From 8ff8b238edc55b3d3e6cc223bdbfcf6eb4247b16 Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Mon, 29 Jun 2026 15:42:35 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jun 29 15:42:35.

---
 .../20260629/20260629154231-Binary.backup     |  Bin 0 -> 177026 bytes
 MikroGig/20260629/20260629154231-Config.rsc   | 2776 +++++++++++++
 .../20260629/20260629154231-Diff-Config.rsc   |    4 +
 .../20260629/20260629144003-Config.rsc        | 3693 +++++++++++++++++
 .../20260629/20260629150002-Config.rsc        | 3693 +++++++++++++++++
 .../20260629/20260629152001-Config.rsc        | 3692 ++++++++++++++++
 MikroMaster/tmp/Diff-Config.rsc               |    2 -
 7 files changed, 13858 insertions(+), 2 deletions(-)
 create mode 100644 MikroGig/20260629/20260629154231-Binary.backup
 create mode 100644 MikroGig/20260629/20260629154231-Config.rsc
 create mode 100644 MikroGig/history/20260629/20260629154231-Diff-Config.rsc
 create mode 100644 MikroMaster/20260629/20260629144003-Config.rsc
 create mode 100644 MikroMaster/20260629/20260629150002-Config.rsc
 create mode 100644 MikroMaster/20260629/20260629152001-Config.rsc
 delete mode 100644 MikroMaster/tmp/Diff-Config.rsc

diff --git a/MikroGig/20260629/20260629154231-Binary.backup b/MikroGig/20260629/20260629154231-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..2d27539d3b90a80effbfde7eda3dc7696fb49ba3
GIT binary patch
literal 177026
zcmV+aKLEh*sF8DmvjPBzkX#&W$dd!K$iZ=XaStW{0002|`~QAm1_c0E!s&Lnyid#i
zvz06)_04{U%GZ-fF=2&G6VvrZiXuNXN|-J}T12I%so0_yc;Hcg9~{x5uc0Q%PIG>|
z@Wfmb9UxEyL=3DlF?vDr#CFFPgMrQ{tI|r*dPT-Bto&lEF}{Q<MXi@Iuym?8t!5c@
z(vzChKuV~5`!@_^WP*Ac>Wi~Inm3ELL-rx8b)Y-;D=A|)_6cWu3zvrOF2NQh;8AU_
zd*ba=H4sz?*SlFJO?baZATDZ&>>dy_o6=PPLDbtEr17%!gR@M(>z<kPI!W0Azms|r
z<`(it#=j?EWyRhI(>VHqE0`7kbElIgu=r?bwOH+oil%G8Ta99;tE3vo_ST>(FNW0=
z$1uNo#H4d{z1u(rVAZY1MAoOJNLzE3k)%r5Q-`xKufyruCAB^%NX55)0?l&4pkJCO
z{iW3FygD{gQPL2k>pnY>waH?*lGVaT&(ff0sT-Kk57*e~`8YCwS68aWJPhT)UrxR)
zr383@qV4UA42NXOxLH47xx5cpduSGQL=6kQz;_RjZ6tz$bp(h|58+4ZZdEmBzszel
zfJCr&Vs+<V^E~rWqG($_m&te!@^zRt*&|Zlez{1~fcYaECs;{R6|s5f@Va1oSKRn|
z4CldN$5ItOzSz|~#rQuqOg_E-i}h!+TX^U)et_Vkt#^F&lO1?L*qs^OKi)vh%}`^K
zlAZc2&~YZVgANSNEbr<6mcYtD-JaV4%lUOlXI-242qC=~UNFeC^t)teD`@Yt?W7N{
zav-pL8gW0tE#G@Kf9K5>kssT+j&g#Y0X-qhY8N3{g!@il_igmLWu~$$35g(hJx&T5
zICyIWkt9={YQBB+IT<6i;Afb8PM&hXU@6*Jb}w7c4i=H|sL~*1)+A7Mw5jRoFNlB0
z)Fha5XO1XN>%A|Ypf<6t=oU5o79wjZp>q5pg%SHTqZFVE+CcjajcZ@7=MC}`-5t5!
zfN~Kio_oMgLn^Y`#ld<`NW4gbLJ;4MHhJ))!&7P|FQi#0J<Wx>IKc^K*sKZGU<vB~
zd`)!7MyT^vZ8OXn3dl%EQFQ9K1N9GugyV~v4->MqRk)}3(g$MZ?ryD><t0x$@{IpT
zTh27w<0pAdq!VPZ3+=k%oSomg_7jtg?d~0f>~v#1DLTD^?(l<b3CxBVr*eDu@18Ka
z5n_WtI!@r5eN`@oxC+pu>6EKxae#_~PTP9NC#Z3e;=&)v<|WnA<vZ6^20aX62QtS&
zcjb<>9-YRRho7`l1-8D00Zb$F*u6x;v}l0);1Ep}cRMRY<MTv4!D~e=bf#m2{ODe>
z^WLPLFjuW)Yr(fLG$8tm_Z+G)alY90eHi>!rBXxPOkpbJVPC#CDE7QReQn-Rix5SE
z@5If)j9R#%m-W1NsDbO&Il6{;$6uDVM}*qk^*(j+LGsuCBQ+*&jEv%~pijxTjIt5w
zCz+w&&?l?Tqbrzh?;*A}&a=rlc=xP>utAE~cDVxs8EEwcNDwa*$iiT?Q5o&DtS5sD
zQ3oy;1e-WCVIDhzgfgZ5uXZ!E$~{spkaJwI)hl#AvRU3h=``yjb0<BCSf3W)h3Z}I
z;ffR?DrHKn*C7;p3hbxATK7B7H24d?c=1$c4=xc7YUygjq!n?$60$g?4*cc92fng`
zA!Y%9;r=hoo|OfnQO|4w;kVfWF8xwdq|~L%ezcs8X`Woil6+}1@=yyP4=?PM1?G~T
zpdk~E4pYaw8itNOLeXW8OEy)h*oQn?AU08~p0Gyhn*|KUpjxYfsoM_9imbDA(^f!k
zQcAEa_c67KVjC{e)9U+^svLMN$S=<f0f*B948u7la~OC;3D%WyKW2{geVwP6!EF6$
zANn`S!t6P)0p<sBi;K3L4@T9h&`aLNKJZ!T13v#dwRt`t^k=xriF$G#19E}qcV8n?
zqsKewS_~pZXUQRi+IR*B3!GIuQY7aHN&ViPt2h>JA-G-y2ZeF*IC~1mSQpgt22*7O
zPyx_Zr92?n<2jvLpXK<#62>-n2GKJL^fX&v8Mwv8R2+KS3S`U4@9I1Uvl$Ld#Wz9;
zt;nwO7KNr!cqH^Sl}e}94QSu+Tr6MCG8S@tS-4ah-6zI0iejV>drz|j^NjV}fN+3?
zHy+_4?FFTdC%^ab)MI4ixZ8M(vhANJLYen$(F3K9=_;RmBojn5I%7dr`&M@T?*NIU
zAs0Y=d^#T!v%(KZ%@RwEF@vw}{4A4RWK!X45SVCYoNw`;kb@((AP6~a&TJ4r%?r@7
zv;WM12_La4h+6>tERMGQzm7Cx-FZ(k?Uhb|f@dO>?Bj=q1i0hE*7POzVu@@bHZqhl
ziw$RlZbrZ3`=|mkTJ=>)17W0bBe$^adNFTbjIY-!!7ZP*p)EXd<O^7w;|_%++*sM|
zDJM<ILU9w0U2So)g<B!OGU(7)Y`;rIG%Qv7+d=2JOc@B!e0Nx8OYBfrYdnUF3tMX;
zZtTgnx7EmQ5MCb=ete`vn71Crpkv|B^*}>p_-6t5L2a9+;rZl#i<15u8~0qwbK5qz
z4$tMvuw$+}+Yj3+xVtqxr3efat|{1idD^z|H3AXGFkeJ2s_k7VYON-v-s)M69K%ab
zcFTz3BVn&qxJub_p_>H2)+S?YS3Bp^N54MdtJaRd3BZY%hS}njgR53s6MZQw7i*gy
zbzhf)`3}0t5#_jis{|&vkL0@4ITAb3LB`oJ-t06HDRWV1@7VZo%v5QEr|&z!XhU;W
zUc|#6PmP+P2m}@?tW&+MIruO-lx#z+FF5KDwb-L5IsLKtV0_wwA#?aLrF{u=6qziw
z0rx}0{7K$|3a&1@%_yMVSca@Ce>h2T7tJ?LZx5|7tMJay7-^t1G5?-xfg#Wv@FeHu
z(KF*_TfWx0;+?p85r|8eOcl_?iR9`qv~Nqf6H>481$ddr^pj2oWylUiDCae)y|eI1
zGs~w`Ww61zJaA*m8x3R*-sTp`=&qh_>QNaG47pli^PQsVN{CK)`hb$Ew0ZZCQm5kn
z@sBjIUpfmOU&*%Ctu0z%s;)0P6?zN0Fvkch7V3u^P{dAOUN#wmkf_e>6EE=;pBeNV
z7AygDwr>=Gc?yKJhs6MITExQ&#b{=N@Ou}|=a?*tK)}3&Hsr*Dd+R(t^d5sAW{BY4
zJb27m6mdkgTx|1;GbdBy`*i$|GD^KQH>SXHbcp<@O+TzQ(!c1qMXRtZE@F<Neawx>
zjQEfeQU7b1(>}--D3xq67Ka`7>nx<$TMagi%o3TkOT9ncwwoBLt-B}v4ZcKc#bvkf
z7!Xr`A5-msoL&rkGyZdoP{qcwf(Y`L0cAhs&}0Z2B>cYskb&NOZAE242<FKjTs-|Z
zJnP6xa@hbTuj`fF>Si{`C;+?aM6yKI#Iwz>H+;B=Nx5~+L#4!dF%ERAIeEXxzErtd
zucqh*oH>3t%f(~82a$AIe{S`@4%kk*gp>uIn?|0|3VRgZkP3BnEk}W3pgJ5O*#Rm}
zEstt^xUi+m<cT1jX|vn-csfH{_hukPrZO3c3=GJK1oQQ*W;W5&eL2Z-_Or&Tl*=R-
z93?|fa#RFTNx%6bP)PAfkyGACavF_p*`V|a@y^i}4at9twh0=L(+GN&{ze`3V%#^R
zpA>ilOpo^+5ku(>!w5L03!+M-eH=L3Jd0E%ksz9aFM7he^Tu`=j)=$U19!8UE|p?K
z3JbepbGELP#VOGqlrkL+Lm#0|U^?VxCgcNIRtZ@WOlwz#1(ng)1vVQIw<b$U!hN7C
zA*9QB3<mL-u@ek1-9+3wn7kAZRcMWo<f!lI09^Fk-;Mkd2<=E*B#!>In`6Gjlvp+T
z>D+W=uWm%BJwriRorD!7Jk>0f+i{=vyvD3^eiJpaJP&J;byy7#bMswZJa*KZb{FS@
zUcKfT;i`rU%jIng5u{_4@5=<1twC%&r9*Z$lNrGD*VA&6uk`$o828%+v}c7t_dtEi
zvf+YY8Sn~a%r&&=P)%v{A5`8))tk+@mZ<@TqX!<4=KZJn$AHUd>Q7h2>UZrkp81%}
z|LPzDr{@@q)0T<NZ|)A}7qFb8PB58DMyL+6rZy2e35~Cna=+Eos%_UZ{DZXFPG~dJ
zwi>SbeH@bEA;wLujd?+@K&^dvL&$R+xH#to?`0Gzb%PNhE%U<{vJ2hWTmIMg{T;*l
zfs+X42|D(50M%HsjF45w;?Qh$T1~j2<(b{eVzQT>;T6xg{T3RGD7HtdQR#VYt7l;{
zVWK@a-^9%if#I=m7CFVEv>U4q!=r=f7d>_+`Z*ix%7Ss5a1Ks4(A(N3a4vx|D4M+x
znKtUOpwzcB8QD4)?(r=Q9Hb;A``pgIgt7P{-dA7K)(43<R0-=Mq<$62a<+T)cIi5<
z*Ff%rcW-|C$NNeINdZ2fJ=4VF0}OP)rOwlu_Koq^SqtJ+ksvEA4D%lh!*Gqx!lQ3E
z7$UQ+zsjRx`+IW+mW}lx#Te|+$DWP)5hWZXyfH@iH-N5Nb4vw}Jrp^ZopK4Jg?baZ
z=p%RXahA+GhRNj;kaKfK9*C(p3UtYKN`E8Ahr}fzf@AZ!h|IP0kDM`Nir8iI!1j3{
zH`&bga$;Y4<A6+EeC{Qey{W-JH~u@;o=?eRglg`V-va5y2K&caz0gA*ee30m$~AEu
zJJ7vE%n%zzPY<0}{S7eZZxBJfJ*y3B+d*mKw`3rBt)b&HeFQquA4~M1qEC9yh~Q_k
z1h-M6p9)^R;u$!=>2$@rBYR@9M1D&9!qqzEroQR!x;0U+iyrFwX0@2gH3FirFAHUz
z=radN#VswK4P6cp^j4j6u<8DwID{9!lAGxkd`Y6z46SNu?xJFvaf?C%IIy8@*l*is
zaCv!uyV?yUrBC$dm5XS8xus;Y)BIie*Yu4bwosyaY8Y*(I>X`uUX$S0211Hy*?Yp+
z((lnzq)@g}TSbB>!)$QDi2DxHn+rDr5_RFUg1jTp@W_Mx#@rP*cp3BAgk+6nAfLi^
zbVgg13Z}qxOm1sfV+)5OKKu>v8N88*<D<gioP{__XfZg20A*ceTYe;%EkG87M?jN3
zP#@3_$eyA$W(gq$4%%CFLF7l+hI&n|pA4UVA98>DBs<16FZDYHhd0eP2zIkm3AR&y
zl5MV{|Gyw44^irF&pTc2vmwRc;Te7fKbUzb^6Y=f;+W<#1%c5q;meaexdm@2WPY}i
z3hqplZ2koS!%~I>6F3&FmLDaxfVZn3CCp;Bws6tncooPtNC%vk;0op9Vm&Y)R9r$P
zO0Ubtx}vvMO)PgycxeE};Yz=B+Ri=?7+7`Yz<=gU-3`SP<{8rRqPTzLqN)0>)z%Q?
zJF%>)4&P3$Br=ezSY@p`n%u>yat#`AR*ImPrY7Y1QBNSav(6#+apMk^Bs@+)hPySq
z((wr8!qtdLA1+(cqeIS(`UOeVZZ;58fEv4f;;+W(m-Cgqy|4?O$s=cuLh9OhAqMU1
zBb`ll-VkO(t4+)*Eu2!ii-gN5ANl1euQGondQ)Hzqnrd`#&eGR;XM&kwW-7q1^TUE
z2~Jp1UfSopGX+mX`W)q8Nt|4?dtkAmZF(YLq>-T%5p%I$ltW^qU$Q8&_9JBSlaRIg
z?aum-iiL9*lKG;OY{ot7UFhs5Ys~7Ex!udG(@(aE9gc_K9Mp}RXOmvrTh?0kN9;4j
zXwBOJ0@Ode_c|s4oL3PgGM~yyngNPO;hdgXuU8nLi~2?2uxsmqiy4~D6u6NYp1KLF
zvMvZq|BNNcL~iKw>#LSzKN<x0vM0~Cx$j`+JJyR8f*QilDKjjj(Wo&!+v%nBZ*82X
zvI?}Hy1O)4zpOAwTd$OdJyf#e$iU66I1tKvbF(H;ASnccw`-!4XrjnoHE+2RFaE1O
zr=3<}gjV7^D5PRyX5tcGKabb2zyA@B5b3P2b5`GG?vwD7hWdMN6mJqxgJglOM{zx7
zOI`R$C!S268`xrpH<&#=*RjDeUr$nr?2K6B#cGIYD%nFQ1432YQG<rB_t-l__u&1V
zTtE?iU6pZgd<Y=Rp@*=0xxl98YSWIBEh#W`ysW*O=9s+<=RCSm>gJ#>V=ww`^FEc3
zv2j}<#ZG2ptX_Z1w}h5UABPN|?f;=|c{IpES#5H*H28xNIHO@`{ujJsl2%>xCo|ed
zGm|ifkWKHca@yInBrw>qqS%V*ZtyA9k_xWM%Kyv4=Ep1=UsBe2&_O#l=Usj6mP9!V
zTkolyWv)y0kS0V=?jx+=%D0=E_db{6h=rJX^9<AUszgVYdCwkyf26sADnMu5NCo|h
ztC9wOR;Lk(<9obYnt{rC4XLw><Cz@2;y(P&Z&yB72r9w({~O`qW^6snwg{+ju&K{f
z&l1Uy`HRgiUO#pyz2MVuR--P8+s0|XxOP%VZ3#6Da>2Is+R*s!dI%U1w<Ylb0fAdy
z)-eh=V#_y6AoH3-<hB&W9#hm?c?RFOo=If4>c~ZF;Sw+ciq)ATdw^NgBf|Yy@a(2B
z>*{QmKs3l45Eq013i--(G2j*Dlhw4rWX9$fJE`N#&0&48O?leN_P0o#q_mEP;T+YY
zs4&=4z#yd+zYhuBT?x<sWwGM!Lo9FrnEBS!WB+c~Oy9+i>z|gnJW`ss>b{j64?Nb_
z)Q;S88G?*{N7ecSYS6I{zXy|Z1N2Rua{d=Nmo9usXquDKe)WIam8rEtFQpBC;mcHj
z5weeXQoR>&Ep)h3G(U9D7G3VD6Jd={>WK>Be`;K1gXQ-PN^+9e;1Qi}4W=a~Xext1
zBp%sCYffTVVO|?*w<Lln&w$g+4S@IU0Tf`oXnZ6%zEiFd<cEw0%Br*7*dwu~#abQ}
z!KPR2@Bx%%A(20OZtxBA^gPfi<6Eo-|M0Sz=TGNKmN>jkT?KN}zA3?E*a;E+Q3uo{
z#79IRYO$I8_av}!5b<Os^m|z`bzK~zqSNS@lVrgug&4mc5Ygd`=MX>)o<8LuyE`fr
zzaQZ7wXk8@X=A84BBr)(dc{gFNdseyarzN`qG`%|{C^kfswgi>E+aDifxEQ&ma{4v
ztBOvv+l|6?d*0B2u(0`Nib@?-60c43O)CNCH$SCnicK1#h(UQc1-+{@=pOaE(W;tK
zlRo_0ft+3Mmx6A|;&*+-?n#YG{ARaq2q%91D^sU%@U{t}Qrb;%0eyf}g}AT#Q=}v`
z5eBWCDbyn>qVO(*dmtN$#l*}ka#d8G0lSM&OF{mrcZ9MH^-P8nG;3*&>(PHS`nD0y
zgeT8Tl9Z#m*`CL$K$;R%oiSw<_G`Z#vN|Y(2MnK;)o$}On)7(4N2PSU2{Jqz=`PLY
zATO{k6+A%XuJwv&rzFzGmq^Z^`C#}ckkaiOvhD%~(BxYfTiv>`3lAu<AU82r9aA3P
z+udsvf@rv5XYp|*Tkgpy0;<;!SO;GjAa|TsCpSwN)2o)cL12HB;&)of?)7<-J{wwq
zDmollbB^PwVwW&&;}%vdbURqua^&ak^LBqg{o6wcV`s^HALSKg>Nt}u*7IU1-DPD9
z@@V5fO<amQ=V>*bmcXOjfO5l646|E-dVG5o;hq<y=475joh`B+ViL%k4D?B_jl?2s
z%qKxpmeY7xVn+0s^<k4Vx?55Kb@g{KopCaGQe503m{RkICovKZed&-#?}Y3r(Zf>T
zl&AuT*Pvd{8Q2Q)ayFBlTK;k-J%$y-=@~lF1|v{r`445Y5T-tJS%+^-!J7J~Hdqe;
zmMwX>P*_O|<CNax#hX^LJ5M@^5u{SNKLa&U*PblJF~A!gq+(P+nWc#}m0hkT98e-)
zL6|Jqc%P390S;;l%Q)y~CMoR2b-Z|+dAZMs`#5v+AQkX6pC>{%srNb^;5?_Ak1=Tj
z0R6$>1wltbjLCJ?h9;CkUj3>t$O#5SQWdvs=6|rEGEEvUWnQ?=7Wrx4^(K!MnmTG7
zmL+Jm_nfgM4Q{`MOEn+1#&AxQ37^U3IMdqMbD?8!5#AEE3sQifm@$jwH(@*UKmv;`
zO=VlT!~oOuIc)<ek<bS%JM?}6VWwYdZAl%=&&j7oU!OjkhY&1hZ@^3xntc6ZlkFf*
zjWqy=Dkr0lz=hagmuu6)1uymDUd{VNg(|FbyKqg5DldpwG*u(C+f^-76Se+i(XEje
z<Qg5N<#6HvP`#wc4mIr1GY-}`2|H;0Qx??ijD70D_Wl~iIkwq!BDhB-q9<tJvnt7c
zsb$c3pFSep8c-S*8(-o)9UJTJU|d;&^kAE>%Q=KTrTom{)MBFEsq`b28vMYH7!RK4
z+>18%<R_tfZhL?8l_L~3vj9rM1c(U~$(S43kn!b6$%5uWs-7B>?lE7B2V|;bBbF`Y
zr8s_vCYnToQnh+<suS*kgbvwnG55h_TDMslBZ}*KFdNue0e<$cVnguM<6T`{MPhK}
zdVnnlU()k;OD_ct%8Nv1?}#zKV&wKQ!n!Dx_!$cv8l9<2Sz1ppNY-M86GQPbA!_f1
zcYzg)Lx#FGJVmZ-)@J{SUN*FDA|yorHa-ErrGOpal!6H?Egqhi6B2Vmzs7aRarSC)
z%2#PR=^vA5e|fNJcUMn1`o=m*DPTI%n4@U>LM?YQqzkuHQp6dB5O?z@RoDTCtxT+M
zBatV-kNoe7Q7A%b4&!UrR51M_f*515IbnygD5u*<E;UUmkpU&t?Ea~3SP)X;Yh!jt
za3pG2C{7H73yDC-v(#~2JwvByzbhkQpe>5fdh}7cF1nqHb|^2*6(yduR&0bgS)(ui
ze)f*2WW#gh2kq?)=~qbpW54;7YF&?k$~4lM>bCTjyRn`v6MJV*+`};FXqes5?q(}!
z++<!r4{!XJlan~?`@J<Z5wvxIu|7ls-DA_$$Wb$k0T+k?1#|+76<|-1jzlPgC)&I?
zFS#b9Q<RQ0cppWEPi6HHsK9BR3_L<v;(hZ~C3Seh83Q)97lqXs*uUec_2!jscyN+p
z1>@GPv?PFB$Y`;8eGQ(oMLHL#1Ny#lwhJybT$=4vdTf9B`pf5A!>=<tMrk(fA_~{Y
z7{Pd?hvW*)84Ocw&8FG~&eWQ6rOlX{j-X<6Hw>VvNP~FXTeP68*8YyMBTcy;<IWF)
zG)I}BRO7t0&Xgq;r5x2@3?<(QE8HtE_xQ$YjH}<q;=caF)CRBg8M9Is$Ub0MEDc}M
z?7f8kfisJs$TS2eH-Ak1*8}2=GjZ&K`!7=hupO4+W<q+E(;go@dU<*!Me&Mt!i)gV
zf`Y}e802;&PFMWHgm}JT+iyANO~{sD9u~HN<ie$W*N+o+UVN<L`AHl|CRxPct6kx?
ziR^VGr)|-GL#RZZ(%z=o0NsU=QBn8ZTHZ_PfOUl0Y3ly!*>W<#zq?$(^Yl6@Az%Ec
zRO;h>WqzHq_6{DrHHw==QYU7{HJPB!TdKR|BiD+hfq)Z%$R7J#A35bUAJS>U3_0mY
zXR=imy8%RE5Ia_F&V&m%PdlK1#+qX|V}H}jW4HJGBGoDg#CtNnu6_O>Fmg)PQ13QF
zg&W=s*cL;mU(oC(%=S&DIp(1h+GzbFfB%ujObWzbu7K;|YXqE{kD6};Y*wSH%p3rz
zwb8O8F`i)XpN~9GHQCfO?YU@}0*0Ze(NciQ%J=gcn3L?dWbQ69@OxH@J<<rR-jtJC
zmZ!U=`Kr`?WIG}WZhXl2{5~uBvpap&p6n`Jq)?i2H*MdU0t}Nj^-Z|;!r0QqeUq~>
zzfXdN{~E8KstjGnY0Jy6BN~njBkP2nwZSdCsVs4;{iqv+p}U^7;$mBgEUC)3<lM?3
zto*splxlnJH4n@y9@2AR6GWpZYaVxoJ-}+ur5i|JC{W|Rwa?w{{q{Q~P8y;u7Ib{%
zq;)P$-wca3_8sIf$#tot-oi2Tk|ZD$^0`bAuz;!Q!WfDHH>}qTmN8AjN3)$*DC;g_
zMjkrNwXRPfF&E8xXPgyF36U7QC0b)O!P!XHIQhP6e>LC47VRzwO`^T|y9%SWiniQ?
z;*X09sEf|fGM{X4L6kdbl&o)#R7RV(2`4B-J?`9aZpbVEgg~C8@jMip$8>5LKjRZ>
z`!oVjoyCly6642_xSTHxk(Je%3aH(_0`GR#$;i$K8N}Ez*4d#?<?8GH-go!Ck9swM
zv^k9Am4#iMT}Ba<fl^?{T2)yb<0(vy#_$RRvuT5lKl<xx*IjfA`TU}NNNQrakO5fm
zyl)A79Vt=u;}v|2@QvCv6BkEiKkua8XP#riqos~R&_-a}Srl0-7k?FPD%18~+u1dC
znqw4#&K`+>1k5`ayZ}@ly5YKsCAH(?zxuvCKmz65;Jw*2NMAA=Nphf}-d_WO_jhSn
zjfM#YwAELl_re#Hd2rT6DK1V!A!Ib-Qrx@4p#b2bRj8NDEEQwZ7>1~3Og?I1EoC`I
z$C^Ud9c}*{SiGK0K5Nl+PYSU8MUE)HIZ&>}hPFqQBUbO@=EpI2hYJsKMKJ_(yAU_f
zY(5?2@MG@L(K89mT0fUjn6hZrXIT|Z&L;5dO=(l@tM?Pk5h_P5-Ym5KEsi<$!#oo7
zZ07g`WRjOBL6d$1qN%t8SJh@9C>-e$axWIl>x$~ma#tp_YMPdn1i%tDV#;&{;-PyI
zf&8R^YyBY>r@Ll7=Kn%aW^?UZW}+{G%G94536;rSu_^B+HsljI0CxH}ZkWTsPaaY8
z<aVP*sd6IRa)ZDVyD=ekl;#2f8UI~YQrwj;h7m7poXJtkZTOzF=0>lkCM!x|oEaTn
zAIxw<^_G!x*5)-II5+NnHNgzyRyX_l>Tl_`IVxU`>w078eq&XL9!lriqGYR*WXdl6
z*Y>Hd(CRc|h|v98?k2u9$R0Z2qF7gmF9g&07);p(P8};twA1NJz$x@s9a>zsW(_Q!
zzAS%No<d4d!ZAkMU;Z3OG_TocUlw9E)@ZKw6y#BmPgI4{#o$ER)Do+Ea#*(+fJ)MM
z2nFl?+t4v()t3E%hF9?!qwD>0u*>1|H{Jv8>H)ZcTrLXJ0N|`|MXe|}G07}+l5fIO
zwLuYc1K@v9I#Xqofvct}Z{|DI#xfXK1T@8xu#iX5ve0J8P*blvq*+2Q<pgR7aP4`3
zZS(KB4SxCVU}lb)wEcx0lY$y_B66Y;0(!(0J<Jj>z>0Br`U8f#n&{n)jN;OC6Mmxi
zcilx685#szX>AUdBFmIi5hyXPx$$S170bpe7I}5}7{dG*D?#m#y}o6pt^K53ek?dY
zg28wUQ`QlEQPUk8dTdBVgs3l4fr7ga*@yDT0LBKBoeY^W#U82S_oOuO7wYbfD2Cj%
z!9W-Jok+Q)R+A$=BmM>m!U}79AyTqXSFOAjOcqm8>Kz^cyUZ2zRSfJkgQCFSS71M%
zfi)&|W>#U1Y`m(!zRQS7wT?J(x?zyyW41;AM}OGmT&&%O2W3V{vP_T$U2W2g8@JP6
z6@_#{Jo11D1mAISyIO!y;YLrdp*fuKH(lybG?^c}TvaGdH-9W4;jGWJUD~sP+X#0e
zHNuI(K@LoH5BdorsV*X&l<?#s{h&`41%^G&RY$wUWTb{qp9XIF-3~J+iP5vP@=)I9
zZwvrV`)NhwjkFN3EOR+M1{M&>BoHQz3D3QrSn+=AR$c@B_UXOk8cq$giTjUY-CdG{
z5-c)*R2SMN;DZH*dZ`U87MuK!tXRn|C$SzA&xeuEX~lxsqU;IIsDs{{e9`O)SMvyX
zAPZ+d9o}QLz5RW<<?CeIqCt;Y?WWdZ{8&T>B|^USWL4O*tpT>XxkL{~F4WPp(2iL8
zfE&o4B6gsZ){l;WTWQ3I?WH@K_a_00gm#v@&2pu4;&V%T2P1oQ6*c7_M%?59J~N+!
zZtKOrW+Oe}{P*p9#8~F8+h)rO#~XNKoe)L7FU@%d+3+}OZo5)Qt~>bJHwrB;&nM)=
zAR&BKx0m42=sv?+hgWONNju96e-OVFl6I6mRLA&<mD-ZKp+9}Q2$lj!b1IblvF-G|
zf>7e@WVo^#3IFWI!Bg?90tU8HnN);cev9iA%^>|rLhCZJlz`Mq!~p#@Dj}ui6z^;$
zlUxR_C4<cK@UXXu*5oqBLBwb~KaAjTIQ`<BVzKd`L!BFYIkCprc}hfMim15cO!SJg
zgY#~))vGIpvNS+>O^Y>*Hinam?iejoYCt9tQ)O;|F~Dqctgu=Ruw8I>8^+#L8Q5$1
zKG6vXlMp?dhoX@t0R)4u^qE=`0RzhIdT(EZ^7>gMaB?6PjzLth0k(;y?o_+vOsLGX
zRkn+Ir<wx_;e%B^=ts%E3|clnC$c=c(zjtn4mp+@YhU61b^hyPN19|awwRj_%QrPy
z|92zcp9fH=Pkv6xMkH>3%N<q;01LDn@_)JpelAC~V~*8t{nf#hY~6?O62^wEVi>qW
zO-W6Lq<B#0hPZP^a;!gO{-8P)ZG~-J@$LB1rmAp3m%Xo4i{w&yOubv2wV?~nPyTzz
zSY0(Ep&eK7X!{W5DgN#~><WxAt#t%8Ru|i@3`m}HmuD&zZdjaO{T0in%Xs<yC?1@E
znkty05J^;ZLIx&OvZ2IXWcjgK*6mA@E1}Gwou;1=5&S&#ZAc#pc^ngXFf6P2mLdi5
zm1+J*?-2iQB!Xv=YBY`Ha4I@z;76e_7a2|6u{+eKJi)H-7PtNAq+P;_B#56GNF?#O
zY6dFs9mYhDNQCzRuk|Jwz<p%Un*nMo=paqkP)dHPS&-u`CP5Nl^7kg~cYsL7EqQ+T
zYP24Hzf9hoIcGSoZN%CJl11O-=T<Yb18xJYbKOyi$qOY`=TB=T0ruOH6P=`0>^7Dr
zAd8`zfRrP`-|6Wv_6}W$Ff6ZGRmutEusB~B4oH1z3P9!OzqxW<;T~(KK<4)C0wq57
zH=K|n8NJe(N?0+!ww*`xk}VRV4);(FYixTRc?Lo&JwkW!ND@XS`Z9pAOvHvoD&qgG
z;Mn$_%kq;!Mz0U|7Ng^ZVZx3Y){kYXfpXr9bi&#fcH$h$&<K^P)TrV-MmG{?>0xu-
zQB0RY*$E#wZ-HIrE{K_jj|a=u!EyQwE|EY1R}Psd2k&$^urMLJDek8`2|6HpwNI-H
z60Uil(UZ7PSY~SOopwN-`sQ`e5A-g6iPi`N=_;Zt@T@pM`xJf8R;}Tm72t+;77>14
z$b?j}z=L`UovIg*U|X*@96N5$$RKYVY-p^;qR(GDWCYmypqd|&!%sQEfo)(O+IS#-
zYJH>#J1*3TFvD->vJ0j`M=H+CtxJgVs3zhnyrajP%VJZa05u=U!!N2GM!<lrW3ZBG
zz!njh?)=ORW;0$xn7$|CJ{>Vk2hhT<dSdSearF)+?UrDcw!OBSkS9IY7p3;4ry8aR
zyLHDQss2FuLwm4pr?U0!3;ODLJ$s@iixHA^llOFlB#`dnoLyp{-9f4OBJP<0&7E)_
z)s3NyVGY=oM^3s0|Kf#^?z?cJ)m1BFC%*23eyLnF?0szNcc%T$H-$#M<CrusChMQ;
zDPxCpj>pXRstEI!Zn_F=Iu6nf&nIJIHjlF5gd7WIT*~w`{Y_8-Zu1KRs=+L>Sh+5~
zK7O`1+=9fBksO+*h1;@HlOmD$NYKev1-@7my)Ugm)9{qJ&~i#O>b|7UvU(=%E6pKZ
z__|*!sEEjGBo=cSlF}Z%ePb=p+9LD)uqi^6gFHEQc^g`JA^j|qM#<J-)h_y7LsI2C
zAOVldt(XF66yr1&E0zwz?qKCk6p4R}j=1G@IGCs^^jWMtphV^upw!rzfo(vY7mf49
zp}4l~$Is%tswMOTi35<M2}B$XB?<SM+jWRDuK+f|I87mr2v{QbXU=(1_v~BVvHDDo
z((Xeqz+r)BtNi!cuf@s3TB`X9=4`Tu5SZOE`nAVH^jWnDiA~p;&JV5qmqV!7`XYu2
z4R}h<l##k?f>%Z?3i6I-0NvV$Q_vklX0Y!qSOtELNA-f6@Et;<@x!8Q*@M*4#iv%>
z$$S`!&W9GSTx_l%lnp(AqVb55>dUP9(Sa&_SQL9$4tXbNulNkWREIRT@M<u9@$;n4
zhkYY9{WuA}yT&UU#j#1E;9Fh;_plQ;aD~`;8$j_+FJ=~dVJ@vGRR*PcE+orXdrbIz
zng^sBJ{jl;I3K}HWWj3uKz#0YjXQ#%i&r$;z0^}YSb~>*NETrm)i~-7m2irf+J04T
zBWSx7Y$F~31I)Cle4piuDz~Q8r^=~Rn!T9ke$Y$H_=@hOot7I;``6RmFM^sHiG)qU
zx{Ffr|HJiBdbLJZ<(T1s@!koDB(CDKrTI$@*WnQGA_@15uw^lQwtAXC_nQ5n13l`h
zxn_-Na+maz#(Q^2Gmz09n1zXpO%h5{Rp<s9+4oLXkCTujj6Rj-d;Gb&!-V5z0M&9-
z4xJk2L0Gg{S>BT~^t7UE1o&3jJIO?B+C?X)md6HNz02-gNtQTaDqULyc&Rus<SrAT
z9rpmzTsNFBIFM&XJPo<<iwMkDBG^ZopkCI~(xmY`BEFY#z7-26tBWq;XBz7i)#~(T
z?{lM%P5Q(tx4g@=fCUPJ>42;(&;dhdX2vpFNitj0elR*ptH!0<W-i`Nu0D~)d}Tp2
zr~6Ogg^abmSA*~LATz1)oqiwm^REiD&JTlrsX35CbC$3HWvx`9*&?a+G6qXtFZrWc
zgOQ}#>(Z0jvpLzY4k-Cr`BOsL)o(uOdZTjq|5xtXPXJ;c_ZI?vxvm~SFv}OjN@uka
zN)Zup)SL|cfrZ6okM$M~%TuAI*K064)*b&HY<w`B@U(e0u$K@xM1ldoZjCSNnC&%t
zI|pRzH1UY$A%olR8LLQ^N$w?R?!9_!-pcOlrLfmW_(rFDp<U;enUQ}A{o1;6kj!ny
zAeq9?&iB(y`D{T|emu^@`C={R;FKa-!$Q?lZqA<w33FS1v(hpH>7<<jq)-(n*oP4J
zJ;8NYZX*wx{$4ZM-*neE)g8czpl|dEpD|l8U;^VVm~b}WzW2RQQob+osf!|xkdn;H
zh~11*RpR+PuVVs9R>`sMmQ%h2Dg<o5l0pBA0aEu3H@|t7e;9Tozyi!b(74Kmxg>x}
zOV($>W^i>2`WI7Ad7ZO-zb9GkhAX|6zi7Gna~9YgPD<Jy7uLtm;aHpt`H8V`%(GSn
zPoa&(w`@FA2EpiSTd<~fxJg0>?Bio3A*?u;$>y;XHVN>4mOPic05mbZ!UzrQS61=}
zu-<gcviY89t)yb;nS-wx@*w+46Y-4o^E_9XlI<bhxeFDPB>x0wD0Y1TFQe%x+?p<q
z);SJC(dzNI1|hIxPbkA+rTuC+p<&)P!WmqJVtqE>McvtEq2Kk%IPN6RT+tX$Bj$)E
z+3m2-xqF$&q&z0g+sJV^|EfF&vSSx-f~NFVHn$HOVn)n>GEr=sqyYL-Brd!`_D_}Z
z<I`fKj*&>l^?S>vok`@q)!#KV4R{a{s4{$6Nk3)wG&A`9CHJ3+Wgw@SAJwO{op@Vl
zgv$TtL#`!X*-d$}SD;Ix*|Z+w0=!ZkX3_rGY8)IBvboaALtyQ6pNXHMeR_2Nj>xR4
z89R?}_yjMO_4i;#V2XWG5c??BCSnH*VP^LGUs4=W*g7LrI`ov?_U1fE#X$j2qcQ1a
z%mQHV`zoM;e$}L$2n5Q1U>qgpMORDj!a>sNnEPrsBxV937!W$(ufL0Fhj*`T04$Np
zxb!UK<q7x|qaXeXdkoEEq{HSMjM$^DW|#3aCDbfA7*;aqS!q;4(GJ=6^r^mpSe^<e
z<bdn|yB{3%<nwsfbNVflHq*a)yTsiE`qK^t>!4FSTm$8u(Y~y!EJRUh(aTyKm&wfu
z?ay%cz36LpLB9j{?3c=zL(t_jCD2O+LYVw`k8}vKSMlu&w^BjjMu=OtsY7b{89+R!
