNsM_?~
zyw;wKIwoz4E=8wbAwkLPZx&sYmZoXcbC{&@qBXM455j&ixAM*TrusEe>PDC{x{ZUX
zm%I74BG9n-m<oJE_yJluiyhs{PLMoRF@-<Z6|VB3O~vkn;ozgyZ%Ar#p%s-DtdYN#
zGh>Qib+XWPTUh+GTE8Lt$0LWtE=!>dGBO~ysRO?hE=S5O#7p5hHUWldVEv@4*wN(4
z8~667PaR4F<bA3)!3ziy)a!Mx(RH1$p(VdIKdW$iQFahOgu!))x+E&@Hd%hLx0dCu
zPefoL@ak-m*5WJPOJKy68e>6x2E#e!+^kC}U7E4r24We*_)Pv)(?;STTv75Ltu&Wn
zV~b$GR5@{KPXR%xjD}m=k}$fAtyDm=dI7As(hS~D&=^rxxjeL4S&|7;(rnP<&KDdU
zW$xNG1$e3lIj5Ygs&J#*JsqyfwBrf5HyuX5C00FYIpsZ}DIT_2&M_R4Q<9POHh}DJ
zRY`5LMs?t_z;7)JS;0vFVJ5wk08r2kzY3~Y232c@h*S*IT7u%PJ;5-<V$vcE;y1c)
zIpR2mUM)D;sDeSxxDThwkYYmTR5Z0MWFsnD)-R4*$A**%b;IZ$D*k#m-8B(VYZqAx
z#@5f(`{ZtRDFv?|=egW^>156X9n9P`dh<E)J~9q}z#!zP^(jP$D4X4PlMQ;({a8nD
zK!Mr>b~t*4Lm{UHhf480{~G0?G7Ayf8@G$<GtU}w@-VsHh-r(EK7S6^!?C+67bYq~
z01bSH;?-2)Ii?B#ymjRwV{j7DB!u-5gC&87K#0s%tm#2DY|+<vB3tN~=4}<cp3jV#
zWwwVU?v6!E%@;~MrVAh$JU?EQyS68-q-A5eHIykc9i8f2x!Xm+jK9YcybGQ2JAAD0
zh=-wv$!;ki8Bmze{_XgC{&dkYu`o>c?O*E_bN<qtF{SdMN_E?b7es<JDsALQ-f#!F
zLsQUtNu4<rVa#(~+%8;`I9@cbV@@qJmDhlY`s{ikdL#MiFP$2A;VXDK0c%OdNpbI2
zb>6veKOv8yThdmc2T&knLj;USiVTtxTO3P#a8sIPS~E(<7nxrB7y&C;JQ--PR=wZP
z)8Huy{u5*~n$YMaF*3UoD-;@bFZJ2KZ8|_okLuVxFktNC)^N3qvX0f1Y#DN>c|D{k
zLdUVO3&0Fty3H=HFhv3j!!q>=JdE7?_eRkDO}|V6KmknLSA2<1m}K$3`^g<;L2)1F
zUwR@qvTtEvLv~Xf|J0{w=k2YS^X;`CZo7H3_(#gIpz(K`_tIc5Y(Y<~!WmtB!8__x
zcOH!vnnZX;+u;+75qvaZ!^?4&?GN9|Tqq-mWWUpIf!oF~Bs|qt{g0l06IhHAF)&v9
zNBsJ)t6NWNKk<R1W4MLE*C&t%iMz@>bBWzwzWZ&zo}G{({az5755B(YlbH2-ofTc=
z95=}n3HN(XH>H?%S};AGj8$2-viEdWOIK+`saj(&Lh8fRoac+?F{|O4mMQ`P@e(|k
z2;mG?zpN)Vn0V*@c2ylus02!rvTL*Qo6qRwxTSly*7E8)bvycnTYdhuN~;nJ+3N9s
zX_qi0CI}kFj53K$tm!?PxYZfFMKmIIJg!HeH;blP(JkYCmN}DL8tAx*F=RV{KS%`|
zSTW$@O?zhlR`1@7p&Z*~{0g3aCsCtydS31a>J<su8lUe#|0&CR2r>=Yfi9}1T`8zn
zu>ubMO7~LDeaP<CWEb>sk<K=Mbb#;9?SYmZfzrU55h)$h34`kX##GPJ1X$Y?=_lt1
zo<pe^adDjSu1-8WcC_aF%Vt)TM24Ud*`>~;ZUkz=it6H|F;ap;+W!ViU7Ze6h*m@T
zhVyjh)7v|x_D3bMz9T?%3dba9<2B50&duJ2;Z4{mJ)`m*0p~DgM@McF3N#1<r8**v
zgB6iEnI9YoSY&zdx-@$2`XXV<A50E?VN+pNuZ6sX^~Dua6N^PwZ}Myxe-XPQVRZLa
zbSwmbuXY>TFdbwfheG4OHxJ<+4Lx5FoDRibOn`ynQ2f!WWJ~b6KCI9d#TbeIpAo-0
z?s}Yx+AYg(eh)74!x<`;K6_%3Tf|J$kAMY{%)c-Kb7~D74X0f8na7BQxx&W$t9ooA
z*P1CFyD)N?e(H7VVF<_Vl+Q|co~^hJ7#D?n$o5V#O|X*%rdy@IbwnI9<W)j#Syb{8
z+m7b35{nU-ob_G3$H#=L2ETIK^@__QZ&^eh4rdwCPq$$#p%l5N_1~8>m3b8Cn85?9
zkjIU2Wk3~*@5rVXPSB0#=!TB+gJjG`UHQ~OJ?M4^g}TzX&;?L_3V}jOVPu?K&A3jI
z)e$ckyqDG~8yfx;YY&49WY@N<(u?y;zp#4PfBE9ND+q%vxZ0RE@|%N;(zyx3QsI1U
zT($RP)jdvN#=#mC=ETe%@*}RH>&Kg);FW@(=9o@F-bAz}pxN^x8MnCt;(IW(7-oS@
zo^~bCWV~mRc05+c@iga=C~aydguYS!W2g(4E-Nq9?z$`=s6FRQxpCY6YckUj_(LYc
zx}(IeqFC->Ef%82Z{9<parOwP1LF0haeB^;_!`%AN6d)3V|iz*aLKGP_xiHA(ZF*1
z?M0^ZkumCN6T=Z*{8&H7eW`RXb1pN1gB)<U@fk4(syZB$m@*eK_-JA8t>0>#D$#85
zfD|7qoC$=EbmGO{HUj#b`6_E4lN4gw14(v(6{wR(ol^wZUQcRNQYH}L=Tmu1YZum@
zwR<6qyXi}>g^htbZ5!^Ex}L!Rh=goYMu@%Rz};kIJ-WZtZ&23)3=7a&y$Tq{+kJqX
z0X*oX=&@EcEEO~W_udRSS|H(5p8J)XXTnBeIIBbyO*$s^4KTk<T9QR;4>KXg-W!%5
z7|9MmgOr?!h*yu`v6jJd)$y9@sK|B?viDO9>j3m_*);`i$`n_r@NOjqMonAIOCzcr
zBXz_ogkMk0tcYIgkHhk@1$d?q2O`BGg5fbdVa!>rveIE|MCG1V1qh6=!$p7GN)=6}
z2_P<fk;B4t*M@k643bLaQr;Lwj5s0=F{Axy#(M{D%y4W=8{8{)v$ik!U3G0C91tnm
zegD?f(H|*y<gTIvz=z8J_Erm8S|6X$uEV3{cnfHFK@n5MzJ*Q3aw^j^PJO8XUI67c
zRg!~sg?#P^!lK>xVjb?fmg7SWita=8%+~Rik<7?A<b42Z4){~?c&;WOCQwHQ%Dw~y
zEt2A#<`OI+aUO3@XZe)rvb&x#2hd8C|K0Jjw8r(0NGY*S=)ZaNpxCHkXzs-?Cjrh+
zp<ADK6SJKmz2XXj9`1$qC>06a&WGvrFqlJmBdUFMrwKUf=ARO65)EnJ3Ob1qByila
zDMze7Bf^eI&<kWZ>nnJL1*kZ(l-Ksn*)9hjLrJVx%CfZXY<3aRn#bKB{71{+qoGnH
zX2ld)U`+F!_k+&s5{In&!|R}Y`>1T{A#*UO5pFA%ZYvEb176X`<6q8lp}(8+0t3Hm
zSccFd<?)?aww+|E=R7|A010iGA5fs}gdI%`=?M?KNs-{FEC%S!{W7^7^E7qh+ufia
zpcY2{3eFi!iraeJe1|78SfQF#S*YRD)LmZtI07j%MqZ=CI!yl=5!hK2OqgsLM{f!4
zje$DZzm^YAJArS1&9P&k2f+7EWA(f@Dj;QHM7QO&m)ybf0;xK~%!>7`F0k<w=>DD|
z8jTkt#e6Ggg+6lv)PgU#93*3F^{K4bTGr2>OUhBNHVDFiX(TZj<z3pq|7qhL{t8Yq
z_&jhk<N*hnS*q_YxX&@d#*EQaf$ugMk>-{wsyTm)EEbo7_wj0h)+khe0nx7DYNhUF
zcogryH?)$B#sab5iQAJrm>uPR@;O3VeodFUJJm|xAPu_4&EDHg9Bd6eJe~)NPvDgs
