From 6ad5bd5eb225aea662a64e287cc9ddab11a5abb5 Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Sun, 12 Jul 2026 21:01:54 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jul 12 21:01:54.

---
 .../20260712/20260712210151-Binary.backup     |  Bin 0 -> 194200 bytes
 .../20260712/20260712210151-Config.rsc        | 1324 +++++-
 .../20260712/20260712210151-Diff-Config.rsc   |    4 +
 .../20260712/20260712194001-Config.rsc        | 3843 +++++++++++++++++
 .../20260712/20260712200002-Config.rsc        | 3841 ++++++++++++++++
 5 files changed, 8880 insertions(+), 132 deletions(-)
 create mode 100644 MikroGig/20260712/20260712210151-Binary.backup
 rename MikroMaster/tmp/Config.rsc => MikroGig/20260712/20260712210151-Config.rsc (60%)
 create mode 100644 MikroGig/history/20260712/20260712210151-Diff-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712194001-Config.rsc
 create mode 100644 MikroMaster/20260712/20260712200002-Config.rsc

diff --git a/MikroGig/20260712/20260712210151-Binary.backup b/MikroGig/20260712/20260712210151-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..b1a92bbdbc1904bd9ce6ded8833d3d2120341910
GIT binary patch
literal 194200
zcmV+aKLEh*sF8D+_5uLy7tLlbv0*z9sDo;Ks!dq{0002|`~QBR1O)(C!s&J((9`(4
zX!kq+w7e)izUcW|Jr@`_gIuCSmsuZfKXvujKHMMbAf>>z-yKxo82Q(XDa?r0$JxH)
z@zd<QvPTcV4-9AvWECcUz=&^iO>S-E4o+e^#Mu9!_g9?|>N;xkfT9yQqFdQE*wvCT
zk|gam=L5Ua;;>kRuxOdL_=!G#YA;u^S>FE7;IBIxl)lH+-cMdpXT0h{vQaR*zl$dc
zkcOdEGAjspUlb+k7+*`~ObgC~0fs6$`GnuC7F90Yvy+j-<I-H;GIu~|U2aK^4-85S
z$#xQ6Gh4>jR{|b$c`em?<@{y1x##i{j)^}mv(MJL(8eYjJ6lgh%R}~&v@_L&pXH=c
z{!+yJw|UtRi1FKjzKtZ{T7aG|e5(?u!7ESi7qltFo`Yu86?W=3Fit9x=-x2avftV`
zfncRP4}WPv(z;lPv&S5<-I=ka(7WsAonz8?RKBOnfK5t^a!~RBU|f**WW0kD2rDf3
zOLgRsJanQRV;7}nJ^>PKD=5^2M|AOgYtvHd+4SrJyoeDFJa{Gx<i#`bk*Eb<M5T|Q
z%|hSioPp9g{_j<>IpAHV^s)*^;4uw62u5{l7o1vk_7oKOv9J^WBc^YwFhN14#^oRW
zX(&Oh>w=E`<c;uLA*l(Hj&<iP>Da$}F0d1;%jmT@l%si^6+4Ridarw;gnO2`y9B-;
zeeALHm^v46!cJX9H1~bHBtG|m0rq<oWyj`|5KVhiPvPMV@_>55S0<ZiD5h7?#5pbZ
zckpRfQaA~t^aJF)P<=z5{V2aZIuHYl$5^A(ZY<u}+_|A%a~<j-ASip~lkMT^D%$#p
zz62tcz7B{cm8SCF`|)+`^>~F=M9H=(fV4!lgvJDZ;X8JHHx(2!KJ>t@yG6dxg!26u
zGQuaj>CTy6u%`K0dhsT<UCSF3RF{Fe@YqhMzq!vY?=e}VslXD!K5v(^<KVK4sFBwx
zKom_rE$!p2maj~2dH5@kj!UAG1rhZ;TkUMt+c~b4m+I-3y?-6bxO3!e@wO8^XDG2i
zEQ4*~pABtG(<TxV?YbKV)l5oy8$_tv-)+KDIb>QW5$ZqiLq;F2m4f}y`aLhtagpoc
zzX`N3C{9I*WZ?fp>}>FQfM-}RX~KECWb=?SbrH}v9eqj(njNz4GdN3e9%)JTszD)5
zoAsY9Ckh+c3>vp7LVkmqp>?$oHKbwJ2R%v*M*NNc0sYx55p2V4k4)t^b7;E&0sxT7
zJ5GHQr4AX}W_-MsF`E*>Z6$Vr&2@+OWt9c=e2^^rGj^*2SGWwEVMips<p2Iwrrfm)
z`5hq31(t|7y^Rb&a8hBbCJP1<^tkl7p_BLbl<PLD9C?C43lNif@uqq#1qvQdSO-5M
z=_v1whSa>vt-{Q9O)V$>_-!Ulfk<e*>h!Kl2!%xG=ds0UVeqo4JM5BoDzBfD)5z=<
z&(_-yChU4qaR9@=uWEz#7zMFoE=~r=W_FTwZ7m|WZB%O%9%{9jImAT8=mr2?sLXDl
z+SEXDZA+7ZS5gN3@R^Dhm60VMe&$anf6NL>d!H#8q^$aSb%04)%63hHbGEr&&5Lk<
zU+>PGf1k4)j=|45|7v|N6J}_gL<45L;Aid<iSRtsyPQ=SYzq^!mL(E9)E)>M^y5@y
z(o@#oCE)e;%u;v>smdYmLN8M<TjT!^>wAX<KgST#ajB|2l<bejq?gyX(J%0L`#0`&
zHwLknCF-dAc4lZX_}Gowj2J4|Q>Gt3wC*|Y_YJDb;?I@L+lPkQuV9UaxEL96!g{Cs
zdH0UoR#5btRYf*nvm`kS5Lvj=&G4>svC_Ga?0KSRh+Ne?_DfgV5rF?;&Hi#i$w%tk
z93v2YWwZk~tMXEg9f_eSF{dYc-J<W^XU*A5(Evj|=caI9^OlqXiI-k4C;-PqXrBoy
zr$1~Djbw8|NrX8XEw+JTut(D`6(~YCL+(61<gnaX`QeD6T3adQk$W2WlhuKFN`!9D
zG^{B{yE}Ha(Y<*GGi-xe7rWk8Y#zQ*4>22%SY)B(hkJZ+T`icq`eCE+FA0X?s-2Rj
zBpXkXIUs*iu0K9`3k0^A3fmGq6fAq1PuvK)0Dm3^;wmReAjx(o8X9<ay^X)}QLjK-
zwzhl$K18$o#?*BV+ky%bP@<z1A8jq^x?ZeQPbHo)xSuoRwDQzSYkPj^`JJ#fOKt;6
z#P(p?fHSfE#bS(>RU-}l=GC=UdC2OP<H<5aYh@Sf*r8SK+Apk_kWyGq@6SM#`@?P{
z9&do(23!lJ=p&s;%78YlZCjb9(gR4+d<_I^%is&0#<mu6B=|iUbKKImj%?OYUz7$e
zcPV5|`2CKDClk?OwIanwOGDScEQIS}I7#vdaMR=u@K(kOPxt+w@2UO`^#NfLQJdQ+
zL*P>mNwE5Q%@sxI9#l#Ptep6nbYuolU7r>FF?11PnN{5iPyYtpuwy4B^$**^R?>2&
zqydvfwi*Uj6IfCBHgJ|uKaT-{oo#}RmXREq?dG~W+@pUf1-;L7plae92CoKG8WI8m
z>_RdWdJvM{-z=u9#S6y8Fz4Kc)_WqLbu2c7JqttD2Z-1gu;}F3Cl_)$50Se%tuQO>
zmR?8Ht1=}X#hm!cG>~6m(wGfee@t@}dDT53^tNX&r{8-17RaYm#2TVlM>!Zgce_It
zZ39TC2O+fpeKgDD8DpFeD;KWQ%mNWMm83Kp@+^$oz^3-jzB~1Z+4kQzKLPhMNt-pd
z@w~3EP@bHxfk@fYnWm~JsiBP${~VH^Gms-49wIVPP{c-VE1_3C`k)=n@}aSP&?10W
zF^4>FMjD|TlYl;`5|C9h=58O0WbNZ5ts@B?3ntqndr~VQ%uP6CDT*T(v2nvh$-K3c
zInXxm&tvDeLBVCG_Qc#84F<-n9r$&L)tqc&lfP;uH@0~TWtYv#KBZ4wiSp8UygLYy
z%7F<B*THmsK-&lzP5$Bi!#0-1U%p}%kO4leKB-kS?f9^1S>p4QvQkIX99dF0K0RX$
z8!$-SGuIM`j}G>;b@xYnP?cyLoA_p)zv0`5=oAIeB!F+;<TxLt(0E^z;PfpZwB*HP
zYsf@T<Sb}b0k{<^1%BZ=jS6~d-eMyxgz%|P21c{$JlHM3c*Do6&4Ijm;R*Cc)=0Y|
zEDsRE!Fao@uouwA1<gfaR+CBbUV+XkM;|0r-!mSOqDP<rnZk|WPw;d~&vny)ln_I#
z*<}y@MwH4JqLta-j{SxZ$`?V%a6^u==8r{=f!#dGFm^&I&}_;`{LOCJrG<$1?5C}t
zxbWhPJ7k<C4N+6N+LOD=0-bnn(Nf&XMW<|&u|0~pEnxb>V1+Ob_5vzZ^t+0~hkp(R
zHW=*Jok3mhS}{bu*|6+V1ixa+voAKvlKrH8CVKx8^ZWBYlBEhOf<q8*KBFE`#;#C=
zWh*ojkOof~ARqwyZnJ=VCtQZ5JGEDE*F^lek-goaMUBk(Mi#`CYiOVpe#(L;`q*Yv
zd2@@Y!+7@q#30t&X|UfWc&Yu4j>k{v@jGf8xsb+~T}0j8Znb5h=})$aysz2^QAg}p
z%epCJqMu8nwJ*y^3~~lAq4HrLGbaE3#ae;f{B>{*(bwqGdE&1>=?an<Ghmk@Lggwc
zh?$Ua-g;P9-G1ZpqfNTQfibn5E-KZ6L#qG*j#Rz`qRDS;Bc%$~?xFuDNTMx@;zxO*
zgZJ=k9CPv(692q{W)l1a#Cc;-T<E1L4cBPrMGf4et6t-8GpEVM@ZNwvJgRVApK6^`
zjw09)w*wRWZL*M7I=l$sl|4&7UK&1zkO4=`za!^dBQF0Hx&U>)<-{2QMu=_cYtR*x
z;a6F1idrV!CauwXy3Ky9g_1P5a$%{d2IHiQ<>d3-m!BF0y?5~Ef4k46_}K$<61Xbo
z8r7r!v`_<rH-I!aYlj%DKEz2K!}?fp*6v$OH58Kbk~mF?YDB7g=#28G+{oX_j!9}!
zT_2>Y>Mj?09Gx})IQfhPn&X#LgJ%y*-Ja(ndJ!*&^5XEnvR@<TFtmhsOo#OUs@V|j
zosV~2hOGz?D;cJlkqRp-E}wI=Qg>7k6!&l_C-bNmzdL~1ik(ylcqoRtE%abB@HBi1
zwXhCbQyAa)<Nyy=aoTcxpTi+^^`mbisf?6^n*pubJNM7wL=!e4D#)1qe4~w-4>Xp>
zAfMMqt!~A!uetop=`tdzF&;JGpRt~DFJf-FY=*Ig$KkL|kw;iXA$YO*6pWK|cqi!h
z2@Fz%008(|4f#PLO43j%C9~5b6SmCjJD8L=s^U>o;b9$>3T9BR2&nxx7{!X)xo59q
zoQD7^U#@E@Bz^>CkDj%VsWj!u<S-JY0^uajo^u-~m4_z4k|gd=8ddXmR6^Eda;Oc-
zdN>yskOSW#?QEn_QeV;XD<Hm4Uob(GnjlgP7+k<*X?F>5D?!Q&YKJK!ONGu${%j7y
zr1Ze8pRo2LXuTgFkm;_;E89q1l$tNd?nw$YO%FZCur^VxTk7(U&&cM~4NE!ObXSI+
znu*MXEu~A2gyT%nJNIxBP879g&dvs8%!QH(lQhsnjmuzSoVC*(o43Q>aB@s9d;+l9
zf;kA?0NN2z7?iPWBQo#@;{sG!Rf)!L$ro<WS#ORhKXL5v+N-D16!zaWT!22zs2f%r
zn0!0XQ9N(4z!P_}$wN9Vm*uv~KSmC`l>ChH0O8}+9;_u7RzTU11c&N_Sc*XmQw_R0
zy(})g!U2ExEgPmeGj>k}8B;~Wk(ZnIOjihl0>p&p^(vaaRZ+gpx%lve*6}SKA!<2L
zr)zd^Eb#n{#xuSlGwh1JJPxi=m2n@OCW*Zz#O8FTb`{mzKn(-z&zPs!+wYx1&Ir=Y
zVzz8N!uc7_3Ad<29ewHP$UTntX}fv7ZraX5%bbB=v2PFqu%Srq#ANd((>c_Gw{&ux
z_nOlM&e2eUK%`gVUcMU=hw}arf=2u`A&L?b9uRz`oIHX?H}D1fIj?ErD|U$l9+t}a
zDK^t~iB?ioAM1Oz)C^0@N5V1u)hG?~FVDK?KfMN!Y|jZX+Te$YcbE|}9!n=Owt@Ko
zBn+l;(BziVJOCz65@~Wn)K-uNgpOU}aKD%_i6JBfjzM9{w@~A_wh;d^D`8y%1e*T+
z!XzglrvH%_Xr~tk#d$7@!9`zSqbwpW2`pY>=`p1-Q$ooO*c<D)E%xtb+_do&)^Q7W
zZ_;b!Cg3xWL)i%08!I!6*_{pLH*h*ab5V#BbK!m3Ft^Wb$F!6>UhuUEYxxF5QPb<M
zSsw6RWa09r17t&6Y3X>v(o`i#E`ogZm*~Cf3K1hDxfOeKy*}a^1BoX(_I*k$odZm<
zo>t3+Z(Yl~vCoYjtDkJ%s*3oQyaHlj;};W4Y<4V-B?AHuJy#9d6A)imVph%2cA7lP
zVJQ>3YEFa8(YCz~zD@gl-IBL!$tcBJ1Ndm0usvY|`IL5TFQFqUwjkI8v*>ve9`^@F
zwJWISW##P1dlmcODqrX`rQMk}#r4QIeM3`d!!CQs=hk?PL>^?o3Xsia)X^mf`s7``
z=JvgbQa7UZ@hC;1^tfX_4ON?h#zf_TIQZphCrzRP=QHZ*r8`IkJ?Fc$?Gou6tlxMz
zno11>k^Pjm3bs7dFt)J#kHjbMC6wdYZQR{-$M)rnL08_x<2)<8t#;L3up)X2V=$$N
z*Xf|X7$!freMuCbZj_>E0&Ml9h&GWJx*=Kdz&CHw6+6zg#z2W}eoZb#PE5~5JJYR%
z%cuAKTBDy?5lR`<6S4wPQ9<xI^{0?~-`g{f>j3qvbq`}5FKGbmL78IB1*Mz|6(XSF
zxIANq8)P-;ZyD39aC=#PmQ{mcb<7n_Sl>(ogXWS8ZD$)Sl|#y_f%dS>4JDh(w$iA2
zpUEHFC8oOmzr9iqQ>$8#BeQ#W(DJd=xg4o2+}urz=Y38#9s3(VXAVMQV$X>zXGiBV
z01JjLl!rQmqOT%|!`CPCdhG--zY;_<>*#qwlKE>8Ie;aN!Y`PI)%n@Qsp?^4j)J@R
zv>SZa1n%W%;$8wRF^w1<Q&zliGctMTH~m^h#Fj6#5YYYU)cv=<gk+F*FM*2gfk({f
zo~*R9X1_5<53BEXbsdgC+K9?V-rWE_SGAOwI^a`3=W!1&vCs>1dTO2}2t};bB7h8b
zwd_=P7Iv*+<K`W-^L|{x?Z4k(t2Z!qx*GykXotXN++s%Nl^brZefldn8vyy?^vG&e
z%BviQOq+*^XY%gQ$c1M3e6@+oZr_0=vCF4`41;};&KRrilr4+>6YShhmqVhIb*1-^
z-&?V~RBUQyH2#8&XjwNbM?zw%Q;_lpx;|jj!D^Z7js9>6Ut|voP>L+G#hm=ouNFNl
zv645<A7QxLJu1S^57mb~MCBK;G7!QY2<ajvTyIka?%5)CaeGWiZ$+YKNCwZr;xy6O
ziyyP*@JL_nAUn)4Pt#64bxQ}juO0N7SM69u`HNbBoq+ezUn7LbCL9W4?e^I{w34ZP
zWSeZAkNWy$K5jbgZJ|04I|q)1%1FW}B}9eS{NF$Ra+qvX{$XvDT^zTTd@#%Flyu-y
zd%oMSS6JW7n9)Kdi=k@OJEd(3kc?FJhRepU3u@(QKh@x(Ex+iyjyi9-&BDL>fHG4K
z!o`)1N*3)kPNo3J?!v><DX1!<2-hj~JO2agZjTVE$M#!E{EK}R<3(J!KQ)3*K?x!K
zF8q*`i~faWz>ZdjXHfP61{3OHV&+@|WWWa(27Qj!4qvnvK!8KQ*%_n+z$YHdm<-E)
zXZ+9C743#9luKOH_|<3pXM)bi3iU3J**GnUU%nSbsdnlowhkFY9N-*AQAqiZ)U`;f
z`Q88z+$NZ<A;S3hB$F5Yn=ra!&-e1v--s%_=goKHc2<oas%|5xRkkgeB@k=#mnHq9
zrEX&Vqki9O)C6l>(-B&ksO}7P-0%|Bb1CP32<s~i%N;dL4zZ*p&5Zf>&t4N(=HLb-
zeC=+htf<JT<Lhih98?2k_`(54^t66O^jXD&fKtO@p4L!HU#<{kAjyYgrv8hYg#XLE
zu+PB%4@4`IJyYPoI}{vrxW#hR0LP*d7v1e%se`Nm>C1PA<5wc6bZA%SLzgiIb@zJS
zJDYY>(Gz8Aba3uufME6b8K>XsoA8woZMi!m+sn&VT9s+Qf~ap~l=P8yFbtpwWv#67
z9#DSew>}0ymh{cTo^bCW6_KLC$F#vJ8{Rb*_AtuGOh`(ca#4In_a(+2oK7U$@Ss7e
zat#JFcSv44mk6H^M9GwfVduG_wesAVla%@1^!%jaza+PsIS@&0x*xvpHFZ-p#V?A9
z1nNa{@vI`74>&vC%C($8b^!8f9-vRrJ0*T{vuI8xx+1OxWEYLq!Jver-3sL##R-J)
zb9OZ~c&%U&SG<v!xZKv~p-`+Rzu#%z7Ix1Xdr<ZU(nepsB}CU?5oD0AihCN705Qe@
z-%?{XuF2kU1@UaqF))ukJ!s5LhTF&1nf?_%zN%=dg)aTQd+!>&S5*@}!l$G{kXew_
zxny%>!}y`QnNZ8I+ic#&Uu9c2y$CY##5l!U9&ZmH7u#HJw8H?&9faT9iOE&gS`YBP
z+2g6d36xQ_55*ny&$pcC*Ok4nbMA-{Na<v5Z_YgGS}%H}Bmz~(^Md0UnwyPQ%`OM|
zg{2=x8u^`xaZs^k?yioYg$RneKSE)SjLqZ5`wJCqwrYI;Pnpg@Y}m9=JIdl50alr6
zePA&XErpQZtB{-t?x^`R8Vo>7Vgr~`9NA16JzVnMi3D6JuQ6E%Bs^-HmqEG~^0>VJ
zP!)eiP(bb~WQDmxrFH5{H@f3MPC!yHoL^B1_Uu#+7?Lfq-U96v3OA9~#;lYnOET%+
z!-up5wMsz|o>c9v(L@m+s70eQ!WoM~Y$&+`M@E=JSh$WsXoWxvv#vSAd)VWteDje*
z7*kH4m$i89L*J5A26_8uh5xixzx54o$3rwj&1ti3Xd-Iq(6%uld)W_p=Pp$UCg)kF
zqzsRL_9f6hRUB(nuXFyAS|b?=Fft3Jarb>Wj0(+yM=Fx8hnQwerd)fku`yVDd(wx0
z$%EhI*T`@-sCoLJ0iJ>3>`5<imh~X?Ljt?zdRGk{73N9IJnn;n>4BifGNKvw(TpsE
zSoVwPcUb@%edwG>u;6LcNhe5HBD{l)G+uXquP%6&pEZo^V(&W)<}AI{_?3mqyv6^J
z^pjuZ^K8IMD`AGs^aRZ1T*OYmqvLq;`~YWNU`B7yUQlpDT?QWb=nUi`yiO{7*W?)v
zZ6a-3si`;r2v9Qb5YWL-&)pwZm9}vPFozOPHFTN#Y?#$4Ar#X};bKLUu9ewhoJ9WE
ze)9zC5u%=*8O}*`&l*R^JjxVk2=m%%3TO~YnCJ1iVD!0-SkDd>piMV<IE=&^G!+Aq
zlYF+alC)Buzd`*KvcZP5pdGqn2h)M^9~J~TC6)OLX>!fiLcOP)G7GAA95SBB6Ul#4
zTscqbLfCjtrFh}bz>zm|d>Fif6Xhyec}EA#)2(nW|FlQ(D>3t1Xtm86_`|YaLfQU}
zy2(2jJHeI))6V6_i>ntxFe{yQ93F@b2LAH`dFdrU0)FPB6oP@)0n6PMN8|=R`c{k+
z$F5r2niEYamfV;yZ`p^IdXcU4GT7R6+RDG`3q*X7l&1-K3PV4nq7Ye-oZ~_RCV409
z&_*z@(%cDd5YLyv&1kN0#hMa21>fXUzn6!{mQiGY`+x>NB)94JlP@c)4W#(;Q?}dr
z-}<x2G>;g<p)A2x1{+JiP-1u~#&NQuydWOQ^E&sa7@|{tO}t%Ukn835@{){*<Q;m?
zE2Xzj2?o1&Qg8fbKW3krinB=4kbnGqj8GSq+g|N@(nYJa<=O@j*0YY#j_BQo0JcMS
z^R3*{m*I05E*W*gC<$W#8wxe>DaP^jYLjCD2}U}#5q_$s51+I^x6wsH><=_@{Rk0C
zK_KQ>T4wHhmitF^m_B6jd^2zW(wkk1n1RX6>y#um*wHtu<x<v&dN=djnWN<7$>@VE
zwnd-ZVqcdF^m<y0{aiO4Y*7E!aFy>T2`$E0dT3iK9&c|WlltM|(0K4DN^}Lsf~a$$
zES`Q~Qh4+AGUgea?IkLDKEvIqp8Zk49!>&LoV^~vghgAF3nuW;Lrnucb=|{)9Xv6%
z_5r1Uv=N$LxuZg^%1^dz_a8kiJBq>Z*Xp~3ZOhwq*88^@38+@Tx~lPVmbl~Az!@(o
zf7zx0b?LP{WOVC$3mM4)DQ_Nz7O~v>a0I1QM^TT*V%}Yo5)^=o0x-hw+B*gsBF%G-
zwfvlILIM+RB~}_G5N23d(9qV*sw?2lhNsnX7v8F+?i>4Ar65qIR??!$HW2<+9LxD_
zA=kA!$Uf8GP?Fa8yA#nrlw09`yioW4uh=!e<6<aVi3et6=gDvuT~Ji;RaFQj5|fU0
zU`bT`KZXO^B2a?u2&P6{(z&R(5?<bXW>#`6ayIa*4lrWFGHjwopI^~uIL%San5Nmn
zP$k^cj+a=>Ejgby!eN|^)6HA7cdx3~65wROME2q5d@lnu%4yk>nolDkYnzZVEdAa(
zQf5L80$(Ao@~zp(b-fNxZJu2g(nSzp!x~`0^NrCDpiW;Lpe3Kc+Z62T&8Bb<1jGt5
zWtK7^Df^@X@K(v%f2i1ptw}XCtt$Y=PjRmskTbrAaowhD>S<)=m0xb;9%zzVPV|)v
zh(00MuSUqg3!sm0b7H592644H0J)9*4QPtNXz6!`^Cf4@uC$DP^5pM8Rz3xBt2J<u
zl%Xqa=AlbI1_gwalJye8_gUlPO5m1R?vZpKzBGpy-8#OVD$eJH#<lGX-LF`2c>(ci
z^yU#L&aeJeJ-9f>G>Xp^G+`qrGk1=EuFwnKaGLe4djsi&YLpim|Eq4jV4#wAVg1s-
z)s{@Ac(P_qGYI|j+qy58kSeeBgxy&adz8M=ocB5d1f~e-5MmhA(%gW2aZ<M8QAHUO
zqFae9zT7*krt~aMrK}r(qaIV&AX*P;Nl|N+Fxm*?MK%bNskYQqJ@AylO~LH0dxoa6
zSDy|9N+ZUNz?f4p7*TBnYR~uVJbA26t#cPQ!b?~F{|%Mm#1z+>_>0VO2EF6UM6>?f
z^m<yPw}BxmU}=@^jt>Ux3=c;KQo|((!=q6v2BXgpjl3XN&}L<~)CIj`ytJed`<-E@
zU(_SU%zLkL@%CON?djvL2IcoNjVqFabq`y5JQS5WJm4ZvUqs<aLo`!HqrOTmnZ-<g
zgqkYsQR&@Q491?dgOd_9F8Xy~m$2E*U=Ax(#wp0Cc{vs1`PNMOODM%)0Rj&Rt=nd5
zrM((Ni*aygUG(Ib>l@!-(8k0p1XS=shj+RKd-SXCNI?sEP#L3TBn7zN1Lj#H=IR*^
zA}%GVLQIq%PY?D&dDolV!Q{sgnX2naDJY1{S3pTg1NX!4y6WF{J$+N&h%IU-*T!X$
zz+h2|ivwSV+P9E`vOOarz#^gA`B6|D<MyU<$*v!=;!CsOKs&?oO%75&Q3Zd64{!T=
zE|hX-U)u*Kwqo2`2rX+~>4o0vRWro1Lz~)h@8$wK&s}SAJ6-oq6*uSw%i+>q`S2D!
z30ILNAh~l6a0P+gi8GO@sEQjdIJ(Q1z~G|^(Mx@HKEOqa%It=Jv`iK61_)ZcHf8G<
z7TO1NI~vfcGaWXSJLnH{boo&$TjGBf)c^UBB4=jER`vM}Ob_NFv-`lSl})uo${Xh*
z#Yg<rz!L8U!eD6nm?JMH-bTeEiuxXDd>ZiBuKammlqEw7G!Lntax_Z;9p!*j_5)X^
zWD`VZa)pxJ5xT!!54UK~fD(>e5VmbMtU9cS<#$c4{4dK}6K*0q(XdpiEDKm?PNl);
z*7ND|qLu6JP{|;Q*|+mTLz>rItKf_Sor{pDiE=0~uu-xu&x_{2H25ga#*&AEYNI5Z
z+9aGi9M;){q-H(^(APUEPOjSck^K|ncxao3ayg*|M|~)xz$~Ah(xEmiHp85yVUp2<
zD%$qT@9wGfeG5T2%>L5?2Dp;@L+Qp0&w{J7Rm6dTCYUe=vn5lHxJA6898{tFSq+qT
zUkA0YCA-6XIjyxxEvyB%u>d`l73i0*s)lH;p_Mhn8wgkgr{m)3H5sv)|DU8DA(=<E
z+<M^SvtG8UKH@oMlFpPYP<1q)xLSqd?OJA%b$GTj^rVUpUh!JNe{*I*q-H8S_j!GI
zC!ZD7jh1KOE8VA&Wq@kVqz_nL-$TTd`ib%muG<72z(pJSQn^kuBKSdrh64+S+P)Tu
z)+t66wRUuJ0ejAY(x7?+{6$OeeFZLKl_S{T9qj92X&%Y=r6Du)vw7jcLu7QDCEWy<
zF?1m8qWzjPqwNi=r-&56Aa}Lot97I)-g{v%N#MDO#L#utQmw#a2z9w)RT750kU`-%
z4Zj{!NPp@N7^D0la7%ebIrj2M`&pt?ZV!hI$h?oW*CwJ7Kd?9-vjRa3Y;7B^5ffP3
zR90)B)a%?Bnq<?%J)kfYEkRDu^7E;oo1I0;t%e<rt4bGU%=2;h2yj<$U^MbA_5U)R
zG}D5uGE88Pnq0@7#=bbXklylQa_ILC7JCFiLxlTV97%(!7-c9H8klP@xt*=81zsvp
zF_T(gQ)+z@YmD)sJT-x)2ly$7sTDr#l^ScZnZxO|tNb4@MZ%#|kY=~{L3_z|9j8s}
zhDC*0$0?YWvB&hea!uvaI$9EhVPIz5$QdV$HLAFlUbcT`{&Mvgp?1Lpfpx`=%X=X$
zG%Y>v$&fad&F!bgD+w4d$ylp@88F4nv~Wx~MD!>;Yfg4W_ue4FQoA`?Ee}U9G@;Ak
zX3`2cCxmCk`q;LV2~S0TJ_j1_nGNlQBW+bgQbtTcr#kliU(tsH3<cC*p3HCS+Ppx$
z(Z`={CmX2L$lI5m00O8Ho2YPy6{zblK*S{An6}cWZA+bA4q?9AAN(l7x>q#wMgg0N
z8&22FRr4k{n!_q*{gkd`XyaP*r9Unzc3MA_d?P3LFl@u=&CUXUF7|D`w;~pvsTD;;
zj8P;Ifkp$-dGi!#`bOtOzt1B(-1*v(b-E-9(X<T79#*qTlj2w)5m-Lr?f$SKHy*NB
zR|tTc|8AWqK)PN`f~<AixA2OXfl4#pU0qC+!DD(EInk&jh<oTg{d;^*OX%rSqALiB
z#D3{}@cbtmi0+0}-kJCyv6RSBlIN|OO^Q}(>yxHNSLTDe5U&f};*$Bkw{D#o{ldcA
z@rbd;oW_KE4!vWH@*`Ci;~)14kl4!HG71Ddr*^^JIOiq-26rN9VbJ2kIif~9R;*xv
zmt<bOD{1!0O-)CLM6^=o+nkSsh$pKtF?S|g?1dCnZB$gYm6^y@)hpI$F18ynSeFks
zx)u(HSonBHn<zWETU3qNNM=!Paup~(0a?7wRV)$WOL$}BQ|-%fUrjAlS-KU(bo*PJ
z7E}JRVa$R50Bp07nHBah<Vge4O+R<9c*(HJb>wFGd9_<lq!kk_6FP&<7VB6xn2@lr
zBsWA0O0D$xoH|INzoIv*j?b{AfvY1N++vQ&6n?8Ii*jr$f{JA<P$R=P33G$`b}01&
zrcP&0<0P}O;4Km<IUyaHDk;P}GtwPgg_nvw|1LHCYl^LGDP4{=Vt%7JdvkWixLdo^
zxusa6lbv5flw=!dqZ?f!;jqO(kuQW|6QsyMU!k+d*AWq4Uvqt4%@f_ysuAEnuz%o3
zK|dO>fXLyYg{o)#1xFt1e&W5Qyq<+$YCk*;2DmEVS_OZRwlr0Ks*|ox<`%A+w`<@7
z{~*rEzp<>Ky%PSm6;{TGO&FTdL5kc;D{AI*vyl1R#S`jK`U+4-+$))>#wb6A7A!8H
zVPtwMo(8$#(wNgm=c4HMPU-ycxef$<D<T_JeWzJ%z)@iP8GoXs&Q+o<l**}YF<iwj
z#P>9S|FaFpc)_-4P3JgakIqKOlfSmE<EIJrTtS}kt$SgVCMHiwYqT-$r#D#Ql#on3
zD^~Q(b?IA3tZ#uhXefwk4W5ERPvt0jUj^ri0x>K%OopKW&yV-+$wEPx4Qu<_yQyU|
z^<MzAZI4Pkp}YyK${P$H3Zo4MR5apHbwQP;U^?hxr?k<a!ELu9m?Y1mL`o7J0rQ%;
zWg&?=Raq{pXnl0aIR=thBY|8UUM5~L31aBu^Q=_NVj(L=<w8g$&nkImJ@3N0ftc4Q
z<s(e>ZQSdz>m=)dO0@9@h>@28s8ElvcM1)pMtgu;&SQrC4M2U*eF^zgAREB4p#cnI
zU@8N3aFyZeC)4d8-+GyEQ|fiEJ)3JBdl5*57brz1<S_z%gmd4UenIvs(}xM+QB0mX
zGgU>N#Cjd|G1I<&DvG(PJ%HM2*Abf5GTN(YE(e!Be%mSHU+)xF`KBy@i`51nX2g+L
zz*!YP_;xsjYm?&nw9XCt;G6&%$w7%NVW$0Zf5A+Fl3t$jEkK|jnzsUamD;Bwx0%s!
zZc_t22!=B6ar@AxMG-*5%3By~cXz-(dApFtU4Ono>()DlCVpNdbdK<dFdhkNIRWAE
zcZ=G(#=XnrX2pZQ<$N!>Y3r=TA4`0RvNE_a*elKwr$4TBf*1!Hpfl*e_^l+(Dqd7J
zR^2mNn&n~ay!=>uKG+}NlxL#_jyc|*8|XE&@p4&zwq?o%o{g&vSC`tJ4VBjXAtZxZ
zX9_<y4#NGmI&Y7q_)J6)(gUg=|A1yf{PTiU@o(V9K*erIXjy*|El2meWWh_O&r8p>
zr2~Kp-+c2R$>sA8{EjE0QZXcY6PekcI${YKls(zYYD!MjP>xB%48}U#7u+&PT&xC_
zzM9lqY&)=oMz<Z2Ptn6A`{J~DV+#XaLTIe$lE;n}DwQZ8A?0)QT*m!t2EHC3*YEA1
zbD(o(XOpJNK69|5>Kc9D_xi?{%oT4{!Leb0u`k3)n+LSDmetkG_4;NXSi;5x{=&jT
z%BQS8!x$ox=eYX!aioBDG?Y5fa1TN=WiRv~XZDKcn?wf^;E_exrT>fe4M`;1mpgwV
zJ>#zb=zP9<6b_xJUnEKvOH{*?-}8u%`*}Y8Mo)Q%h>dZ-vqyiYbJ=6bXXj(B<>VT;
zzZV;5fp|jA9XxZUUr3Y<J48>`W6VBmCR}ic+x`WMULcM2)2k7Tokme{vRsN!q*?T~
z@2FU%<R0@q6cX$GJ*zEW`EDKv1ND@r`&VH&SS^f^PiYbpX^M~27{hR_e`tItN5^!#
z7c??|Egx!}8oE*Hpnk2u{gAz$$;n_^|Eted64Jrq)*{+S7NFsX88qQLyxXJTj<W~{
zZwe+Bs!;Hu;Hx)gIK5O*dD{IQ4G)r-s*nzPikc|F%WE>h1l|!CI0*3avnyfsDyetB
z{-_Lt+2(YYtC*&H3jLDqC8Ef=>!XCWoB1O}F9x%8baRz<MYVgv?ODNhky5hhepv5g
zl`FPGwNYFzh&ivP7~dCb?FRTeGV;Qg+F3Sm2l{~s82IuCq`>RvGy5N${eYM;Y$Mji
z8r6&*@olCf9gn|H+pUTgQW#heA{{BdDgkX9Ze5<KPBc_vQx+XYoo?x%R_IHY!f8qd
z4O=m(a5d<P*yt!<oCW$D-<6~&Ed%qBAJ1ER2F23*St>3UpF$QFvYnOH!UH1FmUwm9
z^1<H|S7(5FV?dIUmxok7M<+L*U4b9xU&+c&*TwMnvRuo(dVfu>9Q->z{1){?punh^
z!OHrJ(LGuH4HbH7D-0n8+ZlYgAvVLV%eWkNw40k+;3{@D>x82H+$3Y*FoUuM3$7Vm
z<eRE)r?)C5RtD6{)#C9)FBKfAH&F-J8%Au|7rF#FS=}ky5mhX4WP-tg>LQ3|2#|Re
z7Dhet`RH|aKR_8*HtMVp5d8A7TARwB?iS(NuK%W#m%hi>N_F1?b4nIR^Il@>G6gJ4
zhiq}5)?gUYZTE@{Bf>Y}k@6E!{M=_VyD(e&3HEG*9ICw~p_1vXoLBRxS}fP7G;L+P
zq>N1+?`D90$c+^iy7xT!II2n^sBL@TNsR;OVSWJhgs%*T_&Xy+a1oCG<2amc2u7q-
z==&!ERvDpW37hZRq!Rw~`6yW^=02MBIz=k5PI7O}*rw5neRrS)93rqQw7-mFLBRJ)
zE8P_*R%ON^lm4E}x0{yu%L~URkuGJR%Ns&+*Dy>j=yOw#T2eo<6SOZY5j&nJ%b_&D
z&3m^FjIvxlia-_1O`B(YQJapgkCM9nl^G(uGqT1iL5_y~_+iLF5lKERZk1w)ESVMt
z5qu7aB;oRIr()I-M^SfHxxu^P3gRmi7#+07vMfA$UMlFK^~>OIv(B;{1Ve2eV?1ZG
zf%=@4-fSY3;=m&9z?O$cZOalrrVq1$!Ov8CCs(A=yO>#0nNj`zk1E~rOZQ3o>c5(p
z`UeDg;K;3y@fD`n=kg(fyD-YASZj$nHJ4@EuOk|%3DtaPa%KPUw6^A-_dm+I|4Eo|
zbOT~+HJ3)Ea&_u!PWdTNTx)!m3L5IW4N4U7JCIxWpX<b8m6c#pk(7qF2zXGXY{^rV
z6Xw&s19fu_K<b^vwMayBHV33!zhobeS=p!%l|Tb%`^F^6_cq2Ov2lN|uI#|4&h7XH
z;dkpDBwc~Wvh+p}sJRB?wH-Lo^B(<&-v-(_hCb+7`iW-FS3(#M?luXktBn2}lwS@d
zDij8wJs)W6K=g}Ea-<%&Y5N>J9t>mDw}(gyuY&(kK#`)Qq<KXMiEsQvR<@e-%tFS|
zIkxY$S^I;fwxUq|<_FW@W4ub!V_!OD2oC)w4LV676fWZcRyb&fatw{m?4_~|7CGBF
z*V7L#hmBa`jRb>}P)xH)x+^*co#<1mC|S*P^h1oT(`qgm9;3=UHb+)HV>BjEp!fVH
zpWhNtX-h%wO@7GHQb1_eMqR;W`P#xbR&Y3DvdsZl9ln+gz+5T**P>*)y43v`V86#J
z!%DLOH(9J)7JFB6*=S{DBU{Lu9W?Ed-Fv%w?V}?ebqSn>1Pa{&2l{zgefI$v*|`wq
zfh`N}Y)9N41jGz?xongg>`W>UX;A5oPBP2-NuLo8Ij0EE1y%YfNpq7!#&q(jZh2=)
zF16m?EPVJIlsugEDIQ}%ZP{|wumq2c^@`wAshKfM>yJfSK_y=L%~`jx@Es=n%(oV4
z4O)=ezYZOg@*2U**MXgUZP?me+n@v&TXSl}n-jxzAdy;_Ih*U@1jWO|ao0R|F-6)o
zzyMj<!Yaf?y;CG-hYpT%#-eG5(1hpT8k>+Ef@Q<TgiEmRQvsRVIzk(lesHZGPReej
z)pXb&iNZVZ!qenw1%8#r3Z%_>Gfz{J-PMOo=)7>!HQ_P1C|JIDlmk+4-}QMNJmfdQ
zmIt7K^oiN*23!K~vq1<06f<?F#ZFZ5VcQ4$rk!{i^h-Uun_e9<DtqISyPI}xalU$)
zI4x?PcHpAa(Jw(;Wn+|T+6;>d_41JSmtyHdrvQ-<Zrkfc+6w>&(>cQ)mo~<x+gdn-
z*G8;5iHTy?ynYXM??vyqdb|^10vIQ{6jVl}{Z72jHd`cy-YJ<2n`Dk$V9L8#r7qj}
z{~##7V-+42<1zKtmmF@k4mF81Z`w1Qvw?JN0yWmLtvW7zHMZ+r-Xy6>CEhs(k_Jy~
zuZ8%mbNU)};|an@ltx|1;R<QHoLdBH4nrzBV(1rFb-oPnU7sGfnvECTUn)`K4x#gj
z^EZ_UZ)!iuq9fBo6oKw47O-e_?*?Y?C=L9e5DvR`cvyu>FsBen(HG!$=;C%lSy(!f
zEj~!2phZJA@J$K$$55A?;}yOH1Q_sDzClD#3cGS`Iua!T;*wE?7@JwD@i02ORZ2%_
zdptwNd$#r4*$^Ojd$(DJ?qJ^e=u=Uj=wFjVQN;Ct7!&lT2vYZ3$Z)Wh-u6KcIqkP&
zO@OBLt0ZA;Yd3iN{OQ*XI*b&$oeqbcR@v-FWH*YNlNlWe@g1orf)YBa4N$(d)p9t3
z_f`CzGFDmT)BE~4<+xWxqO83i?a3Ep`y=msHytNZ6+zb=G`xnhd(u3NRHs73E%C5_
zo$av3AIx>dUtm1$HX!uzFSKTs;3smx3_bjFRzP}hau%<T<I^%V!elu@zwY(n=$?xk
z*|Ys|)#YjVynF<xKo)vJy4S4a+Ug0f#jPd5M&Dg>wnc~cPn*|I>kUk#4Vk_ez}^9+
z4eV{KUefbBZbVptIpD9%lf?llr(WY`lDd3f!9|$LH^<%!mAjun_+-*Rv=Ed(pBv)6
zVHZ9dynl2_s+y|55c4w3XeGxgtNG^afmjML3lVD|;CyaX#Xneb8*>$hI{xh9G-Cc|
zfp5eeY<%$VK6oE({4&uZ+(9N@1E>ZM8qleVmo_ISghJhQ;p5s*K2&*S+t|47+-+A+
z!zO67r%f5W$}6B<jNiBggr#-HOG!i`^UbS0>zqRNExt8QnckYCV(J#EDVCgDB-#|&
z0Vf)>QITAKL|ni=^@TAOTT_B14tH$+o2^rJLKHDA{=LeC>H=8XgneeQ8=DHzPHi=u
z;ld!8wrUby4x)VGAC>Sg?;GhzMakFqtY@ppkG%3GfpG&Xz30xNye^kb+9{o;)?=m2
z6fH<9@PDbl!ERFtIB@s{;t-fesu1SPi6sdb;qUnF7wig;bcuCW8RiO@=y4hC9?!qE
zBDwQcssM4m2M&WEr*9b+EEE2to%rKRd@BGCi|7;vh$Vo=3d?bWA%r|~+b;l%F3>XP
zg-6Ll6<Wjf$dhv{)DgsG)Ve<(>3&Bll88l(T3iGYRhGwC;&!Yuw=r9xghU-Fi*8vm
zQn=FH6`a1O)bOsDi-PbDwxYSeShR%sew5!lSzbJ53qHoO2%a;J3mo*C#=4P#kCtDG
zf*=5b@G@hh6<zbeErBjYi2KdBYJebJ{94Qc^yDMc;8~<Ga2s3iAd<wib}seMck1?#
z=B!dWzF0BwAr*JzWk7K9lQQnWASyg)7*oPGvKkPPZJP#@%y4wU%TWZ^JL6S~j!)Vn
znd<bpBu_kG@Tj$40VfIcX@HF{DDp;svz(49trhymehs(Ws1#yXZ9m9Mv8vtDa06sE
z5oGJi8@o+T--2d|_9{we0jv6(q3b?=zmj;mKw00q_(#S#jUdxqw%`Z@7f0#`=4JqA
z>;z^>i0+(zbUicolQ6ayL9BDbMddoih52%47ndL}(q?k$vDHFgv^zn{KHpQjDn{nn
z*T6kSj9~z!;c%Yz|N5>nwvBpi=En+89=t05lqwJ1#;5V9CQ&aT_jYgYd?j`WBWheF
zwt0z;Y%5qp(0^DOF5uhLQLJO6btinvkXx+U8b@B<;@#qk%Qmi-rPD0h%etXn(WY_J
zP}}~4v0(s$09NgRa;i`jP$^UW)&Nnekc@B=FcDHp;Z>}PQ_Jkoqpu_GvF4QB&(gJq
zOM34)`)GhMb!HpdWQW9B?hrfBUjnlkXL%*F6OI30Z4WrtU7-pJ>saUHkSqDu0A){b
z`sbfC+N#JZ5dsf_h#b)_<hf9sjIcH|uLz7dzTl?bTMJ1>Di$7!zm`GOO58n_ys=jl
zM)1$FF15UBF>%D<i>sW0a2(e}aul5;GyC`?OiA5x{=V}c+E<6zt$nOY*8@L<Mv80r
zG&%6~&6lo?2abF>>jc=|S|}Z`W4ns$x6vsMyf%g(J%!(|7%`OJB@a|t@r>u~&^~&t
zpQZcZW5AJ{FMdeLE)4M!bnBc@Qpb-3{Xs9CRm97mD>t5}JyA4|;zz-sp8C6hgvqye
z)bjJoiPV#T47&Bhhl)-UgZ`}2=oWVo?13utV!U>e62VjIs%_-*JA-U3?UzyYMc#^V
zgj-Y~r%E(Xr!u3CQp-z_u?$3agztVNtd|b<5XB`WLLFNHCk-G?3Nluqz8D>^KqVqL
zz@|!c@5NL%Chh0Mq(Yp92WK|<lqwDLvIx@vFca>R3%DTQ;e83f_?>s+xiXZf;&~l*
zi*<`}_6GI*ew(8UEO7WRBL7f;nZTjbH^r@$aoy~Y$ZDWB5NSfGCJ3WbU#HX;l#5}?
zEB6X&_22b_>D}``@RDCCLhq1_jHEs&@$~M&VD#P=>ooLYZs~2%ZsyZhx@RpZWLlS@
zI3Vn)#x2i33toIiPSU0Z0XIP!jrKw8MxT0nY=tookoLQ*s#dgT##-tT)?!s?XgFoo
z;wZoi3_Qx2t4-Dp?SBBNt<yc9$(IuPCf4!*i}OVFwd*E6Mm!}A81!h}hA9TnYioxa
z13o=h*9lEq-BVUqGwkpaqaqB2{oQ62stC&D+9qeHcc`s1r9n<s?}Wn=L#Y!S&jH)T
zv8s)i)`P5S$KQ50WQ^9fp4+lPucyOe&r+eb=md;5YGeZx->Ah#LE?_?MCEQ68>#gd
z4Kg$U!WeC4WBZ5Wxj9YoM=8oB=67qL2zB+xg!pGGkg!*6)25Owq3tc*PJ8G@%<88L
zi$OE5q%%s>1_vc^9&pAcfF&tJJ7LEjGc<roEmApceLhpjvvXBLOnoJgH=~MxP2ODN
z)x!PmrqNaLD%uBfxjW&J*^mJwjJ;5KQ@jx}1=dc8J&_}gl9R88m%54jiUNYQNG|zV
z2mt(xG_tmCe(uzeD87|k?%adq<|r3sjBQ$54qV5PKOe!Blb6T^ZXxsuTrS-451Oe0
zjVhT?do8R{0L_Jyn}GNVjgXl<2K$FI7+u|m&4{}|g!%~9oU6@kYA=k8Yod^C+9I;E
z*C?;b-iTtUK#u3S6-0$4HA&Oe*w6GdA2fG@#58i-Uc9Yl;(;Cg<rvt{Stb#i%r5Fg
zMJ-uh%wK<jP%nPT>OQpqcKqb%AG%*0+h}^&pq9}usAw?|io^&DaNb}N0D60^D#t^W
z$5d!@ByS2d9Ea(GDeQK-qRJZN-YfsSFn!k*%1~lmOu<Iq$dc+Mq*vOBjAsG9Ah-v9
zKSW;Y{W}A+rNUz~h@9!?GPQwFAN7-px8VoRaFmSgZL+7Qkp~1zg&93@^3||qqIM+#
zJ#1av5hI#UCo8RO!b3EGlAAUp@;v8?!J8q{u95d5W||2sucwFJ7wXpq+eX*`npU@S
zY8Kpd{7H6DECSRMsqrDOUW4{d+<6ykT~*=rH-RYsoS<XM#-DwheqPx*Uw8aYGs{MV
z2llXl-#Y{Vr|i+Vcd%Bdnwx7*am0|K*fFIV6D&1CA=$4_sneKjK?8ZWo($H@bxHH|
zs+|BMwUA{uD-uQS?l{zbDE>S>i#SjXx%ZxfoKD|lkfm#y&*kMBr#^Dph~faBsk)&I
ztjAhTDJ+p;TZpV63tMz#eA8(RkL4G3Q|C#hf>-zv)MuI(!pTJU>m$i%Y;ASUN+5X#
z0qKfMVp5nQ^%?eOfC7KST<$dqFUcdHEj)gFC)-mq%?Dtd6LVh|8-se@d^aN_sOWOT
zu~r2{WzO7^SZQt4<*~Hi0D%aJ#Zi%u7dZm2-fP)4-A5X9SQE=l&RAuZLV*r`!+`Xa
zVmy5&*hVE9gIav<brjs0HiJM|JVX3=dn=zV(?^Oa^6aUW^h`%!27jY#OX!*ch*0Z$
z+vM7o<#=|Xg}MGs%lUZ3`s=5Gop#z6Mz%m$yzA-N_pa)gd;<tk8#TBTAL<)w&@DpB
zJ(p@7Kf)5-7Jzg2ExIs^c0CJC3p$Zvl?o<?0zCl4pm9tlwCMg(_JBG(hpSbwV|3I;
zHd0rJENLcQ%?ilvLchMjED<W$6SS#E&oXBSs)9Mc{lncohSY^5PXY4Tos>xu2t$Or
z+SQPC2&%3^OGDO5=1$Y)KxxPE5o{}2+RvxVTMRDdsO;R5Xyc0vg0#>4ChUu#SNkI&
zU$v~YaQi7OT5l%_#9yH;6ATf@mfEiU1RkxPuxYo-L-8B8ji0DvGSet%@Fd2lg5xW`
zu(j-Hiy>LPW88{<QBrgHy@@Ez1NE5`RWyqJaEN#Kb#Z!%9U#Rk{2}wqPH?{=yC*ye
z6;79-H8KNPQK;-{wyDKIXe#%VfmLdq=>J}>+$b?$QE23&+mDvWu_Ki+sK1cGUL{ed
zpp#tJu*oUcsgt>Mwq6sP-25QT*_eBO#63tymsuhnw0LA~=RF3wJPp`jVXsTHBvv)L
zL9LR^t>NJ-2H5tq8pIw|t&zK=W9r!13xhqpJbqX5<%VARO!n24+r)5e*FQjkilX&P
zwK>vG?)C5nafYiq>jevU>>iCm|9)R<gYUdfZ&XAxNb%axF|_*f*nut4j=(k1vM+!m
zA*#cClGeXvVge8mw>9|2bJVHy58{WaVSDP3)fqLvaHX!UnONzx=9OQi6(ao=pZ&hw
z-pVjkn2&NF-3rhlmUWMzta!@}v(FYuG0|IYrm`YxvU%I0qEFawnzGY>Z)$ewH}!a3
z9e<a6_FM7t!wJjIjnn@~=MqRBJTQ@ilPNx0`zC!6HzEx2yGT?yv*ZK11uSr+o|KHf
zypD=gHAOOPfI@caPF8Cew9~5-+ZMc`4id;;y1x`sQ-6Cv40pl>00K9Fa>Xl+O+Eq+
zmS;1c{D74RT6h2gK>fegJbOnnhRJzbhu0aKB*guLrk?q_W<c_(epa%a&!~Dj^~@VP
zvy77=6wiIPy1^3UoYN|9xym{arIRu*+ggrYZ6QF-+6yeFO7c@&3>2FI?)XW<3tF31
z-VLu>VZbAKi?p)OvQxL|kIO^nWLU~9bPF7Ev=Im2F-x=4``MZ-fZ>?}&@-**PIm!R
zeNMXV$)ARGy#<~%94}CAzC3|iV8HTp2R<-`uJriKSHD&Snq)iRj-?bU5+_$uF^)7|
ze#|vt*jc`;!xHd{muPuhTP@&DDH5ZFEc_-8S+Up{4i5w$jJeKs`_Gj}S{HOSs!!}@
z-!&N_$SO@e;DoOx?hH${=O~wnBefqdIMXKyLs!0~5*11i@m-9wnbfUD<53~0eJ-B_
zyHDzv{O9pko^rmnTMS-dm^JL_4MT_kf}k~M{DeG8p9B~Qt^v*b*D~q1iZn{X9b&B!
zsKpuj5)6mJ8z?4z4M$#YcA@B>N%=V0%@yfCfNU30E9$hMgo7Z0o#U8K50}|B+zM=-
z?Emk#q$hXmTHj;4pzMUJzqs&hu9bDmJuUgP&M2(zxfW0YEHp&E+P;+l`l~fP`2FTp
z*(M=tYRRSovqXXWom@Y3bb{-Ww@?2R5@U$mHQ2}PnB#*htr)KM#UY-;_H<;?l6j=^
zqa1yEk60NQT4&uEdZsGKB*LqwL&<-5C=VsI+s%3HLSmJNbL|ZpW;SX$*$72dYQ+gV
z|BMKq(;MIhLty0Vc0I@md=Cc14nKs(ho<~a%9C>EJX=CH*s#&g(fWqHIjw{fs(AM<
zgowLYxHkN=#I&kHQk6A`v@L;CE<2vn6C96FiY0+Vc$$+b7q>IDlcvo8nOPS;N#h7!
zbG%t>num;jZ9`RTGem<6EpzT%juFxJD7X8fJv>k4R#)Mti_vc`2ClKjvBTfQLX{99
zG%<1{z7@mV!01+owvFAh4(22ji<b;G5M)xp9=4_|tf<wQ;bXM}U>)tHM;<KJc_P3o
zY=zurHue=TGz7!cXKqF=6l^#qBHU5#1k5_Cw@=JsM&Qy6f4?8*K%i{T+=k?)z9wm@
zSAow!@;GF6z?Ay!E5)#UpFph*r3femy_Oa9VEvKHP8s*I8$Wy=^J2ktbj<qt<Ur!!
zlDyJQNhFK8E34et_O0n%l;Mjnb#D*w93WNAKdfB>q(uZ``}BhQbm&(lJrCsNr53yu
ze0Pna3IH{5Jm9v9+!5T*9g*wXB-m!2iMW$Hg!bT+pbE)?Xf6^%iU)Mui}>7)0uCRJ
zbn;m$&b>VQ<X82}ewL@$2ZI_AZ;(-iu{+^+ex1?whN)haEn}64D*H?o!LxtfQDX<&
zT<IlRNdYNJ>4~T#%PY)XW?W*v8VH1WKkhZupORRF%!Tt~je9E-yTo{&k%ul>1jEmC
zi{pfs!Cs)EiemRHU?Iq^^ED1`$}4WPxHzeRu5Q-3IgJDIwNW~A`miuCMxSw&)p9-x
zEgERfvo#k*IX|uaT?6Td$0c7#4>0S95?O;{L9i9l{HmTWhzC1UT5k0(Ro<g&HJANq
zbWgX;jurN&k>pV4l=}M&;mWo2T*{i>d+gs^o}S2NAFsiuB1|kbq9>zR#RC+*i+6IX
z)raF%j(?13zAxB1zZT1GqIzvx=q&%DLTg6~`hAAno8-}QF2%_<@G7j_qzT9u-*Mt(
zTPjeo4)XfOkR&9cKg@k}$Gu{El!d$gW83K5z0fYNpDf8oiIiAqsi*pY|CV^a=!BcQ
z2v=VtJ`3gh{)m;rBi9-`-fWO19%94!`qqy97C!Dkqi3m?heJ0MtFyn7$jeuPMD)$P
zOxSewF+ZtC$N5AxRW&2kLde35eN?L5u&z^Z{>3I#*NGK5SE%b(oU{rp?vzh}^$?2G
z#x+uubblOgniLW7#&oi}|1OclnXCAC2U=68j4DS=-j-(SU~}POjfP#dtraq`jluDj
zHOYlsq@>yl-nw_~n^=5PIf{&(FN{he<Bznuq2f<&A!Bh+4eV`5v(}>(#GC}$c^Z~D
z{Ava~<B}Y9o^>e&WpSMtok{>9Hxk-1g1PZs{2jOiyx)uHMQ8^p_!v_Oc+S0ss)N&(
zQ+Cc-lt8vmIV+zBXg|)n$Q3{c{^m8%qWOH?vKN=nDV7<|{URYufEJVG$wTpolBeI!
zr^_4OSxT7m^$&2bb>91rc_9G3xFjrOU|bj5@4mW7J>67n7Fx0L)=AmQUQ86#3>O-u
zy4zV}Jsf~SE|fAYM6Vm$`*8XH6?#LsWW1qr7dRzi6k&WC+O+|Yyc&#zv?H2n-^fDm
z0K-|`rU}GOet9S7!gkR3=dC^_P#+(3H!`3QlF~UJT2jHu)|K|HjL*s=XOHKcyw?9%
zw>?CxYo89+ZYAZwmv8c|ZXPNq+Mxf(K>EO61Ucham^hsZcKnzF&QrlUbUHs)@nmxs
zgs`@AS(7hHphyy^G6J(aK8`xr)TpNeRYZ=O?20MpHCcJ11#!fy*u^Wh#M~1q0w`y=
zG=BoKE@gRodC>3Ta1N%r{CEA+^l+qAo{Wg<2t3hwr+}eR2yYiKORX1;BM1&AXdZ1a
z<)@}cP1WFF)v5(hii)wQa5r?*vCC<t?uQv(@uC`HAW^A0<?G(%s@YBA%?z;>?8RJ{
zb^Z8)4)Nc`!L&X~6k^MOz7&?ZnKas-^InR`017E&fj(5|#oolnIJ8{=LkFzqAN#uS
z4}3a4!b`Y~ErE8+b2|3ANZV~~6LJqJ>FA-`@h2NhW`75sc3zkoD5@gsRxj~nI!aKK
zHNLl$g@!(owR&Y$^BtGJ@E&6xixb2)wS59NrOvZa;n3Y$ov!m1(<&~)0Xl3HcchS{
zwz7y?nnatgleE3*R^uVu6`jQ&%QSm~Ubg5Vpd;GVGM<@>BA7FX1}-ALrXYP1qDJ0f
z?@imu@vrTLzTbS`q3J}`XJzhjm=?KZnXbtI;w26XhkP^0?qPNe&I5E-iB|V9*S|PL
zM4;51Ea~nvWP|;z9^~uxfe@mrrO$ZCm5!4*a-`lJ@MkYzRxZOsmXc~F_KX6IoCVj^
zK}=N+C2im>>pgwi>p{37oC&VX^E-zs&G#EH0Q`qq3B<tW3x^DzZF1sUtZg?o?V*dX
zfdC+~BI+1YX`s4%nBuKkj7Q;&!u(fP{a%pG8I3%b+|!*p9eL`oY_`p#9iS2CzSm3q
zhI#OT{5cA<GLpN4uHn<mUVP4uC$3#0xiR^s6~JhPji@anF&L`1k<dyA)G?f<K%|=7
zj?w8LlXx!F3)T$yriGKx9n0SuYjx><OCr<!2AQX0T!lsrcBDT8tm66^|IMz%$wkc%
zVg+qCL6XexG*WM+KZpV(<$uN^sI0L=u#=^$U(!bmYHcJ@I8GbLe=W#^vktYvioHG>
z8`@ozl}J<J#)YF3xx1S=RXOG8XxP(}kNM(`S{IoZJ}>8h!VaDq5~CLA)+9-^fYXR0
z;RZTf>|${3S#Pq9b*l*W=oZ&g1NDJ5xUqg!V$<?a1U!>@lbq+bPElzsq^6Uhvn<9w
zqIWUAQeWYF%}v~#M!=)8(`4r4Qh99{PAPxD^HVoTO0PB)osQ`;L%f`i*zr9o7v+>-
zDDL~s8q!Q9m^EoIT+)gJyKEG+LO5jqAces=Tv5Y*Mb8SP8J~fqzfO6A0b2E<L{Vqd
z#nK&X3PJq5fqBX$#m6zh`AVbXlYJi=&N#2@on+jaEj@M{x&PXi2ouUUU!5p1n=n*A
z3Fd&a5Hl?WB&5hf;JrI0^Wq%&A>0@FP6oA7<h1g`k$EKszBt!)u;Ed{%BxaSl9G}m
zkP=KGlbPpr>U8R7xjD|UqTCg^eYl;zC=2TlktsDrJkIdJs4^%KTf@CoG3HBf6ScB*
zzLhHq5=|yv<ttEfcd-pkxQAlr(jKt|3HHg;Og1DtDl=jdRX^ur#t2Ez;t0q59jh}L
z3=J0MWyLQ;ez&9$2#^ytNhuBm);ilIC(9bqHAUmi2Z5r<)!BK8u4`R<6>jV=JYD^w
zak&6e2h=x@Z~O+c(SJ(zoQQ8naz{u7u?v8jm(5tALYONX-HZ{Ip<1oJU$-<IEyXX6
z`nEXr{aKK&)wyP$6Nevi*!>D=$tU&SsHVXOh0HG#z1F`?&FQxC+K7gNTt4j3*G2qL
zs5n5<w-ZK^8+}AKcP8epIQ1We)n!#Ed!E5xk@suc>;|i%8Xv9Xz9=8lts;Vm09(6=
z7ukD%^9h#vkwgnKECutIhtjG}M!q-qlC#+YTT`u3-Co^+S#e;pEp)#D*skDunReI`
z?~q4Ppyg#JvWmepdTS0Kkk9Ww2WlXU0hHFlBY&4YnCY!ZsoOX|`YaJFNa@ac-;-Di
zMNscKg)yB~bJ;99VkpW28+A>*gG2_d_gi=){yR>Kg(H#vion7;jxb#Ou)YMdxySoW
z!h6f2F>F(v!S_k8Ra`THHatO2826iF_RSy507OLQfLd+m(0B*-8$<~omdm26g7&)2
zk+QH$w0p_TYX;nb&-I{FSxyePXZOp@ydyq=X)c`zMOT7383h*tjPFIb9X67)zc-oU
zT*A)e&ug#J4CI(aWdjOv7p@`n(=6E|N3$pFL`?G;6e2xVtI3j7kW^-7_tIaJI>k5y
z^u~Y3%QuQ(Xu6r7_I=i-2qFu`5N&W$MN};J=Ihe`g`aK=JAftn2bKL&3i|AkZ{)cS
zSD|Cg)n3j=AD|(OUU=X;dtunLnT`4xtAC>1E3lMQ6}yGAH{s?u*`s{Q^zvmSF`sS0
z9e<Z%h;8bl_ow!)%a9nG!kd@*3(lypZA0pIevkN+2C7dNK#YtNENiS7fw4=M4CT+u
zTV+OFkkrw8F7KvNslV7LBg19wW&-}*dif`LwiZ&VU;5qfT=%dYJHM|j4DtmP&0iko
zN!rzvcSSjZq}8f*Z*-pDh%LOEv;pFrrJ0xVM+J%+n;r`NVHk?28P@%9cOxgYVE|vE
zZ-I6{^!>mcWPhW-ix@Mt`7SCr3XFw5w~qpa#E?+V5%+-FRemi{s&4#N3y0qSPM%I=
zrH0I#bt1L4oj!DF@d^0_r<3Q4^;@hD3<>OB!VUnmky91OFNMa~B)spnvDKiTu2;`o
zf;Qu8Ef<@l9wE;w1$T13VNNc9pe_1fRBbMn?gZ_+pl@uC{m?Lvg{>4~v?Ea%Z|Y-p
zjzOgU0!SSFJ+0~+G-TAX3z)$^y)b0+h8OsrX`rL&@o(>U@2jrAml9)?0U?q>qesLM
zQ_=3eqcUpI3w<Th_$1HE#(ye(R7g3KE4z~krMJwD4j>hG8OrGp$i59HEpIubbOA0-
zuOek+WC%%Abq*p^fcV5L)v+tP-1Lbx?A{emAoCSfU})EhP6L9tg~aFDHR_VF5B8vY
zlDrm|*u9aOQ82TYS5^}1#24E6125aLFwYO5L-3CvCNxgNujmQiNB%Z0@vr*`OXe)_
z;H9_`s-b>DpNI-W#4PX63~}LqIS25~8z2`woe}GoLB2u(rcvU4qNU7GfO6%Mmu>iO
z8P-_mJ{2^O;gIIW;lYgUi|3#+-c&a)G_e|$Nx6V{P&Zb$z+f5_piY3<X>tw0p~{!j
zz9qBiaNf!o1pb<w*?dy~X9#~$8CmrB47nzK<SVCQdImBn2dNy2Fx6wj#{J4Y#XDSY
z5Zo)=<J4ox4>d(QccFOzTtkwY0L>A^UMIQOm7(iF^>2p4H}RTF)(`9;C`dHM;NjdR
z#p3y;65camo6>5&g!*#hcGEtN|C=p(rqlD}r_hth-<>4XoMDK`mH|qaN#-sxz!`5X
zrW%O>xH?PPX7|5t0iBUeAk%Y8QFjWn?50!i91n|XnN2YA<k{k~m0RUjARkseVxuox
z{;qKYE$&|ICusBMQA;s!**B^?1Q0mfEG`8_S#!arNtmwA5?`kvHqH-_#SFsNX0E5t
z*c|*FTF~<7k)c#RXll3o2GyXArRh-#LTZo!wphBPzJWJ}-E~?cYC)5i$2#Kct6GVt
z89<O@-9Dl=twiu-^g;k)z{q0h|4wDt|276L9l5Q(IY%TM!Hxv~(xJ#%nu)q$(=;^J
zuM=H!Nj=}u?<+0`FnY#0Tmne%zxchdp7Rn?A<2CpDu<DKI(UPRAFt|E#_hH>W`HHN
z`U=o+il^yX0Zh1Ldo3l)pJ&gua_0VqEDKa0V&;MxTUVl3^9uAJ^r0bMWbu2L+(Nz|
zU%xo1BE3mu!-D?HR0*sETpZ1AQLa;cp5Mf0(aSO&xGmuIP@`pV7{*(N1K!SQqoH~w
zsrmL=?5$Ou5K^bFV@@R_A$kd_Vbo$?1;H@}8l0<ep{?T1&+>qMPMI)yxqimxP<~33
z^>$hsPMw@FFPcU{x&2$RpOIcwPj}l^s@zJ(A6MN@y?;RhjEF*8(xZ+G<K&%^Hb?&S
z{F8n`IZ3}YYy@kH{^oWXy<Rs!ZUY(Cx_&hBPhhX?$O3PiQ`#B;F~9G;DHQ7y4xQOG
zmqAG(!rqdVx%1X$l2D1<TYm8duI}bQ-CFb3LH~i|k(WSv)j>z`?=}VbvIfd9gKM?|
z^CrF)_LqtHDpp9I_>|6M+MRW}ESz+jE>oFR2+f#*iaK-<G`z2jax+CjHm5q!QfvXG
zwYwhoLbjv7ZQW#bia%`Otg6z;gQBH_X8$lPvklhf2!UG0Mf>9t2l}A~fUlWt^NX2z
zCdBk}wxzx!GKNA&3jwU0N27)=d7wnq+{BhqWqC{5#T{RfXyzPL{wvCbWhw*gI5(e>
zsjm*5VWEMA6}Y%ibO*_Lmt4WX)R1eh)tj*@Uobs|%gPEvx`BAfd7b_-O?Lg`upG2<
z78^f#F+7Mgr0TR%bOuyYBJ&qQ*&<E|61zc{F-SMXENc-MmHJD1OvY2~UDQ4j@UQ!^
zdfiTi?@S7qQ94iMJQuK1Bx=?EMK+tPUItBvGN5oEjki5^i=2v1P7b~<%e<iY7yWKW
zv_W38Xpg4B_jVWGs2O%Onj^)7mX&aQB*}epdc2Py<<Id-qjN59bZCp|#d3c*?qWWe
z+<G&E4TP}C&}vegqGJW<Cd~72kByybei+WZqD}89q#g!q^R#jcvzvd{%o+89`jJ>&
z$Vg7rB_qo;B`vct<Hf;_Z=pi2^&zyr8t`;4V}ttwbbANc<isgkNt4$;LQ|h(5==@^
zPRSsrZFeeuM?Z1!|9ro=(Wh;anRm;&ko}Y%TTc#fQgGVIfCropt)&ASH~%TRM8L2z
zuCu&=M4xV+ZDBd1=1i}m_m$DE-0U(n5c>S5Oip4XwjMj9PPafnd1=2S60vX|)2dzT
zE3o;^JH#EtaYw63+dvXPyxwKh3<A6`RK-wS$?q(KHo;0g4bdWfxR8qSQjYR}Wgx<Y
zDuE$eIC2c2vLZQt<(mL0O)5}gc)%soaMKq_QjX06n!9i_%HWcWUI_=%voWJ<$j+i4
z8sOf6IfY<tE;QIdx;J1JpYKT^`@{7bQiUsfY(aM~_fQo4b&O!fcPXJsr3_85PzwC@
z^ZSgmUr@)}O>;>w=GM`Vla!mpIAP$!$buOmGeceqNi1#h4*Eyoy(<`d3j!$^<JL%c
z*AMGAGDCY%ZP7hXcxVyt1Dx<FXxsvb9c99=PuG;r12mb4oL9pF7tBBGo8=a%M%zOZ
zCaP@VNQz(lJg^G<=%piy|2iK<VB{ctB783oW$DBY@@^ncNO)(#OjHD!(xui7Fu1=s
zv3{$dRU*4KS*|z`pMR4DAJ2JTp)wpu$(bp5Nf{Ujy(%0jCGdPZJ7T8fIb_~caC`Ml
zed+@RC)oF$vnK*v&N!ua{u-r`#kCGBJ-y;y#kUup%j66hJ3nc!WIRTb_7>YfFa}H2
zbm_2DH!xEKgTDIzYYEApo2?U%RKs^%zU3%Yt#FL_iig24^jhl2GA1$%d~B@)C0Jn2
zGhaQUB#j!lRJHRFhQV4mCNzZGWDTEA+iIXNBIR9_#((41S`Q(Towy68m*_FASUG*@
zCKreS<>%&|XGv?dGaGx9U3sTUt1FTs7#;WdVf(yCK%N)*d(Ay$iVeMntiIDD1gEBG
zK9Z@Y7z^xR8mudks}Bx44I2XhSMgMdtw_^kIz$_?T>E?GD6{xSb1klzh2SJ!C`_vB
zv>|UUvi%K+_um6ED01ruRVLJ!39uzkL?D%=2b1kz>(d=xb_)8fNC^+~*EVgLHAF*+
z1^rT9*u}J07E5(WkZy|~KK_%lewU3fH*!viH<sWcGGIp$g(FFWcX?8=eJ;BP9EW0b
zfW*!ti5qT5b&*;A${{f%D^c7QFf{G|eeQ@1Uq13l!OE)`rT@tNg@GL#wC|lr7>qC9
zVF`JqE(!f;K%lEy1ajcXiQ@GpFD$O3XJG5E*u2Aca#UcQxZRRfOYik1yLc$KO!iMG
zvXO>HqglV^F#E_2Sz>nu!V=LG@Bz2eOibJd0hQf<q*QR|6B{isH=|3)+VYJ3FAvqa
zSW;3VuS-X-V5$?=o?Dm4f(08C@DH_<-+4w*!EDnAaPFw21tX*e1Fw&J9Ha9z_U0}H
zoua?=gS|idwnPuUfS?P8?JZfgoUux2?wV8pKk_})M)+xlV@`I8E0*4?IfKJ;!P=9h
z`^Tu}PSIwmC8@yy-@aDq0-+0O*S%2;>qPA;A;udMAimtR9CdxnDMH}kjxwP%YNQG;
zTP$18Atj78?B;TA!1*Q#TG*y*v!(#njc11wfTblLAxsOYnwwZXT{UIHuK-1T#ln&T
zMh34~Wx|FILRtfSMdT+TO=`%|@SOx1llJJRM-k<2vk=E>W8w<=DG+d*TUPeX&D420
zEp%t+fEIJ#hg0XLg7zc@>NDIPW;<kz$G49~ou^#wb0U)fxb2z(wgV#{3!{Xi7dRd*
zS`9f&1ADx`Q3(4NK^54gQX&n!I4TaOtEPN4lt^F-+2=XVaWibxR#ZGtp<9X7t24Vr
zav03>I;=aK7G5woOP;t>U8nLYPXV@x&#6zzZeQI{ah&k_J-hJx%CWra?9A1`a+KHY
zlKO}Q777{RPat3YY|6n<dI2(o68Ouf#s-2|Z9P2ck1z!V9~!{%0O%C9VcYJD*NYWz
zA}Ex6l~}u?jc^0bmlKfUPlZP3eEtH&{K^d3CKMLXxv}Uj-|cpM8d!m{5kG3pE>|2O
z0z?0lfsivCksq1FZ-s-i`#wmCXfoi-)`3^%UC2eE7aEv7*+fAREEvl$<5X}nXUX*F
zkS278D7>}dpRKLoRf5)j-2~~=l@)^dJZW6OiZ|&;ZzQ{Yq|cQL>mq@5z@eayIV)Nt
z$!HqL7qg<=gg@trO6MQybJ7n^+V82~7tqRfCXc-;oDtRuBVD$?ilB3+gs7cJobCi|
zx}ssWb~>Bq(-^ba%9r@)x4{=>8|X4AxYMn4Mnk6`n4XOo%n#(U`!LvTJG|jpLt983
zt;I0sn#@@Z>3z}XrbvNSk`{E=^Z!oB4?O(+XkXXAp5Ui-cF3eA7w^*Jai-Hp02=l(
z<K^AOjK*#>Tv@ryhbLX1OKX4J7PayOyi_OWxCIQ*_{P4Jd%t2EzcH}{Iyp4VZd|H!