z0&jR?+FMt0obWD=?G_5x-m_~wO*V^}x1wCunfC79(%RQeLNeI2%5Fonh=Y*6q0gQI
zG}=zs!>HRRD?j>HBbJ^NX&8kp<0`Vx4`)Bwb0Y8Q0@4a5nsHeB<-9MpbL0Lw<YrAc
z-ewW}VCp5gP{WbV-sOmqg072#JVR9RRE?!R)1IwlNAb@=V*eoN@Ez133`LJ$WOLU9
zZW^=sZUW4mmK$n}iuw6yWIdy|fX|4}B9jqeR2886)wpVHu#AmoO??vR`Q5E@UK{Ke
zT0-g$=i|Jm=<>DfEHB6Rft-LgjQ1P?M4cyYiDWay*dm;c`gxVfATfr&G3GQ2b*RrU
z*!i?JHbbNhhMchJgFpTLP!>+nfB11&t>N8|SJ#F7U0TzPkg=7G@(V*$qQQ6x3Fj{q
zerP=!Z?wPGmDK3Y9}1yLENHSiHKcMWzsa^$NaK-Pi^5361gE%55-9p^dh;2GwCq>9
zJcYsk{Y!c8msNG+ft=f!vJ{oJr$d`g5d*U%w<jg~sQ8~ItxbZ}T6M4tKxzlE0_22I
z=%ZM0t^JfPml!cp6kReSBzr^(B9C&tI)B|L5>&f7#5$C2%2uAf+odL4mdK#haUlnA
zdG$4@;e%oaxx#_MNVT_-YDz`(RY)eO=wiC(s6v#Yu=Cy{`$T{`*;YE0b^L*83i%|>
z7^~xqefo{p7xk4)j8e5XRz&Sy$$VN&IcU3yUtrxCmLEqwOK2sf)Q5$~(ovMfVkDEI
z!Sy8o-KVIQaQ7$gCauFSJWPV%#c`jrwgx(CUwSgPn~Q8`3Xxrs*OYq*CW%mVc)xEP
zzKqiQ#%d66LND41de8ZbGP0_86w|9ts`~&cjINb@;B2xMFOlp=bJB|9tfJmqu13hD
zd=Z-0+S1Y`xooiB6m(Id?3Dx%+5)L&?hph~KAa%fOT~eSBuuvWjSZ?qu?!DEF>!~5
zJ;AAezmWAx3zD)|BICA>&$49RZF^j?Fwp9MDRp`*>dX4e560pgb)(~&TfwzEwabF(
z8)Z@Z9q!s){6qsKR*pL8_kfTOx&xh08k}yFI+jboy3}E?M#MZcKNA4+V3BMXG=qAM
zZY_#SX4VaM4;m-g3lsqJ`x%j?SF-hex}Vi9m{Xl*A4r0o1hfxxCN46V#Y?9=MO^yW
z_{+9hOpM=e0yA{Bp<sZ%wrKS<)XkF);Wig~ZW?E=j(UcMZue9yIND#sGcX4dw|NfU
zOOaEL^eYBF^Wk3~1>K+hLST9}<H2g~*Wvb$6{8QWjxu8Pj29xn1#-aV6xM3~R9DJN
z(3=8|8nD{K*`}4b&GFF!OdMQeM}6*cC<KnTf3KUUar=pdSzMFQJFVTT`05qSMI5fY
z+C)w0!YdNS8zbpT)QlA)b`dD|xYA-2$FyS*Q9$YMnmUz9q7YN;@QJIf==)1S!XO}w
z{ddNe4uUG{EcFV)V25mbw2)WTzVbBP=j)b#aYuYNAE>FvPgZL-rxBY={lIGxY!RYS
z>wYvO2{Mgm`6lOl1LR*5?cb6XT1Uo&-#oKim#oxtkkJa`9NufRI67}<7(}(Kvo($g
zX-R-_B()39$Mf;2$f}g?7gI$$-<av>8&YY!G!CEVwM(}f!>vrL=U3+7t!{py$P?^H
z*f*Y~azvzYQZj)=6fQyA7ik4xUK4gx(B%SLA*>b6t90`wRP5SoT6H)3nNY_a5G0`e
zamD>q7pXuwKW>n3wV*9Vj&7mp&)$pweb5p^D8B9D4O!<72aYgo>>`*zsJm-#Fe3Mo
zcl$86R>3j^$xfwb1U&^7@?*KZQiS$08Ir5or}@d5g6Ls``EvMWOb@G$DbS?D>ci-o
zMiL$SMA6<v3N``Gp@BVwaR_g~YaB(O=RfwRmZ0!3y3N2&0#g5NVPF;555_>AwJ6Ry
zb(51UbzmDud1=^uAQRSx(lOZpu6PPwn9WZ%3g=S)w<mV{i3S8RqcMgPoTYV*<RS^C
z(|u#@Iyzs{zJ&iSr2<w5LNp{IahFikgKlTou$|E|?O}q>f6gwQ@q1(51Ps~4(XcZ0
zO5Hh=oC3yORu7)Nh=)=VS&<TIurrr<wYeYEXco90M~Unc=T~yot~E^PGz<hRqiKQQ
z?hwQ-bH!PK!Pf#nd!5jGl%>(#X(_phEF;j{fU5xS=-SD3=Vu@fC>#=`7ZhKN(0Hc~
zHmn_E&f_kVRSH|zkkRdEoQBX`n{TGZKg6z}%>>~Yv!w{opTFw4jRwj$#xkcnaL!w@
z33&B(uv_BB2lZk^oDZs_)Cc@9%j(iFtXkTPLSbGvwYsI=8!zYE981O%-GOOyl0HZL
ziLeO2JmKQw$LZW1nSS(NXa67fyuMc8!>3Qu1{D~51Gq>w7rpu{VNrhey%z5GQf`x6
zLE!2{*Ll9hgy-Fmz9pgrE;*Ls^z0n&gHtx_5^PBH-?7id@5SH?ydSkB-|HlyLY%fG
zQ4)|?YEU=R$j8R1KE79rr)njlimSPQ#0_2-tB3z2GVk!xRmc<(@HS|{xCr>w*w=sG
zJXBxUbs!K8<4f<Ulkx5@yE;qs5yU<~EJ?&~amf(0K3J;miPod_Kk~_n<xlLbtr5G%
zNMJrvQddZFr!3rft(Q+98F~n^r;GVh6}r~4yTvLLoB29I-5DU9g%+;F*852QKGZ=>
z-jT%fEmE!#JHH0ebHy`$#WOp--P_)U-#;*13?MTqV1PuNFljZK5NGjax9P#GDqVbj
z&XWTA`mv!itRUdj1}?sM%<FpcuVA%dvg+C2Z(kcVVT|{pQ@!##4_ddqjXM@p!s7v7
zg_|Ox7mi;L@*}5u5hlAI=A7&eN!);se-!oS0p}YnAbTl;4$=wGvAL-|j&&~D(oJO?
zj1h6f%BmPIP0rStj&~xeS`nykuXs!KCv0^%QtHeBJ3X+<J-9=$eGA63OGIWpWZDFB
zM7d`R;irh;46_OlRcR_ksRFE_iFB}7NZmdpqI{9`9m>sBc4g$!S{Xir81H(Spt36X
zWt!?W_>U4W3=FP6%zM+yY<JAj@X)~{Z($d^q<mOGmRkPm8H#yzfo<~nj<Buv8tt<!
z^^kAl%zN8*<GnqL(uo*hCwO>zr2?Y0FwmQS@~<0h6p}htEwxf_S*09TyexR!zwc?v
zq7rh{JN=w<L@C5{EVbPzq@FaVkKW9X!M!v{&~W?wM@GwP_vD!2jh;xRJIIEdyc$b3
ztL$)7)JfVMi!~Z5z(?(ydmaiXTN!q?(sg~E6Ypt6?Cy<&hMR|z^_!#-X_PaB4Gc0r
zFE=}|Kk>=_-?DzR9s!PZ-sm~|SC(yXsN%fLU7?u>3;TaF5AO<oq=t<5&_-TO-{NH@
z)eaGB8}A23y>h6tzCTtP?iTYo;0_Q8on#J4xlK4KzW~*YR%H|k%_0Pp6@Fi+@M@S+
zzC9Juok=sG+;p`|nCbTHurx*}O7_|=!zWUx$p^BM77(!Xi8(G1<j>&dZy#UkoMW3A
z>gLpw5#d%0N1jBj%oP)o&EQu#3`%bd_6)1qDTpILKM3zlQjr8>%q;H<?K~`iD{sXr
z9<VrWX}p%8OU?sL87Rj8(Mhy#Oakm+LT=gncYNSWPk_zAJ;zmn`C0?-jadq?l9y&b
z+S(Kme<qpB>LTk>yxu)D=VT&_6L0qkokPG))SiLpV!>uq`Lo&frm)n8&l14y1ww>=
z2=c5Cjx`;DCnpr4vWvQW29PG2$PuKiI~0Hji~{%C^~ErZBF+UtSLJNjD+W2?`5EhE
zPcIhxYvkF!r71ovL5TZ6+eCwUg7C>olasY)-oUTH@TE7)4OzR=!0DO`4Z9z(Hfesd
zvxPRTguC%J9F>H4p)rRavvs{ViUY0im)$Hhu4JYLi7JIDDACK5z3o}o;Pvg280~v2
zN??wDqij=%S;1ARl|ubKgF|rpMy*XG@syUS@fYU;mqAT{Q5HkJd^K!5t**3PC!-PU
z#(f|>#M4o+J%JJlgE8_@2Y+Rz%T=;*$Y)mU^KS%o)_x@0X!Ewu%myk%3K9L*SmC<v
zDBShhlehYra>C2sx^tv3VY~i?6j;2AXGRh=a`m|u1kJX?aW3&%O~MoV6CJ$D`E(Kj
zt*ungSgJ$UmdxKf$f}|>cS{yeOzqAVd}L+{-7S&|l3~??f!dj`qzp_7b!(?a-(DTo
zDX5Hpb7>`FBW)4IB7INcF5Y9N4tu#Y6KC!|w85A-K0d8I`=Ly?K&7sW$-9Tg>oz|4
zKaqevYoOBBl5w0Ud`~8@|689WyiXbmEspPWEQ$tQR@V947HJUDArtLZ7Y(rZNBtP-
zYv5~7IUOAg<*ZfNo2@X^JL_pUR=UmkF1L9?!6-o8J;0rW#3mixCmGA$7zppNq@~Ef
zKl_~RmkS3|6PFgEql+T8KdHYs%rQ)5Y7q_iYfCh2A*dnpEL{3SvaI?_76Dx7D>G&x
zgr1f&fJ3|Ire<=-tE}pq2xNqRjXUN;0`p+4u0;vcudB8l^sgNWIZ@B6eKp%B9pYhd
zr&cZ9z+GJNl4Z-zJ9Yqlbfw~1w{|tbm4+quZ$Kwt@=~LVzwM{!_z%B?IhesU+H3`l
zWGt~b9IC%3z45vP`nu+7i^q8Fh;f%@mmQLQT&g^4VHbpm6lqE=>S8{l0u`yjNE3bZ
zOG~I+nx*@wj)hNrLt?UxTu9xjMFtV(*BpQ@<mz6TLIyk>z+ZlPmgbC8AN{j#pAtCh
zpw4fB0#(_JVc%EmK2c^!-E%V$b;n>X>%0VtytoN1GCkgzjXigY2mf$y6_Bt91PN(f
zX;5X-Oav~f`&HyHa-iL=s{p+E4n^UyB7cQwmR2VghcA~A#9hKU{zbdzLSP(r61kf@
zVG1{`TECv2vI|m4^^WfhgQuINBc_|~qIwVh)_cwX7ZOv>G_;or4_sH8L#r~owZ0I6
z8+-ey6q*nVgBs!tc=MQrVaOpmy**Y=0OsStXqhX0bPRThZYN)1exEiL5^seW*ZW%l
zAx$EHA0f@1Xcq_Nj{Q%_%OB|N!sB&1Z=dD8&$KTcS^JWr7^xvnQ0K*n;jYN8u{w$X
zdaq8D9TB@{A^jPilAw`9{+RZFof{t6>h{jbm^Jmj^V`^s=^B9J&d*s!8Q*<>(?yG0
zWwIoyXls{4+>Mjz52dx`YM9NWhrp~o0uT&<&FkNS2u>Cx`-nH%>YnEvz671wboUzl
zj*);NoM*U)IZ-7^#Ip|d129rcATKm326v}JdLw&uYYupM6OQPfWIapof)KzOu1hJt
zcGx&{Vg7lgXP7lGBQ)D@4htU78Ezq)zd#y)FAi_^dgtcQ$x&$*;U~;1UW_(NqIcWH
zv^=4$Jqq90!k-vHSm%l;X=OG3oQq_0PHZ&H7RpF)p@fi}Rq9Y6{2l@bSz}XDV+=yB
zzcFMZ((y1~MxM(*q<5@xdkIjWT|1Rtv@><oC4nyIn7?|k4bLY;F=S9($EEQ1v>W~R
znzjXXa38pF9x2<1{RRInt8-epK1M#T<DOf}|GadN=6*}xFj-cmH!T;Iu$XE^b_kVP
zU6xma5zJO2jsfDaG>nLKbCQDL%eJ!2Fc4#d5qLKg1Tc+Mg}Wc&NkvX{fjIvEvT6$J
zEM0S>D|Ve_8wCLWKLEf(Ruj^CSwA4Cfq+bdnRajhRWUNPRjg&BC7@FeO~I^Y{|Dpx
z{ovBn--(~OTrkhnkt~$U;*=%3g$v$N-=qSne1R`BLfQms@aJ|@rpd>}&=kZnuxxa?
zK;}zWV<QHyipoi>JX;iJCQ!?aQbyj>_^W@Tsp*fT;-lX>z3X0C;DIECktGxY^*Q<3
z!Lh1CVGPbvC7f)Hr>YC)R=M2S0IB+f_PN(o&SUf6vnm%S$>U7s`rBGHYpWmJad#5(
z$jdx^Tn%+Wm(8<&qAb@VHf1X8fh|q_>ly*)A~OwId`Lwk$MECqmp=k!#`oLsA6)`U
z>5Z)-{iXbU4gZ*>iPmgtCraKJGX!z$qno;SPA_}>>;Bx~v4M8U&$AVZX-<0D?bkm-
zN4azF$obC6&!l&;@h|aO3R^+Bl8wr4{yPq80Q4h%zU_hLu4%*id|c=RPo#SuYRHN9
z%1qmg@$^vPzoF}bNw1*j-}I)BmB22c^VOI59>6gfzVc_1M$v+DbRwS6lB0XyktO@v
zVSaBA|Alv6!CkLupoo(u29IHbGqq5U6y&N;Ut$n`k!f*z?}A)Gm`L`>IBWq6%W(%Z
zVU64S`-ONFg?RTcCOhME8{0OtY8C40+u^-k?0qU4Ma_pd040V5=J&9*Ch*+f*fk=4
z?4n8#s(m>=;te0PZli3UzmFMGIXjC9L6ywE^CVerKuT&>bYdhXt&++Q$2^vZqMxP*
z2htwVXrk4;O%>Z5px}M(pl<*@QmzyYHL9KY(2Td&Hw(z;p7UsgBe#3Sql?%kb`AXM
z{@1nD#$@j=BS;?hj5CwdTBA-(1a)xriAWegpw_)2&fZw6CT28ScH?9NnE*)ZHcKFR
zGF$D%BQLpZNY0?etM&~EPx;^yF$M%r7PnV0^T<HCQ+<38OYBn66Kh4FED4_`M)Z5R
zeDVk^i{VF<PyJ2VkGeCf20+Q_8QQBFDL@h!E*m1gMN^yo>%6cYxvb$`56N0na87s@
zH#b`H(k}Zw(mzylT}*`jLfb3|p_R!Ev0z=*ASRxH)>w&nI)s#flGaNAA{=-*+cmhK
z!P=ffkJKn&igDZJc^IF4kY3s^^8l;*!S8Y$o1w^`Tpv){R){M5i~l@Wp;V^!<cocr
znh{2**;4YZ$oWW&Iv2KU4r-nC()z&`@a1R)Q-%VpUMl2Zpl?EiEF&#;EzX};@9l@$
zm+|<O^Wqm;al4ca<rxDX>W!o5kvJ|7Xf5Ww>`qotb5x~j0Hr`*<h*BM1h{DZ+z(Z%
z8@D%M@HVbbMFi$E?#$v+;kE+K=u;j2NU}~;Y47aO`)vd=gEu-kLi-cc-6t;vG!0}U
zgYkKhX1hO<>-lCW(OIs(KD<K4%z|iqpNYw!`IBF?4T_Wz_J8aH*m57^@H-(=s3dPv
zzF8`z0emG=HdQ8(uAYJ{*4Iq%z&Rm@$3rivdkdg#7ZF#u7yHl@WNLGjSK3UX=Pv^{
zZ0|=8*+(8IGA;jL(Rd5`#~=z$6~P6Xr!%U{G3lSj&x9tM>lr7AUVF+fmyNpIOrr}>
z0lc&%;pZghWRZj5&Qzeu=(Eqv$wt)naq!L^qx!}3rU@@Z?CLz`Mf3OM1F4tM!$UTS
zxka%Isbh<+|1=@S5hdcWgLurjUF>T~qyZu=WOE|YLX=9hb6uu%Jg_TXX9Uu+nJ-ZB
zp}g__wXpY;$l#G2rmXXZxX({D_8q;Zu;;p3_sY`Zi<&m|!-^@!O>et!Nw4~+4k#N)
z%GxKV(X_2gYo*t2h~*&{R(@FM2CTWy?AA=5%xs;-qn#7zs6%J2L4C{EL-G1o<`$CJ
z$Go%<`R>tb(<Di=&NcMM3L_8V6%VdM@ZwEwAwqyc<J3LyM^R_EnTE4V4v}&)m(#pG
z%!*ZQ7|SEsy|{EY{9RS7&|4l5fZTb%`5ZC{9N+z)Zoo)D+`@e#jf}U6&%!{~M(%83
z--hV2ojM+REQi-5rovA~W(V=^2~jUypD&c7<dpZDAR&H4FTD^ydYA+h0Opat>pAr%
zG9RkKs}#^3&x|^*QL9T3$S%U<kYH@<xCX`i)V*>)SV2?A#=24hZL9jYBX>ig7e(tm
zAotjvSk)ZFyCGVZY*14UAGP4L;6-Wc$)mxF<+@xeAw<qxe#}u6xJ(xeuTWUJI~0Li
z>gzT##)wlbJ>H%?Vqbo+p$kwE2b|!P;l|k%ot1PmwU(VHilcE>$7gy;j?g``E6yZM
zbisb^kn~g4*yHPC5W<OK353eLxiqy_@mZ?>fof)a=shiRyn3e9#Hmux%X?0-`22C4
z&-)^5!VNqc>pLb}$u10(eL7Q#!0`|NL;L_ADmNP|+RhCbn@p6d=HBq`8m$U7W9eQw
z1C}DzF|xwDePH@~H$`ha$qMBZLpa7o(%}d}^o^Lo;BJV<RR`Yx`-00u<zOGRBiIZ7
zB=dx+JNO<b2Yk*rT$x-i4vtaf`aLB3{%6;kv32^~pVFYLE*A6(lE7-bBqFU_4&P*G
zR+yN1i$NC;Xqa<n!_{s@Y_vz4<M1>>L!Dc=<-xY1;{W<)W2sYL*6;q0;_v}kxJpOc
zi)`7XEu5tNIrWy8rx_I@JeR>j(Gs~e|I5USN%|zvSc+;|Wz&zRas86^#_BAzo;XLL
zC)F$qGTj1_okcK~cyv&ecu#>?<n=s=J=mY4Ov3cTp6Kf`i#j9Jd(~fN@pv^tO2C$D
zS@G7M492}H%{LiTjAt$r6T((xMQujO+5F8&%yx+GVMdTd@YFegZe+aQl^_79zfj9`
zAUt$%rW>_tqRTH4gqCUUa>$ma;s}i6NNHZph4SU={*v^W#8P~hb|LI3EBd0x@f@NM
zW0ap1aw5NnRC^BJNl5S&Z)ds^(1#{qnyn#3r4#%O{c)pQ8)6Dh+O}>QYUGD*Ej+qT
z0(Oz@B|YnLIeyYrOckNlR}~gR*xm9C3|(ce=>2W{?z9JkHC7qgk{76{a+?-SQ{|Jc
z>SD+pgmg2$g->2#SnB!1C-0~_<YBi@w=e<d;O1(r8Ly@?VpQ(ODq#h?NNWGJjwVCo
zux7-EDB87Fxp1KEknunCnG{{m{Ay9%Kqbq8Fa03+?D=GHTOox~lau}Puu6pqh+D#c
z!aP51@B)lKftAjyRTN)C=z6&K;lJhVej^UMVCHUbS}2L2ygPkw)2m@WefDl<KmsM{
zF$v2?a1o^6t1mQsQ?y}7%^TQb4p@WM!f@V^=+=lE>1{nP`}ATHkfBod;kTz=P|hXX
z%Uo76VGXS-&=DbY1vel!lIoAPsl}r&ErCOo;(7~GXk*uk?y&=N{ekN2RyKR_cFP4F
z;yEJ(0TFgD=cL>_r=j94$E=uHg5r{G5^B@Z>#ir$oo`QMmt=X^(xN0r;TyaDEEB$+
zz^2q#m0nkqN)?$imAB)686aRxu-d#zNaClk2QVD_p_9l=Y6_F9=MhHQ5v8n-aCg}L
zK%tnuv_#%4y54rh5mu5WdPazHo<nFTfw>x&RgOV&F<SUkFLtJcXdGm$UBRI$m@i~{
zp)`fVXHs<bkoi7=fc;g!cE{h+h*x^Wi#&H?IYg)a#o&}#UQIk~$=0j=n#$tf>}c)|
zkkLCa!T}TUDGvOm9@<7i(aH+3w#Sg9Rmtvml^_0sDDJ<yI8wYWIX>B7F2odOS=4In
z@{E!=gp#&oG%1zbSj->^TQzJ|rNRB)RB^%jPeHh8-o;#-gZy5U-Ys%v?4c=Yd&WJ>
z;k<E@cs`-egLAe(S#EC%6;4rs=PVrJb6x+arF-#hEArD}{L6!}j3As`3RR;Bm*yLp
z|BQWcK-rIDyC0}pF*r)ycPqG9q^;438MfDi@D`BEbejbleL0YP6DAQOh_Fn^ql$eF
z{d`FUC&m1{J{UF{QI>()z=}!_gl5hofeX9QXX@gKGhr8(!;uMBG0{0ZkT13Dfz#SI
z7=H{h3>3`Ek5wckT5nDU=?~rC291mZc47BxN9nx*5o+Mouybvy;0ADcZ4#D)nG#$+
zTw4H~=KQx;_fId;gqz5qAa2#u>beN+(GUFX1+gPnSxkYV4C0jn60lO^*dJL{)X}uX
zSZAT|SZLRRZMKiQy^#SHmh1kDe~5bRL_B!320FML)mWi>4+YW2^+bH#qK!^ViW+O_
z1g!rbKvs`{>6eCCbA49AQR(^2@-~*~*Sr09z9|%`ECaVkFP6H@WRF=RD^k#)K|+kk
z;D}Qr^bdOuD{uuay=oD9?$+ru#7%f<J`?ea_Pq+PSV%Q~W_qRMg`>R_XQ`?F7Wow`
z&+wn+smSJderaN|`A>gINed7w%WYnWyT^t*8z4=Oo0A0yl2xz3fDWbsgY)0=nO)US
zkD3*|uB7PxIPnsQk=UkF{(}%8^S;J(HGT)G<9=85WK7WC(KuQl^%DzBr}16v9Ot#N
zQcUE5V~+?Az%bqMpm2OUrHJ1>V|Wq-%G?bG=41=MFPL#0dG^alwC$@kf@z+ZR+71Y
z1IKa!Mam8Nab?wDqUG0~?du_b0tHQ&)tmDN4+cr0=h@tV_m(PHg~>&;6T!cnDkM8%
z6demLPL%wh>Orjeu=hW%YgK*<+XsSK-_-4$Vk6X&PH%S1@t9azR`lS#)hBPi_Fs&j
z>8YJFmkW&#oun`}nu?o5LoNLVzzP{v=as9vPZzi}rr8Q!7Qv7UJ!-~4(#1Yf!XI8v
z=}GYJhH#^HTb3{Xs7co%aFQ}Uo&4f6ODaNbv*;2Xftk6{gNTgF9K)v9zBdl!rC6~&
zu>`<l4ZopY((Kzm>cYn0mk-BEc?M?R2IO1MibzmnYuxP6&hwrsz$xfQ5ja_Fp=Kwq
z?qHBqt$ro(OaY5oDn}7eB}35QUfq`X21+yrhu`I{PXci5nVnoN|0m`Hy%bAQ4Um)a
zavKUw{D60>X0}Hx@GQps!?4m1^2?vW0E9IQY9**RoUf7~Eb8Wi8#(@jX~eQu>j!vl
z&RHUqWp#u2R+5VZ;SZCt(_M^Cyb9&7S+c#FwX-v^vrSsugU;9ngs7a4(sC(QR!UJf
zT|A={!{|5$Nkq5w>K>=fq)mu8wW(1C)0fC)mbf3wl1qUubcTpiN*57D9dY~L-W<F2
zul96lY*Z@MrvwPU-|vdda=K^vC3TBb8KGr~a<4exV>k`Y2mkJYW^RASUJEhZSgY^s
z4ea1JOz?=OF^*1?1KK(CrpL$p&!t;+U4H=?Bx|WNuLngv?f*I+ggqZw{f<t|$GU7C
zbQ_kTWInvKXi^ZDvei;hGfuyE8<*P$UqmkppCcRWr4#{ZmO?j2kJlO#N`TRZXi1rH
z!b81!+>~IsQRR_86bLx6Nve(YV3d%C*(y3{TlUAFMz!@Di%vc~z{$gq_%U>!a0&^1
zo-xqzdhYdT?N^8ymj?h)NqrdId)2c2(e^#xY4%~`Pm?Jno4-$-NjLtrGt|G{x6ANx
zV0JKropNs_Y%x>fi3W>2TkD_cR$VgI+Hn;!B&tcqKq{k{wj=8bKVBmP$G0ji@_FRd
zN%qITV{Vwti!#CtlhUfeYuZONZwoZ#CzjY<Sa)3T7D87!Owo19aw8asyB=mrF(+PP
z_!w7y9a;?Z#KXsN3$Mn?8!qt&>*0=PB7??)W6tZyQt)BpA_22M%E6P-Cx7h_E1FvE
z2zvIxz=wN-zMtT5|MX$%5ifd{Ic7~W0rA(R_HQU4w7?|$_LRcVT6O%RB@VWxVDq<q
zKDeQxX~Z{_e_LE)4`FDJ5r7`kXCNzF`V2e=97URN-<y}?@@Xn?GCZ<OW;b&vo(4|)
z&VvU7x+|x75r+5$+JKEk?ZHT`HFAvz3{2@Lm;^g5@DmvlM`s$DvDHNbEuj#l=$?d=
zQ<v`_0`tIm(jWPQ*oc1b5n@3Bmk<&m%!-0SE+N6kVB=g=w7&C{+UW)T8^Z>&y;5|j
zkG!nlf$@lmR@5`D+BvCG!X?#7L%a6QHjH4yH}o1WbH09%Cg5!)Rk{#`h|W{U8Asax
zd(=d7ztKeYwbyXKju}kdYA9W@7iSn5yynIQB<=0fHK=8!KdU<uP9Lis)QM}VseVlH
znBsEt&SmdZ&^+BEIF_0R&0X)-b@oc^{as%9j>&FE>8D$WdS9}Ox<K|S>0T<+2{mn;
ziZ0UDEo(bdL;0)GK+x52zfdduBAbiv5T)&4eX1Qw1Mle*a?drffgA<eThw9*yu3yd
z#Xvp?JGcI4Lv*O=rJ|3gb{258^Ptf(FoTAgd`!l|EO5OY?7xAQ?ppf(D3*FPK@g;g
zO0Ozv!T$6*rTOV%W{PMe8@K>|0QYita<#2L9Xjzhl=$&nq9-fq1+!L@<5wptXD41U
z!@30H46j$N-;@K8jJ*Df9rKuPOg(!{Y5qTii8-esxSh+!u{f^sa=w$FTJv=GG&vZj
z_zPsvg*aoqDgu)0i90x!B1WPpD0f8oJAY5XBE5K|N9XsXI4)|4eJixH^8q*TXEx7=
zH3c5v1yCS%+_mM*J5PGKnX7{3m(FVGa2zoLvh#luDSTB2D#RMSz^N5C35>NllMF~N
zPKWEauEgEH%~}OU(#zC8DKbr$wV9t>=bLRKM}C4x_-p+r`JaI8YD{p6=BrK|KCzzS
z3yV&<l&AzHQb_P>?Pj_)xuq|T2C9T}`1=gF;`;o>4>bVhfaK1f<hymljRKfWR8*{=
zW4@0y-N!Oj{#(JEJpBQWLYpaKlC^=MIwtW_<doU2R)NB?Goodco3bbn>=*<H;CK0*
zx0y!1w@TS--cNn+*I-$-`be1ioDW3nj$qS(6EHI=!qnp{mifjZm}%eQr>OW1iw9B7
z;6phKv=s;b|3Fi+W&)O!k_r$SIhS7q8rnvz0r4Pa`B*oC*0878`T(UpQa*l>jr0oB
zxvA{`$8oWTVbkV3q(!~yUS=CQO44JO8|Nu!Y>JB;@KTj0gA6X2d%z4u>x~2gI69li
z(%*lUM?7q*!9cjf_%0u-5OWYoKYPE2My8Iz!!<W)la7w4Ruwv~X_*+A9v9ElaFMaI
zaY<-Cf#m5inlx}{n`lyJpz&c_3|YJbDE~Gb0OhD}V+JELA|4ilSXxTLj}JZ}5`NrQ
zkew08jF(N5mA{VAmQ5!|mgQ+W1Zt-7Bn*ILN+M*v8HcT&Z_(0-*nQ<}Oz0#z>NJQ<
zHzjT2+|Una*c>F_KofuKOmQpeKDL)M0hrtpJ42}x%|+D2m`Qo4<HS<aLprlrt}cgM
zqQ+reDqvxd+l6PHM2tw8SmQmNULFmOKAD~^#X#6fyoTD?)N|(@Jn7Uq{d_8AWt+@6
zM3LpV48Sa!3_gx$=U-Qo^@548){Vns!i>rWL@w^5Amcw}Pl&Q*2_`Tl8P%I_p%;R+
zUlzm|vJ!<B+c|lhId@Yc{MkoRR?;T1rB#sNC@_`#?u-{h(|%#6yqT=<CJ`Q-PZd)#
zvqkyNaeMZY6lF7<R{y!2FKHjtF1qf`N=5aLN6&|$LdG(-mdAO;ww-tJ^OQu*y0m&i
znwS!#3T-{oKx{F34;gHo_E&}h(T+ikn5qn?R^~F9i}@5)P-A4nB>OLqK6R>1WI8p4
z%utvyrWfOgi-~Rr)oz1&P*X7^i=#I<Kyc_=a)!Q;iA^iAB*K=%)sry1k`3GoZy_~9
ztu(BKn@3x?%DKX0(eV#DxRY%^<S^%?gWL&1s>1#&p^8rU^U)B_hl<O)wUIF$aq$+}
zqPityUoV{42*vrzKA&4n;r`1t1eIv5>$aO&8L<JO{v*Ycd1uc<;XJ!85di=~3aret
z_URCEbSm|+gCRy`jmydmDKH#<HPa5a_px?L9W$%fxn6A#=pSa(KU$t1U;vXC8`ncv
zd5c1Cr;-TF?Is22&lrQSe1#Krw8bF7GSLdk@a?7xeDHl<<8j9_EKb5~_D{_8<*jGb
z35o4xwut(HSjKUBM9y_bJ)wCv=GrnXo0Ibt@VZ~yJ#MX(P7(>~E*;(KEoTe?X{r8z
z(VzV+fMPfR${K`^JqwkJT{7vZtj*0>$nEE?hDIWZ%j+DYUo>GC-B3{(do!|k0h;!q
z%3OSmB#N%e(x}nYgA5Qs<q0m0nuKC6DT!$1-=p?EE)3JJuO}@R8V+*%k9csG5H0WD
z!!husJ%vNc`ZH(11gwBmqwEDPt&2(oNOh~0GsDDoXdvoL@dZ-JuYpT#(d}mv)^G&l
zcmM0*FMbz_I7ihCfifQ>PCu@S-?iVrzHISSG^6f4#xo*7nKtBl+kUDV^Nh=D$+ZEU
zXI5YdPE1ec)*+G0pQJb>D=N#q^x527h?2)8q(x?HNB%pc{}8U~d9k}~I`WZI+G0oS
zuWWJ`|4}8pbuxXdMY3Z0T!-NgbkkT>1Rn}KczkrN^MR#|#oOZx7-u(HOYPv(5Y+jH
zAjtdus8Vqj@aPfPwN>1UMsqxLZ_I%$1L)&$aSu_EQ^eoJe0CiRHd;+a>uJnadUn;Y
z7ONlmo^(*Y_n+N7(J!eP01K;zc2A(Z9NX{res^{;agVsa*uLwJgDS$!eOl>Hq<N>n
z5Mf0aAMW?^6^6s|J)BtGSmilQa2sR2@CJ5Aj3A4}xTV`}Bgk=|O}+QpN8sEbVFtdO
zwc!p#wUB~1e-WQ3YigM<d%slv_v?YZ%&goj0~8G#yLt!Fk=H8X^z9F1hcUp+qB{E)
zpx#zmZ<t(Xu!MJ5Bp?H+5Dws@;KnjZVwL@o?(l4KNra<%6rXjW><}!`JygfA&K^@Z
z$M2|B<(<OX9I!Q)5)e4ybQ0PE4G0t%2Kc+~j5cJZOAzeNa=nP=56PhtzDsQ&<>FmE
zhEd(b;`3~(;VG{Id4<s7jIsBd2>AFU?j5Md!Gy(LAT|Z9f3`G;hAe~aZPomdl0z8>
z>;-zB)sFF(nv?GLY?Gi>K^*7bLUNQJkZIvCwfLWGFio+rMr9ZvAU@_8f`m&p-0@Yk
z?CWV}8gR+_$uqs3&HBU59l#nihJF&pf}nau@)-GR$C??CqS7@sO9sq8c5{;(1oP2K
zX&5sI*Z3}_4tV0-frE)I{f0<%_+)*_PiuW<EK#!ntl&4OUVKEidY*Q9VpCkhxeHdi
zi;uAHrzV%5v4qn$Be^VogBLKPIq`_~=_t?r+7SSvz{scjTz&gcEMC5)3ECZ13NG~M
zvabBJjy)#6fGFj%OG)e(Hj@4dWOG|7={UX=p(w69I>UV}$&lV5`#1bh!`PHCAMi{?