z_OGghz}dHUM~?ptzkVxIR1?5uGi2FbZU+|@lirjwQMjhshZriY`GgLyKk6z<FG!v0
zAq3;~@4*MnjDI&Cu5)}fZSE7u-wP$W93<aLtA~W;Cf)fP5JlegSB=~CD=nOu#(N+X
zpTqTEwtx|;?JckWlsh=LGn*)*LcrkA*7ebSI|_v&t?ubi)y)Y!!4C&+N^xRILed^p
z`-mW@-P8^^suFqB93x{b2WCli-CI>1RWp4vbX37#ytG*gD21|~D*l3McXt3R?*dVg
zvk5MZ^xga0rBDbO#>eBL&td!9SPJW=aBsClY^(Y}OHyaZX>T<3^fddzk?M!(&%ZZ8
zxGtQXqH5jmlYd5XphiuZiv5Ln_=HoVJN?_eYq>&)8NJxzrMaq=kc}}}SEqAa%_h$9
z%me#MJWcPibUC>|@)U$_iDV^DQsoc5p${@=Lm=3BSXMkMR1;I3QI$DoSBG*!G9m18
zm9GO~FS&7v_1hQ_Trn;V^eeOv+E1~7h!Uy28Rwf%RJv#h*HRKWE3>*1BCLlGGV4-V
z6__i<J%}dAz0UP7sBA?Be^<<czCb(o$*-=9#P%3|JaB@hCFjM>EU#hfqHoR80r4b_
zcGHr~dnN+)|FbP2A!F&RmNkf@RSD(l92N3k$rTwkb2{82fufU=vjB)SvK-0eKs_83
zGW|%=W^UAj-qnV-pp`7X7UO@m8=?<Da4~(7%4KlqL9Ii>7lD7tw0dj7GKYYV1;_8Q
z=FS>`{ndYJuuOlI^)hQi*PH|O_P1SSKd|y2Od4}mKgcpYFEv@}US*nn1c_4xn6M@d
zoTyy8(gOOS0VGSzHBT%XmU{KO0M(i#Q=ebunkqZI1X`hn$ds<}J<GchSU1UWEO`fx
zEIEv;1*C0ZD5V`$NqgcT%ax%x1}dPB0zO>4eIsj6?m~91TqvFClfwt{QmDRod9@`w
z>YZa9o%jX$Ci|et+glk)LI~)5<MZO%tP;m@IYc3O1w)ocC3&Mlvh=b+)!EmnAT6`^
zEXwN~$WVZxh0ThRJ|j9w6q68S$oKo>!QuZf-_Xydg$~^I<3a_I{7NcNfcH+_UN*-j
z)3pTvzw>YO0$Zlcm0S!JUaLcWTAo?cS|iMm{Qc91ckB}-A;cT&C<zvYId<46$|B$Q
z&+D=;e{%9I;vXI(PDc1StYF<WZ<qwhXNOe;UKGpCq3zJD|L!5NdJn7}IVVa+$!=Jy
zCs;rKqzk16&yj;t5K8WW-t$PKjkAS28ZF!VH_xe#MB>txINmQ%rH+$|gmZ}=n3&(c
zQQ}z?*_lS3{?3-1HGH=q^fx{SgHlma)iw|b1m97I&_&j<`7`NbU~!@<;>mBl;s<t-
zVQzCNuVJj`KndChr9PTDp%#CRbDh04i4PQ~yX(ncae*@*`f;p3<}dR+wf&x~ULdFe
z0l{l!bB6yjhMc!ij8&TGOxrAIc?h)IY!$6@Vw})Rtd`vOZTuR}y}*{x3Z2B0G8d2P
z>ZnOWHm3$PO@aji+Tm0wXNfr@mH1oux{(a_qJXisNI3R%M<$Vj?tVHCYi8%YjER9V
zAd#9`jV?DXQee_7*;cp?J1A6fB7YqhdRMNpFPIwz{A*p)0|>vyeUtUfu~v~(sAobH
z`=mHYmSAXNpBpIO5rHFM0=NC_6iO-6S>dK%FE-4w_$&$-yto7v&G{lZ1F~rA?1}y)
z>#*mnc*uA2-9#Amir*MHkYdzL$HwQ&x_|E?7QRq0`_FYjC+)&E-Dz)Y-mI9C#WVwA
z6E|Pv@HhI;T^K9d@>S32{5IDb47f47SUzZ*i%`B_>GIVgU3`S^SUO;XA1CvsRo@SD
zFUrj>X*L++q2>V&=EdBp0Y?C8K6^LHE)OAB{PE{hkr8_krxQHk&-upk;WE>*u7?Xa
z;OEyU?d7m$%?;WqBNoUU|8vCp<K~r;T^t!j9V8dFAvz|b@X)aTXe7&1{Q0nb66hLD
zit3CMmk<R1h<(8m7YtfljgRwrnnl#XXO*bm5pM3JvAiyz?OB656!>U7+T?E~oQ!F(
zEDhMJGjlL&YQAyIFR>nfQm3nIOu<D;AW)em)9z7Pk`V~M#qLi}1NfATrTWRTz*-ma
zEIOI3sgf{Men-W>O6=syAVGD}G;7Gh|D6EjK9a}fw%Mc8r;$Yxt%79^sp&!+ak4*z
zTJ+aDQV87Hx(@{iQKBsFac`+ak7R{IBR;rj<UZwC3}FdsnoMP(%3WBF#m||3w_l4b
z1z#Fx?ECmsH+h%0N`HYz24{S$*;6Owhv)6AVOH;~*;b~RF6QSs4ck89LGu_iuipds
zn=8|)S*a?3Oa_y}K1Z#JH_GmP$m<ULR5M0);yq_Eh?l13t3+a}xN$#kC9DySVo>ZU
z^?{aE{`J2Nj75%2>+MnPkCjX0D#90aquy>K;Uh>6oSopOj963muHHP`h)q*|FO+(f
zsm{m+C0ZeG@Hxn$b;Fh7!a=$yL*(Ea7oGYScUqSvN3Y40_2gA!NRE6`O)?rM*o#{M
z!X5!nqv}M9XM9?#7~qj*1eMb`3Ka)x?-MU}&37|`5jzun{jJGtx_SS8m<!Pyu_Lx1
zAWB#nW;LL<P~0&y>Bq{4lgL;7T+<^9z;`i;<XTye!9f36>X+Z>-5?zqUfoNR;jH85
zLmOSy`y5ef5_Q-1T*%%CxS7c@HhG1%>nS6JI06VC1{Ja?Lz*vYkOhZl?2;^%zEhH5
zQ1cW)*M)9l(fxx(t0WW596S(w65yuHgG<S{hk7WmP_^f*6ajpgJhcB8^3H&EgUiW@
zuOC@10`c(qykL87p@S!KZCNZIK3`_C`$m7b@~p_J(!wu%+i>tod9_@ka-j+qZPaH<
zPPHYRWb)pXzw(jQaB2|@u-F<q$7{bF_Nf%wRCY>xul~pY1LLzFdBnTV(e7pVSN&S0
zrO3w~tLslP(PL%d_5E-g*Ca-WNe_5hh@J>Xa1hW?_ce2R(%Dtu0<Y3%e<{=TOUofM
zFfLUKoZ#vJSFsS7nUsEh25biElM~Y%%>ZUP@u+$?!v`A8i|}q><YS(QukJ^6DhMwO
zixcqUlWO6B?H##3hkGF>u#`K}k1xCI-3B&v>d1UvaEi7KVk>9M{SV)y$RnH)5%l|=
zzt62)eXCaa2p;~m@R;FLko4M$FUUM@n28)^v&x2I_lZhGQyrFxK&K(~okWKh`BELH
zxd(r&bjB>y4(6y+21}wGpW%RWgSjE~{#tDJIZN-?2cGgJ@01V;P}Hi(AzOfDbmE7@
zse=z#XTH#IASxeex|5_v9pCLlOIsAml_e&S+qwHfXYO95Ek>9*U#-0sR=D&W2g%U-
z$i;nz9;?v$BKti*lB|WHw{Z*V?BWcimlLdL;|EdresqhPrXY$!3O|6Z<7G?R2(3bi
zkrbDXpGG*Zpim9&flymCVvJN<p$u6i0LAfqvMJV&?g#DWkzZ%gN2Y%WAfpWby$4bq
zJ<A}nNU$o&M3lLat?LTnZk}jiu{|)9GC%f$!`Ej~w70R;fMZsjMjjrHVfvh%Qy&q_
zqmBSP9h@2nk0I6)VjksNsM}Nq|Mwlp@JRH2`9^J7UHYQ=*r*qC3tLu$_yq+WmK#5A
zoYpW9R<y?K&pIT@@;d-;pOX3zYU?O#9=<k+smq8Gucw~4gBcr0>X}YN8iMXEYKvn*
zD&*lC9j;;q_8Vq$<FXAw)t4c^$rjR)@}GUd&HH%kK#cH$lE*2u;W>;ABKt;$>38Gu
zO=fqkGs#%jAD+P<E!BVY>2&;S|BZ&jU1rLUwA-&EM=;zrLk@UqZYjtU(&6<}2(JAI
zR?o1YSB1y3+^QslqW2j~{mzrxL=UUqyz#SLvWvp$vy047$p|l&L0Z|q*&A5j>O-D!