zHp#b@L#8~9nzuzm|6lvLzg;n#KcN<B|1FumhC2&pGCH4mZh7>sPJqw&NYX!n&FZ}k
zmmT5GA8g+WlKz+OVV)3U(5XOwu`;E9@d1Bru?cb5)FgRK1}6MYMt;X&soyE3TNdR`
zV+Y#%EMHPJ?<A9=5{zwIK-Acb4g)I$=bp}<t1dE16$q{mEN^xP^sXLgT=n}<I2f`9
zqfOrBCh{`uu{K~5Wa;K6!@+V3<z})k&yG;^kGZy@diN#%09C!mPAdv(IO-vMIY4m}
zI-TJ&3KiSPi{6ChQQjYAw=E#SK*l%&6Q7nOUfqzvhU5WZF?muKi`|Kus+bGqg9G{&
zJ8Myw-|z(*WVH~imENZwsx5^(8h7A1#6aG&GpQ%N10t_q;D@<!AWS<7eOlSe*iyEP
zTjh_B<ud4{xNAd+9Ogd@EQB%_x&NR#^s?o@->wrDB7SEkEAIvTA4r<@bMp2T9IP2|
zk_oZ-G-3%dtUkz-54~<v$FX@bYXdTleEP<w^44#du?OP-0MB!b4h;|Qw5uCZO6`NM
z*NU%AI}5bU52hZAYuNAq_F0tau2~BfG>cR=fu}~L>O^<9hkDv5F(r=c!G8(IkM$JD
zAyX)#tdTy3@I#hpM)!R6joMsxFtL(IChxJ&h{rv5x;REUbgJ=%EI;KSkjDfk9a+Zn
zZPRa+v>zp)TOw9=5Kg4b*I1{(;|PoB<^H#?SJ_M8(7mNa_=|wd2eFxtF6v!n$2?T8
zmu_OhOOt**zc!1*XbBry$4`L%+@)MNOZdVYz<UJ>*~>0^wrXea8evRZT?k$sUgfDr
z3BMjgrpQfZBz=4Z>{4!c^&FZ{QKkf~y7uxL%WLe>k0Ux~>Pnc|Hp{1{$0TYw{)5^X
zQ?&*`suX42FRSz%pYqJuR@oSGwlXKYcihdeGS*j%-V!L5AiAx^Fn;rGkd#O|Y1pB%
zVq>=6rps#|qe)(cC?I5Mo*dbbD&G}yGpUV^0@UW;=#ksJtKI(!x0?XMyp{R#E90me
zx63Y-`56V87reLn_=q$!E?K;xBvi79{>;*q9mr8qFrjtYiBC#dOlO=Nbo_!x2zLVv
zNzdRf(7`iN@3UA92n!3PRz3D+_Iegq^JN*fFVJpg7`FqnR@ldS)mqRdriC0TT+t6z
zQ}=n+e}^Qtu`4~|cd39C^%FS{Oja1OYA<@`F#R|O%pt0nZk|LZTeqEp%~7MN7zf+t
zoMF3bWG?#>9#}HmsfQE{fLBE0koT(%FA!*8>P`nm4yjTRvD6_|a=CPOe>&Hv3AG<%
z*Zat+Cgg?yj{IQuin?XRf<->gNl9No2qc!0NykN4suTleR^ncCVGK1S{Ao=2g@2Pp
z&2K7KCN-YL=b_+a%!va%dd&%|`>;;Tqm)c?uRhKbWI(Ia&5m2T*vUOkw5VnF@S5;8
z+xboi2%M5x^b|-c8>&<HOznI~|AB{~syYc<*`HogV$5=u(6xUXU$7x*yn}D}|2tDC
zs{y9ngI6_aEWuY#+gnWll*JN;Yca`^VN3C?UPjYFhrKVi`FBXHW!ecmOx7zL4^8Hm
zSXa=m;_E{UldC3DT<6RN<nD7@J?{X}f_xEZZT=y3;3jgLmlbvBzPjhlMIRi_?6oN#
z!`tR|uDj4{!Z5r|<vPo2PV9X1nj<9<hz>Bc47)r<yRzphqGg!blRBHR)@$oYX$B&+
zmtMg)?vIVHeJ2|tLh&&Z&Ha1ah%yKrcE92?{Gyx6;{nxGmt_cF3hR~zohc+vPQoAw
z(r-ngX8-~yFd{{iE;rl3BT4vdeONzS*yQbxwUL6+VX`R?FG~b5`q-ihpUj)Bm5~#r
z46pJR!;SYyW;q;em16e5KgL(wZBcxcH1B3xA1CS;!_+H+9(o(R{>O}%+SI&)fFJxE
zd$@K4$T5|7a7K`Upukg4EHUDPP4I;SU|B}{V<wu!spS4ULG`{`KExs%C{ZPVV>G|_
zyw%FfRl-W^#Ac(b{#q^kPcpa<kweQuCy56mkn%8oCa-bQvwl=Cn&Pa0s;CJ!`?6zW
z6@U(CPJvRx2QmhKb&Hj)2-2UF4qtMUZ2bDP-cCYKb_DUz!YYV5q$Z!wGxxjyEf!L+
ztxMfnb0J<Jr3fC?B{<{jSvtZfwGw-VtM6*>KFHe>*)H-FL4U6g+Wd|P4n=?mABF|<
zi9<cZTIvFTc;BK2ztmJ3$ixmA`JAiZ-CL%0Yu%XF)xRqfOf1F>4`?{_5^bcL5WYIk
zc9$%&V&Sh!W_ao|EOyM%BTp$L?qK{bGD2;4`)AK3*n8g|V7yQj0ixmN)xTrv<bEJV
z+SP9!H_1}a7Ik+mB&nn!TGziL+(eAn714rEBmVCui!5jAd4cCKJV?tN(9R4ewAbrJ
zIW{kwe=`ZZ33*L;bSeE!KS7T9-WvIFwS=hrw8XNTmQkJdQPN8&t@$&9vQd6|)X6t%
zjV}rPJIo|U8Dzwztj+^!KxOsHGq>P9z1wnuF?@)mwCc-jA&7t{M@_CwCpx($Sb)N+
zJchiGiqeR0r8|<xuirf?%!VDzdX`?SBWEJQEnvaUZ?){CIH2L`y5~2HSFqasx|B#^
zn5pRJv)<NS4f?!Ka3~>h_W2s=k1M-hnbiEP*UgWy2byI(Uk0}!a_6>1#?xm;6jdy$
zr|A7*zKk9!b}E86lnEX=O%(BvL5;?-8v~gCDM&~Xz<pn81>osUbk$IU14J-($GX=R
zM}$msIU;=$mP5=2GS0(va&$cC64-3%84|@jg1y`?qf4~Z)lU=|w5<%zNc1fJ@r<YQ
zdgkv*2aN!bnTY2S6k|iiTC-$A*(Mcf8jIG`ed6a3<?W>)hsh$-R@#a-=j80l_|D55
zgB)4p>4rd2^9%bIgMscFd&ZSWCA2Ru=0g1dDLFF422U}{^iUALQT?N)xp6s$GG`80
z$}6PYZED0dDZ2b!DVJ~u5H-s&BTRAR<MrjNRkhIV$oVg(gW66etrZWgTGNLZUQ)9k
z-O3k4H{Sg==peP6Iw3g^S4k_5V8T60t91Oe6PkA+^X>6(KZsym)u;OiAniR`JxU!n
z><}CLS$WZ}86(8JG6=q`sDuB4+o#C++agckr3mCD-=hL*usY-|qV5-;fa2>&L{<>q
zSLgFE*w^v|<!b8dVOmeSUw-$CXMLt~Vej{T$@j@B6$s<F91;dUc?}WHqmL#Bv^F6L
zN;Cb<`|Z<hE!W|6?u@4!C#R>-l{Dvq!2^Kp6v)lNy<miyhNZ0AAZNsCb#&rm>s3^N
zzs+uXj&r@QRL6n%Ubwz#qSE9(UjMDWPhW#G0d<sbv0`V8RA(DtBZp{VuO};5{(02W
zJ>C4i$!RkrYb~nu!^*-lN|-|VYv)k;ca&i3imIH9Yj%O&5}THIMEiD(=0Mm63Zgh_
zqgf(e2CLYX8*6`o4kjkr&sk7LSpCAeq7>C!Db3Uqc>91SU2tRCrTxt_hr@n9(J(Q{
zvA3^y3H|wUg&^3gWvDRId%Vm_@XFhb28Wqy%-XRbHQnx}f`Ggka)*mOeXaM)HB!F7
zzscjfwu~{UxSKKxASD?|qd_QIM1p&nXuSm-K2=5_K%*NH_->YsKTfMt(6b|inzGTs
z^EEQfQ`Rw5*Lr1FX_KfS(SO)4AYKzq0{q#|*KHB4Z0gH=mHaOqilqC4mIRrVB#5*i
zSZ8D`)gG^p_VC_>5Zi_jachWr%E7))1yulD5<IO&;Y`bPja&fG`L{V>WG0Vl=me=D
zAmI9-3fRxvQMuSTcObE5+w&u)Xcry%-Q&>y7AZvoclf&iiTm3=>#W3hXI<73Y}ca@
z0Jjn^AvKjwGksBt=`^*;9eTI*<C7vSQJxf^T<iihNt{!XE=GkmJACl?joRurbWMj;
zHfLNOXutV0*ptxP5}BIA`V*%#Hf2BQ)R~(@gms?pJr1AXtxxfZ>@rDkgQselMPxIS
z7=!k($;Z$9YS-juCL|OzGB2`11pt*x2?TaHhR8k$de8KeUN?VGT`DN^_5%42??Ukd
zE?@A6efWkdbD<Bvd8J;+&*`!&?)o8#DGMsvlJdd)I2&ldp1WS%|Mm?YC%HQD+XZzf
z*9rzt&PnD|Kxfwk5~qcck1dgLrJ=?R0IT-#!Fwlwz;*A3No#9o0*rIwH{{PS<9vTu
zDfNq>Cv+O!gZ^kg5@<1fRX&v_Vl3;X_oE+}tRU}0U{$EL6SJ0-op{y+;x!E3y5&gv
zDQFUEegoL!cu#XSn;9i5Cg3-qI1rU9L14cT!<>xs_&s2t;c`d)1UV-5B9N#f;Jo`E
zdHFFlYZ5}I8^GExj{CNO>^@Ri*Ujn{a>nFpOrlz<=_{OI=0nzBuB9NnVpy;;xPQhI
zZG`i~HlEnd8*diz`TmkC|K+{a-4)xfMK}j5UK9sxpiq=OUSIO205`DR7OGjQ7_OLk
zfig~W#DrRBW_^w8=hc_uz>i543oBS!r%BlhwJ_4VoUV3KH#UiEr}XbiV}0R+C^xg>
z*Sz8jY={tF_M)XZxj)j#)I%?e+reRPd+u*=fS9j%zcnNj{~d@dVGGny-RUpIk#8;#
zd9+sNFNiuKss8k<V%b#P(asbrFJf%bp%f9!hCUw@`bfv`RILTGV1htU9+HL6hvyTV
zfaS(AX*C~i(FLGR4pGLgk`CKy^HW}{p$;C0<tQEsLKBp_G{;riRk0zdaG{=>I@#pL
z5g;b$xr<w@=WQE8;^5DWw9`kpHpGvI$4ZJtg%a!6o!SJ@&w?R7Y`a3nY91b0GOSYR
zsR}nW`I8hHlO~aZaU1-W4$<^Vctj)*WwO__B;>{8Z%z}zC%?^1uFOEK;=kp<QZ{r*
z@FE{~Rdl?JxCca>%G{dY=<uM;hMv`d-x$7zceV5Kx!d+kj}(j!KCMtLu7H0ITun{O
zt19Epn_w<otmZ}-M*-*a2#(1sNz7tmd7Y4eR{jH>4@!76pwZt>SwB6qRy>@;%-7$u
zx5tpLiV>zDKmYJViDMwUVRQ2j2zuw`$(a(z5W-d2jD-}%_W%C3r^`Y?JVt$IO`~k1
zQK5=R_=ZEsllNAzbQNA0C~#YnW=-U74JyyGLLnIfu+t0{`mTD46>3#&9e3QT9K`bw
z)!pzt7h3NS8)~9uGVby0Qrwq1<rs;l*NMH6_ZCq8p?_H;&s=-PNCzl@q|rR48=<fm
z(?KSylM{ZdjBDaustM~jxjn3>`7&KnMHuHYC&a>gbs#h%vmfnO{9Sr+yQLWQWmD6D
zC3{76fzh6(t}`sf6So=rZPN2|iY}!gHiAPLZ9CZ=e<B>leQbV#Y-C}~NAW7G(PkMv
z9n9#LtZMhp37<MMZfQ1zuXAHymi1d2Up%&{B+i`;RN}ULATOt(Ar2!G%)oW4L2QFX
z_FWW5=*QqcmHs>X)0)*Uedl2z*xi%ECbHd96)s8sY8we-%OQJwNS`pq0C1#x_nQ%&
z`@9-1R)yl)z-kxA5o>*P-K)?TlptQzO(2e~#t7vT-%k??J#=26riSlcoL35tfk?}p
z&J-I)1v|I6iQjwNVHaTyjVB*gM9$$sP08P7ezKFdh0295!WI$7NnoM(^B6gi*P(vO
z?I!m6ly+IJu{_2PnoQl&wzsBm%b1UM$BZ+V>7Uu_AV{NTm#utU7-Et8f}%SOx(`6Y
zmq_Z#(?S8!V;kkgHvD;`2&U}E!jbz<^iPWVSV!%D=sXG*)-l;OnVG@7IoI&gyWVcS
z5?N6))-t9M&kw;*OwHH+$F{>`!_#GD4(V7t=86(+&d(lngEURT%RW!<<tCRPtvo8h
zEo3<k#-7BJ?-E?1+E2>39zud%5=C}tz(3L51sea_1*|J<C&Ujt9F)m(fi|P2fsoaM
z3B!={3}PwC2i!JDXM=e!hUHrsX+c=Ihe72ZG}z~}WcL1?O!}5ByK(+m9sjaU)8=&A
zIzEi7iGCFuJa?EfATgMJICvCVzs3|2i)5v!z_Q-3-#^bp;%9<BVIkg$eA&lq{nTy~
z8GM`LGy0m_txvu8>3Yc#IL*uH=W8k$PD&-6{g1<s^-sL)lTaeNt~irLQdDgPy7Ze(
zet;z^QfnkT`g*N>%2lZ;gwrPBaPPDw)^*gaBj-*ee;AOm`G(M71xwMB6<C?6lI&&`
z?uA?C+ub{&@Q5Skrf9gI4y=ks4|y#SKj*C6k1~5O%R%>F%orZq(|#@O_eLCHe^4r$
z6G0kKXyQS=V~$;Kl(zmnsDva&P7`Tx4@H$b3*l;ktws{RBN9U-QRR$(f85%qc6yWk
z8|LF^+)9I5e#>ZcbhljH_d7*^5=lh(?Kvhrmd>KSi5Bq341dZ#?^qWC)v>#v<0&Sd
z(FcKtbowz$B8;P{jkH<8saCfU&zJ#0Z2?DaX1y+92>#&E6O=zH3xvb%gy^PM<QQ4n
zIyjtttfcv37pJI&3CgUN_g!O$yKlVWnk?J<uzKXbG;)}Jmb|8REYhSz?~p_Ud;j5z
zN0ha2C&M>0JSAy8SkM20q0(cH^0mp{st10%LagX|dqMo@AC!W!>!z%LVGMe(k2c*7
zXRDyli4+@7FyGbK-i$BZ6v65VA*fD1NRN6>kSkjAH7eT9G=n3pk%l|(SGML$YQd2}
zi4$dJDA<MOe>R(CT`{GeUlx$UDnPb+YhLnRPFnorKB1?p@Jx;W#uA`BiwfP%;E}SO
zNx=)R?>H{I`Nk@s+V`jd5GSf3B!e70ltfD=@-$<)?|m4A-v^;X9VF5j2-Q{qwtf7)
ztt-<?m7dZ7lk2q4;V+}Gc|O;P=?RkvsC58Z(tVJ>TK)?T**Mf$8q)a+QKAi>gQi-N
zi@j;${o(gC@)qkjun@3!Ap-j;7!fy(<smD1P~s(YWU1=7n|`Rc(Y|usBEj{JBa>%8
zp`Xg&WfW%R{kE`(<$65ryV1^x+L(guxqcdD_!-f_o9f5CSU*HR7Y>ZygD=eRI*M01
zf0JOdGbZog@aC9P=z|TW2VDbktO6L@N+~;7*Z1W5V?LfJ?iZ0@(q>aMrbg^m;L3<P
zj3hlOfc^yV-YIbQ>Sxo=uN4#E-w9&hS}#2mt+y&i&_7q%71*q!Mmk8n8;di3H(4G;
z??qog4Zac?K1%)xrdRqr?c53j+E@&!)_@frZM#EcM@ItL{#Lf^GKj^eT@)nY#T>PP
zs}9xN$o8X#qdn_HH7kr=@!f&39Az8sh1x2b?z*Xyta^N1p@-Jr`#IaDCMY1waXS5`
z3*XQOVgPFzwy$nTf>!K9p0**OwDh1B2MJKW^27HBwb9K&d0<-5w-yjLTL&IN5OEjt
zBVdd{(nG8f=CAKSV(Q1x6^L&Ju<r!pl(+*X=b{OJT{7IR(PXnO5?GPlh#Vx)YurEt
z+=p>%#&8L*j~<gW9S6Y^>))tc8_+=FO*bj@BXvXzHrxRcQA*a&xodB&!^JR`mIg3k
zr89Xf&6+eru8`0&cKFTy)}z`oaPEORlI*Eu3v$b}eC3rTky*yo6ph+^_SIh;O7Q<M
zI8+1R!8>Mi$IsesgC5Fxr4^?QF{sR=-$GR9ux!01)&ATJCmTc&Qf=gHPcB&jqTS8B
z!f`(hqi3-bWikT87y)1(2Lw7*6<*_l7uEYQj#jt?c%I7q<@*bFgA^)+_b4uLLqEz`
zWdC+3wECV90=<agg&UV4^sJ-{7;WX=u>nLg=z({l99xlTOuA2hKNz!9M&6lmyFN&O
ztb!U>1C**IHzB3ap~q4ZS(ptFei^d+Mzn3QBwmgmsOH$r>+@E|ZZREnJ;QCe2qw77
z!dgO^21L<(ys(PqUd5Y=?}y<|aqr)_>EImRX^0=S5b##tln9L_O=v?AOg@uF#x2P>
zt$Km#vhqW=^2b9gzEsXw+aFiO&b4?AWX&BL<K=~tmvHnvsyD^R`mT=HucGjvo;xhS
zi4mNX`*AZcm&^EhU)Z9s>WkQL!I)=a89CS}@AWD{Vg~KDoY>AK&<iQ}BTOHSo^}t{
zdCLW(vkzUq1vrE5iyrc;I~4-}qsufY%=y#DyP(OyUt?UG*R5UpY|`v>44m^w`V?zM
z{b2zoSWP*$%CGCZ?4$yrC(O*UN;{vTX7>#tOzf?k4@byq5Cp81!jMP0^Tl)s^~c)|
zSl0<`YP?6=WXVFmhcuozdL&-ycrTbfB3}3Lx5)@@+7|3FT)ZlH-$<duwiXmyTBZn8
zKMmHhmSwk4qF7kaj13t#hhLDrOYUV;?b2?FQDJe-=7NqFk1tUGPuUcGwhky(M1*rY
z?`z|fuT1Lb0EjR%0nqKF7n^#GhO2T)F2+xFjY5ROO+Hfs?hXo&oB6jJ=jrj^qQwLj
z{Fn%T4g<d<%P9m&d{N;Qz<)i26h;vbc>wK(4L~<YZd^*vpZ|!`zg&xaf5W?B;t;0^
zS&v?vP|?XrI#Q0hr3r@966F_7g45_ojetlSxmb?GP@Sxw%g5r2F%KjR%GhVNvf!%y
zCR1Y33pW>$3mWOPF{vnSPZm>mc$&N5!P3_Tle~4&u7Ph`JQ-MyHVV>dp?;T$vbeph
z@TdO^JIT%lHDVWuSKs{n-vi+Tt@x**npXa{(;yEOp^jUVBQFZysjJRFj=PA72p7zs
zWOaA3NWGf)>-bnA`uX^{lfymF&3@t0Y+<=C-;}(ske!&l#06ugnQmT?p;8H3r~(Xe
zx>zgmaG*GG7uOiot{G3o;o-a|q_?G&GKrp)Hu*rG%&~dcz_w+LwqNj;CBFgDksZ1l
z>-ZBpI0vP(`o7rRQxPep8tshOxpp={+nVtDjOS8vDUh4zEG3Li_)xbAvUjg7j{|=&
zNk|FAp~jdKBv*L?XNWvp^C0PAPrjJVvj$RjroTgg6`$pUx-18J)!WIW==xN(`bW=9
zmZxxSwv%$lA~8rr!Mhrgmmto^InRQ)ut*O!9OC`j8R=`$6+wUKe<u2dOw3gFd`bMX
ze3DZ@WxzM>M7k)W=7}dzSCr}q)Ck$T&XaZJ-du9+XM35Xkpdo(STrqn#-yH!zoIcj
zEFXP&=_gYrLnu#zg<ztio@ny;P|yKdWGC4?bk`C$#dJE9-qot=^}4;RK5h1~cSa9b
zy3))sPzzwf(j*8mgCp>NBNVj4Kc^_nhVs+`^T2TT$%CLa*Xp}qKt9UC6nr+24H(6-
zJz~XWJpP4Ji|B(8gZl2za*e1}>KxJQceo_P-iHW&8I3elb%l+h8R`nlx5+<jO}DC-
z=uGDU>TD{x5^}#31a2U+MpwKFWZPNA__0Y4B9f!{0<{S7<{)mT=@!WJZ<Z<fUb;c)
z7tJDL#N^X%cZK!r@9j=PrV@$_Gd-*PHWgj&5ZgjVn<AoyQl5*g2Sy}k<`)VA(MLX2
z${CyPwAn%CwHDKLzX;`EPva&Lllm3HqB+vN)V?M-Hv`7j==*4o(D2spNN;ji+SETd
z|6IU3K9s{@gws;i%CEBZsnTpA$G@>nC1jP50zwu@mos^rIoV^_-}9jjHL^@WFCH|O
z`duLs35CyAbpV6Rzy=6;p#-Jl$JPRNBFEs0XQ5-#=a+|LG6VlyZ;7&<h`JzH5RK=z
z48}lPi#@VUrdzVYEl73X`>Y6if>!G<I&E0WIg4iCZp2Dto83m-WW;e9(+q}JK>}!^
z0?$FBVB#`1f-bPMNlQ$ZG~y7w*F>I#;T?e<ZL5G&Tw!RxO5jp<kHj|>4zI(#lwE7;
z)DwH9cHzYCS%tqDu*!O|A#+;d`oK<O$e7wF(6Nl3|9=m!%G(YBD+jQKl?<n?Vmmi7
zgljr^b0`ViVn0>8U`+rsU>6Z1L=l19utbd@ciJ4Ot#auTG}miPn#r&(epFwk<>qrH
zwRzYs<N+j)Y6Dyl8M&yt?+=8H#~xhq<uBwHC?a(nUh7V4w9X78Ne7pcPVWCAg`Jcr
z$||!lS@qG_uWNF^@mj^nhOj1Fnj~0J73Av<hfNBRg&ZM(COqs1oeYml07KUIr}t!B
zSKsKR(IJaS$!rf2$S~-JS6rBtF=YaR0T-)+dVjI`humkEHU$=()Vp%iwQdv*QL@Uf
zMod(B)Z%H}G3=bSl&#xl%%Mrls%AZiiVRKuTt77zJT{zB(fFKxW4JV)P%gKI3JJZ#
z_=p`9vlajEG7OM+evN|vZYw~C#O+c$NI0L33TPLIuC+qs2J9FK5j`-#NqUP@EV09w
z)jnA9VM*<>j0b+zZmqQw<KuX-4|`=AasV_}(&F2`7PO*F&bduEgw*49w~#Drrfm<G
zy`_d2{{w}4LAVHZ>@94#vGExTMC4%2vHMp=DC8mi#YD9uhB>TU7bY^xhNI;v6Tjjy
zm2)54iajNOE(bMSvf9lAyaG4tcn7)MjAy{7my*y7Foj<`yXm$FpIcnu?17uNv~NjC
zv9C*m6y4RG6HRd;+JJI)|3vO4CU@(D-5d`5w&)JBB0kb1^pTn$QHp>keH<OKUip-8
zAmqC5i&oLH8Qy$SB?QYuq|nTqgh+<?)D&t6!Aq%DdYR_cedS~-`#8@Uar+OHB&dl3
zef-;5mePdUZIiKC^WQ=}DEH_%Ikh7NYRxs-IgYp($_3e`<Gy{^iqmu}hMmo2kCn{2
zK&ZJm4#`{8kdN&_2~RV(yb6HEMo$D=Esh+}^pl-DAbnI^!r*X0JqU?C9I&;-hmebx
zolm2XyTN}0;((5FKWO0>`RK<M;Rqb0m#<t}qh&i^t-0ctY>5%u0?)zx$2)lr4ibSo
z&?Oc9#R}Rl$4y%--Vq?Z%N9}8_3EH!SV@dE()wA?&rRB_yshl<!WAx6tgqTe=r;AF
zB8(p++(~Of&p_1X@+8{q7O|;zJmZq3Q^q@9%)lcRL4wj4!AW<<Of%&ukAreOPCG#D
zEtl&vkD|=8ucfZ#EpRlvY5O-de;`cI&b!}8Q|>Clz=@T^SC)T)I+#|s-Ot!W`@lf3
zCpD%WOaa5|m^(APQOsb)yYHJnF;IJhWqYc`8uPOthA5}}vlX&E1qQEl{qWrRcz+0?
zfI|@32iJvOqGDp~SjNW2STj5$O0_1W0x17(*G!LH@K($J>QgH3zT<vv71_ok#Cej{
z1+U3_241JiZj9OX{A0^CLK}iggy7jZGz>rLd<ho@)ChF2W;b`71N;Y--WNv24^C>T
z7_k?8;{??i?$%|-i(Aqxu(9vwFoqpXM*G82+VE1kUuQ=cnQP*j>%jou@aWMk>U!Cy
z@sI7%WY0=JStd;C*u)sI)j;S3So?0(sOJ>l3Igf>Wyt@OXA`rU2^m-U#`y;Gb>-bD
zCFDnF?ICFH7PB~EpC+*cV+s??aI1!SoA$=umjU^+ts>^&%k9G^s<N6!q~j{dUoJiR
zUI)=tIu@!xfd(*)9$;V~!^i7nP7?RMG`7O*beq2UQpI`>92tsFofbONFA?W|8K5%i
zs38N;#>2y0Yx(yQ6!*c{4T@{yPM}Mv>1}%L{3;?!N!E$f76<V>={dAfOvu-hG%dlN
zXkDd$UyM8zck<^HFZ=loxM{EXB*M60lM7$5?S#Y0U<lv645tJfODXGtw+9K-t3K9D
zFy`^%qSbzjW+}nlKgF`$kL^?*fO-3AO0xW~vtf|{uIM|v%2ll74miK^D3#;pA!SrI
zrJY9nR?}-HA33U73+lcN?^PPH{}1DzBYV)Bp1PJ@lS$lDTqolj#<Wp^MgKS`1LRBE
zm(?YQl6w|^Avl;Y;^!#%?yJ$hhB{Ent|K!BJjp)HMtNCRYDEmfH2X0A=D1Xha2k<4
z0UZ^i0WZ!%4!#>1Z?rPlL!0vKxwu{4cMQ|$)5C)(4(-FL(3<K#4nR~rJzja}CYZl6
z;C(1WMp&$B8i2<2{IbtIb0*5YjPEE&$<~{4;76N+1{~c|ORqrT2hbF4o~qm(MIMrd
zr*f!04Ld7aRXy6T|9@&zK-r<ThA8xarVgq)7VQS%3%<-udFv-HE5A(H({neQr@Jb<
zB}KWy)3rZs?20&h0WywX_b^?DrU3sx0Kl%!sJu)2vnGieSklb`H^Ec@02QIHrsz*S
zqmZe$;NWaE7A5&pcp>J*%u5P~TCS+Z-T6*GKDvwrCR|<1;8|*Xv}R(QO)6H}?$bT)
zdDNfbsE{}CT$C|CA?I;Wj@E%;eWSGSYw_jW)K>e24~q5D6E`Z`36Ps;K1L3{RjcZ>
zv&f#X4hvdRgPECP?hTZR0%S5r-^+%OD88vL?(w`4+s@cEtN^KBQu-aPwn?*g@1=is
zjt%}Pf_nodo1}sPqr#uGjVBtMEz*(`kX$Z<!xW|#pXHOSn19ZwOEZC8lxIZke(~md
z?@NmQ7EqWJ4O{u;wJQ&iDU@_ug5dtH20!1QAx9iaa+-<$^AE{eMDX?mdFOnw$E;&s
z_A*mRT#3jy`$CsZXU;x@p;nzq-UZ&17X}EmM1qNRU47uATI(=J#^nWli*0>G81DuO
zHG4C+?%(z2D*Q#k(!+G1S>#A|Y*%Am^Q^KEjb!R9sWYC&W?EaU+^#5W+~#%ZO9KoN
zfk&_J5Qy;*WX@COcIwI2)b_fm_CvLMo5J4l9tmHA|CPFMkDM9zL5q+J=vcA83sA(T
zzNC(%!WL1DED=$`D)20Z`X#zm(t)Eu%d=)|9I!s#G3LS&j1UN6nbW+%OLJ=7br8jO
zBNuF$HIKdPkD%4u<=5r7Q~eb56fMpK95_m}ezPNIA(o!}UY+VU%o5ToHVZLL8uzor
z6FT>?F)p{e4n@!}g0tafFf9pJYDkc{q8vjYcLa7Af5c%`e35bGKZ+abzf*MiqLI~{
z0ubwic?7b1rZ3RtwoZ{~6F$^T#<rFw?NujI5wz&V&$`#pmiLW@@rXMwF7Vab*Sug6
z&+Un-1V*EP%OXVhU12d)BX}5?!mvqqKLD*U1fnfQ4PRq=ux6kFa^i~Dp@f-g@G@2L
z@7=(rIGXKlEdwiv4CR;{UlHcE#Cd#szwZ$&@zulzO^|Skq#9@!cvJrTDlr`)*_uvo
zQ?O7gW^TujBTzdU5aIvbDy~3?Ul~DwtLjJAq75-LZ7Lin@Ljc?F=S_;%_3b@txOZ-
zkvuEFA8+dc^1|AdrMs1O3<%d>14Tp(!sE5SS1x<EB=p{F5@d4IENKN$De5BX(7e`-
zoSal<RmWswI5&Pf3mMiW$4I9eDUJ+by|sPi`;Xr%W1p8|Xy)rdO*;r=e}FRcJ29=z
z`!NE<+$5O9E@G8X{6y5?=rU!${E!3twWBy5G1j^O%yiJ>dl(Vvbp*TpA~N767oyU^
z7wLUr+6BC&Tnp@!HW`5@hQHz&5{TvXJbCk!-Ca5?HkQOTVsaFv|KOp7e}(86SJLYb
zZK`XMM#e?4={{GOtCRF+foISp(;Vm@0#z_r1WqC)$?oTz(TkjBd{&eyNJI8eZ-I<C
z>GYZHl+H6gJD_&q#X(t=nNfP7vMGyrak#a61xEphFvYIz$w5^v0{_V?a6uoId31v#
zLL0JT+6bpz4=XS3`b#00+GD<IHH~N<%OF;h^qK&lKx0MJI^oczh}CNZ8NHzRM}X@@
z3eYp6l75^M1)bnGhdxJxYMQRiF`C?y00=3@yW3w*m8C};#%-+=G}mUs+rj2BvqATK
zs?NSKtjPW#BE?*;(H`fg+MQ%>xhpMJSoz|YhVqdF)wuOqC(~6Hkta77|Cu_zK1hhQ
zOi51QI7QQA_77bk^gv^KlqOCb#5ii>;xfqj$wNn3^XrlKB5orI>f3Kb<6_97ui<LG
zUndWf^e_C_@WHAUM04m4`Ch>AyCye~;kS0!-fum>!9Z-V;I0yfe|n3<Mylk7+iXm#
zai#=Vw0$B`EvBzs(nHorEwr}OdW<eJ$6mv_zwQNQ5)TCU(EM3q1&2y7yn0;g8+{cA
zaYYfgg9Lo!x?4MC)r$73@?nu#7H$C-ct4dK;_X8*#-)pKgoIit<$Jl=#kKm+h@mw~
zIm#apTsR<dbt$D3+!@3uTXR$W=9`xmH<WD{Fk%eyB)MbbR7B&zL8ty-^j`9J!oo0^
zz_s&RSfsT#54d`PRx4wTHI5N8vL}Z*30Xpie4*43vz_@{Dr@_IZggab3tG_uz10C)
z;%6iX(Esn4i7i=S(Oz)pB!MzjlVNdNBY)3vcl^BcAg`M~i=P!#fnk^?O}Z|MB3yb9
zRlVxOOt)|uI+7LRSb0aPKO4ckNI^U9$Kx{@bM$;O?eE!?vlLqZsS~jnMf#};FgS>I
zS_CMNTibqL-RQ2;$gvySeQe1m{7SU}=g!KIfcK`$z>{Jk2kCNRatoh3+`I1X`s@Rz
zI25I?T6g20L$$R`0;KJ$1O*&+q6B#&%{3e?r%N?7a&B9)F`ArhNFt(Foz4e30{c(!
z<yD?8XSyZBFvjV@Z3j-$<B|>RYboa$KHR{xXCKT&;3Z~a_0yCSOz!#QioLexaPg11
zJ}BKh`7t-^oUOsgRaOaR5)Tyc|7m#jG6(tf%KyicQjnj8XNvkxB%!;N&!m1$CtFaW
zW&>Aq;nogpmLkPY2M2{|&nVV?vgA@LfCocf$}$8*sI}I1o!?8F5_4W<OcMGCNdi!V
zkYorahzD`lL+3~9cl@b9Q#4o)%D>XC8w5Kk#m9_QA8svbU#yiba)4WESK-*uXkJLC
zLF=rpEiD0}dxb2OI|fG$VL_@Y&9h$(!Eumsm6D&JauTkgeg?e0@eCbaX4(??op%&3
z{em~=G!q^wTvq4&*ZLGX4Cji)C|zgg#Sm0^S6<NSZT6g_#>3`<>_j)aa?~n|1Z2b%
zW}GGkgJ$`Wl{71@kKQ0OBJ|)}cE|AI&F<0-Su({*sIMZfd8X8AFlA4(H;u&FS9A!k
zZHd;a1m-og1sRe%;_$AOmKGOipGn*scyCqX3AKm9#Nms}{qx{pqq3h`Ea-3!ti?Nu
zK&{<ls?ii~<#MNkxl(0_C)N~=Erbi`&4N^t4(Q0^WF?deN6^YkaKt4qe3hiK2rf>%
zMEqQ0Ki4ze$nyy|BBpKNDF{#!>$+M=cJ+!XoY=9pd-5ksIVdG|UN&N&Q(q$W5PZH_
z7pF2MpN64}@O*Ms_G|z_W8y!=nZcI9cc2{zvW{F(ZHpd*NM#CJor<uY3Hw69YmBU(
zu7nxLj|3_E18{K#!?9gzQw0eg!60x(RYcbeYCSEZU2=#173O2NJ3_O+P$3KKWrBns
z@0>7o<o^#%!eLCP=~2lhHYL#bFIr_C1cdx}wD|wL4(i}<Zv6#5q5yrw6Ky3TFg+xH
zRgI?;p_255Jal;Y#CDU{b4FY>xLSt}7n;UJ$S3#*Mv%TMuPEC5@CvFmDudAy&?XXc
zzdkqIEMXp7wF;)qU*&#+=^n__$g-^wr}z7CWcb`;=8+3dj^HP~gBXXiKtZx_WUwjS
z8^F&OWP?W^ZhEqFoF|a`f8!)f(iBmlkVp7;ySuV7kQ`G0R(R5y8ZU^guol45pu8bw
z%c(APqoP2|6MB;RCF#=xT_DP&xu|NKfuO&&t7#fUlRDGwMZBYW-?DPKgKGeERth;Q
zoq%dF>5UDd?azXYK_^DH%)>ywO<4lem<Yo_<$USUYEpz5%IPzjc5w=PJ;}8fOec0?
zkhBUspYW-^{cy2Xj`oEK$akUqvCyRYK~?(o=<BSZuextY_lg!57Eh;be3$ygmISc$
zZ8w*}TFIwpVy*He*aK;;HyWb@fx91UmKG6El-tFePOr>PR-^?}EWt{#puS+Wltqp%
zMmhUwTTY%1|9(tqM7$GDV@|o9x>|W0o5){PIR$k!@3~xOcBA{%)XB}(3lZLJSf?YI
zHYH17nt4^Vj4nMAlLVFqJDjt-M2YO`Z{BbMdTsRASI4ZXv+Dpr2Rg=a@3+UC!-+l?
z3!=%T`-IMO9Rve4&&K+Hc;HaUOZ6M1Cv?XT>z@X`0KrYDCwauktTcWW?~<t6Yd`>(
zne7)7n{PY+IZLk0+COu-Mz3Yfvz*q<4J)ua=$ef$>h-PyUtxKQ%Jac~ivvBVScR86
zNXsE528_KJ!2;sx`+l=LN|gi}+~5EcbnKr;ggTxBGU=IBEA3Y`SY;;yB`q;lXguaW
zP?^I@JJp`J!1CWT8Pu&o{rph?Y85(D&hatsPQ8<zdY*JXRYnbActe=G)q<(roUPi^
z87UO~d==mfZCXcP?PC-A2iKbc3aZ%d1g3hbuSS(-caIH^-@N@^Japxh=yvG}UTIqF
zh%%{9>W_B>X|)=N5nwELA7S@WUfvHbtKGb|5xCg2T)|ly!e3_I->vJyBXR3Pg2y#O
zxWJN#_hVZ(10&t135fMp>_6oOWAPu36pPc=YLS-+JcQgk8g|Yr8b*`{aqL-8yFWl8
zBM>@9<GiP@6R>P;9DQ;$xzPUpw$R?$vcu&ylUL>_W(vZi5i;@}OMD^RVXUu8_*J5W
zxv?$w7OjbaGi%uA;z|ag5)-Ca8mT;+AMN_XGI5>r4<u!eAdzk6rVJ(y6tx2aSAVmE
zgFW}>hm`_sqYvGlYeKy6hQV_zKMm<8?U)jny(|m&*R_NmH^l{?8_r{QO8A1`?4*KW
zNeiv8&d{4%C$hlG>&hioe5kto=4XE+WP9DW7lDC<=Dz}FJYbb~IEkkaNHfm=d5h5u
z#lUUuQcjDiOTsQl*_{r%y5LL#ZUr}H9YdsTK69?6L`|*@_=+IED$;Ybf29iwzbh@$
zh*HH<Abn+xa2VAQC8qXqtA7SpEsBNSvET_?ra3t$>9K<NVEG<Z*0IJyY43L9A4=4a
zDC)qM#rY}OY^=g0&~B()rayxbN4v-L_^mHUk(7RVKCp(mCY0q0ideuPqu=T}+yrn~
z%N0)ME&(e780MM!beA+3p}H{S2gm^g=_q+0^O2G(%-ea$R!T8T#89QYGck(o!x?5S
z=|v}!#Z?}7rXKX~o+w=~h)+9#1p5oT=fK11r<(i$q1o~{sN`&KS9!elXUbu8BD33K
zIW{vlrU=-k2|V0X9Q=6pX%tgJ`fbi1?LydgB<Q{4??@{<9&V|DPU~21i;}Yz97<=<
z9aMUnY{9x{KtHOlQ4~KCI~p>=q^sQ>+;ATjii9C=9<w+}qzxyNsz|ezj!0R0^s-Uw
zd{wY!Gyl3@l}&X7P>Y4jnX)Pf<uM{yq8LGyAxzWAH5vaA97;0&+T~;16$Z&@ocX*1
zEg-*t2US8eeDAbU+5JaT1P7L7+6Qj55KxhEs#(G6ezaSL3(OFZj2O>vRrs1+i#kPm
zCX?g0H4^!ZY2?=DtzC+ZuxqLFCFc;JeNl|zsVY)~8j-&GNU&P%p6xyTR99pL=Z!)m
z28i%e;|j~DS-yo-TC2;?Nq$m3MwUH1p$5@Nyp<-$DX)kX&Ic{K4J3eq%Qp{d{2i^~
zM93^JiMaRev1*tUdHuweSVW3)9OMI3bIF#oCt2oZOS~GrRF;7JCWJ&CS4MVR&)uU&
z5z9=(2c+S|@fl~%1D?k|bclD-s?qL+!E8N~q*YTV@PaJ%S-PN9=xjlG4^D*CF;q7u
zZS2Kp5yYq(zXI(fhpKI&<Yb$2iNUtn@#KZX^*JovQi-l)oln{<mLxHBc2Hr1M)V>V
z)FwFv=DC+>Qa%rBTN+W6QND;1RasF2ydr0$xl<JtxZxYqd4eL9L{v*kT3hdEE&JzZ
z-RvY}UDnGvVmk~{)pp46<BCX1s6*e__4#D+=<L%l!M$yn0dn*s=cARz%U*~54(Mnc
z!G~NR-T2x_jRg#*_^K9N<kp($rJaMQbq6~t;*=qjaENTQxojEGLenvfL$yo|1n~!S
zb5b}hq{PzTW(^W(0uu!;!WMTJ6E9<AzzN?#HDO<sHf*5{w_^b=a{r9>u_1CAe9wuv
zo;H<fa=IFFhJUdk^;j%pLZdNRjHiNg_j6Zc3Le9+5USI*-vzhoi-B5L?ETsK0q4&r
z1e)YZSB;hr=1A`C1JV8F=YgZ$IU^Qaku#=b_Ft-~nvzUMh8nzLB0se6$Qbt`dNu22
z|97_7{=FQ%N){8Y#1$!MX+{5WyrxBaE;kv5EM^%W81ul1P1I~a{1~rsBvQ`9>pWXi
zF*<C`8B_o%PR%XFgJp><L1bq3ZVCnQ+$jRVYuQ&TM|H2Gh(VI*4Z6wR<xIzrR@;yK
z#$e5prf-AOeX~x$rUHO*U%T3M5^8fAqRNU|5lhGhEL>Xr?XdHhEa&slV9<+*^sr04
zQq_x0jz99*lSi%VTC{n9jYW6QFv39^IEONpK$*OdB)YBlF0euF@pziH&biS+5i22B
zZ0d^fH8w+m$_Dsa^6*q$8yFR!s{}P)P8B<~iSEf-9MXf(8NI{7#XpHN8UMP7tt5l_
z3^^a+S;kE$nP4vp86?5~=8AKxk#U#FCYo!j2J2iQ_3@VSpb**dM=GDy85d12PxtSd
zEl#z(qhMJeK1#k>6Y}rmE<f*?-;Bu>JP&g!S9D?-v}Bb}i9HB?xexSknI4yZ5jv20
zU5pqEF#9y%DOK@g<_4TCAoV!>TlHGW#E!CJ3``vwM^@?4qY}%DUqI6RaXdvvT3inM
zvI0-us2HLAT;kdCm{CNAp$F)~89PvO_<{`sl%|;^RmG_X-Lp~!2U7tC@Xm5k31S<<
z>PsMx4zR3-_y8X@UMo-e3}%a)uiB-geQYS?H?6$&HJOe@32wktb3b{+mAxv>y^4Al
zyU3>%gC|5drgbQcv^-MmJcBl~2!(AGh+**2_AgxM)&f<sk5lvol=!~ld$4F`@d?E!
zHo_>s?VTX}{cNEm-;jltexXyI6bI?5gSuh&;{9xPZc83EGcGdl2!Ch}2Ncm~TxDy?
zu;OCu%PZ#0oQ<}=6t>k-)=aSQ%pLpzwp}tvhhV>__Vmjx4T_#HSFXnmL+O|vv_hcI
z@bDM>=j)x7a|mg_4}{ttv6TI845!>&$c@6oCa(^PB~l;H@rmxq6Hqp))(JPU-s_B9
zw)O=pn2$vbI<(EgojrcL<zt3WpNvb-f|AqYLwn~IZHq%6_<$XqpG<CXR`vEd16e1a
z04<PQ<N)4mpy%cMKA7k*f>gP!)iOSEvg#(9cml?5VI-&UTJw;|SNN!@F-#VmzUvvS
zj)kez<+E@qgODd=_>5K?5@!9%_x9=qg{UapTa}2k`ECVW#X*~H7(3_P%&?R@N}JvX
z1Xb`@DL+aGjNDH&%6rO*gN->2girhZSc!EhI<J6t53fV1sG;Ykm<TUn218(8(fSP=
z_ypIhA4@QqZfZL%wt~^~4@e}MXg^^q4za!@qnSK}!EBPlA}L`NKF!7tW~uhDgWpYT
z<Ja$}q2%pT^Yj2s<Hn~_yPI%_x0}g>bGHrXcAg9bO@AsNnfK8eeJS4GzP=5Bco}cu
zUG2DgZ=^7yM1B&wacZdt(*f3<GwyuZGGGx}XYr3Up&L-?N-tkPW4f%|$<{<m{3P_P
z#lA;#-Wl9Uw#P|jnf=pYn!r(MBI3L3giV)PCSB5ocIcUc1TR=dDB6CGU4!ooAz1;*
z9=Ew(uLqzj`3Z1%vXBWjw||;Z!o-cRK~`e>4azPh+7ysJx7dR=M_UU2ojwzyN_T*-
z5qfghGBWh(x&GgWT_&cpI2U;a6WrT?aYS8S0Y+9?i}1F|2@mQq2AV@#z>GE-siN}a
z@L3|`0fdp9_eXY+qFtr39V<(|gWo^OZihw4$tN1|Bxrgt78v7^`DWRai7l=hN#!%h
zk$G^;5Hb1>h%_ll`kH0WdQ7Zmp)UuMz@ikV-SWI^>tUVEfA2F|z&OY0T6QT$oQ)&Y
zUf1q!L}Q=98%TK@U2GRMn~jLlVJ!{0KPraHOya-c`MydO8>fuWPr(^0LtXKT9<iBD
zfzbhO>+)E-OuZb=gUuzW%b~GGhcO=PH|^H;`-IwNTBV?aCXEj1B<Lq&(4q9N*p{b!
z>b)|F#f-)0pF)W*D%t_s#lW5=j(E<1O}zzGN@(?~49LoK5*(^0r4e}~v8Vg2mq=Ub
z3QO%}=VOCGbnoGD!8YI2-Z)~3(+LYM8$_ug+3eZCUz2g<h78Rh`l@`HC8G>NrCdIA
zEV9fqz)bwG1bq1!*OJ6;-Qw~pYNEvFvP+9zkjqS9Rz+blZ|jTC;2L#<FbyTnW6gTB
z1`54__q|bBqa%13=&t;kQevZ<v?a4(!d!m|2plLI%sAtgE(`KtGB4?QA;vkYzR|#O
zo<$+XFu=mu+_sZdk+(?1#jxL;AC5BOF$jtKti|g$=?WXgZL1M;8a{t5AByNP_c%{F
zLz>{RuS6r{VmZ40Wk3IIrZ#oS3aeMp7-z@{;v8mhNxjTP|Ht?CS4$ShijqeM8WCxX
zd_N#Ror-+9KY5))gOk(CdF;m^hyjTdL1gwDX#{}1EKy639VtXP#$W0~J}Vj(kjxUv
zq;-Sk=Rd0Pz3HNMs}5NmHZHaFrr9la;z~F8oEl3pxE+M$kXE0R8FfolY|Jj79TenU
z$mveg{Mp@QoNWj@z67xoBOQlyNtOeI4v=Wo6O62}rB~_t7+I1Vv?~HUfalM_lFim0
zajM_8bISF;bMTDWQ3{f8ul7oLR~MUmfkCzl?KM41H<%Pzs#9>gdCwBLElvhb!DOCu
z^R#eSJlvd=-yF&bWHwrjimx@r9Nd4~R5V$;fHZ%lIm^Y_q((}~IlcZz2Aom_G8Fz|
zpYoBU7<*NrT1k#d5pZ&f^Q+aU@u*doIL9SOqcu$li8K{>?Ezq*g(K1gLi~C(=OMaA
zU|xnn{D~xh;J4MktU1l*umDVz+Bm+-0V){`_sncZteYr68Z!iU!_e^y;EHi%$GCiK
zFmD#2c~%Y*RtE#@Okm?xu+9p|q&yKK(wHxb;$k;+NA^~M;GX#&c>l>&HnkL$e?e!2
zA4;nmX3CG~Ixs=F;7+#&ng1CVS{#A!nkl`czP>n|B#L2fm3@!An8~1+6p)CUK>7;y
znv=O5G3_&?WuZ+H7ysRZd%TfRXcJ}*N`$lnDzgL!`I9$;_JpT=zOhx<I%9SY37>9h
z8|vw*jV<**0LbZ!E*|?*NpD_Gn_utU@>e7;?^VZNQ-cfNaFk3|5oH4p_>puV&C5t&
zfA(=!&FW7vp}-T$$#0RmYY&9Ewh;Tn@(E_iJN(EefW7EZ+4IDz8{b~;ZMn>xbFuKp
z?kg?K=*4QyITCUYhuou9fJ9Brrs5R_@;S%P2MDMZovHNG(8My<s79V_79j_RkQO(U
zV)$ph{;_V*7jCEs^g-Scmz_;F23vydbT0Y3l}IF7&l1^!91NL|HIW}oQ2G0MG8UDN
zym~QWO>JIYdGWlWp(avDQak#^Sx{x}v;S0Rv8<p3E8E3u9*qI`&`FxaJl@zHfxu*%
zQ_b9*g86jx5`sO6uD((jpy43==*D7;bjlT*=zSg`)dAHtI@*$(UO4yrn7RAiM@A4l
zr<zZD>r)-NP>%>+{hMRSFxLJq9OTh=CXg|TLK>|hH|YF-dyc@fFL^NAXOX2y#O}YV
z$d`)&3l;B;J0_8@k`_I&tm|+It(N|rKWF(Se&!Z%kF>%Y?HLV>YN`Afc|-|88^j+-
zM;<=B)net|yArNCV(YZz*}ZG53SP<Rf^1H2%nh8DPEKoKGN9$<AFMzx(A~sMT_HtT
z_Qs(Msx*8DcXfQ%2DRS;DZV#Er@PpTFM;D0jS#?Rh~@b-f20gLI1a9(2QoO$nMtji
z<xm6p_f9;;Q9zYRkYv6lbeB~GT*60iI%Da81k*u8jB++_@eKxDDTY)77u}7o!RF6S
ze^aGWTb40SK3*0>a#PGMm$${H<fs}QdQ0IuUVMk#06rT+qfKvfQ(0`y$v5K4&J5)0
zz(H()q3fs9$(X-Msfbbn&!_pX8S9LN(|8eJ?G}aN8!C3(J|A7-<sOm1ENkB&ylW#;
z3RI^ET<~J_sr3X~tqW4RIlU6$nYb+zBkztI(fpzPHm)?FdKFE9zhfPE(5-xD!Q4gN
z9LYjQG@^db!D$`{>ra?CX1dX`TZth5VHK<RcRE#SzRqEVG|4I1p&P5OWdx6VC?SoU
zi=F0<Y3xc0)IFSdp_Vq=-wzdWQRRp3nY+N_luF|y5L$};G8w0DFXT|4&xZ)^6mBFe
z2vmh*4eK-##|-5?3*nEG1;1gf1Fu%!xSqcrxGAA0rI$VMD84<<!8#$txkZkUsn=Co
z`Jxs~Nd)d(n3o&Ow$S!E)$n1Ljn`Syqk%-cLbNH>>vs|>!vpv7le_TPTTJp)!)8!;
zbL<je&59q`lM%SZ1QA~U7w0Nc$Bv(_aG3~?KFjfGoI*5qS?9ofuhpfKX3uhfp_KeO
zBCaX>ckJ%)=kZmcJpgm$JhVgAjUZyztQL1@2JGgCn9xo-PtAGlaVj~$<Ru1{uHg}{
zERLVTPP26jffKKGw!llY;2>aEqAQRya`|S33;C-jc}+P#4Bi)Ntubs^%}0Ds-oAg1
ziYS45X5O_D`+!dg7oq0avQHoi#8mp~31_tPcC&PMjSQTy`a-kJ-KZ+Goo+N%85}rq
z9XG71xz)89VuXLW+l)_*XoHW3Se5*3YH(ypj5wsNU`_l`MVP>-n<z}d#E)d7NS}Re
zoZ?_cXU}G@nUg+;7mvFISYm#+Z&=hCdc2I1#@{;TZ6q#xQw2A^pkc~}Dis&M{Uo>Z
zLupK4ru5kfgU?1Qoxc4HD?nGTM;CINXcJMM8SlsMeyN`1A{#5F&7)#t^FmiH(Wi$N
zR4Ms}3ggm8*%9##KbpV$L1@*4<J)#>W}p^hDhdqmT1s7N<H4w}EMc$PKFN+_PIxZu
zq?+vW)86KS!|9BAY#GpzW717(d(&7TbM}gcKVQLApwnf4_~Ut&MWh9rv)maM?Ym8$
z(hGVODS;zJu0wT~{qqg50ac+~L2;^D4>v~k;2V)d3aq6Jcn!FVt<VV+0GK^jkyqJ>
zbvaZ~1~*4($22lEU7FJd*zk@n@km$^rcCiN#)YXo98va&jf`|YjU_Ew05KdxsEmPv
zn7AQ(vx<Eo7<x>r2MB9X55f*^8&0!YMwFxeC#q70gog(&@q2u?%%zWOJ^bWcmU~jk
z2Cq-S#^HhfNpl6L4P#e-#<}4M{Q#EH?oG$z3~6>sCJ_NM-^%rz#?#rEfBd&(qT*I7
zGuql11gXr2BGB2;v!*;=7ItZK<VxPqPHZ>GdYjT8RAUQO5R6}(+3w#6gihLoH1RPk
zKRL}XDX3l=8^2yb?S6s1$g<<6f4dmTn!l@S3l`i%xbk<+HNtAR=&kBer3Wujz~l@(
zRhKfUmu~+o!q90p^rvB<zO8dxwRunwupKcV^(U#gYkI4&0lQ3&ZBQBRl|{9NT(9Ir
zDeEFh+$i=XBO1Qqy)TmRVbP3upK_~(Ur&2=K^`yDSa!k{_TTj#%q4eO@zhh1VVXUd
zdPH*L`6qSeQI@o|K=V*!Ml`VF2w^$@%wMV8!&b^fQ%r|<#v6t7vf!43)UJ3Wglcd?
zA&p)In<KK0k_s+iy?;5zQR<UYN5s??MfTkR{td6#(a3MCCHTk8CC(W4xB_WAz#bKT
za=u-TumAOwdvy+Lf15u_m@RtNqCRo&4^f0@F*l<zWohmGWqGic{ZK<rCu&`LDD{X7
z&oZSo&mBDgH_&psuoc1oR(2tsM5t8Rn4of?%CJ!;fGtfC9K3aE-mr{_WyNC2p=dDz
z===M`XU_&1j?_I6@<Sm!5+(p81)eRb9EFjpQCp)ys{w>nyQPA-%5h?pp2sW{px|bB
z_aQ_7IOA<!L<CC9t-6AL7p!&rT>8yaRoJn|<li(gT*U%GOvSp^B#2-DYUKz!<7Ghe
zZ3d2p0>HS6Y<QNXyRT-WJS^(>p%pI#HxOpae;;*3MD%7Lsm@aDv_suSuQZqOeZpuD
z&@1BNIgNP`t)3PCp=9~>5ria1Z$4ioz-3K7>->WdD+e}GfSh2eShN{#IOh~R7YT2p
zYAUS%vB_hdaoKQ%kxV<p1SDHJT}{U+@q=j|80kPTtii@*@1baz9~;6x<Yj^_vL7%V
z+cbmoNMZsnOYnG_V$KySC;!b_BLxyNubBCi%M7ypJ-qqpAv@JUGm&$LFOnRHMt`t;
z9+10wH7Jg|5%42*U~H)ul(gDyyup%PATT|*&|8Nc3`azdCAShpc;PkYGNgFlAN?s;
zf<k+#k^X`=#63OIM)F+k2x<FnkEf?dqE^XUo30GUgsg+5(v(NQgQ}T+VcI%o%4gVU
zdQUx87dSM89?aWj&jK=2e;PtwgfuZKKK=ShlDH`3MCLwKw$l~-yj=gBdiK#Kr2B4^
zV=woxE;O)gB@RB7U^LyZ$gY|%i3WV#Ub1OH3<vYIv&2aZ=Dx+?lAEf~Rk)55%g`tj
ziUCE6mScx#Wh4K0y^8HN6seQ)S@Bi~b+wGDx?oBR;V>!qoj?6}hgS;lj9PYvm-=;+
zd?Mzc>U0hTud5s0(Xrvsox^@6=)+eui(Mzxt=I5XU;qWIG1Z4`$6Z6M;hR%DeNwJz
zDLGkkN))d{DboaT;$T%#9b<(}Rf*bSoib+pccmlHg~}!p);3Gx;{awY<@GS8nN0J{
zfZ^NPI&z>~JDI$s;-^HIU_DF_07Bp;RPP68R9;YxqO7k;H=EE8EbEAR-KnRuNfvBq
z9ZBQc6`S~pQ5=7aFX{?*cnQ#4GlYViPlEX%z=*06zjs+$VPoP>`5&+tLic2woLKe!
zpnP@<A$hve){B`XdGT2<4Hm>b!!D7p$yekW)>oM{;aD7wCM`b+`N*3PMM&sL;sa=8
z7lN!_F*UC=XY<4$*b)_@TqUbXg3s>%4+ed(rGm~QSr%dPSycX@!~l;}<RzA-M5wno
z8-L~ao*b2!;9}sUAzu9n6B=Oom0G5utR+P5Hx$#iDEFnP1&b%8;{k&}@=*U2GSVD3
ztT~F^wiD~=JfVZ<PC8LInVag*Hmr{L-;y?eA~%3la5=R<8KXG}TPa7Qyi9=Y0D<ya
zr*OanGp-q=fXndt45?jrbQcCr1x$mU4c!h%yjV^$QdnIrGY#|+4XwJX6YxqO=?J@M
zn;7W4<y@aY>lvZNR`O9Q--O(P6$tX_C_Xb0b&Jf+Sb1W;3xn)q(ZOhl8-ETo@)2=4
zVJJ|+#QR&F5ghmBFgo1oXl?uzial{zS4E`_*sa2VPf)J!BIbnDdv;kY%vNdw6OPGP
z*V~ji5T)YGJz8U2l_c>c-Mw*^?i6cL80Jp+kK1I=f+ki=bG#Qtu{g?CD%!WK+fY(}
zO*6b<aQGYl(hFNA+g;l<eQQy@hMeotP)V+I<Hlc##eVNX{kHD8Kvkm->3&a9_dfE%
z<=wqQHNk`d0ne?da?T{lY`D$^nriS8>O*hw@o3w3r25{{JtmA;Np_r;Y`$t8RD|f^
zrd;GWjim&}@Xe4{88v5`)tu!71tH5@MtwafEF<2@d)*L_2C(^LNwy4DP}M2QP}wTr
z3>wvJ-+j4Oa;DbWq9Pu|RbW$V|9JXsFtV^;3K@U2YmrNn7I*u#1g(9DyKG2)O@!yY
zWlZjqFJQ{^tQ|x>Tz4rl+AlxFnVLcY@rA%sv3oe1R>ucx3J05V+a=(hdo@1(2g-3_
zc=FvP5y-c(bI$>@q{eudUomXjw7U()TviH|Bm(|kXJ6FsN}$sJi>gk|@(TK)C_vV)
zOI;k^5ztDLVh?Ay?(N8e(C`)|M_b>)z%_KPj4Y+zh(0|`rI-yZXtP`%kpH~5HFWMw
zWZgeTbrX-dg3!@#jjHJ~$l5&BL`FmplwOt0@x!__2lQ!7T}!oR{d<Ff{+kCnG3XFd
zns9>UD96j*>nf3MY<3ejDOEtnPp(q-io6)H>B3BuP|Z(hAoZuAJnoYwp#5FKBsDgx
ztvKQ@^_6aVC8rel((KRYG{3dd)GoxlP%`T3TG6q{cZO9!+j-CO$jo479H*k2^W=D}
z@{WtYtlhS-6p5V6K1Gz>ZjdFLz)3-|XnY(@Xs@*_!=-y+%8qVQnS)vzdQ0{%kmkOt
zg>(N2NZ>bkBB|T}Tpvx4ayGo)zQY{d6gbZwW%e*|H&KL+4dplU{2Gfuj$eH0b^<nH
zFX`(w7^2F}Dl1d&10DosPLKX-yP>{U@$iHRnxE?@(3c<2%_pjq?EmRlfDzFJy)nis
zTfQ~tf%}&-Vn`}V7G%0~^HNoYr4B3-GyLvj1hAmO9ufhkTW_7pE)Rnihd42~9r!yw
zM?7e<ebn)n6?EE{c@Q#}F9c59DWb$4^A4BJ<ShJImM6KSFvOd|G!isjJpw|=j$7mL
z-aY1SfDUbdZY8p*a_I`XE;9XLzS#+#-z|tG1*(1e-b1DAbN^J)%bJZ)s;XaHQ5t{#
zf3C}NSV&?PFh{wEr9#s&i@`K>A`@7^LHZ|m`d*%0J-ir;PjNI>JX$qSv&MUDkGHy$
zH4ueuWOW}!=3d6mNz;Yal*UfkR6@0|8bUW0%N8@D05KR{O%9IN<6FpYh;nGIT#J!L
zRi@-*%|*^8oQFva<@p~)Jiu3}B`}a6OYj%SSK}oTbmxJUrXi>bJ6E0?K^h>{ZqH@T
zxB$-xZCu9F^GVZIM|3*adk@rM!!1P0A7}1$9Z9*_XL(>tDFe<NXT@4oCyb%d;Uiy>
z2<7?_kFb`X!p2?F{_NJJ(yiGUCJL+PjWE~ni96%X_>!l41&7;_N4I!vy4XN|$2tI+
zL1WSh^z%}%zO3YC5@ONo^ZU^K=LLBGoJ>C_v+o$FX~xmtEW+iUGE5~X>9g><5?Ocr
zO)sLrsG*C>_!Nj4vSpRJz#@b}f_cRFW1qYKS^EIUu#yaE=3x1tZmqajiac;gBQ6d-
zb#pZOOOq-7)7hE{jCjUk+O8s-gQOb|t;^=FRM`dn58rLLP)n#~P&T9KoJ-n=igP{H
zotAo3d7LsaviaJ&k(J>|QMHlw7x7mQn<I1@R#Ni#;+iyzA*7mj5A~im#L|}RD486a
zPYgg1$}B@V?(pM7@=t7^zFTxm&b47pjBr^xs$Pyn?>W-SWphM6_~ke|2jOl`og8EG
zqy-S~m!2|%vkSlWx#vgrBJ~dck=rrnSUZP9-~oW?yX|!0Ry0jPZ<o5;<jM&n&Ae4s
zT7?rBbjBb6n5-`q$XF0|6EDjC3ZfMbQoKYUFT;g)yskV<E;g6gseO&m<&B7w^6;np
zlRjo&I#D!7>+Jg^AJJhnuM{LprJtq<JAvf~IRHRw>@v0$Lye{n{8;td1Z9+cY>W`6
z#Ckoy`4jF_-+pldRxK<6g^9;BON~#?c^vP@{(VpH`Qy_Ne}KvTuH!3ubBjf-$Wf^N
zlO_3rocSIi8A%8;5Fk@|B~)sMM)g&iX9fA1uU%tV>e&aCwjk;LCnK^8QOzGRLB1+R
z+wKg3BZm=|oLoNgdHdHTr}`2%wOuMttG#cW5!>wmn}&z3aW5is3}yikuDB2;DY=W0
z4T?jGsR1Bsau!n*WPhIGPy-DKJ(<qRTy8EKT9(e0zsTIF00NhWMmYVUpg>%&n0uvc
z+Q(50lQ|OUZuz><UJ2Qy{?Wx#G2#WGyf6FtCkX$JRgeo~{e^$r2B)PXIu#veIYdbo
zGnys=E{=|)64xXB3Em4=haQ6^B=%aI7QG0w>(C8D2VJ`Zl*w^faJoRHM8?_58B~$a
z-&FNt(lJ4aE;((J5_6=}s5RY9XsqnwpHp*4+v9N(+suDBmZcP+80IC8J=CJ$9P$oS
zPCM>#*|70kK_YIO0SM8_>uZ#sbAgXiGI;eYS9OBAG6AGXbJd=+-SXsYzZaD<KCjC&
zO7M4d%eAFB{WTulL*)hPFm2^Nj)xW?c*ctAU)VtAv28_8%l1ARLS5?YzObGJwq@ei
zrUeXe-XqaD57GN48HN)_zFsH|7?ZO)wWxHQ9oi119>lhG4vWbojGG>5vS<tcxQ>Sg
zgLgV`m%z{WP#w}68)JDhRa<uK+tDKLO#QI%?Sj{b?6+)Yp7$(-4*ZS)BRrMu<81rW
zK=k*!whY>DU)weyEVd_%UbzZ`f+%B8gI~M2g^pZ6l0pw-X?=Zvw558(z_MaGjj43+
z$W6l)G-V;D)nq+{VKor_r(alG%+~v81AV6344+pB9FX7?%c8kP%jwss$KPLvhb)7k
zxXGG)6uT?Y<zv{4ykD|7$6=K@vEonX1rQZSUUZ2k)HYU&4?qBk4ERHnb(tc}UcCPu
z4REh>?(mtI<O_~J3QGx}ES$-zfU+=<%d`91E`j|WORHDVKjJ(}&8IS++N6;iasU|D
zQ!CgBZ%^=uBRQ#71F04WM-TFH0f+r_KT>G-B2xLL_`t!pEmsglXi^iST+}X%4HyC0
zw6XhnMr<pevCoQTc5y-M&jK<b<Xd^1^4AOKw80S$I{#qOp3IFogbu`43}r*EgcV7P
zeO<T$WYh`Hf<b=Ywc_zNQ>IE=-t?#}{1X`=%cti~tCnuEWGn5v!PUGNDO2b0@;ciL
z`C5xS#hj!q#fyZw*b{WgEr1u4KoDclNg1P<lk&IG`HUvadv=?&!Oxsj6Cx`ryYns+
z1BA-o#&>au%yDsPlc0V77Y0T4@o)NM7EpEFE9#B%p`3^sLv=e5A-eOyB@QwVBIz40
z`vD;Zd%k23(*lhzHv;H<YqyvyiJ`P~H|vURn<tumG6@BE?zQ^i@*t^+fNaJw(<}BS
z3>Meg8(w>S6p-{r!1Kb=$}Abb0Zxs`JKrTbm(_u79CZvkq_91{6UFJYU;ozt<NEV<
zazNY*kI6BPM2frgFsct+8XQbjEs!~UhL`t}B=w;QFV(mc*)j|X+3sRYmMVO<x!pPM
zW-|btP1y6|DHht?wCcV~_^ENnS4?XhD`hY>7Gqyk^8U-$DbtbpJ0}u6#R7W^9aHeq
zusU!VS*{T6uKCNnM03XHMUcrdi_6yOXz_I^zztt6V1cg<UyzCke}Ndx8??9wdm7pv
z<U5`SyluK+3$k2s!C~3FFed|Hr6KzL=~dshZg?~$Kx`kzMDPmEx_B%o#aTz5Chwuw
zf%Kw^nu{0uA9#MUO4A~ro|Smc{Z7D?we(xqQ|Gp)eHOj%dspG6G|IT<bsvCLmUUGr
z%|)PdqK8aq`DUz7ozXC!5){@f^0SI=f=q|RqUo7_si(T4ZxCpkmvfuj?#O!|wrYm*
zhAiSG-nste*ORQ)Uej!J=+d@V%M31n2sHH17-P?QK2}yp<dv=*H6s*5A2guXXMy@q
zP1*&~K3iNqmx&OEy%JZr=sy}=FF7{&JxoaU;~{DP0O_za_)ap8)_0?2ky97FTmS1t
zT)AkBP;Nk0NHLa_X*5JgJui4Kq)MbY4Z%Es@)Z0xH_YoNO*MVpA@8jU_Sy7_9{zJn
zLN6(6CE_j9*>D3I4+Ss}6;{qk?B%%_!=~dl@HfIoOZ9G8jLw_)&{~@qqA~3mmnOVm
zl^p#VB;}g;iL!d5rp_X9Rh%J3M&AU0azEuIPCF?$0{FHnkd5l8hk(Y(#+0^7E^N7Y
zbn^sG#D39|sDk#gX|7qpw-^!oxfC`Mn?Iq1J}bIp56g<cf+h1%kQTpD9HYqB3LaW{
zUOV#v$fE?&3`9RV#)!}FqAZsfr+^1}8QEQPLhi#{+NH4tqAjhzMM;#>yb!OUB};cx
z-}g~9bHf!y9A1<O#jcjAXh6bWSiiaCK6grh(lI>cxKD=Q+c()h#R}gZl;|{Au6=V7
ze~5V|={^xKUyS#ZKqmc^d{cvs-SL-v7<S$mcv?8KMb1ay)$ib#ub!-9pZ}WK!54Mh
z>udE`G*qg1c4~R%?}}R!B?|R-9MF$!sn^9)x}(a!=Y@2JD-42rXUhvAAGKx)O3nC<
zhocaY(7;rJ10y#ViKqD%)$vNnJVNWF^(^b(!^Mw~mr(H5mKHUiHaUXEkfQ)Fhyn|K
zPW!6y?r%7GD4<^K@Z0|Mqo-V;CSK5c(F%)5@a``jT}oNq$VlYu#EOd==Lh3875H>G
z!Aa>Suk5g~`Wyb_G*<q^Ym$44Qp2~TMM7N`=epIvTF>?v^LwB8#o+}!EdRG-ll-Og
z0TWW3O$H$;^GhtIJTtFAV-D3z_7b%-*1fQ%lJBK->H=l2jS9EcxLC4%%BZ7Q&|lXu
zdKUWo`!!sntA3aVaTb}X9?4WXY6KfUc%P*R18y3cmG6-4em1)K5A*E!73>6PSbB!O
zOQ>waeQJlJkvqs8XF7Ohz!E1k#hDEkS8kW??!`<Zurth0|8`ULJ8pzGOVvH^C!xJ{
zkyQWk#$kIvUc6>Or7L#&oXY6GrV)SwO?IKhnj)W|Jg<Uu3FMc{tKU0ntomvEBI$yn
zo10>49vf{P(079Ii+nG*k$n=h_pkEA(WFo=8aTQ|S4f;26;SqDzLVVpPGWjq+Q5@K
zDEQBQOG<f3E(-yxN+1xF-Zw<{qgj0<E?@V&)?%z_BBe{0k(|C1Up>Zz1n`ct@6y(#
z`Np@`#uo7(7=<upS3J;s5{g(8zJ}qs7%QLtPlM;kRL@y&6Q<1b`sYVCJJI8z_-ZWn
zM-ZfeT?iytRU|(ob&r*5H0!4kk1HdMOvV7Dfbs(*F{UF4Y$Fh=v+KNkFuGy;AYuva
z6m^xV_7)4jJ}--MVL(0jyoE5(dz5?ix8CFFROuZdQvwm%`p#*g!5{mkxNGp>Fm~_6
z9U@S)w<IL5To~)Z%!j0~PFkI7dMG3RxlRwg`*j~5S!zMjG%7{YpyCS<>b0ezQ`(OW
z2h(&)HCD)dK_gJfarLp3>S>n!3fb7oT2{0W3Mi`bMQDx%)NY0IGT8mXZb)8SxnMLR
zx4Lafxn1@*e_nkqp!plwk6YU(H9LZ8ZB2rUQ<v)R@)Z9;M`ywo-1sZ0dIWFSanDuL
zX{D)HwEjHOiSs}CG79%--|T<E&6Byugts+RJO%`Df0_#cu#ocgU?`lX2+3e~L;$*8
zNhL@x42&C82N_5?dv+IUapsst2Y|aQC~*o-Z{2{br-?S#<%xCIDEr_V352UP*L^2h
z-o5Fm^L<2;z93{C%p0-|mZtS;cBa`$8Oe}#MeE~ep-8n-jU%MqtlfHBH+g!<|CrGR
z1TU`Vl3E#N&*ns}%6K$wE=;Q(`5P4!Oe}&Y{wH=}j7LnpAwh<obGbJ!eH`%j7r?C{
z5(yae+Qky02B|{8g9Tj2Jg{yqU>h|}aa`+%my-Nj@p8OI50E(CgL4Y!QUI%Z8voov
zl}%h-EVJPC%KjOe*k7wWbPsd_tV5-d7qySgeZBeQv|V4^Ae}u8DeI^rU0)7=F&b9|
zP_6MQJ1Ks;dOb{Tpt*Ea>*zp|WYsK-a%4B^6TEUmeV(Uj*#sZIQC7Eq@fAk8d(!v2
z)S?)Qq&=&{y3bgW$?O%Mj;kg$e2<RcAXo^ye~5rEbzGQrT1)X|eg*VMv$~bxK~o%K
z%wMbDzJvEbpq{6`{OS(zESJ}R29ZqV3|Oy<X;{!z_`(wC<A0D^(d_MIW0p~nX>1tu
zhF_GLd{!l&WYebC_pT}yn8-5gD3MxZ_t|)Wn(LxjHe8tUAXV%{osM?G7Ph)?|2z!|
z251uW5aUVZ+gu7vf-a8YL(DbMZ~$}@o@Gn=Gqt;qA23|=^WiNcdRM8aS3SrG?Fjk<
zGw1fX3mEhS7)l#L9`Gw&``p$g4^|di31bO4ODqJ!*zb*s{4AIuHv_6b-Gguw+If<=
z93Z9ghO?#78lU@i=%Xm6aWl#s3CkQd=+<=p-9%+DE8H^U7tLV!ogKA^;dfNY{+_-0
zSw=-?gy$tHVEigLpxTJ0z_jVXG5*cYaCZ*DyVPN1+G`yaqGWKjCWZ0J@N-!KUSh~|
zt`v}^YzqM6Ky9bL!*2>_#BkG0)RtxMsg6c4NC+v659MVkM-B}6I)+NGz9*t77=Y?-
z-FA2a=pL2q^*Zsd45Yj+%h4;wV*qC_Bx3h9(o}3a`w}E6ByALfqGfyX)OU+<&aLl)
zI?n?H)cn6>(U)}o&D~M<9H^;A?s~~0e|(y}Pit5ZBQ;eF5io8R!9P<UsSU1UMb|AU
z)%N(K`rWpVFqPO9URBb2D2i5{abfF@0c@Lf!<1Csp7}OY=Sj8TId(#B$mzNgz<sX5
zT!BG_%;fm6@xR+<{IOhW?BTvgn^(T+twNi`;Ez98CWVCY+6+$=!r{)aH_Z3plx_<4
zcHnU;1R3tkU>*s6ne!t?P<h#_zL9u$%oHyxau32Zg}L!FF8gR^=z!;V&=W9K;9K#Q
zKv*+N5rg-6i0`Y5yMF{(88v`{U%_P1F$&F<#7`?pHAaXHB4^PvJxS1o)UPc!dPuf<
zAtzz?aRI_k{mrX_r<kV+diko|^EktYdMLWJ4}uT|p-$EhsbNOMccOkn?h^6*R>lO4
zmoC7Ag#*Lb(9k67;X%}(1!j+0F<&AAbf(WS43H+<N(UqY0qZVuJ?va#C{RWF4aL`<
z{k7zji2-Vq5BTAI;c^cdC#p(PVwyWVYmPdutbUZ}T79?{3-~t<#s&qbS@GI}gxEcu
z^|`hl-%juGvmJ5{YDl76^xN?DkC9)G>7v$IUWgRxn6bPuT*z4a#5A~1-Ypzri3LCY
zT01Up@Z}=*i>{xgV>QeFjjH=ke(79nSPRBbN?LWSKb^t+pX>PazNNISAr92@#>tyS
zvPLB(Bn>F1!vq7$%>#S{8q@?=XErVgWp*Vh&5#o)o%$?WOzBV2<u(8^_=XDgKH;G+
z#?T!Vh^v9_f?-vW&@SwOO&GFsCqf+S%B9%73*KYu`fx`<T%gydyXpprHreTIs81#q
z8I+_kGwtq+Rjqs}JXdjQU<n=SqaoN_v`wsY6jcxuqA6IX_Fz(S($4UsMd6agZ7uqi
zO4vu<$q2qQ4nq|X(!-wq`6OXjXPF5hhXjO<K+iu(wih@%1bLcnw$%?cAyK7ytynda
z&PH9(yU}OGQ2_<_h{k`par8yM!&Ht%U?cq?4qg%RC~8Wi(jKiik96F&8x73Z^MZTT
zRx;pHz3=j&C4Xs2^}AWV2c7hY35ou19?VgHAZ_AWonZxH%?ea@w>?{M2>J^+4$v+P
zCzjFVJ|FeW-|Qr^h*Mt42(PWQSgyZ;lZuRA%uz?W$eo`OE^_TAdk^u6f|A%8GBwZ7
zqEj)vJ2b((vo#+HkQ3gZMqb^TT{`qLnRBpo!3ey$n<KEh`ORob54u)O8dyDjbGrwK
z>ph?b;+Ra=GYWppiL(?&hUs5=lJj2QZQ)&!PH?=@^QjK!%_7o2vBCh{j0)bmxBcbD
z-U*o6*P&!CuY|-NGA@S{rvX4t_PXR~7fR>wE3}JkQV|V7oh!D?j>29i9)W%ukPyDs
zXe`@l>&w7<Bye@#ic!UUhug1e`-WdL7<9>mg1!PAF^eu~Ok&wIPk&LzyPq|3b;mfI
z_AHv_%(@dm0n$(unT_o`+&W_u7U0XPB~6Ty4SR?fH|N3K&?=DgHG5Xs@<Ff;xZ+oM
zuQfmCOQq83L+tP6Yeiw)7uyV8HP{z)8AltM>p`^n)2m{V1pkf@)p!b4*SMD727i(C
zP~<16elK6)0LK}gqS`Khje#9fj&tT$?4r@LqyYav0Kj3gWaPxLO@&cYFknX->R2OS
zMcU<%D#~~Cc~l+&ohQu!(@noNXiB0zC+Po67tj_|8f>|c(g&^=1{6Wloy2ugq_F6L
zMAAJ>SGTD1jdb2&%Yox-(nlB53TL6FUEWiz&KGSr^BaT*RxMPQWs1TRkz}pC;SO7^
zHw&~qU{S?369$`C)ak>RyMq7y%cq)_P=|{c#AD_6Q_@zT<Zzu(cIO?c3ILrT)|Urm
zhriaW)=$M2YgE7eXSgjIjbxt;&CX<7-AD@S3UPA_@9ZLjGCN9lm`w;~t(AE2<^p9H
z7jmnabIz~3b`LAFoV~k?vTp>8a#=0O6MF(MyD3VBLn~=GmV`6tylkDhaSq0I*WfP7
zo@Q!%w)@e}t=E6KvL?>*grJ-YLS=06-rVSP7Pt$Etj3c9S!BgVBuWs_na}d8BLONW
zC(A_b{QsBwv3wWUw9(#om?=+x6X{$=Ku7?CEIfrX=It6%U-$LE#yHNm-*z?HWFa_J
zJ=zejL!$uLWrz}Z%vc=mJ|P^a?%NjBqffUXy_eG2P)@)Xs2@FZIZ~!corH_NWII*I
zGLz|-w>6KhHN;;s#;RpjMdJ@|=B~5hp-hX{L$~Gl61VCqf~WiH_*)(`3YzNr-$XR}
zn82h_{CvYtnQUR|zg=?~7FT8h<b5-HK(L3Ue)|gSlvPv}AS{5zx5Q*>J|Bx~!^l%t
z@m0p|+RKbRDA^Ess)eplx0bMTG^_~$bf$A5BbC+IPOAHg@PQf5<9`8LAr3S1cSr#7
zG1S<m!+$-OI>A+pk`%zT)-=0q3QD!asFSz42v`!VfbG~9IsLs0qq<~7KrF066^Y{u
zc^SUb{BwhCtMFsaS0AbI_hBjBcxTttGD`M|`o>JV`(OU^B^JvGvvGeNk|N%b?Uc2}
zusjnfb;r1a3h7a}d=h{<XxrEx1wO`5+x#jm5Z5yQMQs1+_F`g>#MSR(>iDCCry>wN
z2cV;<UJK2Kj^CEvnyFoyFuU++z`T%&8XP_Wyu;PJKD0@-8<AQ~%7SScpODq)R4I&E
z&0YXzVwG(d0$r}N^=^6qD8_OpV(^>IZyUYy8DJJS@ls58dIWP<%`4Pbe=7oP?@pMf
zn1l=3$jX5&tI~q2>$C(&j#DBHAoLcgJOIs%6`YnWp!vP=n<g-`I6;IbJ$3;Sj$puS
z4ZtAm^(}h!S}2imR_zQKY$6dpJE|o*_a1RtuHZt_KsqxbVs~%myAXmRWL-(JFh{Z&
zyV$zo!13UwO_ziR8A5?a^u0vG%vb<u3^(rTrv+PgH25;J|Bov%_b}lnC>dBx4o+Qh
zj%7kzo*Yg*e>Nr1v&gw1zFdILhXEZ9TXd#q#`WJC((o}K_0tp#-xxgSjqki5k<@Zr
znQ&O%{9@FF^&oW;l?HpvkImO*ae$P2WqFW2Yd~MlKTa8axZd7V{CMd9%9`CAMnKXe
zOEH&vW(V>Kqt5OU4`Wm|0MV*#_dwbhp;;oBq=&W8omlP8^aFAV|M%(<dm|~NsR5a6
zcP#h%F-YjC!@eCLn$dSTH^7TU`uhLMdVC|Vm9}gQ*b&X)#3&>_+5H(~I6hMl^)9HW
zgLe1Hmw8W6Ah4Rdwd?-@i)$*HKw<1kmIzH{h%@4Kv-!_iqSQ(SstTaFa)zn!1Aw9C
z;jo5?DH-?9h+dBRb3&Bdt`>wqpXIJW{!P1ZIcBUZn953_H%1>cR4a=OUZo|6xo4Gy
zSQ%kYn(Ni(mw#}n$YD)(GzynYA@73qfAfSbJj$>q;OfB^s2goh2(^|R7>bB$bJqAl
zo5w9W32N;iX|kLSQe`zxx5-`DCD2H96gD~N{REs#d{4a(jz?UK%rs-ywn%WpJjRNR
zr`+`yssG}0AX!}d!G{3lgUjtMF^P$J(8BD889rVGN7AiOruq?P(DhdPC@Ifjc$g~7
zwY+PVNocHW$A~Wh5`#X<eWIwoUm<!Kp@7C|LWSaxhEFQ+9h>fr+yhF)WeU5OnEnmh
z@xoTBMTIeG_re*!aanOwON#lz0(G$7h@_B)E67MdR?3nU=|e+@S@D$FR|39qq!nwW
z8yd-^a?qt$q?LRurTlpP!l+Zqo%#@N;a~@Z*&*+zS%Mp6$S>VJVX(lT;Q4hq-6<d|
zCGp_$?bN@qA43M21qQ^b)wO$N?Rv&4KJ0siSIpqZ^JG}k!`pD|Xk3;iLc0kG9uiuV
z1u4j!oH3G+QNWn|_DIuqQ6MG;<WFb+87xrk8f4t+Oy*NpHD^M)j`IfSyd!|%a$m1b
zqEm!N?H3|-otjs;yktpL&KLrNEHe~Ga1%M{mSzD%7Fc#3j(>k_jT1&D`Hq@53Ou8)
zbIOq!J|a6EJ-k{3dZ##_E_K;&uAm8cPTFVym!PVQn$%88-ObzY%d}TJt@EDfwIiL7
zzKPRLu9{2qN}82ucCB-T)~8+gt#*2m8miHDCaRwIt&apz%Bg&D8o?8oL`+5o(jTtq
zrL2PSjfaLnx)sq25i<4IUgoB)QIlLDgei>Y_Ug{@p;;2&0sE?fSia;WzP+XHg5hCD
z?a(3h*qBK(gG(=9b+Ht(70aTpXOX(~izV$aAGmV8P(@3wi!CyUCoRw_x`2RkXc(>u
zQv6Hv@2|f^L9m*u*bJ{*vaivT%3*l$j=?So$Hrx_N9C)9xAWQ#VxUM4#x^s81101^
zV+}fTcVU>+83%|ML8P7!Mu+I;_#RF67|+NC_wMida3*r3LX3CyaPBc#CGvt~2)r2%
zu|Hr?(>IJLDAd3w@OyHV9XqK2Ro6{lk?wZ%;=!AZ@-%)pHBL*x9$ac6OCHQ4n@Q6`
zK<yicvY`qZ$}<ym;p^<qsYa*$tPk6>DPyWNZ`HeDNZ9Y}DJH|n7e8w!Y8<XA`3R!g
z7;zU^pzx>%p#JJ2dygXZ_)EXrLl$CQ-tYPRe~>J_%{-(Y&SicOb5WyRSOcl-izmk4
z;1S*s{2d;#elN3p#=Uv~P1lJ667F7p6SGpX=vahEO#=14+fL`}+Stt?`Qc1x<s>UA
zof?8{AZb0AalelZ3lYFT<ygGEK*6#=jnWh)im9prIlBB1bwPa_ZJ}yy1zIU}Nvm<=
z$6x`tJq#qW%Suey4Zi%_B#VR$_z?lzOWPXOt2Qu!fHwMM!G3<WvH$Mr+W3T9DN>$A
zsW%X~At->Igio8xctTnTZ8v-4VqVK5GIzi<53~%BCV-_i8l{c@9qkzYVA2NQ#SkM8
zqDJz+`JOBGO+Yq9h-$_k2rN%|&_r_I+CpG^+w;VGK#<Wvo9NkC??Ql{lw-A88SS44
ztH3yt=#7`oT?eLu;298TM(uHX`kA`@IOltSg9c1j;$uk;Y1whd`=LnA&*<+wPY+Yo
zORo?{+G|v`dTQlnwKBXx9nG&##W?bjv{T%X(89406NL5+cKy@OSs;fj3>*{N^b?zb
zvO;yBWONa^_(1RB`foeBWm3uHM1$#M>wOoAcTSAso?^giD9XzgLLH2_C0m%&;I_Y*
zoNV~;qd_nDOu~^`0lvz47y_6#0eBnBUz@P~U2f9VRDXa@v55ncL>eEz+;6VW!W$8C
z?gz5uC6kGYCAoc)-cCq4LMIserF~?5TL@t6+@l2PtPB@T)W3fhVct-*tsOboD(OJ5
zxFY(gQ*Gb?!#YrUe&mp9>>F-_AI$N4*WCF~SMoO}6-m&0a<e;_{os(JM1M?=rEl+w
zyRxgyDHWyAlmRBo%k^)N(m9Z^b%LvmXH#37^ETWiK}<qJc#l@+kz<KsF$R**Er`Ww
z{$McKdA9Mr=yK1!tcZmR<Q0_z9=P=9QZXLi?9qc6-IAYZ!aZ2CeZJ=csCYoh-pR0z
zHU<=h$zv${+`fDdBmLlqh#L+C@3`dVLh^hZDN<Ex;j3q&=7@~2hf=g(uhSBFz+@F>
zhoEJMLM2m1OT>Lz;-<nM!Ah4N>S3QzCkDG4y}})Cor6bkE_^?nqIdH3RBbsEem3gU
zV2EWsD>Xh2hQM765I?CsGq8iI$<4e_LYjeQxVTg`27!5)NG(sry<C~COKLN{;cYr2
z!ORdzm{0c<1ub4xgLY8vJ@Cl(`eekX$)jXy?pwD>OZC5@ZPpd+Aha&;Vivps935E#
zsYjUop_N-x1=ntSgv+O<!||<~Yi{5n&b``>Z?OHta+SI;JcaL)Cu7YpbaPVN=}5o*
z`0%kZO0|WA!vJ%zzD}u0vs9h@uA`W!gQucWcase&w0Zu;E@m)J8R3$fliSwP?p-aO
z%tzPk^~KX;r>Hj=2**=hr)sMTKAh1w(_WdwF~SLLlKYZD<vULj5?el(iA%%TqmnBQ
zuRZb?%$nQvyz9zVKR~lTKI2-0`V>P{tW8lom#xoygw9bbkq>XJ7@PPJ_rCVaM9!pt
z+hl!Xg`)DhkzD%|UB0c$C0C=sv+Zm9!Irq-mwh9`sBlR&m^gAdh)_WO)_BY!4h{co
zpp2Ux9?DU{;o&Z2F2ghhbn5%|f18n;iU}+|o(4Z<eNom}s`cXuzp!9#Nb*KjlnhEk
z6*L2X$GhS3$G8)2448_#o^K}etd!@ORkdE+N919G-&_A1S4}|EFAYNJ)YGhCB9S8l
znhdOWG_eFU1CN10FR3c>D*C6n)(^He-T8&al&xT$c;82i6zA!EdS?P~=UhuwV+uw4
z3AY>BYv4YNk$;Jy#X)9{^B)JcI{&v-1<nr=*`#*=>QfvFfQ}ajeLQevJ>HYEG!*m`
zYHTu|Q8r;egE!JWm^mvGk6Y_zas+FDx>|)Iv@BDpQTQ91d~Q5mlXRrOdWG}mVM`RA
zH#|uar(8eWT*{2b#{~km7uvVaEVLuNv0!+VUN_gusYu0GP>ikyShm?#0*1JJY0PjZ
zrCWEc(=s(KY&R`6pLnARFWC`gcPgN<MEW^=($g4;8?*f4P@xpWy&)L)SbKE*>OPJ|
zQ4GC={;B_R@@Vc5Oc9Z~c=>}6UgExN*`ZQH`=$!Wq+J^e)KefR`?PL@cM~*7$hFb2
zarvvv*5j>GfS*zh5cN%BVl_F{L*P)=2FI64x!6ZPT7snC?j&>ACB5bs^NGI)G2pwa
z6OkZyiiGhXiM`Zs2TZ-D@AROqc?_UVj5o#F*kt^Fkzh;?Nhw4=wD9+Y4Gwiv(Ps{Q
zncNY=ab<UoEi$nT^G%|?F#xvOYT?)4UrsSaak@2hf|030)u~xFFPg>Ap{CKB6@GxE
zGHq~C0ND0SU*XfA%33jg*Q-&qal4@O2oGEb>32lxmMC0dQhsNVE21g*G3)tPQI)0}
z!omsO|EXJ~qQs>79WekRu96k39M`22vyGw7XrFE;S@6N8P%e#r0e!;K1KW`yWNMCF
zJvvK>pzcU|r4sckI|gF_SGkt3*!9(rn701D*3A*@g_8P%)vJ57^5*^jUrN@h5jI5y
zhuxpF-hI+?OB3oK8*$uiC(^tGp{`<+Xi0*BeOolc<-6CID)mEqV$DYSxWb&pm3%}$
zpV^QOiWn>`zwU~ymmOrZD!KTyfhd>K2d)gv#k8;>u9D;ROSfcVrGE^N7Iox}?5q)+
zPUC^zvj!$drg@AMXdD(q3s1aU@ile3Pv;Fhu$af2R)|xFWoMzLdRZE!Lu+u9<%Rtp
zR_fV7Fu6z!KU`b!AuH`86N{k<`d*UNEuRsmKf+m#4N1iRued6+dcvAyBlhwZoDil}
ztK=_CK+qE=4mT#g`Rw^g&h2H6^~IvyPAFF#Qq#R7%$7b+5)Oiw6B*~<I0O6;$SgH<
z({beZTa`6+B*cMWmUdvqW8ijnhA3dVPB@R(w2m_~6Y4pEdTNbC4|OJ-G#8I-@tiRM
zP!2FCUph&<gw+Qh%RS5tss*DB;?KLWk0XM?&9H?MJncR3u4%iI3hryIT*!FLwGI?q
zFHX4K5|9>iIRFj6TPDEs`?p9~{e<>mM<7tx4+~PCHo0HLSz<vgWpg5hHxcP3U_oW?