zaOcSq84f1nJ`$)FEeGDG=$}9Kc+F=1+VWS-CKDC8o>~6^liRsGYWmheL-v!@;&@Jn
z3-?Xa#fg?v`RD=!fo*@8Z?v!jK%#AlC0cZAUp!D>es_s1FG4Vbxc-TG6RGRuO1N^e
zL#HKf_%WE@Td2MLZp$NHBxTmmFC{}?Xt`h7Q~l6l)ANBQ4+>0M@nb>S?>C(?3k=Sg
zA6abd5kGXGKPYrHEZdHmuqtExJxBs2r5oM<8_cuZmM1~}J#7~DPV7s*uITN&nQ9=H
zeMAyU(T=Te5aJb|31U;W#i-JV*!~e`qY|5jEgQ%IUt>-j#I(EVHeKPT7HUl2+JVM0
zm-D^!_3FsPg0BStq5jNMrF^Y@9D&P~PFyDSv?KO~IU6dS5@&5dVTE9ETv!3s1TaY+
zSSj}}^3u1%f&a=wLS=s!r<EgYk`a&Y^~adh>H;4^z-xWvx@voG8#gkP_d4OI4tYMB
z4(W>U9HKb?Z>d0CB|h-#(bXMG6=wEy;d(Oyqxrq}^p-P0xli@(o{!bpSSRgpP-<M_
z#$?G|P1c@8mv^5$z84kSCX0kUmqXJ=Ho2Q;A|D|<$&dzrUk;L;dnngGo8d$(Pk8!P
zvUI|O+U4BpGZ=}wNIKlMQ;;4>Doa?#tvW^#V-|5K92ylW$u;<~(Gk#1cKJx9uhndF
zJiQhz?kg}qBMf6z#k{3rG2?jW2+^ZU(1{NLzFenb|Jz=}n|S7}>GVI~{U=wK!^d(H
zWYO9sE8MLs+fT<k+a)W9WP2?%F9z70ORBhF%c%D7=)T$L%~8`t*mWxbJ9Ez~)kVqU
z0@n!azNf+ezLwMtaXFBz3g^38W`tjjoPlRqy<nt;t@op?yz`Eb^qGfU7;R=oF8K3&
zY>nU*f`)w44K+_Dj5as^#a~|S;)R5BK0fX08=aNR8>!YT<1n|XEo5sq65E79IO_cy
zFlcdYX&p6R*c_XN!^#ywbfbChn-f7lXetJ}8gh6e;AG6PjT-k)s?N=|^1gGGow=y@
z8n2*;no;mbEDjB*=j4A*=eTQ$wfj)%&RLm)<ZeN2VRQ9`7kfb(SuNI^*r&22I@i1K
zqQ;`h4l>FS50chAz(Hjy>@>#K@~IIGbgh1WS{jtpgz*cQRgeHN@s`j9j^6k7C=_hj
zBi&Cdt=_qI<Pn}cP*5L+*H`~FW^b!EelpNZjVW{C{@Kt(Mf1eHF$!5_t=2$@IfS`M
zoRp7)8a@c>L_54mn<822(Kj8>6_9e(EKikwi2BG+DMmALe*(K{Q}fjSu8fE|DfByw
zG>L5G%AZNvouaqix`<7*&@iwv#C8(bSrPv;BVCgjUu51!Z{;%CbKVF_C8LkM5o2?7
z32{6d(NQbxJ$~bjG(M1*tddaEEt4asTW3I7!Y(+fbLYMIba|oZ(bUx?Y;82Z*L3M+
z$D-|Uvs9HhV6;D9t05AQY`&T)+7ywmUCNMgz$iZe6RWou?=<w@4yiH03`Y@F-&X*?
z!5Htk#4&VkxF};Z?p2f3*`bgXt6xrniEW_kQMotgH`9z8b{-K&4qG33`5UhVro%7r
z9^lS7)b)O7*c;PdEzG`o!+9Dva;BE8+GE8_BL9mvFbL`mMhq+u(jtEhGC~td;l9rv
zKdr!SQ<(n^&0QK0o66FK_~|ERf<kR=1OA5RoQd7Dm7%;KopGQdi@C^&F*2Mx0wj|D
z&xp=D#f=WUB{E;#u_Udn=+264%>3!;ZvLgUQvy|>7sH79Tule1<7}E=OXTS=@eYO&
zl0N<0A~O9<JJ1?Mt2>1C#q#gjRgJ#5ceW;|49V|7Xu0KB5~`#M)m;RqAW`$&sjbL1
zUZ5g>+WUBe{K&xg1^#WNw?&JXI7Yh@`A7)cjYE(QR5lN(Gqij2iKEde-ZK`iX=RTO
z;VMgdRyD&f*yYdEkIK}25>P!-32dr^L?Fc-rPp>f;?Nt-qv^H1AXE`Wi4gF<1%i-w
zGSeGpgk|TBoYkKc{IG*-ft?dn2Yy?U;j-GBTx&bX)2>+BHUlL8E2gioDjZIXhIDDm
zpx|jKB+z|^PGL}(fpY41qWY46CJWTvr_<8;aHLbcQ=+I!FaA7PT{#uZLddYvv1JFq
z>0dkh@ekzR=t@eE(Qzk$Ut>f7;6kSb6c`0VdH(D);&`^S&LyTyTi|uezo*n~KJTQh
zK0{&|s9b?Y`*JtO4Da%pBy?IP8V!p0Ucg}D%QA+uDr{i#dBNk818hSslA)|q++n6@
z7mTFWts}UsVIISx-v2?c1F%fjZo$*J8@ucgU$Y8X-NinFhWdPF8#*op<KN*9#5gIR
zF?zorsoPPeQ0Jzw<-{hiVO9pzWo^krttA`T2z6FUY|l1LSY749=J+sPuYva8Ryb(c
zekjbw4FYtq&Y?aC5{^{Riz%%AU>mA6A94>AZ$nIM(DmZ9SpX9Q@14--T?RZ}?}H;P
z7ayY*nB01VOw&r4-UQWexg)f1-~b?^f(<tCBH?OoE(0MHAfH)Y&pVP(T_Da}7AH|^
zF$ejm(bD|b4VXF0n*DLcfT5?1j91%lflDU%*@6W$d}2rs_aqmKmwBe3LmI^8<Fhrb
zw2#2mD!!pxk1F=l-taetBi_`sS&JAuR(*o^)68ux${xUb?PuTQ>job^Gs$L9rYqSS
ztfl1Glbxg1puexH$uB+{(UY-_Eg^moak%S|(vm%4^c#nKYdu5Zl#j_vEm%`tzSLi`
zIY<@VF<`zB{{IP?e;5|Cv5cx&fb3OV#*B=$HF+~G*PfO_rV`0vETiS&*be6QV~I2X
zI{_*a2210%o_#&t=oJmTKMSXFYjly?!{m8*n;FJ$;7d{jda!|V%IhKB^KI~~@v&CB
ziO#z<6v>ALYyM^An{}x_p{jq@7WQd>zx}ig4ynW28m;`8dx40N$$zl&{RAl+@)Mpm
zFbr8E^sH(YW=VEym^;4aBB-tq<5~Pwr>Ul(s2nCQfCe-T%Lu6x6Ma{KKb~yfdVjJQ
z!&DurAo5!hp?+H4>)^%Z+FPH!Zv+mhzS;M|YcH@L7WX<EFOR2|ot|g*2B|;Zj&mUv
zhsXeCP!7*6tifm_LUA*hMWxZ}a%}-MT_D(AaSQ1p>1nxz^}&F+9B_uB405GVH&5-q
zLx>+|io}yg%5l)!P;nRL+JWT+`**XnVlLcpA^2}=_#+(qWj6`*cgi0emoDEiirmH%
z?!?sB6x<XKWc5B1kUQM?{hiazI^#T5;Sm_QU`X3^Ng}bAaa*)bJ>a13j_zh(*h~vy
z5o8($flhs6&(h*#uZqTvDJk#hf4YOJwW7CAzie7-y4rldX|0eFdMeK|$YsD?&}%V5
zHHW`Hi-E$Ryim6-dMH<#1P#SI(hvj<H_o{kJyxOA+by*v{JF`)Dj$Ms9>1u**vFV&
zAg~0JxM|^G%01b&GMF`z<nd~ff11|(&&shC`0XeVbEqq+Bk5dUq5)L;2;WWFo54wN
z!$%rD_+LExPyrk6o8?6kpusPX!|B3SI^gGvyuB7d1Z3g86XH<BD~mx@K7V}aQt&YG
zm1gAl2y14@<k2A8DV=Y4<h<9_zE(n-XSDj%ib0JcfynPCU_#X%&KL>@mFX)nsL%xa
z6_Tu7J711@Qp<!knK*?{(RLPv0$Y!tVK1KMYeV1wrka}CqgY@IA5BSn!hw4~daa^d
z^4=DdreI~&<D~S#o?iG}%p_YihVnkfn4EiahRo<~FK;!BsYB@d^L9M)#>F`qAv21u
z0drmAazjE}sdQy}ATt!DQcV)Dir4W&+?c&J2va`D7I}d%9t(<CY&X`<^$z806B+;_
zpvCq^9Pf59MFyJQ%U{QlAvjy#k8~zy$$n#b5iHp<m=MoqPnr*W#!Rj9#mhCXb2X$h
z3q+AjNAPZa%5?G>5X_w#$0xAmXCZcvU5FJAtzPp(y?Yd1sS;q-Zg;PzLE!odSA4*G
z{6EvF&FsX-OVaBb&f+{a(sBYpHpoNQ<lMk{p&GGIL##C?q|XJ*e%}1w_K!THSFcI9
zfP$3$qk;u}BKE}Y)J}##dNU-aD#9qaTXEGy4VF+c?=bp+Ffpnedvpw5P>QVp{LFpK
zxel630emN4GK!X{TrG;1CiK0Q$R(*8cS^#>2G-N2JF^=bsK_OtygA8nCg<igSxcfQ
zs6AVbkhLl<8mzC!O&K0SuCjA4v9PJGmp-VXVYhFa)<HhheCLGuzB7`L_pRUTjM=I@
zVCRO7zI;MR68Lnv@7<H@d21T*DIvHEBkg-hw$;7!bqjONDuI6L(V?b@zih|5br9Ad
zyEh8@(P5ffnunkVYoA@d2*zI)Kahxka^;rRIh8)(zX2@uqH=r&SBagtGm^7Xxp3eJ
z|L60e11PMeu(6^q^XDSeg^E;**CB~h*Cf$J3v4_45nurr+|?YrfJ<#Ek?Ig6er^ga
z4B*cbd3I)x#*No9xv!qr!cye8NC!irRbD6eC}AJ7(j5Sxlk$>#-q-LMKBK<~<N(;e
zA5U%lk{B@Xua;oTYU+j?mCW*FW2QUi5aw4{JsYmpHm>+%2>7hh0V7-OCA7B?`k0rq
zUoZi<2#e95TAv{h%Hb5p(tJQas8u3+5b9hcPhV8Ig6D<pM7OHgzNKCln*=Q857AV!
zsxZ7ON3pt5d?rREf%AHZ4n1hfrUbZMAiZUZD^8_Ng77-)0psglSKEEpnp~!&2;Prm
zV!@>_ULLSWmO+S(OniO{ghiWl@3P{IIR^i6kUsKM_FiL8g%vVbIza7eam)Iy-HQY_
zMml|$MvH#J@9$|vX1~51T)CWk5U5o8X`+M`5&lgO%vbRk-t2-93N#4bfXMuidIB=i
zT|6kUQv4a)_c-pCkLxDGr@>P9>Wi8zsg~}R?xDO~lzOJRQzFp7ZP^KWczDa9W>3CR
z3t6^13m;NAd6Gc!&|F*r+@V`iCjh}~XCD4N?_;{=Q;bX8*VKA?7T;fkxfKyt)H5o~
zHB2v?{1JsgFjz%QB)zU9YIaP59dfY7rc40AvBFFtWYRFCroU$G-8fT%#~6X}E?@3P
zF^34=Sn4M9A#t4gPm(?}lu140MPeBib`aApq_<ZafBe@3x_VC&zKLMcgB<T8I|o1c
zMSx!Kc=KOPSa$RMFJ)y3N`Tv4W#3klg=jHT%yaxb-0;PRUB%}|O~Fj;#AiF+gKX{+
zYl+X!ClcGUSj^b=)M+);DxDrw=wf6<l)v*?9m>=ki9kvPl|qrrkMk5P_h4FJY3nE#
zp}%2_oUoAOo{`+|E|<?o&C18Du+O-o%;GQI=Y;TIqwz#1Vk)5XXZ=PF-O36DAeVeT
z`!2YAUooGb)TmVXu3y%ShT@d`w66#G@Nk+-e=Cx_I+Imr)<UEl)VJvxUFh+;U>7Fw
z?^f(yBQe};xQDjAsQoZN$22~=dpFPxjV%<9aZ#ap+`NDp2y?u5rw%Krxj^j{xki<a
zZp3`|%U=SaSQp$t5u5X!<Gm=vuF=_klol0VJ}rb81a3Jv8eRR2WtZA?kWq{aZ4jqU
zGU3lpNO574Nb9>r>Y|;0R(o7N#-2~xx^iT$(_Ny)m>RFYaf=_5O3T*3!<q%E5(WYt
z$?=x++{}`vc}-(5m;VZn`3fP5HW=vL|N2%EG**4uU#3a-p?ovHfk#Hnp5oY?w^Go6
z1vtLHAo82QRBRY#1_Xm&*P6S3I<tk|DD9E8RA{sCOSr$dciPiy=Kb+k>3!rVVcwI4
zuDGwQVv$CSTP!ILuA$#NHz%SYx7mBCyb$p9b1?sM`t#xC>zP9S<B(C774#eoPu^GS
zFMX6)z{)Xe_!fiZNMbb}6osoOIlEp|7nojVA@{gSh_AWgX9~G-oC7Y+m}wE{=AdPl
z`QFY>X%4h1`sNIi{cL}v;6BF)%6H*T8_Tol+L1<UiCj~89*Yz)pBK!x4K!<77@~3S
z1*`}-K}6r9ZozYHaS7a6#m!qs$C-H#B_R5!dYkHVebxfMvP_5WQTL#;RS^8zirVu?
z&pDh=H|;e-96x<H+X<Ea@<{5UKN7Tax!Au52_ckCYThrgX)`10tBM}vp<rjo75D1T
z6RHNgV#_w+Kpc}Lg!tAd4sPXdCqAudAF$ww`tTF=UG-oP1soI**k>+<?wP8<&wkV-
zeSfS#)p>%&fHh~S6^)kPmUfy5;j?%{`Zmnf;Q0famzN7h_yw7^e5eeXbXSE%WZJxE
z+yZ}r+=B&w6cz$3^~#I~2-<#(8uhlog$l3Y8SfFZ2vhC$Yid>#lQ+YEiBuPA;sCCN
z3j;z=To#_(#9iA4?X6|^XAm$1GFnW68|v3p*1<RP^`A|;tAER95J5C+hGl6IQ&9zL
zu&DW(yZap>E*FnvxU{Bho_UN>OiUQx8hBFQkD=&8HOZwRUqPlFr=(XnJkW~whXZEa
zkLyASF{hVR+!&EGfmZKuS{$blb=Q?0?+2bn7^mqf0z1=Z270%8#iMj@q~|u5y;Q<>
z+NYDsd_uE$uu;F~rK|Uo=19?8>pX(dF!OJGZ8AncI5z-Ejem%_(_{fQZIDk1VbuC1
zWd}$m;8eOrN-J)|LdDz}z1`wcfC5#vhH8ZtA+0}V6O-_yiep@}auryu!rfym-sRD6
zV+@U!#=bB;mUL-`qQ`a{!4(J@GgkD)$Lo7eY%C4U%P7ILQ7U^Lj5bNDjGb;9KMM}x
z!*$5lXskzhZ#5gY!3owm{1+y*H&>}CYccHmlXz-nU6l->!+jI4ql=B7Cz0n0fPY5T
zieDWZI)4tGtPbeyznH~md|Dh!JE5EqXmAOJP^2`DyBqR`5sc}?AER^$!d!sruVxYz
zXu)E15rHp1L0($*T3T8Avt8gn^7T+&S9YygN}N@*qRZ0WtlmGfdA$?#LbGPD+nZUo
zsn_>fGc`4vQvzZP<+(~3xvzPoxB16R<u7Yt)-S!e@o0}<Slf#|&+SsFXdI@UB!<F;
z-h_JoKnj%oVq#mZfkD=l|10~(Am=<}dC;i#IRy<8vveY=uk4fm2e<Inz`;c3rY_4J
zq5PE&jI+wfHYqF<0$9jW(xWT#P|(JuGw{-<v<-tdz9f!?5?owB0bB~WPGB^b3e82>
z4AZRF2NeJY-h1dax>smYcqO*(Wy4h2`rdpX2$VX_x+K)u^BZm*J(#FdGG)u?N&l<k
z`qG5s4M+q3Fs)AJBiXZu)dWY$vdsTqtN>PUbMmL6X&aByLS7ETHeC(D*4B;_JE$TX
zIUHsrzW<6_$YPTeyu)?yXua9t{E)q&*yDN<{kK!PbpNch;Wb1<EmyQcG28She08kB
zrjD9W%V?bvW%24elVNXR0t2RKXb%9c0oyWbsB2bT{J*M>>Zu63%=v9JTj=%FOt7EV
zJl_Ch1iu9+hq1A|Ib)m2ls%Dj_9=$m%)(KaM^Kr~S(YhiGS7yqsG){QJobIrYmYNB
z=x*1|PBObxmvU4_-^w8QXMt;%GPpb3F>Tp{Uk-5qA-A1{zTp(JQ6l^hvt5+(R+T56
zXztu!R*1xE9Sw1oUX836Kd(&TBN3X=;Xpd?$Al-YQcV0drs;Veq~`o7x<ofVF>EcW
zs1p<vYs+5`&hj4mPFPXDij24?A$^w|CP9E11tA}}S+Tw!>x|pD6kByEZo%frtxJqx
zTXdF1y$Sl<>Rxf4V2PxxvI3@U;xRrYsM{Q#3oc?0`Q67ub$c%9F-*vI;N{_4F7f%R
zu&eSAq3RREcsyQ}^~~Lqne}wpTNPjRMdPK58P}s%gBB(HhV@MvncdD|4xlN1oQhv#
z-vDu}QC9~NdyPKE@Fph`G>VUWMb7+(QuM?pq_diG4$2Ka)H;j>T!S~JSD1<nQQTch
zS;57V3W9dJK|j0~k<=Ea4<HqUF~a#txqm&qg`v~8ZFFL@U^A5~s4uwCFYGAho)@Jg
zpk?q;ImbY|2_HDm=XOmsu}@`tErB#ik6uC9N2R7FKagDBYY#FOswhPqv>~%)73!7z
zb|4b0xRE`0v=H}3xWc@Pcy6C#bp~_sL*i6L@{xo7VMn>Yl<}w3-df^=*#a$z{vPzM
zcqRe1gxwrPDz!MMIGBFo2@@{Yu34XdNMMa(b_^ip#|-S{!S}&Z+rkFV`;V}ozb?US
zsU?`cvG-#ib*=JmSo}X=l{A7qQ)zsoQVbdI`kSMd=DKG|0I+E?Fc?8@&0a|~BsOLf
zAJk(wNt8c!DR_4{g7yp;!AS)Woy3~6ZQU1%XKsQyPy%di6Dv*YV`at37CN^d09qt*
z!dqCwV0paf`8wVR>AAe*K*wd0-O%s6>fn%OT0E&G`beHi_@?^4I7pE`#Pa9dKiB9C
zJ(GbklZKOIqlRAUucQXJHJp&*eDmi}Nx@drK+1{NyUsPZP;f&;u9`?&zsxU|nt=&g
zY3PLyG}LHIL1<b=id*7@2V4Se`Wg~8bC|bDY11UfjXStI@a6(=Q1t5&zgvheRww8Q
zs?Pdvj9Pg#*nt$>w1e_n*wNI41kwjzN!=My(3E5eb&_JlO&)Ai#)m=)_P;Owb%>HO
z2Z6AovQ-iuUiD$uohP#ai=-VJ;R1JXKin=eHYgeB7oV*c0>mW!biX|p7GB=&b~*)R
zp47y@5}s~_2ZEU->qBP}WZ9j3eKEW|oTO_O63bQo@f|D-O^(qvLQc4cVeI^}6I?Vv
zX2wVCRjN<d7Z9aESdECKA<S1P@!yugUt2HvVkZrVJQZmEnzd(oBSt8Qul-YWq4K;9
zWP}D3Jnf*X%t;Tg*?0uRATBp*r*qK)e*rUGC20Hei4s#<uO{SDWoRjq?J-qL#=<Ra
zb8p7T%@S`9msU37S%t`TK0&HZbP5ksK#D!84B$v=Dq>P0JDB1<3HVYi!M!Z?mD;e5
z%`Sx;2B#8i{fk^p!p|@bHtbQip_G}X08VPw{$4ZFf^;`?!2|3c!W<(703)-xOJt_U
zK-Y(=eIue-Z0Pq|a0^*Sva+M4VhrOE60#_!SE<SrlH(YE0~>G<fUeW1ac17C^%}7(
zPQCd2gN^&rq{mxLR`h~0_vAaVM;K0w$J8SwG#6`o1HE`)iw2r1`S@VrDAkRV@624*
zM)Rbm?^f>rjxOe}rABczJ(URZ2J_{jKiSZ;n-TCvSOX~{tm-3N;DQNvCvVP(3f=<j
zcIN06`>-9b2bA|~L>imClt<08nfIT+1>|Epg1NdNSbqxe$KnbEzRWikiVhHlgooZ{
zAOZ<<<o_cY-l0V0uuePNlH(liGhuO(=koKSm8>dHT3}>$;_gfCm3sJ}JcYE;!5Z2p
z;ezfjT`>Q`lV_>z=p2?5W_8rMSF~l6Qv<ahYS$(S%m8{>GtVF~-RxJb_ypS_dexhq
zn20_|;WI=>mLbE>XnW+NMgKE1AKIj4)h}LNqT|P0{nv`%dLQVeW28NoIsm2<AbhTR
z3NLy`muXL9m9M-ukUTBIwTE8Yor(ASvEceS8e;wrJk&>L7;>tGNAl73C2q_E-%?I*
zmNUn3liL4Svyb_DsSPmGHrq<EGv<(CP$&ARm<T!=*QStNla2xD4##Rfh@i<=y{N~1
z9*=n))XUqTY+iGSDS8$(KKqeew^GwGtE$!Vs_xJ4tNhdQ+Qb)Ez8N@)8$KPFV9IGg
z=*b&Ji{uMiOf#3qAEC-+0+WE~oQu-+jcqCUZ-T8AehpE7;L{%qHmg3LN8dIOV$V<g
zGRzQ!V%k^eG-NXaPklG9oi^abE0!o_%aBWg+$cxP!#tJJQwX=oH?qd*cJ4Wl9@+$F
zMZ-mlXs$l2t9ziuR{fkjp3w^Qyno1EWc&u~8Umo(v(>uoyhyC^^?uNqT*G6r3n-vR
zOHTOdm;e8(AGi3{Js%VmRn;Jet8Uu;b+xVbg^^wHvPL2=DdJRzqe}}((C?HdfEIKM
z+%xF~wSF2$hvWAY*Tt5%D^q$i2?EU}QW%5A)LtMSgT4Ckm8DHz=pU)USJ{a`GO8fp
zqHPwjT(Th_^~LvGbb*9A-DlCa*_I)(lGU7Q6Ja(`cWJqjF(iGCG_i&?yqvPSs@W0`
zj7}E;nY*70mPxJx+Weswm8c>H4KWxyD^Px%qKY?syADTM$KfZ;@Rf-!tBX)<JQT`?
z!o8id*pv<)&bT<Gf^mzuZXGIPbsQpch%EDTXo$o+o36l8=kY?Tfb7R39A^J8HQk|g
z-4KRUUWf0Z6(=~tXofDx+6rFxuZ~zMBd)hysLtvF(FnJ}S|?R8Z3Z3*0&l7CY(@S}
zA)%LX4^xJcBG@^&yiTm`VMVa=e5z1waQ4#Ot`~ohsfseAcdVjBN!KMm?yKsNNY$o{
zY-*CZLPNl%j-M>^CdVCE@)-O^)uW2Fqc)R71#d_uUvdbCol~JjFD}$o=w_z*0q%n)
z{X3DlDozx@MFj=uHBeX1i8H7M;ASa$<`RfwtDbk3H5!eWm<hg8Sf=|B-tsO1O&M~G
z2yHbRX*FPbLHZOY>xnZzOT{-En_reK1v%v?4@6fD!X_2pw|nYDeogG}XGxa7*%q8Y
zc~FC0!@eP%kMq@bM@TwrRWSBiWIRf{IVg1X|CvUmdENWKIlJi_9@0Y-o{3|Sc@Fcz
zJ+<T3A^ERYT+S%=N45Ty_$}9s_L%Aa*;b4cdpO!NdwzM!_Z==%>&Hz^Q4bB&-PdBS
zLmvS{%-YGSdJU0kc%FH|zd;mQ7+<`q^N1BLACI0W{)*nZ-lDDqd?WXKmBSVI19TFk
z3=xy7)ZMsf;k6vFzY+kM(zo$j0+p7##_@83mwb58#83k(@qG3x9c+0+22$>He}{Tw
z{jyQUt*W6Bmh~f-*?{?Efa;{B;uQ&SSZjrHkd!^KGtuNA)~svArqDZ|uSzIm?yO2o
z;ub>$Y}uX{|41zVZfvM*toh4x?Zn7n58jY+mf3`!w+&qbzmnxGwIRv*yv6!h;WMC-
ziTUbir3;+Hm=c8a9V*P!>N7ggt4w_;ia)Eh!u}8u@_}Sh--a`rvqIT{xF>LA%3Ex6
z5C?#;e*-tz6z$tNltBb_{a2_4O52L`vF0RBp{CabU+$Bb^Xqk_0o=j)C<rp@o{3Cq
zNxNsaWYPaV>U>g1DScOfYeh6yrLIt1l%Wyw6#Lf4ZT~NQ79x^1%+?{HZtMW&v>I$-
zcX_$y7Tdk?OGmjyV`OmM)s!Y#m0H7d0SHgi0FzB#vDtO$H$Xi6nGu8j$lX$}CoZe~
zfX#X%4oIu1>EJYKG~dQQkfGMLlMDIg02FcOB_hB5mJtEP;*%fmijw^XWiHBp=Cc9=
zKbh7mBy^ijCNbR)I;xPBlRI>l!T3K2m2qCNut^7bWAuM6y@}iY`t%yO=tOw5b5{4g
zlrtE2U3-0j-!f<9JoR@0*3goECeQA=Hd_x^Rgw4n5J{~>qEO2P$5pLPDACW^#QK|&
z=U31?ti4#4)Yt!QV%C&Ti+%D#>N(X8iC}>Cj@q0zhV1B{#BR6E?DM>Nj5wH;7vJ?X
zJyaT5;+RT#svYPWzlsZahail4Bbg>MO&FZl`5l@!e8oF>iOxmPb25AXwUP!@Q57S^
zFg6t*XeXkbb5R7OF^JXODrs}^I-uv}&FWtO##MekD^6!3Y)U@U*KI0}+=E=49v)8l
zpsXvJ>T(q~TzN=+>F18<&ZV~mO3wSzDru(0m};EERST@(Q@>kef=cz;X5MIarw^<Z
z<GK}|H;+)*=f6`=T$!<$S_6jy^LutZ%1H&EJXRRLR*PE+O^bTF)p+Qx;(pS@UL4WL
zBxdj+y<3Grb=*RTTCHYQsX>`ARWj%)MUoAg-v>abU1tau0YpqD^?M2v{5osOz|i{a
zs{|RfB7Bgp#?R18`iVYfm3I<H?G(K}&?F6q^Vwz^W#@$b?q5iNr?{q)(pz3rhMm8H
zD~OVp0O-G)E)N>Cfqebz%pkt@wTfo)ht~U#Ek**~4Qat8Iu|)A-?H9=eBfEa$V|r^
zF*3@#6Og?~Ceb|LgTN!Sy3~<dmVr=-lBwpFVo6%G-pJ@ep%-5}OwmXNW1QvJI*#O>
z>OCcAbME*8e^4`XNQquyT->yRIgJ<vJBicwkG^{3q{S(y=Yk*jQI!YX|8Ea!=u<Ql
zmZhZ)o9ENs7AXG471huoa(op4OYWz(nQfbCtPEArd{sjC6;N7pEarO5Hm|*81>Jyu
zU29u0-E!ov1T~=&W>8-lf;vXWe~^?2W7n;X07uXkzeNs%T7Eo3lr7q8jEAmQKSrq_
zMH8-X%6Mp;YOO@U&!rK^G7g=Y4A2JY9m;ONX=U+^*Yyirz@{Rdz6h97ap55$A2eFE
z9Zve)R`_(lST#-)AU{@^TW|pXKLEf2w6tjK*sX0oMy2R*hx%llydYHk$>UYmT{WV-
zge*7L84l9lHN(|ial#tXXS63I)93Ch=P6(Zb=AVKt_*2_f5cd!G5`D+>i+ok(v7O<
zvya*?#C50MV+)EacA|cqkCG0uN$GNYLQA=dt6eT%2${{pLP*}LTL>df1ywdDFZ2?%
zZ#{jE2=_Lt(!e7lN>6KF6M6Ah!6}46%iG8TbtUt7xEr=up9m2-b?QI1Pj?qLwH)Gx
z)FftA7mUJ?M3UnhLzcw(Q6eBVdHWz3^aicL_$L6g@2deLea`el?x!@izpnXtGT9d6
zvQXl8R)xB0Ujt%Mb~kWdJ<zq=BS8vin`iHz<$mZIzQ>Z!K^U1rdTDd!(}{kU4z@<$
z(Ap*CbU%0)@mH|$+|kXar4mxpy2G+LDtUD?jhRA&enG}237bxet->uafw59*J&yjE
z4t$Wp9%htp8HXG*Xr_<wJ02?2J6zTL!va!5a%WP9Y7XOT=*N=Qf4~Q`za?S0QxO0e
z6tC2Q*yqHdjMT+G!ANuaViH8E7}SEv5eo#w*2=RrW9UtC5<CF+_I+TlP{n3n8wFqk
zfmwiN3LJV{xB=?jA8gyCw!8G_%%dl6Jj$%$a4OoqX$^Q_hq|D1)K$7y!ZUc#*;SO`
ztd5E}$Db~(Ta|d`w^ay$ZSi_u+h+JgIm=*V<y&=b{r&;Kos}#oUA|voHxP_s1pS5*
zV`2reV+aDkmJ(3cRAF|F=Ku`{tn|Dt$m>Ccl8st0vB&K#P5$uGx13DR2S1X2o_Uec
zn(B<`yz9Z)<!HS?J=&wVcy8)pL!)y9Uu>mG&QTr!T@mDsRXniLMndgvr|(@1f*58M
z!d$EmJ8}<CCgZzcgEWgs08dn7_4(7t$mz)FxwxRX5@GFCOrX0GZgxF)c`3p8Sik4=
z_%raMoJ&{_)n8C0d+mfME%2KGxYTkcfJb<*?_dcXi!m_IJ=Pxr5SoP{*eebnncA-z
zyCE3RSu5HQdQ<+AKkdnC%VcVcYR0HO3jIC@R454pPb3{dM5;RH^`fy6_2Ziwi!z*3
z7WAGqFf6CJ^h{k<wDq}FDLjkEffW-i;$Q!iK)ru`81qUE)D(<-oWlwCr~t#BylN*C
z(fRB4-3w*nvv>#_mov?yB#B)#HJMjYTnJ^fHqP>KRyvwX;B1E=hnr2KL1@Y?yde(2
z0_N=V)RzjOF1090_sfooUD?}W;-v{AgFJ>)9)9!#(;ql`yVFaiBQKG_KTL6nU_s2@
z24gy>*Zn+8F2+~;p!Iy#e<?&aHQ$-#;{)PzS<;>m-b0Q?MKRIY*O8FOi9U>r@fv|F
z*|7NM@mM0<9H%oW)9aZ@6J&VW%k?dT`xhrHI;E)O(VVcFQ8kLIM<EsFICHbtM!oZc
zqW)-tDJC}NoF9nkPRU%kzMLail(K&DC+X<+_NQ=7yuFD_3uvY`K}hsmZki{ElVGhq
z{IGVLE5A=<pofks=f8KpPN4T5%4jfKO5t8)XcFodtkI-g03Ys^fJ%tu*zQUQ8Kn7b
zgODPwG_g`Is9I=}R&OPPIQG|*is2KOynMGkAN|@Q&5lLE1U@SK#3inv!Bd35p|hDg
zP%se=KJB~TX(S_rlt(%@3geE1B2yez+Vh2(VvjPs$7J;toIokN<aO|?VjxEv#rClc
z28p|Kz)3Qcg{rSvTI9(e&^8IEVDw60RV0n;TbVa9ECI)c_ecTDZ_&3zn_>H+W3kot
zYJdWV0h^}`hT31g@Z9iquMX1uzwwh3La4ySI#4oAX;QjeeXkW3si+q|QDZLA+=ZDs
z(D#bDn)N&u3e?Rs+DD8`OSB$X#BK25=5eyt^O&S@WZ%qAp`BO->C6CL7AKpyU*h4T
zS}anUi{}#aASKmwGAE(1HCe?C3z{}+pfk_=*1fk9)6lLMtzKoMcMYJkG%Rv!6KKGO
z7_IPrHsJIirfn2k?89_hV>qC!kV#z!hSCp)mcUgLhq_%%85xt~IWQfh|DdRhR6944
zV3g=^<4Z4A2B&Vw*bI?5l*^Xf$Q5^-KwM=Np?h^A@26*^mVLOD=RW8p%}{T}X1Z1q
z-r*J8EpgF9Q_nUedwn(?7tH~sC~3^hlJXD-{23*rfWnOD-ZmQn2Exsk+-9=mPf2wK
z-%K9`HYy`{|5v`YHg1F3b|g`fdq`=BE|6i<aNU}2e#QzvbT@&oy(0AvM^!`Fy<=6u
z^&z!0C>)JpTK72mzF7~XiW8x#4yc5@dBCtd09FnL<t87~MgFM&uA`YtK5^~gvIQyh
zpZVB%50=HBvl6#0K5|?E;()bH_JcTXG=kM^KLvA$8_AD~`#Ld#5(?Kq<`TUpKWD1K
zN80wl3>ruVo<+9efWwPc1tos#Y%48SnU&bfW3wB3qM6JwZ`x<~9l4Ya!&yyKN<(iS
z8p7IsnLs)in<kQfvw?qu88S7E&(NEhkRG5;$zwJ1mB6i2CIeiu0?KXo3o|~IDcKzB
zbdr$7?~sNN>fMTrG+D+&kKJ!P*|w<~j`D{$KvgD)EeMKj65)lLj%ST`(q@a8%7X~3
zP=QYMHrcSUH=Yt`14z{e1e~pC?z8X3i(VwI_&TLnld}^%z16UtOV-E9=0aewwF2Q$
zmv9$#VcKSIhWt?YzrX5eU!8C&Nt2PYVv^zi*-4oOy1vx11^UIcQ*AO0I3$ln`zm5Q
z5*;mMX4TG<-mPNpYxShP=W7<lzJjdwAB@5&6+^07p`?7-ORL-^pU`Yi(!rgrY!Y$2
z1YHI|a5G7wwr--KuuajBwFzzqZCp-^QSNJ)VMaB3IP>2{R4u+8cIJJ|GA{=UNKNRA
zq6~OMCa!pN*lf0!$BYca6UnMFqM}bNm-Wf$SQZ7|kJh}i4l)WK!{^Wpl6fg=09RY>
zqU*ftd>~gg_jm5sft}IkB+=6awnycgy;Z|TK+=<XL6up{)Gm7J9nFHUKufb|x#sa8
zg6B6KF0cH-W_dI8QAIW6__KI`tcOI0pt|dYsgU^XHw%6R%Hn9J@B8m*gh+(;V#AT}
ziUrS=&2zn^@sSR#<FX4Agjn$3FaB2gs`-vI9&{ecu#;4dz6uK&Vd|k*7N!lB#Dn8}
zC|mgT4E&W9bl^(hh_Zz|E43P8M3C&bSPX~NLf`pp7QKS@NM1Fxihd#Sz1EpI3DUU}
zZb>pobl*p1&EiGGgSnWm=0I`G_)Xy&#rS0YKxc>{Fn^H??e*<ebR^2KEub?Q0l8dt
zXgp#f7||aG4^0nE1M`5KrZVSDSLIBKtG()1f)0&Hn2b%qC=29%d}SDVt9LvZio$zw
zwoy`kp$us3;%)M+6JnFlP$8J2Tclv+rxqNpzhWlZAfeDyN<cl!mk^;86_-I|2{Vf!