zFV&arGqajf_z|@fcOp&kaa)6e;Y+7!(#FAod1n2qm~F*CC6Vk&_#%YKYtwAY^fM_j
zNYJGen8w<C6O$k5+1Su#^B)2@DJwjUwdsv9H2%<rTn^}OY6iTmxoTj&d_7n15)%b&
zi}-2K>1ba!Q|-zRNs&rWGB*6Xzt7v2bu-s~R6fk5RdX!lp*IDPy9W&tK)=C!QB=h2
zOI=uzy{Io5hsHe1p82HfJ-roppDXdhKGF>A>Gfd?UiQxN=^Q*x;mEJ@7W7d-L16%0
z1n<k6!^i;}bL&U5$0SF$?0*NPw=MR|l`}k)(084th{AJ-*k)*7e2t)7-zk~Dzx%XE
z?z>DRfXCMAuE}-PVFA<pO+NuM!j{6#U0?A+F1h%+SM@S{jIB*w2Y;bN5O^bBsq5NL
zjRo_CTmmLS^aY2)OCD*+jn@GC-_bFbg9%f7t8#~epA53V<qdeDoQ<*201Tg1V!GIA
z1u@+y{kT@d7@aZZaz$^j!O?9=GC;@y<t2fMTMc01lblw-(N5Pnb4K~{JZg@&cqsYz
zvk`-R50}|3QDy6#0H7oBPwy1p_Eq4v(#h+n%hZ_+AKfPBUQiz+0~p8S>-}+*k*^*2
z&2K-46)j%AV;i_rGqdh>g+G(k+6|);!<`VK_mE(6&_ZOe!vDQYHv)1|R4|yAW3x8;
z1Fnz_wpMGAI6Nx;qUx7a=WtdJwVn0RKTF7Alh#%194$B^J+Bz&n8)$tX+BIq3|ZW)
ztSb`=Qqb^QQbZ+oQ5l`NL!@!<y^MH4w|{5qhtTWxsY@n1tTbkOdeR&Ah6}DD&2v`#
zX<VG!FR<mY?%9Y34C=H+5hD5SxzWW$-wPRr64-DvBSeyThv9S6M{QJ463nHA7!!L%
z+6I56ki?ImDt%(k&1{l)SET?n97WUvZ}xn>>Mq?iAU|R%H|fEi$MTJ*WP7_Grdzm~
zPUOL$4Mfh!yNRQdpg>{RmQ_i-rtpxbZIDV(l<JdwouKa;^*fi^7k*vh@YgLHmu1Rc
z&pV<}PO5k9*Mnc|R&_XI>Eavaimo0{3FE1ho*+%zEC{edtWY%pF#>%O9~!gYyGF#a
zIMDx^xlenh=jA!WU}eH+vwItGNX;zq$i%+8EbglJzz5@meRB4=%;by6ylPxODBrpZ
zC2S(H=9A>8#_h?c4j^`UKifm3cadriH9oefJh{E1kotrN<^i(OPLZ9~X#-^+;7nD3
z-UK&%Q9A!x;lx3(|Bc`Rbv^@aII9O(l}UkC7*On*SumW{=ZW{i(!a-x;c6Way{utB
z8|HTO^3CyC9p!I&te(GIszQ+7s8zm}4H2-0_yQN+D-AN6j4LW}NJLParwJ<`NB`6_
zz(p_{WNInDYC{}d>KM(u^-BaOP-e^c0me!K#dSLQwxr|h)tp?+^%fMb2#zH!t-qs4
zks_gGj?C#;<Iz}Sv7i=w75NDb+3K0aPfMeXroIa+51tW0B`rx2BfdsEh%*ER-o-r<
zHnKt_lr1+(56gplrC8;6^U?Yk{xZYtHSMjJgona>RqGddP_Z|tNA~}Z(WE^D;$Sy#
z%lnID<ZId8<C?u~4p~qhIXU=l)+<wwNR5W6>_W!)0r0^;Tiu>l^r)|*O^C|b^88m;
zs`!`FZ(AzQWF}5vco|mv1RyW8XirU?COCO8+OoB`5Wh$xQ}KRkhbUS?R;o;;jVxv<
zx=Hl;>R%$L;%pO~`ZJZ;Yp+HqJJBnX3mn%z+YEM9J3sm3>&q8870oR^`R~ssi9`Ro
zrvmC#S&|=_=_B6ucZUU!t;OQ6G{>wad0(D<r$m=WrNvsl+ungd<;WElcq(Zh8Xsw!
zmf71H!T!G581j!QL{aF@qHQSU&-ch!DAmm4<XMmA-9`N#1C35%@jswH2=>2gIgi(G
zejG^kE#}l5d=xUCXQy1}iP3TcXegYteLVx(+iz4+ng#~9<YG1Lq6HV~C-ThenuB8<
z-G-~<^7H?GsRS}D0_AGieEN|k4qj(tGT94V<mB)z{e<Uzzz{u|Zg!x_1DG7M+bYu;
zt1+{}hj>qYQn*bFeEx{vU=CU$6`0aUXZ;cE{M0RRThw;c{pEVWYYK}Q@a+Hg6B*mV
zm7@dat3Xkk)WXm<)z|40l3H!&ylaZ&0Dx#e8o?W4pwaU?OqgXpaRw~vfscy;Wijlz
z$+8mbD1OFX+AoM$-i`&=Z!9YyKY0>|gPHwkL@XS@m|fzNd`=C|ajetVM@7N``G4Ef
z?lyaoKOBD}%T>7?xSH)VI=@$T2(;S<_HeHf<On@Fr_jmVNx~rZDocolDZNDI!RGfr
zHr=UEjsGZP<YVHb%Wu{%Zd_2FJ>Kzt&6lYUV9MCi)2y?iI)Jx8m&il)_$Ug==nnIb
zDct_#efynw0R_BNDqJn(rApK(sAT66f_h4B06ZGIV^GUW!dry<uV9B-)tyae4C6yg
zzk<sS)WZjDOl!W~vg|CNgg1?ZAQCQwg(OY1=|K#)5xVOL!VX<i2VuS6_`1IvcTL6)
z^ew9{@wFbXsT;iE2ZeQJ=NS^N-IZ{{15U7ty7#^|P?RTU(6*4D%2us~f;eQG<;Okl
z*|R1X$Z~{ZcO;7CM=u+f&1w)Q5x*e^A4W8FZ-3?f5vtr2c#o7IoL6}lY})=~;DC{T
zlv(V5I=;-a;|imRx!f=EydOE<{KWzFCHJ>s$(gKIKnVHm$fg%JlyP{Il&ngfzY~NZ
zOeMaQAz*WnvAslsk(1(=`MM~Upwn!2u4l!?)ia<(n=Y7y<q@Mn6);Tr&8=+U+|W=7
zxhC`%CR|&U?0jweoHLpM)an)yI;z^+0*w&H@t?!l=e?bwu>Qs$7;#6TT#qb3KQbCk
zo^yw@V)(u6ucG!rb7>`tJ@M>~7lww?ip7V0R6JR82YP}GciZK`&9*ZCWyzsStJGht
z;LNn4pSy^j3=~2rnS^9NXgUb0yZunD?_3Sy^rL@7%wPT6hOU-o3cua-TU_eW*dCk0
zf<pIdd}u%+3x{)X*4=}759CaZTt`Kjs%J*d$JWD`cQN!!s{`*kcWJ6{xbZx{+f28~
z1RUp%Q76q=$NjiTm-52@F~DGG7F1*}6qkQE3A!x91IDjvE<{0AAv>t&WQ_HS?Gu!R
z-lApBluGkfBic{pD4EiPVW$s`K!tl(_{s?WOQ1k=a7HGg%dhrEx~S*Jwa1%>Y@lHE
zy-mrS-hdHo4E@#mB!6Tl3qMz;YVa?z?K^rRzn}U|?^?NfoY8lb#~M*72=gfT?6V<}
z3FJtetEw(>C;a_mrK9F`!cxGKf<xO>JbNM%rPy=$N!fO!hrph;XZ9h0l_a0`0D#6i
zYC&V`miN!*D{9JD+`P?BS;^JWfWQwZ!i}{FNAB@F(rjqAGu}wf&sZg_s_OB2qSW#K
zBahkx8J7IjD7~+xY+nR@*|4=tPhTiKIdx7HV|mnIb)$fJ6+%-)+a)g_3&FR123*-d
za>C}Z3eyZ7Kx0{!B^10hlg!}8f5uRVaGthb6f9%HTiZcVMRvVNHERxv=GIGKn%&6;
zcJpO;;U>=H^9RT`b7(Tiz9qlmI~kp0B!K>jgW)w%;2Ui;zd|8`l*7A7oEyJ;72IGc
z6Mz4Op|wH;0rWidT-6`x0{nZ4lL+$En4D=iK;la$zs!EgMiBuSW&Q3}S%rV}e<wF!