z1YtV8P7>&OI5bILN)?X={t&jQ685YWaNNFt*Bc;dO%E!?I3xI7SMJRW;Ed<lWm@#K
zvnU-;omXQ_+|{Rtf1`<yQbzHBD_rfR@wqLaq99>8OusaG&pTm&E#-PLU3<xSBPQ?h
zI2$e?*7#ZxtXw~dERsPRlb-!U7bFRQ=>9r9BScNiF((-&FRU=|IRJaWK$NY&i*tVI
zhWeGdr^s7rubes6U=~l0H(eKLFv)TEv?W&}QoUPI05_uW+`9*eV<0%8rG&kl&m1vy
z<I$R4Atl9UQy4$Jy=>SvfhiH6zam<A_qLoW<i1QRmg7prE}%Ss+J>&iGC>**{A4aV
z_S=yu{}}2IkIg8WOx%+0O5YJp(t+&az0HZK9n@{Jr=lT#!|(d?a%_~UbCkoVVSos0
zU$a!g$ghg~J`#MbdO4rK$Eb75ixXkDVBj`(7D*P4(!*cs0*wn$xz8lUvFh*|++!dX
zia5AI)a+P`LRLP3TWFdwpJ9J(V{Q%y%`{j;*F&oewbtWdZXt|dg1e8%=d3-jD80Qr
z%m;M#9SCY74JnI0NSkrl`4kTO16LGVK5Ddb3y$g@yKxiF=HMr{RP>wMpVG{3sYF@}
z?GP$xe1R)Bm4qfV;G4y_w<+-ay399x@NS!@rVm87mV4G%KPKR1i#ssgiyW*6f_-u2
zpJ2LA=Y^~$tv8&e<@U#nn3WLiJ1DJ9@*F7cwK!eUwqx^SCE`O~<YT7l$V4glWInLS
zP78@-3BOP_P>Q&$J}e|~jS=uOqWt|SB6F*KlRjz_&6Z3-2R>uD5MJ@t#+Kmol8}2w
zWKnl8fZ5dw3~ZFBI4@ArnZ&6|2MQpr!O^3*DUss7{5{W@E0dTaf9-Fa02jeI-)+f4
z0H#{`;9J{hCSIsBq0^gfR>_ul-(I_uXoAX+ko<IG!zb|sfMOJ{MKwQh3|r~pIC?(O
zoAJ=**M4K9n-Z}K7mEphpgdx&2ec{}`AW2w7qgAuK7S!6Ph>>wOks9IOy7r4TGdUT
zfD_SYdXu!7Vy>=KZ%20d2D`RBV`28iE}#HH`!;f8=*d2kgk+fntCpF=j3ks$Z<Hc8
z#}FIQn8me3#Q%DHLL^Pr(I}<xEElZRaTQK_2GF|m#Tcw7`HY`hv%MDfx1Fe2r9KgT
z&VR-H>QVA22xBnx1iHe7`}UId(E5@h^MdtskvPtg+FZ}G_{_SfV9t3pD0&9|^|z1b
zu5dPUPM1m89=m0r#dcmT_OY3<5k?#y+k|f|C)AjtpiNwm5hqOkE#r+!npJiN$xk}r
z67QD>y@-Xe!U^o=sfjU$__4lKa>&Jo%a<9X4k69RDSNb{jD**cRoRw$yDOb+G#3!#
z7ZK|jBIGK~y<Wo6N2k6BNU5a>Zw@P*3@WGaU@zHX4&5$R03MRhFGMp&O7Kp-V6*jd
zSp**C#_pC@JI*soXCGqbSn6zrX~RY#5CGPGe3*Mvkd4K2f|IP=S}{&Qmh`?OcF=w7
zv9OPE5ant6%2DL0O*MYKmQ6}~=ntj47!!p9EA@<AH@ZM?E-#@SObvQtZa+A-z}Il+
z*jAi-da&A~8eo`I{R>dLiN!FdwYkK$5?V&7GuuA@Y2{{3+M_F-;T??`9mWmC-)E~4
z7c@bp5a^S$$YvnBAUs~h=&A18#OeT)(YL<8<!(uDf9F^!zD>rlU1Ur1rn~-zX&F9I
zl5V1%xRD5&BN?-d6~fKcUdCqZK~gA$tMkL*ecFC>4Dgv@;`%h@w`%b*BW*Jg35A2K
z%yvn$6OPgywXUHxD4UYcO(0}9z*w@Ue`FCug2R*3dL?<SENOk30JZGcdDRMl3ygtP
z3Ww}7oC$h=?pR29N7Za4n@K^q#^O&TDIkBZ>SDclbqW4MTNUiL1Z;?FrbQ`{THFPe
zRIU%{59f^fRmQ)P0#Wt8a&Zq%;$oDB2sMMlbubHhkkl5T@^+TfW$u5=<g<6HdvT=a
z|0%@%x3$gaI##)y4%I_&6}R&Or>PhVa$X0Ra`o?+8P#wJf{Bx5GjL__2RiFYE-qq*
zURqnYjA$bC6mzk)!Zu9a^3|z(Lm$;bw>>@2a(y3S8&yN;3<TnPnR@zM!aW!FRscnc
zn7b!LBe`=(XGh(~5KTtv3R59*U7`^GS0sf?I1D(EB{7b}%r1HUa4)(y>Ut36pi=>o
z2Sz*?lR-&}Ccrl&QNlpF^}J^2Uo|P$UC!4-nC0GSj)vRZFoug{)f_V^K?Uf9Mq&<s
zMaf!m(XyxPVRN)6SKz!Ne~yfBDmTvoLbRIy{=nvWmrKU}URh2vEnf7hYphBRV)D58
z0MkYZM7A6W<Eo}HJpeEgN7P2}!T%Oq2Oqzc<tnUP!FF{mzdLI>AtEV3NKwhkfjY3c
z$&Ryr-fmTZ5v4BJpUI)(q6fLbe?`1i)XWTX!SHTQ&(IhbSJ^d>BcNuec|{Yo#T-F3
z9ErvrJ;TdAUWVN=l4F&mf-YLB;o>j`$pFJYuxl+@WC@Z#@03s4_O@#9ga$@U3>c8n
z)|~7f6c-usS3J#G<crO@?9n_NCr@0-TKW;50IG+Sm=ldfwZqS8&QR~DO!N^ND#7(s
zM2_AT2~f%-3jre`2d-R)b>am=Z~fsWVUF9>FM5J!)t@wBDkyP!kN9Y>UJx9{LU;VR
z{)6PvIXwt{JnMw9MjMlk97Q+yz!PZ74W&!6NkdMWp!vT4D2vxz+mqDfPfWDl>#GMU
zXPN`pEstLC;x)GPtte`<Ye?=cwsXhKI^LAufIKtZs2>JC3%~lHXyJ&&^ie_dCFu3`
zw14~kP?H!Y?=G-q3>(G@TpIn-4}~c0YU0vvCk{`9k}J1~gl-)2ds6r|I~Xe|eAlY|
z#GNU%x2{_5V`kQXbu{HX-sONQ+IK9|{F!R)Q+{0YQC=v%SOlx@P)@=djvL4n&<5qX
zx{_=!i+xrvqoHyuHP^vB`29oZ2Vt7WlF}NRKls>RaPvgPpjlGz6alt!2?~2w0!A?h
zDo6ubcE@-!$<<$hluMDZT_!CNQBLLq0i(Te(Ec|xSAhY!U-}{~;YK>#1XazNe-S`S
z-Mv}5p)Sz`LuDhZikTFyWqne1+W^h>WK8xCJ6nf^5LCugVR{L@S{MHJQdH!u|COb&
zEBhXD>OXY?ULv_lSE1tBhQ%!WZ3zVM1qSQ(S`8cDrHbU@CF_I{*JI4&<@BeZ(?By3
zm|s0(;Gb7X#M4@rRBFR^z;qQrZG>aV2KNoO_qF3aMUYB}?(9Mo31J#z5Ng6|R6`uz
z?PE>h_^HQ2%1w~1<-~|dU)kG0(ne&4e;{_a#c}BgBc*|K(RD3T^4j-?TxHlKn+`4*
z+Df1#XTHM65y(?CZpYf5-fbm;EMO{X%@S!u_pM+MUMJ`0V)pg4>vuZi1@@%~s7w6N
zB;5PzMX95Z;e{V1!ADiZsJhjfOk${<?4p;$qT$o00HVNyyWfGo&=nZKZwuIfM0K^c
zRS7!BDxWQvO~t20vCUC|=hU>&nHwv*^oQa3gKHE=Pl0ad$*K>-h<~l-7N0bK>ua9y
z)sX0MGzB^iP|`#YTg`758wJ|mn+O%j1g1M<BCK*BAl~-Q#o|D*+KUiRcPQF1;1dFn
z2<N#bzh!F3nPV+gE%XR*3@wVsf<BXSY~xx<iLZ$J8>hG^d%t!ZD$!uS2b~AKQF5e*
z25Z{}l>dKk;x+DaS_cM~<}S&0pQAF%-4#7wIp-M0$-I_uiM)=~dud?n;1A?RfgeI0
zc6FWn&%95KLB<=dqy)QgmFe={r<@XI6UjEu>$a!rQB51TKIvFQbYLl?F#o`Pm%a=E
zfpm+FE`Regb7rzPLVHzcRl7(<tgLAP%0gV7qi1i$#rIMZiETmiawk0*HyEl#jEGrm
zOIMu{lAN{Bdm&C<nWHss!9+Oe6q_mv(vk1G>nrgfb|R9yjn%O8TpaT8OVk>=iyNY#
zRN5rAF7&nl77@8HPmT2CVkG++G*$dw4p3g1;Y9L%%vYV-gDF96=bVrx81A;ub?kY8
z48Ro7(3Imr*K0P}qn~A@?uGpS=Tc?pbtymgs-Gr;wK<GCpC+>lPdinIv+E6~9fsgL
z-%xXle(5UsiG?o-_}{mnFBX<JT*h=M%o14~BXwN4SC%>(j1?ZltCQ9?rL<~t>Mxbk
zhGkYKdcF8rEPqvvBdJ4{2dk(mkV*gfu;!yW&=%6nEV`Y0Tg-D^iTP(CWUy^jDBE-Q
z=O%B!Q_9NS#$VvH44Um@ygBjR#5CnX(;iApYGkgzC-qrw(?LU3KWuj%8meM8*#LFm
z(DIlpQZlJ)()j%VyRbEwMrPY!&cLC9ZL3yY7F<q+`GpNvINjrYa}YBe{q=kLX7JzM
zDgNbE(~-RCk*nzJpDIuBlR7wDf*k3w)~nC>G<4s#<FcKzfvhmn{BqaEv@+(bTHBK%
zhQ$}Zi#Kq8w}*NB!*4P|+W(xCq>FtBD^!T~<-ln_#Zy;IEkQb4xku5V`w!?{tV3xk
zXm-obf4p-$UKuKDJg=-m{srfWJ|W(L{y_iiNfv)0W={r%sSTB;ZcVOdBhhP?TgFu|
zI}d$lOF@1c&ns8A#O|uX4Cpu;(rL^5>XCmCiU42>5zjenKeSiDyrQm8ya$$kL_bqH
zy1GMzCnIVPxn5SqzHrqd0{NPpy!;y7fLuimUVMa+r@;!gk^tXP+PQ0Cf7ERvbyuE6
zm=%DNz!3`UJ9B_OK?#_9aItCmNL8VrK?=3ctf(AbfDw6LZi$;^1y2|uFw3gVfuo4$
zaqeH|RtEJGrqjUK$HSGE!<<q-O}C)CskAG&%{_$k>E|@jS<;<W^X0#3Jpgv1cEpNm
zC*SeXvlE5dHr{lGThmbL9~xi}{$B|?&NvVD;*o0l^>LczZ^X~q_EII|JNWxRo1nZL
zWSe9V&JSZc%mY?oADhWZS??tnxz6b&9*@N1&5n6cG%T(I<WSUuw7}OSVV83t6<9SR
zZ~dSWDt;@uWbW}MciiKQJ!{5xoO*Q|io?}R37XAKe-TVxAdNI5z=(_b0%e@*=cZgS
zJ65L}f^L{Yi~Z_eq(DWmQ@XPApKhJ+dH~W?yI=@W>_lqr0%VEGlaR4|wW!sLP?6X=
z;Vzz6m^$QKWrM>_sSOc;Fu3Z`CB_RQv?(+;7ZIP!^m7T*VH7r=3+8*?(S(pMwYJ&r
z?MnilZZUV>IA>7kt)-1pg!k-j!k0t7z27%3nZ$SCel~u-btttpI$VYaTY55n{Iu7_
zEs8KWR)hZ2$Vw*k(XaxvCcQ%ViKr^lX7f4@GFB*T1=<ZG=|T5|GZ{7F$VjyyqQN7V
zmf0XBEKH4aR@vZ}lNU^WSYtQnoX9LkcjY_v@I65p;ugV?1sQE-0jjW6IJl{<nmUW`
zjsyhxsQCLdPmj`(;Jb&hsm!y+6uWI4r~z>>vDn%}ZBvx=;fW6sXo4oQRQfKq#uSyu
zeIb;l{#1TtTUV({&{a8&wW+~{|CRyAKas5=U7!1BEK0vg?DE;PhTW>RD&WOmlWi#1
zT>8)$r7GHP9w>_W<irOFtt79Eyn<d0rG>-yahRhvFVEB79QS|nk@w^0d1tCRDE4d5
z)EeGgu_!hCjIyL=;QjlEUH9V8{{&<dgsC?IMgJjN&2^k9*7995H0G8+mrgb_;!FQ_
zZnKS0_e}bjYj5)LXe9%m`WN$9=Zh(Ys)yMq)rc)AF2RN8`u-4IZMK|xDL!Id-9W}e
z=1Edyppw+s8t6m-6&7kTUkg%WwsesjE#r1&T1(E-4i`jlj5W39T)WCa1#G9*_k#B@
zbH>*#OHuMETAAsEx-QXE3H&fACSJoY$`aF7M9w43P&7SYzRn^scg-seHQbfr2+>t!
zj;~r-MP~E!lK~)KK_r(N7}yU4;O46zTo_HUF8#lY&4rs;=#;e^KVKuPKMRdEe_V2B
zc0OY8z8XX;*a)#8dp=X1h=KD3#S9fN5JC2(!-XSc;med$84Lkn08E|1V_MPGs&eaf
zNULCcx~1C((~hm&er})#R#TQ+w)Zv3WUczaS97vIgE9w|fFdw+s=;AE<e(yp_Qk=L
zRJp9bWaJ_3u2JnKM!{{qWQ`A=Ymwp;yqEw~>q+<Liw0H`5AhF~{MGJPfRqwoVqJvd
z!vFbBDlCdq-r399$P%FVG*}}_3F!IKx1+`(hz(1*5kb+{-@pYh2mRgTo$!_*&+dF7
z<0`_jR!}fZzq+Lg@}vkZWwMxvByYQjhbW#Q6mEh)aitJ><~WQ=sqAR`Py0SAN)gt1
zOo=r_^#@K{$#)<)%b5s5KQOnE3!$$=%_a-5&0gduURkUA)d0FfPUgNhY;KR;JR3E^
zlexh(DhlL(USqgcWy|Cg;>04OC#NAd&_s6^59xIpW+ThB644*iD;N7{>>o+@3(^|1
zro?=bNb@gj;5a@(oD~D9n;)|Us%&%iV+*<gLFzUci-T8bcvzIGkVm2_=%k7Q!b66|
zJP)}zW1(;gvb9wItLf)}cn~MYj5KEFg9y|EmD*4O=Qv~$17d?(ZObncM{@I2efT<n
zVM0t=z5pFRdUEQ9P_I5AtM?sg9HE%Byz-^#cKe1RYI;<$cHX`u6{vpMcJ9Sc9OwIC
znV-*An{a^~_=+LzhLnbDjU=>G_|4KE;#b3O8_K~=>#mS6H(bnHSJ|mk$0XV9*%KPb
zKf{R+x^sOHiPbzekgQj}7iiFTBqZFsuuc}j*MK-sg2dsrHeS{!yHxhXieN=+1XmH)
zKAMURMLsUhmW)R@0&#-V&l?st7Aiek856#_C)XI~QCJ&^N>{{u3Huhc+)BH|l|CpN
z1*@&44;6R6sqHIv1lIF(&jWdCltA=wXLy($2oQ8Z*(O6AARuAaX*jnPa;p&4<i>*Q
zjxX}r@sSl`*`laGGdQWMH4~oFpH%OCjAp3?CT#Ef?sgM&6>PcIpbJ-K65Of6Z42_G
z;vSXQqPFKZhem!H8SS}=1q#Iz<PqzaypX%}Y%eVM^=b!$^{F19mIX&j!jCx~mC6)1
zXefPbO^&MlA;d7;1@q96Or}AV@Ob<;sj#&~_Fk`7rFktx2z;WWtrOmqy0((SWKy6T
z_v{dhZ$czd>U?V$iv{#MN#7G{6fD;wNKgsRVi<GS<*l$t2GvKV6|8uRV2~7X-<xN5
zrpB!8t;%)KiDy&y+7ckpUKNXJnw{-V=c=-d=GFE<-UAt-7L>>OIk7zNla%n}v{?eY
zI!)>AyXz<WCI$?Q@em?X{v<5Gj2co$UN0Y|EN_EkIksvz4PRBjXPnrk%v5MY{i!}G
zufY=tu5Y`uKm;MZx0+$hgWHKWJ{;v#077q%CbB<;4<H-@7=x|j;Zy1gG&fN_c&P@;
z9aL+gTN`vphBaaus3txPpOTX!vi6}=D~ZqERwoc6;=m4A&DSdc1NbP^ult)=-)#7l
zK5#-8zxoE;RmUL74Mhe6Lk-EC*-^E^bOy?d2DckA^A1Pl1j%KE{L|eBD<d~Nljdla
zApz~AC(a3=Qkw;ipPd&rUEy>OuldGfp^;E@mVQ!djA?RT-z+(<yw-l_Z~k?Vh%E~K
zg``B28Uq>-a-vxQ3iC*7%zbATvoeXW#A7auBqrfb^GFKgU4Ymc2AsYTh3WX3ZwEY`
zu};^VGzdjUnn~|-QE)_m+<|t6S3O^ka*Y>o!~Mq{xduvT<P&TD+c60VdB9i&QdBFv
zzQG>lDrA?CSa8QA<=)-~TBdH7kr%(l_Fqg_q-U%Kv&bn>W<T3OB(E~26vm2*@Be9b
z{c@$Vj;gq>WDRs}IIqq$;RPJQExd#7`mL{7on*`0y|r^+Wyr2X&fNXVN$7cX>R~nu
ze6}CSL`_uAa0$=9hoKJ7@7BsdYo?+f7~cp?KTc6Ei~zg!tQ}Z(wH~Sggm!_F5;9yD
zpj!ugW&dPro{SSHdI2gIs=7+f#O<M3+d+-%z;d4gD?YH>uxjXf^h=%i7)5#Mx4rXw
zDVI0yX7j1uZ%B_v&5WKdJY!RZsYLnOA_K*fu8=qJd@r~FN)m)h8GaoT2iqRTBHJ;B
zLNpQPwx-UA0?xW5TgM{qMjFJ0AE!BfgN=SGNF;$(;@p12+wu3js^i7c{!%_LPY*0t
zW>vtbsef%kElfra*R=WQ?WlyZ?uew>5)RM~p_T87P#5AC>noEHNw}bjrqT$xb=EUn
z19bi9J4i+fV<frz+dsGeHOVRLR!K1V%BDjqX>_1MLe-Ci3@D_6BPyt~+_`1}p@Ur4
z)aB8#3G+o6jljvB@W+5o#}O<Pcjvdqaf@R(k<4UQW(nkVq=<ERLi<(vr6=zIw##;S
zgD1YK8gXT>D<YKI5ybN6`8X%<{w&D~7F7hPnU_(5e}<id9i<5Vr9PGeYO4E_tc@<z
zTYm0aMRn~o9;|NF?$lfD#2)&qgsyyg(cdo??jaa;g!6OX7hh5!g>P<}94ds4u2mWA
zT5~Z3_fBFRN>iJK=jfpu0-<sV$j}GUjH`*q6+C-?#c9)hdd9*4G=6rD(}&R$(Va@U
zZglgr4LQ1#FS${gx)x#$AzLb3!Mmx3hq!9<B4;7K;nagTzF$gsaP)NHrI=Qat#a|g
z$#`Vjxp(-)RqlZAz7&Bk(o{^|1B}6#<a)FifIY85b>|gMp8l%TQ}F51>_9N3Q7aC9
z;o?C#9pB=z8E&;y&EuVa_;HkI{fXtxHE_T6A$wuO(b@bT>0KTX+L88i|MX=M!9@(J
zaByAVDjQQ1Wz$C;`<QEJG&tpnz{0<+G|xGvWSdihg6w$K`4b&ZbJw*RwfdTzVf8{E
z&V<(?XtA#5uTV6<3$q=IAbat=LC$!3^MM=GCzDFDoku<cFE=3hvi&q3!7`Bx22Y~l
z-0wfmHl`dob!utwn5^7;=c{ENAs6T!L5R7zr!$AQWFoM`5i7viNy|z<jZveGkey3P
zoDS=rUb5-e`2q=KMTk-g{P<7zi(`nTy;38!n<i|Dr@cN?Ts*~QCyzGXXsp#wH!M~B
z>iB%w*j1tO7<x`2l|t=RicN~SArwYU|H#Zl>nmn`D{QhcM_J{+j~#o-#*F|w{^T;~
z{fO9zu(+z-FGN$|ChE=LmC?_eKsLKwikThC=|ECj^$)Fipj($N){eTQv6oJm!U+0+
zB$f;$7}ds_ici8SMh)3pS<cD<Ku<cATgG&oL?z3C)#^L}iP7N>dx-uiDF`1On6ift
zk-OE(b+wT#qgSv-00;=$_>I6@N(KC2zcx>!O3~-g#inlq0d5DDQ<CNB@(^a{u8$Zx
zn5YlXAD9aiK6yKT%p1F^WVm6#HxdmB9Lgh|S@!usRE@wzCHUl+@f{9{=`K$wU<rk{
z5WOO$hmUAIh|?n?KK)q@#Em+9hSHu{-zJZGUE*L#H0(nptPOI2tK&2jCP>_5fCb|@
z+PAN-)-)0UED5Fa`Y;y5i2CZtk^v0;i*a6bdlwe19d%2%)NMWOUFqE7mv@YFh!s`z
zx`f^{dhVthk0(qjL6;|Y`wTB|!3Chx66*CqVXwfZ52r)sS*!ydrWb>>07hrS2qyES
zE-ce!E9U8o;Gyn1lf8Qn96F-%bU(1UHA$&xE6#QE9w-ycn)27o%fWOhX#_KOJRsoN
zckM^*n4l8*NP4R6$v33oTzSt%fjFB$_EU_$?jV|t%$=!SCJ;8%BLJ&)WBW3euq-8)
z#@r9n0Qpr$WE8{Ofr54eyd_vL)1n17&v-Kd{L1I7PECKEgj&@a@7*8MXMpN`{#R&z
z+%Ee`mY%4$?b#xwM~69$(qE0xtnVo2JbcpSGPdFL|6!H0rUB@}Yd5t1yPtM^Xxj(q
z&;f7r7J}5p4(r)HUYo+2n?hl<K!VAo6X0V*qWD&4#_s=<E3I(<STMvb(m8xe+f@_5
zcB@S=p`z#m20UX|(j!@4V43{4OAGWSM&5y0T*wDgBb#jZuy5y{c~Jy;Bg~@{q>Z^Q
zS;-K464o;&IVib_)ZoWq)C4TluQTp`cQb`froSq>IUkP3b&sxpunQW^ige;0^iv&I
z!cVhw<>p%3r$e|rV<(0SRWor>u?$RPruo}1pm(wS;NAGq<f<*iQ)0Pdy7W%sH5p<H
zvcnat!zNV<g%cBD-sUsh83K9HUjWeF=I^Loi)|2bV@_X>5x15F@e7{F@f)#urBMpi
z@&b}$(f%4QX7FVyb&(=B4ZxaBt|s`vM?!}3Y{wT$Y#HP3&>4j5TRL=N&|UY?|5FfO
zAo<UuZr2~)wP)=qm=+?RPr0DgHNqT_63PxSq#dlM%hxV#E#!89u)<#e>hj|O|55UD
zw`949q8+kuR}Ktzt>XeBbVt~6hLD4<HYF4g=kn~bs7=Y>dZ`i7#8VB@R2;kPRCFYp
z?pnOH2vCIIDf!f%RejZGqtiLY6SpmX=R^|2c1$jc2S6A24kzP!;R#5J-L85fpH__?
z9$CaBklYL*{=Eyp$nL+VI!O1E{a8meltxp+mcPwCNo|`L;JhKt7CD9-5kkbqRNtCc
z&+O1qCg-`bey&sX6{x&_QjeDhp1A^T#T4Uop|ohm(s(*dti%tv^y*iaCP-ToJ>m>~
zah+<($a4-(P^@J~`)E<R?YF2Zm;0pz{eV~>xan4Qu+cDQI#E$8hQnN;XT2QwLUwqV
z2Su&YRj(r9hq<M>QqrtEwpe-y;EK1xiZpvqfaSD9kzn~s-WrGmP@i5EzJR?z6&crd
z!e@8Q0@YZm+Wv=z_&enNIBRXrTs3+Bvlfq*l0&f?-(1Ll4C-IulRmfs4Fa5-(F2Rc
z(N=3j>r5j8T85Tm{*BXgQ=Kb}Y|V>c(y|QEa#I6Q`5Ymt)`7ToabNFIv8LEmU^CDO
zMO};J4Fn&VnLLxC-zp)hU^x-$VDqbHrsY3ojmhBf+AjaO>7~6H7?0YNBG}C-hOJ4%
zo*T%C`aZK%a?pGQ*^xgl797O~gMw0G(Se&!#FEIGUX%?l&Xam0FOe7h>jrVuWJh7!
z(eg?^4H2JQLC5q<o*b^5*JXctO%`|sP~m7HgYmILG}=b7sl-Lb{KsIH=O>*VruFAA
zW#YtQzYt+=WBe%oFmc8c&cSGAl4NT`afJLI*@a%p0KLg%mM^64Ej+Jz_k33LN{2ON
zeQb2?c}161z-};O)NU%QP%Uar#x-$$j`ev3<Gj%GUwI>MaG@L2r1<)Z)bF#L`Lsp`
zG>O@T#$5opSDzh$g)gX(K3*)bm;EAvn~|z^KP<@H|NbELn5H=)qB!{PB~owUTWRkj
zGzqX<|EwY%gF~s;fksv67%bK3Am4<t<#|>gxKzP`H_8;W5a*tAvRZJs6v>^`v_}36
z1G;zH(Gr}J|Fpk-`1m|^$<BH4U$e`E#KyEkBZ#}&7)`-}z8K!aKV<^Q4(LHquLiwj
z9$t(#Q_b%+Xl3L+E~0J!$hpGev1YyQzbW6JUDWb%-KM~DfGPO`4(0{Snz|#YHdze1
zmiZR!P{;g`D=)LJFKWkg>dtw@WFE2%aVR%gD)nS<A|jr47BY^@U*QmnebX)ytp&d@
zb0p$EuS(V1s}R0SMheg)F7o9MR2rSkzRkaYpB83R&|1VKt*#6=9Z>2n{(G<0wGG5Z
zZ?)6-ya5#Z<)$@eI|iyK5DiUy#ghb0XS^!xL#xb<;uk=biBg}5F?Q_3p|-bwf*IR{
zY{fq(zIW2Ux2UXqhLM34M`1XwQz{)=5Ci8CXp^s1_`TCNFTf;;g><{fj@sXsuf;nR
zswn}!JQXB<<YuY4BI6H$5Yy4hcE<s~+f+j{6UbIZKtRcEh3P2>Av5{=eJG1rI~X;Q
zVcNH0vy<fsir^VK0M7qo?QqK@1K=u?oUletnH>pM?58?bs}GC89u=R!JXUHm)BfHN
zPF%A=dP`)&yhbP3+C<){0{q2FC0MHwK?adW&SM9?_ToM*dkdasR1*bZPLqcn=j206
znO@?jlhB}RL@F+3aKJ1q2@Ao^@E<oTl3iw7pdGHZ13Byqj^_=h?uDGx!F4MFt5Q5v
zNt&iKFvuCn;e)GirG5KU&g4W;e)aiMK+R9v6a#_-oO{Ho8M{)L-;5hlQ~nQ-S%|D^
zCuZ@`9{bSl&sg&h1qy}^vj0I^)ZO-m-{F-afVexTE2key;_r%_xq(Dxr>6ip&_u(L
zjAQo(pdO0nRGSZ(!$*Ta6w&P-*o>R>u?^x9!6Cy3GWs+_h@-VX+4@ML&kwlFSotJ0
z+~(!VXAOmyJxcHV-qteqWP3cc5l{e4l3hY9pJ9;OOnv;sOcwcVUsbELgE61E&bm7%
zV0C3AR}>niAOC)I2C)`{p>qbuR$#UZiWiBtbdvLjyK~m@ArIvPutz=LaP!W)SLPvI
z)b~K#mXDLb8vtxKYrc<GEA5{V)59>Ct}O$HiwMNP`=?1Q0Z1mVvDo1i>+E=_qnt(d
z&A_vuFe;Uirw9z52=A5rRK;?ol%8G>aAf!s>mmh8%EX|YVBRqxB=t==xqG$ssEgy@
zLvZ^qA;jQ2`|Rk6(I(5T4R_Qc4$9yWWiG50Ay*4eL%nF=3XOlpV43+p*7&l8Iq+)T
zirL$Gfo=uK%;UI@ry{I$`9TgD^J$JG+?rGO<pjJOGuyg!>K#6u8U+bpdVyrLF{qYQ
zUh&+v77{LxXq4H)bHlI*l^kNt8Ke!HDe8;#rPwZmmr&N%xjyM0V!+6J(MtN|Krq`c
zR8+UnS9p2k*q~Bupd!T1r`OuS=cO>FsBn*#yWZ1kv4zY708LXyOhx|~xZ2zs%Q6jq
zxxOf)0n>fI>(4T9SJ6Lc^UCMr@#QXLKGX^=D}F?7?Xe+vtzpDEN}y|oLk{P8hH&bi
zlgI%2y^P>&8(TghKuXS!a1mexoR7?${C!gh0+CbJ#T71vV8sG!@Or3<Ik?ux7YY=9
zqv{HB6$HIw5R@1jj+`7nQe1GC95gP?={Dq+%vS)*gvtC3aAF(!{REP7xCn*aJ7FqA
z&`HPQrvbpK^$=(a==y7VRD$K1VXI9e<5DH3W#c=iC^3n3!o(a9e42fw?Ka8Qh}a*C
zcPX>(tsjfrR0{W@g3h`F(!g9yPC@R<FExf{kZ5%a^DhQX_XYTS#FTxtuIRhz0ITPn
z_ku8#m{^6!3=zLBFNr1)1*N^1NtSjPga&5ST1&DwcDnovk52yQY}BaDDeRHl*`8*g
z21DP*fXqDw$FB<oKT-~K4>p{9|9!W$)ta>jMAKyM67z9=l`DrPgJ}`RPZ}XdCu^i~
z0Q|saRn{&&hCCfU*Kdv1MGT9H2PeM&zovwtD7&DS>@6zRe>|?BfV?-t*_gqi?CooW
zK<pSW(BFK#%D~A9R8dj)fYF+_xi5`VW9JTL5#Ws}U<hB_ZX*O1f=M8Kf*C0gJDdeE
z*Q@qt-FEo(TT=^FuY|P2`>9a@L`fut;j`@z#wh^(RF-67@vEi(5StPW5VP26#4m|>
zd)q#PV<4`Zv>89d%!^3pLYYLo;CE8|wX1RIifqkLCcSoz+yIj<^S*F!+v08n^DcV9
zFu3J(Jr`m-5KoYVB|-&o?<Qg}os1qE2*Sp8yWhu*=lF7^`GI`jt2>D1s*Rk%o<Qk3
z!~ZD?5ICp?b57}DIj#a8oG^SabhAf2@FOe#6VEOA8-x;&nSM+zjzFbp)wMqhJfh|U
zPn+F~fbcL(gw^t2YCIcN0PPbuY?*qB>K3HQ*a(af{-$dO2CeVlW0>YJBVyYM(0Xz}
zTIBg`!PaaHzsg<pc=|~2psim~Xk%0JEmyp}^G5S?7E(gPM$g2AF`U~ut$Q_pB(u)8
z9J}PJ5zCxv{VwH#sb+&{Q6tJAhz%pQr`SU)qHZ>caN-HxlOq8_TYB?@f;z+Cr-~M!
zkCBW{p?zT-fs%K!4wQvPC_89;>^IknMw6VM_RFDytG<#~B^@ROn4tS?6Ue%JG6&Qx
zI9Xwpsm%(XTzyFWN|#V@fVLmwyQB%rDd9dGjAV@Q7CRA4-W+U;=(P>Z4UL&EcD|*=
zm`2+h44`=ORvGyyTKI{`>v4(S4mS<s)XaI^OpqgqDPuR;RAviS15@pcLLyn3qMj)H
zO{Rgx;$If5sc<Q?IE8Y|2QN8=IO0jwPL<aF<q-PAEml(U`vFxb!cljk!Cb_v7iXXZ
zxWsr2OymftVmW6hcfE7>zPqySFP2s{iLaufp)Qt>;2Nt}unSU=^8fUrV2Eo#5Qd=P
z{^Q++m}e*rii1i%77MLw-!tI%5N8S6GLItstu{R+Cel<)hVNt`L&>KDFi!vPhjBz(
z?CFei(M%mC;^+?091$uoWQp5M)>~HEO||K_k@xsWw8XO6ZUA)0CW8q%$79$@EI{CI
zkwscggs&(N$s{deROUY;u4#vq@Nnn3dFgeGO@YEuO^u}e6GT%VQ>PHVlCVHh{VboF
z*Vx|FGh=I5_s_0^9j^{|;C6TjC7XY#f%Y&8(1&DF+WNiq+7IVY_kN0Fmk=UXX4h)=
zO7+m16!p*8PBa3{9_`qmiD+|2Yyb>zpG=Tj$!_l|IRAOGBV8@u1}Tnm^<nX!VbkQ<
zcqNRA57Fy%FjqVSpv*g2dhsyUOcx1fTbbhaYrF|=$JqrVnFV2=JXCE;J&suswDKnz
zz-BLRkaRT3@+F_TmRSDXI7%I~*pw7`y3AFcS1?5-<3%juaJa@IuBvyJ*!r6HIL&nv
zGFws8uf9?hf{OC4ek1i}29+<W@ZR)!k9MT;jzVmZe8=acx#I3rcqW#`TVqj^Vv0U3
zl&QNseAj&Ub6yWo`j1E57mO&tfIe7BY6NiKHF@!)lPfW{i~z|(61kL-R(|?l=TCLi
zd7G2Ysy|3iW00Jk(&-FxJKK*hjXy7PhSR@W<op|WH0&#`ty@!zii<r@0q)JKG$m~N
zg~2#xS02O8hP3LL1_@Ah&R_-m-#XLePFs!Wm;IGn-WYV-@MGa)B@DP8z1KAFtPDW<
z^owPlRDwgs9^_E2V{arT=^)kZhMX0~U6VU5(voM*l`9|hE!;vhee`$_BYKj0)kNiK
zalfXz>Hh#Xx0nqH2TT5)dC$QMmQe5!ws}Zz2p33Gayh<ZIY-jo5n%orn2jJ(-l_3B
zxCXf}>o^MjT&x<#P{LeW1<RoC2suU=x|FN!C7MPz*nW5v?tPguB<nv6h6Cn<B8&ag
z!(Q#)Vj<RXlIGN3_u{kR!Vd4w`d+lw!#~?xVwtUg6co7rg$$hri%HdG!<KcNU|8**
z;@WB-WG905X9t|Qo~cx^aQW!D><R1(NW}-%1k5@cH0^K8eBwVFb7PEk*L@|&x?YUf
z@Gd+i*0c7xHyy+v)KQ!gM0Bu%G;H!Ez1o$xLN?-PNOscmm(_lfnx%(}c;Z!>(Em5c
zd`w<f!cxxF`94r_xBirc{J9n{qhVn!U{PN-MMMN|cpaP8@z7zALt^l?FD{=^bl}gs
zEE$NlQ`$<^P8z$j39DxaA@yQ0_6el(3#D>JVE;B-_EetdL*T<|tN3zo-j`>Z3nb6t
zj10bxBw0_L`9MWmOV<dnglp8Yev0Tx9<;;i@KFcsg))3gi2(mU0Kmg6eX0miaDKN9
z{)Uh-Dws>_Y&4lZd^)Jhk?kp^#Ajl=iMSwS$6SMXs|FKof5D=o1#<mvAJ1+C(ia0s
z4bFKtJxVYC7@-|J_5${Q?3zWtUB*wz9d^s+9$MOG!RYbGc@NbN9rO?lk}Ani=NP)J
zoGmpDj-I|<+nKMH)6IgR)LI8|C-KIR81l*G9d{YMwYwXFXnYJ6s6Nb<jTLi1&z}Cc
z21AynOS{kBf%2Ch4tkDq&tHMf5#rTg+i_#)GVEN1md&N!xm^De{%8T5Xn<z^{M0n`
zou?S*0MAmjAAxurwQV1J@Jx9bcHN=|T#Q#R@}_R^B;J!GW5fY@twf2#XH_+mr{cUw
z?~p6Y?k%bnf^kysJ^IBC%%M&>h#6>QQTk9Sz0dlmazDk`p*=l2KX1N~A@Vkh-fT@6
z-QdrIH`c~w{2FDaTg71I06nHc0S$hFa`kbFQ(otI;+6_cg(2KDW+aqCqq~N<d;QPj
zp!DNdkZ7xN%TDPf&|CL<KVSktgrq18-X*N&|41Ep^F>J_UZrbku5zIdRLfvC2AS^@
zhjM?TwIL+jjK*R_317>h*PB`ey6NgwZMNn(X2QO>sww?s7EMah+`9v15NCsw{+)~-
zr4;;co3!IjrI^2arYKGio??k)G<vAp6miu+g!3f*T1`mefLWT454r}16r1gD4dVJs
z{zbIJ(46v#bU}sU{s+_epuyp+wQ4Ug_<N*JTk3K$cI`{ptjD|J5G?L9&k=H_C+1Gv
z{Cie(DHwKri@enMe~iq&Xw+PH?<D}WANTOK#}TKEuMIB^fr7Z}+H*5UO#PT-;XS<M
zKc=D5Zepw#Rx+fljU%@q<UeE)i)#Ty&}%|s2BH!60Wml(4X=udR%w71&aX*M|3~7C
z!BUvv{Qw~WAIErAw|EU2FCyJdcrrFj%mC0ua8@qnp`<kXY?0L=;SSd{tO=jC|1s)0
zjp%h*vlwN(OHIE3Z&^3X&M5Q^*?iK#=pp0|vmA-&-8OI)Yv*5E`~C5pEHbZxZe3%P
zE}!KW4Ep@555L@uS7?c45jL={yQhNBN3ZTWG!iA@PivSXlm(Nf365SwI5E6rp5pAA
zMnZdUGYuXxFXO1kWa`64ZQih>R;huaa{3ME1%dQjXel@%uh~o&q9Sc?a9_KfFq5hw
zDrU*hgvXr8ZG0}5wVCIZI!XR~&Wl&kBP`MFi%|hpjwKe^fun3z7b#<W2l6u#>fjL#
z%<OE{#g{Y)K1eC)QB(pRU?H1YgibkvgD=<U355RirnD7q9`oZUylly0xSUFyl~Vrv
zh(Tw>9d28Y=|){XBDAOTH<8Op5uM!HSq?|#W^En~h6rgFl@ycWW+d5YVpZ#!zzWY{
z?c2mcAVY*Cl#_WZsDjgmCE7T(<(N}gBu#;$6}W`B4o|UoQ%~UT4>)0HQPNH*x%ghJ
zo52D=J^gTF!o%;M-4u5Ju1>IE30$ZPl9;S3{O&x4)w@XumIM2@GT!D=mO8P(afFAE
z?OPH5OvoI{1>lWoz-IfF@&e#r%9sQ!S-LVarC?TIxOSvLj&;H9rssZ)F5Xx>e^AnY
z#P%=RqMzucDkIFS^~~q0T;=gn!=U@VMIdqEjq;psAI4#zi@yPWl|e98o~0^eG;-$f
z=Oz-WI{{~!fwntF(+B-AlP5;8FGIwXQ{yp#Y$R9jrao#gm$t&WD;7Sy5ua<wLEdsw
z)i4a0>|HD`xo#-hD$#o`i^FPWtS?gSnC&p1W{;C%2Kl?iZ_~~9!@0@>VL;_TJiI`#
zt+su6hN?t4Y0KpQw9XwzZGsnMZSwKCR_=#SAq%63x`|1OPC%O<z0=Cir;gYKo0ef@
zlyye|)`PD?gGM3>T}{mzw(Hv+khpb8M9PwGE$b#WE>ba=r~wa`C@AFUV@Z+Vn+E8A
zpMXB-ONs#)B=e5b)0gZ_W|j-_Pu3)C@~#RPEl{Oilzxbff8SrK7b4W07wMV~!wLjW
zBOIqlbP9x8(+F)zXvk473C<;88fipdzHO;1f6m)dq4GE%05HY}9V^0w-zr~7)Y}F!
z@L=UDr%tm$WH`g#O6`Rl<WBeC_iuo&lBoEzhyu@gO4Hyv42ZV4GkMmQ{gbg+0}u*U
z;en~RHZVM}akj>3g4xtq2Ilc?Yvmz_P|UK@4N-dS=GV4WBOv;${G~;de|osyoR3gE
zzT7zeblI0A+bnXbl?i05bhOGKi;%kISEov)Ay(3=F<C@=f-TD%%ry|-E_(V}=A|z6
zi+EeZ#o3)Su@~^f5IoF=gv9|NZk+tk`Q1A-{F}|C+MIY^pd%^bB^{L1nB@mOcQ0TV
zKwDkBN<OU8jer}$+W#;jdgq=((>}1qx9J^OTr!fBKGsSs%vRQv6R_hDr9b{P0);c)
zxG10lv1@jXz3}gS^S0sLgL!eN9S6jJz}$^MVEOS_Cktp?yItzj?!2<B&}%NYfG}{d
zPok?*&m&v)b0P}zDlF@Pb4=Ltm}{s8G8*WwzA4J?hckP-aIZeaC~t3ZDbb3wIyQ>3
z3_5x|>bcK4K&HnNSy23ba>+on=DeoJ#6~XK3p{y|d*FTX1PcE-@(cek3e(Xdw?#hl
zo|>*?<3$SQ@hX}t^1J+r)8e%mLM{V_FVJ|+hg_f`FGXDKrd%$BZWJxx1MnHOlc@u{
z&`i$$C~sr8h4a(@<%QG6)q1jddwt1fQadz^wK_=1in=Sph#I-Hm#Q^%;Rerqsdg=p
zdw;Mw1Vx{>q$rSyS<QHKtT^W_2U8O+Z7b?p$m=`;Z^nofIzi&yS&VDWtrpM14u!f|
znWn9$+A)-e4<akTwTx}$TaC9IKdo8ySZ>1eK<J+CL8y}Wd)3f~WO`EjkM%uan3GQ@
zL@J-*zXKS?0RpOW>2c)`c3GjY7<Jl(lqQI~RSOxH>JNUS3{$$HHkMjBrT0|%l>G}<
znk9o5R+HO{$1;e^lm%xV+q3IM@V^8tn-6$|E`mG@7rRv<WPwi?34ITrh5`k55NFnj
z)EX}0;|1kXw`t+RH7)tEL-?Z5=&7_wZlUxk|9_3YV-7gW0?|ujD5X5}-;{~kUnC@_
zy4c8He)|fiJY)5r$+iQE)Y!q(z~v5^K<h!E0UcC$?nd?hi_Tf@X9w7mjHS!e9yY6U
zJ>hVpUsVEo`5kQ2?$c(NYJMgZ+e!B?O#>$tbTNr{bQfL-BJugHRhFR1A-chOX&H(4
z_)k=Gog@Z%3tBZ6JV+sk)b+Zu_A$gl(j^T^XIJa*b1$Ke7p_-yZt!@_req+0$w-IM
z3%n0}og-E|{9)jy=_#ydURfzXOTq8E-_?~+{1>b=a<rx9mINX121FOskeDcsav<sJ
zu=+T3n@@zJV706t0jpXg76e7W6hw87h&7<0t4(FnI20*tNgz{jd&qR9=HKf5g*YEL
zwJ)+rJq`OOiBD@78jexYMel1Da`!@$nVSbNikmh`2dF`{DXALaZ&J+0**Y$tY8r?4
zLQ(>oDbsM)M8ap2l^w8rC|gF)f-W9KuIxRx8T<r_A^u8+P^OE!kh=kaw*4t7qhHu^
z&iWzENYTMt+0fEC!qN5{7w1@ANWUfUIJQ;N>d%*{t(!lifb2?_>gx10LZ^FtUrvaB
z&Z3p!HI#jLe!Bu;S9)aK%j546Y3G{;+1g&}H3ztMNB{p|l)Fr;nqu$PvHaFpS&Fx=
za<G+f27t|shdt}RR+Kak8%av*OGZh6Wr$E^Uj9KF$i1_9fn0ET8YrHQ|3vF?JUNdh
z*b_JR+N1zJ6peuzK{`1zOzoHR9$&B6Yz-KCsN4a2*YYpP5I4eZ>@6)3w`Vf|GoPk5
zTQfmnP}~A{C~VSj+b?&X;R>~m^Jevo2>bgsNcxh-d?l(xA}8ECfU_?YTG|>DOU=s2
zM^Jn}VrVt>cH-&h_TMNFpP?nhHQH1m`fs)s_nLL@9;<NjSZhrv#;f6(#U)@4E;8v}
zA@^`tf!K6W1gJ}YP@V{IB=x`9A1X{Dn_?I0F{nllkEF10L+TmSa>)g}=&8L4a0O?=
zZ(zv7GDjJX8q!RT!BOasyl3O?Z<pz#B?YDtIXyC(jH0}hc#Zd@JZX;)xup$0X_V4W
zcZ{z1Nc0>vvve%u!b4I4A;>B(2<i^?Dr98|e6%#j!^Ihxe!xJq5CAr#Z=;(yd#S@A
zX5J@8Y{FgEn6Fu_$op&vZD}6|XVfvMIT14<{Yx(KD4^XcWk|X&Fwd*o`HxFa=avC|
zqCKF5JQ2C)X*THy%IGy{fB(c@mw->n{NyC|RqnxG@qAwIdD+2v+>lFE{PWk%oc0Db
z`{AYt#@3=}FSLYnF5rRdz`uLT{9Q?UyUy;{ec7_aAJKs_Z_Td);qSK-*9VFPqQi>3
z8J!{E!L*>P^JxX&j#<}n*;5msOz%3|J+F6*&#SsxV*mB(dxyEI4T~o!G9dhBj%`=+
zQ@h4oBkmG8BGrF=m&XNj*k8;6?!HW_@{FHhv#F-f8q%fry|1&P;kpOmX6uqAqck%w
zehTgygn90f)geWPgd2q&eyG@@W(eqgi~LGm<mmy3203ebsS9%$Q1~fHC3ntf=Ir1&
z)Dsg2KwdK7!Y1UI&q!?SL`y0cJRlDygG$H>|C);)S8kn^<$&T~ssFR$T1p+MFRcA`
zISqFIi;t^{dMNWuk0*uH+d05><fp7c>2Pd{U3X+|H~bCVexm8-v0zvwdf+K;Uh|NP
zXd{Y@qHTdcAQ%fuRs}5vi7PP1GS$MLRpFUMCgv}^As=aOMOOA#xB%<-&l;o%6|f<+
z#Vx;&!?5r~>V&kzjx>PstEqM5L4qW6sY<D}ZNB|;c>R8od@+Ii4PA#9Aql|150pm@
z;9+$p_&Z5x_^Hq(<aY3%uBcZD;4qUjT+fM40}gU7o7~egm_8rD^#iNW1n0~f5s+P`
ziY*H3AXjrezi5s(v+n5UecPctiq8vcwDT(AfTCJHSn%`^fk8<nr@QDyWgKxp8;H{A
zdH#gzF$!M1D9BZ<Q2sa@rKt*`zSd*iYnp@Fof)oi<b<4RkZVBems>Ik%`47)vNEj$
zG4C5H6Pjn!GN~l{*bfA+$H4{zD;D&bvNo!xZ^(3lDg^fVeua*6lg=Yd&RpEKiW*;y
zqM*#~N73UIeu|n)>5rSQ^=$-Kx@76pF22LYv6a>vzWdnozy@+s`EJ4)B!HV=vtbc<
zdRR*o6mN7Y&7@tQ5+G{r+-W|yN2vPw4hD3sTXTrI(2OQkKPjXWK)-kFYav1Y!tRsC
zLg(7%Gr^+**PyGVGaY6u!xpzSWN*h&x+rgBCj-%42{!X<_c;~d>+MRI6PKg56J5T6
zsP)kSr5?`s>o`m)=Y9@Hoz?#?0?{ZSq}s_b5paU{`=pD*f%reFX!S*GV4!&h7TiJc
zUa=Ia8+`vPCE1`)cjtF7{+73gN(1Z0c<b6WmP^Ag%uFtkW1Pfr3aF7oq2%!!Y9<9b
z3;wKQP~*mT0cbG*HoTVAFqie@D*rW)^}HeAnp(mUaV_xQ%UCVO<Y|@6m9P)03Aq1p
zd2VKK$s`j%LIIF*-g;$7b}?JC0+I#0kD;`_g>|!6*LlM9S8cb#S7X){(%^AYN;GaD
zg|eDb@t6^SjXb0;dQ~alwxu$L&&*63OCX+D71tVD^gldw;&!{p-8-`rq{IMH&8@4H
zMGIVGOIKn)<}7rr30ZCg(H516Z85v6k=Y5Pcd%F7?fqQBTw=Il-bHeQ+=vDcPkS}_
zBLhW*7Fij#qV*6NX9rbn0tzRjs>27q2bni7tMriI^_e8Nj*R4fFae>d_G^8k_aK*g
zrq8fhLR~4^_B9}(IV4_*n!MHE*0Oc~!F={vhp@OxGMvVjhmYY84-pN<yGju@E@ti|
zs`UJ2K=n8??V04AvJzTJh1tX1>QKJbQMim|up)CpCs3%NW^^ULxPcA4sZuwBOlj6h
z_{sEn7yAyhZ>?i4h*hL%C&<S|r8GzzJ4<GLMCLuHR!XIJEu2g7s*EA(8O<GS&*N$X
zd=lZ9<HCU!Ib-|0U@LrkA0Nu9pk(fn4^*?Oxbo|iJZ;A2;J$+GAfekvjZ69RW`%IH
zvJCJO52^AWtI_mDx;px&{d-1M#<dkd;%c@;1HntA#|_tJ@l2l__Ing(yKJP0D@x@z
zk?vpHwUC9P_U2N=VnaYMI5B$&ddr)87lD*{t*ihOOP91q;gGaRL7F-I^6&xaxYRcD
zj%t?xEzT(2f-FmqD2z{nZ+lzO;XY3=&{B_LjY${lr(@Pu$Ha@DP|*Er_1`AcUJ@Vx
z@<Tn|?4%>flaab8vFMa`(l<iLs6D$w+M`{s%|P*QwhKO>xZ61}bB<yv1PA{pS9g2S
ztBIOv+LWM<PYwvcyVXe&LcEZwa~@a!xjtLrj(6tLaW&ZAw&3_6cZsIAaUY_XTc$(H
zl6&MRWe{W1otn6!&u4o<1EGh%22X#=D9Eh0de`@ze$T$9@>gGb%pA(pXm|x6_v;tb
zCta40<X;l%q7}tqYn`tXgZ9a|Px<R=Sc#Z$uS5jFE7Vw2U{|?+lg!KaigqpDJ*P2K
zR$U{Ic6cBXSSwqHP{6<016~HamAn~c4Qf;9=X>idkbC<FFVoWKK;`SRS1Q;f*W*KS
z^sifURQCkB1CT4-YG{*pKfhGc{0sAP8}#TsDiJ#Iu-5r6!2ZZ*pd?pad6IN1E^}nF
zf$$MdLX8GGDWx?2>o-<gHS)Pqp-P2Z-k=Gej0Y7$8d_aLcNvL+%{bpkQ)S{ko+#?`
zCCBovHr)O<YN<nvK#>yxRstikEq(cJLqy2$S62EFd@IzKT|rq>JwG7L_6fN&_m1mF
zALUHB2GSrIlF=``XvK@$v>UUK$|B*JLIVfy(v*Z2@jM@n<&x0^D)#?o(sIQawwL(Q
z(jpQ_g4Lard#_O3-FI%)$=s5>Xg~#e_O*F`8c`QSkRUp&0c-?9-Z)!<)U(FKO-#l0
z|9vN+vb@r&6%~D#BsMo6#e$xqrt<vrBGh&v`&s}GyA5{L_OfW8S<^9UD96O$Q#fy&
z-0yVw90H1yH?Q9nJr0oeI3e*nLaLKB{8GRbp_yzLW;!+!hvwAHF#N^Obaryc(gMtR
ze%b{O$sQ1p84<RnH!axc9|m%m(l?23nZ=n@Z87Y>S#+bJ=pR(AO*Ju4d%G`Zi_qT9
z%b|vm24hvDi<NynVA>P#D?J$hlljnD90JUQQ$56J24vj=$WuM^B?yC!3GgBcA3&c#
z&F36~zverCw7oEZ<@|h^LA&Z`!=hOII4|KMeGg=8c=lEdS}Iu}0iOC97?)-ZI6i7z
z<Hp%@$E3c)t6mGM-77_i`enm3+#bz!V66T#a4E4zOwx4hO3ffvo+Q%^ryeIJl+sil
z&sFQuQFG}ONR>PZbD2utlb^Q#Pe}$(?({vDk4vZ!ag(!|;<3Egag!O5H!oEDRBU&C
z>vjnl?hm$l2g(V4frLAW`{Br9%A<P@gnX!S>%4@|+)f~l%g9lx#b~t{ZStWZep<UM
zS_ICCO;(e66Y?cqY7;Hk_Lv|`bpA<@3-MuEj<;uDSd{;Ar*zQq4M3j4bawaW`@)@?
z4B>i3(&!?|eJ71LnCGIDdJs+@)`{TFXsx?DJm#EtxD^V*kye$?TW<oa)eilg^8~fa
zdFVJpc7-)@v_E(0QM`;Hu|7+PxcGNboj4&j6d&M%W(G>4PmMZ^&{@>y@&u5GAOn7c
z+CX9N&X71A_-ukP!0Jyfeuh<%INXDfNyRZa-6@yiAS}BuN;&Zx6;aA<Vymy@W54BZ
zIi;UMd%k!epk!TSQus7>)qQ^X-3OssH@;8?8qWP9wYzqH6(78{#Aie4Y(UXeOdi*N
zqJ?n$i{+oD)gg+5`P34dR)9a#QUhv(h$1Xm{i<?j>W7L{_Ca+HBZHw0T%CU0<++HL
zNSN+KjVkJLjiO!uL=vU3Ur(0HJAuC6BVk^pVz&a1-=^;jQ;f=IHvoa>rb<73X!^o5
zkMpvl>fduwydBl8MuP0dXW2?sb1(R-pU;4!>~q9UztjlMnz8#=6zo{o3$n^Sy@*U6
z-uNn4RV7$O7F^DurqLFtTo7e$etz@rZ<&>a=^Q=Db=xXJGn~L4_$*uz!rQn*ZqCza
zAm@;a#Q5r$7<nu!1$G?lLvh=YI^w~ja@!m&fmiFF2&TeGnTMCck$FH@pIbUs02UG~
z!wKl<)75Oc7}ujhK<^UybJDxc6mM?>nNFO^6zG;oB8z1VkVEMIpJ7hKnb$SMM5nq~
zL3$rG(Qd^NR`!(HXtx~C&ocsr(xfQZ-rmngmNN^{g$|OaL<?DHm_p#0Sy~m(V5=Ns
zO{0HC4v86m(-mXH=JE@<H&k`+T`x*@IW_&(Y`Jqd*cLxklX92K4LiAxwaIug(oz7&
zzg<z^E^L&0Z0O?FsBsm?D+$nNxt&~DE&SS7P(!Br!4?Yfh^kMb<^8t1_hLqJHnns{
z83{DqQ#vS4(T4dg11UiOW!I({ao)11+$&<}LUXif*q#2W#q3$491jdhqC&Uu&nZw=
zI0X0s{*RNuOLwKeyaV8|dilkLd1_@(w2!isl2c+O$dpia38i9D3y_07<=kmHLCkJ$
zFc`cyPY)--+bh%?5rJ|_@IWc9D6*~gR0|O9as;kL!O+nOEt)rw??^x1DYCwy#-^5x
zD*=!}%f0ad=zN-XJH!J&C})eil5mmFszY5co}^T4nZIN&tHF$^7*}&;NmDkk1ZWZ&
z{j}7w_5~*fDC#)rPdkppkrrXZ((X$PMc`U?z*{5?Q{_YyL3FT1y5=TGP~b<O(xQJ<
z$^A7pv>|3C5mb9Y({*mHP4|x(6E=`XVJ>-ukybU`8Q&(e0M31^^cF#dV}qThCQnwq
zRGz<q2kD$2QzWk&DhtBVmLP6Mi#ka!(<3(-a<7+&{#C0$TuWKvPX@O0uOTA?$TRhl
zFWM$C8i=7?PIjLIk<cJOmJ=?am7|!hWt96G4Gd@_paN9MwGJI(^IW*LWwHVwK#FXW
z3uW&8CT2Ye#)1p40kJa8G#a3>E9=@|JjWPPy!tJ~lV<JmGG*nfIN{znw;4Kc;O|VW
zEXU=Wr}i;}nz}5}9~m;q0@?Ftps#!!)%GZ^hd9CuG`s)%39n6{2bk*4A&d7e?%7$a
z$!EGwX(s1p$FrO)Z#ZVUqokEI;?tKCO#DUQtHx5k0dJ7lbk;X4o#U<J2YX*Kn((ft
zfwQO6dCvO_2SNbFLwD5#&$jTtaZ~c@b2l5Fwpu53;(u@$Fg}+YgHrnuYMu`=zgyu(
z3zH&#7%<*)4+?LV2=O@Csi~@x>O+AnOL$t@1fWm((Zrj2B;N>H@XO$Fj}p7;3Rf->
zzm|5ib^ORz5?5aBNDz{EPJG`N61QH;mp&(>vog|2?RA}(>BMgmfbu8#E7BjQsc_$N
zUveZ{U|_3Z)u-Q&5BLZp8c@53Y{yWz)R#1168`to&f}GvPKS0c1LoWJLCD#){<;zC
z_{bq0PFbsj)EYY>(=jR}pGQm`a0G5XC}pvm=t65E@foKHI;-hKq7(9;)NDISkKjK1
z>=>02wiTrHvX`Kta<mFj{D9UOrSbh~Y2?*eOu=ulCSV6LVaeY*%iZ+D7U2&Fgf^c!
zfQ3Fq_qOZh>krn}*CAH<3H=eGG%DCJ`q&Wpss-U7S_BfMaEhQ(#1lP!$~@n}bgItr
z&d_Dwo>i^blzHThU_R!_ZoZ)6cPWz0#g<^uKZ@#XYS^V(@vk&{p^CVT1YNCr_$i_l
zX8Yx%ZBv5<f~<j#QlGD6E#=C=bwOo4W0w6t!nGkGm<B~Dl=sq@1Bi;uV=Mzh5c__Z
z*0>{GN@~H%d-;Wag$9cmp`r)lD!c<*-V-X(_(jZz#D?T&@OHQj74dvi$TUKpKtjhY
zE2a`|ydM_n@HxrMV4NAERB0O=BJnScjX!ZTaT)%}CH0mt&34wnhU*+G!;c51v4Xpp
zgEtmWscxHug7mFwMc_yRUXFjl2hE&I*#n8|&5B^Vwdv8J*i2b!UjZmq`2KWm+;!73
zX+U7x9I<M_83MDfpoKq|Le_i~)=h2bpBoXU)f&-Q2RRnRky>?YF+pB*=FS(o&|!?p
z>CbDpxs##<n!s!#J2M?i;^rU<k*j!u;5{^(CLwL<1Sm~rN%qldhTE(QV~|3Rp_`f2
zFaPC?U|gO4#@bLy$4*TmvS~5j@Zl`&g|xWVS8+Iz&CLf?p+KB|kad!|@<oZ1%#Ik(
zcIuv%l%%`N78C)lyGABtZEAtc$us*Q4t9sLCPl(WR~tEKeu#Cuw7QGCicZt1_be&A
zCgCF~)yTxoeU<xk-<$|psA$*JbNC}HfWys{s`yHH?$!<n!dj8&?Q(x76YxF;O)ZkZ
zuU~ZN%57L~rW`X#HRxp(gE=!uEREHS+8v`&$uQr=w{mO5_5B#LH<5<G0^a<*y7=6#
zYHiAXsSsBKwVgmybMVFY<LTAa42-v350J3gu>}>EUIMlhMdUX{&ER+nb%G=s3y$1H
zS!To#+v}Zb5`wOTEM#~S9NVxbo!oz<Q~;Txji`MD59)hfzswv{nZL7=`?t;D3o(;9
zzxp)Nv&WSJm&rh%AKPfS9??@g@@NQ3;f|G_6i8w$?y%a-sjV28>hJa%J|L0$0~*Td
z4=^wvV>7VPcXfLic-Ldz|G1J`v@ik2lftGlZ}=M3tps)3{2W}Vj(J3Ep*aZMLLI87
zY2eyZnSDk+%`-}9_VBqZ^M8$%M{O}x%)s{x{SVr(t;PF^h-G1Q=KD@#UhuI?HagC2
z8EijhW>?W*9!#4^E@|EZmrUG*az0#^<M9$r+GzLr76=pB2Di0Bw@5m|`#-6*;O&?h
zi5f6M=A*FlT3$Lxddi~9%bTCQDc)@A(DGXGB<Vm=lrMcmTKP~ZV6wu@D0O15teuy$
zAQa{P9_h(i_4ZG=MxAK2rGnZ8H$6{{ybdY1UCmH%n%g&1w}MR~ChIl6U&sWUnjZu3
zH~ut!&(p-xn0jREJf^9a>AvUkg|Ll>GL+zCMV@`-@s+Ma=fgJNr4SqV)Wt8iX`OVi
z%OTCSE&#OGD#arDH|fYhU0fVE)r_9920%B)FlZZn0u4K&@nU1Xk{(}a$PFj;vmm|U
zUOLhwR=uXTM$|4jr9a*G-=6B=l67kcxO`BVqKe$w>-tv7=5Ft<4aKA@s%{fGqfn5i
zI3X#WAble@QG_%^Fn5IVnqFJeV*>d>u#i$r|AM*1O%$J7F+yhW3ZNn^KQbpJ!L<P4
z{cVX)HLS#vOWJV;HlAAm!ab!MflRl`_;;&fSx827D6uNLE@W@bVaj}G#ASu@93fXf
zo?k9eAbk)j({+rbqJP~$kdK1XJ-`DR@N3veV66`+_06`a7g%=6#FVQ^lpdqd1_to*
z8Wv1<Plo<nAd59b2-Ga+`*m;;^}<%*e?ZG2U#2!v?T!SP9i|Q>%<<gHj1rx1k~1&;
zeK_GOrR<qH6G+Hag*c+m`(>}N^A>NZi^15J(co@TEle0XuK=^n5hu9*e}=$ohHU^H
zJKlxVrQWwuhelMklDzA+1`!{N-v0(9gTSuK;(SctL0|eTJWj=9tgFiZ5iFCn%A}dD
z)uUZLlOiYog}125iv!;wDQ*l*jXBn^_x1sk*>nN#z1^rj&E&eV-|s?KFIIM;>3+|q
zs_#;4MEMUNp2~JeHL--*o5BX0(~l(^eQ4+G8RdJtd;sSP;Z*>*mS5syj-Bl{ZS-Nf
z&x|5YRcg)Oe)HVa6V%~yeRSR9)Ys&VuKP~di<CnLpCr0_?4%>}J>F8N2g<?Tr1!<S
z{u#Ys+&PBAf3pv`Tg921^Jl1@8u%cN)mF@d0?Lg8@MONz*}2LrPUhJr?+Am+^<j!I
z7{LMNmQrxo&-SFW(sVT{E8Rp3mqk<TL;^D*ImNh4(0=`L$~1Yh70LEV@8WJQ*Bh%b
z_s_T!MJ~dJ4Dw$^%DYdmsU3nhp9YMKv&TGdMVoUh;0r<EeMDO2ew*S1_ce#JRW%J+
zDW0W?sikV-8tujlBL8pCX^3e8y_Q9b`gML902pl6=c;g*nFsmu5ddTbll(B~hax#R
zTR4%o$ekI$18cOhT>hEXsXD7M+%)A&GHfFm)KmXCI@`1{T8LQ4bJ9CM8OJ2kWVL#R
zn%lLYJ0KFMfDRH-T(J}h61VbTQFX&T8*PkIToKF7?APF&=oXb;`)oCy>HUdWnjB0#
z80EG$ah&irHW2M|ZZV1bzhA8LqJH7~*%Z$bY^r1CP)hdV$=#73qWKl>2k&Hd^l9?&
zQp@KqH+h@-z5K)X7SP^A^x)ei7KaXCy@ATvW>V2f0?VO$ul@n2%LumXS-uFvKT-ui
zndKc6O(`=$N!Ns@Hz0=9Hn55u33Kf(Wr90Oj$HNPPhYBsonDMmN!G@UpU*99Fr^Ej
z<>-A^g?$do+nencw#=t~Bds0>?e>y6;IOrfMC}fTj9;m?%k1TQz`RHLC+7K@AWRLH
z<*)Jo`RT51T1V?sFE!Hi;qS5Q`k%Cqc~w;PHStdWkJ>5mJq#X4_N{9JsBzwaPd7XK
zjkr8}CB$5Mw&)z&rZF$(EEiV(rmOwnHA&3KYLWK^qqeR{+?*he^#LExf=8**vanv=
zbT~reK;kSuFDFPl%&OVb3r7-Rm9<zG>f75(gndq++map+3~Y<jg%P-%8F}*a>o=C!