z=Q6Ie_l{elDQOaR?hPJ?=EJY9ZbvzwJt3OnLa=g!=@**K-Y}TVyx`<xa<VB<+|sHZ
z*#Pz#Ltjt#Y@u=Z(9LR{;^JCN4?f{fmY#YoI}^+f&b+e{CG)PaVPS8*+W4;~Iq<6<
z7VssE{eMHHZ)FB`3k-Z*5<)LmlrKBg5J(pdNd<FW3j#kV3CJ5>C_UDaaBw1uC;`=h
z<39rr$`?~8K*cRlC$=A%iTdBw&+9~Ant?0DOlg~t>V2;PEa(YMy>S(qxlnnLJw(}M
z!R>-6Si?x$+{uf|ex->U4{@AlKo<70RgwEg;Ru{7W0NPP(XaaR(4wLt^XndI`hjT}
z!N`E6e0+sHAZBniSDR1zMQi37V<C(wAuFNc0dW?=Af_<fuJf{ZMg82HATrLN0~Avv
zbCW6zb#KEx?(yLPhe-VSb?PX%t?1hQ2Yt!_#`nz=_qjzmA!9V%K&Nh08=7C5HDvU8
zBaJ2|z5<E@VeueaE{U^=;u<eOJ^Fmz1k^**V*vNW4`f2x!>#Jza8(R@nBCyCrfZ}5
zIzYg_Ii3qbS{>q?Y6l2|<RPf}ZWSzJjH21ZlzS7ug{CA|qTQFU%TWUd+*ZxzGda=+
zMmZwUmy1eCRTak1Go5uZRnraarf{hVLQD;QcbF-E=}-!bS4E4JM2J)A_5J5h==cYL
zJkC1Eivbv8t>ZILWaW1_=W6u+z50r0yeY@@^}&@#Bk0}ehBWvOlnDA%n)vs_BA`q#
zJEQcZUOY?Puk7NXm^pD4oDoZf?R{Z-lIb5pj}Kn(T{@@i(Qor&|9KY1ZIeh<u8Cme
zn^gA6tNPQLv&<uwH)^PPr50OvV~R?6btYvWQ}nYyUMthpf$nL7X=8>F;V?7(*mBU7
zRwhnExw~=t_qS$s{or!$lQY)Ur05xMIM|tFof$$&UsRqlZ!Co;yh4_Dkl@+~z!DJB
zeSqI#=6X~uI<1zonIP#in|vvqt=cP&In2(CAK7oy5aMynEyE`L6l`o_LS~Uppq7BC
z9+AlTfP_*Iru_|u7X(UI8+khxqP6k3<A+&o^ocqOXr`c6dW(*cIQmEHay!YJ$G-IA
z7gK!VLXHG~7<cK}WzRP0*SYYGtcM996eo_Gd-83Dk7EE0bwXl6YDu$fT*FfT3Cx!<
z8)*4H&-m1JyFIWmMQ!EG13(wjfLkKv`7!o2KB$}|+y~P$Gl(9ugjae^)DARb?heB*
z|411DM~}<c8RZayas&s2dKc6u#7b_vZ1kNd>Rf`)jsp!u(hNe|O_42l!e$Z|PPRcI
za=e<cRK>-T^BANxv~#;cnZ666vvLR<JtrrxZ?6~9Z?Zi)e{yOY@?&CrLZ9YL7mvq&
z$Ef5i#-M0b+rTu+;{_4kcP_&}<4>_ROXgJqkjHA$*>yC>9N^{FO?=!BcQZ8yO-dT3
zRcBy{XR;8>)IrZX+z?ha30xNuz#q}L{O<JKO#?r#bAyhkJ4^bU!U+8$)X6F8Pr4P&
zO1}HGGcF!(zm5T~h3a6zP7ljHC>ADf(76jaLuX$gzdksG8Xq#68UYCwj%hv-r6>X_
z9}~Bz#3`^QV{3aMwwjMfp#A-(7FDCd8+`RcTg4<egcO`TJBw~$F$hO7evI;d7L0P3
zjMbnhtsI|Z`m$6$N=hihrx8LHZnAQ3jPtu6hb`!SL?37XI~l$P6$M?7(!k0ZNJ;U6
zk}72AAFsO@Gw;owMR&13k=sei{>rxraF6V+bH5`I?NA|QU{}P=gbrsA6JBq^fn-v7
zHqg@Eof0Ikk^107F&1Y3yAyD>VGoN{0?2NN*N&Iyon>Q@)c0zA5w%Y#)~p=?k|+$K
zEAU`=kZIthbDD1?wCor&RP#bIV;4rQcPy_bvLQ-Ql?4NlYX}EQ`a}~I`3E1|t-|1+
z<=Rh-$80_))$w3@L)Zy;>9yu<x21$q53037_$X|Cz<oyBdzAO#(wq$81jPf;<u~o^
z+<l;XDWK7eWdwDvJF8^WD@sri^ko6OL@`&+GV49f6ZTrFh};|lx=vwPk8brAAl^&Q
zwZ|G%R!6CU!Xa4JA7yp~F`X`I^=b%+M}IJd`Vwb7kG4(@hvjLx9Gu>Vb@rdRKs?P8
zzK7|MoaPP*Ky|W&>+qs6%n^2sc8z%HP?+;)w>~H?rX*Uo{72Z}Bxx9SQ_XIr%i`1<
zUAA}<xXW34xugwmvHp3WNXEK4;d99;VIQW$)QI@<gejEADW<(Ovp`0qujX<-N3skP
zXs&-ILcR6fkyKIAl6Gy7Y=%$RlhHNiRiZP$3lPE^;@MbHc#wE`((FfAKUY3n<9G-|
z7g7y>*FBnS1w3e~8XwlaPa#|!zJwE_!f%|xn+!t0SSz5!kDnK)v4TpG0LrCm8p=bX
z&9Wp}oGwT7PkHqOZJx`sOSXKKe(T{VwB=^&S18#2ITODH=Ty@M1lFm6y=7GIc%t}X
zk8Ouia6CGbcJfjBoj}#awL?GGZ?2S)rod%x{s}8_p990Np%waYZg?$>#JI$n#i(DM
zX~jx>p=N@t_p2e)<{)>KGM`R_`^qwn;v$u<U25{yXSaB4oIF#d_(FF3MGwaX0F<<T
zZ^5S4--GRche(7J?Wn!816W3G+Mzy3uOb=eh&`43zuprf!fA6FsZk{1xhHbZzcWqP
zZJ}FL6Y~Q`vKrQ(1JRC(tY9~gj*6epuCNkl3DBrsNLfyruc^eSv1=&yEp;KRGj6;f
z_TQ84bO1GO7C8?j@CPhSuBG!M=PAS!SAX~fqBH?Ii&ecwTV1XqMKLj1*XJ9=*{*Um
zrVb(up&5?eqGSZ2t1}E9ltaW*R*D(Ev=VVYy7NC!a+KRzwYveckTw!(awK(~ENEM~
zO)D!(W$cXJ)Cdd<H{d4y3%RON4)w<awPb{-iXW9wEcu@HHUE}!zxMny<l0zZO%=ET
z85GRYOhUV>6<KF)$udeVb%E>6#gWfjko(sVu2M57!7$?5lPXJS7rc0h2S_<iwJEjK
z`_CfPnm+Xl%=L{|Brb$pmywjq>|Dzqg`2udKZaZcURMR<zm-ic)W460^YGdG8L-K5
zvcF4-y0q@jqoickJm#!MN!PJ``56`dSz|cLL;CS5sn}#FY?b+Cy%3Dxvfh#x*k|Lz
zZWplwlxSo#EtaGADPV?%u`4~9qysQa&*zH}N(%V1FEu)x3MW99#>LwT4>Meiqo$i3
z;;*D=c;x-)<bD)kQ%6KVIt>TACDoMv!B39uV@Dp7O<VJlWmLJ0_BWy>9y)<&D;|Ar
z6PY2xAm^B}_?Z6X#sZDVkYj4+B(_cS%$}&AY?K0&ee%aeFS#-8bpMZisR@fSlW})Q
zvM4fLUA98Ux+bRr_m&KyFiyuqk%7mf1fwv1K}!UtJ)37uh1Q_$3WPObuo>kx3OVQ*
zS61_bGQ}}~R*xH6+mYL!X&CEt+3PWEtg~PR3LVi%iJp0fHniFpVTxHBA92j7T&!q>
zcSfV!HD*=Gq(RUGXCSOlY!DyIjH^$rww%0W8i-#{%oi(w4pSnuqy{eOIKasP&4;H!
zYu?hyJOV*=)y;NP<VK4!%JKX)_Ch}34;Y!2YNMY#&DWtg5Xi!#3(qMKF1ZhK*_R{*
zT%p#ZypcWRli_2UKQsJp7_v;6Ts1#TP#v`VCX!%|yXcG{j3R>39Rr(3jYho|1_=_!
zrk}UE-W2s1QW7F0;DKjLb`sM<ohl!2C(@74J3pERtldxPj?)O{?2NNiJ|rS4u)yB@
zT;n!>1b%p6gX+c>MK8NGf|fin*o_0B{?s>D{(%0wfpOZd-!bg~y0NE{8#Eb0WiWD(
z{nuzenHW#tMxXKZAB&sMj8@9EP|i83lN?iQe5bK<SfblW6!$pPnyUNXoWX07BjMY~
zj(xL)RD+%FjJ1DrLW&tY)(`7CL`#pDO_e<K=7L7VROn6K-E5lW0=4pZHm@tiJ+D%3
z$RMU#j=?a&`({8@3Jw4Z%Mr*e<h$dj2Af&TTX!K`h?Vk!c%DcHG!k}zCYB~seLe4B
zrnDb{QW@X~ZGIo17N6(q<Xa2=iR6OiHaa3C62<6J9$P9_@r`8J2&xcd5w&H;=Z<>m
zCCqkgL|+&3(AvB0CALD^_Ert;`~sf%=}&ZJ1;=O{MXuH;Mu#eT;Ip&=)tjxyYIVgu
z-_u7=vK~3OG0ixB>sFo=p2v0FYDjJIZKk!(wJW6C=~%R4mawhB@Pp$4rnkesYlG9d
z#wHT30!^EF?G*MXl0XNc;DsWq(!?A)%3L8@PWN!}_k}QK!(gA6T?el4xgh$ccw*5w
zcV9x77p7rR&159%2q;{Qv&s>G#9Plwwe<P=mkH%Ba>k335e2HUtpRkY=DH;rOAE7t
zbcd%G8~^_UYneAxvy5?dQi<zdKbiK5?0y)N_lP=%Dz!-L3Ivu4WUuzVSJyLH&LVru
zEr#rrn5-89Gom7%QguuG!PDshmp%i_=#rLXmPT}T^Wuzqtg{=FeE8Gl6G1_!Fj|g2
zDjA?8jpyMuV_UDUzX7HRXwzd<!1hJ{lq`Kb^O9||Igc@dG*9@qTob65ls2ODO5ipM
z)>6eT`l@2!l$8GML~(}l-b|gXpvy+}f=5<Jn`)tnAX(xUi^cZ(HQh&lKF{!mvQU<N
z)H)(VfN1_f$f4cOz)CPo@26_6SCib4e+D5SO5T0U1qT4dfp$ad)Xgd{R~bug3Pmrd
z%?_G>@eV6iFS6T$27-{Oo!K8kai0cz_CW!FQC}jTYzWSe;v<5HaR=GbrFJGqm8<p4
z3?pgA=rE%h8n&Q(%|<`ezK<5C%p?{^-R{;ZkCPjPw1k;JT;TT$YPzi<w7J7`m|OJI
zR^H}V^fu7wAhu<LGT|5|aWQdht8Raq#=1<k<&xEqf)PocVx-DrB*IOrC)VtuJetAE
zLZmW9`i&eUZ-F11@_<dWIz^zS{7YRA1e|ZX#d!tjU*7hzZ~)Xki0BY&&jdXZVKGI~
zGLz((jl1YaChA#{R<ix%03$N-h$Qr(Nx;@B6E$wfmiou3%kLC~j>+d-)lt+#Q?juu
zWdMy5m57H)D}a0i81P=zzoAfCeudGr;G?O@XyNYCGQL%ejUq&8J8^`5oUAZpQ@tVc
zMrO2w8@7(E(79Out1fl+MboWYZqKIru`3#G3dXP^tRmWRiUoyKGzK>r6PiSCvZ(HN
z$wfq`$Bo{aEtBPFjW*|NHvx>_)rstw%9(UzIaP#I2_sC+?UjfSlZr-G_%=Xu@-uhk
z`qlU?#MngT4@zl89089)nvpWItk^$ahR&_JCXhtFj}Nmo)0*VXTyCYhjTpi3ZSmn#
zb)_I9<_bv;%$*yU)a(0_b+R0!JIGY&=ja7NO)nyjbn($*f%0!ES+->z#iwj$N#rJ4
z4<zZB1mn386G3(QP`EeU8CRd@!ybcz0~8&B5A_xr2SF-!#1Y2XP~09Qpw(dNC@M&@
z&6*iH#P1IcepWsSpd(7M`v%+tx*DTK={N#uZxxwCARVw*cy<=!^52cY+1R5fPMwMI
z84thAVF(7$h`(svz>FEY7Bi(@JOwHlU6{ac!_$BDdAO9RQIyvef7Nbx-(q4gWs7Qx
z1cNJB*lCl!T#Gj894_bHc|DHhCBpp~Y#V9rc5z!MoE2+KdTtWf_`^HcbuM9uAl4`P
zfPv1z=zO|F;?7fT6}`A!m-|*R9X%5|L23ywfLe13Vb96+(4@{C9Mxv$#)3&y7$?Pa
z=!U1PBS5tfO=p$eqlq`^i@9}0goqr;7Q4e=oz6~xSf<=se>iPpRu2}+6WM{D@2Aqr
zLS7RS13?%P{?;uu9EbkXO_>8LM`2|jxJ3vjDGNdYV!!xdeIlU&<ykOoLj<q{WLXJn
z+=5#hmskuR!#iW6Zk<@E)!A$k1Zi*qL`;$trCQVi5>$OufX>t&;Z6RxK-Mu6mvx%p
znXTd_C3zy4O-S;s9pDD2NDJec&0k36V}3q;3yW}tQf2yg2UT1!=Luwv$T$Hri)uYF
zy+~cG#rHc;Y<)t+KcXR3Ve3!1R`2KzPK{P^GUWjA{{b<1{R-Pywh>nW&Lw2#sMgCP
znTQ~m=zsQFT^^R1i|c>>X_+R^4&idK2=KPaBYLY0*fyI|A*K!T93J7mk`jM~793kM
z>7?=CJ?W#+@?fB6tGBbv_R$>5Z$h&3w!#xf>yR{KQ|03N8zk$%pzKOGi%%c)EBQ!c
zl}g!njb;5uBQ-hRwwU%m8#u9Aiy6*2opaKo&0ctWwPiUoPmpZyzq^nxA(wKu3FH=S
z)mReUs3iNVh9)^>q+uV~Zdt@(dKu|J3o=>b?0Z;-li=vx`1<divi!IW4Te+W)sZ4N
zGg3huOhiz4$*#|Om`E=<ejbPH*|?`W^La8*enWM9OzZ=5MNB~)=?@-t)|mu7x)!>o
z9{K9*c{z@s55N37vUn}nHk6yEFRPwds@{>F(^@@rG@Yh`a^6`mBpLtTa$EM#YC;+y
zi)0R~$ZVuwdRLECJD0VA0B8wcSRc!mff|T-7<wY^v8<98Li^ki#LJFkk|1?jERdu_
zltWR;voxiIUA#Ds)k?4%=9zgZc6{uU!jY?U?7>*e1=WrCnsm4u+TiwWlR14W+i+AD
z<*i%XBJAVKA-y;cmY`N}MX7`*cePw~I2<I$ifp4o?k$RvumlYNA6c``Qt~4~sku=q
zzxv9rPI%`I&DKl3KWH43_Q|+fUfI$&0`{|)w(HuHFgo{%0|9UCfi_2}#6vp-A1Bch
zj$fzt)U=?()Ll^0D6%tH9`TqX_wm7Z`lyq^!qmhgeZT$mxKP=Qo>OsfN*%I9hZ^By
z2Ff+VHnOqTgj#KoitZyHQmckuN^)_H$d9JoT4l~~Qs0EFq+Iy?U+`|QN^JuN(m5LV
zBD7(JV}I-Ff<aixU!|PE4|p18J`gb!^~kK<uhU7p-0L;hW~^c*akf>zWRyYCj3M+w
zoHy7a#lf1l8tutlgaY^1rdri2UI^!=A=PY(U)c^d53^so1^fJy%+C(r?%B;OodPy3
z)~9F>(>3_-Y8W;nG{dJ_LLgzd@026D2<dCU?Q^PBSs;jx=-*MO`v1WC1nd@m0PLr4
zL<UXTo%DuWhD1_#pDFutiCsCW9?n)PSjG}U0Vq^LYMm5W;~cLkg0Ww|IT|tcZS+G1
zKX78Q*7*MH4t5%heHTmrQ?Gtq4dzJvCIvpXjbo+JTf&SiUkYp497@!JY{NW+Gp7o(
zQ_rD>__fRo{w|%PcN{P3{Q=j9+MhMz-ne;ng=p~7aHQL&NA$`2Bg(q;s~w&hAB@W|
z&EBD(=F2_fF<pO#e!F8&7y)I~5n1kJR)>0fL^;DTPuDaXD+oCC5lJa$=ta@kjU%4f
z;B6R{`_~x9zQQKz%1{i6vYxC07%Z}QBjr_&Vu89dgz{~t)eY?aM)u1e!DTR@oXL{t
zyJZ_W!V_^;Wko>WoA_ga+sF{=xIw;@x-KNA3Qe)$W5C%g(9j~~{P(pqzH$zceZIN`
zPG@79y?Zr`ubPDnJza5&3%D_`64&gf{)2s~GpXfh?TwOKmpAF+_G95X*-@sHa^Xx1
zjd2Z7W%sm&1|xK3pg5>{oI&Yz7kG6G=bc2$pFm~R6(x@p9^07v#NG^yAv>_6RrF|#
z`SlBT{v9dimh++w9nC1hBp})BU|F^?D}`8`bv-detuLa4_L<y)_>yw8U|%r=Kd)Aj
zT}5hzX8Fh-hK-(+zP&C^3RarI#GPy8%?U(V?1E*{CNTp!7V^Ak5#cf2z84f={aQv}
zDM>dj`w)oGKfvNyVYE|E&Rra(Bz2MY?AWNd$xgA~Rz66wa!ZnV+x`z>$!7P`H?BF*
z2fvxx`oL}}|JhKvXP{9a02bGNdf0t^lj4TJtK{}tG;1Kq)l|h@Q3}9j4hc}r7td|e
z0RJhtDlU9@$irm~1O9jKV&ASiU$>`ya=xc9om;SkY2;-N4r>_{VZH*SURemdCeP+S
z856UEz7uT-^8hRH0NLV|AJKUbz^3-?_+0;b?lY=+1Z?w$^zIW|y5!0aUXsJyxxk~$
zjO+s?ZYpb9TJE`eB7H{MsPNLh80jFYL;|;v+A^M!N4?PX%%LiU3*MrryO)qCwXcMe
z<svSw=Gw4Q>0&!G(4(DU+X8Vb{3Bz$?p$lpm>4S@eG1P-Z+dA!Krvy{bg`5f%BmV2
zLaz%Uo%4cr=ig;skSsTzNp!8(jvpc43h?jWrAD6G^PTgX(0;Fi_uqJfeePdH<IK|-
zbDji*p^w)qDu&P0wvH`_O1T)23eKXKJf<aexmpJl;E3(2ZQ@DvyBpqVAB1=#n}8b7
z`t9EDeO@G><C-|Z=ujK5sH?1iOdVf$oh7dNeep5EALP}{(K`!1R4WOI-IKQgdt))O
zH%Mq3H&w5oJg`YNDhMJ?);}ZN(8>MMR)<PelMqJIER}BW-eQ>%pr${-WJ8Hh?x0lE
z%#B?L()+ei`b0w?E9Kg*p$ru`Nt{%NI}`yJqb{n;=YYUul1Qt1+6_DlXxD~co^ZgY
zx(_R}NpHW5$PalYDu0--VYuK~(lI{pa-6TfksE?y;z;^Sp|xVmI11y+gi+4(8o)N<
z&^afO(IYgYAMra6aKQGf{6Nu8B0QV)mjS9<GS4JCPB3l83h~5qmSxyLZ2qB@R`e#x
zvqu^1bBG-ph+HbNq!XJz6j%j_4Ch@%c_p>DoqeP=PobwLw>U@<p)r1RJ{O5_x&z$-
zo)bA0#&zqss21of^7%1ZU}bNMC4NGOm4D0yas?fLs1^7djc|#>gd-I8{=WGUE&{js
zahF&^#B>u7tvHTb^%!{PxfpVfid<VArs)c8cApCfz<VRNM@31W&v_2<BN%)@cOjtG
z(E$9rYIGiBKGKNR=qQVg5ofhXzA$RZhXxZ*uxZ|?g7AK~S;jLTDI@hA(9C25pH)g*
znBsvZGo>qdcts#$$(nRk%t$Ti#0>ZE$hi8{N<2GD9y-NxVHr3+G^fSuzJTI>)K2wa
zNx1$*mQ;}U3j(Rj>`uMv$3MCZ-!~!L@Z=P<Xy#TGNLNr@0KF4^!S7rRLmoFlc_uS7
z+AzM#8#D8dk#I9plr4y<$n_Xe^d=DPXkQ)eye7Bwb5W=$?N@L8(5$G#a1?L-4S&`p
zXEZs{0G&SYA8tZHxd*{^7cy&un;rkpC$_?SePGne;ij;w^-5H%-RujvYhcMrrY>&$
zqb2LJgXEv_&KK9jJ>ND&pu!gK*`)8Q%wVzE!CBMxR7zN>Vm4oK8UnIQkS;@4vGI$~
zs+`e0sjjT}U4M?gs-%`pPmv94{25;i1W+9FZ%ne5v;)BMPch9O)}WV9hre1}nmA&C
zNOjNsr-7`m7{jZcj9#CsAEde<DM+(jB5SQ|W%=S=lR08TYp#U+b{QsdnC(VSxXSrX
zZ-5g*tXGEDlgGzZxD7>*9*kGefR(#u$uLSq@U${71eEv^#7p?^wd>j#jp`3kI_>Z%
zt|+90i~hyFs`zlWXpbfU{gsgnY7)C18=HYg9tmHEYJiSp#&@AeE7(i0MG$1f|5;S~
zY;(reqt8(X<*CD5h+Agar_v4g3#=?D%@g?N>C+NXTx*!<9w%(uN*oUWndrJt2R>*{
z7M{YbeScy~*<_~9-X58-!4hXN(Y*9_qI-xm;YEzNMYBQ?29JrTPd!-yO5aBF`IGdi
z|0io&b<Vy4$C7ZHN=jpHS3*P(i0y#Hzol#zZJ$Y_hPl8}OVnun4M<)`;G`-Qx{S_2
zF=1@ropgg5>%9r3lSYk$tNOE(*v%~(_2H`n^-1VZp6T%t=_daEL!?kZ@Do7k8X+JO
zjN$pICL$~&Pth(Mt=J)g&c9eUJicOm5@f1j@yu8w+^sA;b!>(kw(x*3`2jhpERywl
zjCFQ*$BpFf&v`c%mse3~SP=-teZ!0i?It%dk+Pydh`5V+$4j}9;a^?^Gl%1Ek%y5g
zlLn5=2G}5~<dVZq7yIXP`H`Y_vbcIoimhZ%K7*?~?Vn9@0wzOLAwghe6E@v%^u16n
z10ehR(kr1QuZR33iOx2OG6R?dKz$K74Y?omj9<};KHfVFzSV30svqFd-S&8JYolu(
z7Bz#dsW{0m)Liy2p5TnKx543h3orAbf2&`b0p^5_RbPq+er!t96hbHI(1dGCVK$2x
zjFFH7zy97&G+_bZfY3}u0krnU;)qIdX@x0AE0LYQo(y3}%^T-^4zAp+Pnf}r&Y|u=
zXFOZ!u5gRX>|u8g>xc#4JS~TekX`n)YJ0$|lHigpl$_Hn7SVy*op|z}!*=kxvZuOJ
z%g@uKpaQMgj)>1CC)Z?k&d~=_Sp`=DAawI6IK@+tUEppd45mpLmOTuIbNI>2CVr@B
zmiX=Bcy22Hwq1DN_b2$NhRtsN9|S_M795BbP5-^=;4XM{?Kw6+dBUv;B4<Pz%N63_
z)1#WO3|f`O8rgy)qb#?ag=+!*Mss9PZFb+Di!xu8W(L?v07NdEm@F-{(vb95B}@6>
zJLtH@;2=w^NmV$hDRdZAe9}Y4K%%6^lBV-vUsAiTPAGqA4z1%%&{W^yd2pz~xxyHh
zF<@FdcEM~UOCJR&oCyp9Ge=T7){SSD^|IE{j=5;QL+Dq^?z9r7;XK^KU?>hIp#<Qa
ztHf-45N8`@Z-hU1n*<UEiv%+W*V8zyzgxk>f)+G??m=>hFKLbfiY`Qj(Bj&rqF-K^
z{#1*Cz>JnHEDYVg6R;P+a=D`Lg?(Dh)kwi7H(61+tGd1j1qsjPV)CxP*Fs<h_B3V#
z`PUnhoID~=LG<&`>4bnS#*BhO^j({-iZE<TI0Vu1#H4?;XQ-b6c5H6SkX>9p(3T@9
z+}}W*y+0OIK;r)g)!glg)_F_m;0b4poamAqGpmWrFqPwZcUtr$xLIlav!!ui$yER4
zlqp|l?3{9sibaSJQ-D2O>x)g&8{xg`oih%=t8LbIVKr)VujbDth5rVZ{TdbGKnS`|
zi=Y@XW=Qj=covAAdsE0Q+g0%MHm-=HRg@D`hAVN1Ai4DZ`%YC$SAIp2q(VfrkSbkT
zpSxFN7!!;l+hs^@nFst@7}Rg8VG~7e;FUzkE3}~tM2zFi!5hfsXdi15Z5JgTgd|J&
zF8I^fXfu-{5XbE_2wds8-vL0g9>vi|_dN9+fVSji`1i+w`qT{L@uX5*I*~qi<}3zO
z(!JJh;!`^tz&d}88&eP-hWtfe+|a`h=kYSlo;%5@V+F+OwdJ4B2I^A*O`2hLeql36
zW4|$AOt*~!6k018uDhb~d0Cb;rPT&A@+j=~Z@C`-Jp+Bb-L>N_*LvkjW^@iK9Y!Qj
zgZAm(@b+SEL!rvX@%57yRrs=b7FAFXB~Z~058;Rb3;O6+WDgBUCcUi@lu;c57nP>T
zqLO4bn!ec3)y9%dm&}CiHirCl@r1t@lI`Qa2BoRyQ52ZY&i+UAFy!2^7JmA7;El|m
zj(cBSlSI-%sfJu~i|_3P=>i&;*`RT*4*(G3F}!?I_YuGm9^7$7c+zQVT5^gMb)}AD
zBLvJDwLO2Dv=v;qCQ%)G>i?H11q_*oUo!<5ZFJY_0rJeg)^!1pi`%;O=E49oo2R1!
zlN#vs(LV++@rHSK_8U;*r=|U}45RKWpFM!%ExXgTA=cP&m5tcA&=29GBeM+8_u)5A
z+2z%9?jxg(BowcJ=fVJ5wupG|oEDHbQ+W)Jc*zVtGXA|a<du~j_ckdH^UE308ew&1
zd<%KV5P<rUO}`a(k$MsYW@=leUBtWVbSmv7S9f&*3sT2gU`zMKs;}-|5U1fx@d~}U
zsNSQ3s#{m#SnI1wjt4JnDqgax{NNefQWID*FHJ{U3Fa@4aUBVCPH9m^N^H<HoI#cH
zyiuAptP65H{tUC}%f#lBkSV0=qIDObsGC>c8$-H`7JP9{f3^@G-vT(gY-XB@#+^xW
zhMmMhw!_)qC;(MOfQ}KKbylW{OJ4iQ!LV%ITF>#d?YB!|M|Uk*gsLRb6xM?Y#FyEu
z8452`8AH@cH#*Vn+mIJhKY$~Fw>13yvwN$3Qy-ZNYV0*(sz@e93)RtFAqm&-A#a55
z>8Ll4r36=!*R>*L_SY_q`IPM0Lp1F??@zcwO6h|45ReNXteOhqc`bENB@4X5<ZVbt
zc()>O6=)hr_Vjl(px}_8M$w%!KGz9ll(F44`!k#tBYW3YL9n4`obvgbYQGz_gkwc>
zlfBvJYL3I$IgH=|qXo2X804y?j^=%dZv;*U&p~u9$es@#F!-yTin}1t26`L<4-?tO
zDS4V7aGAIWg)d}d?mc~&kuBB~YQn@a*OmAsp}>W{WD}Rq-Yw<io`60H@9!M-2nARQ
zoy+*kCx2SD^^TGP*6w|*$<f?aA9yPNT4b@m360^}PiWB<*eAF<R7or5^l1ZuL3&$l
zWxswlj%>|2+4<r7{TysN_^K3`V;rVgFwjT)sP9Kl$LE55o;atMBTZV1*rxCerS{5)
z?MPY>(7<#zaOm-D<DH1mdRJluZwVelD@z%iDWjER8QSz!{#8PZpiBkn#1NRu#E{>l
zzw){O+WEK8qfGWmjKnDM<7NUV6A4yS9Nbd%s@}Qtf|V+&c1?duf|++@qjqxT=`*on
zs2+r@DM-5Lp}bygg>~6LVL6Os1RDD<@3J+tR}0aB6&W9k+tM&7<-FN>n{x<ez2&-v
zmgD!BF-^-i1x@TyPBJu8l*5zq(=!FRyr;ncMK3kW2Y1&bRnO}@37#)<4J}9faFAw)
z`-y{(r9hrK&lJ(A1X5#ti**T;KKp9)V>J1es3;3rxft`K2ZV@hvepnmJw6jLg>}c}
zLEvHzc>;hG4SWMAW$b`ncR_n0#`H55p_aG{zRyX3_4X^?X{@_XS)kI{J7n2xySD|y
zMOhe~wCkD0>DK}u`46XESmq_F9Gee~>)JrL6bwXfk`#*iNWV9{2X<z%&bf~#-7aq*
zqde~$1XcCI_IQc5=?V&eKHWa~Kao5@=aGTK5H{ye4r9ZP<k}wYEq{+B&Eq*u?ef-Y
z`={M{7Labnj{7|yhV6%~yFamboRs?G*qsvQ$-qi)r#|1hsQsX~73+g>070*OgjsF1
zbE&dUFl$(HLFsm3X4}0qF;f9T#j(Orj+)n|42J7XWsp3(F<}-@rGm{q!A#GHa@d6|
zyN6m9%|qwVRyO`A+3@HV2;VWau-zn}SrST7P+RRE11rq6I4`r0ncsY-RF*yGw3rgA
zYKv&5Z%De2f`}?g7A;ns-moXKfC_|x{q_88JdcFG)olNNeDOLqv$f}YD>bvahH8q9
z9-_56z+wR$>1;C$Z*P-K;7aFlA*CB7*Q^W5n<g8)#4&GXy#M?#Yr3n)F1?BNRHB+f
zIN)^h`GKv=n(nrMRliIjPb$(dKVP~si~FhX9b%LU7iv+YC7#|N^+#V^XEwMQvvBy_
z-5FZybY)iVi%))X7=*#iS*Jm73V<FwnLXJEg5<7P0)DDO>ub@Kn-<AX>Rc_u2AdeX
z=GSqf5*i^M*A7D-1tGcE`0@kM17KhpMjzvg*x*6T5Nazu^j$t?amR%G9@wR1_anbN
z+x=I!6S=K9Kf;fXHxqh0XGR*uCnpu_b<#idkcLzl7?6(Mp_32+ZR6Mg1|hGb#_12w
zE6!s1%vC1{$JiT<8Z!a1`oA`+*loDD$EkNlk#t&5u^&<2|Jz|i*c*rVSOO&qs^?KJ
zSQlfgADe@yPEhJYjF@x-=d)gRMRfSwPV;Q`n3aPuDUHAD)XJ1iFxOB2`2b^K*(3~6
z{R43ybRMz!D;G>jlzJo`9l=>wIJ9TeTLL9MmC^B8KxkK?c9-fY6037wIbUe!Vk?5&
z{?B1ShOT}c8|A|+B>*OgU`QPc-x(eNy!xEkuzn(7nd^6EaKEGPq{`BaiuPA|7?J)y
zytENw?}itBlAVZ+fm#$1-je6DX$0_{NH&c5dvhg^$0kuM>#X!sLII#D4`kI4rd2A?
zui|M-rJ`#BawtIu#l}xCRqQ1u&Bu0uhShLkQqIGpmn&P-Hq{J<$3>*B4eS&HBN=m3
z54z791Y3DBOB)R5y(h)Z`<AN5$fFV%D|^#0kjbgpPOa&@SJSoVuQ~5N%6?CSm)C~~
zNzI6}l4hf>?sQw{khiR)K4ZnNUs0Xd+L)Bq1c7Z`{!gX)e`(0)-+W*hBU~uz&6oDo
z*2j(v<<<$d!i9HjjnhFST<{-ppLtg>Ceg+_GMI+f#V^7RafNttwO9QbB3;r*;es{-
zYL(!IUP&bT!sw|L{7Rnm>!#SIj9JHuumNLAS_r`XW#P;R%a}vjusTdI?ZN~q=b!5Q
zcw-L!O}Ykh_ipm9rr<O%wS}z*E!s!fy2{4%d8Mzzg7sTxl>`JAS52n1B*X)_CEf;p
zph-q)JoaQq3-r|>#H8^$J#K10{L8X~%Pj!P+(p?AV>&gmj&ZOm+y0QOLj<Ywscx>_
z3nMiB$Fy1czxwM-jB4CMo~tj0n&0%?fD<77%TLfefj^K9@)n{<#1cmdId8V!$NmYD
znBnE2y17C${d*!S<dssYrW(<L=)^=V=8m3J-e1lHR(C)^Tp)z>+Z27Cxc@p)#o~Ku
zZY62mcI2+?Ai1ATiOgTjO;(U&gVUxZp2vxs@_jlfJFus!S7r=16Cf6wX4IWbkp(hm
zx+5^w0VI(s%qx?VAJ0!2?1bR`r*)WC674f)rQObON8s5JIe1)i97&AvDS>CFnYVop
z%sb+8J;d|}*{;B~H};L#X$ucD<0>I$aG&$`L|PvlC~|1-@L4|THJgQH_*LX$oa4Zn
zA~Z0pLWGez<G8y}b$TuiTpqQQTn>N%z(f}}FRm-Pa+V&slo<8jk0%`qY2=eO*v)u_
z3gj5qAcKFp)hntV|5#4@Yan|;!o-$j)g2rZaj8ad%zv7!DtPkt9(|;;xHXv{E883O
zqEt<32iD^;<*)WEYniDcy(L%DYmGbL4)rAM9Sd#mMb=`3$NM$X_9s`uLO|P~=Jfm7
zg1hl!?^#8F{W0zP)QU^yPP)1TE&Gjk5oIGkXRc4qN)`4$5ZShG++vZx5%8fq@JEw=
z!4EvStyl5I5O(V}N?0F$#>`t-kfF-{mDlkOikp;Z4(3kZT1<AU#NV{PzPcf)bqweG
zf+~6t<&Iz`{M)|nJS4KXw`jx1tx_&eHQMKUvR+W4ILS7!{9fus0rGROXcG^Rmty4L
z`ka0AyYJgE<kZVNY4JAwj`ch}rXyZ+3tr$7rhNk9Xd|M+wu&Cf*)}LtxwEk8&<1&O
zT`^h(h?X2hf<#H?s(AnqWh|CwlL8t~ppaFMz~jcr;3>JEvGj{;WZn_*ig;49*Hsm6
z)s$6{sE8sM7*OO87env|dMf?9Ok{gXZBqoutPIAlzlcUwLX2aABZAt<f+DnirpIN<
zyVvouUc1&hx$4|O-WNr^h7gL3MXohL9z@FY$9tzB7%R)SM%6Q2HvqKqf%vkq(MiG_
z>_6SM3C;bNdFvW5JpgyBt@K-~v|&?md*c+cdNQxg)q5!WR;^0E7u+=y>(l%yp~R3@
zarJiWB`SaWCqKD#%p$hmyL;_U9v&?Aj^`W7+7BFR96+Y!_P3UWs0;bM@t8r7A|VCr
zlPh*}pnb78%GCcdKA@k02qoQLdCq1cJsThqFt)*CjJDH*IVPJ%0H2kLG7K;!UcV`L
z*pjUFAQ6&KtUYQ(j7y&MRqz*oM2nlFV3N!VPHZz1Wmw;4<-BY^l7-7JXl>sKh$fh;
zItsky3~(#0kN7-Wo!~jJvXqW(Tqm$WpL(u~^Uj5lMV~HgdwI9vBd#b-J|9+l8ooMB
zbU}w8gL^MQi?Nmp`7pjGE{lPZxT_mgD~HM5pDHv5Qe%kI3Zu_4i}teK$tBXAb!w1^
zKNar-EhL#79S~`O=?odLaMdojRlE;tycjTluua75L)P3bTxT04u11LAT4Rih)i}zq
z^1N+EfVlxbPFGwS`^*mL`WIA>P&M8&IdCM^a-gNgBBb_NfjRL0&ewwABK)AtY&Z1u
zLBm()lKOhor)t>gG%?_&evP`Fy!eReX5mO4KWP8W$4}Wl+Z&yU+$#!_ce%kHEI*T!