zV)Jf^*fka{s<F>sj-thxA738uy;b1e?8WzVV0j&`CeMpH7Zm>(qAZ7%(VNTBb={!U
zO9c&O-0J&6Rf15^G2ESpJZw&n#)9|b1-EDTJ2rD_CSYs!j~`~8OK#zteAxlI{gmL}
zh<xwS*mMRQZ{$%SlQ?B{q>LAH?43Z4;EBISY(`Hx4(Ck5XnC$u7)DP_yWB2~^4R1l
z;2evZb<Tghwtq{~*Iw`sx72s0SW$q&k}-PdPdTlEnK|Y1SW^i3vBKb5l)Um~yCEI6
zRV>y4o0$@HSih&>AiDkx*U)pjC#{co??Ni)Wd-q@>0*<QJ>lr@NyMOrdnSp+yIthN
zXEERJGon`8Pt9Iqwi#&&t(Lbg#*2Gzh;!yFS?_zZX4&x6@Y<Bc3IF_X`FIp}82y%k
zHR{;lbHiiw*U8Q8J##KOfB13nB1IF%?29ZT6*U0BPb<NmsLZFUk}<1Q^^Q$w)8Z9*
z^#6^j(#`b%{rQ?jM8kdNs=|_1b>D8aEAB<Z6wQ9%Y!yU=Fb`Z|Auh>ePd;_t(c9H|
zHB#t`v*#iE!%EV6=rko+FN{}-L;0+}a-u0J?{n^Z%NW>@m=e7_s>(olJ+wAqg9~p>
zbSW^qz`k}f0OQ++l7=dNKw0N_*>Nk<-8Uo`M`YqDs^^qZ6#$f$P?{kMw{D8SwGkwe
zaDHZWV9Gpeb<0Xg+m&xH^o}|dZuM)a#is|FwOmIZ80yKtN&05%t;lsmg@dPu>q7jC
z%MXH*S`0M}`?KMr;%a#$d1GYb;h;+9a`yfqXf>f0%UjUh$aY_r?KnYc0i8Bt$#3wx
zD7(Rb52@zN;Fr#)fi|qz{^ZWWui42>4XcgDqYOCWxl?hM??Gn*HS*n7($V4&-OL7i
zxRi1Aw)~mCQ$Cy!jIGcA$q|*A^y>AvQQ~H4ct6`U|4xuKJ@JwDavQazEw91F54%{F
zSI4Vj{|Vz~%7VahYRI62+(lqU8QBKOFlwtJk}(fvOu$@9Zg7F#wmsBA-bej%>E4d0
zl9*r|Q87a%|CEK}0A<ZPYxvQg`a;WmvXR=VqkT#lG)NHa=gEtI(*WCOF02j`AS5v^
z&!hO-;)-7As!(X0C;%65LjY;HeA425^*ug<`b|*(4**^!a92ssu%>e>XYr0Ywl#bO
zl~L{vJ4~)@YLsow?Z90{hA&b#RFGlRR7W0$X@dRnoJ(LLfReqXjad8Ds&E|?0q=hF
z<oBjJ6-0Y9P8sJW+EuEfo~=X$c1dG*bQ>hs`yHLTI5UiZwwbpDLL9bC4c<Ec0m;0d
zov?G`A-i74IlFVumIkka>HOlyV(nGqtGCeru4-!x28ZLNKbW}n-?Rkqz0C}Zt-9e6
z*Wz$?5-3k=?IRrZRg}x;tYndD-PC%Z7kXA-nE>6Cs&qB=GhjasrSey^$Iw+|(_<jE
zOr_ioIVf_8W00B^v256RN?K=1Y~jDd7%R@=_?R><Q;L&nl)4^(_5K)SvCn>#G3H=(
zs9%^Ilf%vP(ekNO^fh02^JZv*uRWJ9Nvz)f7Ze78MJ!uZK7S5_vce13HWn9T*dijA
z%_FCahu97EokDIuhKyUEGmH+dSVB;@3_wpK6fAp`jTSQHng?+5Rt@Ao<~gvg=5twu
zWw6<^$8!ZjQ_C~;jt7JxeZ-=ihA160fqU62G;G#Mo|PW$A8w+(0qeRzYkKhNn}(r6
z%X)7uj$C=(Mhm;faHFO*uds0yLP3Ia;&V;@V~_ORm0lg+ARkE?oXFr!O6+ADh5FX~
z64oy&I{ceh6A8u8RW>di%u0gvH1dHhZ4*~c<hfSV=_@!CFP~8*YKtt$qEX`c$FQfG
zfy@g5%PNAs8LGl&_j{1NPWJ!mnX7v+JFE$+5oQY^_YMtOaXtV2y5x$GRlKM#Bf>xw
zxX^-&x`XEM9{@WZ>f2@Lp$&?LKS7tV89!iu3xzl8-b4#p$t8|)t77v{6;l7{!8^&M
zl6yVo5&)g=NWgAY`~4LU-p9+PF<d?q`?C5QFMgXo9+fm>XE^;S7tO!<UgThjiVOZ!
z5S>)}GNWZ%RCQj#Y+rOmFwe)g#kTA*vNM#(Fb*2M=(!(O(<-TSK|VOWj7wKh1CiNb
zE~T>qMVS-DF6L#*3Iof=l6}J%i!U(JYdvY9@!rVr8=@9soI!dI`{Vlfehib5RnY%k
zuMWyuZEYZ}z!9G#mJPshAYu?f5r;08ePXkK$5xMkG5*?WFitNYhp-2jzm^Zp*m2P_
z%yvFRC&TmA(b1@>NaxFn5s4kBeKmCL#(8F0S$wl){&0TGBf&PG3QAuT9ha*YRL9lC
z(HL_{<~_kSa%77ER}9DxpgX4s_?W}}k#B9%%ZsPQVJSU41LMmZZt_yasfP-aagxgR
zI;y<*asux*oL7Zvk=|T$%HnNgBNgiH)dixmp^)XeJi|)|y+N*HO^464GJIb%k|1Oa
z7@m?q4|K4s9H+cVZWLjRTHz$i=FdnxSw!9^Ur5Y85m#-}?u6aM>g6>I&$d!JKeZQ*
zOusf~wP8qy5c)xpVJPed&<b&xa4k!!O=wtCc)8K{pE`K-+HDnoflWyF?I`aw8tj0m
zH3FZHQ}*v)s#p~^O&H<^8NrusHs`|?>mk89F^Fy(@DEmcc%?@7whE)MYkN^($uP+X
z#r(h4V@B7+OwO3Mlo~g5q=DR?Kl?MS{^jF7R9+2UR*n`&W~yT+XbR5E(|MMgC0o78
zMK7eNewqT(iq*UVV>DEDF$Qk`t%e@+0Gz{keAvHr(*Hceu#-Mr)bmA@QOyiv(Oo2Q
zXX=V+$r2t)(o;4t8|+zelU7QrNJhOVosKeHBgLe~nI}4w)A$fg1IgtP`ch`yGkLRz
z!)MBZ+Z5`m9L8O^WSF>mjw+pXW0f9CtqC!>cyTpd$;LiYn&iarTi?#nv`|5>5N-UL
zjL_j;yRqQ)IZJW@>rGC1*jqkyna?|9&VAunrgCdMve5Fek4{weJK6r3OvNRWct8eJ
zt>xI;WYP7jh^e2)0tK~Wcu4Kjkxfx)-TO>wK}uQykxb%N`051!$sd~#q2&r%qNl-A
zB%eNsXpNvjzQOm(P7KQPt7AGQLkFX1ccz(}_uh1hC^%B}@XW8**N7%K?y1aYD@=UA
zmXy4IB3#t7Xt57Hkb1IyhOAtjVbjgRx4=xB_^@4ow0E34+Z&b};OpXC^C^6mJ;m3u
zE&9Lr#wfOh(zam5WVn?d*np8k6n5x1yfP4g_^{L_$YPU_5O{ZhQNJfjJ?4ikMzINr
z(5r4px($59U9CWHAIUDfFA>Ac;jS~78H`cNtKNvU4{6fB0I$?D`CCKc2PPtLB_d~O
zgj7aj_3MbZSY#wzggs(1jIY~sq|DA!(!eCLOXXDc`bk_bUQK+>z_iB2y>l-b4O1(7
z=PpzyxURubCL2<QL2I#JoigwW=?(~#^hC~;5l&+V@9xvHS57%gqVc^V?Nri6T)ppu
zwJdk~Q3Hwh=b@q8dh4ATKu3__I&~*1J>3L~Wh<WjI?DO}nu?fFDVwyEfF3LoX<NXx
z6zW<0u53GaI26H1wgdsFl?99kr5FWpr)!1pW5fxnx&Fnmj*VVqxKF7~a*AzfxiMj*
z6&MXlV6VVq!&rvT34913LvtAmc-bHbraz&yxO1r+?|zxkWox8$V-t>m%;Mct+B~ev
zZ{D6KyC%W+$fMuZ(Q`v*+V7U4W}P=7XTE#A`g}h**PX5045<t@cg5iDDo!<Y4{Niy
zhaJ)N-kT!kK`$SUTmAqjVevW}8}C8v*M#sWN3?;#lN`lo@VSdIw20!dhMLShY%8RN
z+z0PWG#H99=ioj+Tvw9#_<r8z99#pA1%*=d1+C@wz=>*#>qBgoYPu()_bFlqVahQH
zz$V3f8rZ40uACUZ5+S6}=%vEYDo2Pt2~^L?Jr=33woAt1wDM{b;l1BERtP!0qWK#t
zH<_6l;sKLljp*q_j+6WL2h(cXR{C`zTJg0xbh#@vZ<v6s(>T#_b!J4(vDF1TmaRbF
z<V@LmHQ(SBjhl}6QawPn`^(<DCL8DF^aWNt*T05iXPQtd)b0L8RX&Pz;jTA;#SB6B
zjn8E}yU{MKnO_C$NW{z+vxD{Dk@VwjKT$93#iidp;)L5?YS_+*>kwg9l0#xT6ADfT
zDbbE{ocH-0z-dilh>p1~?=T%05~J1*b%4fi8c-jQaDWKob|b#>I7_lX@w3%%Te$FF
z#P;kOKs4~?z8{aF_#TL|g=MbCTjVl^EW|A3ULhQ<0r$isSW85FNl8i+bC)qL<7L&d
z#tkXS!=^pP7}UDXn!7N72Cp{1(*WThq4qOCMx59y9vPcSJ>dthuGfkC3}K~P?N4Mv
zW<wJZIRcf?N0^)XmBJpF0QyJT_Kohq1ZYHble9=!tVqO^$74VH|MPyJScE3~Kw?pJ
zkrSB6PYq}$SiCAfMHND-6Au~Zp-N#r&3a%>cQ)-IpL?2v=kIijEyytg46<zy?|FJ!