zvsErb08RKK5KnM80#rs_b=wZ;4l|R-<BBe}luNHm4;|+Ydv*4y&X`j20<U9U1n<sv
zQdm$0tVH@ue%z50Q{+XW;D~E?u|{1AXz&}5S}JnC6bJ>)g1J7IYk<@!NP$>8g^jBV
zQ^r96W?^w#=wFKN;aqpiScU`JUq$=~8XLMib-JkQ>uCGpAKjb4$j7Pur&z*hpf7sl
zu{lAS#GEk%epNBNdgnDlHGx3eaxuYezrP(-H<JuYWP9`3TtDs--ed0t#Q<m=B6HE~
zq%F>+zLB80iPm%xn?5fRZiTELj8aq)4?pz=pGH=x+l^8{Hx-&);9G+#-}9Cun?Su_
zy(4RsNS+4UK;hY8F_iFDq`3c9Y1`nocCX}EPY)-5dx|t{IW<8`xmbxY#Ux3ca}z!p
z!PX;MEj&~X38d?hqw7bxuo!7WyU-hV%BUw2z@I4`jzYF$0P*#*xm(fXy`0G&uidV4
z7389W)ou@m8;=6Oiss)SpP^7jT4wIKe2kE)+kcuITk&0<H#IUmrj$n7;e>%aKap=B
zSWdK6w&gqU1z?0quelJy=+#d=Suz}odp)xv$zFqP=b!+MV7yCJ7%~~!^#vZc#POlR
zH+zA;c{&S45VN}V4F1}Eu)wf57qq$hU^q0`o=?l8rN%`kazdr)yfKM=&G@SrQG2Vd
zMEJ8iobm`{&8h$|MDn?Vd__pg$Z(DFQ2aR{2yqdL<ff2Xeb@|&xBN8@`D!ewXmf)=
zq8^2xOBEs<oc)mdFn6zKC;zqIqK>(S9cilsIgHewQwGW)BE=ac5W$+~zd|9w+Aspf
z%oTGXJ83{GpY0PSkb*|PnyFvWN9UY+PhEa-tF3gU+oQewU0T3f9MXbqTlxq4$;0&E
zc5eA^NZ3|1ENU@>y|FFdK!Qy_rwF`$L$F7C+G1=8mnZvSlTauC0SQ1V<pLWJtHI6m
z|4ZpF)63^q!{YkvTEE1FJ!j?7CY8B973FD7)QofWe`X#U*C8(t^x{rF#}s-%ZH*>|
zu}i5N%8$pZK3nHZl<^XO`vWFKQm3&n&V3Q+Foh6p^!#L41mRxb1V0KuDVdglu@n{c
zw`(Zf!iZrMv^?XDYNALCA*J3cOLxExE;#|x@^*`pYxi|#0{}&)nR@{{L*LTYP~U2c
z`j8~Zg@1uuUnEU|DGcTg&jyfsG8ceA`Md<Lc0~;=(+E=_0%H;vXZE-%btdkd|DbUL
z%Y9@H89)+33M(g>?oOs4hNVh8GT)N>{mQ1tP7?pqKWD4~0jjJUaLh73cAN+>!}kdz
z?NVvr>FO$i+55dq*y2_aL~=nPXk78eZy!m^K4I7)e8H!va7-m)cU<KN*Np_EK_zT{
z?t*Ko)*k=pTM&U)4GOQDaZ{>Rq`mRvkMFp7`VNxFgwg^Big2XRAtv`8Q78uze-X8D
zE+gNn8tX6<=cm&v$Sc8cB)SjQQ$2)S$V>(ql{xUsD+@&%z}b0w5>;^LOuDJ|tGar~
zm;V<iCIMkiglc^K%ZNEnnBa6@HCNP}g{b-0sodPmiT_#2*M3;$A|M!fV~YGu@PqEJ
zH)6UY`4*~&^_nUy%W2$Wr2IJ8QY6K;#O-`-6T;k$-_G8<20e`#Ak-Wq1<`S>ye`iS
zktWfm^qIH9QC9`q7%4FcmHC#N!SkfWcJaCEGrR2RszCU$Gftj11AydiSV-j#Q!|2s
zM>+l4J0|e#Ue0{pC<8xs4{K!BfafyS>Q*5<p(^=z#aabxkK8**!eDT*7!wt#;Cfn@
zaUv>OEeMec*rHg#j$`t={jWa{EGSsTldtGHbDLx|TPpq-(HSz-Ww(LS(ApPhy{cg#
z9ua9`&D;A*^8D=r#{nArnJ^tvHWiO`nRd@Csdduu<x4%SD#C_N3IEQ@+d%zxq~~q+
z>C(R8b}1BpOJV`nf2XsYv5fno05)i(L%~t}{)Otq(l6j@R~0i~Y)Zr|XG$xaQ37i$
z0!=n=^hA7NTMRjY!qAsG2Wm4<&?}tsGh|NeX9p_=ZYbA|U!@aW=C<UeL&*au-W^`=
zxi6-cJ6FmlBT%4$N7^2fz)Nr4veT<dGmv#wQqaN+6r`4seiFtm*Ya(=g<a49<=#W(
zqFVq9w!f7v-Az5KT|XIx{vn2uNx!&C>>wxf?nau6gV^0t|EsHEg<Eo}ULdPFl@|5P
zsOaI!boC1$KT8zkL>!gH?6+H}*3VnM>1ndJIq5OJw9=2^KHNxwXWbT1E(>(!u~(pK
z1A1d2$}G5}cRt<n<~!iP6FXBNg%~54DvAbx^WDr_A#ZE~tg;^(v)&imlA>&gah#3o
zUE~VFMk;+xm7X+^{!8Bi^m0EHge2)Iu08NSxP0aDf24jY<|CJDzUuuBXA5+GerEin
z^=crmd$r+cqJ7={H1=f@fp*9m`nDL4nDI_8y(1BBR>H&di{{DyIfvuEs%zZ2#wbRv
zTkEbz9CDg)THN#wUpv(Ap~K+f73Bv(rh0WYTu|EF&uPaGbw~U4J~g~63!#ZCrhGii
zgqtFMCaReMv{wtueWWH_812NU;u{OGSYx?srmh{#v<6o8n+8|rB~!nncBp3God=<=
zy^zsy->ZVB{axc}QMgK{&T%en<Su$xXV}rqq@;}q^3P8f0o}=}d#U<XOc2I0`$lGV
zq8Kj2Z#3P^(yl$`Gc-!LW9n&4#0RQ24jc$8i~w;s`UgOAZ<DNkx&dKan_-l*5eJS=
zjtKS5Wjv0a$T?j{dEOG**)ljHZg2EKo(!Vqz9zQCtWzS_a+10#k}xregG~kAD7u`e
zD}hvKQ(8%c-hbShtP)-1WteYFC(N?`XQBt<1>N|J>FQ~dr`j(lXsJnA14~Y+ErR;m
zx&|P;zn5bIFeIZ8hY;o%<Y$LkM=gFwchr~EC&7X7Q-s&}CuZK0;814URqL<=hi^bL
z607}^N}3j<wZZ1JjY6(R<>^5V^gM=k&Dph)#36~GdQWa>X8WZ)9M12v%NEMqYoPcC
z%AG2~zu{IdnbWbi!Ch8Bir;zXxh>k=M(9dMaH$J2Y?&vG4pGXgWl$@wp0<0@(bt8r
z6`KV3Tkgb=){BIIxhhA@9XP^jGXxrB)0akk(q?w)R?{c$V@wAV`uZM0bi_4=EzFCH
zsDeyYv;F?+@ZMTkaL+vqiC9o#_B_i<HOsCiz!DOufWeMVxGGD30m6)yfmjm<aaK{B
zwODNTs{NbGOPDD)P0WK;um-y=ffF={XLVX(U>@aB&R6O*Tmh@lK>HIVjpdba%`y1h
zdR}Pa30fIcFK)WmOYiSWDmf9WN}~%9k&5+4J15%Ki_HR!Oqh0(UIo&i?7#98y!mAs
zsgw~)lwQSt*Giph8m?z-58ES|Eo>*yft|TXg;ia(Y&3`QPE9L<{n*eg{!n0)-Ue(j
zx%QL=Y7r8lL;{TqS=WjC4a#doKRk1mgZ5l31#j*lN~Z`z^QN@(N=+y@Gu<tB!<$h=
z=e+=&+oJ+`VCBFS<olTpJ&Oqz@k{Z2Os2S(i6@!3^2Z9hZuT>~{AS3x&EQ!J_DD5n
z3)|1S|K~)3O-KHhzE(bNxVHlv23Z*&=L52RS6N;7I-L>FM8#WzCn2bt^=q+x&MGoM
z7u`@}erFL&?OQ5bXClT?V-6RAiBSV2IxiI)e4$6KXJb5^aOQ>(m17GJxJ0Ow1d!$h
zhb-5au5I#UQb_^|m3JI!B6rrs=8Y>kzjR<7($KWzD_Bl~@MK6l#vLyiUGV_ZmoTNg
zP1bv^8+p02F5Xql&?XD#i~#WZ5aR&hYUrRwno9f{6-Gx$k<?7DtZ1*86sr}@+-T7b
zF<k^r3snzNXLc}oBHOS+ne=_oda34ZzH)h;+y2A556<dEU~%mcJj_uL@(f^*z27(f
zhAq>lq+5@z29A#Lw~EV`N7vRUc(NYuW+;zAsOT3h?8tC{5mf@iP%pA|U{AR^zFdR@
zKL$$r+mXb(3{ZDtxU7rIn9iY_e)XyxU<TB`M523E?knQ`Y@U5#nuJQ~g9y-VPpiEd
z;ACXe6{db%AGG#Yy@mZo2q^7~$-~^h6f7pgpcKL>=hiNip~8gKAE`=TY5|IAx7JGh
zH8f*8!3hk)aAK9CPEhv5<lu*a@<{&TK!9H=yWc(GTE!Uz>rvXT&M>__2)^!$dH68*
z4f?MA%ODeBe{S-Yh`%OQx=r|4bu{GTm_RAuPB&#zn$mX|>3eS9Hsv1e@b2TGDZ$g~
z4zZ7oM6oqjq&gu7&hsOn<`r>BSC#&eb%V2GtF7#6%oW;G!Y@}Kl=A+Gh0Z$t<3X8%
zlS*p$K?r^XA@k(mW+L`1*!hC?w>bu9mG%@9@6p@$*;}BzB=`MJnI{Obvr`fZu}DTE
z;Eh=zKqs>F=CZLGDujmP9U<3}tTAF4=G>^m+Xt`=Fli}F(!P#LU`Q!xq1!&lmPQY1
z9bb)4$HECwTA1DpmIt^^962Gnh1-qLfV6wpt#)m24Z@4mF1OqLIK=J~IQ8qxO7Ew4
z8GT6mt}<yq%Y)K36*2<iJwR1_DXmV+#{926p@?d)Gt%F{r!`aLEBqshkTl1fE{^>I
zH>j+*PVXf)Lb}8jMCb6`dvh6N6vhWBou1;P`=-+-TqgN=y8E)9L7&*{|K*H?UEj}O
zJJa`<62|F{c&X~hAl3aOlAxN=h6ZJ+lj`s9h>lRwqyC-1ar-^I+kajqg#kZ>!cPK-
zEeC{Hcy8Z7t2!_h(_D=TIm>kVRy{As*RL}1owHI0d4hW*nuFIw$p$1c;V;Cv0J@aD
z1`hYChLZ%i#b^Ye?9p!eeb{WvHjSYDY6ikH>H3oYWGU~ebs~~&0EeV#f0SCZMVI{U
zA}xFW7zs&*DcshH@c^evP-}*2V6Dl=+w3c2%n*5`aKfK3r#|x;_X4zI1GE?}W3%#o
zB*?BBjeE2W0YEaS?o|oy9$xd*FJ45DGwG4N@>LwJTSI{}TW{`m=Zmmtegu|wSQl%l
zRRTERCF=oCI0fQfN8)BP9{ffMs9tx@?e^-Uo0_MzSHG0w4LMJeLs%;&wMF01bA;lc
z{ez`$m=h_@tMy|46w<9rAjT)XFKNfJ`oyDO8yp7D*yM~^+d>fGl&|H8zOtggIF!L9
zhAl5B^vaR**P5fp1GeZl)J<OkN4X6XFk7G($E~&~py;p=wCFZ>@|K=X@?XHWYkruK
zy|kIw6Y!W}KO_r=?r!f3InqbWmSxvT!b~q2>E%4*g4>wZ0nGXY&EQW*mXkw5+l7wl
z4CXSaw!h1=w?OFhTT9qQLd31*OmfJ)=L5o($eR~0$;7UCP4sdBPL@MU&5e`3^=kw3
ztS^xvlDEUD*)Qv^*%B8B0Bu*MEr~MfOl%pbUDC-PC}UquR+k*nFUQ+WiWY-ia+E()
z<TcaGrfvY{u)3J37Qb%4!rdJMCoRRM|6cWT?;s#E=x=K1xuU31#w1VJTF5po+*L|I
zl1)Jk?qN`aR%Y-?4$#__=~JbQPUe4{0h9idS%BJ;WY`@vu2$M~=11P?rq`o-$|&D2
z4~oK;H^OhB^DpaTS7OdOt+EHt;ce;rpTM?(FoOxb#d?IGjb&{yurcPHSLL1pY+bd?
zLwO1A$*ccm_z7S89f!WgoXi{T6%;yZ9vfE6&%buzy=~k!%IB7^6o#j#0v4vVF99vC
zzFSEzu~Q@76}$dC1@)KxaWV@>YF|i$m>yW(v@%XFgF(K%;y_GDI`D{}^SV1Bck*l;
zL?VRolssTp&M|4n#a02s00~U&f4wuTg4|Q19v7rOL0J}*S@YkGro0C)+Frpcy<~jY
z$X-zyJDT_yaN(xP>oF`o#+jdmY+1KP(1^7oZt_$s95zZb<v^%nuP4&g?RI^&0OPG7
zfEB#Mad-Z26Ct-SsbEl7I}v16->Q<PE<%uCk{vfnXB^6Pyjmfs9*C?us`VK}Kvi(Q
zlb!EAzq}L>A?^N4!6YOHo?E6;PFRb4oZTLR+;N-2!l+Hix#I?6yyyCuE3Sie+ot>D
z?h6(HmWtu_GT-iyJIHQVijWULK%AW7yUxoKg1ovBa<V(bA!tiO9eQk}DHK}P6I-1i
zmMno|l;MJKF7DenAZ66}FDpq?l^#PV-8A+d&Zmwk!_)gj2QPKn=L69<Hg=E^3FDZu
z7qvSj_9Ni{I-o?F6=b9&K>NF?a%4y~eKNB_N*;lPN-d)r>fa%UWZ|p3)WYo#APRo<
z*)HA)7ZbKX9$@2v=br6~ce<<^g1D8I?h33WA+j`%%w4N<E<Amj1?sn{gX0f@>RXJ!
zV_W&hC^koe$jMad{!eW2*Rt(t#G9rVJdEK=qx~a}v?HM5%-$Mwte!s_M>A6e#V{lp
zh0d@hX?}^um6o86FS;$GUPVsmgY&DhoYy6A7Gb{O;z-ex+X?05a|z>WWE~hgY`gEF
zMl|Qr)<5i(RvM&no3S?I(Xy@83<$*syOi)kwTyIXWTCbqS5p~}UJ&!q+LcauZ%X5k
ze;t!8JkIH6;4`aDN#AXZHSI*{%!0Mne)j0rSF^H0qH%kr+tnoj5}Q;cbFiVUtjgL;
z93qgk_=4p-b0~)WmJJK<x~Ha<lBd7z2&4GJhEh1Vi@}tqKD8|Ko8_Z$au?sB6&2Bu
zl{6GqC*QJLeKeu{dsZ<=^SB}g|EE~wgWyY_NXLfdMkt|hqf!|BF!q=#3l)r+@uzaP
zGy$>;F7a0iME6b{{LgpCQ?D?Kl=#Vprp<Y8s@^$AOnZneQe#HZD*rR7_<OaF0ssf}
zuuHZZrcaebEF54dQHfKY2mr!n2#$utTH7eumJ|VF@O>g@u~gjTHAn0G+!xNcxNx2A
zj5}24mN|a?txSHah1L^trLpV1-#L%xCiT152yD8J@<r?4=dCM&c+nrX%-l$A$EwNK
zCHecca9N@Gh7#O5p<x)@*2Bo2i@<!c6vF2>f9W>XP_<T9P#BRvobs%}h}45&XuL9F
z5~5qx0nkB^`_J&V6`Z(@sR($!^1K9{+*=g2`Qcw}i-LW-UD0NLo_v8QbU)idiPrLA
zAcx6WEHrXrCjzEOZ%_!Xq6-t?0+rSs_S>F7F6~(@QctQVOJzY*ywrw}`A`v45><HI
zg$v2&dNLkQlZ5gZ<er95(BC7Dopq5hmc2ODig{|SC0DP&O>Up}@)JMZXqJ1Pgq~sp
z&m=|nJ)_8esPgEe%OM;AW$^-0Rypf&fks*v%hEhe0bh(e=SGmCaq*q9!|uTDpB24;
zd;SSD+-X#kekPQ}#(@$>)4w`wlhvx=Q)ZF3L;;nu9KG>i+54-*V@29~vHEJBvYMVt
z@l+np48(eI%rbTgHAWb%CEKZG^G;cbt=H0u$;4pnf<+E~mSS+wmVtV+&*v!$(E8XH
z!l|w@0R&kUjQHJ3gxP!1JR(^#bW}I>!a&3Z@_R_@_wB*&nED_jMpPrK^LY3*iS1+S
zUrYGd$2Y0qJ*W$5kenaiJ)lMI)iiam_T(ADzFO@QZ<`~F<H0>AZylkUiQlBKA$@tZ
zbEujObOLT@NOZQ_+9i!J7dLZpU{Oe}702W$__;cPuoA>!67}O309FpwAS1DYL366F
z_=?c_s-(K_<s?QD+O7EfXi6>tUN>RK=u<urj9fb<AS~rB%$^{eBr%l%`6IUcDO?ax
zCC0S{HMX+nC=igX+5)|cguu8T@<5Jv5I+A>uw_mqG6?qsY+F&t+wd?m!~*SkauAds
z#W*z#>mWqLf`gc)ftF=;twqFwqNQv^P|Ab<ofWn&khvF$CKVwKxqv|)EACd0&Kz9K
zMg%D}rruxEcJ0m{D~AX1iK8E1nri0~+RH+XQ{H=XXfK1rFwj?qxEAb=m1HL($hiC>
zy>X$dMPN55DF-ltAKz~Fs^#J3Cu!xBz=+5Kz}wDM=DF)mSawZB4UB69zNp?m&N2+C
zO~)HD${!fnJZn1L0=Cl+g<f-($kpggzNBPdb2$By=rZdC^uwpU5FP+hMs!KbB_zCc
zhK28F{(v*Aw(kk)@3PTjZcAyIv>F&qu1H{SW->jghozb`=9;*zBz4>zaZ729DuIwM
zb3Z@EPu=6j97%eA7%!(6UZA(L3vVv)`^loFu<|s!)V1?1r>SoRcAa!eE(7puOM_;c
zi_jvwv5ix#NQiZ1l=;Uoqe*0y|KTDlp^2*4s-!$pVGto+*s4YsM;}&Vm$(WR7aj@2
zY}gA_%0dX@F&3B~v7dF2q$ALd5{x9Vk~A}NmgtmsKS9%Cn+8lRSGE8H=1ddl#kra8
zqi)h|jEIg&XHqnx#jbPjnO%ALG3Ral@mF@YL_0LVkF916j3S$-or7grT$SQv+^Q_o
zyW4Le0EghUg|sjU4r+H1DGtOQR#w_4<oY-%KcwVJzn}XEPzy82sK;x^!jlyRQNk@$
zE2GNK<mJ6N(BXs?Ip?T|9$$xYt%z|Ps6PoXZ08+<dp<I;Z~t~1;l6ieP+_qHd+7_T
z`{Z0~XdIBh3RHLpS$Wl$m+`3VqAz8)^q^DVyW@|Y+WG|GxkqGJ6{^tfEn&@NY~P}r
zJq{}<cXLOE=F|HrUPRn;L5CQKt;7JnXfQ)Ir%NVpo$LIFNCsCnNv5eFa8p#6k|*+|
zsjc+n<2?oV^Q5uX%yGT9(vE}Lk2SSawK#-8g)K<d&r}zYVZ+QwX9~&PY1G1avfMog
zAzbZC8y2i4a{ho-qTxj;K(>Eg-(G}rOoDxeG0ZZ0q`kC0E&I-*3+Q!_cIva<(TfLy
z(<O`dJy(q3KANh*RFdXKOOuv$VX?e+eN3K~qXd+S9mwyam7zGo{WAJ8O8^2u{l5iF
zT>T1!&1pQW%Ev3XdA5(MVFOX0U`Rj?Xfp!hW~_A<KLV(ks9N?&n`crJX7{!WOO)$A
zaO1Jdd6-?CJ4JbPy5_(e#u&5cNuIUm%%STnNq-9pvY$t8yxjO)RUA!Y4Rh-1u&Z)+
z<tdlq$K;=4=EfDAWPLq>sE`cR@*X<z)8+OP{@=W9*tY0?A{!6&XQaQdqrZk7THEqC
zdGSY3WHQNQ>o1c6*(4@n!v6c3uE)aJ%y(pwo78eV4Qr4Lh-->4=q)WpX(&i}l^ISl
zBljik@ST}Q-eu-ovh|g8>73NmFE*a5NGH@^zdDgxN6sr?#xRqk@V!IP?g6eBA~TY#
zN{Bp{%OL{p4m-rT_Iag}rw^`z(s=`O1$pQ*8f3{^p%c)iA9<a&6-7h*Ft89OZ2~Vm
z`IzbFVkq5MIag02%(^grk%)7DGrx0W*HS-TcML{v#|4xj%PjjR3|#E*{l)XK*oAvO
z45M9ZA+p@UY(#3cRIb3p?}d2<=~<njDYCFY6zV10Km`$HHxVnARUJelzNb>6A8S_y
z8llw+j^-v-2GQ?J8}U12r>_M!g)RpA;n&<1MPus&eyr3)1ZWNKAkimIh`Tk(&rZqs
z;JhL}_9OXNQjUiL_pdl%drjVFPwQ8{nV?t9#-Bs}f<j_hMt%00<Jb5c#<&_ZBeFA9
z)oaRl_4IDvXiWNci*iK1zErsfB70t!p`^>EUHCVboL&>Mz1F31GnlH&fjjp@j#bKM
zXYvRTNf-f<EM*n}#f5k4s+ASEwg<b`9BMM>+sz)P=Pnlig(t8Kw($C&GxCt%Q6}x0
zWjg(f_K*j%O@knbVso@ykqn}n1{o1X^RzCP(Bv3dltto`lZ%T08Z-qL{)b_*!})8C
z*?JAmsn;e*1<PT_X3Co|H!I7sZ~{uV3UcYGM>Up-Ar$2o5qaznDlQsBkxiW0w@ad&
zo4+dmN2=0j%u(H6y(AL?HJuhgG}_+K1Zv2Rq=9A-j(6VMC2?>@L^^mv&1A3T+y}X<
zWpH&tJf;8v=cMZi*fspSmgO0achAiZB$2LuQEABcfR>~#vg5wGc)kxRz1}jb?Hy9t
zolrI(U0y~7ni-L>vSGZfWlxeX2~TIK&tn^n5?>iXzjpSXz*rjV?48~AuN5GLtbbhK
zn(loTu#<b8Cop@>(4emdcsL(tSkVB7eB-#clCO95;RQtK`~9Z)aG*=eK?)3Os)}o4
zp#Q$|Jk#zcImATC5<l`|P$_;60C$-sJb`et&ck$3R+0>_?jjyOp)jP0pHTGP1w8uw
zom&Iynvp<4)4+Bd3_NjXKriF*(*#2d3?(F+U_Hq!m&eHT@dIr_0KSp}y5|!)T-&CU
zaNR-{4>CL>3zEOL2EU8I=5B?Z=5UPOyUSTigTTk)vU8gME4;yIk~Tk&=uD>-3>gSI
zf@+)gk$&L_>}yhJSr*Hps+c}$>81V-So%Qy2X7iyk*N7wcQl{)B(@1vh?P!!)QreZ
z(#zQuYGYjJKWFK=gta?{vJJPT@d72Wj@h3qU4VC3u~E{qnl;V9g?$pVAf0a^0&O#k
zAK!y6tJz?gJI2<DMrR)tDNZ*gz3z#+>spXo$S4qt^Q;kxhVdP?H@cUB77eGO&(IF`
zPyBk~KyI#<o)xl-$}%<$BxWK7@URsl@B@G?xStsKY<nbl$B7*VaZyfeWqd>}^Cmn+
z&9BJ$jVcC)m{YTds-<ajOa$qeY-2`A;ql;4F}X6PFm7C;LV_oahj1tywdzV+QlZc6
zBR$CKz<+}>fCkeRwRLr<+H9m$(eEr!n_5|MNt146C7n<#v(>#YkM4ACXWAqVYreei
zQb1^6MCYQSapCU`36vq8A=*J26%N8=4|y=-p~XSsV(C2cA@I}7Nnm{aH4i@rX;6*p
zXO|$$aTni0p!1AUV^pFv!x3&CRtccY3TkM}%T>m)v`BAqf4}cqlQKi&(2b{c_4Kza
z<pbs+I>5I$rmd^IY?mt{DA@B^;c<Q>W}%<^8K^x;Ni~o#pj$VFd?7DXHwVsG;Javw
zpP1n8``*GO)TVcDzDDS$B1+-q{ogQnY7bRHdnG`KckCKIF0i`-?6RUxY5D&ox?9cD
zyc29BfHvm<6(s5*>p8`mrfa$|ILKe{KxIv{Bl7-j7#269=-sNE6`Zp1-zoL=+zg~T
zS|jAiwie(D={*U<F;Mow3gm=MSo<i(z-N?ZMj$T38+Y*-Bv{qYf7jZq8*=FbZ*^wS
zd$3a}rUAGy7kcR>T>8qE@`A6Hyd%>g#L5dyiSOq|L{l)9bdKlbhFn-o>O2#6POzI?
zFM9a3EpZru0|uAso^bd#pc?wC6Dh|wO9^#CSc4B^msh+jtZd|CbZ=hj2+WDzL1^Vg
zKSoR1+2SQPYLL-w07>UL+6P3te(dA#=U}DZl?;=2(jd_w79bqHh-%2IL0zom$g8Vk
zOsVt*aEp$^5s#{JDl2xrWpvNSr4yMp@Rj|YQ)J$1W_+WAOJ3+9z5^MBr>0fs+{R-t
zVNWrFd)!1Bv($q($<|bSJ6b)2*DuYx!4=(a*-V_@-!l_{oMw6iSb{ux*(%9Few|j<
zttML=nV}_F!`u~)qx&QQW1s;@wr0)WUjH&Ya{V)&vFDDZ|McrpJ)kLt2!UXq>9ihT
zCSGgJwIJpOw)U1YUqyiMz+Gu$3*?XpbuM>`_E?TQUVX48u7pF2_<z3QVTk2(=(J3P
zR_ricy;)>Iz6p6L*zE%$hk_AqE>Aqn{nj2BKL*Ze?C;_+StqqqAfR)Eqcp4`O{r@i
zpsuS~?LD4^2@%n*<Oo^>+>#)Wq!cHX8NMA%^&nPvOrI@?#wrO5913>sJ(|Kop4X3x
z^ZQVESES_7y)lD3rL*>)4CD?VYi$O&5N6SysemX+%^3u4%50&Tr6TI<L%RY@x&u5K
ze~N!Ax-`JtX;YO<i%~TPcXmS{o!O=RE(Zw6QO%>VSl>6=0g@O`rRA-4h8Gg@z;EAH
zUS76UCf^gU`z``CK$ar73+ubv?b)7-vKY0tN}-_J^9~Y&!X~#X1l=VX=mtb&5|@Bk
zd=2>dQ!Pds2x{n_Ixk+(H1O4iU~DO#)2khz;Y*w1w1Q_I5@Z;LeCT&DCM(U|Iu_3t
zEZ4aYf!!`+Ld(my9;lvFlD~#@Rf>QXjHXN4W7=;q;@2`AsLK;iScx*xHPk(!-~1Cd
zzYeop3r5alUoqrqnIH-(o$;mQgUX(xq}@mxN9DPHp+saL`{hb<UUwyGrQDA*u-R*G
zcLu5Ctex??Ssl7KhLZq=PDfhVjsZS0Pk(Xrp7{_I;zK(ob~lNEz*l9B8WO^x4hdvL
zK$^KBn`B_DtD%?V!`A~YpCf6pZFNU9_S!uz9j*IC`0fHnCGFbcwH!AuYzA^b9ceB|
z{@x3ECOt@w%d;`<_K2d%TrbR%e1-LPd)>*{bDN<d^!*j8WGE#vSs|WvS4n^S*J2IC
zgvSjk8kHDg*zibbUS1-_*nS>-Pb$+J7-!xAAeo^Pc3DkOw@rU2>5AU#>$Vfctsc8E
z1E}SXwkSWCX`N~FbZ_TA$M-A0Gw-YwT051^;^SEJN1^h+ngtT|ZU=AK@O3&)>lz~y
zBb-I1sYe7MmYF4x@0H4hr}iUC;TZ_PLp(A;4Yc!l_tEC2Nemz>HWPBx_Z35zl@1{T
zU;+;@J>yVd*J<YT@QOX&A89vzR={y(A9}KM7#|*#D_>X?{Zc4CYv^@&{<-N&Psg_s
z0d9WHKDY$S9h-@rhpPBByUOyb5JgB$sY?8m%frH|Xl{cTdGlKBVJchrCT2DzTl;rI
z(<JP!G)wKymjUikQ)Wc@7`WM@9IJ5secAFf3k1-)`;`FW(2!^;0wl$}Umnj=4v#=y
z9pw{3{fp<C`9f75>98u?Z>}iizwVRU^&kZfqYCW7Wh-GO8@-iKQFnz5p!QL<I1Zac
zepomqD*jzfxoc4vuH%8q(=3|`S8U2elQXMh&jc;3A*sE90wb{PX1ffi;%K=RVkmNK
zjAx`+vr6RRl_E`)EmCY$`kaAKjnD@OOk%B}+4f{G-Qy-O+x^RhS$fa;A)wG{c$C(!
z|D79)Ii=v5zfDdvh@cR7B4}NzmM`UN6D8C1!2W5P@rF%5VHmAWq~fH^{k_&G^Ku~>
zsqk#DQ8dw>7k0{?yOPQCf%&I@_JGaXmvI$S&pqM7d6^|0p~rE*L1sOVe0))lhJ~qk
zx%S@hGOdar=BnJ5$dj;#Cq^%Prp*XDgS(q1=U{uajFjLVpfRCakWVDeyqI40TSa}c
zMF|)0iw84Hzi<I;$3-~R+GB<?0w#0+eKZzen$Fgf+Pkudd%D;EX>^QDZiuFvE&idN
zoDV;^9T&Tw&vd}}2}XBH9)>LJ$WL%69sPG~XDGED9K-X;mb|p{_LRsbbY4T^sII=C
zU)}=|<Ak6eM&vhOhgz8SN7svT?^p)^TU_k;myO3hM@$VToR$08vF+y&#q9q{$pUgX
znaXYfCgs6Q9Xw_tU2v5@YFB!q$Jcjzv_|92nnGqU`(0rmA7O2!7fQwEw?#gIv!91B
zXWbLMf!}&nYgF~b_`9FDJu85k{KxSKd}q9BFC}l_5xy`cez=3taDgL+vL3BF^f>QO
zn;5lK)5~I*jS|}OrY9NjdoF!^g)soqufjjmrvQY*!SNWT4xG9mF%>=4AC+NNI}E2z
z?Z=g*{OA5Z#AHR3Waq;fuHiNnBlKucZMPO9Uv#Z*-{I{M(F78vuK6gVXa$!Xi!qM-
zmqTYJv#jwD6%NskF}K`>e(ph%5wt0kMqFJ{yG*VM^U&*qUsF8hnPHuQP(q*}_8)o@
zkb+||{qqUij|Ns*L`0ggem#!VttYj>L>{&q4Q&EX6tkyP%J>N(lpTB$$=<-af0RsC
z+L6=U>eagzEo2L4VGHcGm_INa|9ApRf74~5LjBGMBmNT@$;g|dnYs9#2wK*B&Im`m
zrICd@3;<hy<4?kHi&I{r-r1+n*&Q;ct9$u@98FbMl+l6Niso;y$?oCe8ic0FDr@X-
z8ZB{1dRv)<tDM}=?2jV+tys0a=O~BM)PeXZCdqJ9FOjrsdi7)pih(y_2^hmjO|9$>
zQM4gP@G~smQ-!4>+tq%ib&y0q|Hy)+RQTIOT3Z=8uuLg|H0W}75SM^E5)kIFh;c1q
ze&OJWD4xZOp<5mj7dYdQFr#JkOV|H59V_u9RqH$@&-$o{`$}7NOi94TKxoQi$pk57
zyg17_U$}5Fk-7bqPw<&O#$B-AHZ+N=(kARDCUJgOU6wAHcubm#9Rqq3>_hPyBAzGw
zPEtaEUpoC4ch@rVG_QXz%NuPh>xSa5G(i#9B;6C~le&7)tumOV6e^4hcbtam?Nk`~
z7}^xs*exGOFL%HbmJ$2a7(;jfM9H{46JnYMx22zrh^?^|k=c#P^qcqnaI`Bh;@xe4
zRHZH$LF`cMUzOs_{_Ai&)$vpiDP-G?eaEnh<F=pU58I~7{nEbj_dhX>CKPVM_+2*~
z+6lkD!bLCb;}(VcRYqbn(ilziqN4RHVgW&C(WauYZGPH2ID?|vs{U7FuwZJEd;ZAq
z|Cw!iMX7#7flCS!_-kMcSMP$)FYO{6XTwbNyMHM<uol;qk=n-f@0~XS)jjxN!7Pu+
zj5!8vZNo^nb8n=>(+*YF`7jdcuJ&*NHFM~gCg-g^WUGZgFFd<NSw_2Kv3i!{-Xzf=
z@!Ru>bS~Tsji+Wdn!61c!|1$Bi=}X@X<n%|$h#0_ho+C`3v*Ry0i!K)kD%f9eJ0pw
z;HFkrN)(xg%XZg6-{i=dv3}8EM=aidSH_(oP0x)5Rw`v<R%>(h*1Juc`M0(KRUEZ-
zWwjdDe)^uIr-47d(6(+blX-Gi(QT)2I^1{COp}7uy0&loUa#8+YJIAd8;4fb{m+PW
zA{)(1Nb3@%ucF%oRq~YOLk_J|hhjuveH32|b16LRUnwu{b^qC3f1aJ?EwS7hPFw7!
z1y)3KL;E}gsm`?*?)Q8|GT;0eibEoXpp6YW5C4x2_S!dS+-=dW%nfsKTp!T2_`{&2
zt)$1iwvCvQxhuZsyQIkZu|`dLQ}WE=N;ZyAX1mcwLV|2xOhY*)J>gMyryMBqg6$K{
zk_&>o=;8cdvxV`0NuhuQgwT<b1;-9Yk_~wS<<7I_E{Y_pNjA4cFBw-;<V-%Cu)9AE
z#WQg6e(~kvL~H~JZuwnsm|4H!Wrv&vnM_T~Q~0XHf0|pQ=bx+kQkH^_bSiR^2ERhK
zux#|w>HD5Nqek%XB^qVr-!OrzwNoHCB}xs$CbS>$+8{!e(r@?XI%;);8ya}XHvM1q
zgNN<Xd-Py(8;ADLA3cZUUpYe*Hktc1R8_y&#1d>TrYU8(kU9m%G-n&x%1XpuNzr(L
z3lIJw00(y8!mHHY3|io3;;$a0KLRT3M5>SiQO<U{<lN_&7#PZCI+e6>zG8M?Yk=gZ
zy;{@^Mf3vLO*bTjDbnVQg2c_g*T~B=+~J5v`|{j(W|9k@#K+hTn3$evLQ1ynOnBKq
z{y41p8thv1zMiV7f|46?lf1I*9v$Te^F>d1I3zK)IJ0^;i(DY0@ildfswVK_zQ91J
za<RYAYz!^cl_9A3*Gd`xaao{LU86qwy3oeI?WO@AZc_82048%{O)TvOD&j`|LWF&=
zV7(%457}`70}F6Zj4vSs-Yr^9xCay-1dSPPZ5H3xiDbvc=iqr+@uq=l>twty!i69w
ze2H)-mII}J2`KYHdg6ie$!)L#l?HQ=Nk}tHM{AP|>+C`|xZ-PtBWT5*G&{n?rpt-8
zp?~G_5+xK~?M#3zk;EoFYoo^k820mgq<kecF}LQ;`F;uGeY8T>5)jf9-C~{E8zb6L
zvq<d{w|)2e6$^3V@!di_58jctv+&9dKl-*!Uwf43veqCKyDji7VYoW7(pDU>^iHbz
zJ1&Xn*xLgBX0?YQA(QT$Y+{=Ns9$9HwX63);r+bXmguc@T8fAS%`-&hGB%ZHbI1Z6
z65Onv;P16y>-9fgTaR0MZ_`$bPr0TQL}K)m?bN-<$JDTP3#KFiNxn!c5*f37Zs5EE
zAN;3YF9#HSc{Qgl6)J5e2Y_Oa?JYlZalha5F@5EO&IBCN@Oi-qz^|UAp3`^Q0cg@q
zAbp44M)zB9<#q@y$5tfCPfMF-uNW)A$fZFDp_)KeqjOT4v$6`Rv;O4^4P<(d3u*K-
zc2?=Ew-6H?LW2gpCPs|CGh~?_qLsjpU(t5UQVnzF!K4C7Y0{T2p!6yP9l(u5dea!c
zE39r?ny?1dsn*&<oItLMvxImV-1&Yyl?Z7hqlP-#acDB!nlmk$L=wMaxt|gSL8t1S
z5z|B@<PIAX0G2y16UBT4(q?Qj0FwduCU$x}`W!1gBUXIrGjjSMP`Sa_LYI+T4o1h$
z01bD;_IF)kTN;Gg#0;a^M^z_rE9ck{z@Np0IU$Ai({1FK-OwP~gzzq=@MjJ#U(!q+
zH#U5#WPP#e0dqc6*>4zINzxts4o8>WQjPjnmT$QEtZJWB-d|{Bzos0Q%bj~}mLmZ1
zr8A?KYTqhu8Xxl!3%Y}aD=}_StEHPoR<|0(kb@614|-Rg2x)8M^1FT<S4*`-6Zs&w
zbMaIb@5EuDZo*XxvT!YLJ;G)QKJt|91tf9QbPoBEaOY#?)3{VBINPDo7v<tStGm6O
z1I4EyTzA8vklZTeRUkG*40Du!3pugS|Mi*oo&Wc{=va_ThPX5@uU;jn+<TGV%nF~t
zVVriIu7z>4K<K0lCX~?uRH8&?>FVy7pPLKIFU+>y>+@L5rGSVoWBXciMTK%btfhSy
z)8GM?S7=qo8Q)O&ae8SE)mqTyKgR+vRsq={^M_;Q_KA69j$fL2!2d@}xT$i!5TSHw
z%(-5;p`*L+#|{=88XHqu<FOKHjPNkjn>1_j@~^*Wn2!1aF*y}GyCj<cG`0Yg`w?H9
zb|HY1LiXBxz%QN;nV$kwjVk;2n9u`QH{oGUQXxiKQO*c~4fcmtwVk@K89+Xrhp&^Y
zA9!TwWt+Oi@L|;sL|LW27KJjv8R!Hkvq_sfh{1ap6;jhESMgs6ii`aNs{6o;Bxca<
zO-mUksTxOtaFp|AFJT(Z9m0`E)5UnR<V7g)&+1(THXEiZuA|EEYO_+>jP4WzEWh2r
z$^v9J0Gdr>n9I0O6I9dv)TiYjuaJh?4yfB!2@BBsU4({wtkTz8gqsKk-xbN?UeDCH
zx&QcLBD@Bn&^9KaTDh^D5_aF~-<cPN$II!AI6onadYCFq*1ZxVR}-b6t8`k^aj0+(
z=KJC|5Rxtb1`#WqbDLE1$tM0QCn=Vc6qu06rVX*4T&7=9-IAV4Dg36bMh&XQ8UO2x
zP3;H(*1@hdZeoMgYdLATk1vF79KeEmxDCHigfkhGN($xeY*=wksnaFG?S$Epa$Ge?
zB3~TDUjvs$J}q+${rl*Qy7;nDCmyg(1U^PFQSBz@sE9<{M31o=az7gi<(x-(8eN14
zTu`Hb2bFUzOVeORtcCslbGdJVeDoE<`t%B8?^=LNRHXhx=f2o-5}`x%MKa`pkKt)G
zi2_NH3hTGwR&qoc(DE##??0rAC4!=g#AJ4ag;8QNHIed`&0=rn(=UM5YW%~`id6h+
zC(k@RKiK*i{rFFLyN{QmBq!TK46hZydA;+Bz_e|MR9nIl?8-q2U;Q0E)e~k8k5DBK
zpQHAOUyjA>F|t?*mi}8afv)yDCdW#wBUS$JPfqWUH=cAlEzt3{9OgnG%8Hf2+eWJ-
zQtn^WQ_WS9JEaA7aR0vA)~$Yv`6QWUoci@gyF&s5(Jt$9ld6%@w7<Mfxce@bW!YQV
zcegf8ov+s2nR1k>p3BxX6i^(Xz%7^hhi~(Lu`qAnJKUxW7*hk?^2(;pUR+z;pnzK5
zG~D}}|8$Yi7^CvCdo7t_{)v*~*+0G!6PU$-;5ajZ08=>P>uBK~L&@yIOoi|awo-;6
zm_7d^XKD&y<KT;z{&!z)+60~kc(dlxnLCPaP<2P^t!l{}ZCUP>?ggX`3&>%K6@^-C
z@QVc>?qay?5g@XZ?m_NWnY>N+ut}LF>`_>=<9RxX9R8OtDME|2Q3;h6aMLw(Yl-_v
zRM?1AkaL!0Etu0Ky1b1pfW1D76)J6D_mGevgKE`#=%+*xLf*v2wBm3cGwkbux?nF-
zaY%-0QspmOS7i^6A{*qFg8&j-^sL6=VgiNfj1$;|KS2Mv24X(6jAS02-T0)L?pdyL
zlurGwTOHv=z5}O$SRTL^X`Yo|Q4GQ56~^DCV0~I1&MUOK2hIxNH$i;tnnpphtP3^m
zH}M0@R|<-Oh-99%<ML&{n-w!Ls#m_qc`xJ=zPifDzr(C<o}Ae1s~rkigPXz_quDWY
z?(l|Iw0>UBA_7ouuI=a&av|c=^mR3ag^KdWQb-A$3?=StYhOPh#h>ktnGhpD5r}e~
ziO$B6G3wqQE>a+`*`~&U8xlqkW@KdnSX;w_4W|@=b?aub#;L%oW<p<&S=!0R0$mm=
z#t@&df$>(<7yjGu`#Ny7NBhu|Mgh7CfQPE`0;y4iJ}&XJV-Az>(P1#T;4nFjYaoGB
z^M+M=jfbxlLZVv(Od8xyx1BQ06o#YH5h6GVFf&=9u#7|2fNOdwT?CA!(6_{QKn*{u
zU%3#c$qI9vdUEhlgX7>!z(^+yu$jxT`VK|11GJI<f(DLmJKi5&!ZJgj6PEE?F%O5w
z+8jB<NE~BSL&*rWu1wy7PSE~PgMI~Cj5<lM;seI~nWrBWZ#%M6WHrTVw+@i2rK_F|
zGy{VmO8$PP<T6Xz8mAc>k|nN2W;-EF8`3%r_koqbgGH@I8bFr3|IyyKC24MT?WadG
za0V3Sw{zWxkp<R}KLX-24mBEwX|0SHWt>ia+i4&%mvAn5FF$Cszbr1U5$bH+N{80z
z-TdU`7Hmwm1m#0fyab-g<<LjcSC6$s>C}=n!em6ONgFyrq_xIXcl-ySc16}NEk=Vw
zqEPzCqoGD(aIC`83zs=hHYX)xvo?+A_c}RK`#b45%I=T+<@?gZp!;!kV_DX#sP734
z?LL1I>~$Ly@&syp{MNxeAfPZ*h(w)mHr-;r19McH_>_wexR_Li>({jOnk#?g7E1+~
z9j@^guFV?+z_In+Kn(`N5>FUZPsF%v*TZDB><sC_Mj_qnobBNUJ76!PkprDOp39Xm
zi(>k36jpGp9V_4(q3_bXD&=e$tFqk6S$Q}Q6&yBT)EW9)tZFm&_-nu{rVN55zYGhc
zI*L2#aEI9cQ;a4PZy=9W%*kNRIzS45-fn|~(M^YxFK^}FjU!w;3c~0dt!mBxragD>
zTMylqzkB4}%^b5>oY7Si8crKsKt9M`WrSCBNbmF@cEkihBuuIsgP-+6lvJ3S7}Kvc
z*Wv@(3Arxd7b;H?KNGNCGi`rMs(DMzru40&%84Oh7}ih0r$5W7w@H!mOb+>W)B@2M
zN_hu$#$YENnC|lzhnfm;!SgTnYQ`i6HRzJXO&px+M@B(4az-MuQP5l99Z%b*@8XC6
z<U<Szx4)?}4Ta?w*4JOa7>^N30*(P6ao2+;#8amnB}yADLZePROxk#(SxM@M=)~lL
zUx~Y3sd)CrpLI~}Y6&UR(&{rcZOoL&-K0!e6B??-m`*&819kM$BGX<{(u5Ofj@Qim
zN5V*TS{+26Bg3iz$KGK(DR~tn!~A)rn2aFEEfO+JfJnj82-+I(sQ98U!!+u%4%-Gq
z8?Vkq8Xs~ZnaJXa&gQQ^*xl|ZV--Qtt2=U%IrsDU#<mZ%nQ*9V=+BRHx^N1{6#H>;
z)ahWyf@=yC27bO}m*iTmFQtkXS{5_NCxcs?EnNC{)VE6mLW+(sV`Zb#?D!8%U;?=n
zimywKLSPoQqAY*#^zu1&i*gtAh))75z}_`t#m6qP_sJ1H=>!IS?K`jda3x&`@EQu6
zeM4zwLRBCI6-MJu?h3y8!Jc1stH%}cI9BF06-7R2!UH%caT&<U1m84NMoG7{*Xn|S
z8HgEsx1qH}u-a8QRPaSMoxYsS;^j*rg9jr9hj7Ln>TT$C1Al!N(v^P7@nukEpL&CO
z7v;;oqb1*u%!49*w(_=~E=|*1b4$SfT3z4+q$nVULBlPM?u$d8`w}C%#6d}In;Zt%
z>6@TaW6DrQg$FU0zBhE`Ofyc9e4YJt>wkBIL?u?-@$o|0FXrY0fYeS~BN_b}IPOzk
zJ(AJ5(<O{Vrq(9xpgEyz-%FVi)3uS+zYq^A(>QQ2LBMpVs*7;319CCAm>F0+vwtU+
z7daJ>GoA09M(2ELBovYrShzO=ZH9a^ZfoG9dcJ5T>rQ#1OK5nu6Lay5d7W_x2fH^#
zdOd$8j%@W?y9o-l+*t-XFL4tb5B*bR^gywQ9(lF3fZMdiqV+0&YurU=kOfnZ@?(H<
zJoz=12HO!PtAX&8P)QLb{C~<qm9$v7jX$1q5yFy9?z~&67qQL<FNy<+ueP33P3)Lg
zP*MB(YR8cWR}2oKQzsinm>eJgGQa1VC)@>EWl`jA<<>?WpRa9B8`*gnAk`)mRcOTf
z^fSiJ*7|l0+1keL&e*Hdp4WmtlJ;kwW#-`TPKWkZzh4@x<WNvTny#)}^vP#r`>qYr
zZh9dI9*k584w8K0v_G~>flx`nYU}?bg&NC_;#R2v%l7EjVBrsB!B&$#&F)^6-Pqcd
zt5W!u<}eU6jtq_j=!58ntQvvG!QsA2o1NDx3Qo>|O+o{^_%ytU>Qv-1J-)&NNNlF)
z$bebS<M8bpCu~$;E6}K*tMN2!mn)^vQcX}LW=!=E4GwuX())1f>aE7^HFv5cN*^>`
zIm6ZdHa210<~-59tFoenc2gl%t%DcH57xkH(e2YC+u}%GS`Zl?{{EL)#7mrWA%mJ8
zol8~%K8j8j-#r+jXm){iJjDsKy3`LOO9wHGcOck4O=;~QQ~6$bO68b+oa(g&A`V#^
zGwXdXg7jn@VqQE3vDFPP;-n_!mSt2rv=dv2ux_DN1|Ef`j!b32(ngh@nuJA_!e$BG
zGD$x4ZpejjG!HyGiC}Sc6d=gvsJfy+69mK*a!z35qfW|U3CNe%t@K>u@-~Y~5t>n7
z01q!l_M}FYz0ddK0OyJ6{)z_<aX}Pec_MpS$A`4v=-W%`B^hU<9qZBpp4Vr?E&r=u
z=o$N8<ywc_V!D{tK0hj9KtMXJ_x_by&6uZ<`4a|5Q5>uD*NhVI>Ph_D`~ud}^h!{^
zeeK`OvZ1?UpdqQ{*)}YYApw#{o&<dCH+0ps7k_SETd?UTRA;aY3@y1)i+B$l`1iWd
z>#=t2EfP!U2E`{}P4$;mk$Vo;W`OKQz!=YqN!K&JT|33<>MPU$`UT6qHdkhEWXXUG
z@5Z)<xiLv<ZMvi9{~%ED<c$rDE9b&yNmgR#n(TmI>Wazi)5?m>z0%|@TeI@q8Op($
zGmz+drkCi?GEB|9?oMnY+D^Nv_#hCmJWKW^g+r#G;|!k@!&94oC2sA+%Y6=Aa(45|
zTo<_)Oa`Pu`(bClT1AW7t&g>f(5ypp-hbnWgSg9Bxx1mL&SHhad{_mIEmlvmSEyk;
zBhr6l8n6GNndG>NKA>TYP>N&I9EB00mW9EE(~G6JdQ-^$dP90t7Z)_cA9ximlb{JC
z9G)vuUvY=m9^yOa3Q>igv=iq>m!9fH>51+@LI_25H#J^F5%jf#k$z8Cb5*OVKcK=b
zhiP(0UsqcNx7>SU#s5*scE*hmHP6eQqtOcI0BGu=@x77KoEoxtiNqp89%R5htID>U
zt?FN3OGlX@Y-!0(mh`+zQQMq)N{I(hq<)xo@XK8;NrAY(&N{7we=?NtpFRc@zrijj
zK3wVcqu22l9$_d1{(nR<uG!mDx2OMkda2^k{K~oKnt#3D0IJ?}xn`<*T^MqhkT96R
zF4RRx2s`>t>bS~!ABboim)yr37|^OM|C=a&THfv{6DUT;f6_`&rnXb~kxV=fp2(IW
zc%ClxXzz&moG_wQY=h7(bBr<(<TUJy2`Rm7Ss_Raucm2@Vjg{X|4U5m)bAJgmBvx;
z^N4IZjeGC50&@gh&(=5Co0KMPhuXlMp9(47OKwfEidw;gF`67meU}j@dbHjAj60;x
z;8dj-=ZZ_$naVVLU6Kx)c&Lt`IsA-pgUWD<bRSOEuw7!+T|NC=2jOfQpa1WN+%GeG
zWtI-hr0@lJv|qjXBmz0cmu7=W3~>8&L7Z3U2}|h1`u-QoQ-hpfWU%V6^oO+0h|HYc
zyU0T$#0hQIKAyjMgu*VwO)Z}IZDu1s)z+BS-cL8M-p+TaUwCJsEdV0SCR?}=dGNvy
zrlcQ;3(<d+S4S7;NKROlbeQZ+Dd9#LYHQ@A$gkZ<oWqW^j<AD>XZEgbu95#|`djP(
zi|&j&6S@*DqW-HfRSG|<%)0&I+cQ-?vAZ=+CDt2cBI<?T#>daXBpv{asJCeV;1mBg
z$P(Icxa#S$4WeAh@a^+OsMOp1QYeP?PO{A37{6pu;y7Co#AIi#qH!T;q~OnV2lJap
zJj5uu#q18T$+dhLGjQn3e-CSeak5RSk8aVywJ!c74HV!4*XQYB_qJUqq;-pL-EoN(
z&@TnXy3|LdBP{pNS9c8GT*OIu2(=@4dNQP<kH3IOCrzw(P=iwGcsrM5EGa$$S-Q+|
ziiy#@%)>yiQzrJnQ1b6#!6e|XC~=Q%Z53Khm-mYXZOhWQv|XKXu1uhuNVeGXIu7@U
zwJUA^x<5N_lgHmz{SWkPK)}*=x{gyP!wSo~wTZdgS98$~6%U~BXN=G!7k(onwbWDx
z$1tsELd{!D;Frxfo$f<6-cdAFM2?3(Vj;K>=^-5*T-J1`l!z>r$<eG<HzqdA)d~fZ
zXprJ~IsNCBs9!a}!=BT1UWR6}tcmZigtKuEb%{jSp$%8OBK>{Y1%*?084YI0UEVVF
zZuh&LtEf+Eq?4tfttaVwseHWb<Z)6pvxzq7!ix-p=}~wFg+bYDPqi-knZ=S6V^RA|
z9gF*!XU^yoa%LSO9+Up`Q0KKLm;{OM4EAz;N%!rQVp!$73F0Ax97m4Qq-Z0vYqcru
z(Xp(W9@4)BK~tJsq3t$p$~OX5m-3OmSBC|ZSB?&E`GqUW=R)VsPK?WC%RvzlH6wL`
zJibY^ojTI*keouLGfS}?hzE9cXaBZ$UBPqTW`9%dvn-JoY5P~Oryg~XeD<H03yC-N
z7nQ}OG&FX6_LNJ33sUEF(v6Xe4$-3cnbnF$XV*N9u!kKYVLNr+!ylPE&7USF`~(bx
zZ~MK+;n%(Z-xk<ZpFwiHE{i5;&!b@?$}h^cbTp0IgBPVHB$bte4=Nyp1s(?ONwxd;
z8b?9Ei}sXbI{KOLHYi9(eT2w@P(x^$GoWgBK@&(zAiXQ$&|!w3scO31{lK;1=*IRy
zBzE~7#qkezFq}}X81nR(+HKq=a`7+n6F|}sDBFHh%Iy~Y`KWs4l-PDE!cbiOP8<x&
z?mZHs8tLT-KOTj;(Iyjd8EOCnCj*~V=91#o4VV<AhEA$%O|NLhtNm-Yr>qUAC*>#K
zwYDOM*{fD6Cor(apiKV<?N&N3!M1TOumSIOEWMavCGQry@Ln$j(b~CLhxE(+O=)UE
zBlhmy6JwbUmY6!yLkRqm5ttPF3i)ht9jK8dTUAa=qRC3Zv;{}2!OzN#W^^*}6EN}B
zC9?cby-)zxOKb+WhET_dH7=iE1wQS}3>8Y$P#3^|sWvmDHM4aNgk(0jLIxuoi80Dd
z83}P9a4VxYFDV5@w<5%#ML3pRAi#4H7FeCzYQ4`$g_Q`z6|SNj3niXmKu?&G4HPu1
z;Y{!{Ru&|d@cFpOkrYh#>NX9NrULq~qQJJ^ok4^P2|*5~HYJQ}Nh};Z{FvV|R41JH
ze2H{`oyVi-sR1eI*c4fL+PUchjtjWgmdy<qE;FTUeywBO_nuc|1z_dlGM2)Xm0noa
z&!xd`R2G|PuI4GEG61+P6Q0Y=zsl?<;_Q}06$^Kr{4gBFd1J+7Gq>qhB8@Lwf_o9(
zdysV^s8UgljeSS%zjJl_el`3?c+({XZHc>{MS-GKA><HkUu(W2JH9Jopz^N9o9Y|`
z3xHAlsboA7VJ4pXYdH^3jnG4YtU?0~<?8#;(61a?^6KG+XHK(g&No(2s@m41Ziy&e
z!y3#(KQH}oX<Cn<G_ii)Pmr1KC&B5`ka)5DivB=it+lfs%gS(m(C1}btgvy$?yom8
zgK{m2L#`W_1CsYH&OJ!@$$!kld2Z4n?qnGVt0Nh({?5hd7yn7$<)-}bWtIame7F_U
zNyE@$_INCK5rjZF4#2QaZ2yXgScS6c+~Mies{w6z`T!$+SqM#7rPpJd?}{P4Bd)&{
zoXUSRsAslEr*^{dEO3mWX{g(7>5qQ$B|{~VPa=huwTb)APFjnny3QPEHb`QcYNGOf
zFQ<vUg9sZBOFG*4pR;jnV`*D2BIu@Hb-@0p(##h$?6)a%9B5@lHai|i_e9G0WUw&F
zI+VMQ0NI7H@YD8%sWkiGL0_j}-pPSsPxLfp9fgBREMCULT{1oX8I-9d*J0f2)B-jd
zk7E2t7v$&hJC;V?Mj3!d?j}#j5O3{*q;kOxhxlm62s%^gdcJx<DK_3LW@Vf?_rI~g
z`j2g^pPMw*!PK5UkVz~!3>eO~C8f^PR~$QA0sEHNhhBP<lLagKQJB!?d_x{}<ZJ>)
z*RJ`6;rTSu()?Qf0@RPxual!A8wT7F4-;*miYC#JEiW$i{n5_Q6eML0GTlF?eegPu
z9)P!AMJW=`K0#+7fxObI2BH#b_-FLkoe$JybSe5jztW{+8JUP{mRyvt&}rdiMrUA5
zLV<;aL+D&|ix)}0818i$G3a)h<3iB-<KLtwHg6|Ge7a5Ovm0THbd8L<808SV1OJ<-
z6P&3cA1E5O?ilZ@*Zj0Wwu##s&E7QXx58yd7iJYp3wp6&qatsKDD|+*22veQ{qgGQ
zt?`iI*lc)v-_x1Ymthhp{R_Z65CA+x%)30@8Q8?!l$<Udc$(rTroxG2nMt=ND3k_c
zA2LQP4Y|uUV|2_`odY}TNb@gi93)Ob4=*V_TapeSqVUfbwMxE?u{jsf)Gz*&iC9C4
z-hbb$G?Ly5EZN&0iHh;B4oM7rwM|^6HPPkCao9=!e153GAr9`QRfuGpxirIzo8Xz0
zqr6!eqTc8wr{+WO$hMqI3=uDtrtI4JX$=3+CSu)`zrV+r=8RP0nRR|IxTk+~oZev_
ze<$>OWUm38t{;4({EYWCkGFgN0q_oqTQS-nG&}P%!itwlQ%(oh07(Mbn+<+<!y<AW
z9rClG1A3go<R}QhjUfhZ*t+IzzY+}1&dAQOKky9TWH3Fs<-D}wwZ0|2+Unah@ij%$
z<4+ZXlFQ^*#!tJhP<M<=f8TNk^kK|w7-SGYQH1@&1LYCxGVyOmR{*#4+)Bhju$sb*
zsz@qkE;i@XP5sd9PTt@3WL7F#5@iA?MdGeYSbumQf=`TYXd(4cBKD?itrM6(U4D)&
z?X|W<4(|P3IWF#9XH){V48en6-O6uO0;%~rEexu|tScMV9u1g@dOGB?03$OC;hJig
z3J@NXT(2}J+*Wg$WD?5Xo)qn{Q|R(jgbaHu*{76x^_V%-k_97k!85S3PYouA8Y>h|
zctoJ0YuNN$EF5R9r}^k$b76??K)LhCONKfAAlL^3jBLH&?^K3QlBH#ZtPi{RW*ky>
zr`5k2Z3aP6%}k7)6T{J`K&U>z&pdF|IA|6nfFD095S<lZ^<DrJNXm(G4MmJJ7~%Qd
zBA6~|=vAU8IA^q1%wZbk7S)H$r4tD)@BUwd&Q=LiDnGBlMVUoskVM%(ayYIB4L;U)
z{Szf5klbK~#;K|>_g_c|bSl-A3^)v2FMH<)Tm3U9!bTr#vwOB#VH-4k$YrgIbyddN
zXH`!mm@&h+eH!*0W(VnYY8i<2v?<CLtMZlp4UL!AyDa>QSqmQ`ZP-XVfpBCBcbq=g
zZ?n><Z1HT@lc^&$B|;I7>&3wAl|qtPCMFW58<@8TA(9Uy?BOxuk@A(;<vThrkDm;;
ze?iz3N6@++>F(0}IU>VSxx{g;O&%yap>I9X5F2e%&lygkU+J9173`I^^Vz@DhavS>
z`pdb+qj#WL7AM49H~1XswwCj<bMb&EpO+|NbrbX~AFTMFDqSq^5r$t!cuJgo*r*>`
zv-T7A0%Eg@G9=aM$tgz6EIDRTP0U_c5(J!h4pZAv-Rf_PwmtO%EWTSSF^65y-dW}k
z!oZBd;m)hIlxQZK=Vs@D9!eX)vtN>nH#{&st*5NQlk?J=9XxAy@n^-@2oR{SLzzz)
z^^Cw=6Tz6TsP9+^h6Q0DfgWS76iVYtkD_>E0~MlW#nujlT5W%>NRs!iIjwj8T;FRi
z>IC8V65>CkaZNR{Ft(YkUGG9EzP&<~dsk?&?=e5)PkWVVsC!G)|H-SMd`;n_0<kHc
z{_9luzbvM~Q#uDm7>iKBD^y&PWVCG(tdI*WdmK_Nqzrbokk_-WR?a7QDS$uf5HtPN
z>B+NyC6BL|4m7p73dPzv=AL!vu6OOr_#ZBFb1J1}HWonY2KkYQPsEm-`@V<IWDw=d
zR9lZ1A0z@zNLdPL<Or8qnSNAg^TC&?DMhR&?O|~|SQGFa<P1zNo}@LZz~G#yPw|qn
zetrqjJZ7PM^w+yndW%(2(<#e>x8R6q@+|jX4*Z;>h*sE)$Hx*CJ5uF^#xYsp*(~rQ
zwZM+xbss5Z)XKs+xa=%M*3++q<Y@L@9y_dh=TJ4ScN8v(*qBl#OCxCk?0;wu@P6nR
zR>w~;&&GV)y^SHE<P?ojsfEYZXD^u<a@DnHd=cS$ndKA~AV1xTyoL1b=m>nMF)iMn
z@d@9ZEu%VF4^}1b6YmlJ2gYq+W8vxy{@2@5*cwu3-k)k<NOI0BRi`zFDenu6u(&WX
zJTxPW2|T1cV*>KJN=$#(`ykcYAS+mfqp7K=x?2~??>;+51Yu5V^HOa&MrU0Ie^o7d
zsO6gA0Kj6>23;$EFt>4eU1J32%oFi7GO`Z&3|6+Ax%YY7fB}Bp`(7m|n!Xfl>8>N<
z;|*?L`3tcl<Z!VT;U16?Z?xFiSoYyYRz-e0U*1Nu7k~f$sBl@I^~60RLm_H?@2X6%
zbZ4iGdQNTO)}w@u#78wdX)Hu9@^2odZwv9KV)4TD&vd*~g7C{m@JLrOnIkFL()(+g
z69j60bmSU7sO8{e7w$@(cPa#@)uxsniMn203?B%;XuRYDMe@uwIZ?ZcHD0kxjgX4H
z3&-@wIN()K*6+rKdA!BVRs|JTCNQ67gnh{l7z2$yNs->W3N@`py#TAZ!p!20Ya+@=
z1CkcfwXcb}B_jtWvj9=RTyzIZh~w3%Y9zjWqBTCBlm_BA@9m^EqN+Xy1B<$<?Zye^
zi*|MvlIrpgyC-arhP3%5|KME8&YTmD!}d(^8in$^*UC|TJ9Tftb4lEg%X`1*_qu$~
z>AC`6^lC^cN?KnC`OCQDor@%4IIu{)pmjc9Y~b<d49u`CM~TIG#`|{{ISmiBoXxY~
zg;SF*30XxdRB4)w<MxmVwmnlx<=7Joq%!Vsk5z=Emg!kKC-_`}Tst>9L_x0dN*vHH
zvR}V?bRZWUo{hni_p=zYeru8-!}4a3bH?B^U)s33d+^ITl7SME-yi-Fd&y8NV3?R1
zN&5#>;Cs5ycl`jUR01Pb{zOrH>DWmss#0LCKd+T_J6dfcJG#e*KDNLeq|76lMiL6%
z4tx*--fq<K5$MntybPeuTH#>nwpnDZfTQ+_TNq;l)>;rC=!3v!!03SO)$5cFo8{bM
z43#F7ECG3l(lY9~<YA?FJfTM_2^YCfeYHBaR4*MgDm3<Q!9Kh+RF<7?-L&&RBmI4H
zF}?nESSSmvtE{7M5{7FEvX0?R=*bEB4$8VFH&g}DK0rJ+Y20wgu^prdf8bM(HW}_z
z6NF@QtzejRV6Zi$jMhs>`KjzIhddB^8K%#K6Gfu0P!Hb;YTbIF=imF=+K^|%qR@4m
zz&yOuX%V7MlJ?$UhkanCdi8r$g3|yY3(0YSfDm?5<$t|g2t*&)9?QF0Wp82J+@f<s
za?zZ;j$8UJ1%?9=Dn6OKU<~!WECyLgEC?DKum7kKxKgJ8RKnYiJIhH9M7A7Po3OY>
zO>n3w+N9zGArfww!3p+u?wo~S#2oneJ|*6o%@8&c*xKG%LtEcNIcysAk7`zE!ZH02
zd7Oz5_I;zanJ6d^%N2Uj?@@t;F6e{mSewx51MFqoDLDs~t!i+^sfp}+S=I9;GpkJT
zSOoU$JUZ;4$+c5mPC659p7wossbN}j*8Fdm4vJr32YH}VDuABoM*ZIV^9j(&9@@#X
z&6V0VpC-SRx7(}QARo0ix2~iynCh#>vmZ+*CFgFXD)wF2Yt({}VXY;IN2}h$wj9Rj
zUM~4BaMDLUX`6G!F5ha2o7^}FO;Va6Mfgl<(!uKv-Dqd7clFY+WYpX37IMBOL9XL&
z-=YU7gY-<X$fSC-E0F@f3?!#Z0+yRuj~E^uq$)1*u3rO3wXD^7%$yAwYLX^w!|!R;
z@3c}}Jl_p=7#yy{@MgVKW8e0*yC0hkl|nuzOl=H2T#g#oSbMv#F@`YAp2QVd*<?&`
zpYwEC?B^xG>8zWs^4Nn}6K14;a0J=<cd4%t!$)_nl0>+c{43|Ey3D4s9+<BZza2W|
zWVP>keaMzFyjeW*I=7tM;8_HKg<IF_$|TT8N(?pB<<aJYnk$>g;U^Ydy!6gl4`O1O
zYL2zzR2o4JWGCQ=U^3Zp#}SfszHbMfTs2MBxnCW1<J(v;#Elq&;RwI65nY0vP?Gn<
z;<y@g8omm^azkNK-i#x1UbG1bx9fdg0_{fJ>!}3n@KEL>T;1|Kwvf|Y0e7|Pkl6RK
ziH(!TTt`uZN{Fi(er23X<)I6ytvXFFMvr*sMK1)1oGB~ymx^H>R}zF%$0}@YcFxx}
z?1L$plZ3@MVLA+L;}5oFL5l9ER8fpnwhTsbR<Ci{;+~f8U5z~*m-k#N>?v-1k(%2f
z-JBV^%EBUKC5z`0Y+`2E!Fao4VlyPZp^LSQxKpMj!vJDVVSD|9mYW;WHjr7V&NW&X
za2EqDgc}jA?0Nujjt63}v2ag4G|#bWdo!%YdkFiV<S6hGKyZfP)Gs&)7!}gsWjFz#
zYd<5)UARa*XNbO}z(p~t<U#qBGk8{N&^OxW2(JIJb7WchG{HjVl*Cux=}~&G)n4Dj
zbV=BzJ-!jyttbj1CPEJikzN=%$tZd-un@(~7_wGGVHCv3H!9F3hhBL1BY^xT0hh5-
z$uGL^0R!A2?D~tSHG8mjgK-kC2VQNOa(u9wTh4C+S?6Dmyc8+pZ)^aiwm)qJ7Fe;n
z3t)T)t98nb+B;%c58*JUMVIZfwi)$wM*9_`9@Ok*s~B?NvOq3bt{>X|%OC9$f<uN>
z^TZh83|1Vcrkh;c*_<g&VX3G*;JlfFHmq=h<rF8J%Z$vV^23RN(&1bk4zD{Xtwl(i
zzltSdn4r>`K1qdWRcD#=drHdcN(&!`-%rPlnlU`38PPuT4NEWrQvv3xP)hRPyOgp%
z68w5glh5qS_yaatd>x+)O;1xUtfpzO8X$k!YJi}XB`C16tQ%}V9mD%aLX7r|Ukle-
zR6P+rV~&{4c&2mA-&PFfIi=11DMO<B^&tPG$Br~MeQTpvsFRQTz|F$@GkVil<wFb1
zyR%nHr8A)7U4Y7t8`J3V$tM?+SM%9$Og|9h2B?RfiEld+p$w;7Bzv0LrSV`zi|ol7
zdzH1e5dqzlr8u_@G(mO+6#PITf+S!jfd;kzIv)$sw&?7x2Pj;f99E9@Rb(!O=>U?U
zXL3cqAU@t2N%x~}{Ha}CdU%N(p*%Co6FJ{^tPI!6uvAosE%qyY@DLemr{1A$6lq2G
ztY3as7(x>TOKZKLgl*q;!(Gh+Vo1MpA0Q$p^QzGmg(RB2*hIArm}WPHfqsAW*pKpv
zth#aAx%!Z@l{dz%0*J7PhgoErrmv;-pGh=HJfqkC{_rX<dj)!_O_45NQ^rl$q>iF=
zjOzv8Fh@mztuIGWsbcB7G7GMH`)adSR9@?IO>HU_)^Oj)l{yd^HXYJ_0+tgn5@4#@
z55uY8c0DT}V#wHF)83AaM#)UWAcD2%XGm(#)04D%asM4H6?JgJaPloLBC$6E0ao6x
z*T6fGX-X7N!~T-C0b!1_fL4OmDAMG<>M0vXWgBiPH45&Xtfc*+AIH!S_nZL%53BYM
zy^MNbIx5Jap@Lj;AZAfYVeIogfGlF;_2B0TA@%ORmsJrZ_J4J~GT)2|UUrK_?`A*W
zDwCmOa`LJ-QK+Y)WP=abx@B%x;FUqyeTw$00zFe?jVf;w*NAZ?u`jlgOl@u=`K7D~
zZ%f-w0RKM#z$h6UnBv2Sgyz3Kx!^@f*Lb`xCc-iLfvUu+X*6lo$}f?y9us=lYsj{x
zw2JRq!R)wBrAE(zALJugE4kOrRuhT8cI|mO#X%7fbjv^nL7*dJ>B#Q`>dNM_S8kWq
zQ9zX1wDHb-b_$miNy@sZDDX6jUX0{qw{N4IphzA%6rJOo>)%VdaeF(k9^%wM^X-qF
zj0(umP3_5XnZryifAh%un(n$AJ5f(TpJ~bF8PyzH=vC&_89!Q4E#z5>e3cpx)9Y@U
zxRDNRnNvpe&2^8@#<4hmU3MUoq8*0m`hXl3;vWf2LdCjdw_s=hQ23^rXk%y@F%KMQ
z7VF|GO7t0ZDr_KLd1?xJG|nSDJs`b%&_~U6EJo-C3MSzONgD|+-*UnrhIu$8S|@?u
zcrC|W99Qn(?n_4*D+7vZTMM%a)ftqry{Z&7`X}F{EL{S7iYYFC;8tE%-c|AU7(_pR
zR!o-fHo<<b-zoZg>E%KTiuYL|U}XY#)?9T7>g`}_glvkD7C`3D)_N+F!N-za)L}c_
zwIazw!4kTq#OXiFVoH&i6r296R?!Qs<Wi$t9}O4+oecu0V2?mq(=8)@|6++~=*x!F
z#4E(vnW^qpvd%cw1S^0MW}R=#Zx%#jYJ%=cB9q1woI(7p3Wn*Q*FPOR2W4MTRy-``
zXBw+Gy?xJ%&Ymf(mhT#-yxnbbn&C2|f+pGv(?KwidzkqJ?JyRTs%ryERJyQz0Yd!R
zcEcpw8Y)Q#h~21uDzhV1L^W2Mz9Wgw?L3L>!~Ss+;iX(qM2yBof#BKRs!HDh)jT>K
zlY6D&j$m}(nvPzzJtlt29M=!uzsZ_J9w0Q)C@$#;(@+-jZ-8iX=EAOlyPZ7K&@(E~
z(<~kZ{!~Al_WEw8GL8qQ=+gLl2rD}iuyp(So|8oKqcp-cxGE`10;F(V$M5?#_sMC*
z-w|FNvma0K1CB=i_^h>Nh~QSp&#8o9SvN{gPt;X`hjToH41mSR@~B-|eSr(B|3W`k
zr_U-to^ZkAq53o4NrC0AW^G?y2xEL%lEQx$YD7z8>~g3if~iznarv1|Z_M)!!<LM+
z>ZLASm10H&%jpp+#EqIQ9qnIjrQSL+?|NSqj-~U5UNKKW9Bsv+#m`9DUJT1Fb*QFy
z3(jRko6_?EB`2f-evxU7+IK^fDboXJ<b4z&Ui3klJZ+(C(f*#=q0Q><@Iod%A)10(
z`d7${71O;q#cUBJ*l_3qi-?Glzv(cOHu_gEZJkRtZ?J%<$j&FSN0DHplXGhRyv)QV
z2%nh5KW}B!lcxjtvp$#<9gVlE-|5#?=qW^=zf-u{cgdY0W5#Yp2q*3R{g^kGembAZ
z1|!A;UBU?5>__@MZ?%4vp&8QIi3xL2*5NUev1f?%H`nroa{iant2ZX4L@NRm!pZkh
ztE8<ApiGT)c|lU)#*k+G*9)jcv#cwCjJaK;$`W*5j=-lU!ByEh<ng6d@HOjZ)bA|s
zGD~cts*uut3@j=S{J7@Q?vGu?zy{X^k9A+um!%uZh&$J~_#P-LC9E8&02^cUb2$!=
z|F35K@6uTjqpuR#HH9pk66`X8MC>iWsJK5|9+|yKd4}3d_^~_%uBBcjT{j&^8v&eY
zEsZBEp9(L<4t_JZdi8^*flkl1%ssyEfk8^qITsLSDctB~%az!@Td@IKrpDU0S6Yb0
z)|2<u+ehYtX~(Dw3ebd<+fV=Ck%%PEo6fb0(rS{V(6t*-7HpXi&eLQ*S$gaO<jI85
zZCw}gUHe%datvoV8}@maB{YL-x$cSJ(Sry3F)U2yo2Q|z1im!xG+~UOW6+Yhf=dFa
zCap*?<T|Ij06Q}>Z<-3n`2f!RQC?&?EL<UrJRh2KMJ#77U9i_OZdsZ}Cvl)gn|s0a
z90e^*;f{N2G(4v~6;(gln6v$)Dfi6@krN%@+(Z4y@WcB*uN%KqD{_(Wc6YV>ev&uR
zR}b=i`hS=ojJQ>zhg{<0Voh)qIj3<`)JZD@JIhudt5X34QpLzr^+m->!&pq9l68vS
z$)nA>TRkfW%}o+~V>S$BaIAUs%4EV3CgYV+)euqtHEcWumh!-i=A2h=?q6?0cF0R0
zz;*$=Sw)Qu8$Dzxs@3;Z3L7rd`JAKePFbJ_jIOfvCShKvxS*<{dDq%8_tIAP8}B+7
z(N8uRaWHBtz1(yKJ8+ve)@=2PDLyh0hSFjguX%36>1QLIF9P?XBqJ>gE*!{B{_~>U
zZvsX!IkCGZa8?=`B8pO5W#!b@1Xl-{eX6cuGp%bVueJK@hs{`Wm?AU}3(~|)-@*mj
z58nG1C5=&}vtTIOOCXi;-C?7K>7P6#Y&lB~L3<QCr&Yzy+E7*(aNTYTB=iEMHRk8P
zYf>sz5Z;=Z8<1lKZ^Ocw+6-ZNNuV3T)r#-#sAhopA(~uU6%f~KL?Bm8RQ#O$4iR)j
zP4$I=M<4+AuGVDOv>|C}zJ8fOmXpud2<wvObdmnUCz7+VD-8V^uqHjCL{L!3ji~L`
zxk`OB^voeYhHt$xB0gTWEH1b$_sjxibBNM9SPI*>d>ShIIE>ihEGtfJ9?{qpQ#D{f
zA4&BL2qW<J$lhCJ9@-KBK|>zgvX^DG@;~Ph_uhRBnJ3_Stlbc`Fm9Q}hzB@7tu3<V
z;~@-1lwjoqw{-wPudJV>QCc%nMO?8x$?G+p{(#IW>h<2ptSyYSS3PV5`sSxHVH%p$
zAr(Q;M7j@;G^X&3&m*Elza|u)jOlXJE%_5VfkfG75*gL!C;$6JNcPD(N1MuAjliG=
zq}!ofxB~-6)wj626RtWsEUa;%wk?HH=TYg?#I&)IxWXV>lL(WQp;<aD%?Qzv+kN%q
zppYP|L1`3q^fB-maI(vv<-CC$EVX#UX0#69cHa=nsJ-dLp;eQdl~=qvL=~dl?1DnZ
z+m=a%T6Mnoi|a8)O8n?zy#G*b0H_b_eT4cZu;NXIJR&vcZ9dReY!l%lca=#uh0n(J
zYV1g_5eG_M$$+efi2Rp#Kk_CE!NayBnlCU0unwkYCG3D)lXb9>cd~m~*1PMC5ZUVo
z$E#w$^apx4@FMx2I&M|Ay|h}x34VufHEyW|K=W41$)i4gE~Pr&XYi%oGCPs*e}kbw
z?6gJ{mCj%W08H&ZV{M6AKESgrj5Q~*9Y>Fa>VHI3<p4^{MJZ{s-$<ozK<zm8;eJ9J
zD3A9fz4;~}BU5)Rv%^=eOzgf%zDfpKuVpz)it>!=>Q)g_7&JkvK~bTpP`uboyUSFN
zMJVqJOf3Q}Q=&ras87s{PGft%&+=eo<HhX~HZ~Bf{gDVl0B{WmyGB!n97igz?cv;H
zL+IP|&`*}B{rp%_pAngf6i6zNq5)S9sdpzMbwvBcmt29LY%<f4@(xXLl4CzB1(QZ&
zd_hb0p?^8E`7U*CPx&@EAaKKB280KwzW`;xR|eb!B(cSa2R$Y{PHH-i@CcIKb=__e
z)u}rsL5(0`oAYj4ZdfG6M$&yNK=0)pBgEs4-Bm1SHdsbsw;Z?YQ*wc|^Z62F+*|Xj
z9qR&7J|8CE9;Bo&5^w&Vk{VAXEBBKviLRu%mz?6FN|~Oo%qk26HCe^z1sE5&4SCI}
z13I*H5Y;%Wuq47kZ%fblu>CG=;AF?Vc#T|4Yrn%+KR!ukU59;PiT;@HodK#sV<5od
z0s-d7is8li!-SO%(oJbQY4aP}iFYd+f7mtwGNPf1BS;e@3IGR&qHYIKRiP>JNx5?e
zxM4|2mv_Bm8dZwSDQMcR!{-XP*K~?GM$1z&I<(S8_(n@D&eN_=3R;WV)+z}n^{zUA
z{VnRE)h6>P_KOxKFxZ`?*_a)NcbyUD^>+u~64Wir*Gk2(R6Hr2JN<z%Y1ClBP7Tvj
zsT3HP9HR5?cvp+z{NY7u40hG=E`yIPjLnT9ihDp73?iTY9Fu@7IS5ZA_9ZT!{bQfQ
zQID|TZya<D@D-WUw-VLDZ%KM%CgOC)9O6tyaQMN!H}+Y!UY$57AZR`6{N@s|nfe*z
zC2owQ8=I@b^wgaky4iGG20bbNH$!te84b|(rNU)gOqq7M@@)w%Q3oTye97OJB~wa3
zFPRDhq>}+%ddL?*AE_W-ts#0{2iYli;DH<ycBta86u_?@OxVBV`Z1(#D`GD}Rn%Y|
zXO;EG;@0MBume@@CP&2Z%^>+x5EOTYxslfsJF>IR%rryTln<sMR?;kEZ6ufoDaLON
zJ;mjm4>7(vZHa$6dK-X5LNdc&LwcAdN_<25@6~rFPD;_>&JpwOZ;Th_VR4sNT6i(Q
zD!Kb8<5PrEinq5pW!u|`$zAb(X$3bSVPFoU<6I2&;)dY?pz>G<df;?4!QB<MG?-$n
zrCc>I-vKAO<z`+Cz>!3RtzEm0&Ew;OVz3*(;TU{xd`dpL8-@0WjgDo!yE__FE8D`q
z1vWe_SAjEKfV=2vnpy+b4F@U%jGe~&Y_9TmwgxP0Ncwx5S<Hx@6mjD)?ib!($1Yg3
z1ehJN&TA8?wi_-&O2BjGEUeKdhZUGUU=s%NeO!~qC~Ppex_(-r;c&X&omOM{m5GZ8
zL^_#$)8EjplUF_5RNJSP%nfyQ%U}hLkH{Ws4(Eb|v4485-ku7Ln#fTOvip)gqbDX}
z;`!&`qf*C<dq}st2r#%H^w!A`s8rjTp2WAa%thqpRXz3qHj=_tFQ34)wBN=XIMHOR
zq!3m0yEr|&8lIhnl2eo2H!|{tk<~sV1WAczol^C2Eg+R&n%R>=9m0Ks+tyP=a){hN
zY*nhpz8Wnkz&xz^66<xt_hl;<8+JE!i}LnD7jdsD?y3NdsCL#%R5xJj4NN>3i7JsA
zbc82+wope0+Mtw_g<~rR@%x^2fN0?f9`>$lpE}79H^2Xe)j!@CLkWzjkSZWa?n(TP
z3&xh0=<5kqu@}cOP#+$p{t)&ZGeF<AKp-bEuJY4#x_{6aT^m<cTjG=Vb3l-DWRhwQ
zcAgS!$jRx^H$%h3azCfvwqT`DB<SkYxpi?^&&TI{QE!jmnrl+{YSy@7Z&lB$m}bzE
z$;lQD$lbv6C}d-n(O&VfK*Vy~DdeGx_6s*ncU#I&Eh`_Dym$$QEuK4xoPX5`2FH{V
zObm?Cn|BZs05^L}59q;iKwNtWMbEA;vFx3HQcQ+VCLk8g6v2k?y`ue$$tImpTP6{Q
z^atqpI%oxK2wkbKSb`1nzfsEyg5{KHp$P<}02PoE(GSBnLLn2Z9<fl%owJA_nMqvc
zFTDUL*2MJyM*f97Pohf`Lxwb{m40`sk+1iFKC!?&_?cLX<LiNX7!u%{;kY-!G3z%?