z6l%Btyu_fh)u{d9@f}ekVH!5xqNRnEHK+V?E<)>aG>+%?o=Xwjd>k~G453O^b&n6K
zeggo4DV}O{3XKi$gRgPYgph83st8TCqcNm9YT)D&r)hLrmFoqM^bF4;NH3W`Cr6qp
zV{*9v3Kw!Jf84F^7#`z3&L4c|NTA|nXeHq<-Fv;9$_rz@Xlo?dZrZu9P29-*TjJoQ
zqxtt<p>yfIxw?}|t>UE0it!`4qCLxr6etWzvo#6qMpb324$Lb4N(V7l+}lYU*fRUe
z>HyP!z;O0)9*P(sAH!VVGw?%;uqsYpfcA4`(#?eT38~o&MWWpdAbIIgC_UqZl18zm
z*|*3Q=mFu@Whdk}82j}jW{OBz&O2-^9r`QSSjQZckgcfl6g7$zL2JD-T#zJ{naC~4
z*#IpHV%ZG<4<Wo}zzMer%tegTa2*DjPQ1NH=_^<Yya24)sm+)1AkY51iIGt(-)_aG
z7nBZPw^u>*-nDLao8CKILsRu_{Xi&>we~bLxbi)KuPn$snAii4=Gk-$Q)r1UO^Z+l
z_-!P!PJf5-r(Zk23GpP1(R}jtW+)67UIyPJW|@SIxrNMuUUnB6v6bFrF|0L^`f$zR
zDw}E&33_v`IwKO7{fr6oEGwx(aP2+Ce+41uLm#{-hBq~T;Y1Xg@ahboBg%{Bv8wJt
zoX^x74xE2jkuk0D9Vfkv-RonYTRPt~`oXD;ldA`vZdH~A=#B046W2(ZUn?#@a8@MJ
zDP-n20-KQy$&2-9@VIEU5*@Pb-V+@XiZdpx_(mi<YNY=@`45zrM@wz6JkBnqID?yR
zUtgXDC>l}FrQ<^%B@GMQI`!4U&aQ+O#2B8JD6tpjkC-n%yaX${oiA?|FY=|CcZVEJ
z0`6Mx{I@v>Aq*qv<Aix#Y=?;TdWuR7{+dH2{?d*Y7`^98vi|F{X%4#oTWUBGlPMA<
z=XCeW(2){-wrj+r7g$zXOnnMz#I+G5L%LgW9>Sv7?JZ)j<pml)KVatpeil3jT0^=H
z<(I|l7Zs=&FQ&~w5A+vljN7Pur$T}gShm~rn2U-K%vQQjimUy%oFSzDU?=^w=k81r
zY@fd@-GGwUX@cUMKWh*^##YHk4Si59z|a0ie9{w3$B;$GmDBDszvUbUvL~V3gF{-+
zj}Zd*;K>p-zGBy|`B+l53&I6fixK7LT@&{_JN5}1A1ELDYyg6?J`M`uk=GevgE6T|
zFmBJ7nI$Av=&!vNGF<LTWj&0}E$|Mxv~x-26FS#7<L#~!@?oO-RJ#^?3iEy2n6ka@
z<v<qrxyOrDKbv=iD<Wm_){+1)lk|~X!}&@psDxX<;w{=$butcEl6{F=@lSOf)T;-I
zMw=9h(Tb*NYXk@hu>p^zK{(2D4$fVE`zRTygcSa!B#w<Um#SnDbaZb-s6E`t=ph)5
zWlIcM>r=&J#J5PH=3z91KRZ3l0MsP^XU<KQx&)stcymXNaU5$2h_d{sdV)lGLxge$
zGx{P;TK<d9{)Iv0iu3|3Y-n@dAG$4gUd)kJ1F>5>?Mw(+OcW*%mEy@L`@cobVuLhc
zJr}5xeaA;kn=UPudge6^(EjLvLLP#JddPR=cdiq5&W~1+-qvLo1=CN>Zp_G;C8R7-
zK;{novlT(&<!-*P5>W1ED;5cd1XIM4uL&)#h-RYn_*yYa$yIwkL_1Z-xI(P3P{IN_
zSMbyALQS$r#8J&@%-HFr&kh>geKy1XDqbn=x)p|&KKwLD>U274Zoh69+yN9mmd}er
zdAr=w(4G|~tj=?RG7GOpRpllIRz}U8^+vFF0zZFZAmqD2n__`hTY>5TadsP0yo27@
z64YXcWzni*M9-udgITumOamYRLEJ0E2vpJZ!KxqxCjR!t?A`)^uO=6RI!ols8y^VS
zg5Kr<vNcpG^T++Y+qIRIa)tx33xlU!3g)@a-=@ayhY7qvm#RX;JtY&z#FTR3`>}Hg
z3zeQaGk4jpAkl1GbYL7$!PtXpUj_&NlqLZGKLEg*9+egp7<e2hLRbs563*;qBN7I-
zvjJ0E!wm4OVqwm5SYcWWbx;tUp=n_=MuLU|@Ymb^)JOi1egyUW=kIN4G&8-<q^a{!
zS&dWz4jb|JrZlYLmHA!P;h19dZGvoFyF<?!B^;ZNn)A8hQDA^K?BeVTIqZ#^8lyTq
zPiwea4Y@~N1J)#FbCl?Tx?D2d5YvJagTrebT1|(gZtq#Q#qGT!lE$*6PG_<+(z_1|
zsf+`lOHBQFg_~uZBRC(f&~ngkKqFZT|38QY^6K`nA3CF^#j|NfD)&6W=Bj=mwc1n^
zteYJd0fnk<a?7#VwC7GZ80zv#Zm)|x!N~G~0xj``vWcVc*n<B3!tP%Y_eon58jqso
zW^rK3KO1%hua)~jWp87<F(qZjJ^VZ?TGV>crY?%#9O$`*PdjNsN3K2Fls>*V+Tn{Y
z@l1lg(?M+Mo{M@cRC<-unnoEN)U_DA#EFY4-e2nXkZ?gx5|=wX0321Z;-O*QI@Zdu
z|6_D@wIaSSt4H(ISohV(hMq5fnCrEV<5B2grSisxx}3i5c_HGhaQQ+JEFU8%Nk6`g
z1f$+?zW$$P3gIAi2CefqqtIFCnYj6g3f)OrMHleH2}MAoW@;<vbM~aj{8Cr|NusA&
z-KTojhP+8-5XA5xLHg?mN&A8T>%~7IU&4|*yJ0PHckrGZZ$<K&x24o?d|Fw%geO!m
z7Mkipp3_5hYtTHAb%Fv)W_WjJzxsBSnZF=r(}87CUW8%fV3;%xu?=WD=B=55&UT<3
z2zYecDI=O#nS0XF8sp?9PpA5tGV}a|fWDLZMz_L&xCswqSvyS?(&wq;#H*{)^AsxU
z+0tEq9Ce-26c8;IurzyWYPhBakQnt1{;9kfbrl8?IFyiCuI`~KC2Ms`jL7%R>k(zA
zUQC85#(Nl&fzr%<h?nBI-C2Zv?}&G(xAs<mm971nY&b`h-gVOzj=E+2evKC!Z&UPi
zPIzVPwDPKYpBm8*HFk0`cnV#W2PW(>5Urxc$EfHREOlE*+FMHYc;TNXqPj}ovWKk9
zGf&ZK)zWSd<=s)r_}6<nwSb$`>C+r~k57{_bYX}x)=c!g_|+@}tzffJin<Eft9V$z
zLxF4}vf|KiVLG%8|3)v|MxKA-`P8vm0*8|H_<lm%Ay5b?%9VJ1$|esU;=_nUP4*`J
zrCu8)E@1a>c3Xgkpmh0j>wH1Q_HMGGL$C;2Z;uIjiZxD52JP4+wLWn`SF==$Y%F2o
zdfsn5CujOREw}8F0Abb?FsBILiR=qE-v0B+d|KiJ^tU&@#b>2!0DZjsi^(nB@R$y1
z*k&U{IlrDIBaAz$bLj~4@;qLICaWlgg@8w1>z7w10d|Sm@KIcQ-hsbdw#0A6YF|lQ
zg`Th+E6f>Yq2oEpkFRu?V49eohWx(rqQ)3Tio(}(56+R`&-=}4m@HfiSq7B{VzfXb
z74TY{jmO^$Fz5-R8MKn!>RqS-nCyMjcyxqsX+tmmf?F~dD?3@SNqIwk*$$kNxg{x^
zE|$(ewLEKQ<okg#VxRIST_8FIi*>^pEo=V@GAuIbOv{QZf<D|j!ET*)7C&o9oRbSd
zHyqtYdBjPaK`7xD>BJj(O&|Q_5s_BVj6fENdYM2Dn^VBrS!W}ImI07}tIzH_G5Y<D
zjLv<GG0zwG6p}Cs5r0E%$yX$h%#?ml7Uta#6U;5jYVZ^+`BXNU13;>8q`2xNm2q*y
z^M&m!D3QTA{}-qBHF<#zVnJp;&cy&lQ3>fGL=_!ry6$R{DlsG%sG7|F`WBuMH94^&
zMVCc^+Z7*y$!gLw8BGkUh%PO`MbcIm)H58t(nk3cwq{`AqEsUZng>9lJJ|Y>h|rG#
z1Wer+W1x^vZHyks1gAYfLKHklo-@=GbD)exC4{2b6#2$l$D;gaEDWZOpmoDvtY)4l
z#8r5~nX7gZj;Iw%e5)R-uar;KG0WoV^24L{d(Uu)KU1+`OedUf6rD5FM!0X}KXmi0
zwQKxeKTdH)g;f!<Y@W!-exFG-DVn5JaDo5>tj$_TWw2QM`4#5S2jvca+@0?iKY`BL
zc&N+;aBi0+6H~cItON7q2=3SDAu-C~`o{;ic%@|*whB;@*o?54Rb80>&+X~fJB;wV
z#fT_xGYTYLA|VEt5LaYalVPqbY?`-QhQ7dC02mLCD>|r3Q{G(%vYjW!SvA?K<`JVD
zdS0L$W9D|NA$${_i;Fnq&|||>`_mcg(}I0Mu-}2J4b^hIxg9R=ZG8F+ICz#8607V&
zS@-EFqFhL&D{4qgq2DlPP~JJd=3+<^?+1=(d%e9LN)n=*T%x;|0DCUAOVEESnG5D`
z(=hr5KWss<f_wuPu;0mg+Sa<(BqL}mGhfA*fffvmb#}YPV!IWG=ke1p1dlrecd)zC
zSj>#2yMO-NpO4bC#%srY_%1^1H>1;Eu5RxTI2Cp=9W6)mpRd>QsMgHbqaJMgvCb=_
zvf}*1c~63TzY1zq+t*2z@M<%7=`a^YFw1R@zLB)QnIzk`!RPQC^(ymBq%<y^yrNN}
zy~Zx5DsDPc+iJI&M+bQl$x@p%$7JyYb`W<GWy|j6Z1Lwki5P6Na2;%n%n!H#XUuDN
z2(<@?Va>4O2pEerH<{%dvK=PR;x^Rbx;?^w{7y5S=4-LGW=mD;Xtra)=P2;f*&qf3
z$$(S-0s-PGWHtX#mmGkxv{+1gBj*pf?iP{!pD<N+fZgvnQFv47Hqb>&+L1U%slT)L
zyk+nC4e7Mj5_W_FWB6lnY+7s<&ma-{A0#9uxD~4st}KA8UOeY#q18Yf&rd}nBWZ58
z004EyUEX;D^ERyD&O;p*?UVY)82%1Y1cv-`W2D0gq-fBnZZimaxPB1QRR?#&kAasq
zeoHzUQRQ~)$+3^fLGtal-TT)HoR(>xAIxdrewf4zfGlg6L|ip*+;|Ei67O=9tgJ0?
z$~l%+Dlo^;6>81qsP5T}foJ{#j|mSpwI=TWHY9!28v)6z)ye)z4+rvT@cmYDd{t`&
z@*T`C)?ksYR!OOeLlR(L@@@N^{5p<6s5<V!O4A0=;|06P4~Wtq1_5CiqhTptnif8T
zsj1Dfb>_;w$!q4VL-R2Uo~q3frd6QCJ4t{3Jj9XJ%$|2QM`P{YX{qv+1~@o&C`d&9
z)VL$m2s>K4LvR0|q(}7fyu%o4C<3jl-G#b)yB6GZS;jg-Zi!ClzLB3b^gcPQt5t;z
z%hVI{c8QEwNN`<7DP{m6BWIe*`g{oiE;dS6PQE$(JfYB=-98mE^IOP+bN|PJGRg1(
zGCb+X1^t`iJW;<>VFD#f6(jk?Lmd+hjiJULWk?MA3h&y;;WG@`zzdQ-Xk<qnJrBO!
zg{1>zdVmf~Rl9ZLlIWWq6^j2Fwcz)V5J3~d{A-_+s5s-`1Bv#b<<sxwF<?#{wW7e$
z67V!YHq!rDZad86CU;(+w2;g(uJ=Q7jnid`R+{F4xevIt3H761s*7Q7W)zrM+A!TD
zq+X8!n@{y?gtkTGH<RY?n(2EpumU9jeWkG~o{$g1invf!2J=SYQEl5G=Y~nT{#NoL
zD&3NQSIF0>mq-uGyfY+t9Y&zU2iF97vT4_PTPxMpu@8mxxw#W(VT|Ao22n0}I9d{;
z%ZZHjF=_ixZHGc9<T&DQ*ut6i$UwCy&+jJq+J?^AfhcK>D0{SDy(_lyMO-DCnP^~J
zMjLzEWuUAMBO7#Y{}SA$1jNxe%?-2%ZP;SdK{NvoH|;RGr^sD}xLifS)Jg&1%n@RC
z$dkvE$0Nn^!IY?V-Kq+u=oA6GzvdHiZ^#w|PMK`Yxx#{)-FtkV^(K^^R?3KRfM2S-
zw}q%J)^fF@x2eSvUL(~C$8Zz0c_0x%`q{ZO0r<f%l)Avo{VWe1lcTmisN~@2Uxuf_
z$YLp@Fl5N~kZL#k*)yc*$Ovx2miW^8s)H%h76~%=GT@I0yDJVDD<nfKiHfqGz7XnQ
zPBtgyY!twZrF0iJJcY%++Z&pM(z1K2KF<c|d<e~+?ZltJ7v>j1F01*7>(A(7l0+?s
zW61z#fx}os`xIw~%^tc;GIg5#*KPn6?^syuA|z@CI0|P|wE$8AH%xx2s++xb2txA@
zzfoxfd<5!t;o_TX$Do|8lnr4qM>Da*ibmg^K#lqu0kUWSvDK4Q2lW7PbaakqThI2X
z&`#A$UQuXpyH%f7zMSF5>Pdh=hid+jeVBRn#Pz2?FqL76U5n~;xRYNt!Ba6ay4=`5
z1n7*NYDY2`An=FToEfgTi0ER3RtAL5QV<}srA(Dle=YT|7q3xDU<iej!EC(nZ?vYe
zCwUIa0&srfzB=Fe<g(;K*oP;L;(UTMmicD<4;XKwtd1c~k>pPfO&Z+|4sEwY8p^o8
zrvEQz2v7@eIB)A*13_W+_i5dz^$-P%$rHQRBnKKvqZFqA2b%V$dnae7FE>wEyu15+
z-kFKP+F5nr9H$eeudA(2<uMVtsz=}WS9{{ZOu$|X_VEKZp>P@-RS;2nf7AvcB?tJ8
zzbpU|3`c!H`+A*3>vP_V7K%sL9BZuWWeXbdnHg+qKZG+RQr63*KX7rkU`5_l$oRk?
zgE2Ck`7GTaw1xP7@Pq1sK;y!UV|n+s!2UuK-fWJW=UV93oQ<7>GH&&M>c6(j<cRoS
zNZR9bVzWWc!_^K{LlbW9rsUt6e<V8lN%w>8!E1S6r+$m?T1A8{ezF>fBRuA>7sJxs
ztM}DcW@6p#u{U%?=eQ3(NR1MLCV>LOtW~5(G3ZO8BG^N`zp`3WwDn5dq90RJSUd`)
zl0WuDvP@ZOIiTRK!vAMhNN_~e(p&m71JnMiVBJ;(nXp1v$CMr?H9|+G$#_31!bqIG
zOt_F;;UYb6Lds+Z3b+jOM=@c9Mm=gZ(r62?9L^&d_IPvZKdsh?BmDFj?2Os{FFaar
z#iN#KEO){%^2^~bPt75l0|+30tjXLxb~=Kv-tA*HT>S%{vi4O!pvz84f}Z`^O*|s`
z!{MfalzTknkTIO4xzUI$D5Ug*H6)Yrwo#({2KDKHG0<ZSTA%=|FH0DW`vgAAGi&KD
z^fV&DCcg1Ej^b8yI+aGntHX!xDlWcMiQGLRD`sTcfvH1dIhde;{}XjF%FF<bH3;G1
z-?nzMJVXu*UZKu+%8~~)NWnIS5f-Vy36DM-QzTbqWR<a7_;1?kJytdCRVk<|1%7YQ
z&B?HGlW1f~m`p7vMD>5%Wn%GCo8XWJ10f@`8D3z{Buq}4!Ou4?)aPtVCI@c)JutKu
zlkD(2@)y5axbW8$s6Q=Y<#m6={1ZT{8oTfCJWZxZSsSIjbw@h@2}616PzTuaH;Ez&
z34$L8))_E^G#XuSHwLCoeeqQbwZ~E_YK}-B$+1Gtc^(#Muc>cN%NDTSd*9?Nz8V)Z
zI$P)v-4de-s!U)}oP*_SECup|NQGS}qf0%g&hH5IpFz;yZ4!IWJX4W;2z@0#{5F1>
z&Yx9}15S0>GEwxdjH?vP277MFfvK+SG6wOR`Fm%>57eq@Tj7NXXfc>Co2wRbqG-if
zA~grw`;D%Cgxs1?!3NJs*%MQ1s9=s_!d7xy6BjU7=l|y@EyVr!lYO#LW+F$i4`xJ!
zA4QqKS>}<${M6h2Sv&nDm?aY_Qg?GM8#Ivjg3sO(d5xUSw{>~$0-%xCti8?zsR^hZ
zheu)$HRd=z2`ro(B^>FZvuO?fQqWAAV%P;LP(gy8Jj?~t>E>jsGuYOE>2YrP)UQRW
z*|&qrl2<fYv}Fg9wK=)7=P&`b7ZCzafY3B`sCt0FEQi0a3Eu)F-hCG6>^o}#nVk1W
zKY2eCi;N!zZcXE`wZ^~CJ;ejDVI*GfU-*QNKJmzW<TF+hkO8zD=qRAH*Di=bX$@#M
z#h4j@?=k<rDw`A~-_}lEH{U(R)^1cqM|ruMBlEr&7wcX-GESkg?AjUC+;UtJp$cY%
z#%6Jr-UzGOUKp+Gw;K}8sjp6KYt+&dWH;mvO@JXEIqI)73EgI<g9FPl<tIQ!s%rE}
zMhoRa-Q87&G}MOj6EqZ{nEt-!4-WgHo{-34;{3+n2WAt=&k30pOW>_7tj~AJ(KBL|
z8A~M~Yc4*0M-idjRkUC&FwC9(>511bef;by1_4%%W>N(DpJ+Qs?GH6{pP%Oz0;r8N
zUq(SH!K{?|a7cZ&z=ya9NliC7Wd<z8jgK18`kl>3t22$;Z#=Wuro&a|l#r>IVq8~q
z8a_bk@M0+QYfHMdtL}d3g0hL>JXD9C&IpbU?rjsgdSPLH_fP;;vv&^E+4F?Lm{1#r
z)fNJTl^%IpS=Ht}W`yafWGS~@VG71B_1<ZVY2<~~sRAY|hcGcaIyE3Yp3sQ{Ip0S4
zD6oH*CD1TquP-kd4)}ZkIJwgep@}r(0I_rxaONOP&4-+Ja{FJ3Vz10g!z)(eOJ(JS
zAPxU8tpuQ7>xeI&`$kA&fBgc#G=ej@kb&Thn8!>$C-`|d!ou=PtwDLM#I@fv<+xj@
z6jI)uc&EJCpNA)h1|=V}4{ha<hCP)fEx@L^{)~UWm0xrOzC=J1XcSCRRTMc{bUDB)
zMswA3<f^$VnvQb<-z-6KH~8M&?xXQ6_tplN+(Td_DejAgx(^v}AjLy3();IoFt@pY
z{}eBN2_8b(d-T)FS1OO(I<edUBYx-HnEW?RMF`YUbejTI*dv^1LCfx~^0CAoknIzZ
z*Vs}WNlClP3FF{onpt0(#f^9dutoZtx&4n`>yp0`_p32B`>#|;YR`~LZDU-=<8S${
zUFS_=WzUnfyOx)^Y8cXggi!C&sH+uY#S(#BAu|J-eIDUYpXxysGl5ysN2iOZ7mB{P
zLk)KCn=_{^ge~96y;(j+-PC$h&HZ&ig7EZakHy|F-`L$jvNktB;iC;EKOmh>NmJO$
z+BI(%-8g=oImaVw7Ev~E;8Mug2FmhG<@qA#Cy%J;&P6KIGR$mh02Hc+)_?|iAf|?z
zORtdV%;NcSxRV;5C*VDgUD@65nyGBQ{x;j==^=U<c$MK{P@m!_bS3yVoq7ZzxQ{mg
zXzyN(i?qMBNA$dYzpPQ0NfTzs9YQ#VoQX(i&r+E)$n(7F4_LXAA~YZ<05V8<U6T*0
z#v<l`^bj|di*T<$DY(6%JFhQssZ3Naf8Bl`?nS<h#+6}y-O=DyAKt{^K+y^Nk<t|8
zOLmiHiWHl|n_=#d@Ewg*8%s%XZq`fvX^zS=z<s4F@C)0_=LV{Qf*{v>-I(tgZgsI)
z6@?dLm&_YS2}p8deSQ>O`q<ukaMuWR@LRz=cp9d<3}>)++|Pt$TF?qdH1e<}#iYgI
zz9C{#LI-63-y+dY1k;p()OD@y_lGnq85gd=uTq!OlGu}nE)@z)iu8zh-IOc^W1&nd
zCB~3*d!kn}Nj#+O6P<THXPeN>!0&+Y;{Av&CGcpL*&H*96X)i53+|^y*+_p64hTuV
zXDXRYUB$-6sP9+ARxb)Tbmnyi>Zjz~_}WecRKwZ<#6$Dzk*A~jjGOV`+(920OAm#!
z0}3z_i`HLa*>H8r_-HWx1m0bh8w3M0)LNF_@-L79IHRY%nM1Po6np+Roi<7w?oEMP
zd#GBN!gsA<!X{@*L?6rY-`LL<kvcG07s@1P-;Mi<TmDo%m-NVW>C)khNU67Phx$$g
z$k#NPLqnut?27$=&`m(Ea*NpoK`Z*mS(S~ciJ|TD1@p3?E1mEGz*jc#)gWFJFG-zZ
zEBgu^Pn0@l<&RA$^JEFH%T$IM@|7jZS5RCZ@h96_d2xt9?%AH?R{-pfFx%lFZdD^c
zZ`=B6gcLFHhs~bQftRw_NN*vo!Br_kb@|ub0}J-O#xuX{nRgy*mBN~xsSOh{nwWO!
zrwgtQFeiZZ#lVIXm9lR~!Z~KdvC9>%nS&0sho@m|q<JoNO%lRI`$w8gW@3X&1ST8r
zV-$D+xqwa0RDrZbOeHS#Sxh|hNl`UTBPl!@E9SssCTB9tEUn1Y01+hXeiJP@5`H^5
z&CLlY+3GP&EN}&X2r+XVb6{(tmi`elh;z?s-kQLr)Uyc}TJ#o+>E1s8zqaI>SIOY)
zKE?yQ)c-O0pIT<A&Fw#)+QRLR-{ydX-E3a*bo5URDubNI9YU|rk*P%ym2=1P{p%;g
z=$?GAh*?@K11Y)Qgo9YeUerM;d>b`*5^M#i?x-%3mgTgy(e~p!J{PB6N%XwWYoeci
ze@wd9JLfPu1~0R5gNX{xwC-!{+lVvhT1Jki66+$a`rmd8pl8ba>}Sik|6epSxf=EC
zvy=JU6V~BzK3+L-f<7EqE98I%Gu6h+5Umj`&euCm{LC`s5*4On?dXp{PDQm=KnZtY
znFN`cOM@=wx>e>z`wte8xMraS=Vi>wGqN34QM8H|*$2RWePFBbyDjG8+P5!ki))b`
zd>t7ls3aBwbu4Gb+Os4#OX>O9a>D@1PYq8$TZaVS)HroA22Vhvuqbr<^#)sU)6I_(
z-ojWw``*a~9rZeDlRKTh+9s+`i>3go)57Am>R4r}aI~_t9fgk`;2&QpDIm}GtvT?t
z5f_aCWT`(znpF}pNgC@zrdTB3d7u3k2B`bp#uuE84=9rXvkB5k*MazLJD_v|#!6nI
z$7c@i7+I*f*yk%S>Mx9JYi_&%K|VMAl693uRg-w+l?5TlMoWBxl@r1Sxr2m9kB!nd
zXcnlHVdYuS9}T9d)qUlTK?_NypR3^Y(v>&O8yaRLIwD1_FtEwSh9yliz`2#nvlYWD
z)jMXQ$eS?aYLTwHs2732SwfyYc0%J3A*pvWDTS669OY7ze_<`!qtzv#6=9=kqWXdJ
z7D0lQ%R`m6TsFohJGU&gxUrBA(w(`r%YX>Dz*na1gtV{}Y(fv2>3n}tsp>Si4S?zn
z)0rfPAFU+y9hnNiKIFDhoVOd)=6<ya!e!QSQ8!~Hr;;Ne9O?@PRi%xjc&1-&V{i%2
z8Ou;?V0!e>3vqXUZrx%3q#7k*(L#4y<naoXJ7NaZ^UYk_6+ss@QT&Rcg_4SaQqrOl
zjb+Ck3xi^-G*xB#yl`n86yS$sANsix`DYBwTUK|V%cNPkXctTaM|E=HN}-<+iZKxN
z=_3+*9p6MAgR!cUbGgA*>>lFFe*|+N$xkudbyfD@M!h#4_?ht!eL%6(DFz-b#+CZc
zaZEWU^-)A~RCKZ;eBxooEI|TmP+s^}f$Oa5Ow9m>H@4s&<kAYE!rFSXsZ=TYd7Ukb
zZB61x(j0iDCSv+GljrqXfY-$C^jf($XY8^_5vW*gM}$EL|0D*Ds-Pd|!mA?Fe@Zg0
zjtyiej%S!`&=l03DVNa(uBMLw0RZ71xPD%bmdEuvGGl_#9vK%SQa;716dS=vzybC#
zi%`<-R#TI2{XT{m3}kIT)D@rwmrxli(7T0<8A^Y`X3n%bKtqHMfR)@kxgUer*XIlI
z#n~DwNHR9tVd<%&159^^IGU#)^Or)xSKQ*zu)G3AO9jFk^IucJP6=!=l#A1#yQl5{
z^2sT%3X5&>uQH^$srM&JnWHQ6+yzjfbuQxl{Miz?ar&h49?q(i8!p@6lVUiy_}@hA
z1CGg3B;ay`fQVfjG~P4!Et|%4#aX}K^@ArOgx1{-c`opq$A2S9F(E?NH3tU=ZUz8^
z_~y+(rk6e-d1f<fFJpbBCLSFe8f=Qr9Xe;xLYdG$o?F0YATpIhs4)tLoAmhhK*seJ
z?LZ^9lA<tbW5LMDtvQy=vZ*0o4Xx6S@W{ANck%ZKk#&xUdl5lvK7rDTD$5fm9Zzkb
zIgCw(2?h{^58U~A2;z8aT~@6caM>Z`S3(vmDj}<HmO?H#g<?|Zd)t|GI+I>!o1l_6
zQ@K&oFIOgG$sD~GJsj{?!v6;$Em?0EvqUD3h#4q!2hdX_ZH1a+@euVaOsQr?+|1Tv
zx2a#c4STgK=&qoxam;4Q9Xs;SzVYgIm79vgMNQsMR?fmu5P)5X8g)_^Lt@kiS+?5=
zau0)~QEJ!x*Niu%7$_WaZszFM6!SEnpNxF@nC!T;F0>b5-F<~<I~ckgB4oBC83J&j
zZmY@=XOJ&)3Cc^n{+gCFAAz4*-5z)j9Tk@4i@Qw-1(zLVW^V1-^)+qB^ECC)%IrYC
zfp|*6sB2rjC@njXu=j!=L7;$aP&!d?X}T1|*-6r@nw%2m*w&R_lJ>htPLd-tuKNVN
zNkH)W3@&r-yX>EG3{n{Fj$i`|+>8fQMZk)_&3ErB1*Nz|1n}~k875(2r6?YKN9TKu
zSj1#f_xX^8!@UJKV5D32PMg`EGB_2?k`?Yh9Rv=y0{uw9*LXwAY2*LDRiNkMp+o0`
zlJOJs4rEg5oS~;1H3PIRC2xn23h{N(=^d@K{ss{PY8@y2(^9(48XS;EXmg`9`7cO*
z*i;8svxGA(X(QaYkBJXCYn8&!h#h3G%g}YP1@^B8A>6LTC3l=%n}WX-HCGnSByq+C
zi)j(NyvE#VJles)+QglO<^h##!k1>pxI<{rXac4v&ZfvhD00&$(R{VVfrR!4BlepG
zEPXFf!TQS8jzQY5bvX$xnPf!cw@8q*w(hDstMv|Bq^^ZsTx|5v9w%^M(2fHa((m1o
zklcQM1B7czy<us542;<IheBn9i5e^Sjd5mh&UACSYzmi$1q7n!S5vkopSr(Fj9N&p
zV}1F+2LKug10MrA&=6TJA;djB6g61Cj}dP<*?1*-aoA`>sAP>DX1-j;jCXw|_#Ji&
zQvFX5=jv*-I+%~&#v7u>4{kJCu6MXZZ)!?nZuyn*YobEKFI$~zdm(VeTwJgpu)wj1
zk1$H2nd?xO6r@(kSfxSkks|3xIT$i9PeS{}3ZFo(OPOQl@VKt$&*u^~zR(6Y#r#8l
z9d`krJjs>OuG$ct?gs1vwL!76MuJ~Fnux<xQEr<ESndj@jrS&ci>hC^#!Jpr086Lb
z3H#aiz0Qz7u4JiQW4`3t7h^p65WpPLVY~*1c>+2qmguI;DoiN8MCesi%-nI;F&@6v
zbAC5%q@0C;iBN}T$!s7XgMHDL2KD(MpfJDA{uO04yS_UYf8UDvv>Q_5q2xh(-HnTC
zK`mIs$V$2gkmlh4nD+>oS!}MjT-AX;4aTEhZzD!%kUaPtM19GP%n@(aoO9XPTHC0u
zmbEQQ-pEeb#+9M?cCzbzGu)7r)P93}B)BDyGtI&72gr2wirTuGrs^J?#grQ%*8!xn
z%?7<Vy8JRoSFm&r?Qd_t_h3^2nJnL}PVnlr`cmR<+aZv6l03wZdd%`kDU~8LgiFcp
zu)XuZ0hlIu&)J+b>ORy674BZ95=AVew(HDx=7)@PC<R@>*p+p2w)oWi^)|X@?nPII
z&C}-v?YR8KM<!mwsBwd2-lxGL1ayBAEu=$)&T{Yzyr)LzeoBE&?os?*j3VN{fo;^_
z9GaldLZ_`OY`D}GICW3H!3Pa_DZTMWd!pK=NhhA>)Jr=54$!d>WZJ(?vgr5h07U&(
z6{DTb4jHkeok22-{UlqWZl7j?#{;l!7KGW8&dOwHsG<Q<UxR?k(iBYU?}`F6^A;ok
zSjotdTThE~Jsqi6nUJI1*!}pB7G6N#B#hn9edvt*X0<_$hgAWSxVI8=)61$rod`kF
zcD<^N3|P13PJjZar93X8CqCs=$#t#`Jy$*S&r-Irw}}?R;t=sR3dRE|A><<N`gr-o
zhMR=ZzB(X+$LJ#PfQ(H>FjLUT4-j&?_h6jbz7SkPRrEl(JXG&6T+WF<GaI<n*r3w`
zEfgFKO_I?tv?zx~ze1YN+{vwu!5sN;wMmU13ZzeT6cTU*Hr4xp?V2PNNDpG&iG3HT
zB_sxv#mP0dQ1`g+Xmwj}=N-_Ncv`WtL9f6b+pV7hD8>U%fWZo?WbZ<tp|sxys9pSt
z%?Xvm@VZ`=tSv{;k>5hHNnvVeg=x1jx&<7@JtEidxs=W&LS$O@Z?u$`E-Ip7p7)|E
zx4S#UKe43#S%?B?!m0qFX#t)cm<h}VeX@@J-HJ_bSnudTwXKaPcXV)y*Zd#JCYhL}
z^e|wvK^!eNi;FCN?@6@FI@gL9uyQ4=U$gnDY@y161<$3QR#=@1LiPuRi@8-@e*^T=
zpS+6)fV5ADnBPLV?#sI8!1|hW>6c565mA$AEl~YD?cGXVFq;o%ZKcVZW*C_w5w$b!