zdMDm!s5di528HiI5}NVt9kwta%XQxs{68rd>YK!A_>5Rj<G^sOfWy5Qk0y1?tkQG8
zzF$u5nvsyC*)rN6HBSa|^Z}NMX3AMZvz`a!<E2e6X?KjULlh@RP>HGp>Boxq?1vAQ
zL(N8pZ3AdW@`Za8ZgYsKcp;J-fDvm3pk9(9nh-ffp0W|q)(yUFa*|jR?+~QYZB~P*
z-Os!XfPd@&x)hU)B!XRrgU1i)(Bw7&nsP_%PDU5vEu}B4nMTe2LqOdvL#-wp*x=0a
zrMx%xQ1egzhAp<@G{3R|?`tyS<njga<lL%WdyT+a4RmVK=Ah+=Ht;=3Dw9cG9G=1w
z1~9hRS8M3v2yaah3?9SS`_9oBOu@56n{O^x#1gFwH1xtgo=9=bsQMI<aN5vr{<X=E
zfa&HBngB`nfhv=GZ^1uu5|xS9HBop>Sle&eJQ@O2!t}K#MwSw5@NI2UEYI<YuYo)S
z&l9GZ)E>*K|ETPmJEO+sItQPlEZ4NJ2#%lU5*;^R1A*?OiH=<ymXi*|-A|T9?%jIj
zXnGWJ@5h|7xp^kgVnha?Pg~R8kK|mU1O_j#FRfm(TAVl|yLUqB7`)VNh`8)+y0NK_
z5f$CN2*1e_Lvz*X3<)mdGz(fPlJ?7>d<7?ip+2c()#LkJxl}Ej{Cj)AXZ!F60if)4
zR$q+eZ71#TlQt7(bQ#67GxGYXs-JJv6_>m<Cd~IEeF3fYCb67>df|OyNSErk1vxEL
z)>>LDNAKJVR~i^qz+j=p59$jWHDK^FYN%e80Xi0CfZD%JCo|3F?eT|r0Mi{)!jcXN
zBk=AiZx_wB^-h8kv#3iwRu>A;`y6#}Nk!5RmyZQM9_TI7t_zRJ!JU1Kf8EP6r0V7s
zzWNp+To){g{D`-;pE&df|2Ypt9>B@5J++fiZ<EA|;EFx)w*hv>@zBRiVFo6Rh+zT7
znH@q4t@zW1F`HgTt0Igm`?2Apz!;eY(IcNur#vqhxVCp{svlO!v0o#T8!l$J`ck0U
zc@d5h=TX1%O(~>Sl5IdC+>|;mB_81^{|h)`fnJL8PrRNqlBlvus9Q_W!M%_%mP**2
z_e`6(Dhm~)A{(;&)Gi@>@eaW!+a^hUhOUwnteZ$|hO^&ei!bf!7x8>H-UT2JLE<jT
zH#vs?8);A|wwlsKJZ@P<5SRefX=s)1;)GKRwj7`E0&G%-sMm)~T5jyZ#~AB?6JO|p
zytFim!%~Js_Yv1z{(@Hm5SE?rYygbjgva^(>5G_v+3OEV15DHonSh$v;0kiZBz8o@
z&}*s)YE)QdehS<Ao9Y9MTh^E|x-tebR;#c)&SBGo>iBIdU}DUQMbS62QRc^uA?t&v
zM6m-BuR%o`6d5gtOiygy93~~;vX^SVMm|Roy8lEF!jo?OriBAQNM;JGeDoaY$62P*
zc@`DIUS`X9O0M3rF{s`Mv7{XLuX0em<#@1U`&AE{KrB&I&We2&JOJ9R0tlWQs!R(d
z$NHXS(4DD1{ukU&a$dYc-d`@sa)>Yu1a`7Q%I8#Y@5p}G3C$j3$f6GsPhm>q+ztd6
zw*6hb7h|mrx{a@Gc2T8h&8egKE%bWV;Z0GB0Cp-*1-;2#3Q#NG<*SI^AaZqUHF?a>
z*`~|@xX}G_WU@eB6m~!%zbqnB-%46Zwm#}~moCcSXMatbt==LuL}PPFc*7fCdI8vS
z*^~-pLb-f;HcU^nYWeL?YyKS}v-gP8=^L(5D@)!m(!Gpcrvg6{0)@tV=|f)7YpBi%
zC$W_$5;v);pwxUW;EVQHbX|~?S61FyVNNun_N-T^{Y@hMbIjsgrI8Fl)Dw)W_MVUK
zsFxZ=vctxV0xalHhIua|oyFS(r!08L2ftF;h>#6pE8WbId<ekT;f+beFh<+H!l@yp
zD=heb$#SR|a>~FAoeuj6Jc%wUQgFsTfA>MDPB^rpz6j|EA4$MFg0kkqva&54qGHrs
zQe+z+*IHD{;T+bt)<P-n%IY&f(#H!IS+EJBhavXp=}oGaq!X|1d??>)=00j}5%OcU
zVWIvhN@A?KYsiL>W5e=B;if=&-SLhoxA<1}e%D<DX)c2r>O-f<M)fPBU;2zpYSBf|
zC(9f!Q__L}%@Bh(j+muen=)!CS8kZa*0R7XF8sv!#I|??%9e%sfpwNtl&#sY-kS{-
zv8IaZPr+z<EhlECO@tDrW%Tr58v_RBd0jaey$b~SVf#L_UY}+b>KzVuCm1+(h3!aw
z1aMG0SF}+*t29ucqr74RI`y7J1Q$=it1#sM+!sP6`W!tVaN+et?B{p^?x`Q7no8Ne
z5;SaY35;M&gd4moaS_D~)~8r1eoUaJ17}%XCB|Y(>5ifT1K~{V-jk`)uD%xJHNVka
zG41b+=qx<zc+so*+5WnlURi8$@e;8S`a2sQh`<(Ix$m&pPtiwl?;$ts&7=3YC0p|E
z5h_h8a3^A&xYdbBn}!S0R0A%qu`<|{)yQB+gLlP?iGR2c0$@yF6Cz}ULnwM8mDoPa
z^x^xj?{t+D_|R+h?nK*hKnUk6>tDjUt4Zu-06`(tx##p>f6BWfw|(`wN&)|r%8x9&
zp#J7&b-zv5>*%DHk2<H;Ii9|pa>%XT1pYd4VGQ{HKxx)MLqHhj@9i{g9ovPCHznG_
z#&{C+<uZM;<RL}L--=~-C0H=fvWfO(3O>;IwT`^Mnr?j$zwh2j=#=?nkof*)Nu;j_
z(J>8*r1!!Y*AVv5R?-puJPd5XMm}wq1dfbst8p5UvYYz8_NTJLNAbzv?<=4J1o#~^
zlbbg<7uBl$oUi!u)p%eZQNg1^JJ~c#5heE2j_c2*<2x%yHDW?Y0nZwPV~uz|8AS<S
zv=#f_5-(lwf-SmQK-TpDzmje{p1Ff}j(gt%P9Ck%rcQi?0`Z@l+P*m=Y!kPg?QC5m
zr{vFX7PR$X(N}amL*L!gUcPkJAB9m<u2G8Nj(#O{U9}c3hsr#pD%zw)->c1cwg6oN
zfV{M?Z^LIw%LsH71;K6VG+kRKA!rU@UYR%!4sFBj++(i(+?qu7hW?W|ofGg)TWhYU
zdo7k6M?8Ib^LD6MXGUQ;O&b8gz?yZ!@|6q?Gq>ZiAC^1}$;--X$ykE1i*vG9gWtfw
zQ<H8gY1DiT^cl2;T=WLb^XPJ84w9GxP)P|2bece;WA?};i3ArUFAVMUY1oT@lyF7v
zP9aO8L+qqn?xs!P7g4%&6;_5^s`aYKLK*W+y}}qR61Q!S?J(NZEO1tKFPeP+pV>Lo
zbQaRYyjwz@#bq2tW#AC;i?;6fw<s$C;lYZ`3&N=FXOmk!JT4A1?;Y%~+jW2H_)?Qu
zWbIcbgFYAx{q^^z13hic3NU=pw}HksQfpV;q2@=YLOaILrC+5%*u_Ug=DR0$erHW^
zu3Sn~vy(0h<0euvFfwqw*=l8bZzH&_p%wjy<MqH6h3w&S!ny-Lx+4(AFaV$f!CbSb
zQ?%NXZpO^sgYj7MG!aC=r%h0ZFl8&AZ{Drxta78N15~Z7{i9d0iva@R5FG~GiTF^2
z7S@sO7?(V9ES}}!&OYcoXBLzZ3~Nd`d~E^qTiulN>5YbZ226|hW?K^?l@$|gpgC*c
zwPy*JYUkg1n@^@-uR{K!VuGkDKR&^3Qla7rD^u`hgc>clU5+E@dQGHsg_$|F*{qmu
z-pDoDxZ?SRGm}H(;!9WECMl)zsQjbUMUhbz;+#X2RWqJ2wbhzGTkuc298K@aM`{ig
zghSe_5joui+^YXa6(3w$q!j~Y$r|bbWb5kgLizYbhGv0{03o|6hxAXu4q?he4EhNu
zg?kvddBb;Lm=E^&NpIB*VKCOLf(Wgd3Xz??>MX@D+V|tXe{Wob&VwAoLk-t}Z{}=5
zXx_YD=F3S?Mh{i_ZRM7L=@Cb0ZlFw~@aZm@l({-tRN=texHTgm6tyBDszqvFgpKI=
z=$*e|h!vKsS@1DeYx;Ar>4syB$za6W3#A`#QSHTP@wRmfM{`4vPOGF7MFQa?{8Wrv
zzQ|K~7AqUa7Yvf1C@1+D7zs*V0w%F*n;HY>Po6HmNMNpNtOM6B!d21_+Fk;tv&3(6
z_LFD0AwHg(e;)PUl-j!ayz5Opqldrd&iY*U=ky(Ba1SmG=Fk1sbVb4>)AB=8K4gkq
zSxx6cP;Pt;Jk!&Z^BytGZ+hgbiYTvujsjce6FYfG#eXu_P?$laP5?6V`?TkSfnFhU
zTM3#aV>vPZBo)XgXa-Y10W))mqg7p4-ehH2U{v1pPTJ*Ml~v@0Yx#TJFJ|PN9V(z9
zT5axR45phZ4OD~B1XER)T&{~U=VV09ok#<rguUe;JSDxkfEQ7Eg(}i!bmPhWt*Hir
zCDY{5YILqgdF*1hr|B4Xx}QGE(#$P8?nizuHFI6S^|RJ;@1->LUdAI0IbGnWX~CBr
zgY|97aCqWUZ*AV-TsseWZW<lb<0C)CY%|Vd=oBS+&ItuQN9xS5g_#C#eE*cq(=%{R
zt(egkU;mgW1n+`rrTe@+>eF9a$)Vq`jx*T-+OGNi%xYiwe)?$!<XP;P(Ov8)c+hCI
z(NSX*%K-i82d2$kIJb)O+j)db_UKnXMC!Mcd%q4*07pb$#t^WefhL^=%8*_dk3BG}
z@X*aY-vz{!ot=EJ^h(}K%b82IYNOb<3HU~O$a495wYOJC?y_}ekneZ@oKMdtgLkcP
zq)CS=B&CLF$BY4QVlYTwmrKEFq$Lj~`9(Xo{Xrw}JSUy#t*)&8s{P=Um6tpvq;Uhi
z3~X-~q<7^dF|6a;8%9WmcyQ9xh)Sy@cLTPhgM8DVDM}5__9%zgL?$(b%22w!CWZkl
zVmx4WhOwdt)Kk-1JniR(E7s56Zq%pBuHZPqf8t^@8^Onkvs-5$?uif_Q7z%)@Tg^6
z1%T*@C5Z!+teueNS(Eb3Jsg5^ThR}~tO&%oTAQ`7{lrW?Z3Nd^)~Xofk|@$bMwE9u
zivz1oCU5^Q+|~;r$H>c`esJ438%j3$I)-rOE_g20yW&a+ls?t+u~r0#&F2?YJSkrT
zmoEfN46Ms#R!`;hp?%z(56UIh%<8c9)G<K!Dq}RV75nx}T6uF`5p+0ja{>}85>&wN
z2%gh8c3$D~7;qxUR0|L?d-n&9B`dac{qVm~E-%b5g>bBlJ<nDxp~h}Yv}<0b8;$Gv
zwm^vwe$+L|JQ5-cu`<O+`<nz*>h$afuY(~k9owe3t6zv1Y_mfxK=L(g1BQ9wj>ns|
z0W>F(80nyDv*3MLJT%zNl~~n}wTb83w<$N$FJ?bqn+3BFKE9nJX@7Ns_l}5y)?Hlz
zD>p7uN0>hZ`!V!8I71ArYXf(Wv{4<?L2mwGcG<seYt4)1kT`GnSj>bL`V2<{N@*CG
zS?cEQgFrPs@;ILD_YduuzILS)n^6g#Q-40w_L+7&SQJ*4JI<nAIK%b{D#C=w_I(Tk
zl4dfI_7vv9=F-X1X7W-*Ea}i{5Vb}SxWi;BxrkKKe#-<TUdvnql3d(N!a&??eXP#K
zSLc|TE(|l)D+7W)t$)n{E6~@-B#2gJWew}q3A@(!w9s6Zj{a_jM}D!xkU95Aa%WD{
zDUk$VF+c@TVJHxeR+Sbm3UD!F7qxJ(K(pMGFI0}BI~5A+^tuOBX1BMk?-n2M+`2)3
zZ|W(vqFG{RPmVD$4)5;pYsZ>8oPZJG8kl`g*g0A9ey=5!C+x`!kRl4cVs4h5`Rni?