zfxdk%ZmZy71Us<A!fJ6B#mv?#^ZZHAym0ouASJe7W|(Ramc0!Ja~6h7(SOWil0+I>
zeeFh6*lV)f_ltK58J=evlsmt>>?Rxtq8qwmK8z^0pMz&#=h!@YxX%dcU=xkQzQ~}x
zZvnex*DkPCQKp<(oi3&44qh`09%-HW9)_z)ZsN(u<A6bELGAER;YGt33_Aw)TfK#j
zmo08nl8-O!S&*m~-vpoUcnLi#=^T+4O#F2i0>>IYrn0)9!(z_9^Un>NQ{13OGo@z!
zf&JZ@fV>lZuB)>5?qmfsMw|vf?V1U>?dYjo8R6L8@UVR#_Q<nB?mK8^O8-`%rn}-g
zfr`Z4Wvo?*yem6-UG0nPru1zgE4Npt!Ii8V7(s5aem?gZBG8MNJn|5sLuTJqSO*@^
z@6~y2QEB}Fl@8+z?2$@YqX2=iKy_3G**EDl%T?3?_~GJ!BlG*j9OYbm3~76RNrr}=
zcR6(h^kQA%!3ziXZZjfRZG*cOsa-xL!SSW(z0B`qV>8OyP@T(WqY(_q6yR=<=)F@(
z4;3|170h3D8Nuh@)uSc_mEFmb`G6-iBDjU~tO#@_47LYz3dV1nTu|#!QIzd($PV}2
zm?EE)G3gc#dtvGw*iS|ZEHRuc=$nGSt`#j<O*E)RxnvMz_ldD6PMo3UV-KN-RjZAM
zyorfH)qfqopS#+sBBLYHYKi3>pE`*x>0dLl=l36oG4<9s^~>qo!Brahsw7`E5A?9%
z1)~vKvozx}?v}Sr?aRx|3@Z<Lf><5BSDoWw9XF#`_z-Dx)ae}_p)!6ytVB}-wCUld
z+bqBq3X_$2QkM-9H0Us2U9r|w0ggD16gzXp1gtMpb|(po$}A6g<_F05buw!b&-UFl
zKH=mRV=R#)Yg0v}l^-jvo`BqcI%V%pBmKPRLlt4u6<o;1=QKDH&zx{{P3dEox7#TI
zGe3Hu>cV~R?V4i=65BMf5H7SUCkc}Wzh4{+)Js<8;k4|hN!It_IbsoL6>&ms;3KcQ
zVCkAveXFbmWFAfHD;!kR#hu2igWC?Z1heI&?FwtrA<1bIiKU!t<SIgc`ls$cF3?aW
zfiYDrqKelblipnf)|!FO{USeY>)3?C5XotDwx{W)G_X~j*zT;#52aonWaqsd4o#&H
zGA#gp2k#W3T>g+81wde=XUs-vc5{l<W@KNITbL6bR}6@@rQD;nh?_QqN)XXefsNEJ
zEI!;>CCH7;{Y}j*eUCdnu@h3OcI%0#^H)B#=M~6sO{f`0=ZBr_)tm6TQLiv_^KY?d
z@w1y4wItN}Bpe3_nPiPWFNsB;gTx&40m8=T1nQ0heFfR!2Ghv|sE~>?Ua(WkK3E@V
z2zQ@@q@W6f@4*}2LUanGp((t<Kq53XGMEXXctax7y*Fb4j9UZ<7S#2(n3MZZRB0=5
zi}L;(-f8P2fXVNOM@{uj5*KG%31Mo<Gi{n5Nm&#6%ANQ!f<~iUULsw)ac+mwHvwZ1
zY?ADUWnVUNuuF6|F3ywEMOCOdWNufVi5B@!9e(llHl9sRH+R=SpgvUDi=Bi-qYm~;
zRRmINPUVB4ADh3)2asfP&EC5_P*@f`Ju%Aj@faw9XVUa>^*DAvI1j~V-2=7klHyc~
zsVdQYWfP;~E1~^L{OB&FC7I;1%Z7(_3;r%?B9Cy{&cxqv1PjE$nDqL&nC2M*#j>?r
z!2oGgdxC|cLB$Kj&Tg52VCP2qFRv8oPwrwFR?OEFnYs?sC^;c^3Z8@wCiActImqem
z`RV27KH%dPo6O@yF6+QY{e4|4vpL1jUBc?e34ag>$70aPgCKZsraYgxOrm^eabA-1
z3G^DvC%AM;S)3Eavz*w(ED0=5O>oj%V6bZS&NY6lI)i6l`66?hu9;Cl%BN3c)9D4)
zE+F}@?SMSmn}cv0e-)42{Qe4`ulJi=m9_IFrpr*tQF7GZ9mh0TQwLs8Jw-7ok|z3W
z>{Z~#E^TaeY*qr_Y4po7w~+-DlI_^g5z_NnBt2<8D}MQ^Hlfbtkeem4jXp-m;;7sU
z7ZXFEN-P?9BnqJ!*JI2vywFX<0+z(^!PYEX+^u9E@x~n5G$Jh8evb2Uc;2eRH*ZtC
zL4=B?8tEh&7V{?;B1Sa>8X?B&i87^LkQ~Z5og97QQcRU%Wl#`Y20z@K%1#X9m}Y3u
z{uLed&lG5|;>^(<d>5#o2Wu)phyr^3;B*WXaJ+uk;8pYHi`9{&7kElTA`4md<)71&
z+C<GAd>>Yte*tc5u7oO@3*3X!HhSD9CS&z%@$=AtKK{!Xt+PyWbjo1cxZgDLdXz)z
zcp{DV+4+!8S#IdeGxe6*GdHR^Tjlk|fF9?i=fmZnC`~Cip=>+FpfrfxD^fDK#Xf{g
zq<GT!+~&37mJoQwQiL9;+uOytUW7AKQeT-SQ}crM0WMK$1N(dz-rI=-*Oude8S@I%
z#UY2bG)+%S`K{k=ZYp*tFqe*}57FRq2fU<=!oECqzMStadsL!ug+1NWC&sr=di41|
z;Jfa#d+Rr@=O@AyhRz_ihDjKcWcD>(VMFxGWFd=U#L|lxLF`Nhy-1q=hFJR9Nx?f%
z5W~-2vAJDt0cDB>l6kW8c+;{bv@{2tKt@ALlt<Bd>bL_8v0F)?F;9q^l{A2p!t@QI
z1)BOIVxGrZxrbx|;>5b0>lB1gifu-;z9jC2Ig2I3KpFC-S9r=gcnoI9D+0J4UtMd@
zM)I1v<vjng0W`#!MzmkED(BFOKJ*H9g1S1ZgLfaNw7=N-i{)gtQHY<!cW*Y0qGp%M
zZV(OzE5PqgX99q3rQXJ2d=tI`H)9}oZR%;^rBuhTzoS*gH=_Nxp>6vyJ9B!pw|@4G
z_u}#d9&m2!W{+RSNZhg84J_6wJ}g)goy=?DGx-{CQH+;#;;oJOcYp<*LzI)DuhXL#
z#9aunHbY8D0vb<*+U^|c=r>%Rfd?e+hD6>8kYaoqH_FBML@joJ*tyFPb}GKl5Zpj9
zL}GyCE^ECaJGNiPu|*Gve1FXcW!An#R>75mcyGB7?WB~)xV!b8e+s&YZMaXY_Q8h7
z0zhtY)YE8$Z9m+aT2s8fW}jhRTJEh@{AH{n_hW_$sKf+t9Ra?bx)%=O)V*Ewswyc-
zQHR*C@qobpfV<^()dyV>f?-Pj!nPW$tndjhqL7{lntKPe09FZpzNh-5g-3_$t5!W}
za+G>tFZ)_9D$+kRkYVw=b@u>Gmj*Q6r27h?ZNxb{S}g0w*fhnqESQK2v~VzyUN6%k
zeh+dUt)*ig;VxxI`n4$Zb7UyaCtE0+5UV<@a7Jp7(1RoBV^A_Qm2cIIgc4Q}3F@zf
zNgaW!_--zXHLxyC9`xVrgB7;CXcy*639e{O_V1(((Zcf^RvC&v`ZZ!ZOCyu0A}VUS
zbfyomif6#twNCR9`n2uHP`L&L|8S>H<c_X>q1nkS_~XeJ{36y`aRj-cd3MS`vKvDb
zFI;TPYR5{Umh*ScKo5exTTwa5l>A;<R3b6EEW-hRMAzJ80p%i-9{SB?;}_>sB-YeS
z{n^0fgQC`>EXwj(LLQr=DSvuR>BqXDZur~KXL52TlGeIXSs=f-%1VX40JPF^`ehB-
zPtp49pi!h+<OwI62$tu`q%!U34$3u*>?~!>r%2(4{~rpHS%Z7-2~w0S1Fdf7qR%qZ
z?ko^Yn!_QRR34RvA0;|`UPYnpr}{tX{2Z_RKQb7A&AH6>HJ(HNGW(@1fxP<APMFyM
zTj4jI4ov{d-<;_NUn)1vdf^B3xB_CP^J#n&KDH>Wj<pTd%gszofwN-%L!pql-P^IQ
zSr!rd*GEp$HP4W<b9{RImZ8)#;zTnJ?1f*xxmt6t)S?IO_Fsa#oq*>L@F*E<=F5?U
z2HSK;FLX4W8M>E%fv@8+yVRi6VVVkA1{P5;LvxH|ExU{VSAS?Yu5|KvFOHdHTSY`H
ztpOq75ORh#KRCINjX_P*L$)C9gATxT0y>Gi#b)tiYz>vK;uE2C&=tG6+(|P;YJDRC
zo`$LvfmrQ@tc#1CDDH8rzA%6eqt6)ypa!NK$F(x2PfWU35TmG8*MN0m_}WM=TLb^J
zIse$SicuFG^cf|ycpomY_9S)BjRGx?hNzUZPA1k8dM#z&D^@|#sVo(XYYqMnykBl}
zD6~Xaka*ANOP?}99F^G@4F|R3Ah|_1HYu5tUn9(^-W+#*)Jzh0)Q%pdIl4^$==4^K
z)@+qZK1KwBkz;SZV1;c!cl&Y+>e-@n(}Pv**=@_*85Ao{(>{b`c_%S@hd|01(;N>w
zQTs;^Yo))b^y9rbyfsOI8LW&`@O=sWO@Ax6@VOhS@-mJgFq@;JE8wX4@mWqsZxL;9
zR&ZbkO`pNdu|QynaL7qH3SMHI#U3;f%5)H?y;q(4QcP}49lR?e(2KY-=Xo0DsQsdX
zo;8ZtD566)1Op45{*O<iQyL0{@k&h&>y)&?$Q47V6b!4fj~2_9$p@0qh1=CP`;>p>
zDKZlr*<T5Lg6lEyuwQe(uND<tUCyqRs$qEa@t(PaJ6cM-g|mYw-UmeWyMr#`Zpf#>
z#_bUTBH=I1MTI)HF5Q@g)Dd~~OeY_6X1kSiQp3;%YQ>`Y>Mhse*GG?b!#de3JVdu~
zR}&fL$fYgpWlmx<n@NsZVh`v|9vL#;1k-0Wz}LgJ2{QfIe!>-2l~hBm?$YW{eMjaw
zgHxf3H#I4qZIs=2uhN&==S>rEIjQZ8N)NzEQSNXp?_H_{03m#WG&0#3?<0F4IH^j5
zN$u}AnSl(xRbReE%vH2sh)9{e7nN$j7t=#1F;-^aldFtofGs8bw=4!}cbwLe8!eu*
zfV9tGB&dCF=VV^cFFExL&vN))Zf-WL)B(~dHY~9cF7F6bW4DCWvOk1Q|Hr5hI(B4w
zE(FG*N%H80Wr)T_J{PUiOz@PRD6f20_mX|KqOcR{1%@+aXXSl%Bb!%joByRZTbE=8
zIXgLpkle>->)eELDMS<PL$`cZChA(YFW!KH(U1<BNXqt2fro<(k>LN)eQw-~zjBT?
zu@eJWgJcEz>YdnABsO4pTif<G9QiML8(BQ4K|c*%MT73ZG_fveCNm#G#K-ZsUIx%w
z_rzzR0HROz!xyhCnj%ehRS2prF&V%zAMt`Vc>YoTi1$b`#$f;$bUAAQ;dVcH5)H0K
zxRu$ZCG=AzcifD(7@W`LmR;s=gBNSWfdXfVl0Qpxd^(_jU{)T?l($@~@#yg_%3l%f
zPu|tL%SV-G(j$Gv4%LWDe8UO1qKGnIdsrM2!^dKytGNM-vMd|(z8B88hMXKy?;Ga%
zdU6VEW1<NWR#z;#9jTJ{JO?-MM&cl9D+=a$f`H|8Z{bi^^8=behJtYkfNt8T7M6-i
zr>inZPAKO44qY+9<nEKjPa++pKnWFAk$YiUg=;;nIn1j_NHOy(q})&v!nkS63ecSv
z#@L?DA$Xvn&<S_j@fYiKYVrod2YJ5v?ZHG$1qqN~Li<sD%WyEa@>2RH16=%q?rQa7
zwHse8g#^A%tey0S9(7`~$*Ewh&mS}emFm*VX|ap4$)Y~v@p%}DU~6<}_?{Zp;}?Dw
zYQ_KWpuB=H)Ai{fh`lIQVKS+r;rbJxggumdHLQ7Jc8t2y@6Av_4nBT4%XLrB@BXba
zpg#g@AYcyvpU)4Sq&5Rt!<#~cT%EZ<c|lDAO%8_x^we*2E{iK7u1oT-QljuWt94~9
z+ax!L3>-w)1S>|;AF%~WM9TjGJSU#JMjjL>&^4qiShN)Is$NF@os^o<+rm)T$tpxG
z{>ETYrmg%QunJw1#O7$y2}}bMAUebaP2hw~alAKfixwQhzhSNn>_{UE4v#&HV=dVq
zpNh=s(chh&s+ffmbeC3wkoCG~r-w>-#6i_njQvoV@kPJt)%LGHqtbJ+Go5Mb{A|X`
zhN1`j<j80>P=HtD)_O9c<`)yaCXmoh!0@KdDOvuG{!dNV)MbdF$MOC5brO=>qiEIS
z!pJO+DVZmDk+_~L{>bghsNFi~k;;f2XAlb`LwtLVbNYASQ|FhUoiI`lx*cDEhTrvi
za=TPfo(dPCfKULb+~}VM2NG=A?4z4whuuf#6D=Z-0J*)UMz8sNvp8Mp`p1nK_D+JN
zL6p4i=5%LXTXl9Y^~GHvGbbOBLNC2@(0yTqTA<1xhPMvN9x6W~{>q3stU2&Uw#_2Z
zi^w&rte<#6B<UL$Nl>i_G?jWtdAdOHWqyvrmUnj>f$vks5U-b4{YQVm9hD1tp{_<9
z<feK{wt2NkL?4GEyI#w1F!JXO5^lutfT#h&9Mb`q%|h(#N)on*MWo960}sDRUOpc5
z@&f`TB7h{NWra`N;=;rjL2|Xs`6jY{@@&~se=LlVBsPub`GsFE2j2XGuX#mVO}^5Z
z4%(Uv)V&c{iDy`K{ax3m7|lS}iSgjBW#Ftd?OY>o&%d4}a;hQ&?`klKWLP5go1*7P
zo&|FRUrINE)=06sg?*ibC1GrIk!~nkMZB?;<%n#!D>x%wep7YE?K3qoQ(Fw%{@d6j
z(lNBQyz>TqIO#n)aU>Gg7?ry=8+ISejtP$2&ElL_X;q-}v6&7VHs5C9Tx2O=(EgnY
zs1}x=ti=2+Hlw?#<H|yF6iz8P^e0sUn$sI)8gh#OGnrB`nm?Xr*L3?td$ebSV7?Mc
zG-xGn$&%AAXO*KN_?3VjCuFrwkEnJCtoxXQ3G7|<?!MXdkJ98VW)|8dLQ4ofnrX15
zui#bZw%8(M_#%P(DCQQAn`nPRPzk|k$QZZ2e_3zjC<R``hjhmKNv0fDU^A<0JxmO5
zMqrWM5l_}9>{N2VLnpyA!HN~0ZSyT)O|S4QAYm9xTK>`i-H^+ynxKud41jR{d}&v|
z=tK`#)6!%fkeP$#CAEs|G1BrC227GqrNOz8UUHI&<bg7#_l>pB{=NpBF)xZf--B)R
z*4AhxK<`fAmwi!VwdQRQ1!y*I`Ssk(XYhpML_k^>9<yu|VN*UHlrr=b<2qhqOO{+-
z2bp!>bxAD?ZM+@2dkiS-L0AxJa&V^<a>4~FT7O@d1jyMKen!F^j#rvJ*iQ07a@ke{
zGJs~Ij1KXI&gH4<DpGy@p&aWiHL=8;41Um&zP1>~Qj{&#G1!BXF3<RErOqF2bOw>d
zMPGoAQMxAEG!yCMxeoXHK#fJEdOZ1b^lRUWqz<zWCEcw|s}89S!K0Y%x}~(A?;TWj
zt~rh}w`aqR8kEC&$rL5phqPowWkvXb2!(3msDC>E<R}51dKQh;w6~Q*Kj)!_FULVE
z=$&3h44K^}uJ&vO%u*d!yjF;J8w{(h$r-c%e6tR*!I#7VV%6KsfkZMVeLQex90=-t
zCFTEv3$OS0lRHiA=Dv{^EDk#sv8v)%6-8<-yK*BKBYi=Lyw^F(#Z3GKXr^r;`B@fc
z$s(K?VSMp`C)i~Y3fV#J4*W^;m4O_7TfL<CZV{;u;m3Ak-$C)u4P;50cy&?CUg|1{
z`}nLldPepkN&wfIHSnkW3Bx!IJis1e@tn+WR|q!%_@6oycxrhG`bmo0_Y!c4(8sey
za^*~EnO5w7zTI=vwd=j@AX;OBA)AOo`Im9b$HN;^OSX)WVWem{b><sGe>@q<vvJk!
zv`PhLz_B9Q07im3)R4;uIdHhmhy<BW!pnejd)0Kw;)XTNK6I;~4bHNc6Y+r(-XJ>A
z)1G0IfJFr4OztHV;qky<=y5|g{1^|%5o>Yralca7fbHuE!lt0{@EYD;!g<vKc@2*}
zV%N!n<bp3@@vu@v0~gV8m};EY-((NhaJ74U5b1&m34U}P5r*63av*S^Jt&N$F|gx*
zQFUYB=E4WTJEH?LhLq6OJ4ph|qHXBDmrg(HMLk>B#@BzxWTYPeV*{C43dd+wGrS{X
zk=lBYLr@mgR!fPD0@4-iJsx{<QIj!jx5N`$CFYcXPi(j65hcn6d2A4*8Esws$k6@{
z!LcGq4>XcTbzB@9ZwHX*3Bk%Zc<F%BWB{gE#SfL}XLVxMR^N$(pr?(Gq;-mbD*F97
z?=v$tTl5+}H#+bT+FIv9eccRKE$eO{BBnb*w+nPp6h+;$Ua0d>zTjrw&ryg_x^!<}
z%HkD&al2x-!7Cqj+^Q5bPKI~c#kHcW7lrIuus>-rk<Rd!@I*?NmdT*);vOG3o%<Y)
zMrQ4iZ*g};r8tNj0|b&$3#{W2;^5V(dllyezx@#;;t0cEH-py-2kQnn(Z7u0j<QO;
z-;rch(ZHUjvTNIJl<`|Jf0tG&$}0Hf0U#s7T@h)1S!&0iS};fWRe28mVF@x0i}&M!
zAX#Ohp;AZVn(F#WS#UB51=z6pUAl+QUV^5hxKuz3!kN@Kx?(@3K-*Tggz_uBaOlo`
zl-1N8dXOe^k^}PLiV>OJ<gMp%Y*ke!2j&=^;omEXu=9f>R$CN5sSv@6{25~`YfO3L
zoIrzX2y-2hBpLWF&FBZVJ<4ksJ(#{D5y1<(n~sy%)6eR8t!J5c#_$bcS{Xo#bZ0qB
zN|Ui_eNwwQ_)UOxs9g&_h^zbwx<^AmT6_Ng@qtfcfE>t#tZMb<;F5+ISFz2h&fX;K
zcD10<@C+L2j4_`|GUM%z;Q}oSa*{s0kcO2Kz&7VDg$cjHlFInNxJ|(wx3r$6=*oWY
z+U8=Gua=i}CC&f#i3LjlZ$DGXk5de9kTFr17%n<vwRttpcuFUBaj27TcY#TtjR+nw
z-*f6P#MJZ1B|X(R=AxDA|6%C|u81F71Ah`8YMwv<h;d(;{v-^c&I5vXUJOg?4%}(G
znwsLu(ChO5gz2ss@*j#i26l+THNe?}oHCx=PYwnDha}lWz`Awr`9HnX;zWt%zD`JT
z)<-4Vd4zGv6s;&F4brO|6i(l1Su0$omrYHIpU=-Lz;6Nr3l0C@9AYSuLAcXd6?pGc
zHo@j@#fMXI;caUNql1gZ-k8?&#CJoBPh1HK;0h`ElhtR`9=Yb%J^jqAOoSo;M`o$(
zYmqXekWc&elWs{$YWcSi*`UNIb~4N*({sC4RdLp1&sczBmlYmp(-|2)r<`n4)ceCg
zf%$Luj`)t$mHMa0Uc{g4Q{)q17Y7aYiZmWbIY}MARDuoEL{tC)^XrFJ&~S{y_A_6Q
zhUGlUA_^Aj2=S4-_)bO(FueF9q5tF#xU3J|4rl(p>ZN&DqaEJVGn+8<xt$@_pqR99
z%>)cdF;J8-$3K)0u|93!uIue2#8*7B!&#lYDw1_<XSq8@L*$GJjT!FzCdF)m24rMh
z#&FPxrW={6(X`uF=`zw{P#b%|oWm4jh@Seb!=28$mAkHYC#W)Cy!Vuc5$rDP0nHpl
zGgD_hh&D>T!5_yRklQdjGV-Jp8<=Ah35WmKOLzhw&P+X&>g%2hxzIGv;XVr%AV&nA
zG>i>jm993(!nY&m5pRb^OX_83vjWjRXhi487!OI`Lr&<i$wrjY+>BCD`R<dhJOVA4
zoSEAkt6N;5$S>glL4Q;DzIZkT(d1j&xmtaIkCkk?Sb#g3iI)&kIxq?d>|Yt$0f5s0
zDzCB<ilH~`*)p$wWA6hKNlb~lj`qsmq-e8`jRLcLOh_5tD~)%|XwueFEqLeT_Nr<A
z5g{>dYUbRA=cizCV^)$ch1V4ZELyaG2<+3Qff;q96J;R@B|UAcl;O==6Vccs8iww9
z<`__U8r#NljM$p)D`gUQD}=8abSV>Zgf8VH4>n@Jgi!GN=03PyCCbW+oQ~EW@Zxh`
z*cqYTBpU?10*^VHZn<OK+iOj8SEUgI`UMsjq=CV)+4D$t#l+JW))9Epa}B<O2L6Td
z?b+*XG`Bm1vm!|C=uWprE?)y{#B97}OC?&!H~xcchTQjJdtcwF=oT_(^|;w1lHdKh
zktdt@Hq#{)mK20f>A`oVBQknLAQ{dp1B&0fZz<W)8al)ZsnBpm*cIui2Ii~c<s9E^
zb>?J&2PK~H{CWqBwoN^(5SVrX4O;qTy=W^r*ctLrW?TUTu=tCv_I%}wzy=R6Rh7ec
zw;**l?)9W7TQilfna;|SZeHuAfO{`&I-;n@<T&#BNZOhpKrxBxxG+~TIB<f6Y3yoJ
zIP`gszfXF$fW79;NS_aPf@9U`-0mgw@KpioLoRn0-xlp8rFHYL@NrkpK~hc8QbkTL
zm!(zj0x)1LYPM%5`Mgv&Zg`qGA0qE{A|q(!`7L%7kNu#jcrgSVGJJMQ5f^8GOSgG+
zBVJ`HuJoZubl>HCF|&4r7C{}BxkN)-qB+{WJi+9=G;zHzLr`QC{x6nZv&<2-u<0Dd
zzd>n?lE=-aM2ar)kC_VCtRvjsF>I>BzjFQ`u8N(qMko$(dnqt6;Yr7$0M#eV$7xiK
zclCgS=CD_wl$FGZN25~`CDM~KjjX=(_*(ok(>BF%`V1MV-HtZqQ+GI~$IbB+&j;I8
zs=_W3h^$Q&twYzi8mOqL1^|2Q*}FZ?;9{<C1N@8-r^C&?P|mdfozhDXGU<z8(&q__
z_4*YtPE}%TD#4n=jpl~3-ep1XxX=~LF7-T`g|E8*8wHOT<VwKlZvo*YTH?N?Ci@=h
z7&c7Js+C^aqEM1Y1mW+rB!|5Xk3V(cOB=sKj~aJs5d?b&HO+<%Ju^LtQ>+cA-BD8s
zo~D25Eb=MYuNf+rIyPGauJcKtlL3y+szFR?*_GAtNYcDIUH#2q$%n<Y<U3Anc*=@K
zrFbU}-y=<hQFXdF{WTju4CciE_+pA{1C3-LR!hII_+u=J9kSI172cX?9wz9_9t1pN
zIur!JdJ~!?`$Oa9m)BU?Tbm^P<B1RMH5KPYmU{I$)q@-X>dN0<Hp5<N8QrA=H6`R?
z#mhqxBHIPuPVXkQq@S>Kp2J1iH-?ih^Klo9Km|1m0UZPM#?dF@nOqttSw)C~QXQ1&
zstlt46sgD@Ud&_W8ph1}@A~;PN%X}O^()q$AbQ9g5;cz|pU&iqlwrMO-t9yW5FHg9
z_4d{4Vsm0F4KIlav>#DI!5j*!srL+Gn*h!5$0wg@4{os>WH+rYHHX!?q?26#7C4jj
zqXrnm@747IR7wSPJV1HmEZypM!3bQU-1T;{(UPIhw#(A}jqL>M0^oe8@{!3DXImgX
z`D9)KD&$S12bwQ~myycT*Fj^?tyqHJ_oYRgWz|=?jg6UTcKt7yu^i5=Dk{B6p}Q**
zD7K`B>LSk5OjDARZY|Wsqb7Im9m2t?2}vyfY?Y=3FaBau#PxO-fEM#%Q&rGML+E?f
z)-UrFOM*Oilz4XXPJ<6v?rprlR)apPxtVz>uQdY)h_I%1450{N)Up;p;7q45I!s7T
zUdULzkBJ0io}rUY-kD*Mj8QRBWj8c&QCE)P6_>Td`E~1*37Lqh<{wqH!$`&5G*xPZ
zeWR_7?FLolKz9AtMDU0qHfJu%6~odbxdcACF+!?*ddVe~F)asFHrArMtS6fCAMbA`
z%Izpe2<UNLs>6?gz`>3orp9b|Ye<IdHGsG^I5y!Ws_@Ws^lh)M+YU~GdYnbr*}wO^
z(F&cd3VRxMeANb!p%W92WuBOL7Ht>a4diZRI8jXf;?Pvzo2J%QO4?`r(7!5i$#j%4
zLg9#7!wPGRBjSZiTt_o?asa;S&kF;ZVTrP7RSwX%+g5|RC`nKP<a9aDH?=AUw|g*L
zCxbXE|A(;*)T)KB%vB+Ci|8L$N=IShE~Xsy^o%1y@ki|P#D#FrP}vF}KYxQ*WC<9L
zu=$ST6O1}+(-lKvmp+nsIxmyKNjyO|iqPPR!aGA*@!@lACq&iD_OY9Je}ju&9#2@N
z50TNUB+c=F+G@w50Z)f|mkU#B4oZ=vmq8n4zA@cj=<X)$$2Xt3{F#iMdu6*v34fwW
za*WpD$bQYqOj>T#GlgsOJ}`l}`;oY2FTos?6q2bF%mmsF95`feF~Ch1lNGE-W}BTp
zMcL`iK+ylxtpq#u>OBV0Dhzn+9W=PO(Bt%^R<MJzn265(aaU?lYYT$g3Y09I27)xu
zHWXM@QOmg|>3V-IFKvQIunL=*R|P|JbHsyG^3qKnwad*SrB_D4m@lMMLgP5^e&zV0
zS&!8P<6TIoX{kHpEh^)!LyM+fnnKXfK1B_kQZk%zRpzl^AjsBlwuFQQ=$?MrIUJ{?
za9NpnSQ;Bna5T9<OkZGOArZ{;5=9o7s=zs<?z%{6O8>u2vSFdrP#Bow93*0`<4oJc
zC5q=@=7{pG!&fCX@<SU5bYB``G}qXSbl{Fd)jtGzE)d`DIQO8L)K>B&Hwlh$0}jed
zs-@LzxGUunRoC!3i{6tPlo*H(%dtbD3p95Pt!hyy-C|Z&HtVY(X1hi~aOg?5HUc~@
zn9iNR$Z&aUObox0mGhz|Pp>`R2d1}WRE&7}t5CCY`k8z|0i>k)4>$>>NtWfl%$6Ul
z(M=7hQc_H#2WuEXjY5BH(nEw1h(NIdD!;rUW6Ij2sR#wgO6vQJ9eQH*0w8Tg!-M&m
z6tGkFJJVVU>hi4`0g7qu5(Q^S6-JfM#uJ=I*cc@ncv`w#r<}y%TEhS;T5)Q&N~RBh
zt~;YfLtFEN@X7kJLG)L0c*aRM`00jH@C0`rWgtm=oDk_G@-SDqpEAPy=xHQVIuuO)
zYar9eTaURU$|I4I8w@tT4MUV>&tL@(P?3R;ZnDxyJeQ6OfXflhh`_u)%|*}!mzT<0
zI!(qjVG@beQlA*Ft-dt}JgWu#jBnCVx-P$DWUW5=h2F5Bo@I*rD$&KviZ5f#gI3aW
zer=9nw#Mh;L?BDQfhX?#Lek~PDl1rLqq?r*!-{c+N+vRWE^>t{@a*YFgTz4!m!Fsl
zc8<`H{&aU+GM&hs&IE>{_#6oPJUZAHD827YX!a=q@X*!{NuH{SNhEgOCdRoj5zo#<
zYH_bP{^m@b{*Qk!iIR5jR)ipV{aaGLvQx#&5}n-zE1E#Ms@pu3YoMy(rs}lFU>%rw
znUn)&P3ZO3J+~g5`H@we`H5a9l`WbvC_&r_ixls+%4$@hSsStt*$caxc_&d^lYw&|
zGHB(Ty;nH7WtCUm)h`2-0S<0I<lEFNn36V7Ds_8#?uE1r(HBOBl8_$$O^dy(A2crd
zLGD2eKZIiY4*hF2+sSqf2L^Fd4@9y*n$M*?5ktf0B#%Oom%`LGs!AC9AgoghX0@`j
z74w<9ok;(qSh-KZCbd3PC&ra4uuO?^0nnq*MFBAXHfjdH{8J1g%##tCXLC4Zz@<yx
z^3D2WO!&s6D&}6V1&+0HwVJYw<gAl%QaG<XZ)Jpx>wI`Ueid{#%q|PniM9k2B;(}$
zJpy<7d?ahX$yykN+XSHF9BeI#7P<<}>&Oi~p?m>-<foVaxj+#1#8ePPy}Uf*7ms|&
zO3payEM^jCRrj=C)GNIQ%zt9{HIuHDz#2wLYv$sRhiG$Sbzy-Y#Moo$HMH>YFW*Y}
zs7X2W%+JdSdWCdN?&sa|sO-+m6BTNz#MXjW$rGikhCQb<SqUE_B0Ab!^KPBkEV1|O
zWh`GGLIbQfBpd?c)E)H_Bst5RmVX~8T09mnY42cN5k@pV;14>+?jPnF03q#MpuO+M
zX%>?ffwe=rIhb%?%=FL6;%bAO6b4ge9+r+GYZj-FtfUnl{wavWgEe2RZK{;#yNN97
z`~=4YBw0?FoolkVCX^Qct#CVANv|&E<@}|a-f-NRCXEUf!Xc9k@Wnja)1ZF5K2zrj
zjPO+qk_!jxMzf0YXUVF{_G{`HM}8A$iD8wC9N5!VAu5bO*w*Oh5sSfnH1XjNfcS@M
z)n72?Yo#(w7?}C-;3WsVRe8HbreqH-2Vm<Unb%_T;RUT7$VFhAQ|uam2=qg|EW(L_
zR}h68uz0KMd0@1NrSU-v&k9y(r;qV8!K4%QtSIsQF)(yeswRorc^}w(-;qQiD*;>N
zpD~12h%i}ya42@w)ovCLQ>o7@kY8O+E1<Pm0q?<tUQgsFdQ`Ov*EoNi!ZMW>#Hay=
z@ze%#h@9~6jPtpK2o`sr0=$vCL02PU0B^6Q9IcNEOAVfo!GwBKUoL{-`lH0?FXu=e
zQ@`(N)Ber4D}tLX?(&)3$Qo>f&?(ne7Jy(LtS2iy%Ta~UFIiNvR=c{G5?sOspG|7W
zx?Lujy$t!xV6I9;00VU`?2O}M`mN2q>1re<V~dx>zfxkKiO{cd?hSZN&gJ0<stmfu
zP~CtAXNZjvVOx8;3bUcSIL!_c5kLnT0o0_Z4bAg-<~ko_w0eiz1G_rB;l3%23%3jv
zAFw^GiXFtNFT818#!?v)WRGmHx?=zEYp3^s{(RpZRuGZ=IcsD2=%CTV7g>2CUvps{
zF@?9_w=$MyHtQZsraeN{L2T>8=TiO$bhmZz@E<}h)TY@YgzJtG)>wwr(uR5*h=uko
zL%LGKReE{}LcotcNxbA!o#^|<d6Pd^eSL4{G#ds98%=^dwq}SHrh*TNoc!@?(Drt|
z=s{2w(s`-+nX3FEt~f2vB$H$SaAN}~O|xM;bBD?h1{LHI#5TY}GN|oUf!Y!OXQ_l3
zvO%AAj1yNSJytEBc)ngyDCb1+1vM+sCM`pRJ?s#MeGfzP5gtk!_9S8T^AO|xh~97&
zJ*64xunSry8Z%O#6ZzI{-KnK(!u`#2QO%WA)y?7jL&HUgr=Lrq!c}2hz;a4%TS8~H
za$W=^in%N?x|1UK$uR$40k9}{`ac$!d9rg=W?-lZY@<xtZes(aICw%?WN}BDyjS_v
zpDbMWD`<JYZU9ssq*TqI+U?59A?#_?5hudxR$s+mFgKHlDSBq<N1xp{35{^XGgg#-
z8^;xfRQ5`Uk`u?O2<dKuYvlUB=~f5E$y|0Pe{bmV|0LnMRm}^>ycInif@r=nz*jLb
zG$lWAV~<bFm0F&7f0KuuQ_~CDE_Nv<amy1w&TAE2z(C~b&t>0<a+@%Swcg{l&A#yp
zJuC`mZNaPtV?*mTR085L+;@ahoQH%WFC0KqWZBrCb$)}ZwWwM{msKrEjoMD60bi9)
z%(?6NQ^(+$%r9<tCGDZh+6#vM*7luBccP98?Pmvxx;Y0uH@zpLu58Ox*p3um$+<F~
zHyG3R1@dG_nPA**GSYlg&q2h4=^-poFs~A5WJSK~bvhL?LYziyh3T}&9wA2}Ukx$G
z<;4a(uFKafehQEfo_Ka%|H~EgToMQ*k(rOTDe!%Tmc5+6hpy-fc4A(9O;h*6cQF)^
z-8CA3n7gP5;3Z@*66&68Ra`<hZY%0161O%gM-QbPCum;2aD{>ZJ=myZ!`8X(?fSCw
z9A9sfe7lrk7QlLFvj3xEpx#d{klNV->Jow~%LqF$Bai~K{wF`+fzXj>-#~Zmc83D|
zQ!Oq)#y)CA(x@3~?(b1pkC%)_?3R2S6!xsF=!D;%>cn8G;eW~8he~3ADNBn^)LQWu
zq1@niciC5ShBu$WAAm)3sz)nFw4Us%A)7ubvh~RMK+&C+wY15|sCwFt;T4X@+W-td
zqSGPH6D2u&y}9m0(4EX5hWFE_ozXQO<AK3f@@mSO%}MeIW$Ap&Bc9eXy_sLz>EU?w
zPJ4k0`%8QyI&la@0at?J;VQ7?k$C>U75#lc?JeeLqD1u>h_{TNH#%NqooNYAzshV_
z>8^HbpZy(V*S<#Vj159FFOBa@DB~eV1WY8tRZeqUZAwc+nY!v_WjH-_N~@!yt%gY*
z<~O_idSWzbtg|MB_jkJ$cD|pSMo#jY#4mA$hJskJ6zbGOmfHi7I`+<`X*Z6wp>hmk
zcD6>nuE}|UU*mo19S6LCZvc8SsM!xIm1UP%E6a8vdN<!QtEcPpiKN-&GT(sUhYwDT
zExj4wq9e0mh(iCm7@VsuI(d$1Gl5^0>w_Z<xgT47jai#6)<B7)Hh^Yx!x=9|RfUpf
zK`Ks^;<CY8aDAw4P2m+&3!rbJU7Nurs?Wb0B=7&w!hcj=iKPu^vwnW`?lkylaq!}q
zGLh^j5w?D1ypK<>{$~F4Gm)bPlN3HMR)<3sX`VLQL-^?`J~wGul5#Qi*r;vv)O_P3
z;iLPl@hxl-$HlabP@}~b$!_53+mmJoe8!hjAOjrnFHf20M>W#7@B^O{Z-v&CFVRj3
zCR`r5VH0B7pxl6{E$2A^qMukwnr4GPZarAcr))Ft041iw?JlUTs>9?0lu1>RXio9w
zvU!EucGy1kDy(vB00Kb$zm64Na#4ZV%rOz|OB<gO@}|;WSw#ASHIJIcEjboQZ<<pR
zhk{x9Cde<dU;mv~jPR5s<F0CiCEGlxjFO05NGDBGb39%{piV0TTGErt^!!5%E^w#2
zQ6Wy8k07+z-+NYF_-EY6g1BfFA<Zw7o4rKe>@7;l+Xaqeah?_*UZP0!9*<<mOZfEB
zsGWMnOCaAt4QH;*&;2j=tZ_0N)^z_@d$IAccv~w-!37MjRSRwDtGV=Gr)$6tNoJ(_
zB&1}FYLZ#Iq=y;sel{Zu`hu6<YvyO!M?Ldw6q=HAE52^k-Nk0u*uAtc|L&dec&TH^
zG?B?~o_ZCy#GO;9Czhk21&!^8&@(jihd@{0@R_{%h_Is}u*rNnu2)w$8uU8RkgmQ|
zpgbbQc|)AklM{aQ^_((^pHs^^s)vF``;qV>PWZW2PKA3gA}7MGM|$fIALLac6e@C3
zMP5c>&MY*Xviz%Lsa*mvQRqunP@?~zRW7lZ?z92OiaN-VI2kl2mNMMW7N#$W3B-Y3
zOX+WK1=5)K&gXC3uNyiRjzdJdM}Naf9z}_!0Uve%Pgo%xopEdh{Bf+5vfp*w1OJfg
zkiBjD_Rtl>gPeGUSC@MG7yAp#Rhn49<dEdE;-Yp>At0x9UFvITG5!<+b#q_*H7&0F
zSF)q6fWM5c=GAQ%^!r2&R+MDuU4c4xBjzKO%uQ9H+DBND8ddIpbwKWDzb~M7O*#08
zuU35Jz;)nbvOaU{!1$Ez{P4hzlLx9lO%Mf-V+x(ccBwCx-~q}EUuKJ0iJXLaR74eJ
zYD4Lb14idE1hwX=q3gn<NH)or!7{aWoEwykPmd+<Pt;f9T{>j9Md7Jf#N$5|SK;4C
z{>QX{igVWLM$0bx#0P6kQ!CDY7hd<TW5v~8N~%$q?Fu@?;FIcDV{3(M-+8za$eUeo
zCjQr(Kna0e3CKb+UIF{&5omuZ;5<^#Q8cYHXQZlo?D^51My&RKXsorT^$ZZ_Itg?C
zL1^}>R4_OCTLBpI)~R$itFwz4&tSa8J@2UdBHs7W-NnIMM(9v&i=>(Z0giT;h=EWo
zI!(Q0g<7EcEzB!k=zoXS9vyRYJw`UnV78{xhei*8-D@y9G#UjxcU=TIT+5mDZO365
zaT`EM$m=``d|_2+sV50)P8VTHio)vSnA&0452j+g&Pt+$r#Fq^l2-`0zHDU}#~#b@
z-Z;H2mv@Zako<v}h&{^+mTq9lStoO<XF3>&y8k6|qb>?!H?5Bm`#6T*eHYm*Z_mD$
z(P+;o<mpD_JO%Rw7+Kj!K`d&Dr^IFM2gFUxu^jOIbZwfK7o-og6<ez}-|U@EDr;_K
z1`@Ddl>mvY8%cOTnZ)Sd4=pnGj}jE@%Utmf#i0FgmV-Pz2L*|rt}^G(#eYr(kjq)^
zL!va$52bSOKV|6{-(27{MczdqYJp~)c}m25tv`@5>*6niSiWlIsaY?GK`vw|{rf>1
zma^8uLv1zbzHI+Drs{Nv!Q2-{K#IV3(N2tB+a+Cgr6=9L-CTYpJ%f4a8o`F#0Y{0i
zC}SQrb6{uJ{52O4aPKyJTHYC#Wt9%B9b`^^f%4`<9gLQ2b(4b0gh4Q=x8s4X?V<lh
zTf^&@<=4H9md9>DYTQ4;XU*3tE1=qk1SHUd+tF%=OCX}#+B-#R(eZg)qIi4$vIlmf
z%jd^){V!_-FKb*(^dtG91-5im{&s;1lnQAJE#XFJ6(L%PK#CDSm0p5oJ9<l^Di7um
z%wC)JMT7Z)=rXokM0x!B3gJAjJ5x#I_91wqI}4I2EmK?}6lmsC5Bv;BX<e?a;<R*S
zOZgo*+pYFLTuQ`);*Om>#@@+M7(F8)2sBfZC+^z|@PrC0gmhJNU~><MF7@VAMh$E@
zF&0VB9%*G75qfe>eCcZrk!na-T&665YP=h64$P2gqNzPnWBc91GpfCRwD#8ATn>03
zj%g!WiM`1e6{4LaMCR~E#&^3Ve<oD4T?42oEx(^(ewbt+wqpo<KIqX<Ro(D#G5luO
zfD>NWt*8z2>a5Cx)}+{bC26N{py#Y=1eV$5C*x`5<pB^GB~dZ5%z?HttL9}vKQ;_^
z*%l>TF_2D7gfR2~nN5Ft;OyMv*G~xg<4XJ0u7(fp{Pu^JRwnGvPS9B5$XD==_1OD%
z!j-x;X%_ET+<?Auq%Wm0BbC<#AI5vOa_o0f-Sm@9)UeiKpu7c=Pp(OShq@naW2Jvh
zrex1AZvz6N-&`gFY3aO@*uw_e{hKTv30IC7f*A4X@S-bN`R>>JYTwr|R2rHoK>0}a
z`R2D=no2eop9i<RGP9EIlmNmg#Gy2v_1ny*_;4u4Q>d`yV6CD8P-^1V;`VB@_lO|Y
zFIp*Oj*<#(!5V$pV}mSjF>L;Y|9CXF@<8YzWexOFY4PpRZb_H@8!5%{LUB~aSpCl<
zzK4W3SdH&TRJ4H6-Rbsou}RM4n>XZy^i*Vtw31)3v=S{1HhAd#>?uzWTAZXo&BkOi
zmnRg{w)QbX1Ef=J83?2O?10maZ0;s=%~9`v;oH*F&dMU`tGgGvSO_<$6XN_hMW44I
zr6Rm5Mp2HhL@&*J=cL=0O0~F376{0lbUK9NG)IKq)SDI?Bhu57QKu7BzS{}U<e>lK
zx=)53>2&GhH7=aBw74O8p)T`-dH&)flF;GD8k0eMBwE@Ej{f_E1dfgcBJm>FcFy;a
z3N6kxQ%61Nro`4?$Are9TwwH$;74B_u08b8WkGE?0*6|jyO#zb2%5W)E+;rfg)Rwo
z>*&y<+GImB)AOuKIb6PMJ}p6iK%_dUKGOU54A*nZr(^-dt#r9}0VX-j*q5CVOm~A+
zYiG7sWH2}dffW~H0HAZKq-`NUsU>eRNx4&nx{y%{s1Kk|MP#OHxC@M`Ls^4-uRaL<
zA+XZ$36)&3`fTijz4JIZhdH)jRgeSAP!qc;Kj>(*I<HI9g`}dM#u1S#+J}yZe+(f6
zT_4l-SkHv8jOf>H2o>Is=FbTp$f?KWw*>$|2OU@u-M0Q7NqhsSdebGv3x@c-q56U_
zxkjWnssRn`)O0H*-tGORG3_G0!Lj<PNI^@L5%_4@gH;e3Pa#5>{%Vu$GZIm|bXFC&
zOnCJ!x?85Qlw?ja#U3CRZ<lK4Zh3h`eyKqy^mcKQ&6m%%BLEla9#&jY2cBhLtcz~J
z{Ip|^OFL2+tW=XgV&-qKKq;z2BnMH7b4-~)hX9QLr?n7KP{@-JVCF6jq|nj_4m3a+
z()~Y-c<?apS2}e;DC{hUsqt05yL<7w480M1n4xzj)RCr=4UbvnE^Q)Xqb*d5eL{uo
z+ku6%C(c7UmiVh<t|_X3j^$<#B*vSqIh6c=&o5=zo&`4t+{Ggnr`^>*$koLy`GxO0
zqL>CJr#fIKkY0tNRUXT*OuHYDJ{+Sx>2{vEG`E=CvE7dX8FT2H9mHM;>d7r9aTFRI
z)e`vv>i#&h0GJ(*F$N8_abU^t96h@|J`&ZQx$0+_OW1K>H_)JV3+Xo;Wtu_*IpLd0
z?%DBcT;bLzz@afM9>a>YFQ?oFmaN@@xF2xWS|~LsIa}0I`_)b*)1W|*1B?`^kjt)D
zP4737FM}N!|0)T2hee$@*8WyOAq>PVi<<n~KIc@Gu)Vu;+sj=0C4lgItZI+ebb^Lm
zJ>V=idAQ*xeP%qkE^X|&&>>iuWix>fT2t@y-_8Xlc+r#haxADQUa;ys;k&Tp-S=-m
z1q-p-*`5=dV*ux<@;!aY0s=;Eq`ghPIW9gAprp>s=8!I&>$40!L*w3@n<H^ByFWNs
z4U55V8vr+6NExRg`t%a$VnzE^12E<r9ifSXPJo7iO?PUey$>U7x+MT%fOe{1WgE}^
za;zE0E%~)__8n##QT4cirdkJB7SYUrqVJ?})Kvqxs6A=)F1W@sFoSnLD~{4rT?(Nd
zDoi_WN@vnilT5CXgAEfKWU>H3{Ap7*R;t$`xZ$DezsjHt<aosddZW?Jqc$4R3v7NK
zwPDC)bU%m3YV%GPunyGCOLmu6Nz*tT`23F&z2~A9Aq^+;9x;00KQ`GV<+8DCo#hhE
znamW=qxK026c5DFlAW3Rq>85@#vzW&Yc&_pl=svK+T+*m9Wt=?INGO_ztgz8h|ktu
zcP*4?)g=GrU?%09<6e&-3x!z@($0sce6zq<bH~LGXf0W?=&|EeU_ogC?<$?J^L{8z
z39!IZq5%<~a?=uug9Yh>TW5jWk!nI{&@H2xv45ZKl`Z|}Q`p95N(~+hf$7-O{I${t
zDO|na1xVUji=GWVXbqtu^IIzx&ZG3j8Vl2WgERAt6Iz>-!?AOMGTd<4a5wW7UnShO
zZ|Lb5vURa|JXKaiD*kPqFt4L^zIgUiL-B9=^G4S96`V>EVu1!BK0f>P5=q<?BaIjl
za3YqmdC^594VI1%O1nlZiy~$tYt<qf=)A>$W$^SjZ^(L5fc<@!w(?owc#4Uj1ZhqB
zmQi-Dk^vXVkP8=iGr^S3Yl`2oi(R7px}XIya*oc1Ttg!F$pJ2`i6g<m?aO?iUBoBb
zG%&6lTy1{&`ny7naoG{!WHh(N{+q-0Q2ama*k;rufkJe-kUDbiHC+y+)%Ow}EPn7h
zi{P?EHY12ys_{M0Cb6o6e%ZDP8L{0Da%>SkL_2me8cn@Ywi<m?>wEIFWUd<Uarzf0
z^*&?l^j6r4n3ar_Ra89_Nd!{&1TP*uuXa6mH%}x659WK86R}0)N0w+F88S&W%Rn*6
zcX+o8%8Yn&=hn)mEsw7vxkLI_9S_p|s{X?9TC9L_78QTcRFWpSxO^pRt|(qg?iz;@
zSqPtT;aof=_K^K=?KPkNYJI2LQMME+<@*m^-#fWIN0!;Wt>JTA*YMen_U{->SKhUo
zC~gZG6a2o^>0qOr3m$rAL&Q~)(Nb(h5FY{>iP_xN^E`K^<eW9p&OW+27iT4h1gbo5
ztl0^DXhC@m`1`Twpq~)+UhFSt{TI#m4&bv1VT#K=xu0AOzE=(Wng%a={-@-Vv)-N%
z>NFOpIdT{r2v_JtpmIf=bDA0WS$i%r8&_@zMbL#P*gDbM1PMscb~%0jEh+w19Fn@;
z5_U=hTgm1vd}1&<We?NqgjMh<HYl!<&u(&4DGR5qAQ?vY-J<yZs7Ul!8kpqroA7Vr
zVSD5m$=OKOhY$Qg$>rVpA&S~bx&#XK;+5M9eEvRsZS@vGlTX@*`z6YrW-P--wNR&i
z#o&cc)u;@S_r$TUF~k@j4N5*3R>PUc$6v*H0VmA-6q$I+f2u;M_tly9-VDQYDJaU#
zbFCo;GO^W<uhV(ah}+zt;$4xnAj+E#XZTF&W-8&tE}6XUYx#Ivzu@vl=R||z+vNWA
zHrpoGbL9f>U87E#e7~CT3;q6qQ%(Xx=xsh#gHkxcU0a>otdDDVJ4Wrut8m>IYE}RU
zV4Mxfr0j@=RWN8{y<z}B4faevy?)ylH_wmfhlWmvu>IgLG+$@3z3eRJ($f%fLbq9i
z-*!7-O5EdkcH9QfwF*IVmt-G-jR%1Pd_J!GAw<`ryR25GP^BHrn@yNQt2^7fY8U@L
zG9tC?#<0i9HeGuznJzUF+CdPW!s@Q`!MFp}eww8_P<T|NQPpI&E7VmC+`XUH#8{v@
z#7x9|!eucm-d#*s$6HVvYQ4)`a(^%2o@+V*Q3CmCxztaFm)R$1;=WsaDEJP8U1?HZ
z5%kJ^KPO1FF1DPc7PtQFmxCCqsqYu^#?$R@FpGlNF(Du>*Nf%mfvGO2C;i5Bd;@?f
zFH!4hysQ*iN+KcJ#%)!gbSR&O?RdFD;*VNi5(0QzeFq*S*5|cV{9L9?0<ir*0w?KF
z32l%t@igH0;r(9VPXFR#lggU#aBm9QD(BpWwiVTI_lAqrt!&%YYtK#^7F@#QniT@Z
z?_yfbviinJQ@G_~NQ^{&Tml~5T{%oJpWD|M`|4T5CPm@@7Xu(pOj?E<^zr*aKVL<;
zM8acpT(3-f)0waA)7+p7Wxa{*q_1zJR|aZej|sl?2IlB_8EEyDpQ)gr62kr<rJjng
z*Id0+hpDd;fQ!^Aqvrfj-@{_tcHuETzS(gc<cA*vdKx_>=!Q=ddopuSds+)k;2Z(c
zO(d<eJxL_KU?YHCE{LV2bzO7QPI-J=S1zdi;IJhHSI}9<p6hK`%~OHChDSWW+qpC2
zDa;4M;v1D~oFoP6%C+6Y2KP1&x4IdW@yQ>iQvnaS<x<X@g<D=MMo(sv_+6Y9X{z>=
zAbZb%zd3~nqYvxU#y>BKSyQHoqz&ql3vo{;hlJ2Me8@I9&uOa;lWmGvOV2gZ6_3X$
z$yq@WvN{A`VHfzms5y94xUd2^V9$q!wQC?VvQqb>q^2{?6I)zTP`%yQvMI$&_u=*{
zNK?X{-tiKWk^ANqvlK7lU>uF#+3g}H6toG|wr3*=zXM$<`2SMAIWxbMU<EE8F^_N6
z1Zv?q4G#W7wD>)*YJl#?_2?~;yH(YR>~|4*!q*GsGZz^1n6<Dnjnxx$5Xe<)fk*)7
z6$$p<6nf$<X&IqV=MEGBnG@<SQW5)}GJjFt)LqBru3Z#;-zM@QCa6_~2`)BxDR0wy
z3Z3o!CNRZ!^;kMJu`<hQNQhON;3HE>Q;ci8Mc6am%3aV*Sq$GZp>s}tJKU1Mb@TG3
z#lM@$6JDQz(0Byrle*IwwNFn9itJ^Rg;B^!R(3wPB;8PA<Kiw59U}4Y{IHZ#Cl4%i
zl)Q1YL0SVnL~9^z25+9LLG6Er_(}`Zi{;jS4l>9)tq7BMsi{4pNBr}jbTvepz$(=k
zvz%>?XIL6_6|P+7CMwL7Z=y8F$x?rUs_l+gpA$7%!`j5K9OuDcaRq5p$9YN%vibyl
z6H+9=d|dzKIt`8(0M{auhY&dH{gP7*4bD*3q7CGRRGqIdju6B}hku@}?Xe>8S!Xz^
z`JF=6Qrv>80<A(@irAt#vOYRw3R*Rh^V67ni4whV{{2yo3>ekG-m1$zlVm*aGEX_+
zSd~t#LMX%}sEZ1}jn0vOIr>xc{>Lp#ar5+mke{*cq0lc28~&F&ABJ?~%ZNbmJ-3g%
zNyV_&V!U@HG(eCY`e7>0Chhg3agRjO>d@JhA~`2FMlcc!7NkVJ(gmAn%sCCG%3HJE
zFI=1&I>}GW*XACZhP@WD%VN|@aTs$M1A)5t+43)00USmzpCV98ZB-;H^h4gK(?$}t
zo@0~+zo-5@rM5zH$7L~wd%7zNpAVKR-9W~A@2G>C`KK0Y2UFB*(Q0t@w6hItc{^J>
z-h6bh#Lt<cd01UtMTfWL3m?D4Rso%UgrlIA$u4n0-eZ;x+IBMl_*^e2!?y&W1**WR
zLb6M62D6LgQ!P18-XhDM%agUoeq{CUG&R|y9o0{_n-ULcNYOLYGyxY_&~W6QV)y=c
z{$Zj<iyekldirQrmNXVGmx`ZhSiji|as1A9GJI|*eDAVtS|!Xrp^ky1hON#KvN}`|
zanIvP-FxGh?}SKQDh8(Qyc<s3E!<M5VK;}LRtN%TSovI5@3g$=zfpyQgwPoF)_x8^
z)MA~t<_wu9Lj6!u#$ir&6lYiF26^pUE<DO5P@0!PL2>#x_fc#9jlNeR2_P+0{}~z{
zt6Ao~sNyZw;rPi$T3~5ZMtC8ynXtCnQ3o%(p$w?hUlx7>-&$zzExWD~2R>Oe*vRPp
zS-7j>JB@NC;tN8mh*_k;%+SuP<mR2_D}Rh>e`@nzvBk=e9<29TFL7VR)kL}@5$i8k
zh^>h!5Zd)Omluw|5E<!4C9qB?VvI~u$Vvz3;lWJ<<b0V=xl1-sNis#HLxi(6p-%Us
zx-=;Wzn|Bu?E*%U>f#t`930<Cz=SI~Ixg8TGKL8;9n{Oq)0U(}O#sBE4Wrv8LSt?G
z#4|^r;+Byz{fv=SWXrGQzUP&;mD8P3ZHb30(^9Xas8sJIy-~2rIm4o<!v!1XJmoTh
zw!;?)_t~{R1B4*A7$qIlFyMJO6l}AUw%FNd>VXA^FUso?rn|JHT|l)=Kjl?o@ZjAR
zVd)anqp{6BI#0O8QHuzx4Sv-Cn2^r*`4QOjp?!LC4-cMZ$`E`{8>aFSC|9GB;-2&I
z(r*q^C|xG+*!|4xl758oWLX5DvG(TU9d{$+dWp6AppP@ZD~csi`z^`k%5Aefd|fS9
z{EoTz4i+REi&x*KdbjCQ&{`i(r@vQUN$%_^kwyI(OwArUsjt^yaq>+$@^UTucnYRO
z;7UHWei~1d6n<9}ojXS<$p`5ZH5h)VSrFqgyZ2ZR&tK}bH9Hu|%86WZezY`zegL+j
z!9C3<?mj{5BNX@dts>w7-3wm|QfL;89iJ7ii3zWBEoM?4zmZu3ZYZG+e~y8Q5Tr@p
zIIUgr0RY@)!{IFfB#i8~TWa^q@JEA2mYPVLTuMzaCB!}Cv5eI~cxPqC24gIH!uh_9
z8Wfk12P8mJoC<MF7gdRwosDJe`u8^$2Ba~^!5;Y+&Y3gF7pWAbirxOQHenn$4-W=}
z`tQ<amwUZb!$u_UJy%JIGPYJWBn~-7%2*kz+Y~n3?Vx+tpeL2*Ox<6b9$FmU+NV%Z
zXQD}mmEqE7DV1HHIXEYHeVzb?UiXNd*XP|zn)lGN1%4(f8CJ*+6YZ7q_NYExry211
zHD*qMJsRhk+q)3f-pY*yH*#_dUf{R+$x^TMtPOHbSCyV9E-%@Lrv-r^Z_YNRk*sw7
zVD(oyXBRq6fim|1CVMTj%4efOZ^o$%2<^`Z%wi<uh;F$;>KTEhF7ai{gmKxFC+uyG
z9q;SMMgbEs1EgnZ_?gBC@oVk(uSda6q9}6FgS{9~h;Ht*7B|I+0k7dBPN^^Hr1Jl*
z0#1;;p!CuY%E-lwF{YduVjV%5{sZYbEUmv66v$U+rvTHSzuu#1biYMMG%>CE8`q*{
zd`f;YMhtE;(m1?@=cL&;Hh2V(aCp@-57u=^8%72VQ}WhXfCA7a09=h)4UxoNGqxu?
z&1&&21@bdb%oUH`_BiuDkG9@XawgH3mD9~Cfbkn^-bzz<oVTjosYx9rIYnOL+Eiv@
zWUQ#JTh3iW6sveG!Q5XTw6A>%LkcCUlpOgAhDV29FtbR0uNK-X#nL6FHf?g%n}9;A
z$UJA9;Ir~)Pz1Im@K(Ehj`pAf*TqTr)33N-hG@vf+luhFw>19?KpUn<p;xPQpkDbr
z7-_jF_?S%ProcAoB6(qL6~3-BAUvxW7dGJ~zG~+`<J5`c_(Iu;O-ry98~N<^&TCsQ
zo{oe?P%S?cZtdm=Xf^dF9x5NJQ_j}>LU@X8cFK;LE6@GAjW6K#(Int;(W>>ld@Q}*
z=3y>(k@G!RDDU<7;G-1l{IIs1FYb8(kmIC$L`Y1$v}TZINL>@e!!5~8<|jyu4qhbh
z+Idd26xOr90^as>zs(A0^C$l!c#UvM>i8D?wx#z1hb@_b(sP-bIU^VhJR3&rUS!1o
zaZ*r<yuhpcq}H>=3}Wl>|Fc5TBBn-f=FvSG@UiW)vj4taa;ji?%0iX2n75Qf#^r3R
z(i^ChbS=DC#sGqhazz=0P6L2K2nDvuzqtt@|K(Q78YYekXk`@MLx_Q%TmQSY>{GB<
zP=M^yPB#9Rty+b$GJf)9tACd84Cuw4_J=sWek<~NT#u{)8=K&Ouk#HTD5J`Ha}U2W
ztUFCq=<$z4<%t@adt*u>CkM1)4A$$h-%0|sRP3T34jLq0Z`uF1oqxC<iFx~l2g9&O
zU=3RM;oEyjS1H6|2?guJ#wW<qyC=YGeZuC}#H1=-buDTj5OMM<bG!Zf5MKdsHco1B
zd<)3vU{^G_L|uz4+eq#f!BjNTjzSN0nZaGFZDWa$U5>nMQ~eLP5&CPYl;{rp-5s26
zzQk#C3{Eyg)QS{EOoy^BvB}r2kN07_o8&xgXT;ro1^0*;>Zczl+yI-WZpyw^v3)D0
z016VhvrW6IX=~lCbDb#?j?DH|i)1lU7+E(l?e1o6)P*&zMXZ)D-=u4($A7wT59Ih<
zq8ge3G0~cxT#)3kb?4&>4a3#7bE3gy&LVRvnJyW{WwRbrea=}|_<4RQ22CqaWOe<4
zo^YWEj`%(8i7+62s)YjjN2{t~t@-|;0z#*AZV_$H|ByDpB~s0fsOmxMSNl!{y<pPI
zW0!k=miHuehq|vn0pM9%@2(-+7YkMz^~uWm-({*wL!{~-p{(3e4(AqzIhe5`4SBvq
zv@Zm8tbUEycz8hkM<a>lxK&h$%Q!K{>Hj#UCWXLdJOmMw61c3P3wtrMd6A_tmzp>D
zDG*=Cd6b%GuO@yaC|YQsND_KOqNs?{x>-Q<E*<ZD0=ICM^|H8*=|rAvOYy7uS3Pc>
za(2aKdWe7q0QrtB47@Kg)bR4hEhB7EoZ<U}kB6uX-VTlM47~l1Sd#5reQ(;FB_KTy
zm1qV?T<7K*wi1^RHE>Y2b|Y8&WA^qkisxZZAl{CnHq#bFYQy*OeOMJ@fcU|u$I9EN
z#H(NO+pQ=P(?Qhkm5`gOzJ5}sm6#|H$O3|yswl*E38W^f#htkTyWbNxVDDHvPEN<t
z+}J-PXom?;8%YB`En0m46;F8=bca}AF+##axo_RIKCeFiOU~!qnY@q3F6zX}*LAG+
zeE?m0Jz4|@dPXuspvQkQU1k=cVKqH!$k$?jc1TzD$>i(W+QKC~Qj}m)Plf17ok66;
zEWbsYBIn}^h^>hsN@m|d0)@lCGu3sUml+z<_OjW2^iYZz`-79=p=aS{P7lkW|0xcM
zT^=&HQB)01jIXpz#7&LF7~EoUG}sd;4K1XxT6Q=vEv+(O=89e~8KNEFNu4tTu@7BO
z(kRN~NFdbEq`M(umt676wuv<cHJ9_Oc|B8CWUofgfB`WsWF0Z+m|h!jyiRW}3YkE!
zRC>}0YIIw7@;j?;SgbT+QdTS?=c{x8W2st&RbtaEsG@3(<-M~2@{SJD2o~d%^U)1a
zEC@%ekHY($Tg}Wv{xUFK%e*{>7mJS1ax`h@>L)H~`xy*+dl4@=E3*}F)$cj;U|*+;
zs3Rq?@Yl*phP_fYOvLPgf4rLYLi!C_JHw#X+SpujL|xK4An#OcNOuZivfamsL#R!y
zjNmizzuOB&fxDr#x58FwYZz4MCSW~`?aegp)_td>7LjEW=D8z1P3hC(y>Q3+nw?)V
z67>x}zidaa>LIQ3ca*<h@i)TCuQ8{eA6b_QOp9D5oI1A=$qm1U-p<?BCNREcM8>UJ
zZ9dfq(baIj!JW2i1F#M&^jWY{Ta*~5u6HOnP4Eo)BzJv(q?T3D=KTJY(+4KU!NSx$
zxWR4}hKaid0zgOU{B*NVwHH40*h>~z1(>zBCb+7ITCAnxM8gFi{@42Tg*-%6WiWqV
zt^pdLZsO*{rPN!%F7Tp*xvQJpWd4Jip_P0)qo(*Gkfs+1AT8n^SOs^@YhQEyN7J&N
zT1tMLQ{xsADHPS{_(}d%URdl5;W!Sp8vK{v`ZTsST*c*h5Rq;n0}|uj%`q$j!eCTt
zM@xK?|9Hzt?<xDO4ihvl*);b*6`>`LiS2V9>?KvE3TJ<HsTr+dEuP{wC*L(J4j^g3
zEQGaMYs!uOB*Sw=5!(3ao!yzr9yO3n0?f+ygQ=4_=gECFh<&b~H4*vwAhmq1OsW75
zhu07WQ*zM1vyT{%*5f0)uzt{)^Wo^I7ZSS<&&;vqfN}3>la3bso!+pop#4Ye#ROa!