zNB};Gh)IXwQxu);)0Z9MZ8Vb9o#`qu=`<&(sS{<a_;4W?Gw`jwIRLsW^;5Z@MCh^@
zHI;JfdK-*+eaeT8mmqVMPBC3J&@Q;=_k&qD(*b{+M|BwcfK@6BjDbaH25QAH<MHYX
zi1?bk5s3wd!dx=9J{_)Vyww;Jpt!4cFJP!*t4|4&eDQUq?r^>{5?zuHb?L@V%~g90
zS)~GkA_B)IB6y?rY#i1h8NAFM(&pveaYyf>8G5U{xA`li5;UV^N+3a8XyWt$VeX?@
zf%v<BuNLJnT*WX}klxe|Sw06!C8aoj9t~-W+x%bd;MWvQrT+9+6XVBgsdwwU+Ou1D
zw4f#0Oq1l~P)9>K|1dxCb}@ypyOJ>dchxl+eac!AI7QhhZ>^*Lj?}S?r+TP|BC*#%
z%BD^o=KQ-mJeysJlW$jkMR4+gaq{d;#$hAkoQ0PR+g4cm6~l75W)<yTL3QnHNJZ^b
z_|<%k!;m#J<RPh8s|j+^THk%`3VW0xn^qZ<To>@Pw}_|oxHunef2XZ0x|Jcw;Ud+>
zRW3qK&rvMKdYtGb$uT&XoB@8P;rTR(st4qan9QG%<FJiijn~~2z}64p=$zvPI_tHO
z^~QaH+!7yR<*LKokU$Ag(`b*jhh>d_Q(=z$b!qP%MRDz$Ug_7HvM4(XZpnWyAp|7H
zdCNy%F}ML#0~Ip%zbJvFS?KHMe=*&8wS^TGHD-<|gZ67d)&U&Hz!gBF#2Y!{Qe1y(
z_^bPomcu(tvzg8-7;oJp_8K#&E3+IvUUNSi)i8Kz4VZYnd(So5{ywX0OGXKF&+O}|
z+3<cX_YpbCmC{>AUFB&eCxK-|#)|54-Pi(M`800WB$DzMH{8a*AJa_BS3uS(-8^<b
z3yg~&H=LbBtn0{p3suHW*$_|fr6C5`y3`VaGZhxroDf>Q@A*2iboUihZE|_^i`OKr
zulHGSo;MkR<YPG>M^xsZ|IYmt*t9<kKG*aOvnDZzUay3X!mokuSB!tZ#rciwNRAYE
z+%<D$!R`KDCMC$*wVi_7%^_Wo8wZf}>wfOm;dBW--hTDVH1!l{8J}pQxbP&CqJ~L$
zKY}=cfc|lcSqTY<p@tSzC*NI~q2;Y+sm4N1zh1KAp=nF7;3`v%o4&QXC37H>!*;QF
zg6w8ItiGMpj0*t@#tE0h%NoZs$$R~2vs9(7{gE|-GgLQ5qmo27$jS}q*nKX|kNY*I
zYM655-V3^$|6IW3od-iI6aS|0u{S@a^k9k9*mvD(t7{};AV-7nC&H3o81NoL-E$)m
z<HfFyOK4*iX;F)C7w@1*+_jIl4k;y>S`umaBh|cj=3|JR(bV3g4vNn)oE(KH)42)W
zstig6`_Y`*!%w57sdK3MI!S7_H(@!!`)`SWD#n3hhfplUni8RU8A|7M?%9NwP=;cJ
zrb%FoGdcb^^p{|zxb^Lsa<L5hO&d2>H%3#yCVF`dFPPs%P?-@}4Je_JwcXnysUJ;g
zA<6L~e%MG6*%<q$11FEki#|cWFZmRDFwIxK%KG+H-ztOs;hG{z>5-t-zJDn8In4M*
zg|2o2X0@;VYL5~CP)zLU0{6)=gf#Z2*zlo#j+~{ggAR?NB?IWs?eGU2C1oOEH7_LR
ztK5Zv2R6!fyc+>(5DUiUBXAI&fS^i4N!$**mxF|QIV5{A9w;QG{+wnL{~fwS<VwC>
z%*Me`@Z)yeKwF)$L(>sbu`6s0pGQfm0mTufI(wf`XLroX!P}}S36MxoFiJkUMe$fX
zB%jj;6%Iw<fuIfmJu6hl_A#cS7jxmoQzY$iY_X~}AU`R>wC&H6>K_^{BwE<&kiR6e
z9g9@mB3R&A{j4>Kb;!PmmJmi3b9K|2?C5bKIi5`KCFLt{^0cqGJ5m<8T|kz{I@#r#
z9`vmn$AnU~k@)<5q?X!(FskFY&EomLEr0z92|`G_NOz5q(7Y7v11;s=xUmcc7w89*
z`bIxBz2{mG*!drBERGORwx+Tf5^6hq8=3*?1}ukl&iSoGUvYW8H@4_%r@pdd^F&;_
z`hk<4Q-tR~Sm8%p(Av{WGqY=G-|4yB2~BPHGs<$j1VrVDSsnAQ`3_V4clS;K3&C&U
zM(PS{4X4`8yOyR;OVy?_P6C2W&KQ?&*YDKhLs@=h$YXhne1!r0%Bq(4NjZz>@@8nw
z(q55~U8+iYl}BWpVi<8^&L4mx);5r3^X*dD0P@Dw$;%xECWo{*c5%-i;Kl_r6>u{G
zJ#xq4BvbrxqPc~<*Y{A}mb3C;$_B7y^)Z|Cz7=8(bPo6zgZ``p6$*qYvKSDzR>%YT
z-72(3*tNjripI%9<)FdRVrI1^Ov9AzbxZ3Bi<f4ms}^7_0koXf6$>+YDbN(22iEJ&
zoj=8{RPkne#dCs?Ih#~wJTUfF4^a`ove{}_DWs?p&YA|p^Sgm|VFZW&+edyUmoE0O
z1RsR+)QOj<?XN*c&X9?P>}T3Y&*3nM4W4YUJhB2OaTApMatoO;8wxsZrbl-m!kSrb
zd(z>zWpV{0JtlsFiI8bY@BY=(#Eu94Iw$h@yW*n94h`kb{(ha1HjlGpx8jtf^e<&~
zv@UVY<`nfNlPd?k;7XEmXc&9xoUY1!ki;wG^86AG=)OVO^z$m`Rd@}Ds?BvC{nXfO
zLmG-w?Mx_JH<dRMHCR_0xsmdb?R3ql(wVUdh_+eT&iR-t=?E`!=32Y1hXdS~Yv&x+
zZ3r$PC)LcF^(hHsC4!-0+SoDkOSzbzt!r1dpi$=eK<xT+Q*F#EtUZxoB_Go?wvp<O
z&9yB~tPd73K@0yyko;Bf;3$@EV^Kys9)EI<#7*r9dKrZC!W3YNF#e8!@$;#er)}!^
z$VlC~_T*uf6E6vuZ;kC30ZctFphti$I_DvmXvi=GxX4bsMKiF9w%MqZ{@K~ZTn`l8
z-w(EZtjI&6zJOD4pWsLs+Ow(AH!}l)a=R<ze%v0b_C!JR^*>K`c7?k(!}6d@U@9q6
zgYLTE+9SMyaM?G_8oHC)y{^uC_Mi0BbjKr2t+}kJ@1oInDcXeBfim|IbWBX8G5T4O
z^Aya<gfIJP<+Tt;*$HylT}%3wQ5$fnOpYD(&9OF`C!1LY{b!y^T?j$0DUlh9bESfG
zQ|LILv7LI=vS*08sh?NXC}Ye$G?@Zkq?7OYTcG>|P|nZ9!u#Z+`OvL_{7^}3T(P4D
zxI&2#zQc{1!)j2X$n0-0vzFHcgS%!1=o%*V%JUvDr_JW=C8bV&$@HGgvIDi?+am*R
ztth~!!F9Z~&ZltX!i|d*Nzmws2VPTH%?16F8F5w@ui*ICWt?iMv<{++YopokRW<;}
zcNh&!e84c?BcM78s?%{~wZ3L|XO0Qgvdv8n7O`2$hyQudvb5`(pUzP@<|XFam6lIR
z9c2kyRMSJ^-0_+(A}h4iND!A%N!Xq-MRLkzzHw$wI%<$<&mBDBslP1kyIAX>ul=@5
z*S8ku@`*PrqtDJv$^8U7O9KZLH+#CdC8$$I?-0p2Zkn0UO3HK41ySA|Ila+yEVQ0{
z$2qFz1ZSQjhgX23TckP*SIj2%z7<wa5EU@%xE_O(DlV5thDKa5+tmOcM=T}G)~ba#
z)7CGdxY&<a()y27<+Tac<=Q`2{m~Z{5UX3cokR#QzdK$8?cALVOB~pA_|bB03=Nqp
zT%i)F#L6<AdBu+hOeI9;`H1=PdI^r{1_)47{tU#?`Jew#PaAL0w}v|JDE1A-1}@;+
z5g;RLV>N_xpgEc-w_pFH{#O-=)H`pOw>sfi5M`bhmyijxAXbyYnq<b|v#Rc^m$9d+
z3xHY~LEe|ENVm(LMwrwT)JsQ*KkHh3-tkg}PBI)OPy<mK5ZWmM;Vk(ntKhZIwA$4|
zi<zKxbDC+uKDO8Uv8;fa&?CZ{>=53NHSrrCwgEq|f=G0X5`NPXx|MTP#{5%K3V;Zq
z1Nq8jF#L>nSFCtawUty8DPFV#d-HIiNxofww4#=F82s;%;fq7}_7IAQSc9Ohq^atN
zH@s_`RU?b~D=Vi*dzkA5kgdh~`d0P53A@^<@lnToHjMA&iT)+AzIc9AuDi9a{aa$e
zY4C&R<{;)_i15bz86b~^nIsop;X-nE>*Qa8auC%S09y-KiNQdY%15-`H!V^;PGp0C
z%At8}S8jk;3GTTc*Hb!cy6fGg&3!8LLk9Bwpig>z;Mfv86Jh`o6AvP{%;Oi#(}ji}
zCZar;`_?WaBY8e>O6M#@;{UCa)sv+Ec>|2*MVXu7F;}*UgD6w!X9ZN2Q!d!2vzG=3
zz-s@j1kg;$*IPH8ezO`^WEUdo;;SWEmVJ=*C$StIBk^dSordGRc+ApYhgy2#m0b2|
z_~C^(D`i7}wUYa+L$tk@%cEE18WoI@k6E}-avUt>mYc3&9;OonLt%ty2xB`2w8#)m
z!_F$V%E(DNE6wwqXC-Bg4W9209>zCLP8S<m(0xH7)TCPl;Rw^?qI|R}j|Yb)A$-W5
zJr01(Vpr8B&PG+pJnyd!ZE}lsJ!pfVPJ@=b!<QZ!E#r9^W`64snx?xQMmZkreM;L5
zj^A$b@?a~^&1hytQ%TZ$HB|v_*7Ew_8gD&P@E6w*=6OGgnP_x-U<RZ;UpPuLs1Ks1
zr!c?mF-Ug^7%!fRw;h4+pL0nAxBTysIC91SA|KU$t62dK4~-r2O=>sfj*bLh+@#yp
zcYm$e?6&!|zR`E$XG9)j%VH7@%Af)upIwh_pVFIizTdW_gpc8^!|=WF<1*yB<9N;4
zIw#%UA&-L`npAg?lQTq;Jvgja9@x=$MI`8?IF>*NfU1@U+I8Vyu56eT5FLvHc;RgL
zTAcTu`^e(RPHl}fHeQXJ0>CRC_&8PJol`9@`a}*$A3pZRUEg3{MroCPdGgHIDRM$D
z_zBr^`Q2%=L}X&Hia`!W7a$B$7^akJLhi%K>Gt1VY3s`}?v|3$|8pCob0yDAz95hh
z5v5M{uT0^EaWgu7zmCK_QkK+mQq)B2Xk(VL{hQik3NU<3z(-iFU(vpS0fWoX$mlUK
zanJ&6QZm=?&cL-*K`J>e5r!+vzOFJ<U-j-|Ui9IXqPCJ>LtI9NR5nGw_U63Ep0ng8
zZlY&aOGCb~xb`cB3r~5ReRk1LGM?0C2ou{l?M)&@R1$%N@(k&Z#-WeWIJyV=5hof;
z|M4{ngMb$N-{owE0q~^8c*Dq=bBI!yS=(`JcIvBRMv<^l*H?E3PW#fZkSSZ=hH7kL
zx1xgKVEI9AoBB;4YGvaQ0t(JxIrOCedkK74Y}n(n5w485dcOS(v~g06ly^e32m2g<
zrERuhrO<wj9`DIK<(Gsrz6EeOM1<KTHzo!#ZQ0mQ+y4_YU8B1XieM`!STI>r0$Xp$
zBm7+d^&Rk+ujx^Y#K~c9vht5a;)MK*9YgzcMd_LjJN$v0?A*@|ukBd3j<ds=IBbEa
z`mxvyc$&dfVSR#U6+UqAg}l9gn0#+^9KYSf;kf;M0vn8*tyo_H<(f)Ci1Q?!BZPU|
z(BVzZs#RAR81je(dKa&AJm25}sKC#xO!)5+0q09VkNfdM(O8Pw60sP^`8#@Mdw`sW
z8I5zE^7F8%P>8KfTp@s2V{AM&C?y`e+6@bkjcta-(N5WCA5@qETO!AW-){Bd$SqQV
z8&78gt!M7YYjz6Fa3-GK(Yml^Tr(n7XT8cxNbnNaz8|`1RsirI#^5nKei0c;EdERZ
zkf^dz4EEsM@-=YxA8_Flg4;`3<CNv<Wn5;WSs1Xl*}gldxJKn|G&`xE$}!d2&VA)<
z2pzv53)E0-=rk%8v>HI<S0ff8B@5-aMB?tN0b)S%n;hnq+*lZ2Z<r&E0YKpvbYx<m
z8482f1DQ}Wy)!&T(G*Bl6QuQ=HLf0dks<3iU$J`3;~M_8D3#dH>WOv^zVz*Ac~s^%
zl*JweC-G5x-R9B61Ra)Chhn9p)1F$(7OZev%?08^b?ey*Te2xdGgB`Q;SE*+SbGbZ
z8keR>;yf=fux%ojUJ(#T)Hzc9M--ecK&zt-FG1KfY`p>!ldiD&d_OQ4Bvk8MP)f(l
z^6q3yz($D^Rjxv_?dzXT8O~E`&<Jr2FW+3yF_kvTkAlhSkBeU+N!DroqG_rZb>Vqd
z{&adz3ubSLM>2pv(RYZ|LI}BK0f{pXDtlw&ZHK@K0vMYO{<L$q-q6?nZTBFtsB@(4
zbZ_FYo~olsstH*@a|tKFKFpqu+;368_Urz!dw9)0C6D43d0Kxpc+dP!X{<tqqMg6Z
zuuGgI@T{C}4PEowtLm%2DgJH;W*865Zxh$EWVEpjLHWk7w^bcM-vw=iWD>^{)Pe*=
z<z!NLWUOc*DcKXHuMUpTgd4s<3n)miPM7$FN{+}r`xGpz<E=#70^3y8#g;9~nc^D%
zz%%RNjkvn#S7vnpOQmP(p<CR}8PIe8M1&3{Q|a48s<r{|(8DWwqBIwLy1Zcl1mDD2
zmxI{Fm$zpAe0vOWDhFvaHCpF<Y!c)~wyR*Yg1+*)zB+mqbiAAsCx($tlxjVXNM64S
zg{7elVxb^nzyzRKq71S#uNBfEkYJ*pT^G~HrrxCmu=t;13?S}dK;eLw<5TG(M?0)M
zNH_PEaD@xSF=J1zRhJuVM!ESHlUM`-%vfi*MYI4ZC8TixPUO5cdk;sD8V<CvA1riF
z36Uu&_>xLCL&h)?VXqFBMdO;iCdi9aYxJg!`(rx~LEVRj5ac$OH0uM#6G6CU6h>5l
zDOXd54P(|vwwJZ}n~0@k&PNFm4N+sqWUHp2Lv}$*_2=*F*U>i-eLB_`^SQvCHI9$m
zLnh>wlV^$EB|7N~s9#=<Q@>-UsTx)BF#!p+JI5040~0%CuGpqV4-)lmbn=Nlafa2`
zl&gamgeWqZlq67Uw-mDX3d~mTYVGsJ83zv!HhKy@IH!05Dv22GVm^})Y3Zv1N7+or
z<_FSK@Y|z&iiTQk(3jT-2VI8LQl1z;O-_PDzm5KS3hHgL3>MJ8SGO7&kRW4C@Q1Ol
zY;U-V>2_b+fWt#>Tu}_4YOh)A!Qn4Do3GeMg-NCI@-{v;3AUC7)8*8v7cX#wEd48y
z11&uXY!fJP^mOI30D!w<%Y<RL;4LR?Gv<s{VIZ?(Kf5oBSv{-7#Ue*oA7x$0N+=iy
zQ`Fw9g!!Xo2~_N#^<t%_*io?8uH$iO;G!V_poQF5<_Qf`eDyazmrU{P-V7R2;Rxe!
z^tX(P8IV=D<us1moo)dFQizacM;~UP#sFILA+OLM3L35Mzp$m6;Z?`3yaq|0b)N1A
z`(;rt9<8mEgDSn*m3yN8fae*1&dE~4y=y!jl(-V2;w`^S;VHuPc7%nywuqSFdXpne
z=4zaC#1O@7uGN7Wh67Q2r{eO~kapc6Sd#^n`T*&RHS-o~tEM;+WqUyEuc3(%dY8%(
zi$)_(NXg_cwLy^uuNZd*oz6;*xA<>p15hOCO>E!<_>Q?OWGCV>Qpu`AbAgzXDpIK_
z{NOIsu)+c(o;1z;{k~04{5a8e`L0qvcNnO@aOgGg%RZTQIs+X!2V1B#z%A9V?v!+=
zi@8&YtKRDhOYX)RB*j&Oo5h3NOXv#L3f3+1CZ-hQn;F>X!c5O*6^1ycON)$8a@^u(
zw(4{E>Q%Okr7Wh{su~F}Xl;YyHQ5$x-730ngF}grE)6pgqoPr{_;`92k}TIQQQ04U
z$%V^d9Y#l>z3DGB%}r5ENZ?p+A+b(Y8|e)vT2^*!utuf#A+h)%m@KIvT|wDFWMe@(
zA@F)sKzvLmf`cB=<K5o-($JavfH_#kO=ra1ayf5u7*+lRf}@}WaHa?zSW{>9S-ov{
zISz$rtie3R3D>GRtLwgxFv&;-eMnqV)d7yT;luP<iQa-C2cABh^)AX@q041H592k&
z$1x=y+2U$%Lg2UJ7zT=wTk=tm@$_$9ct}z5oKt6eZ<(&O2*E+pgPF~w6?B&S%Wora
z#|G&?2q>{j48VGd2sf}Szo})o^n;zme3`rCuA2p{$qxsTppmv&Lydc^1%>a~RaaB$
z4Y$=$XqArc#Kjk9Pt3fU7JrM3(v^0}{e|+34|Z~-OU**2Wguc2v9>k+dsGe`Tf%zM
zwS5}1GoZkRvM`c9Q|uDppl2*&F%iR~`es40q#?fi2ec^-Y|8JK4@gQ@(a1*$?LVo4
zD90cX*SeTe_?SzM@Ud@|AI>j(Z`}zu^+#|-i+{xSf0i#c6&T!bRWYAXx`X7&jCM2V
zc9XRQB!cwaX2ggG(=BYX!Q$0?+AUl){?=&}iJ&C|hr;re#uDf3(nIxy4NgDXh^>_d
zYt53W=BJ<b|K^LEp9Z3Mm1Sk%P=d@FMW|c>vUKpKnRnThes?OFaa=7kd<#a|<Tpvs
zxPe?akUjNH!I5b%6(U%2_#Ydk8LEj*1lNL@>k;n=yFl=-G0j%0`kC~8SN--{h9;{9
zfVB3(Q$~Tc(JVx})}Co}%}N0B8|obI<_ukt@Z?id{)3!mPe#gzwMx=w_kbDGggg0b
zTi0eF8;fMAz2gpIFa6fG0l-)f`S!<E-id20%4wA`<%|J$ottHi0&qA{S3IhY^tt}e
zs8s|*Gi6$xxPVv3=N-!?o?3Fi@z{Fd##+Zz?n6-84<^r_fU!W7I5W0l;hMI}Sy(ps
zmN4r_*ZF}hy(Z0&;YQcTVuTtiqX|a!gT?WP7)A<VNe8G9YnQ0b>`6UQs=>Vbm`L>-
zKl{orR}aOQA1~8Pk%B*vQ#7lqcGs%pw~cM=98qQmt{7C4ZBI+EC=*l%Pm~VKn4p1)
z%CRH?`>3al-_OtO=MH#Ngd`DHgfb~5a@a;PH+j5MA#!<a(-etVV_;ErrZgy`jCnZe
zqlk?z-9RP_<T|lOl1pxp!)~Ruy1LiyEstS(*;I&f8AmMI0w3O}vb57gH|2Up6#!Uj
zq|9<p)74Mw?W#V%>WDq8Hjs(Up(gCJW+WFjHKXPY%@E^IKTYpPIAhEF?2+*7e?n!f
z8;Zx93zZ%dHMx8ct}V2bLNobv5Jxo!IIW$+lrK=m6D9KQV0q&1ZJMVT$6i+tYz?1R
z5pUvrLhSw9q^+3xVCXrAf9(YewZ#vAV!S>!%>@OHg8q~fzM6czi&;wCdbmy?DPn5D
zL;!C-$Gu<haWnqJ?LKAY*c!QA(8KAxHVD5t!KbMK9k0+ZZ*C7*WXe2g@1ZBlAAevk
zTFh(^=m{PEE0N+iAMXu9Hh><Pbz0Tum5s|CV6iE=co^M4z1Kd&k-xZ;Y0@_F;N@Jo
z5u@gra{s_NEfQ~6`hruRd89zW<%1~h%PJfP?+!wrtvmq#KLEf`j55rpzfDD7Ko8M|
zv&KP(B0%5aTOo+LD~o_5ZDVhTaz=HaO7r<4F%VCW_B>23vn0cvJAb%HimYRWLKs`T
zLt1>7A;&(h(os!PnPPkjX$^YfI>XmapkZg1*2-`gP7=%4r0#|>p1b#IP}lqi_%+Ka
zu@u)QbW@n+Vq{Zk@q@!ge$6ll?{3V69_)K$SRm`+*Rfb9S}zlB+xaP)K{{Nnd$!S%
zJlatdVw;@!AX*{LH9;-8iVwhvJA`~aYaL7Y-J6Hqql0CwC9qLqU)Xce?I`s5^#)mM
zE8>z>A#L!Zrsi8T{=z1t0j)H@x&l+HIzmlj`GVyf0(C%ld=`;4G6%UjAZJoA=jaYv
zmc+-G(!sL2BF$PSLg@|KTL*pfXm{gvE+bQdppT+Cl+|@M5bU`DO+sA~!|9cFnxi5i
zFTce5Q^CZ`$G)(kfL52JF<iZ@9I`07CimktvPhgbH`bd!0As2j|FR${b+n2tZJSCT
z%zTcP!k9vmPjrL7uy#TnNP&76&;>`$VRhn^R6@`IdvdVIVhaCnL)QimVT0Y1G1hm_
z=<5umCLqUE%>L!{7%tf*LBf~BXfB_DCgkLF`@8)Onx-OQ?{f47`o@_P+|qPIT6?Rx
zRhi)^;#DIaSf8+KHS0O}qv>YU9zTEfk@x9QJd2h;K!4eyv&_|<kS_s8mL<N%fZvJE
z4{X~cC09uuqq1!&ce_PWr0f}_**LS)N5i+t>>AVs$D!{CZ)s53nGx)-hVN2+t%y(_
zW**9Hj7oM2CDFv|cQD;>olj<G=s-E+KjYsSYAP5jLq>>m#m+B)-|92bZfDFTZQ$v9
zF5{-hPEdPKM_7o92gr29`gbQ+tAhGF-pi@MQKWZs=|rx4{lLqncp@E~zWa(F7gD9z
zpW**9F?V8tk&pJ(rZ!LRLGLB~@{0_tgj}Aq@$-00`!94fX9<hzaZeh73byfx*e=54
zm57QmqR*@Nd|u0grUia02I6Z;r^0PSYX!Y07k5P@Ei{54gh{4AN$t{8LqZ*+aXf5V
zkjhLbHtanrk*-1EeA<S46eW5IgQt*&(G{W=U`fS$NbioDQQ_y;miYyPWd5LvnQFP;
z_UWz*oxB=KWc^#9`bJ&R)nZscwE=)8y-V@3pE283%Foa1NU?&ZSCc@>Vnz>2i>(QT
zpXg8xYAHtGC2L}pTA@^a!x1tED5YowkaYd3SdzCwEh#za=)y;QG$I*IAnOW7(=WNZ
zmUPA`Xmp+#0oCa1L_`2hQ2-Nig0zfLW2?j#(O)NHKo2Kgt$qbfDzFhW|B8quAB}Y(
zg!1RmxDV8uUg+R9JaTgMQwhF(nJh4oM@?;}E=c|K8|d4;aBcJ84b^-=n7NE}PBZuR
zd?|YE{IpCaK$>>}vr_R8&=1~ptj+h(Elj#%6Q#`xi^zGm-Ws!E<oj%WY48^^%{n1z
zf<eUa9&`!QeQEIW#c?6O=o-zj9M|8>JLRfMj)M31J@bb@y^|<}188H5msJh5noV-k
zg;e}>v`E^mwkxE2SkFsqz?p{@U-cZX^(a>0I>;wjDV$a|Mr%XF$vkqUWE@UHW{=4A
zVjEcEX#!43W8B9sXsKJ4FdjaysMut}tn_xXBS1KFz{elJagut|UjRVV{Ag`q%<v>r
zBK3QsV^}u2d@QtaBRN@a$Kd)Ru`cFn#<k!a7pf8Go2jRNcMg7?R<A<8qvHrdZF{5+
z&eN@m{2UR~541XHTYpnJ3h$2AkC;->fqh`G44de-NtNr+VAr0g*t=Y6K-bql;8_Uu
zZffPsRF(V>1i$^Y=R_?`ykeOg39>oUl{wG`Q!Q{-j4Wg)&gQ{j3wJEmfteG5db01#
z(?v?%Ffc!1$w3Sh^HJ}fXZr2W`IH2~G9sH>_bsXm4iN%d(j@w&V&jD~QD7v~woXJ5
z*d1ce+Yz)U75OJGVAm{<f($vL9Fzr){Ai*%2|*L*kUX1AA89=<Zn9DjPigb!sO(Vv
znPFVgo!!+?DD2n|0P$eY#2GB2v6k+ve2ccfbq_5I-=Q-r4Ft$H*k|l2Dvf3aZ69$H
zzRU;WOl1Jn+Yguh25R+J!?&CjxwxVced9lTTwv!N4iUIro>tiaA;q)PLRqD8Tb8}C
zL+^>3a=)Xk-N8|*Vdc*A#L<(d6u3@jaSM)KH;#Y+mpen0iw55Z2zxk6$-t-42r^*a
zUi2>{#`&j#y>xE#AQC8P^Gdezm}Wu}*Crnp!6cw_1&%5L8(1*e3AWkoI$B})r1*y(
zEFRll)4XGXrfHV#^AZr~W>6{1Sqlrfzby{yFt%*B;idayLX)=d*I~o_z5gy{Oe4qu
z$?h-VZeX*H>W|zH%WT*LZyyQzO}c5!oMY|bD+s}Lcdt$-rmo+Rsje;8>~>l>fu}_!
zjgg-|Yupe-aA1o;z<V1eXk03A<XNd4?X=PX7~sPU-kUl()2Hz-pRCy%Am+KywoY8B
zuie^8Zy@7-(O3kw#zdYEhHyg~0A*H*M%S`&CnD0O6G*R9tH&V@Jf!pYz=`IWB2Is%
z*r`+Oq-A6lvtT-beXtSq;5W<p1y~OkZNCRkblWcn2tLEG6kMLult+sP7_l-}f2Pk-
zcK%=ZD&8QWF4TRe$)lMHI(UoC1k`PNRtpp<FsmqVN0ISC-RKSYpt@G)nUrpTXpDLF
z_l$i9!ajGa&FFbu2tOPV5MM!r=vO>`IbH$ue`Jcx1ZtX<#_YK%G#uHkXwww5O7TtE
zCLS>5bG8w1_P`BOz{qUV(iu{>3NK+ywpaqrjQJk!m%&nBcd9v+$;Ky*_Fa{tU2UD=
zWh6Vtpr#Je7tpVJS<KY*>a+H?;jLrqbe1SgB;d9<y)9^mw;0>1N%8TIF{?~5pWLGZ
zJ|5G7S%B4xCAy3U+}r)=*|@;=#(T@u=j)tBc>pxoL>0@*j?>zc6A3y8$(=t&FcPaV
zU>%}xVtZc6BY3*wa=*`B@X!waYy@EXzK}(k0yrR)^07g|P(TaIpn4@ioF;M3eh%K&
z`n`?rGZ~=oX}`;-9I^By9K>))zk_?7XQy~zz1b3}>42HJ1rHtrVShkm$enV;sTrQ{
z%SJwn&l9z0Ej^ZNk^i1j`kNX*@p{cy5BR0KV;0!jEd0BnS(C5BfcEqn27X%^KXz9M
z1HeQA+L%4$maVPgQ`rdBC6XkdsK~^1qOR&SJXYlv@>GyFw&pdk><x)T-({^4ICI7!
zO*?paRK0x>b7eES(pMavEG<^&Hw1VG4AWdsGiA1HQP?y5^}IEcVaU2&?j~|&-UuL$
z?9TaO9^1-CoOTO0(lUDq0C+DfsvnemgEdTDIhz#7Q6QT;=kwpisktsAfhY{`_UWLW
z`;P|h2=DW|I;8g4w}cH{o_<8;hSZuX*HaC`ve}<4-0$zz16-aM!Q&Fvd-o>6jjntq
z%_Ri7B&BPg$6eZD5VJDLLn`!wUpjA{HloV5G%J;9eezI=9Bh4>wQbrfhupIXv718U
z7fJFm57NuGo<5i#1}ZJB6y^T_RO35~^rxADHlv$<XEr3gaaV@rt43~7ZD@LhTJSq_
zv?&Ol_tB;k#qkA2B{_<1zckt4wHKthoJKsRVr?foOSGhXSZF)54T+*<pVuu@xC))8
zz(J|Lscn{_4M(uC<~PdJa?t=dH1j%lJu@QG?kOR`>ci5%V@;%)oB3=q8ZD*Im(Ow_
zf0w8ieVGm0v5PDy?n2s#bn-DU6T>?v{7;+w5HGM2SP&@^OU$w|7F-rC&3j2`<8Ko^
zSm`n!P6exdk6C7&6Kys<WB+@tDZdl+HfSr|`y?7n%G~;Vk!u&@XKMSB!~M!|>h*}o
z$e|#4fu=|E>FhFvjB~~pGRO!>Bdi8!q2Y8uH$b`BtjIn{*hKd*`YmU-;&sCj_ZCED
zmN(L|yp=3a()IHBj9;1RLVulJ+~pT~#S>t3Qo7+4P)SG0iqV-N?+rf!R$Fp6-|`t3
zotNglzLVPfefhZXN^FAev{y&-E{f_DK<AmvXcH3rP%f%1BTf6r7~y+7G7R8PgoHO*
z4C$!1;@oNS<SMWM?7qYpW0-#0^z*`Uxz37b<cydlYF3jkCw2p#tJ;`Q%i%@zYrqm@
z!?0tcf8v!|8C-*$p8qx>%2UcvN&P71!q?AP|Aq`H`S{CMi@413sMUH;J4zhCu-d$%
z<gg2BCsDD_|9g2_VG4BEo@pBtesZwe#Mo$m_fFZ|qkj`=9bd1H{=C4%N89|(-h)sP
zR-Ue5$+#)2?SpJdBM1M!xD&-!EpR8JV=l*FSc)tI2B<{KEsnvPqhoI*V#tIN>pqOM
z61gH8p?%^@K_B<(4V2}1pU(>1<?z6@p9^ncI=_p-Uj|Ov-_Oc28G@SO1pZ{)2%Dvz
zNLadAJ<P5?kQ7OtTD~8*C~q071L&`8Wn`(?cFu#HZLQ3QWbzcq@OCcHDM;fU+0mgH
zu)sSdnb{gIyvz*JJMQ*dbEM_RtF6hz;zBV3mH?gE#+0#Wr7)dR45GAqVXzv?RCozr
zBX7v-h5^$G0F|>(IQ|r%wqxE?q`i|7@-wk1t@52=X}~@9UjP5{tlFBS*7L$mH{Z-r
zxU=2bb;5BL@*9bQYS{+#ni8<qB?LDGOWIEGClDGst7ERvbwcf6BH1*z0*&4rPh<(x
z!+*GOS4LSC8dj5!R1L88=<xbpr(Afh<US<M5dZpD<0uGmUG~QK1g~c!hp_b>#%t#W
z&Y_#|Gqj6aHyGrj4ol$~V@f6_svwQcin1dm8!W6!<v4y1dDrIH^RWp!tKQnPu#60d
zJFWl6Qym57zc}L#y4%N?*x@WM>BOx?d+Rps{hhr-(qP@IWXxT5e@*m@CE-{-;b?~-
zav{t277CZ>I+yUu7_>*US$o*08f0a7ZkzP|-)=19-k;tZjS$ORVcOgAgW!f{qa&c`
zRegnjBizZnaomTwq9hagzy%#4L*fxH)<;i4jV=)%rjF$na7GDjNjBnGF7sx3p@ZD<
zfbZvd$MfSKmMD!AD<8wpjuA{?Mw}mWpJ_f1cw)o4&2Gh<XQD>@o>&;kkmo*>cUTzN
z2z7#>U*l*#2431XJqdD~I|1W<mU6Rq{$ALUQyr0pBnv*JXEiuCyw94HG}gr;$-sLN
zl^8|zcd22lrA#iRXqm}UP1`gyE-NQ5Hm9V+c}CDUSaU7~GNO#}(p*j;YPNeml`4IL
z%ruoJX3&Rdd4Y$G<O(%B%0Z-}6his6EUVcoDZr}BjPJ(RigH!J$QoU{>Vlhp;|KR%
zZ%)rUd=eCCJonFq!a@D-y$8AI02)VfuL}`e<Gjwyr#ka7M<w4$mFG8!G3NKs<`W47
zRvp~|G3U?~E+$gA;4s+;a)xoVkNsl-JIBg76>Sku&wykjZtm}B0DG=nQuBjz{A6)Y
z9;Snf5AXo{PLN;9ZD)Fk=oXb0A={$vvO5O4sbjtC{^bw1*;b;K;Tsp=0G`nz{x@fH
zdhz)<dtxi-Hb0Xp>OK3U<B=28WSta2i)HV;2-iod0!sVcjRr_S{lfUEjZ{49R_~}O
zR94r2l(2G5s>?=J0k;qYa^ltGQ6E?1y%0o8htttNC0dzZ3dAfdk*!K!i%~$`et7n=
z<?A*gqsK*oSHs~)PkVdH8-aW9vZ8N46n`!K@XR4+ncrd(Hx7D6{{_>=GfbYeD6B2p
zz>8Sn_^;*|J7HX{i~_QMU}BaOFghB%8w2-;jCBvZX>V5}-9bjWY9LNQh9&cffDiH#
z+O{})G&r}0BM6acqXCE=e^Cdmzs+2+s7H9l0%0cya4ONB;gl~O(fZ@d6RLwv5Rr6b
zL%><7G{>_C@gcx4oigT;6(jAaDrXFaARskiA=|Hkf%rvR+v?WVQg9mSAKxIDSy#5P
za=OglduVe9pRTPhr5hnZcyt6J%iaft&c3FvO*kNZXKX2YN}%WkfSyY{7oof;63X<u
zu3RZYOq%E1a)2x;lJOKBE5qzZOrl#4$gq2b!&*y=H&P`)IA4_p4%LFTW+|qeoPS?D
z_}2Y<5<R9Y#te08ip~hB-kA5pd}o~iD_->wDuuTvunik=cLh<+<pg*DN609ITIlr&
zHZxe-sAwMN`7q}#8OQ&^PNo~uQy88JxYAyhLIL%x=Lr^5*4yn?)7}Mgy&&Om09aCA
zn2)Q1m5C110tb^pH=naKW%!z|1j9?T0d;vqSPElt+-W&BN08MJbTUw^S~DAaX{~nX
zXFwwtYr+SJhN#r$2s3eGE=nDeyB)gXS0gN=T~@k={Cpr|vAFnI)?n$O4U@rgxd}*H
zC2Vn|1tY?z4O-ybS;&dPNZzM*=44r42~MrGvf}Ws(-O+A8bO9Y^X&th1(CNF7MjI2
zk=;jv!@n`aV8XbP5s=A1JmT*21`G_%r|RldmEG=o;Z)w%=L~Pm0O0B{*c|u9(-ls%
z%hAz4LP>`~o(NDQupyD65ugV80=l~tx^}Y8O;qottKX%QgvOx1V~eMOner_7`Dr!j
z*w#&5s3SUVc-|J0`Ql9aHz(Xu+^bElT<L_O-<-8)ndtqja@PA-7!^<RNN{IwtsAMf
zHW%Q&(wHWtT7Y#xMHJoP_*|G8=~JcND=H^|^e>TX1Ezs!v;Q)ICQ|RJn~H(WNcq*7
z<nGySR?8N>j1*2M6IaU;D=@*|8Q@+)Vkw|KnCP|-GjRk<pc03aD2@d4VRXmwDhn7$
zoor`+IIO(t^#}k4Rw*^eDt7mINr1{2x{;fm{P!%RsU9OkpGY;jPLjBLJxS#r5QLAP
zS+D|}cl?Z9zCAFkNOXn*dH+U!LQzFlKEh?;ICP+?0Y)i=VUC-%3(kFFmo&K#I1QTx
zcg6^^&1h5t2tzG@m3udjTtq$0hJBZNtv}9ZJC#})bXYm_X0y!xA{b_&VO<wwdpLBh
z{gO`U>ZZ;d(S~(!*}qL$W*2>Hm5$v1el+nCENGe)8zRV2>Qw*EvH9U%BEhaao56eM
zTuPXMiq<~)MAaLuP&Z|5X-KW#Y*3^HAQ>bJgd$Y%zA<&!@fws4Xk8komOH^vu8yDf
z`~@P-5Uq#A>)RTk#+j@s^39w+TH=Ma9vPhH8({kzZH(NeiVoY%+~yz_=5eFTLh!Yi
z#>S{dTEteJB@^D`VV2tFOSwvvy>XL}kJgVSXUmElP8My8z|)=Oo}cWYX&(~_qzyIj
ze5aet$*5&mda>dJ8F=D??5@Q|0r(8hAqh-PZRBqsDF8d80)lA?h$mUWk^vHZ+`T1(
zhxxS>X`gZA>*Az{U{KO$c}2#&DxhD<Zo{l(S861L{h;^IT+o2GIB$xDFRrV8AkBs!