zoxz<(R`F;A@}{B7P**0?LR(C7b$L{uA!mj|^RY387$1}em8bD6#fGy9QppQytPJ6)
zJzT^Nir{Kt2}Zuo%`}N=#b9_ld)sl$!KM(ZIKEpZ&fO=OZz#=s$5m~Dy{buMBebP;
z0&?wvUQd%q-Y!0n=Cf4cNm#}BKac1)vW2r8H@XCN3j|Xb?er7pL&WB(q#X__lDXU-
zN-rt6FQcsC2AT2TA=D#tCh_Nx0riZ{)jiI4%|i|{IgLee5}wKqC*JF#tKd>FG(CVM
z_9dHiDyt~4dB^}DD_qp%%h?m)&o0(28;b4ve>*^cgVLVFbzJQ43n>k^vjHZ)Z1OUO
zZdOeI7;*)6FUoAf*7u)lrq>_p*C}2Q)O0IMy@wXEQxE{orP91cb*cX?>ifNS)GcG}
zqTUc60LN|5FrH9T4iuW7j;@6w@z0u%rZ}NJ-(HLPmq?aq)W~fV7UXR$?!k$U1;0Mi
zR4eOt(5wbRs|@gCsOS?43-WU!Aw~JT9GAx^UI%b2QaBLcBlrwPF;{9Z%+@pE-+sCU
z+(&H<w+=J0h2NLoj`)IJk@p}oGwt`T2pA@)8&NA4dZ(hpVu%&M)}e_u(!3)KQL9m0
zt?uA^ngdGkE=bDCvK)3HrbcA4(8IVsmux@#un9F;H!!g#o#}}SuoB62v+^}r<Ujgv
zZzV1b$A9yF&uWvRvB`_PrtS4GdZKmX{rP#7{6U4MvRbs41UN;ix|AdFU15>_4gRBA
zQRO=#2YOMPYnqsBJ{ElTa9D;E-B<@gXjV)ALx~LBemnZ~(2Bw6lAur}L7+WZv_t@?
zNN7V@{C?F+x_chy02uPb4^SF81$5N3cxyp-)lgxPBw$h{^zaOCU<x0IWB7c=peN?X
z_$UnU5H7j!Ay$73YKPyd$OZ4as+wkC_d~$8GPeY?aYN<~aRfo!6ZO(?_6^>Lk2ei^
z9x!3{mT*q-53wz~&7Z;^bjPTL#E-V{&iK;|7<+#Tn9OZND!jAsfW@=ZLO@-)E%@7t
zVGylow)l}N>vB`caQSwGB?lvXRiwLFfV%6!xfZT+LL<Xg*-C*FzzNMLQC&h;f20m}
z8F}es$cV(6DhY;Y%0@ZpBobGw-za2`R^MNy80DRj{$tcBTjr-ZIeb&^d*g9$Tf1;!
zVg3AGP%i+?+$_d3Nnq3yd)wwKg=n|=0nFeRwRm3tVZ2W6HoH<`k7)B4(PrOOsSx<3
z_tnsEq)sRsO8KaaVQRUg99PeV$H!bEIcatUFCVf4iMs;Ml(^1IGmv?-gUa5BBrF`q
zG0U%@8Ma$DIqrN(;3o7G#|IE83T*G=(t4nSPKH|KTzn$`{Q=m}g7Mo8<x4-V@!-wl
zzbF`o&h>Bw$AFaf{W6bmb8t#-rqu{lQVz7{mikuNz`?f**u6|onh4<?hXUL}@#kPa
z3gxt-uS>K@WaUE^vZJkmBFH3Ge;(KfYA&*aS5U-Fw({cVjoz7>)6l5P*FW;u+9!eG
zN!O^(u0pfJvzU<H2DWkWf<5y|c3jAaPVX~0uPd=>n4dEKCljK(Hw=L5!nT=-r~`#2
zvW%?4rmGo4j9hdH%c^bR-{iW(T#4kOGR{(QTFY>jctVbNsuRJxi@~TEO_g13sbCD;
z)~B+-0DU=uDhr$Z>NP0<NW)1)7Cb0=L`-X9<8lA+O8eb_^X(p8?;UIwpph?zla-?X
zMoyB)(KjefHlt^W0|?unT<6NAjb-AhGo$j}ucfU!QA14U81R<jb_5dF$MU5Ks%1-r
z_*u#ax49d^*S$n8ml&T6wi&U5(12UN;4XYft~PFDlc6xH>W#6xW423_M6P_00c3Q=
z$kz54kGrj4z1%0s=Wt?gPkVFd2$S#Zl~B4$>B-<L)2D^V{r6~4aoP~z{Y~Ul=QdQ5
ztHU!J2as4y5D!)IcSm+Z@Za$E%KQ?`FL=N)eMvLi@P05R24uTOrHOQNRaZ)ZNG$c!
zi%1Y#TZK)&Z^JZMvyjO$x>a;N`IGAH>WWAFiwzL?Z~&~Rlb>ey1K|PqTRxx5#p*x+
zC}*d~OR*WciGFrUv`CkR<o}L5P?<d6B6$9WSSO6&uq9t16b@Xzk-gG4e;8p6876M;
zZt`XA-b1O4O}E*Yhfc2d-d2bM5}|2ew-mJ+xGi3%v+bpN8c;lP?lQf+>&ckscls#$
z1Du!4wB>TWD!Hm|`gWqYf+oV>Av?g`hF`FI6LL8$a+q!q;fYZW`lOWvPP-24E}^JN
zWg?*=puQs1>!_NxH%NIl5@ju@e3&F%I!~)ZGs!`kOU{ME-p}gR<Mv95F<A5Mh|a00
zlu75ob;If?Gc_ZSCG|G@5cR;{zGmJAtafb{=dVN9n>+qxZ!h5Or6Fq#CN4fogh!$p
z;72AdsVs+sCd@5-0ny6>Lcen|*dcLs-Q5h-o*;L9Rk2Hg@Zn<kGz565o1P^b^IS(~
zk(IuQ^$50<%N&E-4=|A%MhIE)rAi4sA2zo9g!^7R?l^f&EhY3RClF@*A%R#W7bGX#
zXU!6tKlJ-)1q}Z|CM2Dp<XMcI-lDv62Bt#5^Lk>Fo4Z`U00PqNSSw6AFJZG|pX(5p
z!L#g&D56xjHmFGw3X^6Axtkn#QquZCr*8mCb-}!~9W>@b(Mr>}RtCzX?k=fmsy92$
zW+1If+J*5Nv2d$xKUt<nF^xOzu3#ZtBtpLC`1x#{#<0+g+)vYtG{+vpQ@%j=r&M-A
zUT9qJ$GN_qe;x&UE#^e#Dn+&iLz)K9aY8zZaxl%fr^jls?g${n<^D$Jjny{kPtGB{
zt`nkHPI<92-rylgHu|qJ9X3Wq%Ouoi#_g0mlzh<%CKi5-k;W(%J=$RMeJ=Y8^r}&u
zwN^FmU;fHotEi~X;X#E}<6W$0$(q^S!DrR?P}_--niDRFQzj4cipM|?UG;VDXX4e`
zC$pLPKjOHzVU@FPGfE#+XSh7!&-j__MqMm%Ul+qG@B%IfwLxg7L&}E=u6M1MikAp_
z(UqTHByjX1Y?`Veuf@v^Ze;Dpl}aOvhCGvCt1K^vLFXO#n}W1T;D|MlFs)?-%=nX?