z;1JOz3+B=4+KM`k$<yR$=W1_w*(`04cr2u?QY9e_mmElK^6=ysdjvoA`>yhSxWhj`
zy0EDeb5lv;zTj?_Vu<8Ph0(3*5ekvAc+IY7Gs<0Mv!`G`A_oZvm0=piiE7npy<sUQ
zY)`cr=jayf9ac2%A)36A5nJCeb$ScPqnJ|V(j|*QKA(?>aZWJ8^;Tcz!qe}9DwNn8
z^vstt%MAIv(Tk<d)HcAEqG*U=#qcjo(%^HcD2Ay=rC}g-KT*gUa&<ca#m&MLD>RjR
zJ<vM8kWLF#)ckiOrS>hQnor_$&mod5CpborJC0-1yPD!JCZ6Dy%xufIRAP#Yk^5U(
zNOW?{E%Px7_lrZ<t+H`ebj14&3CW~QrCFWAjC(tW3R5j7a7^)RYe@1tN{|kDmEbq0
zD@aF;XpsJ0Ih7iJRu%%J1S;1^Y^g*2r_Hju2uF0M_11t!xt33El=e=|Zn9z8?}$NM
z!MJb&EQM!RY9A2=20$8XL~RqyD7*U^s|Bz=?vcCc7qqvMj3L`XLW*(MbLsgeIHV~I
z<})<7phdR2Gpx5TyUTycXOEpow2%ZyY=oj~XL}(3Qoo_<HAdk=mr;^1;~Wh2$YxDI
zmj)c8sqExt+t}`k^-mR12$}GK0YQ;e9s>#^wcPPyzpTGdh}F^^GSWNKcseSy!G-H2
zSze1tY@;`eEG+)x9P%<IGxM&0dm!ity_}6xAp4R;1d>|ajlvI&I3AWh8Y9@#LH^C{
zngk)<a^ZX~6Q|qU<>l!9hNbVeK<tdZFy_@JbQsv^PKHgRCnt-2<T|h`Dz%@;=?;!O
z)VaMaN=JtJY2Sqy!7?ta&bC?Ak!&%k4~=IeslNaV&vv)we`gz#VWHL5p-CtGQD}af
z+4F*&yRV1sXPq)_O`J1)1tCFmF&a}1u><iK48LktH(J7fM7I2uOd8_zVCN*v8R@D#
z3NqN5M|_n%yR#`!3#41Yjs%ri4v3<i?P2HLI@eL>IbvBPhE8I@Kpshrn-=^v<bpX_
z7Abg#yx6{QIbe})#7Us)UxQhZBs(YhEo-Wqz|n+1+O!|afCVPkwUU{C9Q3X#F#2O}
z(h`@|ejg=OZ6|1P28;glfd9+c(wE0>FSkv;W+pKOpt*}TJGnc3U?7F0gJSqG*N+?f
zsuF@$Ls0-Hc3EMHP^EW4k$v0wPyIA>-wh`i00NN#`oSb)s~MM%JN<h9r*?sg-rZn%
z1>oH}dVdTFEG_NV`eS2>+%BXAhzbY|k)%2Vwku<NnLg$2m?kK`5y(#Fli34k^w==T
zqz^zaLhHJM{-tLN|L4M$13+Xw#+eyHyZ&|{z*q=Mr^R(m8pP0aC{)(57>nmI0BT&q
zSX#W@6=-Bb-+4v+3q`uF^I^==?XC`G&}sjK+8gI+KL6b5bm+Ic4F$QH{|5<ODiiOe
z^VE@ZSsy_mnYvDe0`Wn|DvD?XIW^k!+Dms-^c4Jy%KaUHe%x=v4WnV^tK%)CqGNY+
z%FjGN2SN_f%cEQ_y6;<X2z1EpWSId3?KuQ0uX@kBd5CQv0`XRc(;+Kw&p)FV0D*?D
zKv475MPT)}oa5e18q<5-1$T;${*E3#<~6Ve*}kK=eJ>nt76p9u&Mj`FR45as%(pZ1
zjp=Sz*j*8s@WR}k1Kzm_$4*GSF5Sqfwo5B7K5iz>({{mq3Tou`0V8_>V1?ez@4nh$
zxg*NMG({A+j&<cP<@;zgqr&rZu-3B3z5So<Bh0CV&H9z`oiT)38eQWp&{A9E-2`&4
zX|!JDx#>Vl?%6Vs<4_&__L6Xojk{iF0T}gmJ}lm-d{zwcImdJhSil`zhA9jsFT08F
zJT46I>m?<1TG6<gqTiYF7rl=cNXqCdBhi0$(o-QJ=#X*l_4Xyg$k1mlcyGNm;GI5w
z-ULAVumUb_ma>;O@x$gLxh&pR-!JYq!<2#W4BVA+)q`oJ6jX4u_JM%h<Pp<2VkIt5
zA0oWfM@wO@vlmo`3c7k+>j5)`J*rvnT!sGi&9wRKi6RF9KE*^4#o<Te$w8C>vMJ`0
zPn^d}K4zLy5KU&eu<{x=3=|W)<ewJ*?ROJF{78v?93H({S-P$zbw2$hSTr6AX*;~>
z-}0+*VkQ+7^+xAd1h0P4F!d?Q1M#c5i1{<U7@aG>U}}T=LOBQw6^<`JFZWhVYt#Cl
z(tszo`f5;sS&2%p`d5?_97%5`n=W34%{K`>2r~d};~Xq7?Mo{6(IoYYz<DIT`IQ)A
zx$ZCF|M;$R#Z-4Ux`Qk6hD*-hI-bSt2!%C5W_kl<_mQHcAASdLl@9*F)(yK@|3XCg
z8w4YRcq3+cNrK9)X;us{tPc>T%u-d$oc@xu{<;T{3BxtOkt83};~D`$LIfID!9CC;
zHw&T8;%t^d8JeK|!ne#oG<4LebtoXiUeq2<+&WA1z$+#jo<H4OD>jLQJbL9ti%6}b
zJZNKhny}EcZy4e{a0E9LS#m#k2%>W4ig9=XcDUz7@W|DZ&oKhMF*~`)qSS8qXWxSh
zH;oKYaQ;iBBwo3bc(6?I6aeB{SgpTlFDX5f?o4`n1kIzf#^%zRDYRY5$VexE4Te><
zxF-z=5ppEF=QZ5|v-4UfP`e{O79;z-YgxVZ`<%yo1c2jRoF?WaZ1`cIhf`;CkpVTO
z{{$_53KlW^ySD1X9<Wx{=HSS>(bMNKqN;NrxaW5`fH|kBm8)?{^SWD81RW-K112h4
z*>~a@)t-y}O+NG8GMPyg=-Bxc^=EW+rJA-h&`<K1f22RaOWt5<rEg;>|1?8=aUJTE
z0v=ufXXWviFvmF;A-Md)fdijrtU`uK84={|_+IQ-63Bxc-)G_>J9EMUDm`NPEHY9b
zbSJ;)JS0<0cFe<ZRw>!St@|fvG+iyO3$4~%2T15NfL;5lC}~>^nISSBU(8q;EfZeb
zc`5)wBniNn<$ti4?pV5L*IYs@fi{(4evWDDTUJI33qSIx1)+lwv0w~+stQN8kNk0J
zSfC<Cx1(~|np*hfE;oBY<xnk)h?^+KOZSP?!Y3WMsbp%z$v&)BgPi+==5r~tFHO2c
z>{~?)!phSG?VYIWeLlJEUplOd(5EjnS7u<6y}wd`Z`_v4+SFV4o{%mNtq@1Uo>E><
zJ`!%jwm>@4@~3jshNq5cH%4w*GFdyMs;_B<Wz-gpfexn?S&YSbXHy2Jxe~!5p8*lf
z5w^Pz-_bFy@$jC~k$eAf<tkF}gOT}r0?a<F?`GFuaGdk+N!&;9l+h+Tpfxo<7Cio4
zX{-O9&>iLtMOFaxBr`H$I@+21)G^HAFuAya!>^&GVk|OqPOZJKVCtYF_*u-*`aYR*
zneSOu^eJKdP4sT<8-EHQDx`mXap=c}vmxi7iwt?5Htc58%${5FEBjvQd|tz|$O2SN
zwKh+SMvE-~3Ln%w*lp|&%zbgF{?{&fwdiRlY!}J)p~;M*H~kj`Tus<iKG$ZpGc-`Y
zYUs(d0c6<D7p=<+Mz`u0`O*sXq(1c@R1)c2&u3A$+O27=PKr2+DmsjKoUex1GZ;(k
z;feir!>Rpz0dNKDbQ%s71ATCPkW*S#buXQ%nB`_kf;ee-cPH$B;sdbk_Fyc!Fa@r9
zm_@BQ_lwrV&R(@*;3^O32rW-x9lM|_zf2bbq%NN@L!TK&WvaOrKIQ$eNSu!w0jp1O
zUm~8{mWqzVRnvsi2h>-muub5P;brLTf|YE6YSiR{n5w>wMn+r;Vh{vwO%Q9`olG=K
zBB`IOSku*gT?_X{=_ZY5r^jnjy^K>HnVGD}*_RnZ=bI@WjYQ)^+X2cq8y%Q{GeqRH
zs0%(e?#fea7YBXAyEub0O5AlW-@}y_^P#JwH@j(_QF}s#X~8HBJg`;;oyLeM&)@MO
zv8)ee(KV#+;btN;uoF!3e27+YI0`L^o%e#M*T|wO6EsMj0$g(6uR+!e{MWgrL+o~R
z=QVB?DXv?iJqB4QCts9u*(7euthvnYWF7Uk*Q!J?5+WWEQ%G{9X2bM(w;I8}1g~6%
z>&1G{ZEWSJym4a4hTX<V*C_w5K;(RFc36R9jyKk!Vn=&ZeZ7Hg)5!Q0b$G3&KNBHp
zzkB6I(umGZPkf3mDNGANU^M3w(k8l-^E$X1G#tjMpX<-ngPZ$IV8=sg0DM`S(=Z=m
zqP_CMPyDv0+PeJ!SZk^bx9*|H=~u%f{Qt{n^XF*l!_G1Q%LhnD%1aUeRy%gR{r5=W
zANE(b6vDP(K#RpX`GDgR4L`~FNaYQ5$BiCu^cY)}R2|vDWLcoTA4c}QlCaJ=e&q>|
zaZOBL`m#Kp<fY<2RSD#61E$6D(r?j^o+(&zL}P=8fqYtk@hyiu@3zJ>5-fT>;ro6D
zap(lmC*<}UgysMs2K?LdfM+dsf;)jO)ks3`opw7*%BDgDVYbgvB@h2FGlR+h%@j5W
zqD4%do)cOPoy0dvy&Ju=mL3rm&gBI}aQ=}^=jBA8QuQZp@r>sNn&#e0lWIq5LmQ7d
z1|U{f^;~4XsOg5nEx2RY`|^0rN-0%2-%G}SJ3C;+4H3>p@0iOcsH$LescTfU199c2
z>2dn~p%@vW)qNf>`L`l8&3;#zBny<?%hIyXZl=Xv!X8qnGf&5%g*k~2(|;-~>zgvu
zm^QeU{303(rw85RN7&7N!YZ$Qt`Cq*4kj;vmd*0=qNl6ZC++B5gP`xV^2{U^oHO6-
zuC~6EvUIYq5dSAx*XOJ06A$C^>S_($UFEuu40gJRwlbRm941qu-C?p()|vNyGbf%y
zpVu5(s!4Sd3APrFDmsV2$8aNIr!L4`_0iU33_=EM)ds^t6eDTSreH%oPhBw)4E>i0
zw8PB1_k4vnF2ik7j!z}Kvdx>Gycyfan?#EZN%?~#63$2l_Ws@%1{6b-@CTFUtr38N
z%YNj}A*{`0{TIJMr{zr$BglWzmk5ZVSPjsT1*36NMU%za`zu7lcNHh8yM7|1?8e={
zV;0u9i{uYj9VQa`whPX8_S$#_W8ee1)3=N7@&u4nEzP}83%S>G<(4a^u3u2^po!<&
zY`HzWaycKjQ)v4!)0DNKxPZKhyxx07E@KHkyl`_jS=2*msj%b(t<q5F1`b=9lJob&
z1P0qD{q@s4Vjx53V8nJ7rEJJKo0)O=7FeoLA$~0x!@E+iJLQR&k<t0UfeQcyu^;VO
z;H05sRMXGQ=>pV{Easd6rw`HlC|BnCq06y$1PyT7`$sc`g+*R6k#GhpYxQ<K<xG{~
z&EFAus3p`XsJL}~^xiPHm|GUS$}h+LhVpw&_Aer*Tz7epzxem#Pt~L}z$K|wXDzCt
zTB_whgRm@OTtJNZifWUB;#|nnD9a*Qk9@%FbrAxN#n|XdtJaZj%6+uQ;i1<`Wbki-
z7swVGu~$d7If2!efOlDCF?WH)c!cf`8@Mx2`WJqz(hdEy(?e4fb+4-72S_1v{vFD0
z+@Qi1A&{F_d$?eG-(?q}+oLC&X|-ob22)waCeZ{cXe`V|oUe=AtLwEyA^Xy^TS3_M
zK{cTN;@6W#M*Y@I=B7rxb2R;pBikQjk8lfIjykEDf^%avO{^rht;lFft67dND#Khq
zfsi{;-=uG`1FJ2vE)Q#tzLfRfF;)Hhm}Y@k$FNHiq}%x4yKR7+T&2}E2pqlT21RyE
z(ypBNAUlosl0+alk1M(sO=MAplqZ0$;*@$L%zV=ohtXSJIJYN6KPDVdtLjv6ly8{g
z`3=B)jJ<bMdbA-soWFVpY?WZ6-DOujVcep|*kCQu>hI}bf`yGvLDiZ_ydAI|Rh176
zx!CrD1iBT}Ku#!o3nYKrr(x#Fz?3)G^0Rq8;Np#21-l1a#hkC{g;j-&`omk(TZ$Tt
zCHo{V9p=6-ycMNrZb@Pis>Y30BDfMcP~OF4RE0`I!P+}Q44WM?FCG1;Uv+9Uy;#U;
zuvs;W(>eVpM|>*HemmjPGQu!epu*oX*w}W_p~^mnQXHP9gM#AiLi}__#0?PeTN^5E
z5X5ll;Qq`JWa*WCFku-gP?iHz_?WI4ApHWhIe0#e0LmTkWHNql);}AO{pAc~&zT&Q
z8w>;XjM@;e<!k5NQNud-P`Hm<Xvi|+nwGRP?mj=sO|Wjo2p=>Buj6TUPuwMdp{Fch
z47Q7V)C=L}zI{-c>K60S8W?{l@?9UGAKs8>M*frKf$k{7dt5at^)#y`fFRXq^a)V@
zu!#j!zG%IS5ocd{aIDPk;Kr`*j+$3#e7qg4*uv$dvu?2He>SDjwq%}+!Di6549CoG
z6xGmplPt5&AOTJnrvA|QZ08C~`*mV>s%XoWt$?$;M6?Jt7R&aodb4`P5X5@7r&<(~
zPS316XthNE+o^-XxkDjrgT*uhH7YF^axk^7CQqt1px3c?y~UXF>K-YMCF;+<xvVFu
zOD^`4V4s~9<z<zaq}l4{Lj@3pe|Lue&gz$GT3kbi&PUj{{vN7GDrx`WHLxq5oM+#T
z*p0=oP&V%n;m)mtJ;m?|<)BGh)HK$w_iz`sBr^QN@87x5Jv?+aMia|&y60Lsvt^x@
z*-!~)B?MvJ4^BzahNib9j?TZSRt|J#a0G8YdY@eLZ;gE~jNeGAtz9j08P@=qyU1rM
zp<F~u2b4<PE~1P+1X_c4H!Y6~r`++*fQ`sxn^uil;%brS;TAy|^fIdAWnM07PKN^u
zF)!FVwFMKLW!N2*5w_?#L~lm}M^KbHQ6N2>KmjfQD1n1CR)}mM9-;#maAg6`bEhzF
zUQcJ&yB4(x;gFAYTO(sNuXi@M+}jLqj^89j7)%eQIT*C(PsG{*9(-(k->LX9aQg+(
zvXPT=Yjfi=4NcIF0I1)N={ye;HP)qzLhIoTec}CxF^JuIOLs;(@>ywVSf?`KRr(_d
z#a7!7El_ccPK0C3du~<xE*LU!v1A9l{(KZPUMS0yBAuoJ#zk&lu?J9z!*lD!itV5-
zQ$?Ll;t!J80nf$y_#m`zk7Gfdi^w3(v1wc-#vrV{<LeF#+QZ&gBG^(b_`H@K1|{Tf
zV{LpG3p7b7%+WGT4Py;OVxjPln{D%vMEIQBNcd$HxIzW`mR*YHmcyufUh@J$2bWcy
z)yQ=Y!ji~{ToT}#hm@(NLoLzFnre7@JQdd8NL=u>yu%<2&?-BsB5>Lk9xTUZmmQ9$
z--O@3J?ed@Dt&2SKnXmT&9$4tq=q=z$p|by6Aqy*wj_X(cR7@Nm8yt#fSU{bENOcJ
z2n8F$??AHaZUn_d(TAUXi6bKuu82ZO1@MH9AE_FFn>FvF1#`Lsh5mFrKlqr=&%mWV
zhKkTon+vtoqo7PfAs+|qED<ca_L$fziT7(qOi2<X&iD8u**ug@Me$KKx2D>=_#y?g
zm6SSO-4GsGZyu-j1b4oUgF@uJQ^kh*j=dJ_=iY-%R=CAU*m!V?<~MsJ)R6=;b;lO&
zuOt_b+i_@n_|2FRcHC-l8hi{lkJ@)r!N0+-p}=fY8hXef!rVIRs#z;Mb<FsR^wlUs
zw`#9Cmo2FI&l-uZ@7WT%X3VB=mE#R)@_()XYrt`YQIJrIwvC;76F^x$#P?WGy*Tqp
zss76Q-WqN{J*|+Xa1%SaGxIf=xPUMayFHrxjw_WH2qo!%HwvVYILJT!f)}rBx$Et4
zh`+0G#8pY=_gwCG>^1E6n?InnV%G!iD&}(&#~7FmiZ;RdU%MD|xM-AyN<Kb<G}-U4
zbzsq80^`_Lz85iYyR#S2ee7$$fmzFIpVbY-uxp7`M$iodbeK7FQmoHhY9JzJDc>_k
zRj6#^ij#QIn#@sVlGkTQ6vcsix&tH`f7j&|r2+Ve?xOoBXNZpqZnn^1*>Vt6nLgQK
zPyML8tjvF4)r+SLWmJu$JI8rCkBN<~N%_5+<R#iyxMbF0OJ9nW0^6JUoXt}KLJYTw
z0x8xmnk5%MQn(b&z=;m^%%$@6D#^JYi{M}`zfHn}A9h;YtGEIhtr%u@{y9n{mj=gB
zVnpqvII*4-F|21LO;vT>^LWnWw-J-{Sd3zG@*^Y7GN^_()eVp!^cc>A`bhn7kpP7=
z@YebkLY`h_82PajnTT{BG#hsk(R5zdF;-2du*4ZXpIJmk+pvso%Xk@$i=f}HAFDN;
zk62txkiVxo=HJv#rhJ90NXM)#io@=6SAY|F4(O%f{~}|O331>F2f~0T0v9IsyHq=#
zeYq+&NMt;z`%L)+&A_%;)QsLGSp4XU1ZQa=LS&v~K7pY(xrGrLqRMz<TKV4%62v3E
zCQvqNXU73sD`8Ni+>5`N+o)(voR#S5>=LgW9&brG4h6_w+BBu`j!g{R^H41iJwqBk
zEC-wf_|F@%U7ep-Tk@PaS%ex}9ez`r9OV4DUrZaT;57Tb*R*m?G(g5YHwl@_-MtOq
zxz#e@2+s+ccVvu{F6H7KIf~uUWQFG(460faZb5*qEXR7ja*53GL8}SQ2g8h@JR18$
zpc%eD2Y|t{*h=&7MAGyZC3E#?iL2Gags86QCDHtYfY+ICp&;j-<geqQ$7Rc)>Ry`p
z0!+Ru3>Go?U)uGV{ox5@ATmn~BNDbzLMrWHF5F5Lr^bK*ep^!Nyz_NRRA2i(y=&c8
zri_O1VM}R&@2xZb9A{~r*=j4CbdP+r8K`GX(r+8T4W#sSAR0CsreQ;3PLb{}^(65$
zbJr127l$P5fTer?`(qc;QCe`T7LruPgx7=76Ge9+=Q^zi+TggGmRbtrub9d;qDX17
zQ;S^pV78|>9X|~3^mV@8iR9i5pgUyIM-@s-GDN!^48-q}OWKlvm#M~H3AywYUuAV=
zA6lLu4#}%|gP_LTipx9r&_5bH9#QbZv2)#XRQPfg^@d)%{T;Ws`p35h_Q0@*f!0Q2
zR2y#2H^jbcV{(NO^3Ey|&8-DmjqRbt#xn$%Zk3eL*Ex4Y_dD-|?>;ptL{5nr#aJ%Y
znz-E<yD1!23o|bAvFUf73#rUYRjj&HHzmrHzwBHlKv4~S^fR+ltf*ECB?SHYPi6gF
zZPI8@CKw}CjD})^(=ie=#?^UeIMM1+66_m=S04^*O-4)R^LW!HjPgbsaY!p=dP%rF
zM`7(>bgc@ZJ8AUlD&h&HngB=fDzhnWoXWBVV*?pPqV#DO$%Vpm#hogBfQ5Xs3_Dfu
zFswd8-DQ4cMIGCz;7I?BXD>)Y*@vX(xuDJ$g_2k>wk=v#%y#NZ4HB^5)vhNj_|-W?
z>`rf9dJMzb)ecVf%3e9Re_&HFg(3<c>-+`7u(X+8A$*AE_;qBx+K~T$7zYSI!ROG(
z{?oeR_XORG1L6i@0X?a&qa1j!7yhdrjPTC6j6t#FU%9i0{Jn#M9`}Y`_^|sV{BM>D
zqGx?>#S%)f*>(EE?q~n|vTU9ZLhD{_+UyIAK_WPZy7h>KD?q;X*&IdAMq^7?t<)`X
zHtWg(V*<lIXscKl!uL=0*hK9rXA3(%n8N256Y-4m5omVqo0+$<l9&&;U|5|6iD}Zk
zMF|*)p_HKG4?}+TYqGbSLiN2U$3+Y|DX&D@&QRd9LhBTW2USm=fLYT~${JP6?&E>R
z?CevIs^zJNeYr&N&coH!>QajgFD8l<FEw&uB|x2*r}udAE>$5_OU^{L03-H*3<ZfW
z5=hvx1*%CwnB+zFz>S+<kaV&RR+qw3|2pp2X$hP-_}a;pwxPpGO0zjOr5X^zu!URq
zQDg^xICO7oLx1DO#7L`S0J=Qg?o-u8Ja?Q(0*T2!$lUndwfb&)*%b(42v6<^U`jY{
zbW9bZ6reh4cxLf25JXVm{L&b?>=m{E0zm!0u-Zj}0-e3o;A;@G<i5I;ut5*|=$ccI
zNlTs#1VXnGNK(fG>xYVUmdqI~1qxfljK-x#Zu`yya82*yS0t(9fk+a9FS96qhng{>
z<DhWEk<9!0p&V2*@&ZN-s<(P}iLxDb1PrsIL|glH{UfT2Q8I`DYuMkZH}n|VoAr%Z
zOnvkv@D^ZIX;nlgfoKduAk#5%kfn|OE8Av~(uY)^uDI4K0!0!H9&ti%&Yqy8S)9C^
zl+{%XE+jex>b4UwonuH_4z$0*<bm+1a&e`_z0@`0iy7ui_&vWjlfe)SzU<fhAx^lP
z%9EdPuUm7P1^l+TM9K}*I8UoD@w`<}JJAD_2hNLAF*20B(EGGy*`>+vu4y1pK1@Jd
zseypg(mMXIo_OJlv$x2B`OjP14skgXw4oC}J^nfHBRW+F-)bQiG#wEMl7vxj_Z9Nm
zg68ex&Cc<^GYs%1bM(P;SRpbt)cIp+G`@R)NKi|p=a9O0Yx>R$Vkhcad&JTfHD5TP
zqr^AMnQth1Wo88NOX7<Dnl<DWcDzvTy<-A*6a!t#kE(+G3fWC7G7M%unTF1j&2b4w
z(p?yDy-&w{%gn-pVFwtc0K7j4DEZ1A5x;w9$Z9$7Jl)mCP`^Q~%y16|LOMDt=ngQ@
zw+eyhPx3FqM5H-PacYrn&xC)rRD_<9<y;kXGs_bC8tup0!Lt$r8%XR>8#=H;-e?Oy
zY98DhPo-k`P`}jOA!E<ht`nG4wi8l|;<2!BruL1>VmZm#)hvPNAeg%smCK}g(_w}i
zfQ(H3f$OS0Ng7RRu9+<XitIfK`}Tox)-F`s@ovCQOtQr(&dZi%)@-u&szAf$ETbud
zoRL;e#l5Rwz!_TPqCqs!>xfPyd%NdEpDffh#6GgC2UiFoV}HQOq`od=!zy7&sEi*0
z{|NjBF{{uXKxc{>Ueaa<-)?Y=-^q9AM?0F@RC{HqSl$5C6<GRze&$q6EZCOe2fD}c
zFb!H_dKB#*U7_8bS$<Y4O!z%;q@e{n8>8w~D_2Wk;Lgw@IO{-wpLnx?IjlkQla#{b
z<<xD{Cu`VrN{zQ=TicslAoh4+{yr#6juC=qi^fq0h2l(>3Rb_RAWz=D-Pi@^Y}NR8
z1dI%OqiV|tGc(W93U*j{PWGiA98K$<;sFx&w0V7OjC`Or?VmeCR~MErk^rrL;Q6l&
zbSh>53?D&i<rh}2on%N@)y~LAEpk4#=Q>dORR=d-PcV@^$F8LOA2f1y4Dr*5M6_Wh
z0K{1XbcdfnjD8miUOH`$)^!jORh5F>kU3}gpIi;WRb!{cl7~5qjepIX0~#{Q2o3L4
z%F2Az<)<bPNRl=w6dGJWvWoCVk;LddSb?mo*M+Z58IE*H7MgDvzXyuH-?l8j2byEU
zQFkz85=L%Sb`3;^*&cdqz7Z+FOqVZ%2Qz(8YC4wR#4HA@G%%eaVA1xq>@tmSCa7zv
z#;HKNRswYs6K8+C^(R}o9|K1n(Y~n=i*wo^oe!A-5y}{FZo}1y$D|bmEic8$(lp@0
z8(wo$$rF2w)IL#C=3ld+IbKEcMxdv|?aIIm5f^4%T*Y~9y<zD+iFal{0rQiHnEirA
z4=UlE8V|?fNP-h)k8x(HeLTj#Ljg=Tc(;*`=KbL@iDotR7UBPXhEt?|+tF@yWXy(#
z%^1gve#LAej)ufkU15ZguOnGng?IaGt0BEbPXX{F#3EzNr-LCA%kpdDGb#N$TomT!
zDWVJQN%>p?@bk{AAw<hr=^v<x`0zO4jCjG~vo|2fcKlX-t=ev231rHnSt0zgJ2--u
zfBrsYu1tvMDRArqhQSyFc_{rwkab}uy<MzC9Fe2ass(-VGCQUJrz&k+VBxFT^l;Y7
zI)CPV?ph{s7>vVL)-nHB47jta|7^ihdMKaJ)Tua28qY;g8ooKT`Prk__O8Q+x>`U$
zuExnkQV{DJ()Up(bSRcc7B1<G2AAX66R+i|uVgE+JTOhwNSRjPjnn8Z?nR;7sevWf
zXvjV!fl^d4?ZY{e7-SNm2$wadFC09iYcRwyWT*Dy$W>6aXwd<)30K@Ku5*02pSx_n
zz&&`FQYq^)j(Ipd><<T5_n{n*?53NbU4H`e;rwSKAn|RhLB%yPDhn$aV`qStThBu=
zmO_!)Z3hk?C)7n!IYN=sRwaC{AH-TnQp-)ckj&`&#lO<8Gse~wEb1#9taogwT2!w9
zM-IUT=}!3dIS(Dw4h8=QjN$2?tQ}27cAJFp^kLCi>?N$|eaN57N--h^xz&>Xzv%XK
za}x#dU}j()on5Nv7}P#~H6Q`MVDQdRM(7(&38~RmE4a0SGb-;WZ=KjD;Z1?5K^~go
z76<U+Sz|XlEQRv&C!KlfX@p5mcw0;pQYPxn1WT{XsO+o-?tcJH|2QN&jl-BFAWsTx
zQ>}XfL@hqteXBmMDzI0d>)S@Tl*DJg!2cj!Exs57zbdt$%3UBylT`~`<fxi7zH2|q
z39RF%W4u(8iuBObK!4K*w8W3>M^-QAvkrk5p)MLRfV~0S)9J6<X@<sF)ItR3JstYj
z@`4s-KQhPXj@?w@ED??u-q6-l6{*C)!lW!ldIbApyD4G{Cs6T+(-VcaIZ%Wy>@KkP
zi+pUV>97PXa)7A^wHKwQjcXr>JWW;1C#Rdp(F-DmpQqS^n?nOtl>mbc{$iZK%k`p9
zOwePd+j%T@YJ+$a=kz#}2%BX^<$|WC@*E8QFcE(y=YZwy!A_|h|6q5}S-2UfS#AG`
zcbWF90rFm8x?h#fr{#{jVbl^7g!Qoqj*Z9=9oNgTvPV;d{BC=SFVrK|&z@)UX&*y%
z@P{Z76`Rkj4MgO*Sb5_Jps)A3U<VfH%BES!={5ekT(g+~<R(p})uYP%W^H?&9=+Vr
zW~)6?-P<>0Az{^gcO=AeYQv*~5l;zYzLyw{PszD_<NA(HtJ<>c9YsqI)6nKkn8Fu1
zfvBB9Z~7JF6qEsHGwkY&mh*$R;=~C`odMF_$Rdj`+rc@T#OpbXc7Om*K%z8x@r{FT
z9ur@x69Mo;nQROmx?%iS(6S*gftS=h3g@m^X_Nr1@|mn=R5?w7bZl-C7(RCRZ5xVh
z=pbB!?w#dnxRHM@18o=2Mg<_!UHO||*W;J%bvZ?FEjG>(kw<>Z)SDPQ9ahiuH?Hw9
z&`qYOls~4FHwoigFPT%=9hfDvsUXqs@EB`Y1JIathK{A5FsZZvZ7G<vdv6Cz$U>jU
z8=h2y_00KL@X4TPlES8XJT6Xuj?HIU^Uzk|7Yr0);~;czQSyh_nO<<bb)4$(Zw34l
zF2a42K<9)f#b{KCnPj6Swk8q5(Ar(xyi}v_`cy%spND096mv_uz83xDM>)2#wb?FM
z)U>W?QN-30-q)HcXc0h<Jd2%sWy>^UGt85(+G8kpO*3sh@y{Pcr1=n#WUl9b*>^SX
z1OH8N>@-SnPk&@XFb9!kP|JP@JwYsPdjJ6h<fjeW=s>gkKLtfibo}bYil9%$MOrZj
zZqX-W_Siqg8f=7Qe0yu2UZ$Q1F)fgkAEJ5)!AV>f408B7-B2=CPO)(QQSST#;8P93
z>WZIgM$1AY-J=h@QnLR6W8C4-lSZdr<bbh>EX2vCbTYb(4%%v(V@@6?;u8`T6G=`!
z4PmLmWHAG(D1Wnlp&SHNFN7|N64tvjT6TgrASomEU{}ib+iG{^c^N2|!Wugfl8|wl
zrU5T*LBX_)cpCc`IdJyoWOyF+BJ1R>K{6UN-{bmB2O+u~RyhyK_vjfll&J=v5wV?~
zHw?H<FzqTvQK?<c3BZFdix9%2wtRLeOE*M7ab2vi)*jwF0bjnc4A8y$2m)w957jd>
z73DffBD&~Jc28LN06s;=Ebmqvy;S+am3ubjb^iT~Qc6o%Gx)2n3O{{5fnx0=E`AzW
z9z8M=Et;B}X5hy{qV|Uj_d}w}N1Jnp<U&ok*X_zPO(k$!LhaYmC2}fvbmXy#5~ZZ@
zXd{xQ4K2VuwpPeB7gONhtv)yu^NhLPFx-PA|3F!@eC*e@ju-P3W|4J%QKg@xOCRbM
z?N8P60;6pk+5N~4ChDH2;Q;3E#%4A_Kg6$@a`qe}zun8IBplhHlOK9r0HGy7byWjs
zOc<Z<{>k9M@n2LC@oifdpv(Me0|>)*<g+?}L-0!5_)v07RhfZ|zAYNCA!mD_Yw{0x
z#iexZ4{V^aO;I(0DHR<x82F?uflt|Bn{gy+#_x)Uzq#1N6;~8+18EaPRIoD4&l!RR
z+ZLwiaaK)rJQN6S%+LtQIAh&*732e!J8Q_wo6*MBr-<6ZHse_wGNplwO3+Zm8EnsD
zfw58&#-79pg0bDZI}ZWN2eqk#M<T`xJRAp0A(|mNPVDl%3D%3XeYM@0W-;Auj_H-L
z`VmEB|EjNkbi0+?_!ui@5?VMxakr^=F9n5Gr+xUons+M67!wx_*<X8)?jaZOvpaZ(
zP&%5rVBsi=Nsil%hGa}E7TMP3d?!6j@-TIEcKNKFOWRqL_bw*4YOLIIaF*tk7wE1a
zoUHIA$zZVH%-CyBT00@fU{yxb;?+6R6QKWNf{H>5tfXM)fHV5_A-7d~+6I7=w&5Vy
z89&6hkq4*}$Ztit8mmJwn@?(Y?qZXv`NrJO?@LZHv&-02{wgQ^@Urhsi1GC`FlFrb
zj}`Oj$(y?l1L{#{;pp>&Rg;YP$K1DW@$!gJ%YKztBR2w&_592E8Ix=>0JyDDHam=Z
z=_%x(b*Il?#Jii{i3RkzS2mI9-l^sG_5Y4RBG2xo67YXQeAG|ve*zKX7=g-w=)G8G
z7utG3d}3G)ONdIWN1c1Vr$z4QIGu9J=FE%uXoA{==gD6C;6b7w;fb2}S13S=XkgC*
z=@oA2w*=3~uUbXQr9P%C!1sx<*iHH25M@VPZTvkp6NxqD0!3wl$JSAZ#AGf$*~P0s
z*ZPp00*cC`0DmUljN}{b>apv4rQNXHkd-<P+sdUv6bim5$4r@mUfDONTFoVo71OMx
zUAwRNybc@uKpd*+{*)#RSqQzP>489Vadg2`8sxB8jcMr3`q<FqG^tIC9;E+Mg*2Xg
zTD}$Et#klqc%-X1{)7sYu<<HgLT<jJTBj_{4{TZ16vFwpH<qcPuY8k^OUTpZQRFp#
z{&Dym+oHyf_vxdzD2s;tV5Po;9x`gaHBc3LbD2l#TiDZGxRT<iL$*xu{~l2lQ*OWj
zsA+xJPEEVzJI_4&ne#iJ=XcqZVM6QsA%)1~UEG#!y|$%s>A%3;F@C$ZMRGi?r!DWx
zIRR3pFnUT2+81z7SLiTyu5&K)b8K}>^+Zu_o#G3WvjP1S;0apHlTFX8Q9tBhspG)N
zE-o5L1?U$AmzeVD8H9Or#XW@p%pE%Fm}qmyx}M0%diX%HvBgK>5zUkD2VFdnq7?q7
zZest>-r#0lq@Jv*2uC-^o+(X3#v&;2w9;8lA_G$0MZ@AKhvN`b^Bbt?$zf-`hFSvO
zSI#2#&dixLaIi2>F_~m+C61*xY)ue2RE#LbXW#V`Y%Sr!keP<ozm|NR1Rw|L+U3r!
zT~&1(w+UdV(b>8nKihS;<(!F|xF%yzfk^qN1Q~6EuIPqMaj?}gY+sZDukT(x)KcI1
zLw|B$7KEA6eCho2ix+x{oWzhhwOyk&jvvw|>0NrlosG(O(nr?u;1wv^x&tuEDnsBq
zf3|<XloK{O<>UNpiRErquwxj-!!T&{yY#;OrD0*N{%~^oDb%A&!NA--surPH#tcFV
z>Y>jM{vkK==66wlji2t4nRE4wK3pHFi8i$Z2&B|8*xLoNduS*Ck^P5^_k&guH}<25
zbUO9#E=_lY!l)l#rnR=g_<@wL>r(O?!IL@wEZ<l$CRD{y$(a>KfozcBO8wf__cS()
zt*55avaL26O6=KH@@(E;A+;MU6^g;s7yEh*NnHX0rZa_K_9a;wTmwD*Rl3~~Ihr_4
zW9il3dfJZBgwLKRv7xff%m>X*4ZT}|!oFA)WQ{Y)+6j8W3PWI0Rj&?kVy8HiRMS#N
z(r70xU3>*rl=vbnSW4$ib4#RuyUPN)Vf5LyX3>{LHs^R&^lZA)1mH=%nrVt>n?(VT
z+rnsU4+MoXJa97xSBtqzC0Jn`l{Vp0?6ZhqM5+#$-Zei2Q9?9G#5*<*{l}+_A_o+l
z5>)%8`Dgm1l2QGJ>6YOtmDNc@xDeaLg%88B@E+1xL=rN7*Nr#NSTx2&xw4dVsxI99
zJZ?@@8!B>l+rzS`lM+~+nFP0WIyGO<GQ120rkyl)Gn#mvH&c!88{UPVMqo7vG82Ra
z5K??nx$5ec1?w-=*Et)cMIkGXK^c5XpjOrD7|OA65(~9zyHi~p0hm8(#4LrtvhM8v
zJ>zd@Gm3LO5}-0SxDfKHNfHUwT~C->7^HR0Q@I3wl+K68=Tz&~Nhd+X2Chg7Sr;!=
z8MQa{;WUpKF*dA%Bx$l0z+Lq0Lyn%fp4CIuW2w7~)>0a5492sE2)^^V%S`kgs_G%D
zJq~+Gh^4r(|8G0y;*l-uQURMabbIHtJ?`RHxKmsixi9R@GHLf@9F|Sard(m<^=C!M
z92YmK+lBmGD{Cj7zP0+NhZ~M25bHAs1EU4J?$x_cW4JVAkPb5w+!J)H{XigZVBW%t
zs&L!Us<sPibL2uOybFhQ)Sg!pn8g!_ELV>VD?G1qtEe-Ww44}JloC!rae7F|1*!41
zgYELw<z3X94$dh=l2<Ti3Oj_KOilL$EHotW5bViWGsis1RC%bW;P01WSK=EIa+yex
zHnAqGc<3#;nTU<j#=E|v?eFDRaWtytqO*0?a03ZBTTn?5bXGhMPxsakl8716y<n}y
zTBOsZhBauf0e9?KZ97%r_pfkqE{*HZpYw%AF1sS-o)01B!E|#IM~K&zj8f(gOrc*w
zda%vs*|PR*5`j*TINAjbSn|xNJ2D{e{H(<UN$)e{+<7c718+=>0LWt{rUhKPhMPVq
z@6)me-mc#I^ELhG3&TFu=Q8PjG6ct8Q?4WK+G24ma^b#q0Q#HHSB&?r^=3F_E@p-$
zY#QcV!);&6?)oMN<Y2qQaM6(mv$)=c2B`@8I;}0DUnU!u1oVi!kbR5RdQ?v`B5-Q_
zbgPvC`)n64)}3#H3J^7DQfyV=U*ign1GoF=jkE34iv-8Cd!QLBvQhaDkq@Xok?^)O
zBAU})pPHPs_?Q!+Kvao9iiH@a3BJEBYOD9eg=+6`lCOL^X1nZHZ=6od|L6&$lLW%?
z(vA!b61pr}!ycoSs8kE3b{Oj52rvd7pGX{wJro1ZQh>*iVA;HD=SV9f1U?cvy9dz2
z@Xqa3FY=4}LQ#Rq>K=$<IrQ5L1Gd}ppAE2ZMNFOEZp<@JeNcD(j@v*SFYJci8Qy|f
zmDZn+ftfr+q|MJCN@FmW0bc=@MT2W8_|y}^c)(^A&9uFo_9J=LBEASKy?mo_QNjvV
z6asYXCtG?>U89RN-@_z6hnLbS_~O6BNdJ;p_BV7^#m;x*xtO)nk$%hZEr!d!vYQVt
z+bug`MTH?>Q71z*M#-diXOSygqqHF%Xi?@*@Z%H4Zd)RVokz<OQ(qR0s!CST%Autd
z^u<TrC$$&Ay+^V{C*TV~)CNt%39p#(@s=0~JKrb}g|eBb{2Hd%JKG|RrmK47iheE}
zmB2m^3>~jebSm3ywsEA1CQ@S9%eF0}V``d2<b0V=JhIq5ugQ{LZf7UStu?4(<FT+8
zS+c-dY+6iNZn+tQuEx3qR7{%%$>EM{HPO;1x{RF?e7A#~%+0chps*~nHY7xvKL=z@
zI{yUM=HnXqT^mT3c}RVnA11EHHEk0--O~-D+e3UMEM>Z4jrs@KE$93VQf@~#{-awv
z7r>u{84Y%pTI6{!g8#VspknZ1c}g<gIT$Ybg1~NymeYf0)dQ)W^wRn4zy#-S@S0qQ
z=!<+$P2yMaWy(0W2o<6RIzh;}_a>^l_OX5Nb)+dicz_O#H03lXQwAmqx@CRsN+=lF
zE7qCCd9okY=f7XfDQ<m*C{1DL3v?08W<d*-;3~a;8VsB;7F7Hl1SZz$$fZd(7=>B}
zm<KP!(rhqG__nhTQXKNnOnv(aDU|rk*$T)LTwUMvvHg-%QoXxduQlOC7wjxoW@6_W
zDO*>jY!HmFDa#T6+jwoKa7*8f)QBWBSu5FcwBpmq#-HqsbVDhXh$_YD%4n9D@RiY)
zH;xJz!81H?8boZo!#=nek^wg3rJ5?_W-(7ul9P6U_Hhk%Wv4{NnygRzs-Z$^PsI5<
ziDDK^69dXfJ{KElQFPIwFr%TDM$qt-YTrP{BoxL_9A!TFWg|D!AA6kp*|O_da$wUY
z5&<%ac2Bv`cRQy4>P5%IS-`aXDM?RCmxN&c;zB-#vdlm~%j&ch!u29=V`5OJf{sD9
z^VF-$!0DD8)23T~+;PZE7!P2g2@8*+D33AKf_27!Sz0GUDsfYbq`L{dDBpL7-TE%#
zC;I2ZVfG8me$eao?!%KT^+-BT5z3TlV@wJ~Z+@Y`SxThJCO#5B_<F&4jnB&+Z4<%9
zMN;~f)$xgpMB<CGzI#SfDE$S@#tB_skAj0%D-LUryz@=411EuK!Y2;w{|1p|D(2RR
z9tS*CC@2|PTY>9eVasQL(HleSN|sYti0Oe|(+rV)e{fk0>?2C;Kb-ytKii@|pVIr+
zlv{t-XiFLqT3<FSJNDOQ+^yD%rRV=otTw%OuA0Cke0Og$27&A?0q^tTr7WlV`35ih
z(?3bAidxR9*2P=Bm0W5MF%Y7za8=dUTo>~?&<6w~AeCDXgdHmPZC7-f;Vusudo44d
z`^#1fyf^G8t%0_5y*Kb0cy~xc?=g9!SD{LZC)osIpQrTp(bu&6d}A#NA$5`R{&g}F
zuMrdS@YB>>pTDZygi+nYUoX@z=_dK<DpBCxb7Rh5KO!U`bm7vuiK!{I2NJ_#j`A|i
zZ(VE5N7-VpYI*$@0R+nL`J(YWO;X-1l--=pY<((D@V()!9J619&)h$wLax>rJ&Ps7
za%{eF`e-0!*zs;M0K+X5*s6~BcVX_*1e-_MGA^F@;M3=taD6j3m3&MGpf&s&1=_?8
z6ZfRtYZbf<^;0hDd-yQx#MOu%enF-gdlDG1Zf?&KLZsdQ=5MaZN@g;qCNIe)I~VOh
z)r`o28M1WE_M2N!n9n`4zkh6=9(k)*s+WX>2|=l_X+CeX*h#pf5%m;?A1#iPZ5Yk0
zPLkZR#MNpHAmMOKOCxws56yY&Yry$%8}vF@<beCrvD(J=1XB6CT9X?EcrE*hEklMa
zhxHcT#B(fluNbF*t*}q@W*Wr}jjD05o7WB`W#9qiPH=JyaOctf^pUtLpGZ^3-%qzT
ziMN|F7y}d3raIac1P|M_kBNU&4AG^ykH@4ndf}D5xl*6QIXl~Vy&8R$cYr=e2Lr0=
zMJuYf;UWaI9wn%vhlDzh4KRlJ6yuFRsxTk%33|3w?n8)@KMM+a&f~B-rF7TjsXw(;
z<~Dc}6%GA7eTVVr?$74*6vF<TC6EprnyO^fCWW&gege6oe3iulo@&VNi7S%rmbEeT
zT;z<~XrqYfv(*>@pjB}mP4G;|7x(~%q1*+ML(My(<@s)a8rGpLY?<?X!BTB`(P6SF
z^F;*1TfRi%5<x7^s#|K6=_a$Wki4WEwkM4L$NO>MA~^lGceT3^3yqktmU!sWFx*(N
z8;?oga@?D1-*3)`QmT?9C>N|1$`wcc_Z~sn<|$VKGn0TT)O0*;^t?Nz#7#5(47xTj
z)NHbuDk!bRD*zz09{E-CM~r^~f<ZwpMW$@woO?*adTjG2qs74tb37_IE7H3mYw7PX
z^kZFe!T==fA}~$N$jP+wPPPIqvn?@P3=Ec!wNmqMi|(NPEO4RYcXBFv^>@GfDJ%nz
zzc`I0RX=xVxBub#&y?wZ611Uo7-AmUT2ayjM}E)5P0c-lSoHh9P*4(QmZ*;26h2^b
zisiXX{OnzCI4R@Uj@Q0sfG{WyvUfvnkgCLM`AV@4=_dEa{hT@>M&VjFqM#b)%z0gV
z*VjO2w*?AgEUF#Ktvzsp$ZrIJA4Y=nu1jGEjdw0eBy@7anJo-uuqYXeFMf)G&5Vm&
zUU8Pg#luI0eQR^*<0R<S;Dex%*#{AKB^BVyuN;iPNMvk|b`H$g-$4A`9iGTDH2RN-
zD5Gzub~yex{n+*$Y6J28)lR*1X^zvZ2o68E2()aUxHC>b8U}>R*C7}1yEes)g-DBh
z2xgd^5Pjo7Q%@$gm^}ONoKl~EHWi3PKhE76U4S7fj4-yq-)@09@5F0C6m>$+Gr1>!
z{?helEc9(M2XD=04j=QsNKzFEbdlxm=H1i|lWBP98$AYV!MAnT3>hMZOXipQjZ`fA
zyN;Xo)K_BZz&dHl`DLkrAf{b%l$lhv?U5o`xFj}Y&}*)M`GHjwSA~O1ZWxu_;>M;l
zZqdJKoJ82bz)}DDeT$LZtq$=&7B_>pv(ehMBV(b!i6n6~fkDt?N{OsxJ|@!rF&)O(
zl(#_ofgm%H5MY}j0b)z>H*x46aOAFF3@gRVoKp=lGH=@k`xgorkEQv=>v6Z`h!w<#
zwu~WH$#)M+dGkA}r6mxYrJp<??{pKdVXc2}v3j*1rRyGu0nI34m0{2l`t&X=|5kmv
zFPZ@T6R_)$diG*gc96O$AA^DhCev1x8I~!3m*GJIho=c$Ooz6>a!}w96V`_{p^Z|!
zpGc8ol@+$>e5GkXsk$1u4-VQ#Sa~PnfMLah^qS#**4TPCjng;#*--K84R)|Nc-Cx*
z<Rw_k34{s$Np*wiF7jcvbD_4yDB~DN#WDfgnPO*ZzyHS`gYEytOkVd%7^#E0#li%p
zb<hQ?h>rp)3l@89U|InWG6z%It-9&M+))wZc+iujPk@0>+d_isR6)!QI5D`%@&`+#
zC{(xf-}D)r$9@cXZKcw{AA$x%=(hoSl^e$o#HuQnoz0LB!bKY!*htyK+&+D&=OS2-
zKDH5{!&RisO13E;H5lf3D1o66Y07l6*N?2)f32hO<&uY*gto1^6*Kn@YL3z*5Ep1-
z<9`Bt8nNCIF~gQa>1bLwGTa{A@uXo{5K9d$f+Q#U^!ush2Y#qEgjV-DHn<)OU#(}Q
zNnS|<-%gi1WBy6TZOjpDOZKcm^sYQ*-fcAnc%|X|lNB)dRv0>kg>65#q@8G&vxnp>
zT&O&*!;doOy4(Xfw|+@BLpivv%htS2Pzq5s5g!@V^;u42i}$s1(e6T6LgVPcn{+%4
zxHJ9siGe92!wOPBEly5+eyTro52R*O>~ljIetPPQTh&~BGfS+Q;-K7=|2W^+Zuqv{
zWYvkWH$i72B==Wq%mz<0kI8P#&dO8p-NLymVZ<P550eET#30PxzKVl;AoA(U0w@VT
z2%Mb7F(Ml#TSUnHeY~2tx!>yEw7u~0k?K=py24i!boV74wji@9auj5}7o+BE1$JN@
zN!&4kUz|MFM{RAj-(9yO#>y0_Gk?1~3MA(ng#lb6l!mki!~Uri*)(VUTbVHOx_=Sa
z0NWKcCCt4R%`H0PpAN#c7hg&Y(OT@$z6x+1;Wbg}OFN6_#sbg8iN4ZXS-r#oIu!4m
zwFE&pqi$c7yJRmXf%}%lLf9yjW<)2&y7=pnRM!Q$zJA}QwSwSpm*p5G3Qd&kNeI&5
z$4PRSnCv)%Qjg_Ceyy;#_bbziv8xKpqE8v{D<796={m@~s!U_lI@AerqJGwa?)pbK
z*fWl8*6PYIt?mQl9zbMMvhZ84+s&X(kA)6f6t^6s%`W?=Q4@p<i&15a%#*T<o$0Zi
zQ>w7xOhywn`k`}Tj;+ANo5vj~568VlEOeA*-p9<KhxR#yw6JUlpWz2#7Ao7zH|o)E
z3Ip>;&Urm%7NU>FT5^F`KS9n9&4F@{=B#sCk6BG#Tx;jL+yaR78t_SoiA1kwra*gb
zkd^8bHot(}5F9`Tz>Up%bw3>g3{Y^(6$eN}vB`yZnmP$Wmc^y<;6LM`O@7{#J3nMJ
z|1z4r)DV>wgha`Uv*puqv0c<xJyOu3(Mt=BgzK08i}GvQbRhdX1RGAt=~(9@-{bQ$
zp$dF8vx=_BYiIn2xH+iW)sxy+r6~Y)?G=Ul1T}JGo2zg)w$`eUZX*USA4CH#4q|{_
zm7v%+MjLp5?@1&aG`@N^?RLy1yrU3h2q8(|puh!@%j76z8uO7x_Vkfwn^7o8n<}Ry
zkA#c+;>gRJhUPUVWyUwc)mQcow7UEP#t9qhK2BUlnB?#ps@H2J;?9lAXMYa3jFOMM
z<kt)>MZQDGw#N21O|npHE8}jnqaqqon&p-UnXiEJ@*<}P^FHj;HBa@EyJe*WL5sB@
zR{X;rq@}Fv@0R$?d~XpTDC=XRo`EMLQIiL;XgZ(Y;0KEv_l8l0KS>t5M4I7U_um0$
z6Z&tBW@e`4+H*P+n*?)i$J^4ZwAlkN#>QkP(i$gBf^Mk|^xIcBon3d#7bhAd_}Mzt
z2^CCHteoxmjEr8$#Ll)$Ftt4MyHL0|q?mpy){{OT>S@mZp$|H%_nZY26r-Px>m;Ix
zrnDexdr$L)vKj2zvH{C;TnYOluel6rkx9)#qXkhNIJsdKaS?|Zjo}bCWmHWU1&lp7
z>L_%<n`l=zf-lRhU&GZgs(D+0DSwfYrNt3QooWon*{leqKah3aF&BBl2WT?!uhUd8
zrm0K8D~|gt?j~nlZtu-`+~=-dU|O4e4J(K@JX7<EgZ1D<2%qln3RS`7e=UzxAh~Ga
zXrdIO!~(s;Q&?p^xUcd(84Ca0u7&3YY5cU^21Bpi>x=sc_z(nRjN(R!dEk7o0CLs(
zVpiGqLbYP!k<037_=Wu(EM18hL*bJ+y~S}~Q3rCvZPD{os`|gTwH6r7Fz_)dz~P$g
z@4{nNgyBZSld{;dujU@>;m-W$r+fv-9<)W0=scJ4)*1%h@eDOkQ)c578c}pUhI^Aa
z?JF)a2FjuwPVc*z^2)qtnlmdr`Ok4W%!PQ7S)AMqs9UVEjE^L~<?eIxtWE&z^%+0^
z*Nj)Q`YbuVOIQrOe5;U3Gd&);tEDmqDszd`23dt}cuCgSw=Iaz413^~y)PK=N_M<j
zt%-wCMKs&j;F7$UgA2~=oLy%e4cZzI-xmmMp%eoM&f;4(c5y93?=lEQtEXg;WFi13
z?;l$V3c&H<EecuxY@2(AG(PTu<+}kFZ)>TWGC~4wNK8W69}X)_pqhF<6i5!V&^-r)
z@=a@P4{(*+3~kCrC8pdO$$Cbb!PrY<M=9jF4vdUa;VuS?;kj!AC;g_6#l!#1xMCj4
z9@+|&LoXK-+AkmZo=OqF-`Hmi9O!nN`m@h3?(&NLqM|Vgrp?s*Iv&Skqk;!>7DNfM
z`3TNLGqx~2b<BRPlYWY@J>ZI>gE-_G-x))c#^G;Ibr1FL<=VE)tb5~I+TnGzY&o*q
z%!m3WInRL+J_FC%j7gnU>iZHcZvD6DJUMvv7fpX*nzOV1LLu9lB6G|?F^<dK@{DhQ
zn>Fm&B_mGZ3tPext=UfhUOY{immUSTUwqIKLN3vyv67cHb3T)*4Y00NQ+6TQAj@^Z
zs{i|_Y_(2`EsTREBaFkHEC!cRJP5w@d83-nZy>>%QNgu8=-7!Hy%NCzV4<{&AuCEd
ztp=3g6D?<;&Rju3^OC1Ib5c1?04?H~N$xM`TsfJG(rQ{^xt6D!u&LE9RL<>3((8X~
zo~>rFl*$v^+57$lS{R7bc(hrPKAQPvAwY&aS9>rWjhh?-nk6QIn!e8zm6dAu2xsAU
z4{RFZ_!zgYb5`ffYJBOZ@0Z6{b~t!OxSub^M_#VvtCd_=;7{c=Z8(;R2>CvPNo?a)
zfgCeKhBqmnTX+_GHS#4a(*1@d!;J}ELhw#)D)w#kB}2s%7|)m9{VqC`bs=x--e64j
zw{G;a&d2wd*{$LT@6`pu7Su?OgpOx~Azx!Iw~hiNpsbQ!Qs3&jt<j7*oiuTMUk44~
z$kE`~_tR3IM$V3qIo<#sb`hSBCHWQpqsQOACR|CwYACXFL~}qf^=qkdoUj}ZF<vU*
zXp=9v2adE|;?~F5L)j4Lcg=2d0x|Zv6F?4vBDVF$<0<IqGPQ#>${yvxUYyNrr{>+|
zpbvu3xLv7*T7UuV8;y9T7lU4*SWs&BJ9Rd!vP0FvZn_S;r9?tb%Hsq8ThR`*%p6$!
zx6ksqcU^p3MbXe<XzXX=@!q=^Pe+NUXU-#UV<HSl>VX*xEOU8PmxzE9^dDIp>?p}c
z$H)}ITx;pI`SF1@_ngR-m0N@XS5a@DASHk?m|yrLSN_L66!lbS91e0o#Kbo-yDoQ3
zE2tFUHX&7q)?dTsZLVRzcTC^mfX9|M|G*!Pn0`W)*GK|wot3MT4rn2jYyy_Cn*fKh
zY&S5mkcWK|*X6k}H;SJ5f36-DkS8GO{jF@g`hCM}s6f6pF8++XN+j#Xm7-=tm*hAO
zq;0j#vvk68acJzA0pF-AC<)2^$im$hNgZxzLg7(uy$^u&BPG=Gt<lzwMsYdgzq0kb
z9$XXHimBDdJo-kUo!xA`b?wzN!aGF2S1YcMx;JS?D5lExPD<hulb^PS$y<N}6`^K3
z=vh4A{v#OF57_<VP=ZzY#p=g2FQ4TrNBJ4*UG3DyvczbnID_%yB<&Qi6`phWkjR_p
zoz@`2Srwj@lb@?ZRaLPJ+eReHR^v^;iUv5&uYB!`Byx%iLhVT?^vy(|co&gl#Su2E
z7N5Y0L~S+!)*p;oYB|d;{rWR0kuk14y|Ey@d7Teo<jH4wReFjJ6s>W6JV{-K6nntj
zkFnIzrW`p{@x5pKM^t5q(nRjECwqm6amvE4iWyA+4TP-PcR!oecNcKnaN^mMXy)fQ
zY2lF+kEPcwj-Pz}Wp+R0FaV7b3)Ij}6zXH5F}RJ<uGs|c5)CIWF=|f0q(z;4?x1$L
zjJ4NxaabS%PZqz;_?jZN1uxb@cF__BH{c#J3k;VHX5)cDGIrz?V&;fS(OyKxU-c<d
z<mZJPr?TwxvCn&}Ay+-lKgiMlKmki(FF<oEGk2p?GvgRlRAlMGde1GYppq0=!*LjU
z2p&~~&sdz=4?sq)jA*n|fTev!n!pG8yal+UbytN}^&+a95i%Q(%6=ylcboglW&j5p
zQ3LI(kvScs+cgvV(4@L&?D+l-nf@1l@!(~i{t$%l`>4n7MQZ?oTG3vAmg%D~;7Cu?
z;45GCzPh(<$)lZ@GMzRtn7g{2*s8$#`oJ?T?Ys7dx=X;gqHnh>(uT~rg%Oh@3rBj?
zS@5De1%C7Q&zA9M$bmEt#&N;rd22rYdv$DJ=T5UrN`KAEyTGfZgTSDnLoyTGpFqmZ
zTDO6$TPasTNI5I_YUgzhPE6hOf{VNc7>N!>iN#!mEu1ZYcj$WTaiY@r-=F<S*8>%?
zZ}`u9W61c_x0<Wdw`oY@+CT=vVUfG%EwyS5VTM%J<N51Vc-bj#a~lOY(g#&KjsVA%
zn~j%TUfEnXp9eb-zq8Z+S@^$}t-*fP$TNhL<(Xihj}xL+C_!bD7LGT(hl|2^4Zy&8
zL=RoljKix<k4SlfckA*`D2CIzPtLx&ynG?<eq3_z?o5Mi>G0mS&D8aFAt6d*_T8XP
zBWQekxreW%O81h`p#hoJ-J$$R&b~x<UUG;iNiwQ|BZUHe{EY%FkR2|*t06*NV_&j8
z?5D9)oYKb3-h5PlT36>S`cokHU{rHEO_9{Vi}2~C)_^WH^jiI?)vq$N7OQ5PWEO$V
zU?2l2zaP0at{O!`&mke`1Jpw@rhzvS*63oCPYgEqUxGwKjDUZhx*}&To1ce0zPuOO
zkFBo#r2)(NN(DfBUuzd-D=@K5tL4;I*XsyO^w2cj6wQNR@fLDj8W85;&AP$Zn$(K@
zHrQ?`w-40t;Fz9<))9_a$Nmk=It-roL#G8!oiQYI_Icssy)0k8kq|c<vh(1#PH>VW
zEO(x!{heDa5$jrJM&gjiQ%<z$bbfXx)<my^4#ja-o6AqYWy?Ja{>RT1TYUZ~-iGM~
zr@76qet0eSvhq8vE=z*$k!$#DDZ3U@$3Q&4g9zIlS|U)p9(4TJuM%v-2;d<*C69dt
znNy6bLG>1;TS7LwAYg$X<rIJxl=XrRAKC6+*eHj&lywjM40uS?zI7Z8U_Ljc%#$L&
z;Pv50|3V*_jdn<fQ3r~1xB=5u+|+jK)<r|o;7~f5me;AC0Dz@9ivixTuW$D4KL-U`
z-Kr5fN$f3MGpx4`&AI-`3KmR(o3+ssg3GHMEHE#b2ra~%41-1S_*E?YWT$@!9TkzF
z5Bzh54Gw1+q>OoaTZ5&x7EG5cO!9cl?v<>u^11&khT-{KNsxy&TpD?$MZp0^2?ZOa
zu5KqG`m-V@&`8TsFgFE!ZO*gNzJfh*SoQCJO!dB9<Kuk>o{p@&IjOu~DbY4jfp^P5
zVkfrRBb~qMIv8RBmEo%2@PCu4c{$#ISW@!CaY7JELd;+kPBg7nP|@0B?LAn{{jb%B
z7wafTt2v91dsoG?x7E148&DC0R^}2+>Wn;^I5%1?j|FkW(^uX45)OC&Z%a_CS30jq
zy$~zgJ1OR0$w@yEO#^SK_6mnVtQ<nSW#SdXU|^p8gbr_D2AdlEjR%V{liryWcLZ1V
z+%>*oVRp|#RZ8Pjs!Hs^3)Mal{G6ZBJKqjWZ@-+1U>DB3fEPq0DVKTPmJ;8BY9ZqI
zU9UcFuVJ>01_?RFN8DogVJEkNftT@j84g4F^JJ%bc%PM*m8{+oy999}K2`~#PCcQy
zxCFD<3_k=sQa&{db<i%Qwt`6g5zMLc5VCr9awH4~+~eXM5ukOYn<U>eJcu1jD?BCn
z!NDJ*sir<!;}@->2*E&Ol{dy)I$#OhaJSWlHbup1a=c+s3acnj*&Bqycp7i*yNG0P
zXxL7Birv7Q_jdyw`lzQ0t6Rx1LjN{k(6fMj>KRe$(51<tt0x3LsK1h$0n+=tjDnr+
zBkV~+PuOUPhhd!BnpdZoCDRW^)XV+>a_e+)4BSR3(JSZDkiA9>mjBV2EnGUX9%_~<
zG%nK%_0X+SeHExN!*2#q2moyfcMSdY8UqgURjnttIs$4wB!0P(1h1Vu0Vo6Q=KzBp
z8cTt9mC~>ePhJa8!NL)gS@rW8gbH0|DV)|WgOsJt;yqaVBJaZGmS05&FT!iQG>L%E
ztjJ*5i&;`-Wd+B~(@$C*)MI_DO(NB~m50IEiHsil1qOapF46wUsA(GWhU3dR>k)PP
zsCRIOQ{<K8eQ#&!56!coZQ#=a<znd*q#)nBLj<II)_2}f`cJlnefIDuq$f%se-il<
zygQ4mD+iOBcw&6ozZX;jKRKWaJA;Q@zu=Pen&8(gm%O6N7AxrFGv8#SA2s?EmyrG}
z>WJa8p6rIXao&?g21%zrp5Mxqg&f)N75aTqKy1$o!eYoc#uYM54RMa?>IN$7ln12@
zrtwvbHbwuYe`u0XH$A`Sr$2T`49u)D$!^Fk-Jeh>QEo;m&4&f^b=<~I9e}&<4PjX~
zJ8$d^-MT|2V{GomVm)5Y*vkaJc>46>r3qTC94P`864A@tUtsWq;;gYUoL+=dx({X4
zZ;H&v8iD-~?~uY%6J-=&im#jh4rP#P4!|N(43aR)F3!+c+NLZA_N#!M4({tdX}F-(
z&KMp_X3NSbqg2nTLH>y^@qL*yWcyMQYeWm!^IJ}iZlx6Yr{Ri$={MB<$}BUIw&%SU
zQYHqEq#cZlUg$=svX3D65d@2`SM+a~5z6nIE3U##{P!A?%QjRl1gX&0D9Mk98edMd
zS)P6vEtJCUx);J%JK9}X+MB}_n0(<%8GIDy-ApwivsWre=Gz9_ur(Oiv&f23-x9~4
zV5QT6dCFW8{(;@0FY^=%`wz-j?LoXBlGl2-Byq=dqK<|xT(pu&4dk^C6A(g;e|;mF
zbLZ^ZnzwN`b?eCmNp&fR+_UFz0w^9eAZ34+Lb)G-Mca(iCVvDV<#X*Faqf)%n!M?M
zTl~rdB9e=OLpJf2kfAMLSm+5nCqmgKkF$v$DdJe^eW>%b8=>gYPa6uFe2{2%UjWLG
zWxgHtcB(N^nw7Zo-SgAx#CgmJI;JJGO+_WJ#WC0dMM;VPx<W`M6bRN?K`y#Sf~GDy
z`kzuV7EI86YvvkXHDU@H{N|vD<SG{}$z;1RgFssxAi&Nu5jzJRKrPl%%H5&`mWSA_
zZi<3+Z|zRzB^Hc%Wd(pj1zb}%24{9rGvZBnttI?*HoXh4f);i~VlKcE)iEzD>_vca
zu!!~viwM=DzMm%R6f}0Y)`~W8&Seo7xQ605Ohtz^>BuwD7pICvhAJU(#4e`>{Us7}
z&$D#76|qU1@OtKX60=RoXke)j%fE{I(rgJTTFQjm@xUkk5b?rgP|K8AVp{mz_qiGC
zuGh_uElV=|)U%Sg+>W@b9;3k*ndU-@w_Cqiq)+psKS4b$Bxlfmt@G#l{N7V{7C0p@
ztWliKc4Q(qb2F7L_@%J8LrZ!zK9ok7Oaa&iVICVoT6sj6ilSt(1rje_FzgjOjY<b{
zsHzeV62(Dye^y`QEOr-ruh;s?It>472pL=l{9BuxK9PwrtL57Lvdx%}m(suVUs3;M
z(k#!uoH$EOJ!_QZSRW&_Vc<Pon1DM&<)L?)h{@v#KED?`Oz7;HeVt~odSec0!%7gn
zBE~9<8-zusqYLjCg{En{7|izF#O+UCL)aR+Npq1b0Qd!|yzmy--rA60fW|W~M;d!L
zjyc4wH{#ud@4ve<7rN|RC9J$z{O?NXaTCQ3QI<NNiVC#a@_{$NeXBipSZw0!hbkJD
zll8B<nJFNIPpwX6lNfGuwq*tAx*fpQmn3(q*_BOha$szf&fgZH6!F3PW6^);&I$e|
zela%ROCTn+kTTuBS}3jS|7&!hXL}*M^Jbcy@*FS}0^53GD7~`(x6>;XXftd<WSD7G
z;)NfiiT3Ci$&Z6O>IbZI!}^P|^b@pxyuYC@`~Pg3IfN7!rWFzII7v$gVBbv{WWM;?
z&Ls?kt_*z0+G`&5k&p|-uZAO(L-^#hffT90LfFfz0Q$fTP3G;mnyG~^Lppzj0McX@
zES}G|i1m4b5ka)BWCPvTMxkpKfyCL&lG-{6v9Y#_eWfzS%k`use{()jKt7o<EWEjJ
zzPjpI$i*|wCEipa%J+~V2jp&$<eG}o4N_wx*i1FARUE1M&zyT<$r**ug=lJxJ)6wK
zQXEg5fD+1_yoHL(5|Y<^*uN8(3#dW5Pv`Dn&Sy75u)}BqFPK=EZ>;H6=^`i28LNCv
zOhG?*@v&>6ru(7HYb6#gJBLTzpdC_M&c0N4-Q0!6om?&MuB~iscH~Wu+)_eP-lJn#
zDRS+L&ty^eASdoSA>>6Kg%CGeHj=jquZnZ_dM@j`Qud;_Yp_%14N8sD`Vpf~j@teD
zhNLwWGcnXx<>5f#tnk*S*k)4m+JA3qa{%E;S(l17sAueDNM4#k4nw$b=Z=eDS?=($
zuKW$!bRVsU!oNYY+<&G%p<L}%z(995C)w~B+cxa@|7p#Dpvw`wspGm5zmm{i<GqM$
z3yd-W=foWjULN;HQw@cfW^%^60ZAC{0+4@8199M{Hphy<Kz}cgi)FGrda}QP7?vD7
zP5by@GKiW})uhcS&I5=b_J_{sAW?Pvg%e7HX#U_zbvBS4ALm|LGnz94SDx1`!xb;+
zKJ9b9#NVdba)#gyqBodA5LgFn2RIu0*I~x?`mgUVjydHLFx!;<f80mD9Ky+;eH=U~
zA4j%@XR=b1i{%4!tRCS4bEML&Ka<k9yb{P}cM^XD;Ww?MzSSwvDgc|O^y*;XvYO)l
z^(v;XCps!wMYd5fSNLAr94yeZ$PU>KO@tcZ)I$u$8xf$U!Kq#`t3^p-!l9tYtr9fs
z`a$lfV%v|O4Gb~IB&BOmgYy1y2hpF0#!s2ysi!oZpHI16;{iaOWM?BfFH%%{UJl?Q
zkoT|-8381vEx`nLg9J87*y@R#4GuS|g8aZM<_usEm9m-Qm>IP%AT=(&HvQs^W%@{8
z(WZC{cSLbW1f_#5E*2=|PjhAr2(e{fd>%n>H4#Rjg3PqC8*gC#a5oDxiHB_$yEl8p
zP?^4?;F7Um*<JIuRYAqO^877!Ja>8+L&(0uS04~zfW5-D5)1q5K_ayLmccm77-$X5
zQUS!T%I`?KHku?4(ZZPqCUA4Djr9jNdqGnJVe8JX$~KpNvBLj|s3Mi=qUFKjIgLoE
z1Ap+gG7Z~FPHPu~U?I}=i=no1%kv{siS0cUXv6hfkQ$8!ds{Xew+`A~srzt{;RcMQ
z=3X$0$5u8P1MhtB@o8DjHESgjxG-x}>cbyU;RKNN=N0mSX=G`Tp*R9eY_{rCLy1$j
z>Nk!eyz{3L3iCA@`ev7x90AlIc~Ny_`KDndN^Y4Dj$~?#;ie~)*^k+}fjpOnDFMbQ
z;Qy&(GKmozrb`eO7UX$v6GAi$nZ~5+W90o`1w?+@nh&cJ#8dx(jcS-%Rxg{yPmfhg
z9HpJm{Ff6&PD30R=(0`Wu{~lBNWiuAZ=c_@HL+90Y)bo6Q6baM^y~sGgr#ZCEzP6t
z57;m4_MQCZ<7*9Gn%aiZc+bxP0f2K3tB;j3KeFIgEpmbsp60&it&=*Un8(807yo|B
zg(FRDoMKS3>Znuxqpfzm$cfXQ4paOkRQlYiJUqi(Myo{8s!#@SMV|b@k|{tIr#sfE
zTuW#Gjosnf>mL!0?ZMr^7Y>GXmaD8NgwQ81p04b|{{gs=TlQaH^MBFmBd`Du>E7Bz
zu{d@DWNm(gMNgXx@H4|w>P(WKM9xWt?0*Uz<lc?Ulgp_h$v0Hhi55e?l=>8U$1!zH
zbDCd~fF`UM*Ul#C$1YC`4SUqCDID0c^G!YhrdXc2#>0Yo4yzJsGa93H1Y;%525=MW
zu*y#4plkJo9aC9(0t^xto|>Bir9D>d=-{gkdE9cNrEcRCx#zhIq9!x5M{d`C1|iwC
z&vchI=x4>7-kj4wVIkmLsgD!`v@^cc--Rkhe!~BidJ$Ry3up&Dyw1e~U%fVBPry;E
zr&G1l+kpiC;)@c#7o8MO^w&Fx;L|dQ3_oKkCnR?FphYP^I}PyZx>wF3)lmqZQDIAz
zt(cy(Y$YJc@<H;}e+YEi+mcYU0U-R8k(BNv70UjNg3bS~vDPIV@bst^uBvtK*LIw8
zZe8mhuJVgi6m^#9;I15Jk1@X7nw~YblR;>VV$jj70USW~?i52{hU?j9!8DUA8~`@*
zDfmmVasNunL$TpwRopp{5}e)!_1LOj4RoM4=iu?}|2mg8lj`^+K6DM@sVSVIpcZOB
z1;jXz<-Zh={XoWU0+wM&I+euBoe1T8w>PrL5O`e%0}FlPhoTE0<L^1<sB5NK76ZGw
zn~hf*98b85#W5PIB0STSnFR>?<6=9cKMc*gB2@eJlzRaGKLEf9Xlj$mo*sRQ@FtX-
z+rgj_cbpetUNME|iZ$Efm1>8s2|1J8PxvNYhR}{54k8KJaZ{17^d%;HjPjY;g8PoQ
zekj4!V_cmflBk@pALnSS4)raEf*l7N*SCKtDs#BLNBDU>b~n0!sKc4q0{~r6`C$j3
zQ3=gncN%xD>>v>w{+Zz<#(UF3i`Bg)3$EUz5CHTWaA|(_v6*ENR2ozrUQ^$VDO2+8
zJ*te_!K_)bl|F|f>VQd_w=r6DPovvLqinkN-)kSSLbCbtK+4`6jB%9-7M7^Mn#dL1
z;YHSrI_UlT98qG>qxs#RF6gNlG#EQs-PA)!6yE&@2Na`F>T-VqjonidBIxiWsZ0a&
zG75X6$lyiVc@R{1W8}=QNU4>#$lRpzxhf+kKNm;Q6?mX{!1aWxWzDC{lJNbJy}nJF
zjnKX*%Cp=tTr1uXOj6DFR}*lJCz#bq3m&k_`ft#TxyyvuD71ow3^3rCnbTmT(|0{X
z2)O%t=0QBu!Knt0h`)xDwJ3@2R?ssEM<VnVsLIiO+1hxNG!0jMDvR)dFgp1E`EORn
z#;MuO$ugwTrvDCc4P3A3172eLC)|T47Brmm<vgfa9lYHUhH{c&&EQ;H{ZCjUY+g*2
zl`6%~5)J#`!lUI*y+xacX;@(Ugo8#n!@_e}q=8E7&xO^`6z8=Rr%5I67g0N-lRV7k
zH<BC*;JdJ~r|Qmes>#$bSdBT|RzqVrP&)#khRL|dGVveD$%(#j&ee*nOh8uj*{ert
zyrM6ocjOmnzfwPKcpLEzLy&LhS?iY|IsKQ!B176nP$lwzcGbeN-FCR}s)X(-V41T2
zykxs!Sfjpg9&e5h&BacmH*i&oUu6`s%O>;Ni{<RnH9Jd_Vc%n!ZijIAgOpGV(KA?~
zPPd2m2lrxy;?ih&UPj87ZiZd^b7t@~xm)qxeH<T-=@3_uDBeg47G&;!L<EfEmr4{H
zWP8MJ4li7asp@T~TwYM|*2kE77jU_jfspRolB$Z8fWBkp93dQafE2K6;jk{r^c`#}
z_@0bp&is7cBS3W-Nw2dOo_eT4_9^Z9{4m6Pd<kuU-8NtmRC&KxAezav*jg<jwH}TK
zSL{CxN-M@khYHl9p}()kTVv(ii{1HwAc<nr0yiN;VLU;e^M~-oeBI(ah<VHQgt8nc
zZ5Yz$4{!cGSRTD*hcQ``*tVj7<XhTcI|#Z3^d*ZU+vX<wdeP-XvmeXfR02nH@rWmC
z*-L7zFQ0CCS;Ka~Qx33d<20VF<lKC#`B1+!A_JL@k~{MeUD%`2qpRq|@MJU;FALO^
zGrb0$*>_MG^eZvo{R~x0#%yOzcfTeF5okx8iiJuBoF2IKo}&c=s5=X63ZIvM0V<f1
z8*eh^z`Z!EOmjaa;`hq&RO5f(wJE`CxZM00yf(p$BBDgeSH!S(_0`66h?zLKBc&Mo
zoX;Ff0HFuazZ7;fMf@C`I?T_?W`BBiT&<8*bQ=}_ISq*k#c66Ev)fKVwmT4*XH9?f
zOq?!)99sjt4eKwB!`h#SQTLk^^6Axkxu-JYg`oW}%EmBr6-6}};9g3*4ZQIEP7Hn`
z@`mAh!?bFwn6Ldjq{g1XIN~S({vE)l1~uyBe<<cVcROy4ybqsCy={bsGlipU%spu_
z)yelrbsKb!ZU}<=fRxaD$g|#lH@>j7Kd3e@5})Gf4fYGsswqswDQ&&Ec1i{L4>R5o
z2+1|P{=>e<-M-Cu=<WJ95#PQ-4sX_zKdrsDmsc^h%_U<zw=hP)mzn#|8;Am3H<)cT
zns}}ZwM1^rwij?QWOff9Ff&of63n0oit<@D0`w>z*Pfb*gTO1$#8RT=g8ydnyo_Tf
zKY6Zr)@ro<H6H$`wtw>YrFZ<KuTxPpJnTt@BY_run`65U3|l}M866ii>z+<jO9%I4
z(C{@nN$oI$vdwNY(0nbHq)%}D8=LO|@Y5d<9=1Iox)k7!Kr+f?$hQxC#F32NuT;9c
znt^B|sm+IysBzGKUyE7!7?HvRg04<*Ewz!_=t2;PqLQQFE=HimA~*9tJX42c^+s<*
zF<Mrfp_s#60H^@$=F`-cZvZF1SR+0~P7XevA!6N*mICMDRZ-#1A(Rwpy+Az>9vWrB
zkn~FAjm&6F5Lf(A@dszbM%TVz!!2Ohd=1`B;GyrUvxKq14!dnS84jsBy8jr^P^YVq
zr~<O9UUxUDhahieNIxeHuL}QDRH0r2$-EHlI(sn#yGL%=Ce@7#bx!DkWKbS!=?pIu
z_x_p?E=!>sJDNM`o|Gy*#tM{_UHsB~NoUll$N?GHO~quPcz6(q33eev9F3v&9S3cR
zU*6m4g?OfA6fpjIQMls(tR2zADWtVXZXEu{x)?9aWkM_W@FloTmG!+Wt<wunxIN$o
z3}UUmEPx^Brk((OdWtHdwMS!JB#bv)FAF9&U_6!E88s?(>D^Kb@>u7!otw)5MsNDl
zsI}*E+~8K8h%$#}`usfY<-XFBQ!V<qgn9_5IsG0{m<|&hquXFp;&jO2U3OZG-093+
zq<cto{C&muQ}vUKnS59HDBSbdZLqIKd$a}-fi#Oz_OJ0MrvQU>m!BydacQmh>O#^9
z3M44OFfz-7v*?h6c~M13qogT;oBb^}<l`xrZ}s?5XjDw&W<xPxS54b;zoX4N_aDVo
zcO$xBQ354n8%KH;N@LQA{*WR$dU$?=7*;U>ykF+-Yk!+&&E2@(I3BqEyHBkE9P7XK
z+gGLFZv;YMjUFxMKm0ty^-Bvw10dvn{#{%tv#kUV47J2h!Yu%B-Ha|6n_14O91-4o
zRvqh{eMj`R9J?Do%Bcr!!E~<uZziR}kPX0-x}xw49hcOLH}5|AL2jRTcRu0lv1M}d
zea%=fLKBT`EeJDUVrrQ{PDz0_vX0l@TRu&^Dqk?q75R~P;Z>EcvSqm9SQNk@Fd$kY
zngUn85MkJ2b$RA@tOXmRb3nqaG7ZeHJa`&VeIoVT+#nFY%Ku~6C)})BjVwdIE5sHT
zougHaRBve=9<V}f`oEmWD9?+^CWZkJ2u)^kq;c^ymOir*0j$H}4iB0E7`Xf-76{5n
zqOhRkYiyYGQ1ri{z4B>fBU;@rs-18x=D$7#=z;tT5;^hDOjGn*^c$7>EO%m|K<O^u
zYJM{Y+D}yz;}Yul4V8ml*GZy0yWm9IA7QX{CMJ$9Yp7%f%RJ=Q1(PNCwBA5n2kC_R
z6BeBJqbKLhV>^UCb&+{m!FV}w$$^CB;YZP<?iwM8wpVIxHNS7ij~6wocssq};u83g
zS+U3{j}qQR`z`ph5D;_t^%c;5Ae$J5=^1@ujSq&Ab^)gk+~MFc{)8tz$wM|2KVKW>
z0&~U8N;#nX@pobi@C42$rzqVN<-aqeJIZnyg7@ODWpNo=#F6=Rsf~^13dB?&s_0sc
zrVJO}gVQglbMOai<eFRCvy|e&m!?%|bvJnKXTjwAiysg+bf57a=@+~$3_Lf-0Do_c
zDm<JtCEP81zaS(;+ZWNdH`+}llgHWl%ku;7|B_exzYR`m;-`>rX?lJqCCg%ImP!m~
zh0}^a1-6g+@TfQg)}6lmCl>v#3(K6Nu>~?$iJrTPfgwc=GY@yCuoM0^%?`CbPmjQh
zGetdBU2ukR=5KSowXPjWXaD*@s+3>l!*b&XK<h8u(LBshQ*4*RPi5nu;&c?43OcF5
z(tE^`Ha>rSzk-Xj@Q)_xC!{mK%<-g3ar5V<Zx|x<I_#nS2P(5U&E96llUE+$)xl*>
z)f3E;H(stvYEpdha4Q5AV=GNV8+1Y4M%)*uUGD(1_q5*FnPzE_?$&(Ucd((N6FF0N
z>Lxb5cuatxMUhMoH=b%^9A)f@0hQy<0%i5o_yoh#?$L~UE7TRe2?+hCb+jQ``PN<t
z1^wYWPUETF%hKU=NP?dm3(SgfSMEzcc;FatOCk~Yn$LM%<gyyW>pbab_V~;Yuqdwx
zmp6Nz1@0;<+^PurRiS1wAaxJ8`pX8-i;$W(t5+~SB4-0SwK8%8Fz;eRIX2<UrJGjH
z@UWGK=3~RPiYM>54j%>tXnhsJp(;L6j~+kR%{Q|<Y=H0W1{0xAlhaRQ5lIyqRB!bO
z$Yk~_abE5S%7`&t_S2ZleY7E(htP&>YQ3LPA+qp9m|>QoaD3^q{d;>|z5g3huVna|
ziAJ*1!?hP~139HC5^$FXB_e2F1q5iFBt=EZnrRb2@LJCF%=7Aa9TpAv{C^$ixfVRB
zH0jR2ue9!0**<_XU1WLce4Q?1jht$CNWXeIeh{@HTT}W9i>{XCS1y(Z11X07c$I8R
z{y^+gw=)9=+!CK(8Vfn_*a@uD_sr!xZMh}(S@Z1vU-<Mu$su{~8m9Gjzd$9W-Aj3;
zD0crBqvm9yz8)wr@mY%)raCn9ak6^!uF_I2%oLldmzAh>Aw+vG|5Fe#Csg}7Y>)1x
zY@{)j%8=R>9o$%+oHC1<K;G(@i9ViW<|jzfxEE;rrkxb!lj|S>`14<-by;=Jp>kP3
zS-4zZ?@s0$gEAZpG63#n1m=K!uoyWDce?R}$aAn{=_MyX!G%!)P$<$CuY)8lQ%=NU
z2paAWz8vesW+u!GrA=+~UbX_LW|z4|`=knBFxsw^lTf~GRKd$$E1wv-pv}v#oUzt|
z*7-ww*=jX_woTa?lf6<Z%h_;eL}h1zmf;|SQiWt4mUs>BycWc)xuj?wj`V_>ZP>2A
zZ&9K7WSLP~B$Z*&au}=gpYjyV%h7-BT6*3;e43Q|c}|YrYyc6j%X3$#$jmEqj&{j?