z$3<n%=AU^XxfZPa#Av8}v5k`Muhchr(`rwLcPfH9qA*4qt*r{l)n={nedfFubW}jb
zWC1Z<+{q7OrWI*Yw2l}(;6cqR?Dl<@ZI(3YgA>AiMEU{H3fuL0BNXz_JjkTnAI6d^
z`2}nO5g$2Oc_Qx5V~LEHo9^x=DR*~EyY0G}+?5abD(zQrErRo~kMC3{Vj4onkTjqa
z0$dEo1xq-=oG(AsWxRi{-%v^ZJ;AgON!INSJb>M;AI`!QW<~_D#@U0N(&g^r^DUxF
zeQ_G>hIh!!K=Wg70*2v*R$NTKrq%}5q&A9!xiirrT}CoCqJqwjy6s!(89*yB9V2mz
z-I%9K;4dzgy6kLm*`l>ka>1yu`h1br*C8H_c+oIQ`@_o%;<!*dV)riMGiQv^HZGic
zVn?&qqc!Hhb3`(fGm$17`FA$0+a|R3fRKBkF-LaZU$Y02qCGN3B8JIm%0mPE8}L7Q
zD^)i|dv%izDhzUWZ=iS8(Ww1M^UiNoli7P^-Uh35Ad}R}dN`cw0;#Fj6EA9(k(nO|
zRh8ye0P-#k{J(Gz$i>^Ge6CEL!M!=+Z4C-V#`;EX;h|(XimN_Ni9o9!UiAhzF_H9c
z-m2LRC&`vaUhv5K9WC0rnY$QD1L0xJ0?yXN${faUYj4l6VZ2}2oOGBS-xqE0J~C#t
z<ZuKI#cGSq07B~McY!wFzfuik5ON_`lx}6L#!*OMT4C=N*7Gs8M`MEo!2CxN2UAMe
zyAsbMrpF+%w=5=|fpu=lP-t)L4EyIm>l_PDJtOq#-IDILG9ozt;Ej=No#3GDa|z((
zVu#n5x`KWf+JZkQh)Jx5sWDrghnZVN<Dr7F@G!{scQOW28zToT&OrP9@`o3rN=(}F
zF*7%Qi7J~P+0-K=Ta-hL_rCr=ly2uK;x96zU#cMh-xUUdgYQySN}Tu}Xqg4L94`TR
z1h&k{i8RHVFH8^6A{?+_866e^-w`NwpWykxN+RBI@cic-csSzJ*nO${2eo{7<!TU-
zl-W=uYW~ewe}`3o2S7L0baY_hW?K`SqQ|H<oQPv=>_9yTj8geN7VK<-PO2;*rjNR_
z+8wL02AvgN)n7V@mY`MsxJb2qPGC%r2YeTe67RauifmhmdYVys$0aP$JpGXz7YAyr
zCvNCoG5cqh)C}a|W5bE0j2k0~s{d6)O=P85q6rkd$}<BiGMBx*Bc-iou<g@kfd|h!
z)p?ccEifxS0kTls2itUJjl#Vam%HZ95V|X}U3~n7zhkpzXgpyHh{aK>dfvyTaQ!1<
z9t2Q%A>&`jIMxIB%2EPg{T9DRkUf+?jm;MPN$NLE%3g-pNNM9cHk!SHN>k(Hcf<K1
zn=OnTEqW3dBT%#Yx3)EUdvT}0&P2ZJ7~o^qaB&#S4bQl!*aXLiKlc$kTvu^P*#_15
zZI|Lv(nblUPKc`6Iwi+TE1_uPotM+vc8`Nh>Qyee%I#DL`5!qZh8L#{nxFyr7tm59
zPQr+D;h38|+a`gbaELkC6<)c2i6jy_j8n=>YrHf{9I81g?kk5}EViwS{m0(2>`cWN
zK|JSPl#e|+6)b3-PA^>~ynKumt9k@gViZ@fC2d+KW^dMPjS5raN*?gEuFjkwwu=K+
zC)bg{Wm9s}C`@M-Yka0qolLEovi7N}-MF`Mm1a=TqrXrEerZbAZu*8?Jx8;Ljx8&Q
zy%|5Yqv9zqEwN+wH5xS<ZK<{U>jzQTcG(SnDI`bS@wJ@M?|TKA7pEpLyeZo&*6>S#
zbi2|!LrD55OHlur5TZN%`IMtvpC0$&>y!)X=92b<+yK>{CzWQMZyjAucno1-oKw5e
zQbE<{>L?>}c5`uo@HWErd$|?tJGw}%L&L+0{K(};#&#xF(XWRr8teLhP?}SL9;IBn
zb?l8qQX@rVS~I}^9;<853{rH_*3dt07_>r@*7JYeVSZMA>Z(okjQb?{%21$VSr>{c
zK1o@@MuH`2fx)q#Zk|4gE^NpUNaC0ueDvDuB0BTiPt!?yD`iUyq0AneWt1)kx-*0?
z&B+*~bRzw21;6!BNeqIqnwU_&C_O{^t=%(l3~}%S(Yoz<xtn1d3@f(o3XyV~2?ojn
zMrdn~YJ`=sj$vq+#DQY3IMq5+iN$WCsb6=y_t&}lp;pfx$i9O`#h+btR?HW?V?z_a
zunfR=@NEAr?_-|juH3j*hzY`RgYYm}|G?>e{^moIs@Z}dUJcRE4$8#FO5v+RMI&t5
zQA`85UIPS<PPtlU6so4=M@lV|ZYif31lX8Oh{u@AB>;Ya9<qeVDs2kvPD-*FHBBqC
zjmOanhU#oStPU-tzgvyQ=tJRBOd|L_L*fv!u=;ukw4=oI4R<MYQj2F(xM{WUz-lV0
zH;f?1yraM3(0L$E=dR*~B0nPl<(UO^P(NOV1xXR^Wmfuj7_aLF{i^SmOi}R@2<FRZ
zmhre4BU!S_T*VZ#^?CO+_+|M$v)HlOG||!91EoqTR1R?pxTz|i5R`;QY2bnG#x0?K
zR`ki}VXQ8#Hf*ugYbYQ%BZ{*4@5cDIS1y(jxZ7NS6|jEJu8#AI%?*Z4#qnt1hBs+l
z+wTkDFYh2Jg3gz|0{J#Zx~O?Q6kL}Hnt@FVqoa2_@40*Z8FfINg?4gtN~{*5?MQw?
z(@l$(MA_HW;<B>dMusTZk0*UcoAG1KYF&F?R31DQe}QRY+`oVye2!G&Xw8A<qmq;o
zMBSQ!i@y@ai>GVyyeo-Z<^epha@7q9;|t~At7-3~%-&`02Sr1Gf==|zrRF3mHZK6s
zJ;!*wxvuy(uG_nFR`!ldt$zE-4Tjds^$xK|<AJwk?to|srGMms;uGj&elPK~_}1f_
zU7jofHT}XpC?bRWrrMH!JH$WS1aG^KqQi{ro@cR8w-Qk=@^Gt{u#oU0Zd>y4tJqG7
zr@&zDg-8B`4WhSpqQBLy0A<?`YId97B3XTeiHS!<)c=-}Y38~%J=5LrR6)OoUV5c|
zWd~ym&iE?9%`sss4er#N<UI<WDL(6af=dSgUQU4IVuWHa0@`va46LHZ>Vr;nOVVY`
zJ?GrjJ?|(LyR*Z2WW~^PVU;x;2OG#%^F@1C#1;<IocNom^G!w14&IM!=MepcQJ>9m
zyn0U6w_{8ZX%2RMHJm@c0iu2(nDanvULNO=Ltv$xhA~}B-J9b2y!T#cI3nkyxB<j-
z1DS}xn&j(b=ZprF?29#C0|x_xPPw5;lM9vKBd`t;7vjq*B=s?inouHBJ-u?SCExSh
zxQT)@M#H=1{Uw+RrC-;ai3VIlE9YkSF<1NnIni?cAOMp0nM?5VaCVHcS8;|!o`Iwj
zqTVQ9AM!>I>cYOqT6ofRi<;TH!`0fRzsNy;+rMRC-1oN*86jTH%c5VfSyD&gzJluC
zJ7+2W*xD;E*cLRCBrYQ@ZUE4@rZIk7^P?b0)=H`MTT5$7Qc@jfrhoTBBq0caBB?0*
zsWj}KQ))^7-apuPcFXx%pQkPF5$W!ha3oYbRN3T%Q$dBgsHNLxdRq8rI%;25vigK!
zbjo!PknjnRg0KfyGgLrQMCa5oA3W!Y4?Eu2FAWhwms#{~AHM4Q(<VpD90#P%r|gEB
z|JXSu+VgSbXnd@*8X3JTNU6)u(||(4GSeuKr-x(emQO;X7TE+%Tc}m@@o-l7Ze5Qj
zat}i@RXL&OL1>%SsCWi2ekW#`8P9T(xDS`LRl0hSV5#$5r_>>v9UOtA%nuMqw%m@u
zn2EuG9X<Jp8X%HL8}ZC>FK{!O=pXW=w6<m@H^54P9aIesh*rJnk6ks)ny=&_`I0+x
zO1hf#+_4PdNN_*Je*dEkjSyt7=J3M_fmp)fckUrY6gFF6slz?K%{Mk-WJ)g=O%|5g
zPbo<@)E!jQ__W6SZjcUzM|#e_`eEGvekI3SNvW`zjjl`{E4bevhxkfRdu%A;`^e^t
zpwl;4JLyzi6%}x~6<JsIO=8c5K^e?+k%3YoDS?X7nGm3`T-!4(D}4pGcYsCw(|ZjH
zOY$g|27>lrhyB;+Hr%?mCP9`1m?WfsG^L65(qXMtl9{e1!Rpi;jty!_O9LaYG*gHL
zsDk>gydtLgN?axde0)KK6g*?6`5^>A0{->9PxhG-V*?Y)a`mh09>J8c%C$XJei&)k
z?#0Ux#%#$Lbe4V}ALsDWB0Q)0c_Wyedl8=J%ebEx&+VC;44FB=<2+muRM%zw>q5d+
z`QhhZg$rpNLq0K73Dhqm$-bu51*NJBFS7@)v|bTR5HN*qry512uFOwm$?aqqiG*&O
zloj<;^60+|>shT1mff;=p_=!3xq_L8b2b9(Se#uG1@YYTk~3(t=9(j5kFehMNq?$m
ztz-FEo;U`Ago~^^GLAd$QG?0^9KTtjW$@Nl0uQ?n{L?C?SO&(!;nkxB(Y8c)u3-nm
zgTUa{QO-STs-cwFOJLSFuFsQn*PgJC4@9~6w)iB_K&+?_@9T%^!fb|KrDW*xD4Y-<
z$!L4iI)a{-2dyN>=d|nJ+pPD~1S!P~KsY^y0`q}JEC&TQ4Sz@pJ!9u%wnel{304T~
zrv@rLDy3GCFItSZR)<1Tz6Gk`0TaYF=kC;yY8~j*gH>v7Kq!&sU6gcYhrwheL0dhf
zJa!-_vN@hxcFs*CX&tF#4thH8`O5vcS4y%NWp{K1+J0@#76YmGm6|Kd)sozBj>^*d
z^kYXvHhjUxgRtda!7Pb4=8*UrE2oo}s{!8%h{IzGkLB~0K1YtI68y>*h~_Vkf>0>r
zL5pRpH>S@V{AX94uAv*Y9-pK<Ir^Gp`=KKw1-ydhj_3_YVQ^YT!e9ICKrv!(&}eY4
zD9>qBm)~B%yp9%9tplrR{x@MEFCP*jqja8kWo?ZJgCP)T4GUO`U*p%UIT~u9!swLE
z8l0S?d3Y(C4>5Ef7&8fR%HU{nJyUdexkE1IWgh769Fte5ZBOK`hq1#$9&wvf)%R~A
z+vriGi3q>;yb2}NXeY2_GXw*EL?1<mTE1f}mSsTbdrhzwidYstUB&13QM8XEo*jjl
zlppLs$&R1kn2ZVy*=4P|)~0${I-z@39DKrlqfzgMZVLaJHAM&;1)sJOp<$@aLpjQ5
z%So_g?J|$W)h!}pDp_JEWG6^a)q@GoF5mGa40!-IY{DcyxAiX|*<%-J1WzC9hkw*+
z%6XR8rxK^wD9xcl9GsxGN^iT$0ej)wrEr$M_vwDSSXxw{Sum2?gEu9%uwIdW<<!;}
zP~^M?@6oj%Ij+7><XO#?tbPXp2R*k4sKNbu`abD(gg*t9Z4dx8k4yTvsmFWJ)Lme+
z0;`JGW$wqEHg;aEIk-Mt&6L|Wj7(fGJ^K9WXpWK)JR1OP^C=VyxVSzlczmqpp7Ly=
z<T3%5w|LrsPtZbfl)qH|P`57fsb&J^bm+)|%$9H}`P&^UK7B4sbIELsB<JMYb|vXq
zN<728O}w7fPy{j9b^(HUgLr1J!Fk4EdR?<8Esn~DHy4+ms4WMmzLL6}p1_*R2%Vqx
zZ2cWVLzW)+2XB2V;(IoVFP2h>!5+Os{q>7`vWTu9S#6a;5L?SrS*5R)h9->0X=bA!
zH<RP|Pr0-L#`fy{sS)W13FQ-4zVKSJ;^E0;@G1{?qCQH`D@y9zqCrB5xZ&K9w<RKz
zq})LcY2BHoMv^+=9E-DjUE5J4oU!}AUNKvSE|k$dg7=fMtsEOPpgEaj5RDJWadOV)
zuN2w}d2Q$YS5dq``kX04LV9BPnWMSbrL=-4!h>#w;<NiL(XzI;6s%N4Nu1!uQXU-g
z)Cq`IP??&ApR2_^HU5JIT?0EIXXQ1K%27PO0UpN5zl_?hEU^j%0k(luG+|79pV&NK
zpf0i;s<e!#fMtmOmlc0G=!gHUi?*1TqR;niA_#@cxFL1>c_*&##z|6Z6$8@u{VD_c
z%PXd{61#0|z(<z@jq6G{o=>+a`r|m>?ou8R&%oU`D!zvJOP-ofaF8V(6eEI(8;-MB
zQ01Fl@Qpk2QFL*l>XL{d*!BGuP^bdhQMxhH3lutuTsdtU!V@@X`dg<LULw`m-)*kY
zcT!;GZBPBYaD|?Uj7n<W=qNEURy^|f&7#qJQ6s!w_T`av<7i1{E)k1awxFY8aN$YE
zs%Ymhw9wf5@^_KeYJg63aD|}`7YT#zA{zFeK#CGfR4ykvF_@2kmT}j2)l6vbpHKQF
zHt9eyEZ};SC?<;<eW2ViT7k_T)=SD#rhKRP^zrB35&7X?;h|{OcL$^X$hpXg-VJ+*
zM2qqg(}Ee;3-WK(mtIe4FNR-|ij@6m?<0b~t;u3z21}4i{T{~(+5w-KS_z#JImy}j
zG<T^1P~@+eUn{5PmU0Zy??8L|Qq$qjE>9#ovefm{0S<@7*XylbCNj);vpnL$8|HG*
z#~^WLJ)8p{vcXO-Lk1T-2^z~k(xne(_qcI1To4!6^EF@64q$s3FU2MD%ontFXSr`n
zN4^8}&BY&@KZWMA&c|T73qfI!qfzlr`0amzA%I*7K4BA6D#IU^X`Z2R4^25Ji%5Ao
ztzHcvVDBg2-hSXf3qH8W@d{iP+qpcvju$xsUYIV}66<+#ptiPXq(}paXZwF|yJ?ok
z(7QK{(T<lZ9#jZsXSC}=<!@K*<zpcjy>-&g&#OPNc`d0z0V&$bz(S#EOc(04H_jeV
z0L|y!8;@VEVLp;#v0RDZ<mnvKO76v;*RS2^c+g(+P|D_l2ISry`DmqPty+6e5mf>5
z(ldV${&NGJJ+-^Cvk<L{<<y+tkH}e~gR&$?V0D;-4@?-eLs3@ds6^6{f$iU(_M;tB
z(I~v2+apwkc+*5nbDFmw45sGD*8eq^`ww?h3trPRkWl=W3>-MeIcO`y$Qf<kiW2)d
z!CW5{nmrU^n_Ci^RpdE~Sck@6zUV3+PW)!B`o?bhGly$h!wRHWxY6)t^-?+;+e)gJ
znTNv@ip#6t*YgrGd`?{%8E_t_h+2$hEZC}oSOzLdWL!j0r}Y(BKMzry84R3Tl~8&k
zRtG0AU!@dkts2Vp2IAuUN;)e4;68@yCgC}mJr2VVU#fi0C-x)5vfaC~)0ZtDq|sI;
zr_AoLGV$khezc#)K*6eOrOmN`qn^$FcsYy0_3yCl|FO05<ARH`T^!Dy`~cGLN&qM3
z3{sd<O#so1z{#f$cFiZ4!!fF*7(qQ}IkKftH=L-7x=KeZ!Ebb~FPhNlOwoiXa9ExV
zBhtnHWd!nkV%by>BlrIi27U9sc-+nz58_zH*Oqa8_7H36PwY21WB))+SxL!oSoX=7
zU(y-2t`nDX+%c$lcEsQ$Fe3UM_@~saBMtM1&?uHkK6>&koecRbF#gC1Y*~c#wdQah
zy}`qRRjN})<Q7Wq!4mIpn17-;a&Eox>h7!Wm)u6FiX9{oQc!ELG`T`xl~JneNzL%h
z!M~at(BMD(^W#rTEw*W%f#W09cJc8)j@dJt7fJ8}O0&{aPADtX5oyyv2Wl1|T+&I_
zyiu<E@bWHyq0K#1$6IKC8I=5=^t%L35vdPUQWB0eb*tQY3X~oCa`xnAFe*1htxjA`
zX0{IJcK4p7iuZ7q63>beERxP^hMTHLxpLaS>BS`(IRx6t`<iRuy1>Xy6Zd`>TU$4A
z=?A|zrRZlQKCALI6%m;YjZ7CP-ENydRxD}==c2J+)1AaN@rF2yiOAdqtzr^_wbG2#
z^S!By*P1grq<BznsVWQK;ZuQRPEe{N@D1uj{D~@5M~AC$O;_ka(tl-BoCF(3OPQ&+
zk>{NMv%*KRJ8Au{4H1cKj(&LN8iAsEhRDhP>i&NhU6-OlYvF=zn_gpT(|w3*?CDI;
z7sLJl3|84u<3~mHEV{arp0{%y<~jQWbMqsI?hcx?TW#Yz0RwHMggjlZ<Nsy|bNMyj
zU^{bakiTz9;krR_6lDXWoBJ#A2mv=&IwMzV(s21bbj1K(cz?%3Mo_*AykS}ti%Xth
zA)l_&93-amJsn@s`%~I>c7^)d{RJ>YGh?bkNIHae`vdaOx*hFUh0r4@<tQpKbxM@M
zf)1EQoA`gB8J!2!KB5E5vNr2e^!xDx;CF(Bwb5ww!-lYQ*X~cAIoo1<SOvJEQYQk&
zdkQRt(bGe1328*dY>f6iK?o(HSz_?!`!f?q(P|x>S5Yo1Y6)b=Eo9un@2jWAxxnW>
z=3V{xWUU%xUSY7d1}0@QgBkdcb5M+jTctG{F?KcZsZz^0jUvRq`)d&t4ab}B7PeV4
z6KBN^KH6ba1OFC;J}fc3yudObGQia04KJ1H%~-lOMY?$Ng5v^t0{&#;M7!kno?6@Q
zu401Upd?25CU`)YDZ|%yMfI8aUkSBJ?9ebeMi+VrG8@b`nEin%X~LnZmkhy1v^mEp
zYy*TexRP=?8yRCqNcq5+43M4P%I&rQcBpH5wy$lpjxB#Pz1`~G^UH3asdXRUi83I@
zGA%i2shzV_wn3D3xHR&0QQx~F=CxH_eP19t2QQ^XwL|>!V7r72F`0mqA(f0m=31Sz
z3+r9exKcUx)rsvU%m@^&UUX>#SpW-@fo|GNhi2FkA~&n>(-F~Q+O1rSIVfS##rr}t
zZOPyj7x<Xdj}Id4C^L<Kd%`4!Lj`MiUuwS~`S&3#z>4N~FFwRYWvQ$Mj6pF?As(*F
zh4O^(j;wUw+q6Zc2R!>aEGJ3T<umOb)Q5kNDD{_OQ7fE%Ev5lTUKl7+D`k~EV<r}=
z?)B#X_f>!Kx3}@REF1<d>wq{T2Giv+>k9O1x`ll5S{%JmK0r$4pXuuiL`D==FJ=R?
zPovpHNpY^0{@KTq)W^Xd;W3)!?M-3@^M15}b$FM(iYT#4D3F_=AOuF==PV2CZo?OH
zNLZ=&v5H;QrOD&^xo4;o#>4yj-mlvA+<%%F)hsHNFYM37WWC<U1bRyA<JXuULGYRJ
zqWh-urzhp9ES9^Ni%zss!G4f9v~KpF5<K@cA$(SP$Jj0B@jlA4g7^(dm1cSZd$su-
zDjS8cwV*ilGCK!=iH8z`=^D~qHkMMVBK;AWA|n>cHi@eQ0y9yDL`XQOAhP%5L%vdR
zn0sf3n*4Tc)&f(`y%;vR1}L6Q^Trw``iw2--hhHM4K7HDzo8||3^#8)mD_m+Fpe)c
zb{nL*9W<o!p4nz4mg_%+{4q{mJ`0j2HG|65)Cf-kqJ`ejEko5~2OrtA67eWfRy}@b
zB2}kBhvAy?CCS3y2@-lrNAvf_nirIWFV#(goC6z)$8^arbFo16E`VmF<K3<s($_b?
zqcBRN-+)E&-=<Z={>D%esg`lSnOF&^OYhfm>*~uRFtVgo$@s#F=@l04jqoH*l5+K{
z)e3U5A=L=1D+$aq=}^lrt!djzPD;!a{RyNOz4678D4hpO768UGO*9w5oEUm{+Bk)`
z3(*EnvFF!x#4QSFvV!6|A>RW4KC$s?q5Y#V(3h-~;USlh*Ozn-vzeKA1apS1e&0tZ
zh~-<$h$){r|2-l;NGq=rtvsJE%sLFGM20&0#U3=w>)lzOr7fkCA+t!#>K?0kyIpds
zGtp4k(E>TK)X2r4NJnQN0=P?+EjmJ!Va5w<xm>EjdZ{g*yDVopUCbndC(^lvD0f|s
zl3!hRaMJ;_x7=t4TFCTT=D*Blao_KR#nPO@9VCAkGL=TXvL3%S-o;*;k*03uD9mA$
z39g1=Y?ja_b@1JbeiegO>W8QxRmbn2m~Umb3{HH!xZ$SOA8JG_+t14sEo)f^rbDbC
zqoYt0i6De=<vL*kTN093d{$t^3VM&o&06^P2H&juE;?LSvN`y)BDh;N;a?VXr4Mlo
zSxt+I;djx%(>`e>caqG9b=L5~RG$7!rkTt%HNb0%b#xm<YS$Aa>!r!xhifa!v4Z3#
zYh-1eDDN?1@X1M+gTKeW&i0OKTxrj_H^hiGA^D*O6px7Kp2zt_&jHRh@I3)Zml;E`
z)a0b{D)2q9er`AUfz|ErvI9xnVcr6!{)@N{=ZQDDc|rGzi7thE$2FarL~j1=6N@ZZ
zZxCLLnWe9;OBgXWaNXQ$y9q_Bfs!(5!O3ypw5%Zzty<sw#lc2BLGh7#FBT96jrp(2
zxK%`_Re=B8D6+4j(aVZ}7=RzN_9rbEtdqbV_XdDeAF+|{CS`C5gY@#W>a6~3v0X(A
z)4fu+3wi<?U1q^yHxJ5Pb4M&|*;xXIAk)_nLt4dssd`gYZ4Ye-TV-03TNs}1b)lPw
z496O>YjI9JrB7{Y<BTt+Lcc!S$p^=&jrct;v~*dwXRhJqAz5`)n$O4=%--}+&ta8x
z1a&bRfq4q1TCS7cOmohSX$rvkh{n&zZM!m76?89SwQZQiGqCD|*%mDc)V7dAs33CX
z_jJ%FFy}wgAl|Ls!Svp!g2YU0jt7<NP^DzQ)I7e;1;ya?9Spss2MpL)#vS<{)5`u{
z4j%@XFT$PTab(M*O>EFWOeEXx@ESjpTA#|78M0!2+m_%P85dMEYoB5R8Dg1f&<KiA
z0>+;#usAT2OYxG6w7IMI4j5Oyv;3pJRLLt3&qIxkF`T}|(6UM63sWb9y-vFf!l!(m
z_+Iw?QazBtvSb#nAp$vVY2WsotQ9fU^an{i0rM7F%<)X0n!C@1bz(Y=M0LgY3QEx`
z(kBww>GI?72}E7^{QN>4J|V~j*UuW3^z??$dLYyZ-?UEVn1d6wpt;Bt9SauV^%kXE
zYz$XOqEJKfjACBDo96r)s(1{FE$ZL(EM2^)c(RAxw0e**S#wx6c+kDrACkvMovtXh
zL<~oB$q7!|IjwoXF^85K;i=Phn)Le~!(bbbnA7*T9f?!&!z`6UL|Yc3qdwgju`5NC
z)2gt+4MTupC3N)h=mGg&5fykf;<FX^dR=+SxVkyDr-Q>E=*OLlvsNM&$mb-=<OQL8
zX|_G^CzIi}tLtGa-w5Y5MwI?|aFlAWH^@e)$Npa>A7)~OYDBh^hPi_L!?y*+jDTxP
zTmZ7}ylxdT`a16Iv4;if_f#Gh3t;k33485}H2$M0Sn&7hXv;8qt}B4$1Q)6jOVE#!
z^%+@MTRU0KS?QDAVl|GL?%P;{M?S9?8r%$@VVXY{uPjM>XXRD_|H0Iku2Bf^z8^X2
zBC++4JlNrBuQn$KI9J+uw#}yYSm751yF;(C#3P3eBH}NLAwML~&uijMhaEf**dN{C
zgDdA?h4PRW;tZA*!78*a(_bKT*|4PFkr4L&x>$-#0#PIIWiG#><SzEq<3?15U5Td)
z4K>zKKw=xs;L13Cr{?vGe7ZX{y4vgsM(6O?9diMre1B~o{eB@VlrF}ZJDABaUT=8U
zsBb<a+Z~pqawLhKACv@JNqH{0N`ow2rX5S!ad3zAejckK{~|b-GW|gSi18J}`X+Wv
z=13=%3{tkH)jO4_qNY9e>UIlv2?Au{zX=<|w{ME^RBMahmxH!eT`7bC!yGAD_{+th
zhcKDicD+@Ce>SR;>c<PDM-EDi9K5MvR<lMts$o6I?MH8~JVf{&FDNS{JyUD3i{<tT
z_#4^Yya>6tfnk)4wU{rt%)nqaLq`PFjdtJN5Pd?C7Q}aGJDIE?sK^7#)x$tZ!ZZ8g
z;JTbX2Q)x<C(@J?HgE@M*Isp=B%7Z4t2FS^XInh5WJDdD;1LM79M9lY+XA`--r(`{
z)J_tUOq-!ZXoG)mtfLnS7u}e;k39`z5K_+-2^qJmKM8uv{<CIbTaE7Fx`WQ_f&<LR
z0j|Wi10A;rGJ@(i75rT60&bR{w3@AS;q>h2^9vb!t~OUu3xDHBfZ?e&NryZ7lbk8L
zTE#XyP;CcC3FtBhfAyqy-rEab+uhtgnfuDsK)YuxBbLCr=y)K(CE|@>`^I53jrpTI
zjm$1vMc>54rV#wXsN_cZV<8V@NEh35(l@ami;C9A*517bWm`(oc{tqtb*6L!e$V=#
z$Uf8kf@XJ+{?3=0lhBgp@I*2glU=qV%^*GnEX%)g4eaWyx&s5UllcLy;g1AO<@%DM
z>IE0VmT05pt39ifG1^YjIU#@PP>AKj^0bB?hnsk%wTgZ<S0aOTWR6lgD5=w(!Z2z$
zkH}-7PGQPdNEe5kdi-j%5Y901ubeg8A3#;UjVase$_H3K#nL71IZX~tXdIN9NQ&<`
zv)G{`PnB3xbOL**Qev;*Mwi0r1whhRre5|vjA}*@4H2fsu><19>c3b=I@QWcKy~I|
zewL0bcMRS*5Z}tI??;RhQM*e%uu?gG1*SVCcuPV9Z!r2CdEeDIhlpU9!44JGbghbb
z&A>R~?P{((MxOKn`K2qlZK<6KEj3Aa>=DHDT$~_WbcPlPI>a=#=wvm}GV-5?Bf2|>
z-Dw;`k!qg8LrEy+uaE#I_ojJD;6lWBz^7VNV%fX6k+-$Jp-er(I6^Vsk2(fYQC}oz
zl#HN;ur8}RUU5$`=x5)J@jv6-P*6=0NQ@Ukj-;_7$?zYW(T}Hk2BuFARUt-_rp=FA
zj{z62az?InJ`~#p3&=ZuXEWj51<!0sk@zP?TdzKvSU}l-x!1BL3SOjhU%;uCJv(Be
zk&TsXI}s`er?=DgW%x|U0wzq(#1u-iItWcM`#FbttA65uhd2+eDB;n_d|kgeL5C{z
zzlynW`r%5yYmq1G0z?{i)`H`U3PMRCJmtY3kql_Hi9*!)BjRGWJqX|4ZzzdC!3W^e
zcN3i>01UKLf<c25;9x-X9^-PJN`}yOnnOhMsI{!xix3kBWrypiD0|bnLbzm0AhB`V
z6=q2rKmZ}Ejc0_16FWcqwy$J7TJChL%6Tt}*lt$is1%hpJsLf+@vcXTK>x0h^KEno
zhJC*YSfI}!cI@#D??aL_NEM7azCJy!kL<ISL>O~X-d3|P4H>EO@x(vS&Dz7Gaem5X
z0E{&W5`FImaBUd4kZ|ZR{IjZ5DnFk@MTI7S9%O@NXyYq-;iisRN`R(JD{6*>{oN;k
zQT6~FBKF*rgphsTO1Evn2Y}UUF2jh$Vrp5iUA&aw2QIK5*M*9D-jx{)ybV1y1>BX3
z*C>#<$^aE~a6)^MOBZDawozC(LdV4_oUD@X{-B@8^=|!|G&s_u9SZE4Xl?GosR%hK
zJdsGVy8tc>zd0Mf!eK_fYT@dvJ^cZns31VTP?KL$%eg$Cg=s56Vqoj*jzl;e9Ago{
z$F-}X*qwaiVVk72Bj1N~hYTslxvtLh`%;EaxfLvV5s~{}F_DU*>{Vzi$7(^6L54U+
zuh`T0Rg-nm7nc^erS1UAd_-3$xcJ@bUVrZ&B2){2GhMjII^#0zMVQ_UsHtj^k=c8e
zt{s$S<j{O*N=|`Inm82ciYxBj0TidME8{(t^pI`{kbjp<*Pp0_u@uoNCj~X3)R!mi
zi}4VBYZ*{NT;GT`3PY=Udzam`lGG71(H+vrWDFn02>P|!JbP0u<Ib|fkOAaG=gHRS
z_nm79moR70xMXK7AM9~*$Cop&NIq9Nr3>e}Ok9Np)BXG|)*!m^h%3+tDO26fxz;Y7
zMOEP6)e%R7)xapZdUR1^cYRIc`*QL<KjA~Fqx)Uvw1m773KxXgtuAhG=L6a$DbBS^
z{NB*llZ#;_YmJJUx|4FuoU0bSYDSq^5g%T+@cvwV+3CftU83%4&W>RPn^*RuSSOrc
zu16nVEBcxM6A+-|I8yUOfjkUG@3IQoqe|)nL`M6-td+z|1mx$p&`Vgn+XG00Ti?TN
z%Ux=bX_3J?_eNZ<86uC%bhd&(<mC7k7H8!hBgid2!sMI<_$*HH)0nIEDz!9mnT9!5
zG6xPw?}r|g%U}A*6~j{wWo8+u3-2P-ddAsGMI)5*h;vmJZ{X9DrQB!S3@#{*v?r4X
zrb$Y&baB$e^WjA9piN0LDW6n|_|11X25?jkS^qi}-n}!!R#oUe-}Xo7%tW2tQUX@+
zE*EuRUysvVg9aEKa7hp7vnLskOm4fOH1@R_V+_U(U206Nb!#U9!uzW0!+gpD6B}@!
z2fZbWga;K^cHAd2bkuZ$VFQRtz|^4+_FFXUg>rgP+y_=)@`!$mx**#x<ws;i(XjPj
zyu#sk>1@jp))+9bdEIsL@#U#jf#4NH1D;UMNUO#{r5$tUEwow_(+4WN*O%%Cp-CX9
zUYx5|KIO8B4Rw&-M|ek1I;mXEGTK4gJqPa1))yVCvi011>OOK~FX#aOKLEg@OaOt;
z^GLW`UI&#yjZrm}K1ZwNEtB&_gDU{+lc=D@!pP?By%70;A;^MKgJKmfQ~@V_(4)#(
zmBs}@I9n9z@jN1QmFzA@6k|@Rky?R?P!t(ABp)a-Iqlvj?PUw9{4ssV1*1?fbZQqn
zK6zLUjd!xL*gsF&>433WXr9G$w&~zut<?`}B<fSKWVlmi<Hy7K0(Y5fO$8KPyvZao
z@xYR91g-^3yrck=1X#$oB`g<xKjBgBY>baD)F*O-btq7DQs#zb3ieZ|h989y>=3JU
z2D4&9t|cLJ<vsC0j9g`@H7aP{8TI%reKU#A`%482){9WxDn>@vi^n;O%U=$BA`)F_
zvs(8kM;LNY|CgT*0NZ`=tp9swS_C{0;pWEP2uYg$yoaDZ!&vn$`6UMM;oiiyvw`@O
ztzMdY7%uNc0>zZn8IYlamODc`&A$ut8eXRjc5x0SjQ%-w(_+rHC7fs^*01coZTdRY
z1+jlk<wP{tbMkx^VMsaNhOhodtxQ2$|9;+ytklzcC%Y@K^`qmx>~*X?*1V10Mt%r&
ziDrza-npy+j<j5SQ8fu*W(k+PZz^=sX!Y>={eh9rb8yw;p6W>?Ok{DFF)pAr<=vGA
z%ke>IyC7b@NfUTr^V65cfq7DM3FM*!e!l5qy?oOZyH>1xtMJkqr^Bz+R4OHFS7I3I
zRP&OcqBdg-L=dZ$r$9^E80lFV9)B7?)U85l&MEx+6eoRch0$Mvl57l7AS$xlE_5s3
z&m$rQ|7wzCUoa&3XH1yCCHZ@sJ>c#8q&%It;)~+I;-nD%W!Yir<p}X+GM1^xxSf<)
zN{T!L{UU}rP$bbm*~t^81h_goosdt4$kFf({crHHP!0vLdHnXUEhZ}~&f5jNu3c&V
z<>BiB2u*Hy<^y(g6YuA~RBZ8inLe7C#vjkYT2LH~e<B;?dI5VK-}U0cyMJ~Z^|$ls
z>hjM%DF|wBd5yZn!W;f4+XhaNl*^MErGf-arT}q9yt|9pPi)e)T=!s<-l#|=PL<}a
zX(RPQxBzW$6{Z>PBqgAky22&1soMD1dH<@oLlr+dj4Wiyf(t&UMX>5o9?*vjf3j-d
z#~5^}qZOK;ckCT^qZGEZL}zH@MTrS!eWVA*1AK>K_6EkN?=r*IdL8Bk%$7H?FhgET
zQ1^+KSlZiww)EP8%F1R%+5_+d-?Y%|zHJO?6_XQbDlq92TznAGK|gSjaF!~*PMA=%
z60ZyWpW%44#OiWI2T*@t!m{Exz#~IFj?s8wKi<SZ>EX*HYwrrT#TH7ry$)#UaZPvz
z6RY@-d3uxQx4(X1ROcJd8AgZfae83C*jmXQf{){-AHMK9bYWm7I3ld4ERBjcD!3L?