z^*>n4`~MC+I4X`JUT1S4uAg3ZQ_bm?7d(Cllo!C^@Pq-(Trn6TuF(IWAH^B+1*5?j
z37sa9!us$R`v@~E)ezg&XzhL4Mn9`>+U%Gi?@GKGP+gyfp6%Fu2#l=8xPm=3$r$-2
zo(=jx+4=`I?6q@widX*jZk#yb3$@elMv=~f^!J{lsH7DH+XckEi}?e?>`(zy?5A{D
zbc9zZGrGkxU6o423sYU;ORH`wbn>eYbvV%PDRKP|*(cs@XaRV|dl?><OAlwqxLBo@
zQ6_$JphSuhP8hw<Q!0-d(Lp6y>W^>DR~7Xr>0-OALrL9ZkIPe6{7U58Omo{dwNesW
zqBM;J+V;@@t*?*DV_Es4O3m0P>Sf14QGn`je;`YP1^u7p0Xca@2cu7@Heg5x@Yk4*
z2k3NBOHzyLc1w-J3_0#e(q7OWg^=_}E-hkQh5?H*t7`}(FONgWJnjkog}&8K(Stfo
z;I3mvVu&$;9?_tA$$<-6(`51PQ?@VeW0d4S1L0*g(JfHRhhklR)ce{ea=t?R1DlyN
zHWBJDTd?hap$o|<ct6YRU|a5Bv(W+#?FY0pG!PBwj;SeB9;4s&a9M(fXuZrP7~5xe
zV^MWc2Q6o4MFjF<W05|^`BIsGeXo=x<$FJ<Pd5U${~$lIXPsQfq*s!=lXHE~OdUqA
zJ#({W)?k*6;Nj{18!Jrm+$WoGe?onU-iUBjIm9xzFdL48i@>zQlg?{OZLGvLzoYBp
z4@2)5cE>vENlWz+VT9jQ`n(pO>MLX~A_<-#yzcvCqI1C+(?Gcg)V@6fHTpkOMYqU8
zb&Vt5<G^-|e1C2~!Ny2x=|B++ay7%R^r;Dy>o@=V9%qec+=DQ8A!?Wz$YAXVJI|K%
zOZ?a#P~_yA+TBFZU6huN(i12Nr=8(HzKO;qcl9G6);=s2OY6b3v9`4|Y5d4-SF5bd
zDh(&MAb9@tNXN{;oGAA?TiLl&--L{5W%=(VN`PybC`GHK(mAK=-gL}bjdy+1)lREM
zFTLb}$`%#*%EZ+oOH_5Q@h<Sm?kR$ccKoFeCNjmf<z(yx++}%c>IgtcAu~_zDw>~8
za1GE$|CWY_3;2@ExnlZZ04HcM(@~uP{-<n(0awLui!LPYZ}8J7?lscP_>>LbhoAQC
zT-b5R<g6EbYF*jQ(}>C?x&m@lst<ayrsgCg;g2hoEe7r>?Zw~8H))IvjD})SWNkB$
z7}#)o>$`|GHN3L`q{jjze~GGOZd=!IM1tAT1x{nw{Dry?q$SEe&n-i+>+cnm`2<^|
z!x=d8&B1;<)b+2MCVdZB+9zSl?M0Oi*0!TY#%z;*yFD5fQof$|z2w<$u+8mkdOzrF
zn2UVvLD<k5Bc4bMD#ZZiZ*#BJOp2S@8?G|P7nJTs@RIwf0L5v#K@keqsBd=MyGi^t
z&l88!aTzGb&+l19E+2jdWl(mcMTr+<M9_M!k+gMduT*iMoVuRAQu^Unqd-~E>2aT2
zGe*U?IkP3UhIO=V0-;HOC`-w_6mtIyp}Dt+Li4WNfKD0oEA30m+vOKN%l~fxYvnPm
zCOut;@cqXVlQu(5D@A75d@xKiw_#6(Nw^FqkU1cGE`V0L9<ecHU#nJ95s>&)4nO77
z^D%dmJ4$Ywo+6Mhu2HuV&^U28z`P<h*}=9u=Duln#iV4lhk^dsGJSQOu1vfkXJ~rz
zqI>&$DAeKkY&GV-T10xffAuv0w`~$r#vza)wlW3VBWLNl?++$%&=jAA4&LeaCyCsQ
zk7-$?E`BoIe#Q>?&j=}-M)Lj!#+cp@KXCjdz6ULt$?W=n&Lp)PQvxKIVC;mCf*Bew
zXy?Wrcpfm9nx#Aehp4ZDl9O)gk9SKz9a?p#G9A%7tWXD3+j}6>S086<#9=i(OcG;w
z;4(61{gQkx^qHyWI%`IMO)c}}><h|8TfpNw)mO{S_NQ6JJw;5tmKxf>;enU8xwHxY
zp^s42Rf-h0UgDRh+<$=^$B27&o0=kJtjJU2r|mJnI0^a}&p4%=$LHoA21wpOI9w(J
zJRL4==Wnz1DrY)I>~N3gx8zaJk7;RZ*s9T7iaoJqk`2VYoc32VAa*X+Ntkjn@Tzm+
zsMhJzg0KTImW(a{s|h@V?4l1Z82gFd6rzDU6g)8{w~95p)C!D}Zwzj>)UV~lM?K;g
zYvMmfNCCU@B9m#&+l8If_wvbtOyu%(oWHm#hCToNaadv(eq6YGU<4wA10zcnC`$wh
z_4xY5#L2JN@;{P;s;XM?If`8_rsauPNa-&}&$w7PiBk&~2swnV1$k&obISUBz_bV2
zs%kx0S|V|HW7>|%8lN!VWNI;pjk;&fQ~15ql5DmXBF=BfO5@}7IkxVB2qxcYr$xC<
zIot2b_T}yT2CE#2e^<c3N7)OF+Ml6~C<<L<<7(roGEfGdhdO#R@K5Eti0cNrRMzK_
zrSPeqe2b+1EW64Y@9LUDvZNvdaZca-b4}u?T>R1UqI&h=+s;p){>(ph=G>cqa0@E)
zdW}|PK?gJBw#5<B-ewhKP->)Ugn@>noi+zg%?fg6dn9SgF74&*jwg>&jiyZ`Ae?z%
zZp>7MMO$f$<oHPbMs#bA*@(-`C86!MZAYkrJKXwD9Wbuq*|<|JGrK{%?4&K-?D7B7
zXeR>~^`BKCgMQV$2|7`H*N@Bu>fs7u#C(yt&~m3mA9z~Dv0KjmwPKM$|9)GA$~na<
zHK`(WB0aj(W2(CAZ9(L6oBk^-@I6AqKRc5c^7#-=!y~Rx7KpqLLDM&2Xwb2Q=V~J`
zD)xXPT~+W!8&e$OXMu_zU^6DDj#&71-<<5!D=sp&zF*w>*7tzvl$)fBK*A1B-*5(U
zCVNe<hbcX-A>yQCKeK7a3J=bKv#H|4F0yjU0=}2RKecb}0;fi1t71VLg~RXAMKUBM
z{ceR;6G2de*Y~No`sCB&_r&um&q`T?VJ#<>2?nO%ShcNeBFt@WZA=^^!fKblFvYS9
z2O4QDJwb>^-L$_wK%PgmzA^MT5HL*4;dwnu<^#omkXIZ#yp~4Syi@4|=;O1~<i^g+
z6bJ81a^U~Di^FhaRf$yDiRx_A-=dx}<>>X8*g^7{JD}Cd%oFy>B_Jtcwl;_c>G^Y|
z>HyHiq&hKfNq%whY%w8)<J{V*7(#poESOo4y|a|c@e=8mpv#+3XNWA7q_45Y$LGu;
z<`;uM`2LXGqQ|Gb5W7mV$+vl*zom2JOY93~*|_LXKWa^O9koe_=*bS5M@K<JVa?0y
zKylW+(gHjfHfle$r(~Z@^$|EmF6?g)PX4rz^~9|>M<0HXJg6sc)Zkdj{Tds+Y0?pI
z1|-m}8`oe{Vg-M1fE6CUl%#~cK<j=As1pG)l>r!}Xnl4I4#MH{BUxx=g{=K}o9lGo
zr?L!q5kr^=(^Tn;fD6#4mrZB*ERKP(y|)ek&z<1gQk}Apx!TD-wTo!Q!sz9DVt^He
z#aK=#NyNu>+5q>Yv^S`0qa~~M19z7mux;4-e91fwuUc1-4l_Y~(Ir=_D8E6o_z%xs
zJp)BVzCIZU49#A1k3D^HJowNTb&6O(at71{s0IJ)Kuu9G*Z=4yn7_aaP#N8jfgJns
zp%AYKDpy&Vf7z~-Q4<NnjN#XTFk6?Lp$nl>?*3m_TiSY&gPhB@gz?rb;Yjbgu^o-V
zqN<JOqdukhFTgz-QglH5U+R-BiJj?n^bED87}lTfwahKvaHHcToz{(uB{Il!>4hvB
z4T<8Mc&DC3cr@0pX0%V)!F1z=_Ifr>m3#U&o7f%1$j;h!;rc56X{hu+;*+C)d#&HF
z^dNGi8`E#H=Qm=g-ZeFp_$<y<#e7NeT_HOE)j}9qDn9&@iy5|LEKqkW8nNbPnAC#n
zvp;*(+Mx$g(^qWueV4{erE|zEry=PQR21oO-6o*fxMyT}R{6A3Erkf_-pkgB`zy|#
z50^85SgBN0AXef_d$??9rMgbZ)<eqJICXQc?E#dK#I@oLD1D)gsJ`Rnr-0g}Jow#$
zZ5%W&`5!RP-4s<{Pz;CQ6oC`_k-*YQv)%zs<l-nrwLn+gIWnI?sQHf}E^ZZsE|YlJ
zG((f=1@DTQ<XRFK6;`ToHY@2XVlc+;uXhygo|$<QdjEMLF`KJMD%uyrc%r?!ZXQl;
zRyP?bPfz9Gnsi0;EjDNC)S&3g*fB%^sJP)!JERr#_(UZYD`rB4A~I}~RB4;LE;_lI
znG*@%+@gK2W|X~Y{;SkgLSnKM;C;Yv(`#;fYI!!eE_OvVxx{QYI|Qbao5Rk%^TbRw
zIq^-5+D!HX=EjYiMCC-v`1+?YP2+mLxl39P?iYtofwxg+?i=vMWU+$C7z-SttFzCr
zLkRgThuX$&egipjl1BGGww<!3A)_<n#eV*?-fFoDVqE{FGT1&@eAvwZ!H8+9OXKsM
zT`M`f=4{J5F#k<|KM5rjP3Ye%Qw|^Ai1Nx~Mg*KpzIB=sz2K@2xd5^lzNZ)~{ir1N
z#}!TgfVb^zJ0p6A>E(sRv9&SD3k;KtZHQ#l=eGfd;*!b1GM#(DVB^G;^=?M`Mk`*N
z%ZDB?q{G^aX%Tj#=X<7qOO_DcE&;Jg<3lGYen04mRc%@6v7di+0u-XVwN8Gb$7Vaa
zd0=up(p<1SyQ*NE2^kJdoip&fQpNYzs+uHV-=p6i?{I}Q`@gna(x`V+1(-I$rARxV
zt!E|=6{&Zx&o)>?+|}p^@;V&lv`RhXAH@m3DhqUhfCGN%>18_IejUhAPPi)049#BC
zT1GSGmU2pJp4&GsT*D#DDxg{g3Zr^fWH4rHgKU*Zv!VtswR@_<!0%i~f;Yy1h-6(J
zT0C=8Lnd35M!AXho08<TkleTd%FP+rd0&_KO;+uEaMP8r^ElqaJFX?mU21fMW9Ub)
z7%k?^dpC34S?)K~alzaZkv+TFM{99Goqv7oUt=qv4Zo=n(O!J4dJs2;5m04jm;mFO
zwq07i3g-*HNdWk+d<?0%loObhd1)NNO2X3?d2~~<qAD?rQ+!3@v3q{a{l710QbbU-
z5niy2r2EwT%z3gsvQ}-ZIxB6a!ZtHpMHWq_;|!NQrXPU#iVI>1+|FyUFVNo1X((Qs
z4_ASfvJ2co8wg>%EKXsip(Wm8RsD*~g3Lyne4-^LCdj?(UHQA?&bo!|olZVesyGb?