ztm;U~IT=mYCMS7^xX5HPOTYJ|e>>Vh7bO4@JJn()lgYzVg4AbC-+#Pi$Lt*lT^Zs#
z7)#NaCk_XNUpvhp--wS<9$1)78Q$u;>8hfRPjlCQcfxP*Jm5tP>9Y-+Tfa0>-m(9Q
z^&LuT6QPbTh93TXIuY!r0{I%N593j3smq8Hp*lR?PF1nOISo!4C0`K6WW2<Mu5Vk8
zB;^7NNc1;t=~?S-nY^H7Zst*fHN*BEyB|`geIEh1juf@30$UCnYm`P9-SQppWg33(
zf58E{DSFy_S}Su*a`CaDo+!S*YbL%d+)SWCuCkUfIVwzsb~^;^p3=-!DD8x`%#hDc
z=b}c3w_Lo&Kh&AjfdV<w$pJdaEB#wrd7;FRPA_&n*bRHBgpIg_dea?D(Md^n2J!?A
zxU+HlHv`X3ImcCk=5;4ryjv5q`RlEkCj0zB{p8(Sc7KIUl_+>BJB{lnXzzbzA>HZ4
zO*0&6y3}9f=z2+kUp7Xb_vuw#CK^H-S3-MY@Jsvq9_qvDz&V9pbG<t1Wwy-=fA9SF
zO}4i+AI%M`hV1KGe#fS4W5nI`yuWHORL-CP<yY#?XIA+_CrHtvq@+~IrypFj7HNa%
zJAuO0tx2kktX(Lgo=b5rfo5bq#Hz4HVFb3&n1e!e_S6kEU9<Tsq!257Bje+PmYYX^
zBZ22&AeiIBJ!giLl@jC5%5T@80#aD-R!U@`KgXehfM>UpoWIEK72TKi#g(%b*`XtX
z1Xn(|Q*2gPmL@?C9Lt+o8uzPgO+xqOz5oC!g=zoBcxZqpjl&L!HJV=z!nqQ}T($Rv
zJ`Xw2HO&w>1)Z?wmVcJPG(B2Sg}7l(j0Wg3v2UVn^?ktLr`L~XcROz*);cu}a2P}0
zwiLbiXVi>-NkREVB$LcQw5Y>fghl~AUci_YeOM{y-QX~_^(#r@{kVvJ?X)Xu%EefH
z^idCL3!ftfSszsI+Eqy<I;=VTgvYj`>rP5`%0z>?X;@LR*_Lnb4(qUAiI5bTn}(Eo
zbfUjoIA0ZcM%UZ?R*kP>dQ)%xyy3B4IPUw>PULVe-O!c^<~P(87lrC&p4dMXuH?gK
zdJl;C(0>An^asMSufU7X%MWE`y>XHOo;;*Hyh0c7nfaCrt@5k-*%lNO4bAW5#Q$G?
zB4{*Pv}xt^m)Og>zdIEvGPLdtjH$`JK7kO36+=R+Tfm9zf<RmA;LmT<8w29FknBJF
zu!56edJ$j%Vknq5E9jNUp7R4xb)isT+;ebxUC2-eBvNYZnpLoF>%2T9-C8tiTJPpR
zABNcqmuahAjETt?3#oP0QT49f`LHHN^u+np!LO%LRmedNC--v|CG6(PhJ5%?Ugl!B
z?^4e&{(Q?5b8qAJYiP@T0L%@W1UPq){|7E1XV2}@g_}7#48i_k(}vHhlCNm%<ym_j
zRm0W;VJ(Ve>X8Z$StJUf3HEvf|B$*vaRFf;_IHx!K*u6fY!NAlr+h&_l&QXH+&qYP
zvem7`0ni%IwG9c@9#|1V^qa<bj<&Ot34Ed@lB*}wqvyQKOjgP|bo^ZvUF#AI>NEt=
z%v{!bTYrq5D!D6te>NU-qm>6A!B6pj{fW`;g1H%_P)!$~^3N{sBPf<h6?#w!=3Xgp
z-)GXvum!gF=8BbxN7P|^%vE!hj&Qq0Ge6X0q8CFVfjbRf#imz;kP@kwuoXl`k(aK>
zUI_%|2myD*pi_UTXDd+p2p4#JEIM6~!2THhn}g=14#|aQi0H&HivS}g(Kj&-!7`<u
zioa4w!H(I&9f$23L6kS!+{%ZxEcfL(Z%LM<n)CwWMkWN89g?aqDYNF#pT?%nc)DIi
zX)c9bY2CaA^Vx0wp%S7m?PMewpKJ$!t2d<Qq_1B2LEe)&Gh5i*(p);0Eq8oh%GVmM
zMTv^ZwalOu>_gh4BC;&O=78|k?E!7x&-f9HdI4AJ7|67^90EHTg4yN|b6nR@#2e7E
z(B@Uhwq2J-W&TO*S(n9rs1@WZ%aTapAS8qvkI46vP_e~i)Lej<utCyN1YnQUynZEu
ziG}Tktlu7<`^2kagqT&EreBUW2B<>odTnkGY138v*yr$R#E8melOAoyl+ee*SujH_
z*80^Nah9zjWeCng0t^+E$8?#nf>{sWW7rUo5v-SpouxvKt*I?keWT<Wf*HAM_~z>L
z^0FJ0VvVq-S3j=O^sysJP?KJ|*No2Fs=e3F1>v7n@cY;BS}}{FeJWMPba3*D|F*dd
z5gF^bDh0r$CePjHr)KI#SG{ROXcP0z+hl-*L@SlUTk?-NPFe#<aVKUz1NV>wX#Tdw
z0Pfb>Qtu*^g}Ql0h_EXR931LdVefw3%d*FuYd`3YS*`Bpy16uK^DYA)rGsZsZ<#E1
zDO!{&CotW^l3v74ev-v6JPmj*Hf8Z_zaMqOf{PVqkBkp6Px}CiJ#yOs<$mJ?xa*k)
zrMV1MwN4|Xxr(K1PN*)^0@l=1fsv^{%x$|re8UmHCbnbgPn@z)=LolvrF;Tdcyd##
zC*h8M3~m+NT0V?rZTa{Xs)9XG1FVEBmlN;#%tl3>aiR_FKklT24^2T|9<IB`qOA`t
zN9D#xaL>&J@NJs;0b5ETF%qekzz~Nz7Vg-uoqognT(S;~l|9b}xmvzq(`z3w#c%Sf
z`+ch*riKE4mi5NYSop=14G5XpQ{zXw;*%9!S3`;le%QHCf0f<Q8V3=%u#yWq_;^|8
z*VhEdv(<9*jiLG{>d;zJbM=Uc@?>?f7A)-z34C-}j`aHd?j;V79ck6qo{+vOC(ZN<
zfmBzOytN`;jF(k^#E13)>&$UMSGqH3bG#cn*np{(Otxo<#K^WzPmjNFPPJ!0*Q-=~
zfVTX+`H}n=LRpFk6Q25kBZHF}EMw_g0A~Oa?`G=kJ!;irhl;169sP{shCTg@_wO-X
z%Lv<tffbHXm-r`Hhb<!dhp-W!zsBmAkJZbkXcL(*r~Io^F<Okg2unjvc`BP}^}1p;
zcd`CjhLATsiQ7zpHaeUMI}>p_Rk(ukilU&9X#~_XLv_)f&$t<gP9!0RX}n;Dh#8KS
zv*Tinr41!ri(iMaYQuBcJ&F~h80-sb@PC8sc~hk2Wsq+JM1-;i^TDS_@MGM{>+3TH
zfABicq^G(|Xw(uEg2T6hnDg@mlzM!8LB^VZ+{3|m2p;)2nF>o_#S;^HUcDUcHi4AP
zhro=W(OpP#3Z_}bl?j$lq!G-<y9~JzCHzMxx0Pmv4z*>=lEXUU-2yH3w{?cL<Go^`
zRm<ADcH`YZK$tm8ZA$UlBa@L~<onDys;rfs82~H#0ja{3<ZogR2CA$Dy~97>bPWxz
zGQL};u*>@NC%tlygmMq_)-O%`YwQRjPKE27E@(URT)tt>?HE_xxVohb*(Yuml=9ok
zTC`{rb<BQ*{EQu7bEpjjN7&qd2}d5CUuuQuUh27)5AB`q``Sd2NG#DNiCj}|(9iQQ
z&^ev`WEuu}4e65MLv3MKhsxqa5eLfN&@Z89H(#r4RLbviIEw12KpsCeA$^`NB37O0
z3_^&nS`$YYxYCecR)st?jjW|q?~i4m+vR8H7i>oA0>HLO9hl8B<l`e{*ogA59L1*{
za~adt266+n2z7Cd$Si@@HWYytC@rgrnh-Kkpcor%2p?-UV-?bUaWG+;88>Uj^gFV>
z`BkTmulK?QQx^<p@B_^_lpIeiIA{r(tz&wq$v?8x6)n<4y_;f%<%)7ad&Yng18H*-
zpNX3A&a)ibbEfA)`q|Dog^^`J!xQ%i7*&udp6UFS6B=X+&jF#>z4U1B;h1P>zZ;ck
zG)P@Lp#N{-8}YqJ4v=ftHJe8YOAZ4(pO-xCePm$0kg*JjOq7h(wAuqoXOd)`ZAz)_
z*Mo1@eKwR0I;b~9a+Q|}4ohScGG<$sj>e6p=V(r~GZmOqfG}f%c`7qIU7+_g^@1z-
zR!JjP7jld9Y|scRYe`Q?wGqne(m+EWt2J?&$Mc~&Bv=(y;Y&vl^J<LSLY+|DZgL1w
zlJZC%cRtIuEXa+RYfrVtuncCu&)54U44L_5h8>;m>R}o5IPWH;Dk?w)r4`@eV$TwO
zpL5*r!I`j^R_INk3e&1<CVNIR9M}HmjhCqN;0I0nIM(m7Wk_C3HN@5RH*$p^c@;{A
z2Ay$b3~yY{YYukyOUd~B6J}d)QBVi+V$f3%=aCA%;K#chj+gH?rxSKEg^g%I5;GcG
zT4g0QPcG@+Cbn2>zCV7qSUWba-D%7Qea(ovSu<==fL2TiDi<CN{X(@{t8xX)x?*M>
za20G}b?6&aN3%ic#%P}0(WN9{bgIbU1=GJ2u+iBh=O15ig@(W&ohfMwv>wX<s_U~-
z^N{lA`lI)_HLQabmb(kOIe-|kN6ZGyIDmVHz}Wb6NA2_Oy+MFD+C475y8zx^E`g}>
zNi@w!ydv`gKB81I(G^Ue6hlB=2(%^bVDp(78a@`0@}VFaG&3^2Q^xBvy!Yj7rTP|B
zu;Zqcw<mt0NjKfz&EG|S$GnyjM%5Xjckjyc<t6bB%;Z9yhBE;Kri1%i545`yOxhc%
ze>sdkNGY=7LrW+YFXo<gY4mg|lz7yiE09fg78&`<7D=>oF00gcuZUS**38@o0Ngko
z)ILIw=>|4;@8~{jA|Mx6gn;Q(v)xy+b<iQ+Zf_uB0PsP_WZAQC86V$HCQSrg%oQ$I
ztR0FrlJ8f~-=|MF_o6K3pVdRQ91+L7efDGw2rY@Ca{gc75ETi(HhrF~wt<3Q=v$#z
z1X2M?+&KBEM9@iS7U{mwkerV1gGFzDa$C?Sw!zM=uQ(?j10M&{54Fg$n9>JL*rXM+
zixM;61=bvTq^*Z8>f)kgIrNLw-b@scLuj~`%@!4G>NQYJ$N8WjDO<F2lR>1-1Mqrl
z>+2=Xk2VL%-@emhk_EC*MTpd2s_|tpxfy&{NI3%s*nTqVzMfnUJMmh1d7(7ta!|#s
z*))IB@;6P@Vh-x*;bX>`S8ehHA)f2|VW8#o$gNoNvT3ua0zx?)dHi+rfu6%saHwAx
zwDg{aJM{Tm;2!#!pil|vxzd4%It5#XTi8d@Ss%z?9I0qKccB!ze{eJ`o^F4Su`<Hq
z9Dzuc(3vn=7IFGK)LWcY+rrY>b4I!+H}b6R>6O2~F4pf6?o0q~rC%J{;r$7LExx0*
zl^!bEWOX{@0=Ju#@hP@OQAprk9tU`z(f6wgcLcS71X~%DjS(aD2o(Uhsc1OWW(InA
zel<<u+X;}!g4j@<;_S6)%5Zvf4g`9FH+{+T5l{(XoyGfXO@A=>G+8;ie66z&(ERKV
z!Pg$htaU&+0{4-Tk@^px`pU!Cqzm3(OnzLF6F!@fsEGZYW9C36G6)?3`|K&Ac!eWQ
zhB4c{M!)8DzSuwpj+B%7O-Rb58?yQHYxvaYMQ$0@e2m=ACcb?+@UGHEQ#gi!YC}=F
z1el^e%r91ea}}+;4MDVAIFQiWhDEOS;-!L2IRmOMcp<Zk7KP8DJ=Q~SO|#PkDWueI
z!E<7CN6r#k_Fncl%BAv}N+<ywocpjTY}M@t4v$*)D-33D=uC)Fya?-gS13=_Cjmrh
zUn=BZWreI(G`Ob>*P3VML2BSy54GA3D|@?SO)Rq3<zisxEJ_!o76Vf$$3=Iau^sbi
zq@C?99X#X{L9Pwgr*q5kg}`~MUuZ0pHsx^=si4s$r>p*uDa>gjFAaK-d%yDqCjKHs
zL&zivNd!cm0-;xsI%Sw(4vbuI(d!<dW_1Re6e%7D2g%*gV-e%Ol*fBh45pWiKh{X{
zK8+C{bf5<snJUvz&h{5FExI%+{w8oY2xv5unH*qW+Sy=0mDAW*pr(cyYl!H0uqx8!
zvAM$0;|KIFF%W+_<e_x7FC<QPt40%3_mS-3onii@aGStRp}%z-?FkCRdLl7#%`oMf
zHgvjLC&EPMDWe3OjF=|ejWXEIN@Zw(O@ofB>t>#GH3@GID`NWNrFr6qv4xULcPGxc
zzHyY_aF@>XvxKQr@JmN%;uol-gLOwLf-nT2>S!>Kw{$RXdUxZMo_hT`ICU={eo+VM
z8WSP=@8m0tOr}pGUR0Et8uCbBP7D@jO~D2plMT(egCXQlA#gDhpA>F!?j!L7$=a@R
z01sCz_}+1t-s$!_YwJEC0;VT&`1~+hOQ`f%S9Ks|*8mk1<U>1^xY_1f*Zd5+;#e4t
z<eMMyhf`zNa(Lrk<lXC+ncXJmtI4MOeVqMR4l|=DIPLN2!_Va!eE^?t4%sV~51SdI
z3RZ~-*uEA91kqV@1v#ARS1{0oZg1OH%-4p!S&Y7897~pCCIg76cSBkWs&-bWNZ)VK
z`^D5+2a4?{CgXtlcmo}U)p(SCVR3J?YMi}Vy3op`)(L%Xfqyc|`fGHG?u$L}Oam0z
zIYc7fHIWLCP!F)JF89zPvz-v^p2d8`5dR(#a*d<9x%bf-$h{iq*bS%3X`3FQ0EGGb
z3-}CSQ$zDFx|1Y_13kIy;GZGG{^D6?n45+bPCAli+5(y$D^mg4gR&9>ezx}TV-d(k
zbVE12x?a-%7%3UrALy0goWThY6f9*#35(WAs0N1yFMuf(4hZI*sB4crGQB{kbK5zB
z7XcT7veLTjnI8qgl&{e!iOcnl5*N_T;vqpV^i)G+kSHA4BBI!lYSpcbkh)@JTiY0)
z@g?kFJvTtQloCJETc}ri=)rUC(2cH6pyR-L+3nYjI@S1Ji68<QT>a(W!BmFYFm}>0
z5;?hgw48bFa?iRL@w>6|KlbY#r;1g&g6c$rWu9Y;aFkcXQ<N$ll3T)U2QIgZDoHaB
zV9Ah@Q6Gt6e3Vn44oIFFXc#Fyhpi0@1dcg?H<P}`uUdQ|t)$QGJR8U4#OT^rU^S83
zvogL&C|}^y9Go1-p25@#QXNkI;LMiXj|m<mcUy#l<*azq_^|D0Pv>>9n*#jFo&(8`
z=OA<QHRT9=cHikT@RE)v@6WRFo742KlalWO(tz<jit^4rO4B<%k!SkXPtfewMSF?F
zq0X{6j{=>rwu^d+=>o@Ph`(L7M2mJQ9euABr8oX5z&*`urza<*{61i@#x>;Kce~Ix
zW%OQr>>ltv{fz@iN`_&QjbHGS<?9>Vt&O<Ch0<o`T47@auFf6=JxD_r^MVLlGDVA&
z+@Vehr)-j`*JAgQaZ~L0N2T_nwjcp%VUV9TWbpOFlX5s$)`3gz3De{6db5GWVHdBS
zL3Nd6U$I?j^^nrqbAL3ex*10%7hHN;)Au22yij3*&kiQh4oF=G6wT?uH1J)PM~0;H
z+&F#P$i>LMRu!M%Ex7C4(X|C}z!eisjm<93i6|L_KqfRD!@(=eS?$J;N<JDHv@aSI
ze>-cg$#aU~t^?3uvM2p2pc`JokSYOiBvWA~7Y+{+lVRL%TPL_>=wGiWu0sr%Y@ZMW
z#MoHse2H<zqNsnBq*-W1w!rUt^lLIDk`vQJk5IJ)?Yq%G6bzK0TkmKOKUBzg#^b9G
zkw19vf4VWY^-S?SWsrWIJUGyEZuJE!mfrFSrYIhh-Y7_OrpJbpgajr3ry0|bP)p;?
zN+S~O)2?w}`&~HMILVitA~8a%YiR+MB#2(NVofUSeyVv|=PA7LGgH6_3oIgn2}t+V
z{6lK-ZT(V&n5M<fDK_s!nu4@@-m$X_NifQLBq6o!7b`38yChxRuO_{ogGIHDWC$?b
zRNGNaa(Au_bta-i<F0oOVk9O}unSJ3;?XL%qq6YDU7hUVyTbS{MY<MD^ubUFdWO3s
zK0Wm&5?S-Dtx;RrR;I83dP17TW=zPd@@-q^xpKK|5@rN&lOA7l0G8>8RRx68rd<E^
z@xSfG`vl^NJE7PZ%mL8*q25|g+P7taO8CQPzsVw>Ki%@VcyEjxd$*OU@)C@joF*OR
z^u?LoTx8FTVIh9NVOUh`y5>=WEH#!@j0G_31dKJngrBY}km<edo-u`-ukRci1IQXE
zN?Y4*#Fq=+7q$Ki(D%mn+TQ_8W^G_7H#LE!3*tP-4hxsHLP^ff(~fGrb+Yu$=@3>H
z8Ei^Hp;-39MQUBRC$LW%#$wRGDV&ghKWrT9pTiW6Jatw9-IZb3KE@pqQ$qR$*g8v!
z$lW%F^ft$MKNQQ|iS<apk7yKbj@x!7v!I;~XJWuCYyd%A1$x@w&DL9J%z?MjS?hqq
z`d%g>YMdL#zNA80<Gy7!S6^PE-4Dol!rsk(mCm<9@B@N*5)L^0L0s3_kqA?VTdCo3
z`@ntf-XC%}Hjc%wMZJgOk1b!LZ>XH_zyE-Q!R|D<p9qf8qnpCCY1%|owzzx?t#|Q|
z)RSIf3ThDx6(6t1s~Z?N2}7|XLqt|?!EJXhb$C_3m4r!G$w)1qjw}TFtg+}9INR|I
zHL`6YY)dpin0$;ina|mU?m_S+w1843%#+s}Us2H3d)@|@5)NrMDjBWM%y=|$QGsz|
zzZ8yL4-ZN6U^`cU@EeI-e<PAGrS>A@>=qdm`W#$ab5j2d`R+F+8;p;s(X@RE5lciT
zbQJEnv+Fy$O-Mq+8&J8>(iCMn@Gm<?YU9Jp4&16`A)R4qK(`X#2H#3qop72utS(NG
zExV$~MBAcy7nH-}{>~Jas2%!bX5%8N=?Zd-%Qze4M_ce_5K1dTB$UwHPEDKd<;S&p
z{m+s9Boj<9cn`h)N!0pM<k%6_wkc=PIT3)Iq^0`v6sO4ysA%=2^2zP4acG!C!N~a;
zKpWt<NW<K*2_ZP9e$4kBbM~Ki58H{ntM73D!{iX|0w0htHhvB20$o(~zlbp_%PVf9
z<_v;QbtHV?<}SO_bkf*i;Sn&8;FRL4K@OrIWpW+I#EvCD7}q5FHNV6f;8FzWjqFTk
zA#w@JzknMD2FkePkRKy#^Q~0%!^2eWd=;G$rb3&<UAB8mcHaZzYvwb-$!NOLS?<Xx
zo*Z2!M5OCyGFL<lQLJOy;yoHXAUz2a4{`6CIzNUJGg8FIRRpvsL2tZEQE;+?Y(8D5
zHIbB~r5vVnz0(ViNXcq*J}k3^Twul{>!5(+pE^hUKcMWJHab@w;onpd202(SRN%nf
z^>P1|VXLVrj!AScs}AA;+N_FEwge%nAlvAB=v;I$Bo6}1mxG}&y|LHf628Ezu<P=M
zsKVa&5%+~yspsK@^wel_)f-E3-W#d&GnvdjK*G7eSV~bjPWRvDG7tI7l%E{^7yDs;
zS>e>;>I?#P(z1Jc6rpmQ!y3W#OF||@6_4|;#Bz)ldlM3fuQM?KX_s;%dqCSa!a<K~
zt>v!%5k!<Sp+0vhRe>Eb2B?}kaGrWp8H5F37NARUq>0=uf1L=2-t>_hdQd|R-9QC!
zjr4p=W1t0_k{b0{XGsVZk1}65{T(vko}@wC=bJxNqb+CyL;&!A<Vo#t^|KZSoVhbw
zh`fJ~XtfaqIkV_LJ7Lczew8NmbiV7$FK$Kpz0;z}gjH4TGUiJ3*vt;atU3zcRhJ-2
zd-*dtA=+qu+aD+Q33wmk+S&WwX5Wr_p{`c-i9!y9MOBtfju77PfEnV>(zX)wy42MM
znmNCyMb|Tpr;>_rYSTQKamq0%Wy*gj(H?FHxdR>E=EioJ??t#?ti|L-WSsBT?yjqt
z@C(Uj8Ia3obkyGhvnbzOY&B-{NxlweL@ls|05XOKbJFwJN{2nZjR}cx<@Y^^a}Kab
z;Db_uy|;HR{puUkgH&nWU6!3#Bm8r!n~L}XcQyol$g&f3thFFRtu@hn#Z;n6!SBNM
zN-LXaL;)94WaEegE02#-ZzH%tt|u$(WZ;ojdKFuNQqv{vuZNz^C6|u~Ca;n8LjFnw
zBlgD~A1Ji5ubAy_XP_wh9a|p?GnXaBLL=RHjqe(QMZp%<H^>-ApSTOH&`=xzx!5f3
zBYV5Kyn0pz#=!ff)NVuHefaMN2;Dk_Kxx`dfc=($hkwv*MFx!d&t8J!RL6vLPPH%6
zWnx6t=LfFj7MPjUFC!)%mt77f!t9vLYa&?h(Z)Fz{0V}=w@3n@r2bX$j~2+$M{n5k
z_5ghIf*PX~D}0%G4Rup+kA8piFX#YC)ICi2p1%NM%F;T7W0Y$~5ZD}x+$gR9d@wb{
zhl1DC+E0Cm!{D<b>>d=Vyb2n36a<_+Qyp2jT;-k~dew#KJQefp`dZE3YS)xi+5ye-
zPj~3oE(;Fm=;ny2B<d6K{U75%b#<l5ULUrt&$UIp{sD0%7t|-RaLV+_i<P(no7bx|
zo{WL{i*#Z1Z6IZm2E{o@y-%O}Kd5?Ls@db`g0Fv_hC?uNT@@4hIok=ceQA^4kFp5E
zl1WxmMxC+`>1#LEGRQ~5jbYv^=56d7R?e(rjk>mY_zMK*;}LEkVgBdStd_bnY<39b
z_BNm@+DyZ#v?Sszfx?9qW;IF5rj??px20+pG3AO{)70)azVT>d18Oczi8u|~;9gJ{
z$0#i=yMRJBaz-k2iQ2Xagnnu>Xh^rIZb)k)iU0if6nqSR;Ed(DBH8_VGQpYGN;rq1
z6DIBP2dWj?2SzG#z0p7^(1P)h^5B8F;>+}v53KN*;chhF%z`z_8eB90%aW%yPNbaU
z<@L@MnYk&bpMC;fG^!(+%3<qJqS9RMkf9^ae*uhK#iXX|C+wGU+LAnyW-&Wv^k?aJ
z3sNqV_EHP7?58~;2rLhvx#)QeZWMBaF1ro$qKerG#KS9d1i*0o8O@-}`=j;`;ww&?
ztaoAW`dLHv>)6!Wu+8?y3E`Kg*kvj*7myAa{AJ-Kghh!7d5qaGc5C;2EP`*ps7^3p
z(3I7)l#Hi{?P0~ZFJG=uaJ-uQH$3*5?lnZwl*<->7rW@vgp$XSRftd=Sc6;X-*!Qq
zG45PjXv+|Vm<X)DNK|?E*a%~n)_b$93rRam5hgHo4%NpUr4?l`=F4O@QkuyZQ%kcP
zBsK=p64m!;(LT>L%?^Yi44213mf3N@`~LWhP4ngi1c|PfA-vVc<v7&mWXv*&7=;`#
zOWHVU?e^&(xr4JE;V2-FAOZz=<ukr={U)wcM-k4c`27LnKnZZyfyse15gN=i4ViE2
zn`kkPB1xAo_t&yaYe<%O6mOV(Z|r{(D_wH%Af1*UPu5C)*HA8VnlL8@qmHe;JWP?N
zI@&w0L*Kav&yMl~<OerVL?{^alST&#OeDYXK$qSn-)z=%)7IASUTcY1l3#yVp}EI=
zY}x~bAU9s%1FT-0itghVgz)(!CQjr#pEB>c2|?i>OU(lD$Q*gQNrp!a-tEsDAtQV!
znGtO(WC;K`0?C3HmPtdZpz4g@iRNf+nlLkKt5lNiZ)qKdp8Auf+x;X1l_N_qfIlHI
zA#HG{YJP-%ocPJI(#rd#w7y|<{6QDGpfhV+07{HtpD*|8>zCzO`la1bd7zTt;)71Z
zCc~bILq}A48it^1zjj?{C+Q}rSJG2Kq+(^ERyDrkrR=VA0IF#b#3P6%<Pf>pI~p^Y
zmu0}a_t1!;21lR}f#CM~3E*aUxS+<nJ}E@>r-Ty+W`3+XGXD1pJf=P@4y7b{eCpmx
zG3(6pamvx#^c#TME7SJN6b}+3iM{(%D{+K4Zsz%_qEw;L3=cejpDgg&Zkeb!wffw$
z?Z6CZ@TI#{r=KCv5<QdOavOdbg7}$>k1TolTnvh2>aJCjwblz0IWQm%pwcAHDhR}N
z>9G{gRAD$DF_{QwN{T7%SWhINba#+&U#AN+djDjJ)=r$d5p#{;_hK6cWf%2TVOU-E
zk>nadB&C>uj|~_U;*tUZ2`I}f%i9kRC^UM}XFAIrgX?dJEPlE;B)olKsfjH#xPlZ9
zb^&kPTP8wZ9c`d_XgV0lK~*5&?v6L&H_FI)^PxLS+)sqRv$^2*<@B-uOZ;Jjc^%+e
zS3^HYg_O;wjr3@{7&nBU&iD`M*aBBa-H~mU?UnZuK7j#VLN=sa@jr6{$LG^s>G-5l
zuif-Tn7#r8Z@*FYv`BQ_;bqloVCM5)f?iX6(HV4#U^#n&wVrd1k#~=`*53|Ls%WJr
z#vIhc5#2cico)4cl=oF!o6o*!8+<c3X-r70R_ifkFl6!uXo}>I4Wbe`J8Z8PWqi!t
z$Pp74iLNAqow(=skktt?wLn7^i$dm3?x7iVYrR%s;EzS&CLO|Y^3G_^P}VM~STEHd
zg0XWPqry#Yu8!_#!f#d}XQGF7E|;UZEG756ANW(+cfw9cX%^)8=P%uQ$y=s2491pP
zooV4t(^e=6;uIJkUmje5^u<whm_~;4j6!1qBXSalb|epBT>Y1u=^@bm-)Kd~qGIA*
z;B^i}%ZH4Ehbx70BsS6hX`Yb=I6+W*gy>Qs?N`4t1Yw`?JCxOZQT12D;bP~bY|Qly
z9a$fJeM~oOU8Ate>fkg#`y549FkxI#rwVil5v(TDWSt8PRc6@U1RcMus>l)h>WG)Y
znt*8WsmRsB0HFblF&ZJ$V?GrBMkp3)AHQd2V*NJ+sISnLO8~T?BB@}i>vqlt!;JYH
zue9nv)L!>zR&>>=aC3JW<IBe-5j(jZR@^v8gfdKlQS2r2`<+jX+*<i<2?E89Xcmoq
zlD<etQk~SIyGz(#9&SErOno*|Q&I4HqHR7_^gy;69>v3aCZ-zq7ej5n4_q%gLP!HR
z%I%J3>mZdXI)NRhI^T+z*;W`0j?AyMU6hxi;0rnuf)Q8G^SAm_pu42k$*{zgPoGQ7
zjyQ<+4sn(Cp401*M(g7qDoX}k7tuzCZYcQ;zkLd;gDa}OrfBO7tLW(NE7!v#PW$5P
z7t%KvrSNmTM^g^N=?kw$20{6e=#g#CVI90aoO>Vs%ip_kZ7=&8@XWy1LPVh>a4k1S
zDlZ0Y@uYPUp=c+Xi?@rNE!J@8GePqriBax-yZHzLpwc=?ITLOWNslp&7f~eqLvWX7
z8Dp&ACCeCYv&B7XHt33aSa_Ku2Zm1ixEbb4x`H8aK!!kYLfO_);|!*BL{zI_0hY}q
z7m<^cI#%uB%BoTe?Il6&jW%O1A;~^CkvwpBd~R3mrdN0U_i*=z2Sl)zyfPhbF`5Au
zf2=YyV5z9q9MZ{&V6r13aUVDx22D^<O_1hLl`}!xf?Z4bC);4dLo=Bv+j2nramz6T
z<mmUQFyx5s&?{p5!<=2>VXBcJk|gEpr3@lJ^vSOax_<>>V|bGo^q!6El+_oI|1MSt
zn#9PXm4Jb(79nde$M~nEna$4n5@$BzepuIchxQvc({xK6@fm^Hzt;_aBfD;L)-Q1|
ze-C8!X1k=uYq%_8_n=uo_&cX#06Mi5ro!nvOkRQfO$vWQaGp(&!de5|+tK$u-0h8)
z(aCQvWX9rx<^dDZFpDXMXpjV3tOgsUrGkY>rO*Xb3Hm0!nWz4}UhkDb#2}$mpoIV~
zEPjxVx7Ex2aBJdBI6k>DOkQ3KwZuFkMX}ACtK*)0D;D)UpNR@)2W&Mx)@`1Dh*F5-
zP~~$@HB%Pd76kN-3XWKe-K&Fas8$jPl;i8hYG*L&ufT`C-|YLnH}!3xnc4^;zR*-K
zrkv3{HVoBWk$H}VS`<Oj5>(j~%gBda=7{37vKkeNGTPzB;}-x)b|6f<RyOswbxP;6
zCIN36<U`l_?h|vOQ0BVTxt?E}@CZ%@w^~w(<vHz+n)s_1*2S7m8l%C%VMglR{GdNU
zif!~mG;-mf4sto1N(sCCv4{JlN0*2j{S0kFx?PcF)g6u~%y>5EMWq!9GwQ&uTriYd
zTkDdG%&{dNu_KRsX!Gc>8?>U((t5Y51I%0SaXgU?7G4s-E|fi8q0<4ENb{*|^lm++
z9yb#gD!(mH7<m|~4&;F-U&(~kJ8f<}5^XJX0uT-auv%*!D+1|-=RjuTCGz9uYi}6J
zP>@Ec$Ca_LJkCs)m|4M{vw-)C)kJ`7iE3KavoFLyCtRJ&mYeA*ijm31cl2fRZEH&t
zm^=i(xWbS33KE+Aik4JzT``9$w+;oU<5~?pr4k2|qEzb-FyZz4hK8FB_ox(wMr0DI
zh?5d9>BZIPN~%CeY2B<>CXBvn9egx~xY(QZtd9#b_0A$}HkaWJ?CR;Cvsv>^dpJxf
z_gm~-;g@f_4H{sn==`f8p`NYQxFzPP67I(YzUTkWT2Tv-@r2KI(2Zm8pN})!0?<pG
zqYW1aH2`;b2rGQQ67C&0%VK1H8N!{wq;LxZ*5<rTH45VlQL+xMQph$ahB8P9BGZd3
z5tZ-2#hs-(kA%9RK?+3@xC?)d0as5dD2jNx$Q=v`!P)=c1|iC+V9ON5zlgR~w%M0G
zz4ATRu<|6b#Qo@dCG{4Lg)_T6<5zEpXdW#NO7*IhT-ySBTsj7ac~^ywbf2<D(uAd<
zH?kz+=WY!TzV;(ZJLOtCC<Qtd;RR-Hr{MF|pP8DXw}YwA+O7>Emq9ovrKX+Y!TIYz
z;*mBb6=Dr1p6(pB%=IPqwIj&X=J{BiS&ri=06Wl2a1%GPDITi-&RBZ&L=D}3LGF(k
zcnBUz`XIqWwA}a2ocR4YzZNICmX2L&G|YPGSChF+{S7;jPCK92N&YvK0V3aKV3(sk
z0@b&9(O*gfUdrl>#Za+XKVq2ST*?*)?S7+@JYd_6IH%CMK(g*=t^>y}#})KZ-Q9Qe
zDhFD|EHYjw#T<3&;QUL_rmySGLYGhjNNsqaUieKIDepSKZz)YV)Vz^Qy{j~Wh*?`<
z@BGRw?9G8>SqTm6=m<)Tbbt@#)73c3OD5mr?czyxZmFb?Y%V+5JCB%EsRGi`Y~03e
zjikLZN|Dx<oSE=0gb!`;?#(w9-8uQCJoDu|H+39T39xJ>y{01Vw+1lO+Z(YH!%sKn
zEgM5^js~BvB>)K_kE<QwjU&v{nAy!*)2yaIt2=CX3%xuQ$=;bbPpZI9gt!^mnjj64
zrj@*4`PEW~5CocRo_@9!iqbYfW(Y88OG39fGq3-yZ;>{xZc<n``f}^AM=5R#V(byA
zzhq+~e-6>R8PP_F1@l@jMpjxune!X~@=TfM7^0bMz`ggyfli*Yb!BV8=Gd{OQiY%7
zY1<lDt>qiKF>gwE^m{zwyDCMXvH(gJVU9PmkeLJvj75v!z~L_tFhuU>r>;K>gOB)X
z4^Jd1L2V8sT<rg)7^?21u2dr~TWaMD-Y@2ybT!3*;<J7jYbhsJ!{9egH{Kj@mphkV
zlx!T3X?`^sJJ;|WdBYwE=kP1tW;66pVZ^Dzb~_6X>*@MIYA5t_7Ox}d4ueIa+#`1l
zUl8l~9|n!iE}L_$E(e8U?rC7xLJi}bUE)-)VSfs)y>AE*uFEvS`i)N&^OzTOs6>kz
z8V(w<_DrW{>HHRA+uE!Or`9BJ1Hm1%^n1^g`8B16N~5OhYb(_yA1VL3=MmvLW?8us
zOm)R%5Yw<WJ^2fz;;1`@A6OCMa*dX>j*2HLSpvK%Ob+r-oOt@51QJ%X9%-zo>S(Bx
zpubfzU=PbqQ7=h`%yQU@v7O)y9i=Nco64#-u7$}IoY3a;yX509BnV!1LSHK{(Ij!l
zeO>mID#37u^i<emU$iIfUxwvw{icFTQQihCuR3~L6&>x~C<51}OD4Ia8N8z)8IjMF
z-q`Xo#D($#aTXT6A=<KRtF0q7NyDrkTmJZ(#TGS7c^y4t?FwRoe7;T@hP1;Hyam<>
zjve@wHZ&fgh;rgmGIE&*Na=V?S)|NEnemEK*RD)UjQ`AJ?wHr)E_Fo434H_?cxV=T
zWix|bD?qXIp<q&~B!?fcSD!%%7w?)d(&u5>`z|Y_{XLn#SSzGruVhQSwo5iDIu-W*
zv-wZhae(dakKTx#fsMWTKEHhQ29pBQ0CsVUpRA^)cI=}j8J3|VCTrc<{>yco5&a-d
z@59A<!2YuzF3xvf7g6u`Nz!1XUtpb2C>L(yimcEfJmHDwD+U1itduji<EQ@cgS76l
zu4^>-G$P!r5%Za?1iQ*jZc0JE-ekWB+HCXJNmTx*u7nXoi8i>KuwICzmaWuZdYj%I
zIOm#EG~XAY91^k%m7C-#dRf*=SHIo5`VT&Pk^UPGJVT2ozA7QesjB@?9R4IJnawHx
zD=Kla$|UsI%{$=F$h+ghYyB;HMss-xUSIaGl}`@C6RyYwrlxYT2S6dhQ($;^J=&aL
zFTIJ^-vM%K>N15}s$1})%gtaet|Ev6tgHH^>M6C{&KDcP5qLCSrcifP11&3Bd`RxR
z>7yIS*BP*R7?<0iz4j2|^zw#T75?N6is8RU@W5_CIuKIg!9PU4NaM3(CmdzdQEK56
zCeyhpGk~^%G(pbPSiUBHtYYL0FK7@3bR!zRsnc8qCK<T|5qy!r=hP+nGQ&cDNRw&D
zsZDb?5)sRTJ|myyP+{Z|LRf}shXEd`>%1E={1>VTZRswY#eN{@g;<$+|0ABQ=V_H5
z90Y>Y1q?CM(brnNg#=K{=ggHrJPRT>A8b}|<_d~WU|-}%Og|L5IGdX9Zh5P|dYVyC
zm-_J!GH`q6MT<K6L3u<I>4VF%&;M3qDk+b1x|c=vG(9YZ`+IkhE|$~0MD^6dys$i9
zD_;!Fqp?w`T*pv8?v5aBx@G!)RVmx*IZKccryS^Y^wc;W9yT9TgwlgqI-fxHkK+gE
zl(@g0mW?3+Eb^k@jeJtAh=&O%&AH|{2pd{J)FVJ-)3fRoX>XEUl>6eiX^*8prN4W$
zZOE2V2VoBjj&FgDpcr9sXK4ex^{h6wuiUV?4)n^BEe!787EiP2w9EkiKLEfqF`1+A
zZ<WEZWZ{c{!Dpd$Q7240EMv{47M=Ui(!Jb36fx)!S-UgrrO_-GiWynas-pcx*D(<N
zn7f6XFkzvc{n6|$6q$%HKd%jX<4i`}T#`|?u8HVOFk{XV8gCx5S)jUMFG<JGFaVm<
zd;zC5VODez#@-h=5!hQlTn1Qbf$S(*g^D^*C$_voT3<<uIDZ0imxd+IJsm!U`-i>w
z<(!-->;6HS>l_5?!EHYn)ry3dSxl_l_&G)QB0s7dboBM)p(a^=wuVU-G&Eni`cd*|
zlyZ0<79Wz3fFd!DZmnd+zu#S`qEmaF5h8&pt@&98B->IGu!?enmQ2{u-%jTG!rxcQ
z9tns_jJjw$Cj_i!C+g!6&t^*xhYVSlb1&yz=;lVVv9blR&DvrJYz1$-=+1R{axrNt
zmTu9^gc!0sgq55kKlnQJ!bX+hEY=AZpsg~er10t@f4z{s`LAYdz>>X~xuYrVNKCxK
z-BEg9&=;ponKvbylb)K@`d*kHc40?#)}^{u_2<;HP|?~)f}0!IXDhbL=5>`X@JUXn
z2GirqD_|Vq7?W2?I1N`$z8}%V_on}7B?erY`<x4ABBrG)$$B!$j=Crm0I{MH4tPpA
z?(kB3{rC`_=|ZJ(Bw<0->&+YLmB53dK_*^u@y|9_1#HD>H)%qah{61yPXvlcI{Q@`
zp*6UEx>O9zr$hAg9W}g$`7`%}$G|jSirpl=R<(^vU96+@!N4^UB92c~x@vOQI#|jl
zotf(#4cO)LimVnBV)FL~mNMN|U!dlp`btowFntwg{hx)i+1l5`6#`?K*D3uE^c4fl
z+!&J!{>pt`^?dfH(?H#+OqRYa-(c7^mBy=igb25y(q&46{8kCa$2?z@OqmorPVuKr
z!Xg3kP!LV=oG+k}{2w@vV-PMiJyPwr`7_b=qDV2On8qi(q18Pr>l0O76-TckprA5X
zbJzWM-(6i>s6DC4kSlMBCc?puF5X5{r{&tr9`fBYfQK0OHLxsKvsn&!VM~r-b2r3N
zczalSw4T+Bm}Yycu!=~QVB6yThfSc3f#99y>iKH>dvO#KL-am@#f#}EuyRLGZQ1~-
z2KQbhiJl-+Pf4CQ>Q=zd8MBa~2H}5eCU?O_KBYOOKC+!QH~#1<PGi6!eie|1d0ORN
zf{7*jUW8Rre)4(O_cB^?EqY(sa0d@yQDoNtjYWZ@K<N<k-g9%uP~`I6gF*5TkN+1K
zeE#?2u7-f^@cM-37j8SI0iw8*pk&gyH-f+#g$|q*PilG<0Y0;p^>4Py&{aaC!)jkZ
z&i4(ZfO{ok-?VSDIFcZU2k<GDDf68eF!`UP-c(G$F11At;)Nk)H<$SZKx^;3r2=77
zI&7D}^IwskNC~ua5S<#Awo0*LshoJ>fgt#8(}6n)QXWw^`%A_p3^J;0`<WOra<tpu
zK4&bj`2ScqrJH2Fa?h;sfr#)1#g`lMr$HZLdL3I{yh|aQEUKsNw1RqQP@>z(X<leF
zl;IHF0~dSo5tJ>2J*b(?j;T0a%aLEjsj~P=%m_xV6<)lS&1sE~&w`Ut+0Irn5>(o{
zhM*{Q&4<IyF12W?z9REzd<c5$Nnv)hLHK1seAluJz+w-LV^Z3-Xk)?NO%AB5-?2B6
zW45Q5bX;VwvK!W@wVM*}``@kkjZsB;5L^!D;FDb6OeI*#ox=aX`L_OQ^dX_>PE)Z~
zzwXx?O_n)>doltchh+F4df}l6z>lufTnH!maZv}LL6ry8p9FzU0BowcdHxXRK#`SY
zBegS=qQ%A}?dXd*cn1|w%rYx8qUVVfxlwgginNHEdD_9T@b_uNP&3XQ6YBi?Xn8%u
zn#k-97VOz8MzBn$u-W}Y@xL_2rtkf=qYOGxD!0%h&c3pJOotB9p~?vw@hzOQP1H#N
z6nUG6&>jnu!TX`BbM&P+BDP;pGH#n45x@MI8`dxS51=JYr#Po{(uu(Bm;BQ#mYeEE
z#&08|lp!g>dz|+=R-;Gyy1R6fi+3>@KmpfX{N#kDUQ0hERVWU{KYl!m?50|<fah!7
zc|_;eJwI<w?}wT?pxWU}lFHBSM~%eUL~tx@L~A371|46Y9L$63U=<9~0og4*(Xk>g
zoBf#F5sG!v2gv-Aj#Rz>Swpt8@bZWYkhpUe3ak<ARCpPHgqQ~=IVEPr?`O>C6l^zW
z2fG|6oPEs5+H8WzsW=8KNI90qwAQEr4SpW-8vX}6J@5Y%=gOuRe2O2@bGaQkkqjv3
z*BfSjqt+AH2rHA)=uMcQ@hNP}#rf!A#|$16tMIWMz%~PvV}`s|eXD#Jgr=u(99b4V
zfBU1(Udkz^dA1HKq}+lGh@@+ydyj}e$%4%2u01TxJ!m!wOd(np?F9nFj`Y<qGYd;Q
zO^Wqi^z_9&HC~jVrUMK)jvd+)dOo}=1Z)H_(D+rVXq6v`s@9dA%N0nvyguQt1*w^?
zK`MYaG;yL)y7jeTS{@Q_uwS^X$^7|r6J9pQIKoU8Eknd9e*7~#rE)<yMU-dRSECA?
z(f>Au6^%SU$$w)xP7jC*mvy~l6!9b+md;fGWdW{KNk%d=x_kP*Xvn~<`k-cn$l9Hf
ztV{8dKpae_`$+XhQv0MB#Ri*F*VIe!TrfO1o}H5wn#cMmQjP1XNkS%isR!!nMCXw#
zzUq5dpx;^dg2xnniIRl1{!4DsuX&-*HrJ1M4$2<9IcsP%C7HOJi?;i_lI7FXtQ6Hs
zA6BbDm@Iot?#!nE2L?BYi*!I4Hyl<+qH_T{Z)n~`w}eqc`1aGR@d*h!7G=waX@Vc4
zzwLX_H46JOV_Q0OtA_HsK&Zbtsc`8bwdlviJ!#=_X2NH3K3N`Ei8y!e*yT7y?<eO&
zOg8lSGOacKhueko=K65Z)18y=38+paNUjBKcC?iI|BB{x9Ft@>Oxn{wKDZ1T(e285
zNk7fNGt!kaSdIt|z0m^)Q)x)v?DNHIUg;2qEH<^B?x*RGo5m5I<dpS+drvT3)R9?q
ziaAp-u+BP0Vb+~PNmgYGdEln&S=%Fe_M9U+IgL)O7rgd3=$5_m`lZ=u^&*-1*wEm?
z?+sPo&Sw}elb098m7O!X0K^S0Z&qVgZ-d&XtfAhB1>P^N<72y=L$=v4*Gnyhi0GPe
z4tFnONXW}N;PN~GBI{i@LAm0Iqr7k~3{Wb1v~<KNp>doE6@OJVbt_ct!MZd~SnG!7
zmGw#pN5_k11!zY)fH2SGYxof3Obq!QarHuqia+^1{dpp9N16d&C8ZyI;h|oaS6e@2
zxd@XhWr5^I@O}q|3dzkYC>S>;px)v2ZEQnVMDyXn_Y@lJaJVCTx68AG@<MJ;jh?<J
z3$DrtP4F!ytCBz-o)0LlrTn@tOAF3e2%Pr+l@9`Q0epObY&ebsY=YxHn4C6|N)Typ
z+@Y^eL>2Tv0@8r0qL`mYkSRnDi^?{Jc+ezvwDaR+oZFMj3k;(MY^vx)|ENx1r;6M(
z@6WCYAxQjaZ{B5KEx$2p%|rx&<8A9O0({Vs;5>qi0MFW%e3J-}#v;{6l6g(KPOpNf
zeTAm!N6t&H;BAJGILfB&24y*&RN4<J6(jpoO*FeoH0hh>B%a?MP2Gf+qp(a=1nqOO
zVmV=laiQ4Z6;vPP32~sl`bAf8pf@Se=|x@PqhEZL?n^`2zb_Peu+wEJ%J%aS@I*uB
zsh$h3>?n4W<UDv!cU80HI2>V0he*#5<xwjR=eQ1ur}2naG0&=vvpV>v_$J{YF>=*~
zK_Y(1NSTfRm#A7pZHuhxMnHKAJK=3?PE#4F^M<Akd#4YK#-C3@4~?m!;O$`yleVnr
z3rEPaM9)9z#EM!0Cf+``AzRVwUNX!Rnm<EN+AR4<f7|`+TCt#_l$zDQr`MUO1I^t^
zD&Pg1;j}PtG5eK<@NNzGA&VD*h28E*c4y;eiZuTr#5{4TPIU;6(=HcICa!2~!zLd)
zWyO%O^qA{cj9>Kfdgn7wgF28wZ%NF9^#P2*=_ADatUG$~@|U<DrU{>cf|^|!_q~=c
z*r0$kU;n(-Z!=YRK7uVuy{>-vD|uG!0V=Z%w?f$AV@SYNj{CV#e)t~yPw8X~ap#@R
z%3vsQH9cGt{qywe<aF_}04~a*C;0Z)bY{@3C=ieW9eM>3qQbN6xDPPMg@;7Nb+*tu
zMtZ<D54a2L0rwZ5lKxk)k?&Ro7d7d00DB{hPTRggmiMzWtCTvNY`b1I?QW%#N_lvL
zf4mIM(UYOqOJRx#)M~(APwy4+cnj&&<u)XiIm~$E$5WWws+VoKmY3>I>Pj&AKbfgD
zk`C!M!jq}b1JpCNfYcm4(+YV<^MA~ThNHY0tK$;(nfh)fp?3kBFof{<7i`a*#liwh
z)_I{6=JQzmjt|MZ=2@K3UXlVXoRhoYRdGbKQ~4IzG8b+UqDL=`-wy}E60X2^qOeTg
zaY?OBB5J4C?H)#T6A-c_ob}%C*bU1jQ%ULLv%?=HeYOze=Ddooi|d)=RTtt}{;3qJ
z5MUTiRy<)VA~R47DF6*GamjtZ9^@owmY@|g2k}R4kk@o?g`5oINJRN7L!&;vGVSKx
zUMSYy&i~?R!aK8E=|^}_6c1kznSql3cbRs2I9zRX?kZIi6TWCm;=4>^<gZDChiwO;
z`t#3vS%94BU{`r04&E-@6pb20A-Bg+t=_q#2c1#{vwhqEvg1GUP@rFhJ?5$JaUr-9
zDMvL}CXs1Xb-!~K?tn3iE_M<qYHhD<t&)Otm%rVie|A4cw9-+Eajr@U?kB%rSWJzw
zPAXcwOw#h^U)C?J3H!)f(zFj+Ped(g_s2Kf<F1umjkbGxvG2gjSJWtBS)_0MjEAYB
zeH0yh2jQfjX2{e{6_7Qpb!+~#;6**0VXDN|YkuxTbCF-=__HrHcmqeF)Wc@bb9et~
zp8hEYmluY-SVt8DzT|9KN1;a=yzA6!PE6LPhZK8hEXzX8X*Wsh$%Q*R3Y~52D3w#%
z67oRrC0>T}x)wEuYwDS;In!z1|2&Osaxq4~ttQhrF~J^PB^wCps-dasWGj9kDn#m?
zvtuVLJpcFc{eOY$?*8%w-4Y>wL`_pp%56YKtRddY>vNHwSk9jRm(idXvZ+T??A9iQ
z)=FI^8{NlrgRbT>`v@PCso3FY`Y(+QZig<!?XFoV%Ox1#`;&OV0N3?k|KOp(lVV;R
zCF5~^g0r0{G4vz)tN4m5F7l6Cn3ylApzo(6XG-LYus8ZF8FS#*5fuFGB1KrNDC$^;
z`ui&3PXBSxQc{_%^DTIc!os!yc>T6-@<|%aawtz&CLsw(EFC(Lc)YucX`Aboe)9XC
z_0ICFS>Ab7<pF>;27DfGA-}xr{g6r)^2EXQR&38d&zKp&QCwgcEs|Ee?(Hv<{(Z{t
zWlYL#&KMn8OI6Wuc}R#h%LBj&t()jf>GnTHs#lt1q`<Mcssxd2(*n2H9^^g-R;K3v
zzh{_Bo(IK66R%pIO2Z_&K&ZI#lszpfz||?)RHA1V@MkD@gViED?uF3I4>g?p=r=7E
z()2{)7a;aCfd!mdQewR}v#Wr4G_jE4U+~Kk)RplPkTW-bGsUVPdXFSPE`RGqc*b6>
zYqbEkP?rQJU93coU(}FyEPFTn3eRxLsN_*rYy|}Sa+ci{f||*4rtHjXt01D5Jbf~g
zvJVP(t>jT|D=frDoSX5z(wiN3UwP$&g)IAVi>e=oh&gX(G=x#l+KdPQaeg0*H%N@M
z5ri4V0wKZ!$*gfISUej#?AHs|cyga7Dg#v<9zlth#x2v8V7KBTiwUKq`?1IaCeqB)
zKt?sX&wf>*B`3ltYW0UDg|ZlW5WGu9ff6N%c3d9XH>I?6NvxaYsDU`@b|>t{7hX_U
z%&KWOp;pUvZ^?Dy>pkOp9`^s3T+Z=(Hzh&pBgZI;VzY`5>PjkU=2Y@%H_|uKfQjt(
z?e2Ki@9Tj!Lhn4+ML)I|Bkd8QEt~@6p2HRAF6${^JP<jHQl&b#DkC}ZUTq<A9{DN&
zlhhdIMq_k-Os4rD^~+t=$5tF{tw=#I({vZgMrdKnA0QMs8u8&KEj&M@zi}a!1Iat)
zP04ih<TpOG-6VtYOXVyqiJ|rgH{mF%2Rdi5?A-T=odc(Y8$^9=@0n>rGA*Pm;xN;P
zJKrA;O+M=<JN7TDjE9-@H*!I@0q8vd)zph=d>aq;(6&5F5m_50jZlT=I?uNwo=GJt
zrlE%`h|4))o|<VcL$^o-QK#`1UAK?p>2l}OC2|FcSH(YHWGsgbLF$<>CoY&j?>lDu
z?|NuhGfh^3G~>Qqp2u$cRH^%w>*~r0LF_A-a4Y}^|NYCqS79(lnJ40!R|%7fZk1Qc
z0~8~ug&rA}px?9n%=OL)iqywI<uC>*uPLF;?+B0Qm~g4D2>j(Jx({DuQ+~J5-4nht
zL>n70_Fk9w0VAGQe~3DYIS^~L%k=(jUQ2giZh}q;ex^4d{=E_f<OA}&w$<n+LNBWi
zW#`<#FtOM4F&NrX`44&d8;KQ%5wiTRg4zX|-Jc{Ht(*#-%80o`ju~O*7nGf3`A>Zd
zbs5jCI4&^7mF1-3m&tyIn<K=ew{XongO988xZlE=1A~mn2P+uhaXxk6uBE&7vEScF
zJeuMei0Tg-6QYPD_7?9$qu_Y|Fq|v|ri`JWl^-sQ>^so-E$8dlJktjw^+LMFFDU&x
z);iEemDWCDcfn{8RFWQ!b!=~3a_f~+i$N_k5z%pey!i!gz7q+sK-<Qnx>vv!PU_$U
z+v=TQ6>+&Af0cm~6Dr`01*wn8V)3zZw_FA1nXxLao4gt?L`z!?+K?4<vtwadvf>kt
zO9QcOVK-p^2mD>nss~f1L9*#hzbUnaz%6G8w0q0E;zH!$ym3<wLh~8gq~B7AAgVWV
zI^ZG7FNmpUB>Af@JU}m8*kBiM`)m$WPzBm)ZMleT;w4(!jmcd2x4R{iM)cAlm{$BR
zkO4Y&v{-I!--sAF7T-4uOqS}g@mx1}1a;3lVW{gPq^H?|1l#?&Ljs3qjc1M%1bt&2
zRHUTuixl%vrnc<sMf<denM{y&bf?t##;~1eq(CWCp0!iA!zxWMm88!W{L}~FV{7bc
zm9~2z^GhlQ@V=iy!DurFKJs%mw<Rh<znLQ`D{$Z%W>dorpUb8NJXT6MOJiHEB@d!5
zSmg4(8v9jVG*qOODVw(S5~pIr=AfVxd+8?SuDs_3W|V@9a|LixGlS88%WxpZC@@VZ
z75VW9phk?A-v)~OFO#`1sZ#mDpCDe#dEkh^`puH$eqds4WP>ak#-pPvBr+5A-}@5L
zEMH4M$mFm~OrC8VM*}|`<sqoly4*23r({o?ptN*9^d<CX%p>pl$X2f`Z+VNeL)YTH
zHG~~WFrMb6(`f(Q7EBCfII{ZE_V8FZ@~5yhjLm570~H`ehurNKqO>uv-+%mw*QrlK
z&NAzeI;~4yOg)4flRv;GGdynm8|!01nEQ@iqVfDD{~F#TXAY^!w#S8BbJus57NTT0
zK2;hWHeERv5PE$&?5(J^$j6XPt6mNN2N3*MLKRJ!-4JU%k+apE7_<u3LJ*rPDh?W(
zG59l38oD)F?LUpQCn%39OR{;$cy(E1j(<z7FXlr=YY4wq=Y<`Hd?!0?p!-;Ca~^b<
z#a?4fJ>d3ufBfaxnOaZ7W=!~<WfaT&FY@Zc*aiU@uZ|nzQr_vaoAj)-quuOYX`}uu
z*;@bZjvLX#+1UwbYU)pYDn3E_!X7@Oc+*q?b$0<TgI9a@1Z;b9oPvq^Snz7_lA&00
zn6WzXOJqt%%ay*x5HUYdvT`ZCa{G{mEdHpjX+F$Z!PK;TV6ogf?<+6ai%ke`V-P8o
zIq~l}FBsx7G1OY_F0Qlx=H=9hJZRE`A_sIpi~8|@UNKTnp<+--=Ns8;RPZ}%9^c0x
z?B6r{?#YFRa}w*kfqR@m6rQb2HISU;ubJuGDDstQgBiU{8d8L>DQ=T4q{i)XMN3;{
z?K-zYq|T>AK@J=*w5rIkGK-+51^udmrF<<81BH&?x0mIWo$bIznf&NpS*pq&(cl4a
zKu*`s#3Pv_PZ3vETC*(MujAX(l3FXD+Z&PJUx@E*u3|S7N`<&dckNIZ#9n&jQ@ifs
zBciR<Z#}J5&WB>b+AkA1`#rS!i=(q>5Iu*r+{~7@LKVM@c>u)>8|?yG^XnnMJmu{?
z!G_&iT9u7u6Mx(bHOR7lB%i1mcuMIo`ZEqZ>bqQW+5REh)Y=}wn;VlGD-*1gzqnb2
zYt7qf^-j-zuw?Xu_nKqUnsiikgP&AY8!*qI-cFbs;d96T<lb<$?V`efVka<o6+kL8
zp}gJCfEi&6S@Xo5dG1BDf{ur!N@wqw2*eUMA&mX3>Y~iv_j;487f0d>Yp4~~P-R+h
zc`&owl}p@T6<QP_anVNlo7AAWfHroLbfW&0f(#X2Sz}cHh82l!MWq<A+Lw@Vn?0FI
z4%b&}vOL-GiMSpN`7zOyG7VO;y3i^DZV!Ub0mgdL@x5IkYa)eXBV&MqNz>SUUO(%M
z)f|+0T`IGbQkZB!1I|nX4?P~kPIcn_fX7GBuXVHXX5y?&6BBCQt1S!LqZ2$LI^YVx
zdd|L8mB19st)&D&m?NKlLEAb(vnS<?*o)6I#;SmXv+(1RIYUl%WOm=Z%NdV0B5fUW
z<IG!q5qws%Av<}jP@}TRxY?T<N(LyA5kKek9vz653YcQ9Ma1Z6Db{Adlb}C2e(wZW
z#eU!<i`es<*QfJTw)#G;*_3zZ(T|3Sl!nqlSv|Y$eQbNs%SexdgrHMo9@3oBn37Cp
zZSxyk!wIz9{*`>3yMZaDLO5iOw+bfVKC=H}CY+Q2-acUFQ}g8Jo8tKi-+J}RZ=7!M
z2uRD3_jy(~_dXh8No2`pwV*n(%T02z2CdUT?*GVT0&-^hP|t>@Y`?^l<@HB_ZBxxG
zmB)e@exCQ_jbu7V*@c9|2FFS@3-o|VD;S#H5h^Xc=!QTyIX<S61;6A2jNmvsD{*za
zIqVUqeva+1iuM|LbOD+}$2SXO7^G@%qRiaz=T#vzi&G|`_Bkd{-^9xl;yoNn(;Uvr
zuh(fiB3k~%8mo^&V{SGdUp?aqfaG*?HgOSa{Xw4fDd`@H9N4<A#tobS*op%9qLb<=
zc9b&(-)H_Qz)xZi(gmZ1d*<CXSOqvS&6@isgcSE1%wgrqy~_pbgOTMu4Cm>y<jku9
zspN3YV24lA2zF<J>~`CWOg^-(v$PxT^oacajp0v$uz#**qGlPm84SJQ!Y!ByKh=(J
zBuS}6w(*hls9eIAeNx`AWLJP%f{53APh>4c{d_H8_9|B!8ggd0E4Zr^3k%(Hvwwwd
zR53)wkdmiS$sG``0diCbDosq*ybHq84^=CPO0l8Rxx`XxlTmI}YUo~;UpbsR9_`t(
z`!>w#tIKI;bdN3#14<|%6~!5*Mj}qtNNHcV{-1vao+dHi77j1(eVtjFYz&<h!bFg)
zywW1M+}p7H(W*<U`3IbyF#L7?<o+P{N1~VGqG9l3BDYXjqtoZzF=*+$+2&+hwxT<O
zL=%jN3A?@JcW;)~<6DF`bcJ=oU3iY85rGbibQp|Go2gspuR}D4ps<lM(%X*sNQe1P
zCrn0^(}L@5K2GWhzUbv76~iMsfjok?gTn9o*02l-%L%8LM475|mU*8mCYog7CL6NM
zIqZH_06#QgxLL+-u)iJlC_!q9_Ipq7&NZW6zuMz*1%p6|DVMeJN<bxn#U%ANQ5?%;
zMCZ8ng>4X<)+M}WAA}_4U9$lIJ!ay;1l^UK$&?BhR<v<24sK73g7L?%HC=BU%K#*?
z;092tMRkMXW8AH@eNY?O)nPL;_y*&0#&Ub$_Ee#+Ya&!NY>Y51Uh}*+X@FnHf@hFy
z8l@fCF)F5cyb~}oUnkJOJx*gHyLsor0%uq_e+^lP#^|`O5P03JZ<xMzJz+3f4SWh-
zAtE8~N`yEC@>a~(%oNqweD_htHd5yRLGux0k7svbGo%hjk_b$El<4Iu8e*eii>uH)
zZ9cc#rhH<Q&(QEA*N5fontTd!6gw|$d}dvkp+&7A7o!bF5oD|UL*1u>?}}zvMX3h|
z#1C&!J;fh*q1YRfgenflw!^7s**M8El^>jC7&ItsUoD%ypzqoVem*-Ghefwa(4F<z
zLWoMCNx$wOiw5}{Fd@Sd2O*CGDpjx~V%j?AodhHj{dR@s{-lzZ;|4W0F>B(tYv5Hd
zCMIxX$}x+~53Uiy&1UOByYCO8Plaj$P2PJYc*UE#?wku*ymQu|Sc+Q9W|_e-_mu2!
z{>Atq5pAmeq79LiL%$BQPqP3rLK7I3WZ278lbawha5@{kE7QrA(S9&A+l$*u3hD>W
zP=DSY=K6|ZGo_4q=@HciqEQ+M(Yk{}$(`ve!(yuG^Pz|2>rY27_~J2=*PXjmieec+
zgSiyP|9=AN)-#PKVEGYWh)&7!uM68rwg!0j7#^lXrvp&t&d9lR(<SZ{NPF#M&=NX5
z6i!w;k;oB;yp5ncz(8L#Eykg)ny{_!7-aENR_TyP?upasbsoQD0|MXV{Rg>PA;$mZ
z7n+RN$cxBYwJ9)pacc>k#zEtu{zuo47|XxzltI?dt6at~KaYU*x%_G&@(*{mpSWQO
z&LCvni&0f|(WQEdM1!Wh=cV$>W{8?+`MxS`#w4Z+UnIoPChA2@k&;+FJ(TTh^{&bS
zy{Dqr^4r0(?}|11?1}%7HxGJCRf@SCPz0JjH~|R>hbv4dNqWr(`56DcYe~1`mFbjf
z%fk$?>z?X4s@lcp4X<2<C?eLV8zmx0PeM#>FCqV3C@qf#XnP6x@FvAEl(k)h0b9VQ
zB(Yi_2HGMGC*JKZS8olt$SHtgfr~xNWD%?)xxG@Y7tKa%zW9j62232yo(zn~+7>=o
zS|2(Sm@A`Fdx&k#*cTo*G?4;M_wHGol2OPKpqLgO5kv?3BK}93QxP6fZ*@5iOJjJY
z=U>W|q1f)k&_kUGIiUo4V_fZln27k`@bsQ+fH21>C)93|>uken1{7Olry8MKT5JAg
zo5+JqYtIWQFZ+(81QdUIN0>vlHUO?%M=;vDe~?;7pOc`1Jq_xo?2A@vkBk1Q3bHex
zd#k7}(a%Q}RFjZ8^fEj!#nIg#X8TPtsQ`SkQiIE6e&lD^HtzIUfyMqZVLxKws^vP&
zg{#ndC$cH1g$oAt!0O<tf+N`jj<rg--fET?3U2;)+|KXuKzz{$8k`hCrzcD+XFF3^
zlDb~EHCRFQ2+vVdhlP#BsBTMZ8Y89wc~mJ%D1UJ)7O0|>w~Sj5&L52RK!#W^4Iysz
z5@e8JBc8yNY?xsQR%wifMx4QN59s1F6h=K86pa(FdoNWGBG4a=-vs^?FnE*4MMlNB
zrHkRJAXKs>ezoRj*5knz2{OM&J>@pf7QewILjL+`U8Yw8Bu^U_90D^PU&a|p5#|%y
zXRU(cT_oQp-?x?ipdU>^n6i{pt;kHs*-Vkb{8+syn;OSn#*lUp7_5M|r`uE}|3bN@
z?d{!&Zw`qa{Yds4%8fAj)BXE;$;}r`+1%wzGTBgwI@t>g_)4XJFCPT~2+4gTjOW;M
z?wT#xd-YuwaEaW1iiP^ijItYgFlTp}IvZNH&KE9w)p<J(z-RYx2Mx*msD#TQU(oej
z!ru<bxbB4)(09CH4@7N>`~Xl>Zjawx0iEUe)4bHhcX{oopjOv|IJ4?r5eTEp`{N#H
zKyb@_$R^Imj70DACs}o)AQM5Gn^LwcA&<{+YrYudgWdG)AM1#9#azfV(n=18uhfgZ
z_6~t9c|bvHJY`<PpULa7#WKh);43SqD{CFzxKcOOx9yDFv0T3E)|x5H)A0&Nkz%Oe
zxF;u+1th$9J%YBmk}1oa#*+VR&aB#C$$5wL-|sP*6#E0dFLL}!Y-ZAnzjct0mEOM@
zHfw6Q!<~W2JKaFjivVkG)dLg@QVd4=8TqB^9<>cpD1YwjYevQc{L2vE86)!PUGZbj
zS%wB&GJf%Tw1Kr3SwkL3ctb~uZ)}uE;Zf=p|IkzW(3=tSQwN${*@)tLI1m@fc%^&I
zz@SfT<J5*8GWC&5_wgdKFZPzaP8I!T?z04aJ2tKhHZ(mat~gT6!F?kY^s92uA;>Ia
zoGC9;I!xa=or3<)K=77b+Nan%Ne>ipj+mkw^Wty;1iYntB&a>(&E`Vtq+7j<U<-P<
zwZ?l|-@&FVggo)U;m8xZiQZOd`a(H$gIxkZakqa-UAMXnn_xKNqr)Le=@vNBtiL>R
z?;AUW5`)b_R8wHWtaJ%_Eg32Pn#&iDeF9tS_WhQdZQ<zTj!v$5U-!Zp85B7Gaiu%V
zat?BZO5$kk94yf?wSh)LaLBs~`}-QV$~<)EDB|N#UY;*lUG-!T&Xf_V_Fu$F9&5q1
z1_2w=6^_FQJn2uIwf3@hqNzdTGZPEYw(XLj_tPVmS{Epox<k}h^iYp6^>NJw(h-ap
zos(JMQ)Bj#^yL(6K!sbn4qB|AY~p>(<nxl{z->SwM>sL9rtOjBv?YZ$;k|13@4KXI
zcTCitA6&E*eL_{c&~+hVau7?q96|o?aBn24o8W_8B6);)f<{pKkg656NTm3Nv<L2H
ze;-Rat|8LW;E`&oQBX=-I+)|Wzv=KyOs=1JGAhfoa2&q2Bm{$d5eDmC@+DdS;^^5}
za900SWn7{LD<q04VL*Bw_cKxrSdNX`@dza8yNWgCWF<NnRKHOi;Qvis!i(O*e0#du
zg7aiq@Ok!q-9`5N)1lMz>W(&8tG|PM))i9poacgD9XR>PR`(Vt@1gx$<tRW9;#s+A
zJ6wK##r^#P%4sl#Art#JNNRqmN3UMK6F^L)P$h$c4)n?CW9v0_3E9;KwUdPE?R7t3
zra_&}=Gmf?sz9N|aOtuyGA{el7g7`=M$H*2%W$4CS67boLcpA}lJ{nZpNrHbDvDP7
z9;gE1{J~>``8o$HoPGhDuej<8bzO)*aK~n`RI#u0E4q*)v)?HoB;jzVi)tC(!(j=^
zmc_)e9U8r?sbMG(g*kQQJ|AQAfFZPB?P^08d_24dQ2X3jb?n8XIIRlNSoc4Hcx9VU
zY(Np29?m}UrJfR@^N{EIL>3%@-_oL%)r@3F>FF3e4uJ(Yu>;`*h)~)j^{306S26sL
z&PNum*!#-fN~lU&Di06jG(16|T<CJ$*@Va7BQPrf!$U7jP{hzEbNZm8)T=MRGtN*k
zuyK{Dfift6^IKMKq%=6Z!0~i|*;D-~Pn5>-j|h4aZ?H4YU|_s1I!z<zOC(Ozqu<R-
zv&rSEQrw0Hs>E#RGd+@^J`AYg&>BSGSS~Aeyh|aKACc=VYsSqprsaz>v&12-U9_=&
z!0}ipbcSlT_rESwra`CDr7Bu?wj%eO0QoqE*^`xhdXgl=4pVio$oCoQe-io#<68GR
zGW#{=qd~UORWiMv_Q6DPXyU-sGi|pxJE8SNw~AB%^jh2~iHZn@87a4OwgI98XVC3b
z_+KrhV<XHNVzziE=ySvPm%Y44z+(z$&8amOD9V$31$ky6l0t51m}P3~E5FGQt(RUA
z#{-`amkuSHNgp&V%7@N~TVrRcf>t~}A7sqHgt9I{QtI@8S#6i~NX5aepxEm2kQiEs
zD1+(V3@zoxcCCBu*e)Q7X5wGcx>DT*5OLj%I*<NvgnKz(Zu47w1JF{n^wWx}hgSve
zkMOt0-~Km=%1MeKZyGMkB2+DQT|L(ucVT-Ng}U3jTk_Tr*icK>IG|<!2HLn24g<}(
z5NfxXoJSZ4Cqe--mZ8Sh$L2#|fm3~y>C0W?g0o6eB&kn|vsPKUP|~Y`g_jNY8E2Xh
zZ|PRqVg)yC&*Xe)dDob(Oqy&t-Dki^zrQww6a3#553d54429I=*D$|T@5xDv>ou;d
zlWbpSh<`gsYuglqgPA<V>t3Fk-&{9>(&rfxNzRz93b_116Q?9;wO)W&erKmOw;H00
zJ>YYeGiRZ$g|*%PD2(rjdo^z98Y)QAVcO^9FqiTgB`dg6h#8x!P)zWx=WXS;Y*Bw<
z_D+B7xdsof>m@*!5A%zLYJr-84;#{V+jUclwHQ-8rTETVi}|4bv!CU)sf4}5_8~s)
zU;C%vXd5#8lfzNK&V+@uuTuZqvM!D@$s)W+TH!#R!}65ni78~``|M26Kl0S;GL-~c
z3HWifA_ZaO2p3bz<j^b|`YatRUNCpP`RfO#6z|S=Pp>D<GR;w1e%+XNfMdyR-)(N?
zdN;$~{{o|I?8v9}CbA1a&b#tS0Tz)MWM;<IMe770mJagD_PGOjK3)yQE=-AaMP23=
zI77o{=&oY=fJ9m2(c+|AEDEy?DsklL`}O~Y67FZx!vbzr{N8j$CR_ulSF?fzg`tL~
z8HM2XZJZnOLO?@?_w&_geXGJUVOQ@rzbU)#t3cfz$VdQ4<!Xr-;9B*vdtZl8j%%+q
zA(km=fVIke>x^3SMkr+$65x}~tI<-zP}=X7XbggY*oX7LyJtH+IQOoH+-kD13DX*)
zzH>KLJnQI>HX-rq4ot!g5Sb!{y>EahEdik#U1icVjm??KVhamT>PT=}FtWzi>c$zC
z3^+=$$+Z1@H6WA(Xo7WXM4epK!jP`HGsr*5r5kHlD>KW2>+YoHpSoL&Ax1TGSj%`6
zunsa(h1IZMAv8|#a^Yv>$^V+bvzZ=Xi*y{;@3i4VWL_;>{vfvuM@rOJBHu(i@$oRS
zkqma49*7~b1%p}?E9}oK0PI4C7x8^OF-_ShMIh?7r+Cr2Bl<qF(ajn%1YExUQP8lj
zP7B*6E+(kFM|K_zW$?uV7PX4;{3m(|%ZRq_n5t0fiG=CV+yClGGbK%7E_vt2-ovD4
zN}%sB^{bM*${>WzPV=_)xbjMylEp|7fZ3u~8K4XRunoEd;}!_q#F@-fae)x;iT3@r
zG;ph@S++?b{EeLel0JDXp4tl#Hl^1lj%&gqWnNBp`iYo#j^2}l2wglwr!|0;`MBb0
z?vcx%a%_@K<f!o^8iSul4o)14#sZo&q+dv`t4f5%3}XmRG(4q6=B%m@HwN7pPg=E;
zMn@~~s{Ht5c1IW`5Cybvqg3#qPlD7bOU{WIApBycPNQ9*R#xX0fFzzn;FPCWPC=hY
zX7`8l*bOuVY6BB(k)!b`Bxc0JTuyIG5?9tYuQy<4#3jPH0`hKuU4h78ON+fS5u+TL
zTpw;r9hK>hKm-c%Hc)iIqtu}y_l+})G#F?VHhu~4MLZ)}1m~OSFVN#U_Q3q3u`)p1
zUBhHdVtOr_>BUXK0WBm$J7;3l7vSZX?bq!FhlUlFYp#mU%{7?x6qSb>&(V+|ZU~CM
zuu_Shx)pNDI+Hhoy@*km`RTw%LQW_e#cG{8>a$CPCzBm0XCx6CDKXlmakI^=f}_VU
zHc*AHZax%kYq-QPEF*_WR*u_5yxAJ6x#$zNLixqOkE5|k`z***B{#FrASK9a@mu2L
z7bS`9z)db=37&oOkOXF@D%b8dlWj?Fudlzs@%EdCdv3*HI~n~Ae~sy{s*d=U^iyAt
zHmDz$s$Ml+Cb>$`neWkfRdmXahf5k?Zq^150~ACLU{szoJo{x(17PrCyYihy1OIV)
z%^{S!?PJ|TR%0`E>fb~2w+4^nVn;YmE-?ddc|s*yQ-co-(qCH!zf?(n!EFOa?=?Km
z;mx{eo2uYrE=+-Jo*F#SZsO6-HdXTy`L{@-Drvk_tO1H>`UQxld;9-Bl438XEP0O5
z5e|Rz>_RUo5KBr!?1acG)_SAlWrM@J6D5Dx?pz&La$C)tZ5kMDqw?d2x#_))zp6g1
zi*N?zQwEwx2a1Y_1yr4&5mEsC#*&z?8@8!H?5p%rz4eMG(3PoS=U9TO(}Fnz#xiUq
zL!s5R+S$im(UuzB0&Na+ERXqIEqY(E$x`sYV#QfA58iR@Wc_4_ivqV8-5IXyU(dy-
z%%l6-8blO?qKNDBy#wPa@jB;EPFYgg?Ma^BHB5cM(%$GporuMai1jsBUF>zn6OJ2~
z>bRBN6OS{SgF*cVxJfWulXy9=8P_UjtERfoMCgiiYm*7UlNiWyE~>J@Vl+H>#cQo4
z%JAmOi$Ylb+%lq<VTw=|O(+yEwx68)rv3_ezGsLYT41_I3zrk3W(X^mF?enPkxV7J
z5B<sGksjxnN!_!8^XA1xh#(fdr?C;+E|8mcbuUZ7fX0Cut5H>}@iB{Pe*Yqeou3WB
z65dUJ<3sSWcf<fUai18eUAdyueIOiSw!qen)pZYf)Yw!wM#9Ji^zOVL4h=Q#$?iAy
zXw?_r+ToKl((JHgTB<ebP#eS7%XncL!zzN+ad1sJ{kzTi;R>u;wg66y{fKoN2I#KG
zZ105ElD~Lucl>grhZ7&rnBzops{bl{Q5p@*(fxaYQWW-FebQrOk5-It(j`0ZK2R1Q
zKkTV%+$yArP*z(JYtvU~m=p;!ry|ZetgLteNEX_rwspI8AQlRW^#*D-3V+PN*9~^i
z&iyRqJ;8OXdv*WU#6Nr~W#bL(J=^!C3|upF|8>!d3O!hyIsQKkZ&=T}QzBeeXOG`s
zIYW+*&6uAeSG!9=TFMJ~#`gX3g21WCMd}lQ<bU0=HjPDLgqrQAlV)KIi~|VQrXhNe
zeL)0dkzYBq$YN9rW1@3$pVZw^)}i+CxmVr<*2>S=wD&fVeyCOQ!Nbn9Q|GkAu04Zm
zgpH`_YAuL55ibOd<9Lt~lYI;H=SLI~>xNfGn+PH7kVSl}yJpo0DUcuZ_5|H0={dBG
z*RaDsU)!McfL72vfwD%wBamQKysL)Q`Bgay84-j!as<;R{(eo3z;ZVGdIMDK42O8b
z%XqmT(%ESwMz5xPxlPY&+tcH73LwT~u7Bs%@RibGtH1g-PUR1A8deC*=&5#9;(m{{
z$2zXtv>qCM8rS$JXF=Y@aX0_Qz%U}SPKwN#_%uO}UQh+87dcL~d&D>n*Q9L#O|dV4
ziP{?cafnO^91<`a*Cypsc_?IFY@>3_x@X(*Qw1Vi&Rh#)G^(}Mt-os7*3c(yo@BEp
zx|TGL5{7=S`$&adcYy#kMem61U!QD_W)st*6w$eXrrab-Rz)-yaaF)lA;>RhyJWiV
zYcSk_*IvxgI$-e(MZZcC#t<HTkM1hNMCTn*$ztaM1f14R@7}n5M1O@vlv$=?j)FBJ
zW&PxYuIFuOOR^_aj~FSRanL2QgfaO{a5$DDPKvDFdle%|^1m~m=MGJ<h7R_MN+Ols
zt0<md(kzpq&+Ge0GMr#m`buSa^kQ5%MbG+8bXl_VHzn4*dKU;VDz^vDZi<Tg^VYtZ
zxjA-u+2zFFWK^F2(U%0lnVAcn!7;DL^~0m?d9&k&nh9ze6PBXa%aGoF-QsW@t1M?3
zj6<ysK*W)7!Yr}ahbU&}d%Y)~EC6J>^l)H7n3-IjYEKW((IXIO;v)-=1=h*w&6^sv
z>|p}qnX(hdplMu~M|)Dq{VbRwjz!8vhsI*uc<q?P?yK2Zb4I3j?w8CsgV?D0#}Mh4
zf}U#MI7LK9>)nmVX!Iv|27@31LvP+{qZDyh4o>;Z!4_bjc_OnQ8`dXj4&S{|PGd6>
z8e77hFPfBrs{nb=MqFeLz#_E^P46fPp9Kp1x2A{v_|Z;8BwD%5oees?Hh0D4nK@uZ
z9v~6s7ahQ0f%Lj@dV85-;yX=Pq|B>X-ys&KKSPsGU)LaI?>xq;e5FvmQ__~H1lz+w
zlkZ#6PBWMgt9TxCCKE#;eb!c-2&_xwD5_583M3;@gKj`W1}lSQjjetXZkx3&z%^HJ
zh%WLM`v_Fl<_K`nh1+H|Hu2pXKVuW8zQL?s0w|rE7oy}|z^rXm2|}N@HVm;7onnjx
zCf3I^nD1gs6N%D;f7iBpmrK(-)_?KgQP#0VRuz6=BzZX^Bl&-&g?0_D2ALjKw?Q&B
z;o3R}4g<Tk5&iJ0_J|P6ukd#Mf|iELg&qy(Y!z(gCXCm98`u}B*-s1kUYKTfvTL+j
zLiSil2qIUQ3Tum;V95t6a@DB3gc<g3IYY?q!f$rE+v9NG_W?gRA!OVg{pNCNy~SpX
z(E2AIjlHFB!>QE<kZ3ea%PA8Whg^T7<b2ZVKFV*+`)@<HPY5!Te1|9s2PTpqP|*So
z7Njwz`Xz~9RFyCPgJLPuz2q_#KoLaw^_Qw#Y`EUiq2)pHxkm<}b_!?3L31u&j!<1p
z+}uJUn#mvL44l!qEdW;3FinqnFIDWcMcpxNo8LvYp0gsM;Aeuv!iT*@o=Ax(Uye~d
zJ^Yo_*Jt1*FOiW;PxyRk5~WW{gezQd3vNcw>CTZs#>8s+X0aT)LO)ct=bP>Pg0wAB
z+MY%OMod3TME0<pr)NlriUdyJ)hl7CYezqg#H`x(?GwWG24>rT*}^fa*aT}dWD?>*
z;J4UL&6A0vR*$7}qO21G8pyv5ewa^1q{<3G0>!nCmJr0*ASg`AbI;<QKZNf^$w4bo
z$=c&X%S+Yp7>X-^bWim*+=h?Qi9Kk`?YQ5^O4ih9RsJnDu2PbHB(?cB$T0x@cH!Qe
zBiGl}l5~j?w*+nuL!YyQok**G53afJz}`HOrZ*5XZe+p@=}QDp8ahA3D5n;x3%tg+
z0(Ml`=;MH_iTKQk*iR`|8rX~HNrk2{YC%UG-}U6IPXfO`KN7E|JwyMzmJNJB%q3Ob
zpb}FNTFH|7_Xi3YI0^+$!vpmH)e#L=Gs`E$u!=_00Nr03s;M=M^@ML)bMef%vFBTJ
zm=b5DHF;rD^-dGZXE$(4M$SmUKBogxLX`jP{>xA}o(;HZcSDPVSxasSId@yJrhA7S
zdYV%{_~(vCe|aG||F`#62TsRoI^mEh-*?LTFJHP%p+|l8CX5zFKY}jH#2<Mg9t#gQ
zqi;JUMKM*7RO&BbvozhDsF;pNXK{yuS)g|jjG-iPY`x_3$;=fa#lDCk@#g!-;tT}o
zFjIH7W$z|6>p$gLLw=iELNQ2S;E%Y3XjlzNR&em{cnM!gvBt$)hK^ZITM#pPdNbNA
znMtY^^x1@u{8KUAtQxsjjmT2T$6w6#NY?WEu?HMR_b{iHWSmL0ln}o?c#oDwyF(a$
zQTb3J_Duv;<>h!ko3S{3lZ@%&B&pfBwN%DP;qr*m5WtX*P6u&t_qg%>46YX6waA~R
zI^+1NgM_**m2!pzxWP<KUF-nYni3w-#B@z=^G+xnZp5e&<Cg)?s*~8}#LV$s97uP&
z4${(x1l%5jAu)`QTkdB%J;^$egY*}|3j3{9zB^Pw(7%cu$QqA(Y8~WOx#N<Y`J{Wa
zXwjcd`ibc+jV_k-f~J}3nG6)!_aQL<g}|hp!{qXwg+ZL6h=9uiPaym;QtA!pa*jo9
zxP#2nE5J{P%(k^3D<kfA_?AX}hl@J5xn_p<iL;#;9T&QAj)~>@aOWtUtg!`v5sKp9
zE!+incyYtB<ET=dO3=I8_s`nH5~!;*30IS5kmOg43I){YVmn4bENa>TD6HOW;=d*U
zEa2Ce0uToM=X~Liv$(@Cr$=~%<iMx{E-xEVwPu|Meq)|djioUVK9Q=uTjPiFR2=3M
zE(p}yks@hj#K|CFoH>y-czt3AbQW-cKG-TapB@$2w&3<Tfg(g1Sc$3*GfvKxeu9WQ
z(N&ppq>`ogEedPW)(E-#qP>O<vT%L$DICStF#1bu1_a?F?j7V<5p67btICl^vv4=@
zNh2`RSn(xO*`d=B5psGOfXiw25+y>a`Qy(F2j<ClJ3m(+5lwqu%5)A26Q>3ralk;P
zOGX?A2Wil$qVR23Zez7P#L>T>`3##NsXijD3WevdBkTR5FbTNZE+5w^I+RvfO?&i6
zXZOY~VXajslK(X7LfaVuo5RI&iiDr3@uE`ucJ~A$^bcfu1{olRT~O?wMlCse?VTQb
zhylVv(Ku_49C;|bRUkXSOw8e<13m?-8*}W&KWgLT!W_AqzD!;22Q?bLR>_Wq2WQ^n
zWgQI(>|SBS_R&wM=-ex7Wmn{0Vh_Aux9`~u29%)8{yG@{NM<Vh>}dClu{~vIM7TxM
zR|?AwGQBW<ivb=j{a&{(<K>DmhH~6n;GuG2FZd%;3T+`^kt+2%s)IBq5G(UvE`g6K
z-OPAUFM1B{`cu_f#<}tXW>%-Us7y?1tiyfa)~DWcbyUlrRqH(jeMj9o3+7}Xo<0mC
z$n@4EoH}P$RKgnvr3b<ilHS3!!E_|LXz~2eOHd4NQg!WL2ws8jvux|&6~y6^eE~v{
zOXUTBZ^g`GnS8-5zWP{8<*6#HJ(Ird`<;C^J?*x$X8qYW6>J5P!KUVry6Hw*awJQ0
zb%G5lzjCBk$4pHuZIX^OI3S8;eA#-n9D)_oNmLVGB%>iYFE!-ghf^3{+PcKC=q^Uk
zTpO&ED7GDtgxqNb?^1KK#fY3flu`97k?SwxsQ&$j0mps4ez1`1mRpTb##-xIr0LeC
zpC-2|Ie;@WP}IYn?rA&LcWRkB&CwqE-{>PwpUp91GHvl_Ui=bs6?2HqKAMlVs|37P
z31r`3;+;wqZmU%#%!O|YPZ}}9%#$<u>}~$U#(;laFXaoey}5<DBKW;>0!1V1LR?%i
z!apVY*#8I`rr*Q&n^}>tfRCB*3^&-0bY?4eqcm&0M)nc^t43PbJzV-?R{{5$+<P7Q
zi<A)_AbSbm<RWI|@Gsh3pLKV!?`hUjU!}WpCgHGpwv09Kup)^6_r`Qvixle3Rxpy^
zBnpM%92aElGf9PmRdU^&0uy41(sHR&Sy~P&xi<i_BR53$Zb|6pMU0Zpq%Co+It+o?
z99RjUNyWX1Yt38YCCEdlG_t17YsfEICRL}|#u~L9>>1&f@aPjvcd=kiQu&kk(HtUR
z?>kF{DH@O*|I<|v)FLMj{YMXJolmw0ENpuEk_`|I1@WDShRzbA-hOz^qzkAmS1Wgn
z6$V;0T3<vo0Bhj6faJ02jb5(z;`>M30^7Quv%wg%3?qnn=E)JdH{Jfmv>*D_7r&R5
zYTSlyCvGA@-LVZXLJ5UBk;NDeu{|}?Q}!aDXI(Q0hLmqjuU!iJAZSr)-|Mdw&u}4y
z25k6T=Uc=Ws1g_YCO1PQKwks60iA?#hm13;zwzAyc@+zx9S4w!3SPow{(*~jaCNu`
zaFtd(`Le(D;n{B4MK8T*{kJgv0TcM!Fg*h``MP<Vo}B94*iR;p67c)1ggf%3Jt=HR
zZg1tT!HDL*kl3%y{F~)9e*cj4kp^>&2eB%S<F0{!;k>s5@+*rYj2;W^H_hI@mm@Y+
zj}jfmKRv#_1N&n69^*V=Y0v@bndyG%|3x$n93kgwnNAe(bKN_G{sH(85o;(;k4KDf
z&YA+3pxn>1x1$xtaUJz&0I|vkLClKI7#~ym+9?Yuo(&yMogMeW)=nTO#9<QG@Iklr
z?l#o7JL4$o;4Iqav{JW-E@0p@y`=0PV<wl2nr^dQRp_&^$^m>3LEdO-jzH5~S2O{a
zHfYJF=>s%Ch3G&u@|m(A6x)0HD?r(~M8#@8XZ@4J!r_1LS)^0CXj!eKfF^J+SJL2&
zLk5AR3N5`=hVdEpnQQH)F`cj;t(G6aUD-V;AwizqyVd_v;+>2S{r9P}%=Z9KiVjwJ
zFukAd4Q#JriJLSiAo!WnA!QSgwE7S@;jrW66(<fQCuP7Wt#nnhJ*qm&bS5$m-LV1T
zTU|;EDH$&;W>z5BSe5S^>z&EXJKK&ad_F7iC#M<6r3J%Pi5P|zCKl7x@>Nv)6-{O~
zTl8<{Up2@eUN0ZZn)D0N7e*_~X<Ofx>5H+ZGlDloy|4`!dZ6^q;TkT;omFR%%qbRz
z5ZH50f|qPjAc}*dr7RtI_!qv#p&W@v;Q};6{1Xf9jYp4l1S2Zsos#ue(OJp9!SUN;
zzL+ZcLeSx)PP5BBtMNeZP=8%febA6dVEojP_-V6qzZS=~xaXq;<|nmtZvzBiQ&9L?
z9Zon1&J0S(flwbwlr~C(1DSQ~vsbRG+Kt9V$f`A>4hX?<s~FrNlV)(F?}dDCMFHJc
z+wISudDz2@y6X`k``TVL)oWzBZ5K806#Lt^srQl_ApQxUvgS~kGS152=*3=wVO|s0
zgng@CK#a_by@|>*78fhh?Z2@|7yRZW{#YOyr^Pefa{z0n$3g^C{4lfe|F<lhYI=n<
z*FevCU#QP*?&8y^h)Q+cw>3a*jC<^BPCV^kL|{E|SjN?f3naGLB{ciuKo2bG84$_k
zsUDJH{68@Bf9!k+#=C4Uhc)hV&B}u<Hf~+8cbA&1wOkhQ@A&`ytXS@;Oby8NtCHuJ
zL>>A2QgX{X@{WG1(#Ka$Wh(HF;J+0}0dx?3b6j8I_Xr2-0BS?>f{&*n<FLNJl)}@K
z{aj0u{PB9jm}AJRzc)$+_SIVR<Pw^g6fwX4VxcK-1q_@(Z7;@mVv@}QWiu15IpY)n
z%{~q7EDdM58%?O5q}47%_U{cX3P6ZgaOtRC%64!_UujMc@Wks#q9+`4RaMKXwm<d0
zr*C<^LTk3L8GI@dpvAMO+f{aCYRhV&HOI>~{@cdJ5g;>kx51`Lxxw&1m%VVduk$95
z8jCVCV7w|j3okfcQaEz2>&-U+BvX`~Rd)1eW$|#9SgP`tlb)WD|Bm^Zf@tbCD<^xZ
zSF?1?s054ykjm{L6Yz*s6$>TcXrW6`_FESraEdbT<J7c2C*ChWln|xQu_)j$K$YqW
zprN7V(5U+C5TPNMYy}D0n!%By=Uva_g1Sxp*slgSDCS~39;=a)*i>%RNz5xw|D!LT
z0^g*J2b{`2B#$4}A0#0PPZq)$5Pv`oS^rJgg-QIrO61F3nPBJvXLpsuGfTrZPX6g)
z@+*l!$Wu@3vTx|Z1Ub?ryl0P@M90l~Ky&c9)=|H|cXh5C@pgUkA?B0IGT@+3g(~mv
z%XEeT%k4OnPl=W}if1tUf`<JGMRMmWRg<UR6-NmkjtQG?=X5Uq%Ue>Rf3CP|i*|*L
zhF{2^?Y7h)G(mb^`}MnLAm|bXTQo7EgU@c*2cdNZohWdBg{!$CQ82Ce0YWG%ug=61
zehB)Cj;BF;Q7Lws^PXw3x_qp<ChsaGdt_#T7J}<|>?6#4(LL6Bd5e7<40S65XQHNT
zrZudJjK@W&<lrx)ze05N`N_rOo5b$m67TEFM=6gxi*&cs*{EkoUH0O!$|w0<*cV&!
z+cV3_aKZ<KO#tz4o(Rs&H#V3bSW@qQSk%hQ$($ROnEi;E!$m=c(PPI0UGw@C;77z!
zJ++{|<#xH73ah-K`g?hmprLK_D+}HjAxX*R_H}W9Ub6U|%p$6!WJ#H0{(mYFR324_
zldYI-mr0nBarO|&K()=XtvwpHmDeV<0QibE)TSdJN77e2N6?0-R(GEL#&(i72Tzp$
zNxb1_<rQ@9to6<-l-(Nl{5r3{3$VEN={RahULG=c%g7w-id4lAG6)SRtK}2<oL4cW
z8kI}R%<U)J@UxaN`gaB6HDGJmBkUg;G{h@I%+*8EJ4IY-kP^UAgyysN)SeX8ZTGQ8
zqz8v|?}9Ba6jy0Ky`jOL%HoJh1N)?+8Z13njC5&zI@F(NZb_9A@HAZE*oZ9Dc(szZ
zKCSDhX{CXcJ&m>{adq*dvjfR*h1Febot?>{Ft_=^hH{iWJt(1!`21B`_x9KF=y=5;
zdV!nNv)0M}#kfM5pKE9<*|l|LSFKlh>w4EF`zccy;+H{OHqy*QUhKWebZa~yet}u#
z4%Gd4bvj%XWg9iKMWdTBjq(3Y&EmMBkELQHNkN43dOJ6Z+!X#y3t{IFE1N<8+H<m^
z-~}?zDzlqN1ZiMD_+kAew0jtW&T0j2HZ@Qvz?>3OdcaOVsHoja7`&~4jIn>>^$4i$
zng#tuY&W`Bp22SpRGZib+9h<R#h>NrxgR)CPRHdc8h6r##&QJoU1w@BXL%mgh;z?+
zD{Ey~_x>-MCQLHRDN0yEvqDm1yGbEt+uz2Y#X$wqiC4$zg1L+Rzk_xxsW@8~Ndosd
z<qE${b7nLOT2pU%tMop%WqouJN<)Y*uv4Bm?s(-o#Wr|Yy72$_p%iKEb75h&1A1HC
zD_o?@uY}sw)jW9T$8190o`n3SyRe&U4^P7S7M&$GAd-<deN(5WY-(H>_+DW(nRJ9X
zYr!Y-6xA;JUbwg5ILJG5<+|KFV?{hu{WOIN8LG1O_@PYKH#7ZV>p)k1kgYhPav=&m
z*{<?7V*vWqpO7@dM3Iw2z?XXjLi5$%OWep_M3-1UhI}g+%*u&q-G2$seVT9md_nC^
zM_DV{_o#D2+`@VnO#lpF!>+i>`Yj7E`8g0=Gg)48HDB1eXPI|qGVYXA915qk`HLij
z#s^_-{|*vfR~|t#@*}W1y*o{atPyyN$}>?&Sa5SF=i3e-6%AbHZfZX0S)NyeUHC#j
z>3cT=$khMinMj%p#5X@i0-K>;XNt!d>z|K|jZ<mX!gWkzGAC{kVuReKR~+XM)2*ex
zBnW>z`QWBW->WTm6jX|LJE16(t5oKTboi#J;DNKUDpmRL+S6-klo&)Rfm{8qC9Q91
zn1Pil#1lw#_kBG8V2eX7y3c`qi(^P%0I8FWz$5)Xx{ozI4In41_>GP**X3zVJ)`9B
zG5Td^4(n&-wbAt^;jS%?P%2DZKM0|fGElx_Hx>X9Y)FCil%bN7Y31Gp5E{O~YkEuO
zU%*Eo1DR>ow)`AoyRt@Nne;FCyB~Mb<MPz2%NRdHt4|RM@A8<z-A?A$>ln1S#IlUo
z|LHpu!5!{fXV_0EKt>w0w&mulvl-GM3#Gx}jVFr!y2^$vr)}6zlcO?2k6o3!>MU9g
zQ<$n<L$SQI{bO<oNJb`Ve53KSA1>IwNe=mEi%_Eh492_kmUIN;7r|G?LJ)sAlX9gS
zlPa}7f<#YO4kXA10mNleVEXQ)1_3O<<^z!4V;Ct1c13(YM5BOfz>q7%Mr!-FKfFi8
zqmIczpQm}HS2?(aP$SIN6xW7dp7ie8Zq|8642$Glf0Mj!{sj1>47+N@nZzQMl$CVI
zi+t!e>Sq!s2iDiisWP=i8(W$rKPK18YXnWgDSP;EEIFezAd?<woM2MU(E=i{Kgbj~
zE-j34j9){w%GleLGJ0`9M;l{88CO84m}jKcVZCDGs%85Qgpq?m?79my5nU`Zlm)tH
zQ6qa~Ch)XTIUjk)5ddS)Q6niS`Eo)lzLCDg^M^0on>)_DLy=-2!>;eL^p_4&M0y+T
z2tvQp-}p$u?K-2|6^^e$wAar08s_2eQE|)VeVeUlARwdG8Nf+0Q^?R6G`kZ>83Btc
z=8XdhBEz$3CBJYnw)Yz?h-FO~t$xE1`aUE8QaK>rJ4Em_(Sqr?>BpAf-<7)@NkgEI
zh;L)>$?~Q~OW!E(bqQ3a(ZHgF*9M{T<BGJ!67x!*&fVjr4%OR$iC?|j%=O@T@~G)8
zzf>rAJ`VJ&afNSD2H^-y&p)LZCY-g#e5Kd;g$>Gs{|y>}+OQe0-|7UJruaK@-W2}h
z>`<yIb!B`$|6lO#r<g7zHfsY&%b10$|MqAp9(-(5FZYDWiXU^p({@cMhtXcI`lE7-
z=iG$|D}^@xHiSR;4tyHL*A%HYP~_yUWm0E#H2>7sQuOlfSIM=TdFr~fyX|(AK@@Fd
zog`lCBRk4i_Y@jwGtDd2&{{Oqkaa>Xpk{=iURy0|rzy_lv6Hp3z#Uf<em%Id+ByWO
zn^@0O5q&d01$W{(@PR`B8E^A((3&}9CYVd-Sx)TXOr^>0MC8y$7Fr+eJI(McAqjp1
z5tpF@457D%g*8^%D{qMKi-+JP+IJWQiJE__b4X@Y8eXOA3E9ZP5Nw>x8}0J>_O0a>
zVIIN#0vavV#MUc|a5OeC&jw{#pq45Owxa71*}Gw8X8$=I{hD7pg)UAOI&Di$gQ{yQ
zq_v&tctd02ye$b5XsH>jIj!%(qi@WlUO7c-OV-SYcR(_Gll$erCpC_87J*cV?gxo>
zKdCa%tQR9%Wh@&fz|8`>LGV~lxLr{6V9|#`9z}B{NW51J>$Lv&*Ee-d5B*JMOinxZ
zi{7`>e?Djh#hQ-L%}jf8_~=6UH}O9id9K3sgxYbEun_EA&C?(B`JKp2;yF&LwCF8l
zdKOsqC*;+_D>-lxKnl&Slm~J3El8XeK&qg-4UjZEAX&R`G@jWC$twV11-}9)z+^~K
z1{%U5P5H@X;=_Vh_-?vK*_gU-TxF2|RX;hB4|-IA=*n+4`^VM7@cH;l&DKWgdQq-v
z2zBqEgnFe|?#fpAfmdtt(bl7WHT)Gzr#4j}0gE{NNqh=I@N>aMm0i*a&ZygMP6vZI
z3Mh9SgtNQVHJ=KVF&jSO;Al`(tf~sT%t4KB`lX$p+lJl=+xo7VuU2u7eS~b_-QHn1
z_*(s|Sq<aD<<#eDH@>XwS9@kD>~UHC1^#KS^zci9igGerC-W7p%j?kE1GYMr4GcXr
zjCyo;=PRzwhkbI4W_VEcwTDl#UPox=hJc+?#fQ_*1Aj=xP0^Oi63VQ_jd{WW59K8E
zeDBFpnx7EHx>-%OStZdQy_>(@yR;a$S(&oHC0mAUjnJvAFSl~p`R!3V|K(#4qXHk5
z;V4UR<9>0?KbQie=PbUOlKj7`)8zEKQq!-*)qPrn+fQGiTZVmJZwyp!W=MZt`JOD2
z`n5Hn4d{ZbBM`JrJnk5UlzT>$dcbwk=f=3(11t=lJ77S*w)4<9{aV&bjCi?GMaV_&
z7AWAxrtOznU_(d;jn;%L4So3*;;pkSx2jv*I(Aqc;x0<omZIw)2fjP{Q>YjjSMAuY
zy!FW$B%Y<&X(zSp1sb6Q8|j;}*kC0^(3;NOY}#A%IPJrDC(R#@N~mL*j!!j92VwZ<
zmp(S)I+@&Wv{SH`tsfWB0s>DE!oC~|X0t?0An0s)f&w^bhvE5zt1Wh&QNFh?ua7tI
zLPtc{3W>?rLGYD~dOg`^$<RA%(bO5f2_HHP&U#ymqaNR2hBv$~-r2}+We(jEw%-q{
zy{cT-f~w!xt=AUw&>4k`YyEgnHs!ML4{fQdd<iVSvYY8OPvnuETcAQW+B5u<kC^Sa
zb#>ctzA@pYMm)fQ=mrkx<Mo_Q!%^%ghP$L3Y0wm{2cLrillhu0n9cD~0tFlhW}ct%
zctU?&`CbA95v1_a;zVhGp=I+MuC=ym0iuiGgnWnj7b{{G4)$Vb`hqhT;xGW*Pz@-e
z39c|Vk)r<!2P3Zyp9xNh%7{!H5hK0*&%|y`u+^mNu9N#y@RXHr&0m>P%|~d)ijBok
z25yvQGi4Vv_HXFVUydvx)XkKQtzb@Q0ASMdGXF4Tx$+ULJlFA6u_6pzH>M2x+efa8
zl7w3ZED1aq@}%N<9a_hlpUceZT(o*;yed^U&r=`|b30VfeK98f3oMpUOagAQ0h{3b
zuf<xp<8c^^-AxlC2+_h(9>UE0@SFk0zEX;&OLYZ38eVt!U+y3FaTjEk6(uhXk7UMn
z2k*dG)}$5PN}ku(xufSd0n!O9R5JXvKCR-dh><{lBw@B2h_fU%K7!n~X~~>!RVAQt
zBW}eRNeI2-2gT-?pYG7zV!t__;CN)UaGwPkmo%Es`SgZF%Vh*<3c99)86Yhme&;3V
z8Z><3J$h0FJ?B8+It0O)E!y=Yd6g+Sa3v4RHKk_31q#Z?Qy{ue1E!cqgq4vV72|;%
zUz^I=*e!l*;2=ZK)@lx`!05MbFSC|ZO5Ri)AlX0LKh(btcQB1zO0i@R`A`4YNu$1-
z&m_WbXX$?zIHu1a8?If+nl>Pq(S@aIm+uCYMcj>yFC3xbVV=eNvUUAz!MQa&4{ceC
zSLvN@qP+lrvh1_)Uycf_r;K0cF&t`4u92@J9Bk6i)GmyXcxk>lp8-0MVDG^3#(in4
z-*75xn<N4Lbav)@E|t&rMNS@mpeY*M=6OK;_yG3)iK)x?Y+y_bLx8oO5)c+BXg%SZ
zm<k<A=?SG(5RoLH|A;+!zyVsP)L(!PVND@^GBF@rnKU#stR1O#{LLOW!bDM1L7$UB
zOP<)9+CO9{Lb*D8-*(b+RuVhcZtqr?R}_a8mLebL>q0zYop;ygGLeH#8CzSUKH;q(
zx0#tUtyM;#=Wo6O;<SWQFwp(#T9d^p)@igah02*|m%~izp4sx)$$a{P4|_MepIxw>
zjHlbw8>ZH5O^bTnk#usi1MZt<>S8brpTW2|YS+torL+n~gi0E`?!MpqIK}TID)du6
zQayZqDKijCXCm&zhia&PSHq+gB5sGA&Hqvl>P~l*Uipxd#vKb$uA5+C8SwHVl}d1{
z=q|PYRv6hrkOC>kytNo=?D$zrkQnEiIBi$>k-eK~<lQ)sm0A7dzS}Q?cyc)eY2MHJ
z=Th8xML0Op1%$gEd5ilHXt-I5vgtQDAoSTz7l|0`7%evs2(%(lyHbmoIYHCmn8y_f
zcnMNFMxtW>=a7uH)7R}fT)j)iaJI;sT+wt;ttko#7e%9u+KbIUmi2fL-5@od)T(FE
zjJyjz42WO+SYCeTdpos0Cc<}M{s3|i^9E#g;yjjb)MPsvw5}9rAH!EXiFXSZX(<Ly
zpYS9h$xqn3s=%hIY-rZ@cCWXZw#WHIFVsIkUs4_uYM3p+P%f$=YIhec6L8Jy&rKrj
z+2C)&CJ@e2i?>oNv2bUE+Py7AEQ2m!G!ynI8mRzE?IwwIk>&N^ZF>%21!DI>47fn}
zw&H6{&MdEZNj;y|_)W<rbg(eL3q`=Gto+qR9u_Z*TSG{XLVoq}$+@RV3#H_xwUrM>
zS)wa&5^56)LTdFCl6Nd_;rTaaN$$inC2;l7ZFl==!NYsw6^rJ9u$OeuzQlXBWB-{a
zvCkDsb9Qf!IWKLFsuV;pD%{#p1)tXLW7#PhQCXdMHIY8;R|{yWqJfe%p2KP5>appp
zj<$ye;iL>Zd?_~g7Nuaty7P8z5K|34G8b<S%Fykt_pq#HHVTFE(<`ala`63v#nsfc
z<x?GtnQ+04q$Vi&Z6_@DUdMefWeCBf&7ZO*8%~DbXsu0UoX9D4fnH=wdX!kAr4wYV
z#oIcQFYR51X&~jH`8N{s-paN9eN=(&WI4Hs`(ggh&Ei7RW)zq$)Xa9aUd_UU_O0*@
z(rl5rY5O#((B~ES!DG@?rxTL6<Z4UJL5hjM<10+cPHaQ~E0s>DbIXV@?kD+Bu_iqB
z-3zsN6CO+pCCmz4E6p!YnU)`%$PUSZL;E{--7l%-*IV^4x4%SDzDLK&TWiG_2fZbz
zcOFKYDhcD>#ZoL{+y^rs8@;7q%7<3;G<64(bv&|W`I~yx23qUE*l*&<Qgvl{s`3W4
z(Euha5S=InHV2O2$)K5N^tzDQ3TB6vZFn>%{=-xg`@|leza!8#u)W2azVFe!cJYx=
zR^ErBmtsw5+kXusM>bW`h>Mmv?S=u{`W&Sk9eS&J2t>N~HRw(o<cps|7Dk>@ZH&Nd
z!n4Li>#DnHhFM^Z9N}RV9|Vp*Vhywa&J$*bFf9<)g|Qiao+KS0o-h(o3*%}$ds3yX
zLkPW+Gnn*zs_`WB8oH)0>Nq}W#_fACUY*1JR2JC8iD4H&+Y1wcD>dfsu+D%_Q??XP
zWL7_7l;Hn@TaWV$13~KUV*ZHgqcoeLGiY~n8j-|~K}FmM%iZxAX!El#HAOy11jSWN
zx>kU>=qt=o<6X<~TaC?&WY1$!dm3H07KCe!abv?gRhJn+1H3sdZkFuls^d)Y%gA9V
zNa^LZn{Wyg66tMkUluWkUOPbr`Bd`BLxsVAu4E9n4m8BMMQ3tYK-OvxGIDsb6W{<u
z4k;bx+Mz8fm#htF937k#zG1xuc=JV}{lTE%_3ta;fFAwjd%5O2@-(U%@$N0^-D6^l
zI~_peio<x|X^lnFr+<KcYG}IIydnV_4qR9|3_Pk{Xo(_q03ql~>9Fy^Se*gDQ%P7!
zIyD&gg|YK+!Wz=2BJn!UM|8nzOqxa}(8LtsFYDMrPF}U9LhoRnge`E9u|8bZ14Il#
zq&Xkoft^8%Zs!reF<dJ~46K$g`kU+4mkAc4-(yW)NYHBUZ=AwdLXgtXH31{~Wy7A(
zZ?&A5ox5bCKWYq2Cz%;T^BGaK|Dz3nqk=0VzPRBhn^j!*`WdSa#VVW`x1@USHNfYP
z>tX6>|2|@d2)N<)@-h^Yz?2n>c%G~3{M@)4?G^9JeI_su1wpDXe#5y<KO7WERd`5r
z*FMp{9cgHRF~vVdc(vc8BHqQ2^gZghZ&$T_<ISEkt7aZLNE<}fTibO!GeGBZU<UZ)
zbM8`GBPf1tDvdFgbw}W7BotnEgQTDDMaz|=590gU9pTp8jDF7V3m-<0lPVwTCYW)4
z>9U92%CwXF+UspXMIUWenMM6;KD20&(Y%Uwa(q;%^coQ&v|*8n`N5<eyXx6*^1e=)
z@r!NSdgA$gl2(`t{Tsv|A0{u_ib6K&Pc9%4R`LUtVpJHm4Py5tT(WdWCw9d0jVWg7
zI#Z|Ic{rEi{YTGwl}DCJInh%DX8@nR&a|&?-)b>1jw4E-B|Zhd?3z>iaFohf?sfT&
zE*q!lOvyI1j0=xM1mA~~;8sZBXNV5{7%f)N6VC0XGx}Z78JSzH`zkM<z{vFOC=sBQ
zR;VwJL7#Rq(@a-Ncd?Jh-PHPZ<HnR0kav82$XiEjOLn0Xa*OTnr!u$#xAQ<KrQ|#!
z{Uo;s@^INS1cfJKht)zrEpado!$B$X5B-6CnU-)ZpE{bCta+q)9y_>vo?-7x;P5*i
zM<Y;}`8Dxct;x0V?=6JmaFILpy`Fw@;KA%Svciu{iABu?h0ji1Ls!NASiE15*Fk<k
z8zcS*`{h}V+(++JsBrwS3Fs!*-3??Y)<)>W8y|7prY&0;Zndqj0zb5^Tm#T}*EXh>
zI#RpucxN`$4G7JG^83rAyw1pqnqvEyi1Qgw3#@f1!h{-vkNY1`w-qoV{?p+iGf>f=
zKC=d(`hY4nKCnA}{Rq%3K{t&*$<Ly4-tmzWOdbz<uRaHIv^_R?H67ZTldLznX{tCL
z%>ZIlKZe*9e}rXW@zI1GDt0W6Qq-vn{hB!ERnW-78cno|uCB3UX7oo<jsU(njC5HW
zb#|rj%0Jzig)7ibeVZ@NlCE5CsL>FS?7m>Nzs5r|e!bBCxkj~sv;wqI&pJaw-o%uH
zs^bpf((0W_$3w|b>;L*4EbTaZiEf5xtXcpTkKEKU^$+9_(P;T-XBKS{*=Yt5B(#Fj
zjI-sU8}0G-(2%`P2&KDdz%J%4k1Tvr28Ui;AG&)=?lbpUZ0RS2!VK&+87+T6L$c01
znePOse!@RgK+9tpUH-b>98zfxgUDO@$YE3TbPN;b4A9zjxaIv0<<`a$hYVGfDW++y
zAfIPm2f2gTaedSJ1;6ho#WxsFY3u+Vbu@M&qgmTF(#o_GYz;5>8)&$Wk18KmKh}Hv
zB#35bvmn@x<YqV!DVo=TW=pt@C;oXZD(Ul?^*&GV6?Jd<bk)!(1h^Hqh`6<5M%`0k
zlffk6&5&+xyv9kl6$$QCvsvns6@sFZ0wjR?Thb?}epCg9A!Ij6yduuigt6Is59u&6
zLpxnuVg-vf>$D!2yJz|kDB{!eY-8Xi@0i6^jSLba`MT7&OzkLFGcg-Yog^^cVy)-V
zUz|ph0X2eigDQG|-B#uDSMWVgrC5|Ruq=NZ?W&@ro-Atxs>jZcAWKHj@k~--uzH?K
zbO7-=0*i0XH`PY_{8g$VOQN<t6rFf7M~B;g?<9e0W%G>q$v!POBarn>-Z4W&Iq_vu
z2T3Zdh}O{G*%<Kv27j%;Hd10m;@Pwd@kfZtVY}dvh+5oG55Q(qQnvCaN^#9B?m)9a
zIdwcQcO(TWh&EA8wKMumr?yD@T&IF_3g&6PaNhr0ApA&7)hP};j;pbs+cevC1b=d3
zs%$vxnqn~5>&)=s*q)Q?c?30OS1Bc*_8&%{K5=cL0|rTn6h$m=8db^^&4alw@lq}a
z9gIw<`R>cb!?*Wn|N6ZNcCHX(oqVy_+F}T00{Se<Jxzgv*jQGkX~31l4XFMwz-qI+
zg0yw};vdB6ajgXw$bd0lsK5Nyjn2WAH#$6o39L+9k3*c~{|9(g(s8F?S`QU0m2++Y
zVHvjJ0P{eqCnpI^?M-(g2tlmZ+0$9y0ercvaLSyXvz3^_p%(c1Ir3?Xo~674pB^d?
z5Cjaqwak(jCY}3UtVVa25wP$eU5BDVWxuh#KIXwin-zk2EZc5?yv&4-GD!IZl-VGX
zx3SyRtvDj+Wr&vp3naAb!pEvtz+vw%3KsAWYmBlr_f&w@NA_s#p<EcrnVbxL2VhN5
zpc*kg`wN^mL)+f3mXwMN_SrcxV$Phan@g469=eaS(6J-ICxetvU~{`P!?aH|Xccj#
zrlrhd%4J=%V&PV`$QRA9rKIVT!k?da-Ll9YB?ztsl8mx$5Ka%pK&u_Ep10}U60Lpo
z2DWQO!_J5TqRUv-#n{D}R%L|pEWa|T);apM#)<;gl-VvpOrk566UuW$w-lXlP;gMk
z%WLI9SB0fFY)BUfZJ}%7*7J^4PgGRPT9dHEm9#tZfTSwZ{}(GXfq-IzcyGa{F(?sx
zsg3F_b-$B8sg9g<E`#Tb0GbK2%(4|FevSvYb^{%B%usmgm5_t;NtNjxp;pNj?HHyb
zBM!0By*t}cjlrwU{UAG)f~8(Nth!x~75yoF6<g{1yxv${qa4P0Gn(bVrSb;`0|$us
zLPMVnS3LnUlOXfW8H9k6)=~usp(y=y@;c+Rp+-k#fraK*e?xQoF8sgC_$iaVE1p50
zc<k$Mb4Ko4f>D_K+(UZ8K;LgV0uCo(B?ONaitycTWz@SE8Ng-A(2w?=N0xMBJ)=My
zt;zqS1N0$FToCZ{JqR!8U8AUV=J~C+zq;0PacxgK>_^0o&XAc^&WP>wLC7`<>1k!M
zHzbOU*3YL2noyX}V@98-kmUn#rAa7b3J0y8eqi>h(JP1<`6tOqM7Kozz_*o|X^HRS
zO7$VlA$V}jq=Wlkx*n+oKkM;xrc04heZ6E7G@MXVhEOaWX$X7*b#)VGS}uEI6omx+
z?+_y&S>Byq0gk^D`TSprS;L&C@_Ygt;l%Dw`vxMVcS*7%W?5D}o}mO&Sv;LA#0MQn
zGak#YMf|_jGZJlM^B_nk&H%BI8<UAF^tWiIIzO*m#1|J$9a{m=uaT;Um%st{^owc(
z9DweBCfKXYk4DjR<E%5rSL&-4Wf_k<S)O|jN`KqMrf3Z~7Vk)}%#Dn(-g}&enO3Z`
zBtpll^6%ARDfkSKyU{W7h=rGftcJ3}g(b;tL1;!<tLQ`OMG74a9rA#&DpiUUo$Em0
zHE*;KS@t^$#Zs({$};((iaGNQa+{lP+k}hVp^2qqJ3wd0A}mB*(%1!kbh*a#?ZB(3
zb^#5k7Q#OU#`lW-)xi-~SQY1X?H^X0^g*9!L1gJ%g_@^!mbsrHgqsPl?!2CDwV2;q
z<}IQSUT;QuaRtxaVUS{stPt#tL^G&f$6jL1Nwjy6cbibOC4Jb4VlJBmvOEh*ZYn#k
zP5({&%>lH2?darj&G2+Jgse6jGTK)BqKZVvYykt9Ati!jYg_OLZjdou016sr;`b58
z#AgqHlmqB-4t2_KrF02`waad_&qE-lJgMN9!pjKv4zf<AA2NHV<Mb<}9t%)`oLwgp
zRhU>h^CmyUnUr>=;zOszG{EV*moINkmK{^FrT7P{aW4F@2t$s&CaTyz>`18Xrn(9l
zp_nps@DlJ0A$srgt8oker){ITjNJp4x0$w@bM3@UFTtLIB&LDFLHxabsmE3)+ibq?
zYwal-e-#s>@%15>M4D|FjE?Ae-$ZAFj&7j$LFY2Rb>#h=Kh%TAXK^u@SsLVGJaCP@
z#XILFJl<e<(P7D5^|Z%W?zk7L=A&JAEtZG5q}k@pOPF_NEL5p@R4>1(-evm~Re$D5
z5fp0i)^;e*U~q)M^3$O!gtS&8o6A8vQWrh0V532=%=P)W+F|2$lCZ>%ev`b!c$RsJ
z(~t+ZXcpzj^_QlkDp5Z~xK$SxKFvm5_s*KigIyvrf2ripO{tl9onn#EiV%;B@{EUr
zyt6lI&%f&cFcJ3iHpskjg!|3FLj}OmF^dPDqcrt7{NQ)Z;qgOie636J;ak9|ZAJ}H
za5C4M@Oe_Rh(>@`c170B0Z}rFz~M;meS)bgOR({sN^LY-s8c7~VoOKqSwwFYGn-80
zvvnemU6$z|k$qW4hA5JT7f(}SU|OM?2jxfjO?ia^`Q@Kdf5KaXY6)G$QhN${i9Q}K
zkU0YEtZxXYiZf8bo*en)v9}xX#FNa4JHL>XB<qrJD;{y!`RJdv)3{7tx?!FtppaOF
zx>R?GE0CBZ-LFf_ea{X3@G0B0d96%rKPOwnoX~g@a_1|Zzd;_7nZoyzBIf>(dw+F-
zYjbYM55(Yw{9?Yoi}eMG@=e`X=lYdQs3$#1=?r_<;HMoSUSXd;i1{W-^sfM}*uOdb
zRP);xk{#_q3<d@lp?5vDgvdMt(r?f_uxD%Plw%s7%O-wcC9Hl!yKn`Cb!d=KG{<T$
zem34@KyO#~NBE2@G%)}UW`s=oLCA};F~)}8Ocelz&uoGb&KX^tiie;eU}d#bhRJGm
zDXet6VA=jtc*^ju0QXK?(FC$Z?#&p4D{H_8>dy;j`wk_i!Y<u_Hrf7BddQ5@LaZ5J
zp+P$N$x?lchm<$tjxTn3?ef_*OLX5fSu`KEK(SXz7U1W%v~x^J`{ApmwI$f~+UxRN
zvJGmIthK>{`jJ`M3PM83Mx5Cc(X+@IH&7S^Y?+9w8mX^|Rr+GP4SP`v%|5)gcS<K)
zE}*;ImG4tG+9{AL&Xus8YZ1Oc+<>wj-%U_H4E8XZX9#A=m)%%UbM0&L5%#cNHPdlL
z9*resDZ?8Ut&M7XE$l6DS87VKm>|(mmIW|mbhq^dO$p$glvhKRtD`3J6{ACCdo=Qn
z0wr&j;JXxchAL>V+$1OEQi#EfD5i6I(Qf?ZL}1^!68Pk8d2%EWuc3$nc())My6h!v
z&J~5TEND<x>0-LkuV*|z^>~VY68{8@hPjM9e4#N^<Su}kX;VOIh~wb0UXg?nqnYRf
zNgyZ^5do+dT2jfpRCyH`TbnK$EXas1-DBM>O*+9Q^J=hr!9#>SP1^rtAH#q9cwj-B
zpR;$7qCQIa-=dM{(PQ5z(XAMWs;v8rKCcc8Ob>H5y8h$t*Lk^z6FE&5-*i+nA)c)X
zK<CCpvC_I=mS7I@eBMd4gKY*DT?P<yzgz3Gf#W<>fD_#b=b8)hU(S(4_377$RxQmo
z;;}<#`)BhnJSp@@4^zjU@a>onx2)5DB9vjFwN_&W8g1VBN#*B)qNuyol>eq8p5;z@
zH)|52ZEgc$nTTTEz6Gz1P2pd_q4Y)>F}J5GE~T42Tuql?y&fHr{$XLLD<^zax~0-C
z2%!26^S9=hGXmOgm#_rGQ?-k5i^WfURpe1)(-M(3lP+EoPr`D+@ZG9|pP)e=^Q+`t
zF&m2mVt}+ist@F)_HzJ24_cPsyU>%wIvR&;?<xNImmY$T&ohfu?S)e=ak~=y&e+k<
ziI<qH>?fGKWQa&rU1m0`VhhZR7cT}n$IB=TGAGrpAF2BR{d&5I#D8}Pe|6ekHpNV)
zz*EBOxD%aN%F3;qqP*=30%shd+z(`Y;573k9Pqk9{72TQ2*n&iid2s!s8;!c4=Ep+
z6I3=~C(dK0XSgylmg-rVhBdI=?Ej|YxK(Wn{H&b&{07b2^kn`BB;sx1b{W|%FecvB
zObTmiEMx0);}J=nEKgzYMjh_|fogOd=HM@d1eKi+?NF@WaOaj*hbUsz$JNPcV$qtS
z_g(eomlzT^)C%#@|C+#h*b7u<WSlYlt{kM58@E(|w_9AqA^7OZYSl0qgi!`T)sO7h
zV*H6Hafrv{<Fn`;9e9dZKaPA`{0DAodEFzlo7*JB?Ahc#5Hy{-1D;Qom-=2xkgzhZ
zYk@YW8ifPFR+2*qkFd(|PW41%3DU$@^e3Fma4e3|gyJC89>uh~Wu5V1wHl~NX3=)N
z46@fx>*wExw+g@9c!H|F1zh*do`w;G>kB7t-^oT{gogW#=&~f0!B3q1t0Kq)5dd8t
z!B#-w_EnXmbSy8Y4Ze}?d_1G0_zk)8Si0h;nb%}1881r%2WRt6F@qoAzStDTQ-5?S
zgRke~hwMT-Z-cgQ6CEhFP(0pTB1_#KTi6mM;WxyFBpi+HYxpa}c@7|GGQC(+H+v<f
zn502-bsADZke*JUTE5p1h}bm`N$pM>@Dx*oT7?`?Y-}MmHf(pvtm`7!r_Y?4E+?b!
zky*8E?8<kAP(4fDVTE2%hFUQvPztE-O0jJs<-xW>4m3{lDWn-Q=O%JiS<l}^Tfp8&
zu^QbK*MG>{g0tV`Q)jT4)qBlyfk|rwWSv*#5T>_%oM4k+npCk3GI?)#1{}OHK5wk$
z!#@quLnh;Kt2n&&|Bw)^!eW5vTFt6`25D?k%AWEX#EYtuH{5^829QUOj<#*`_(qwq
z1y`;3_KfE}Fm&pv4(m+CmqK^+okCf8d|9MO75X}mQ<H%ku(Gqhmht8r??hV3sCw`t
z#5YeFABGxf)iupk7O)+bemm^z=0;?dh6)OAr+owp2b9<yIC<71yD7eY@Q(@8=2fH{
zq7|%t8=ea*RX0!H!nUW5YC>vN`q|s6WGHD*P&huqZd7jPSHB&FuOkmiB)TmGCwa|l
z$b#6RqjEFOO90j-M^J!_|3>zat)0=cZ3Im?N{cg_)XOgsi!bV7+3#+E#Fc3*yF*-e
zSTO|}@Q}b1&<>}(e2m4@NoW{3W+bnOBgyE-^t)w4hneItIwB~Ci5McJuZF*>zW0N}
z__36WhuK40I48519Hnc#=Ki6@p1O5Xthb1@1g$xzJ0`e4jdZ%-U#C<u*iEaD;Jf8%
z*%cX91E>GgFos2?!Dq>W>s{8~6I(tFf|PJC)dWZ*kDC!kwPR?Ind~dlG<#9sj?E#v
znL5S>4iGg5HsI0TC*;s8ik6XD<XG?Tu<W{{vT~b*>{Q1&FZ$O4*ei*D5#Y^caAA5{
z?c9bv6xnj~mChFO(L6xyF9_=NAh5EeuJQAl<&B67W$&or>ogR%b+VK^A4|lc$&E1u
z&<WqIr5KC4sgS!HWDMQtX%`lpt+|2YCWL5vJ0x-M8vx(T+*>%84<G#unS6;xzPltM
zUniPU-CnU>Z?H#xm$s^A2R5L7fuwwIqxu9|NqX4s3QXp*gO!kp-AoCrS+UvjPYp)@
zj3XTGYUBx2TQ-^ojQbU)6;4#*!8eY{txe+&Ut@ol*UuKwEvgN>c+9BGzrQ0m%uvG@
zjDFctecEr#aR`=xOX+_zNC-NFSo1VEhZSCV`HEk9W`l|%E=_PMnF+W!g4P#fh-KG5
zu1V$Zd`WSnHpaWy%nXlBsIy7K>3#hvh#D;h5)6(sn%T~6UuZavhblDJr3;Bua&%05
z%__${Q&P4`WY0(?Y5<HRUsy{Fg3fGxx*_cVV2`l>3$XBoVa*V1k9!6oYeUdg%1L1M
zzQM7fbR&TjkC>et=rdzsW!#tp)n+RgNM*m&Ix1I}{TvQxN)bc6r>m9ue|!)sxh{k<
zI{?G%3vzLsz4KpE-H);di?g}}V&WAXO`n=3MP1TA=7$LhbaK(nOJ?G{)P<$!M)EG5
z(ZP)ns=#!9$@vYL4Sno_z6Uz65-c^;(78N-Ov{UNPqaLz_z-f4huGxrw?qZ#GWR&>
zKl*8huOok~ZYWXw*+8dF64)Jza0@Nq*ugPI5ysL~$4%VzBKeEYzE;h}mzT+%=IUV`
z=+;GZxZb^bd-q371Wh{|^ucU~MWe=~s#ivW=KC~j%6&_|RVNaou}17M!yvTgrw?yN
z=~XXU+r00~PV*omX>XByIR}Ft+e!!Ont=>+ZAUkkD=${Q!-ll%(#G2OY7(EFKS#Cj
zY@%h@ue2p+NTFBHZ>dRe&W{&(l5kywc}VG9Pcar=(1jX?Tg9`f#PR+XpB^xdI!20J
zjJ#pybNMA7i;4m4JG^R8*2ZXeB;MKW?6aXr#Cp}-<x;aaI_w`VaIw=a4?z1Ut&Aoq
zr)z<k@5ctvwO-PP1a3t$9Jrz4?*@1e$x%zq#A>DjU%LWtRsrK};y*{aBELrIS*FxT
zl`_?-6f_6f8-x&%r2;4w8Ub`1XNt+Pk~;mZy5mU&j{r)>k$`1~MS{S&q=SZ!;YB`6
zs_b;7Wsa*Tl59D@X-evY7im(rRDt*?ts%aBRYIyFUL_Y0QWA4sJeXpu<c>@SRMrrf
z<UZePJ9^pv+^GZ_w&p_*S(zhW+2Aif=9L6q+fqp|2>OZvz-<0R4jX$?{+KAw>KKpC
zsG81rxz$2$u{h-}Cj{xXthTYeXY|$#OBZ41demlf#U^7{9F2U1!$x-&&v3i|2^@CQ
zh0Tfi3Uj5mj9yw&hP2(g49Brfv?mY92P1?5|M)>vb8haL+V{n+WtO!bq9Sq@vWb#j
zbd-~s$ji$+^8CY5bC1EW$&gp=4NJtuhwG)qT$jjpOV^bHGOQO=`a&&Kr}<}~U|Kzv
zDyHU0`=wGdE6J-xkY5)0P*;0`XlwJ@w>XEBEOHKcNg1!)0F}Kj%jyC1%J|9Wv{y6O
zOvhqfDhI^LJ8Md>Wq`G$$l1?*09NLx2n-4Y&4h`R$FYwE365w6OzWw32^1<0K}T}R
z^9ERXHvNP^0H)UvgZvQ;-SfC}P#{%;<Xr1|A$fI_th>&c`au-CPh>c`IjI%~wlJ@#
zq7$kgOh~dXYIbtZ4{X%AAQz_$&#MnB-b>H|YP*Zk7DvRRt|REyrV10sW>!OSy_wZx
z5kN58b2Q1?hN;V)s$gV9dDvMZ_~(PxYN_>oVk2kKka9KDOlOZr%NrU7VOE{wW}AG}
z8#}|=1%aF|pXoZe+i|-a=WC++yFb+}PvD67nIo(W_6!B96iwbQG+Cq%pgAc{qqVe)
zY=jul#O6ph(KQ7V4n>bhJN6Fe@aO>5@4=VqB3&HZoOa+q`d_p$%FAV$PegLA@>AU|
z!u%5^WC9g3M8w&Gob#(^)4LE+nKi#cVS!#?H<#S`pPuQe$S8RXCI9_gitpp*2k)@T
zi@5Ur1lNwM6mhJ1WW4U$Va^kthq?>^8L%SgRmbN*oCNWJAP6KE*-hKs9tJR}NM`11
zB7};kKdP;Z`&~-}_vEr|EX5U<C!f2hn44VJfx{mO5rFG|7Mg4(V6p^uq9qC<IAn2s
zhh|~vl3*oYE0I{#Te{zs=^)VTzfYPR4ye5C^I#j`yS-QRFust8Wy<rk{tFqUebF9t
zi|?Dq!E+h0z_^PcibxTB1eXUEL{n|y$Kfe#Q!?oQKEG4PcY@c}k<|G8!ZQK7yxw__
z0G~@&#c|>O4a?$*R_1lSMb!NS3}(=tAiZUlR#dqZnK~l<DookT)foGh#@3!<MB^i+
zE-g8o#GBQop_6t&t<6|kwiFPP`mtB+vDs_qB(2Ky-T@-BF|fmOSxh|YS8LKuwF~#{
zKAH3@b?HH!x?F1r)O;D{0bS|F8cm0=Sqsgrz#K;auXaZvWNkV~VF8yc2d*-2^{PhV
zKZO9lqU$?;?-n2K=-Ls($ssDD5G*xe<BS-dP7qW^E<!|ctxZ7p!mBk!P=q^9i_Zc}
zGoJhLln?vLRN8yCN&$4R6bfQ_;XMs*dpldc9Mq@iy@k@-T78IcQCHa3`$JpkWFDYw
t9n)c_JHJOzUG#*ozbue1zQZ{BJu~e9!W2*7m6Upx0a~W_Nf4I?mJ6(L(nA0M

literal 0
HcmV?d00001

diff --git a/MikroMaster/tmp/Config.rsc b/MikroGig/20260712/20260712210151-Config.rsc
similarity index 60%
rename from MikroMaster/tmp/Config.rsc
rename to MikroGig/20260712/20260712210151-Config.rsc
index 859b861..432433c 100644
--- a/MikroMaster/tmp/Config.rsc
+++ b/MikroGig/20260712/20260712210151-Config.rsc
@@ -1,159 +1,275 @@
-# 2026-07-12 18:20:06 by RouterOS 7.23.1
-# software id = A8L5-07YF
+# 2026-07-12 21:01:52 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
 #
-# model = RB952Ui-5ac2nD
-# serial number = D3D50CEDCD38
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
 /interface bridge
-add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
-    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
-    Bridge-LAN port-cost-mode=short
-/interface ethernet
-set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
-    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
-set [ find default-name=ether2 ] comment=LAN-2
-set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
-    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
-set [ find default-name=ether4 ] comment=LAN-4
-set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
-    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
-    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
 /interface wireless
 # managed by CAPsMAN
-# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+# channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
 set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
-    ssid=vados wireless-protocol=802.11
+    ssid=vados wps-mode=disabled
 # managed by CAPsMAN
-# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
 set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
-    ssid=vados5g wireless-protocol=802.11
+    ssid=vados5g wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/interface veth
+add address=172.20.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+    gateway=172.20.0.1 gateway6="" name=veth-awgVDSina
 /interface wireguard
-add comment=WG listen-port=13231 mtu=1320 name=WG
-add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
-    mtu=1360 name=wg-nuc
+add disabled=yes listen-port=12430 mtu=1360 name=wg-awgVDSina
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
 /interface list
-add include=static name=LAN
-add name=Internet
-add include=Internet name=WAN
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
 /interface wireless security-profiles
-set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
-    dynamic-keys supplicant-identity=MikroTik
-/iot wiliot servers
-set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
-/ip dhcp-server option
-add code=12 name=HostName
-add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
-/ip dhcp-server option sets
-add name=HP1505n options=HostName
-add name=StartLife1 options=HostName
-add name=amsterDev options=HostName
-add name=MiTV options=HostName
-add name=miller options=HostName
-add name=amster options=HostName
-add name=garage options=HostName
-add name=domain-search-set options=domain-search-list
-add name=VADOS-LEN options=HostName
-add name=VADOS-NUC options=HostName
-add name=MikroNUC options=HostName
-add name=master options=HostName
-add name=MikroYellow options=HostName
-add name="=\"Client ID\"" options=HostName
-add name=iVados options=HostName
-/ip dns forwarders
-add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
-add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
-    verify-doh-cert=no
-add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
-add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
-add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
-    no
-add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
-    no
-add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
-/ip ipsec proposal
-set [ find default=yes ] disabled=yes
-/ip pool
-add name=dhcp ranges=10.30.30.83-10.30.30.254
-/ip dhcp-server
-add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
-    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
-    name=masterDHCP server-address=10.30.30.81
-/ip smb users
-set [ find default=yes ] disabled=yes
-add disabled=yes name=vados
-/ipv6 dhcp-client option
-add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
-add code=12 name=HostName value="\$(HOSTNAME)"
-add code=61 name=DUID value=0x00030001488f5a8e1abc
-add code=61 name=clientid
-/ipv6 dhcp-server option
-add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
-add code=12 name=HostName value="\$(HOSTNAME)"
-add code=61 name=CLIENT_DUID
-add code=61 name=CLIENT_MAC
-#error exporting "/ppp/profile" (timeout)
-#error exporting "/queue/tree" (timeout)
-#error exporting "/queue/interface" (timeout)
-/routing bgp template
-set default disabled=no output.network=bgp-networks
+set [ find default=yes ] supplicant-identity=MikroTik
 /routing table
-add disabled=no fib name=To-VPN
 add disabled=no fib name=r_to_vpn
 /system logging action
 add email-start-tls=yes email-to=vados@vados.ru name=email target=email
 /system script
-add dont-require-permissions=no name=fetchCustom owner=vados policy=\
-    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
-    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
     \n\r\
-    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
-    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
     \n\r\
-    \n#:local Script AM-setup\
-    \n;\r\
-    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
-    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
-    sc\")  output=user as-value ]->\"data\");\r\
-    \n\
-    \n#/usb1/mikro_bak_rsa.pub\
-    \n\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
     \n\r\
-    \n#\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
     \n\r\
-    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
-    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
     \n\r\
-    \n#\r\
-    \n\
-    \n#root.mnuc.backuper\
-    \n\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
     \n\r\
-    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
-    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
-    \n\
-    \n#:local Script AM-GlobalConfig;\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
     \n\r\
-    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
-    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
-    sc\")  output=user as-value ]->\"data\");\r\
-    \n\
-    \n#/usb1/mikro_bak_rsa.pub\
-    \n#:local FetchFile AM-DOHCert.rsc\
-    \n\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
     \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
     \n\r\
-    \n#\
-    \n:global MkDir;\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
     \n\r\
-    \n\
-    \n#:local FetchFile Binary.backup\
-    \n:local localDir \"\";\
-    \n\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
     \n\r\
-    \n#\$MkDir \$localDir;\r\
-    \n\
-    \n#\
-    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
-    \$localDir . \$FetchFile);\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
     \n"
 add comment="Global Config Script" dont-require-permissions=no name=\
     AM-GlobalConfig owner=AM-GlobalConfig policy=\
@@ -367,10 +483,10 @@ add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
     \n:global GlobalFuncReady false;\r\
     \n\r\
     \n# Git commit id & info, expected configuration version\r\
-    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitId \"main/728/bebacfc7\";\r\
     \n:global CommitTAG \"unknown\";\r\
     \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
-    r: root, in 00:05:03 01.07.2026.\";\r\
+    r: root, in 11:00:05 30.06.2026.\";\r\
     \n\r\
     \n# The variables are received right here.\r\
     \n:global GlobalConfVersion 140;\r\
@@ -2275,3 +2391,947 @@ add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
     \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
     \n}\r\
     \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add comment=Generator dont-require-permissions=no name=AWG-VDSina owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# ============================================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-06-30 22:08:12\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\
+    yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\
+    QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":44044\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=8.8.8.8\r\
+    \n#/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina dista\
+    nce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n"
+add comment=awgVDSina dont-require-permissions=no name=awgVDSina-uninstall \
+    owner=Manager policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n  :put \"Uninstalling AmneziaWG...\"\r\
+    \n  :log info \"Uninstalling AmneziaWG...\"\r\
+    \n  /ip/route/remove [find where comment=awgVDSina-tunnel]\r\
+    \n  :do { /tool/netwatch/remove [find where comment=Monitor-AWGVDSINA] } o\
+    n-error={}\r\
+    \n  :do { /ip/route/remove [find where comment=Monitor-AWGVDSINA] } on-err\
+    or={}\r\
+    \n  /container/stop [find where interface=veth-awgVDSina]\r\
+    \n  :delay 7s\r\
+    \n  /interface/list/member/remove [find where interface=wg-awgVDSina]\r\
+    \n  /container/remove [find where interface=veth-awgVDSina]\r\
+    \n  /container/envs/remove [find where list=\"awgVDSina-env\"]\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awgVDSina\"]\r\
+    \n  /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awgVDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awgVDSina\
+    \"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awgVDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awgVDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awgVDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=\"disk1/awgVDSina\"] } on-error={}\
+    \r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awgVDSina-uninstall]\r\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container config
+set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+    amsternl
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+add bridge=Bridge-LAN interface=ether1
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0,::/0 disabled=yes endpoint-address=172.20.0.2 \
+    endpoint-port=51820 interface=wg-awgVDSina name=awgVDSina \
+    persistent-keepalive=27s public-key=\
+    "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=Bridge-LAN network=10.30.30.0
+add address=172.20.0.1/30 interface=veth-awgVDSina network=172.20.0.0
+add address=10.9.0.2 interface=wg-awgVDSina network=10.9.0.2
+/ip dns
+set allow-remote-requests=yes servers=8.8.8.8
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+add action=dst-nat chain=dstnat disabled=yes dst-port=443 in-interface=ether1 \
+    protocol=udp to-addresses=10.9.9.2 to-ports=55055
+add action=dst-nat chain=dstnat disabled=yes dst-port=9443 in-interface=\
+    ether1 protocol=tcp to-addresses=10.9.9.2 to-ports=443
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    10.30.30.81 routing-table=main scope=30 target-scope=10
+add comment=Monitor-AWGVDSINA distance=1 dst-address=9.9.9.9/32 gateway=\
+    wg-awgVDSina
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=veth-awgVDSina type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=Generator name=awg-VDSina on-event="# ============================\
+    ================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-07-01 00:03:43\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+    kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+    AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=109.107.177.79\r\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-07-01 start-time=02:03:59
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool netwatch
+add comment=Monitor-AWGVDSINA down-script=\
+    "/ip route disable [find comment=\"Route-AWGVDSINA\"]" host=9.9.9.9 \
+    interval=10s packet-count=5 thr-avg=0ms thr-loss-count=4 timeout=5s type=\
+    icmp up-script="/ip route enable [find comment=\"Route-AWGVDSINA\"]"
diff --git a/MikroGig/history/20260712/20260712210151-Diff-Config.rsc b/MikroGig/history/20260712/20260712210151-Diff-Config.rsc
new file mode 100644
index 0000000..7700481
--- /dev/null
+++ b/MikroGig/history/20260712/20260712210151-Diff-Config.rsc
@@ -0,0 +1,4 @@
+11c11
+< # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+---
+> # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
diff --git a/MikroMaster/20260712/20260712194001-Config.rsc b/MikroMaster/20260712/20260712194001-Config.rsc
new file mode 100644
index 0000000..2f80244
--- /dev/null
+++ b/MikroMaster/20260712/20260712194001-Config.rsc
@@ -0,0 +1,3843 @@
+# 2026-07-12 19:40:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+#error exporting "/ip/ipsec/policy/group" (timeout)
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+#error exporting "/ip/ipsec/key/psk" (timeout)
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260712/20260712200002-Config.rsc b/MikroMaster/20260712/20260712200002-Config.rsc
new file mode 100644
index 0000000..6dce7f8
--- /dev/null
+++ b/MikroMaster/20260712/20260712200002-Config.rsc
@@ -0,0 +1,3841 @@
+# 2026-07-12 20:00:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\
+    Unet-ether1 rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \
+    mtu=1360 name=wg-nuc
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+add comment=Generator dont-require-permissions=no name=proxySet owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# 2. WireGuard interface\r\
+    \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\
+    uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\
+    \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\
+    G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\
+    N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\
+    20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\
+    \n\r\
+    \n# 3. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\
+    ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\
+    \n/ip/dns/set servers=8.8.4.4\r\
+    \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\
+    t=VDSina-dns\r\
+    \n\r\
+    \n# 4. Enable WireGuard\r\
+    \n/interface/wireguard/enable wg-VDSina\r\
+    \n"
+add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\
+    \n# RouterOS script: AM-Telegram-Send\
+    \n# Script comment: Mini script for send messages to admin Telegram chat\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\
+    \n#\
+    \n#\
+    \n# requires RouterOS, version=7.19\
+    \n# requires device-mode, fetch\
+    \n#\
+    \n# Script description: \
+    \n#\
+    \n#\
+    \n# Usage:\
+    \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\
+    \n\
+    \n/system/script\
+    \nadd name=telegram-send dont-require-permissions=no source={\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n}"
+add dont-require-permissions=no name=telegram-send owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n  :global TelegramTokenId;\
+    \n  :global TelegramChatId;\
+    \n  :local message [:tostr \$1];\
+    \n  :local identity [/system/identity/get name];\
+    \n  :local sendMsg (\"[\".\$identity.\"] \".\$message)\
+    \n  /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\
+    \n    \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\
+    \n    \"&text=\".\$sendMsg.\\\
+    \n    \"&parse_mode=HTML\") \\\
+    \n    mode=https keep-result=no\
+    \n"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=Unet-ether1 list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+add interface=Unet-ether1 list=WAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\
+    NUC persistent-keepalive=11s public-key=\
+    "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\
+    192.168.33.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless check-gateway=arp comment=Unet-client \
+    default-route-distance=2 default-route-tables=main:2 dhcp-options=\
+    hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\
+    no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.0.0.0/8 list=RFC1918
+add address=172.16.0.0/12 list=RFC1918
+add address=192.168.0.0/16 list=RFC1918
+add address=8.8.4.4 disabled=yes list=to_vpn
+add address=myip.ru disabled=yes list=to_vpn
+add address=10.30.30.98 disabled=yes list=to_vpn
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \
+    src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface=Unet-ether1 protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked disabled=yes
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface=Unet-ether1 src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina
+add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \
+    in-interface-list=!WAN
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main passthrough=no src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\
+    yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\
+    to-vpn-conn routing-mark=!main
+add action=mark-routing chain=prerouting comment=\
+    "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\
+    yes in-interface-list=!WAN new-routing-mark=r_to_vpn
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="WG for all" \
+    dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\
+    10.30.30.0/24
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+add action=mark-connection chain=output comment="For this router" \
+    connection-mark=no-mark disabled=yes dst-address-list=to_vpn \
+    new-connection-mark=to-vpn-conn-local
+add action=mark-routing chain=output comment="For this router" \
+    connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=masquerade chain=srcnat comment=\
+    "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\
+    r_to_vpn
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    routing-mark=To-VPN
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \
+    protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \
+    to-ports=44044
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \
+    to-ports=22
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface=Unet-ether1 src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\
+    0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface=Unet-ether1 type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\
+    ] WireGuard is NOT running - reverting rules\"\
+    \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\
+    \n/ip dns set servers=8.8.8.8\
+    \n/ip dns cache flush\
+    \n/ip route remove [find comment=\"wg-auto-route\"]\
+    \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \
+    timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\
+    NNING - applying rules\";\
+    \n:local routeFile \"ips.txt\";\
+    \n:local routeDefAddr \"0.0.0.0/0\";\
+    \n:local routeGateway \"10.8.0.1\";\
+    \n:local routeIF \"WG\";\
+    \n:local routeTable \"To-VPN\";\
+    \n:local routeComment \"wg-auto-route\";\
+    \n/ip dns cache flush;\
+    \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \
+    do={\
+    \n  /ip firewall nat remove [find comment=\"Redirect to Router\"];\
+    \n}\
+    \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\
+    irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\
+    \n/ip dns set servers=\$routeGateway;\
+    \n:local content [/file get \$routeFile contents];\
+    \n:if ([:len \$content] > 0) do={\
+    \n    :local line \"\";\
+    \n    :for i from=0 to=([:len \$content] - 1) do={\
+    \n        :local char [:pick \$content \$i];\
+    \n        :if (\$char != \"\\r\" && \$char != \"\\n\") do={\
+    \n            :set line (\$line . \$char);\
+    \n        } else={\
+    \n            :if ([:len \$line] > 5) do={\
+    \n                :do { /ip route add disabled=no dst-address=\$routeDefAd\
+    dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\
+    outeTable comment=\$routeComment check-gateway=none } on-error={}\
+    \n            }\
+    \n            :set line \"\";\
+    \n        }\
+    \n    }\
+    \n    :if ([:len \$line] > 5) do={\
+    \n#         :do { /ip route add dst-address=\$line gateway=\$routeGateway \
+    distance=1 comment=\$routeComment } on-error={}\
+    \n           :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\
+    teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\
+    able comment=\$routeComment check-gateway=none } on-error={}\
+    \n    }\
+    \n}\
+    \n:local dotPos [:find \$routeGateway \".\"];\
+    \n:if (\$dotPos != \"\") do={\
+    \n    :local firstOctet [:pick \$routeGateway 0 \$dotPos];\
+    \n    :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\
+    \n    :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\
+    ateway distance=1 comment=\$routeComment } on-error={}\
+    \n}\
+    \n\
+    \n"
+add comment=WG-Default disabled=yes down-script=\
+    "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \
+    interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \
+    type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];"
+/user aaa
+set accounting=no
-- 
2.52.0