zxO5@0Ve?uR-+KRTH@|Nihpy>4i<*s^pX=J9+>ub-oams*C%xILG^H72FK+&|pF2}$
zn1#d{C~S4N3DMG}A+Gs_$)l|cZw)Coi~VJg9&?YuV1V-cAI$;ox4fd5^#u*2_lwf%
zO8xM3KhhUSw-Qgv1F-9<Rm|8Y1~nvEmL(Tk(Pm~Z2y)T)G`}WMbcG)=JczJiu@&0O
z@(+D+t}Hx32a05}Pz7V|*lrRgQDd7GqH6STolua{rBMOYUZy7*Lfmw>h_;l;zHcwU
zC@IFpxH44jF_daq60Yvg7`2qQ3p)QV1NKuyH-ngek_R@Qol@Mx7d(pL<u#W#5j4;2
zB;cZ9^(0=1BWqa8yemjtKar0*0dU-97K9U9UWL*;Mou8G8%tuc`mqJ^MX{T|mpn8t
zq}RiQ2Vb_2VPa``M5_b9JodmVJ+5c~B=+&0j4PIEN5%4ze4V!c#tZ&?uwML!LU)hR
z_v>Q2s3Nc27hnVHeAShvKGMM5@uhWjhZ3_(ZDR*qwbhp0%9NrblD1FKJi$ehS@H_X
zZg88Nw1kw0))Di(SmUd0wFJ`<J@F%53KvqF^gt?Te&h;#2Ose#A52r~^h52xc~U#H
tT%L4)25qO+Q0|fv`^U_O1TWMNSsl{&1i+<nI}M8Dpfjj#rMb_vVb2ITS|tDg

literal 0
HcmV?d00001

diff --git a/MikroGig/20260711/20260711210146-Config.rsc b/MikroGig/20260711/20260711210146-Config.rsc
new file mode 100644
index 0000000..729259a
--- /dev/null
+++ b/MikroGig/20260711/20260711210146-Config.rsc
@@ -0,0 +1,3337 @@
+# 2026-07-11 21:01:47 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+/interface wireless
+# managed by CAPsMAN
+# channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wps-mode=disabled
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/interface veth
+add address=172.20.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+    gateway=172.20.0.1 gateway6="" name=veth-awgVDSina
+/interface wireguard
+add disabled=yes listen-port=12430 mtu=1360 name=wg-awgVDSina
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
+/interface list
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroTik
+/routing table
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/728/bebacfc7\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 11:00:05 30.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add comment=Generator dont-require-permissions=no name=AWG-VDSina owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# ============================================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-06-30 22:08:12\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\
+    yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\
+    QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":44044\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=8.8.8.8\r\
+    \n#/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina dista\
+    nce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n"
+add comment=awgVDSina dont-require-permissions=no name=awgVDSina-uninstall \
+    owner=Manager policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n  :put \"Uninstalling AmneziaWG...\"\r\
+    \n  :log info \"Uninstalling AmneziaWG...\"\r\
+    \n  /ip/route/remove [find where comment=awgVDSina-tunnel]\r\
+    \n  :do { /tool/netwatch/remove [find where comment=Monitor-AWGVDSINA] } o\
+    n-error={}\r\
+    \n  :do { /ip/route/remove [find where comment=Monitor-AWGVDSINA] } on-err\
+    or={}\r\
+    \n  /container/stop [find where interface=veth-awgVDSina]\r\
+    \n  :delay 7s\r\
+    \n  /interface/list/member/remove [find where interface=wg-awgVDSina]\r\
+    \n  /container/remove [find where interface=veth-awgVDSina]\r\
+    \n  /container/envs/remove [find where list=\"awgVDSina-env\"]\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awgVDSina\"]\r\
+    \n  /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awgVDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awgVDSina\
+    \"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awgVDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awgVDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awgVDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=\"disk1/awgVDSina\"] } on-error={}\
+    \r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awgVDSina-uninstall]\r\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container config
+set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+    amsternl
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+add bridge=Bridge-LAN interface=ether1
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0,::/0 disabled=yes endpoint-address=172.20.0.2 \
+    endpoint-port=51820 interface=wg-awgVDSina name=awgVDSina \
+    persistent-keepalive=27s public-key=\
+    "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=Bridge-LAN network=10.30.30.0
+add address=172.20.0.1/30 interface=veth-awgVDSina network=172.20.0.0
+add address=10.9.0.2 interface=wg-awgVDSina network=10.9.0.2
+/ip dns
+set allow-remote-requests=yes servers=8.8.8.8
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+add action=dst-nat chain=dstnat disabled=yes dst-port=443 in-interface=ether1 \
+    protocol=udp to-addresses=10.9.9.2 to-ports=55055
+add action=dst-nat chain=dstnat disabled=yes dst-port=9443 in-interface=\
+    ether1 protocol=tcp to-addresses=10.9.9.2 to-ports=443
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    10.30.30.81 routing-table=main scope=30 target-scope=10
+add comment=Monitor-AWGVDSINA distance=1 dst-address=9.9.9.9/32 gateway=\
+    wg-awgVDSina
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=veth-awgVDSina type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=Generator name=awg-VDSina on-event="# ============================\
+    ================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-07-01 00:03:43\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+    kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+    AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=109.107.177.79\r\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-07-01 start-time=02:03:59
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool netwatch
+add comment=Monitor-AWGVDSINA down-script=\
+    "/ip route disable [find comment=\"Route-AWGVDSINA\"]" host=9.9.9.9 \
+    interval=10s packet-count=5 thr-avg=0ms thr-loss-count=4 timeout=5s type=\
+    icmp up-script="/ip route enable [find comment=\"Route-AWGVDSINA\"]"
diff --git a/MikroGig/history/20260711/20260711210146-Diff-Config.rsc b/MikroGig/history/20260711/20260711210146-Diff-Config.rsc
new file mode 100644
index 0000000..7700481
--- /dev/null
+++ b/MikroGig/history/20260711/20260711210146-Diff-Config.rsc
@@ -0,0 +1,4 @@
+11c11
+< # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+---
+> # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
diff --git a/MikroMaster/20260711/20260711200003-Config.rsc b/MikroMaster/20260711/20260711200003-Config.rsc
new file mode 100644
index 0000000..809894c
--- /dev/null
+++ b/MikroMaster/20260711/20260711200003-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-11 20:00:08 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260711/20260711202002-Config.rsc b/MikroMaster/20260711/20260711202002-Config.rsc
new file mode 100644
index 0000000..ddae42e
--- /dev/null
+++ b/MikroMaster/20260711/20260711202002-Config.rsc
@@ -0,0 +1,3843 @@
+# 2026-07-11 20:20:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+#error exporting "/interface/macsec/profile" (timeout)
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+#error exporting "/queue/interface" (timeout)
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260711/20260711204002-Config.rsc b/MikroMaster/20260711/20260711204002-Config.rsc
new file mode 100644
index 0000000..0fd2112
--- /dev/null
+++ b/MikroMaster/20260711/20260711204002-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-11 20:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc
deleted file mode 100644
index c3dd41f..0000000
--- a/MikroMaster/tmp/Diff-Config.rsc
+++ /dev/null
@@ -1,3 +0,0 @@
-33,34d32
-< #error exporting "/disk" (timeout)
-< #error exporting "/interface/ethernet/switch" (timeout)
-- 
2.52.0