z)4!bC_<WG+U|OS4E|hz{rW}03DehCUxmtF0KGn-MX=H6sx~<y)YhzG4G+vm*$6W`M
zME7T64>Sw53Hz%ft9EHaDbO13kJC;;;_Tn~5NFUV_TE4a3(SYUHfT{xjiiNcpAo&}
zJT$h`Fz%D4N6ii>o$ck&Ud4srYIxC_9d5Um*|gAlCe$rnpS%M8fh}Zd)ipIT(35E<
zj_JP>vceD_lZXkY;EJ(xiEYjWn&<*sLkj5ex%mrqWeg=pck1k(7pr~0Dm-O&E2ZX=
zySSa%B$;N8bG8|g=(d=EA{DuT6A{+)lGb<;7i+hqA5!1B=OeuOoVE57_ekSOur;lO
zcDIt^WuMIo-mTnS;)@TK%9*Sm4h+YUS`&2sj5GU{H266ooo4()m9nbut7?km7|HvR
zl*_RzU6$U~M~Dv9bY|3bn(j--7FriH)x3o>usyW&KW$v0U#Fp(Xq&@UqVxhT29tPy
z(aCufDk-$F&sj(#^w)oys#vJ@|MG5w(u3}QWP){U&=lqOrw#I&Jx#%xi>iBoy*elB
za21*~W~&h>Li!p>dZ)Y@D3&vN^p*i&%tEv@&I>PW7l$wtVb@mLDz}Gd4r+r{cco?P
z9vJyJKdY;XvA?mG(tkxm_4DwkYT%Ckd*@|SQ4S<`_ADkCsKiTqPzx@mz>{}h&MfhV
zU{g(FauTJBkduK8GibvvJQq7X+R;`58&>Xq7@<c<GdarIw(H1!iZO(+TF^Y+A`PI6
z*33R7)9Usi$OR|U;&ku2;WqUm4YKPi4hf&RA^YZW{SEFET5sR6-COP}dpP}6{L)4>
zU8ouQu`F9;cCyDZK?!^IWnoO$^JBHuB<kNXal5Pa!HX#tJnJ;F@dMHlD2tt#3tLt~
zhHt+zpVj9l5Dy;=Qme9Ds08o$-FYcIxA=)dC}^6~XmaO<L!m7CQ*4`_&};m?$1n_A
z1TXPPT3(6OE%eehoL`v+h&j@ocOAb70|fw(RFOpYxWL4&D~Wz6y!4E_<;;btby74v
zH;?#ZtIG~VPTqxqw;Kx{!oK+=I=mJrUZVh6Tvafmu(UYeRcqIcuWTWGRep%qGgv3w
z5)Xy84xI!5IGRt#JpG0(;zctzo>f0L-m2)|0j~V#4j>)1ot=rhzHXx=#gZ!%nVk_s
zbzo0R=Z@XMb>Az<ic3QdCs-mx8xR+A$xl-P4Y6~Y)d+0Ny!=CGEW3CkDnSPP1BdQo
zse|V7h$H4UNnAWIM0)>d{>ly&iKKo!TEBiAXS1a6A?FNh3Y#$S&L-8Ucr&c6Ng^IA
zxVK1Myb_<}_H+SKqY4o}itkfiFI69h9~dsrz5#Fodm}tJ`Z#^j_mni<{q7QG{lC0a
zm(O~_XHvlJXuis$CVDnL5TJ4e=Vwj5wknV?x}KYRm7xgicM+VZX<vB*%%meEs`s?R
zH9_@I$a$&_i7QWCs6uCf9%Xnr%qin(r3AFEe`c4hfmt4DmiSSXjMH%S{6jSv<M>sY
zs-<|AU4<Tj%dnr-!i^!~!|1}Gt;BB>`|yF}eb4Z)1tANJzmqF|t~Mt@>F<GCFy7_I
zBv0+1et1%lquwoeq>*UEJH@-O4tLM-TFnf8xkdc14{MSNUc^!OMiDqg6r&tKfmzoH
zz82{n&#7q%|Cfynjihw2;+&ghL>pyMn2XM~py@QyFIdd%HA+oeg@>aIHu67@HJ!5G
zLqb+-6>nSpwqRIxexow~b7Dbt**^hcHSs&mSiGcFm*$6|gj&?hs(dwJFY&)wjPLS>
zX!SZzhYZ~oW;0pOGRy%`g+su%g+Z;=j67i`@#2TqrMq)rclwgyz}d#$fsv87;9tVv
z2cdq$t`tlqCT4zAa2`0>776>r#B4-rIs;(gDQQGMo>Lx&{1UG%&ZyT*X$Jb<hR>=e
znu+J7yI(b!W!J<RQY0sqI8bLTK|QHqH|H0Y`@8CM=DqK8=WT7~-mQJ~WPBB;^UtXv
zH8su9V9N9%%N2)Q3@z4p#JiOCfq#4ql5TB^Lp)0UfmHV`%)haj+_L>hB5FENydCoF
znPnVl6EIxe@5sriWlV8d+F!FP)7xU-i0I8d?F7~xg7|dkvz6qF>!l=BWiIe7A{qL1
zp&3dnA-2Hr20oP1Hj{m_wm7{uw(ls8p`=G7FBJ_g14LkDo>%#^RsgO)w`yvToSFdr
z^HpGsJXu@vGeFxPZI};Q>FI0V(>kV%djo`(Kr}bG+tYHUHQtoIWnKhu>dqtODMHHU
zgQrRhWtF)V$<r4B+d#YwmVnXqq7h+TUr@|3TUG`<{P=d0s7L}oZGV)z8lt4I?4str
zN9q$+%y3vFUttJOD4ad})oqMTzGW{A3k|GU(7cWBlqPnoo~wWO$35|;>f9s&WVNQ<
z%;Io_s@|>^$p=V+ZJ#a!uh7G$LZZO+*MHI)Xi=(Po4$=AvvODYQoT!Kn<nKbwW=jv
z+Ft3E`i)FgQ`Ij%lt8lFa+G@-WT}?<Y%`$zrE#A0FOFF!l<u)-jCfs5PWlDQsLk0o
z#{$LuLLw>|sKI=J=zfpomrcSW3tS}$G4<hbvI1eON~m4<X@dHbMzdg#=qajhXhpaV
zDRlk-z^(pW3}hpBsnSA9B?rDMO)WIBzQN^QthjxzyY31ZNbiUwA~l)q0QFu|NqyuI
zY1lC`jRJefA8Em`qO=GVNb@jv_#B6h!^DrQp5=gRSBZYo)?6+p7a0oUME}vMs$3xY
z_27D-<IAoMSXkE?ZtW2}F~7b@Hj;(zp9Ka&K>NnjFyG(-_ylBi*j=TZr~ANuY$gQ$
zHxt`O{AQxlWHa$~Q8D9>JV&|i&h7bZakXLZ0(HH%Yu9C;L0`Ac2m?FZxoq0{r$Wz3
zyH1&x{Iq9J138%Pq6`?Ljh{!n4E-5SvIB5qGTwr$@D{t}pFX(2`8#XEOqesaZ>2ec
z!V_KmE6iXX9BlmS8;QefbJZi_K*Oy;V3wu!zUDa@i}_aMzAWXO-Wqjt&AroZ+<FV&
z$BnDC?-n0O1KQi+o5k8iGri1)N+KMQaxvA{;M&gZJ!%Q&QaN>7QO_dugPuD8s!2hA
zxv@<%Qf0Yrm(yOa7!78vgNyVgY!yFNl88rpQNsew5Q=7Wr*P=Dm?7&iCBFay7K(|{
zF1EZYJH}-*r)B)!DR`^dso{;p-J&a4vl0lPJ()E2Jv#nGO`Iij12oSPZ_9n5AhSfK
z_^RXH$yYn)!`^5iC?iK3SxuFI<!o-24dwI1lx4AI!v+Pz8x=IJfz3LbrR9ie@8ryR
zR022D`Z<91vil7^e1;4bI!a_$ip+-MtupNfr&8!WxCgw-GB+WiPruTe;D#8zxB8k8
z8q9!en@%<!%puV%<H+D)(;9G!OCqY+;rTKz7l+WO_4cqx{F}(%9Ryr<C}JdLxya_O
zy<004$Vt))7(PQ$?<)r>eg&=gHv!j&tGqfrmDA8v97SDh^SD1#I{}+xunjqE_rLX8
zO!;qLjGLcRzKg<A)B$<={(F(chj-1Z38QuNL3mchgcA7I(`bUE@qpTH?L{o^ciGLA
zy;IE_Fxh+Q;ge0{r_*UXN;czmz%AycrYL4SE7d4LXaWUfiOUGM31o{HVejb^voC)5
zWp>|T`?x^C%`>4+L5Yi6@c2FBdlmhYH^rTLVIZuz3p*DIOp5m9A@aEzxgK69@dz6u
zOrIOF?4j@GTuIkL<-0t%Fa|g}BI8-vQije5>|Br<EvcL^NQjvQ07}|I(g-()qlp}f
zB1Jrfsq>j}qfKw*TD(~~=G;)5>rak_y8v&?dTL)xapiWI>^kY#-pBS;O#10#)*NNq
z%4`Y-;$sY2Ei-J#ly~GeYz=b!V(U@nfpF8xc(yZYR)KtgcBP{)Ec6NHK(tn99Mi-u
z8qP#Knt%o?^APk-t&W05Qu`~e3tvn&ryYoyX1ITE!6WsO(7I+c2*g!0|DnW(0w<N$
zV@BuA@PWy^@vJeL5F@r|usLVpEUsaMQdV1x#DaI&+bY|-#^&8V&JaI!XDhobGzOlS
zG_J9vrWm@PGDgYT2PZ@jW<>YxfNQk1xj#K%)B|fJ=52V|!s}_(#Z=$qmkBs_ZZSlY
zZnSv#<vM_ttHZysGm7o}aix^R%jigJN;4gxjd)cUASrq-{x`@|%>I;Gp)nm7pLDG0
zaL0PSo7vWU;Y`i{RrYs<KK?wNp&8|Iu%k8aDM~TUBS17-a7*jUoKNuIDY*We3$1Bf
zWAF<)kaw*d`sum3od#cVbt*Kg6E!6K?_h6D(k<~X?q;|yQ=Telm}?Q~RKl%nSCTv$
ziwB)-F_EramAnkh&(19}6T#RBun(gYgtjS3OW2=)CEgZKLy>`;hhqsU2E*o*efd8$
zJ?Hxth6}EPmjQ~pYHdfPJiU8#{$M%-Sqa9`1wY-V6<cT?rKZfcDB0nJ)R9gG#}vA{
zBLgEJ6(>3bK}J{RoN%Aq2%`E&Z4C{ni%ih;pNxM!_5)MsbgF~*-dqE{<a8NQZxOlb
z!@9_ZecltT<{4tj`_kW#fxEV6ED4V)TCU~Qlv>Ndc3J$V_dvavB}m2s`@$v{F^t^^
zvX9AxE>Jhn{6fiyR@<_^I&%gC!Asd8nrVybY_swvWHlsIV)CzwV9Ms`<PKZLY~Be4
z^-ItQl!164O%Rr0lUONF_cNPIa9F<LB=>d+`EX5J8BN8ls>Q64Lv*Q25v(_`R|e+>
z-choZhFe!Ont&;RsBx4Mwl+M+;@hgaVoit<en?2x)o5tjk*;17U#M?=pDDXQ!o_+>
zyk^_>w%_up*x?rk_qTC4E6RXQcji)-6&NnkZGTq2X5XgeqwnIO&|%X`FH^rZ&KMY-
z9*}eUP^g+rnphp=JHH%Aw@Oqf+ot+BSY=WrnO{)bs|fr!f5~Ae(dAEB$x!Khw7-SM
zPIddHrcTCc`~&S5Fwok(c9;ykOmPrz?$?D1M%GTr!{(tro0tDhU%xqRP{$r8ta;{m
zTjn|p_SYDp&Y>=FVLn!XR3dz0Cwk&OAE3Nh*`#%V{ryLg9n@4os>09aNigl#;F;zA
zJ!-B|NcwxXuWdKMSwQTD4b0c%?>NCB;}u!anIc4)v|umiK8EWbA58wow)a61A4z3U
zuvJ+Vu6GnTOuP^dTkbtm*|FqJ3c!b?0C~2j`wQo=H*Z56-G&ZciyCOaxq!K~!0`7N
zi=E0Q)9u6c1^TJ<xvET*$%GDW$~(H+WDsiyMF4&xSbmpw`rOYS9Ev#pnJ`PEgnffx
zFvf-tXa#s|znI~6>Oh|qL)d97s_Wu8I4xx8Zmcfdx+4!Xj%#13qGlN=)^dKOPJXY^
zW*OsyVbWq}DMMvE`-nP|0-_BY($R0IjAm;i^okq$eIHA=GpYXvk8q*)+RJ#1!B9!`
zs9^JS&hL2>nRU4Y3p05du2Kl)#8?URE*bp3im)?&Q=$O+Nc&Uh&wQKYIld9@;T87T
z0>27#m$XuKEw3Gu<YAH^m4U{0e*L60Ca1I7MwlF?24c9b7Ft>$;?2nzT1AKt7sfS^
zWV#shgdP+dlvQfe(Rq3L*_B)ZR%gx81yOy4?9Yx_4Xb$;qp4ZA)lH9xF5y<g{Me)S
zGWO*WXM^_z>gr6IC>#Wpyn}dRxg2HJlb@Fan&?$=o?$eKchx2|P`y|-SwXO-$vnRw
z?>xo9Pq2qv(QxLVD@Z=B?K9A8(t*BK=utLvs+kf|`uh>xg5PpWXnuiZS5k@(b0<R4
zr+GUU@kh(?gK0_8%Z;ial_04pU96VBF{?Q-yD-gE{PK;y9n-P_oIWygv$svPo0DUE
zc`xxldx@$UT($ic)*FZ^qSgaVNE++H>Z(WYsM-r)+j9#<`-&(u8vnpHH`6*wgzC*y
zS;GFVb+rw0P146Xn`JHflH6=L2zfE90jM!@5Y&6@`e0RQJu@MQsU8QbeY3m500ZJ@
z1G?H8oYF8|gw>9vQKB`oip8fv48hH<JcAvGOntBkg?IXJn^mDOlExv^sD0@t5mFL7
zoT(Vt(PLVHFzB6`4P-K5)Z37Qt-Bw>T@XOYM~ZlE`dLF4y;$h<vlxm}cm#whh?qNd
zP7YQPUr2|*;Ndk3qOX`+cPm*51o*)14e=O!R@Enl&a*3|PMUXV`H3NdR`BtLMfZAQ
zF)?$q1q>5OS}j|V<MuMBSOx{jD~7f@YYs+{Szjc*@JG_W6;5*>SKU)5m~pHU1MuSa
zPib-nfzC`vc{@M~oYZ4%;EQi~!GLNu<xWGOjW3N`5k2dx#iVtI3QTx<;283!7D_~Q
z5=e~YL&qUwp{9v-wB@&MQbV9%aSBSFl6n-$gn}P>GK)WWSx4Hnm*2H_01oC7_e<^m
z#?OV&&y^?Z1<5QadiNhpl_>Pod2?EZT{ajXwb}a(Cnqa2R!B77YDePy=b7xh#)|GX
zM&?7~aeUefYYj_$md`83_=Wsg%~<@k^eSf*+iK2Q*~#X8{C|FT2-*Qbx~62YG%HmT
zMTH(4pPz_P^zeuczPcs1vrX$IX+qSd7acG;v4<-a?f?t!A4t^i)1Ku4X@qsqNChvd
zR(0woHJXi|QF>v#ce5NFboB8(J4!+=xF5JxW(trF<Q~CTMN1`Ywzg|7&ZK?nkK@kf
zjSn)x5-Ie?^B3>s`onh$J;!{BWn-Iombu-&6E9bWym-2~1FlM!p=Kedt*x5~*)#+M
z?dxZBH+stsn|@UV`%1<)OaN;)3@@(e4O{i(093ph(Cdb^*EILlexHPZs!1lfDMClh
zCxvNN`gFaR;9!i>G37X`Fl|8VR`&d#c!mi9Ejk^+TBtNbHsJlx?#9{870w8}^Y}@0
ziPQ@j@aQ7jI}U5Fq`3n;#<k1GWr*v6n`PhEor}<<T3Rw%4FIfqaW&8mfN~XOn8*M9
zf;rXx3Oo~kg6SW%BsbahL`!w!`V|~ZMTrxt4QBaz<{H5fKoOd2)@>C4gv|pBHCY{^
z%hEejYg4a(R*Ykf<GGCNB+oX_9ASfUhZ^>^h>v|L^?vN=&N~IMa?_QEwAmbv^m`i+
z7iAkXC)R<Dpgn(5)-cK&<ghJG^5SWM)h}qrT_y=Lfz?-2bB+!J=6)o6f70+kx5Et<
z-bFQheuw&l5h+F~jof$*Ayq3)n<Uxb7p}hJ6PnO7VGDKe?GOk<G8#DFJBGjY)*Ls0
z9ma3Itu5kL122fU99@H}K6Q0N70t^7**+3H%{Xh|W8+E!NYjpPZOvq(55c2`wr$$q
zoLc?PzE7S!tqyG~cAHjyP@6jzx|V)NE__ti4eGnD;EA|6w-rzv&B<BD4YLus`5pie
zR~FQQn|<j!5IfvLDn;AAt4)o1lc6R}DSdB#u#!Z6$+GoW!}pnhmO3nur)M3bc|cYs
zur|26CD(9sAvk!xYHBz&XHXEmtrA$m29JxhQCx)lgd9+$JpNgs&*B^o*{AeR&LA9Q
zg*lv9aWi2$p_%ymS>%kTPWroQg1HXZ-};GMBA*$CSU4MdUh!h&Lu-`|XYe7~A(CsH
zIr1@%FS^?sD;nC%K}_#(r{#C?KHO1WX73VylW=e1cdwSlDAdKT_|~QrQ8ufLQ9vN5
zU&kgs7|2lvLhA8jooWi8(-#7i8x+SI9Q`xP^1lXTsZ}I+FSAQDLL-zX<fRl71jib&
z$rFMxDIun%0NET^vxrbIyT|u}=K8^Wam%y{tuZa#l|!(paD=PP=uu1<_2oha6}?HR
zJ*Lt}>rB<pPE$JKct_{phL~6NB{bnPH|r+0N~VRlIZl*YzZpY4*2(J6#<>y-Yue-R
z%mBfHm$<L9s`y_F%bHOOvrsV4Y5ccQEIB2k>7h`MjEl2IS=>jA?){+Y5SSs?^086P
zi5j`TsX7|6tNYTK{)~TyWC2D>+arJ0{P~y(Am?dCw6Jt-A+OG;GcC6;_Q@BmN=pZl
zJ1BFSXOn~C%q9BCubB?`TBxP_lyR_?f@5eump9$T(qud+y%m;7(@*907r+e0&z{lp
z%iX@~P~Kki1_mwQ{IQX;)EId3QV#RZu2)K;aCH&!g9Onf`M;d~J!x`6=&%|O@yTiv
z56#B?Xv=fpx2)M^pQRf{ps23=S_Pq1PL7O9Mioi(xjH6&9fWtW<UBZBn)<@*Y544A
zN7F(NcO$>H9NOn-4TpJ9Q*M4uhyAxT=cW1eBDT~yGA7DtE!*g$T%QtKPtR+=zF^y?
zrGdz(SS?Tl1<8U}h(Zd#nTGs~8KM-SXrq130?D$LTlrpt@q7$YL(%T5LQ?aa*km`X
zsdF>zAVa}%>tq1B*}}Tz=MG=1T7Fr*n<<^6h183BMUPE>^Wc+iP$}x`&nEYo=dUzy
z9VwXvJ@;UBJ)b@C+N=fD>aHw4{NMIF`@yc?|IU;t8@wkg)R+K^uqiDV1f9=1^Aa=G
zsw~2;;hQ6gzY1dE{tM@R@(CMH7KuM9KwLYpbY9eCKcOn79B*SZ2$(djRJI6X?0mSS
zytD-?*J`w!<wv?`P4jR1YM`|;yUYk{!HYNLK2<sYuiMSe1V=aAU-y_j>FtV|Dx`Bp
z9pzqZUGcIn+kO`tJ6!RlwCBA1_-sLYHVhvj9D$e})lh>m3d^z%2M~k392Ar8tY>1;
zgGieZ)7%t0=_ss(T1+fbvKig?+1KTWS#i<*<m=zcotNcknt&S1c-{$efTIIn6puMq
z&gw+b+;Y7~_zYmZuMD<c``9YsGKvJtRk*y8CBs(o%;lk>1-NsN>_V(0Gn$~bzmAOC
zzGh;$qUb!F&@g0t#zbyN2~<~>*kWNIN(6*XLJ{~QT=xU<e#~Zm0f8kgYutBSiYEcJ
zY#sR=j>=X-*Wh)HPoBE>k?!fwypwhxb)d&hJfl~VCei9z7Y^pHW4KD8e&Nd!iL>9K
zB9y+Qx2h1i%=IR@59aI<;;*bLRy2++KjAgW1+*S@SbswPyKv`*p;)#Cw~hD!mPQmU
z*0QG|G}~s-yWy;bfvb3b%mV*oe^;^AVTs9cC%DvQXJZ56Gs>IbW%+o*|KrO{wnG?0
zOgwfkJFF;QzgW4~sz={pP-4$*YAT%>EeSoWN9T*<PlRWyGk+6}*+A)R{1{;Jkw&Vk
zmuNv%6}H5q@l{y|;lz|tun53ht_oC~O?Fqd_wW&K5z7X<_wC|@pf*s>`iSDuzFY@e
zDw|g|uFa7m>yJv9@omN%Kxqa0Py9;=wTdakO7P3%0%VtZW8wbUoF_16KNAIo9Tprn
zlvFRPJMqSz%F36GJY^3>5O1yyI9R^B@v$eL-;ro8z}G^83RfN>XSj91B2o2=!do|7
z{+5<(ueu#OJ3@^^Qvyo7`KVtce`e@9OD-tM(C)IFHiYoA;7m1lfauqxW%CTUpb15i
z^~8kNO&w?)M%Usz37UXfwf$6c7)-;)5v$Osq89F+4~AoBhmqoM8sRb`IOGV-xg^~h
z>?kX5+i@&~Z3#huLv7GqOZ5Nc0)EfTcA$JxCltn(ZEzH@u2osrxOAn=^)cmuCCnqx
zG>m7Q{u&UHZ|-;d#(_DQ0RmHZmu{&tunL)()#LS6l!5aa0wxmc`_u??(l9di++L@^
zNgqwiD!oLZVT3y~iQ&RaXixQkECe(hgYARmuUm(ox$M+Ux6m3}q8T06G)69vLH5Il
z&7W_5c9hd6U7fM7X&<mR|K@tuBPe`Gvf#h}z|is0`*g5bq4331FuS`eKo2{48Ur0!
z>2=zK+JPaRG)rOS?<jpRdPY$HOeh7rdtoKIwXf*m57vBs5GC}-6XLLD=rlX^dyw~F
zGj$d#HE?&|zODAjovg0rN!3iQb;9|Isfzo^q^krMypZuZ5<Y?s|DKPYD&~a{=`jEh
z&UxoSBUJ=Izk?jtb!^p}Jpr!U=pERo0?o*J)!g-AJ%MORG;u1(7iLibLuY?l`g%Vb
z6hJ)o4;2K`lsrLOTE(mkTi$b=ADbz4>u6sh@1nHwet#{%*Uh`V4Cen?O9w<DdAQPD
zndP=f%Z<mV-j7D$82IUr63gy@P&2lbC{7*W=xz)Aig?-)&;r?@Z4Qm(7ZePmXLTo`
zWbIHDgB1?;_?v$V9iv=ju~h>*$1b!=BDq5%0ZgSZDT47I<@46i)(T$lp?wzm4hF*m
zlMi)6kX4vrLI4SYwGu++pAiXaW8HsnuFaFBn=*xX{$XFgNOWdx%+S1AKYM6L7}tqr
zP*TX`k3+bW$J*Khhb2T8EON}t%a{-SfZ9f!==;T+xY@Z5W@Y*|(*{Wrv07cSq9EMi
z0zpLAm<QBi?vC4U575gdhR^mL3#A)&tgMGagy{TghJvyz4F#>_Fy#?A8}C+l!O#$>
z03^m!2q*`qm5lLlDO_wn((6a#O>TZcWti<A@>c=7wrcsQ-vPNh<$i`inulClS0Lt5
zQvz1j!6JI*XV8Y)9e|>XJ(i8`j*r}Xmy?>@Zs0PrR^3F{1Jo$oq>~$EyqLN~$}1gr
z*1=LcTfEvC94;dm+n$?3u?v0bR93Q9!C#D81B(10kuaty>vYyG+OM5Wetp3^jh&!8
zo&O4x_Mxw-Wom|7<+gy}_G<23Vl1doiSV29k)vRWc^fj|6eNC|Id4TXCRF`8i0ng%
zd1z(#hd$Fo?B(>p08#V~$)M&+GEKUGQmmfHT$GsGq`hgXX{NZdbAR{qT?wE^Bz;Ev
z6T8bm8jIrPRK6zr8mr>AlOX9MpisLWT;QfG{?T)GnXC_Z;p;0Y6<YA5aKr*yiewT0
zhCg&9kko9$Z9<ruf?(?(ql<yXIP4S^&Tx@23j8i-M34j@7^E}%D-W8It~xtx4uIf0
zvcF5Ct9ftw41jn+22T*1E3zSoEZWn=%L)UuFix9&PK_F;B%*7{h$S!rI?uFIe~$TZ
zK4jayA?JA`A>`|CA-x(b??cD#BUm$W(cTKkqhdzko6MPjh=AuqYV|mKkU=L3^WPBj
z>+0}&o#r7YkvQ&*wrBtnn~<qb5Fx4xU9`?H%m~rj7_0#jzjctQ>o}jGCx>X*e_BN4
z<+nf7uqw<1s#)jOc9xc;gbH%YUVar-UErXmdmfAl#FM2zj$w`_vid3h-}VrHsV-uc
z9x9JCMCQT~jST|J<8Z$;f8Ntqkv|ALyy1Hqc|{A+Th9UsZf$o@>jwJ`T1$ja;UQsa
z8YrVHdK1w&9V2yqi%Eji?2Vykm0Q`gWcqS^>h4@;Kin~NT+%=)pV2dI04*JzjQsF>
zoMLT#aAi+^wIc!H-F3Ze&frNk7cOpVm!vO+)c>Ub0bft*-5$L8p;Oigf@u$A#(B8G
z3J!e+_$38{>PYR0PPRruwe|8pMNy7#54Y@s>}!OmLivZ9|A9I04%=(v=7o$M8p`N1
z_5sTf+tYF?!z0;v_U!!5ZFaBaa~U;H6aEv%Rqa{FyomZ2gp3p@#3exB_+phAb)Cs_
zYXG)XP$mhI&)w<cm}LGlZ2{6@#DaQ}kP|eR%cXqyfldVm{G(Zrr<4TVcrCi#6itRb
z!#${T3g@W0uJ9LG0M;PpIe*-_kcaWvVy06R*G4nQdzbeq8De&nonuLOaQGm)+hf5S
z+?B}Y*(bC`Q&gymjKlwy{)3x>QwGA<V2}F&h&j}5Bt7m$raD-Sf3JC0_DB!XBh8KA
zD%8*aY;NDs@Zx#&DBjzV_aBEO&(!EcmoahgT53Aerxh)zcbqxIi?`)O#4A{C&Y%Tk
z*e#F|4i5{kwB0kMWS9(gtu-LPrxiGC*2?YB*2>yP{PT?SJ%JS7HOH!IkrV%odS}U8
zXG2AUSnWi^SgzOf_+4Npx-FAac%fsVa^oiHMN&>Pr=({ZMNK7(A8OG{T@*uiNmQP4
zA}KAj1D1K#5{Ud0@G=fCRi}(T+v=wR_x;fTw1o!!bK*vQ1G}N%S$87x<`Ouk_^Wnl
zO{U{Z{b78N$o3!+0nOOe#NiRfDa>0D%UfvPj^za=GJf9{0B*s9_ds{f`r4Ga6+fC4
zN}cwd4Sp*JFqdcA)cI6O7RYpKbiZ`vUn^Ho{JGyqZ*9On71B>1mL_|3T!A0IP-J@^
zz#4qKGwzEtkGS>suYMruH{*!5?9NF*!uP7Tay8dZ>Ktrzw5ZwW830`{S2s0TSwfop
z1*j1Nic$ZgA1bJ4wh_9wc4Gb7XWMlGdQ+}O>Sk)CUd4tN;Z4n<O_b-7ss$Y%)lErT
zS0spD7O~c4Lrn)o7xfi&Vy4Y<fFQvlJm1*gG+m1H$)!>p*d}1^t?M_yEhOZAYEA3T
zcXZcJ#Hei?jKTXRnzApv3e!s8xe2|-d7HO!oVR*!@w;tf=b=|FH5C^0T{9BizM^`T
zg82Lf*3Q&pJ2Ld6<^3pzW@1<*Xhbh+S5}V?aUnlzT1!vx>WW~)CkF3kR$6!dal-_B
zPlngq*r%AxRIHG;xNyy}2R+E?6ohsRam4m#5y)7!hZQRUTDA>Sf~_%3P$5AP;2MUQ
z=zX&_-Q;+7%6Br229G3L7HvCGcfpTNDFoGMyMatnuyx}}S(b&Pe-M2ZrTPy}YP>dM
ztiO2QsvO7;;Sm5>0*QX(e%}s#7+UxUiLw^t#>r{Z!6mt&)T~JhQ>{)F)_&2B=m7Og
z^s;EryC8rVE#>3v5w@LY;SqzBBxnY8%~!bryrT*K)NQ$@(eaFak1EG)?(fy$;^dNV
z4dkC;2MzGv7Cs*gKb%;HXE7?Cc=TW7d$-hv=j@X-dVo6r0`R_eY6~u+->Iy()`p0Y
zj(~~+L8CN;M~#!1VVg@2U|-!3UMKCe3r+|&-r9F4a2)nTp;8&j$)E%aDW<rCWJgrV
zNgAOH7zGtN+U~zn+S$79O)Gul1+3K<wprrd_a%BBdtu9wIQZg$@Ff7jl3j>j0^3&W
z{*8BNgWK_$@G8BtB2=Chtb<&(lva^Yu|`)-Z4iyMth)duim0Z}E&;HUPHKv07zRD&
z!$fG9BX3vd2daalbuTmQ!Q5qRIf$+_hy!UEV(mYhHpL>K@?X@c_8P9w*im>x=+-2~
z-zvFW3@U)~YLLA*EFD5uL8S*;jqG3WLJWeiw|ALrJRZnS5E179G&@)L=wD}cj3kfT
z1x4QMS0Pz>L6Zd!56OF{{W8fZ`ub$Lq39K&YvsN^lYl8@Gn2WSB`rA}4xz*6J<$x#
z!`6{`QPR}>l}3i7W3vYWN)#ZTd6_8z{Qlm$MPg{$n^OcHu$W1FtrxmwrC?=yZyq}f
z(@lQC%%<Yf*k+AXnoXMF{<-ZI;5=Q!rv<fn^jZVN@%5}BMGRr|K@y;NN+7`a1nAj2
z1oyFyUp0zGDWX?y>cHo>Y4j@OLo#yXV}VCs=+27o-*vzY2GC8qs3BC94uw!Ym!o<V
zaY(yD>;Kw_xBDo%7dm%ee|Dk5;yFI=OqHaP>w+1TUa3(&weA&<oJ!{gG~X;)Zp+8h
z#il&nAdfR1in0esm$a!YgTS(mrJS`CT^;OEf472fW0}UXwXkO=+JmMCBULHKHkE@t
zotb?sg@~Yr<@-ES|MV+7HI@=nE~r79j(**CFU76hCwrIg*8o%0KGbKa1f&<1L~-1f
z?(-iGZZ)(T$h9X{%AyeH<QSp#Q-h5xc?Y{v^8z4;0U;U4yD>PJ61<3=T*=ZnNscE-
z9Oo2DkHA<n#x0O=(PI;Z>7f)ySiw^@k(_=B4Kk(Np+5Rqn4a3qk9fLr6X65))P5IO
z8MORtZp_sYgyMuNZtZ(l6FDd#lzS1v;}UB`2BVA4(hpK{3E9V3tL$FM&tIW%2^w(!
z#JYQ5yqs>>p(8}44}oM?bw#u$8X|v_>JPdD2oUY!BX`#P2UjAMs_ExOTZIH{TJ>tB
zy@hdr5G!y~`V$0-S!J`oQU5M>L0#y<SL}2wH3`sC@B*RWtjG1PN#xj@?gjnMrzV7v
zYxg>$W2y~uJU~qsy7d8uz~lNgjZ45gyk49WHX~6}B`oe&KkMVMXA)g%KyxPs5cZ>4
zr5~gAP9CzbINZs2b_czL9dngV4t5zeybak015ZtKfnbHhZ9ep0_QNth=YGqU#gwKX
z9%dxX({QI7oO1?%$ARpI@e4<#`q}oo^GL0AP?!?pxcLK>`wtvV{yaUy(g$G1wwTfe
z`|3$=GcdpdY|NU<QcsXX$Dq7%?UjncI?IFetT?PHdjqgSYoGJbiE0!iqm5r|JzS+i
z1@V6Hf}qL}VpU;ub%%{Crv0va!x^3NZs#1aTknqRHt=^5#%-l=0AfowU>3Atgo`_V
zl#Z35RZPaZEL)39w0Fg}+L&dC99iH|+&AX*7%Ufn2R~3p;ERLzO2k?&O{Th<BEubE
z$Q12=lH5>r3;-8E?E!-#?>M#Avbc0gy#>EL_+S)MD0h%JRr3mdrD>S|nQ)lI-6W!c
z?BtR=p@VWWnG-@+$;SvM61eV`i`!_y$u1VUF1W->)p57NkL=C90y2eO-wPQbHj)BG
zXp;4ca|7jhL?*JUh|#o#A*VAo%#=e1###=3qy0QJ3z_-+Ya#Ox@zmGR0^yXfg9o+;
zE9Cm=%ZLn>C=k%kpCOft-QbEWXyTLvhxnon>wNNA;Z-(V8g;6`xWwqV7>x}W1On8^
zR3vC`1Y`ic(PQIrVIO8$2>bJPzD-wlu(C~133P;l$<|$>Og0X}>^8K-s!kO}q<xYH
zX+~)jZ&ZbEc~FtpX+GbfJH~e%qD2pg&G?g(gh&R!M%E;f@&?wTTK*tK_O_;X<>Hat
zTtr!Va<5xE%d~X^<2WVCs)@Q>I%7UIt8*MZH)*e==>d=`<$g8nF7OAGDPXGWl<oZL
zNG8g2@Ue%~G|}79f+;kxMUWBSan(Lc&($V`K22>f2-*4et(P+tGapP_VT2BWw!foa
zGzTlwh*6^8s8BzfMsbUG6+5rGA-^u$$}YLYU_sJaq|)Y_fV$y_KoP3>puIVKknj&+
zMyoIn8VM(a4MtB$hFbwQQ!Yr;3`E0?!r~3T1V*jP4VRP4$H~T~A;jkI5$wp9)VLjP
zXE?^G9bG6i-$U4DZp_(g3UY>zehGuGc!YAl$X$V1rxHNom3-kiV=W)iWlM&0N|d+&
zT3l;GVFAatpL53*I0L;yE(w4J|A!_88b^zMOq*l(Hri363y}Hq?h%u6EBgc(Q(>t}
zt7l$4(j`&Gyi!yFMQN<ks$LH-$Z$*0Q<mNi{5M~=i0~F@8^ZBEGETjZjI_Xeqs`aw
z0o*uB9y)Yw9mc(l0Hi<t+l#UqH1+q>`{b~z=0;Y0LyL0|-ns(n^*z$F5>ajenNLOj
zThgI6K)$4`j%h-ylCl~ZmooX`t0fw0sx=#I(g)xzx2irvs0f|w)9idy6n<QP!G0YE
z?Hg(Z496ZjxjK>BcOy#;$A`%?dE(hy7b((%QJ@$SPzP{w`D+-{F;*+763{$BjfDn9
z-(Sqgr1vtiB=g**B0`_{M|Ogq@?NU4ddO^@z-IdYzOJDt;We^BAZg;s-r;nX6-3o2
z#O|niA6?r>wx1^q7KiW;+$ByguNt9Ju`h$!;$$H8EWU~>)wUG9T=S&rKgEz#*Jr7X
zID79GiBGFulc_-kS15B1-OdlKp_Hj~YAq6Gn`|a##r2tBBn^bV27Dai-#_L)Y~nk~
zBYm`JNn<=JYwXz*S&bVqY8@D|c5EBJm2Ij<-4n`s!x4Cvs7L~NFwBH{t6hr3u=Ngu
zeflX{DI)&N2;1Zqs6tiuEu$!BlvJClSop=#9MM=sZj(XltmcQr3VShKScESa$1hvL
z%qCt8Et^jB*jijtU9n~F<WlV)$WIm2j>{cV<s!mJVyo-!Ts{xSz}4A#(ou7x)uL5n
zic`I`_5-vA-F)lGSfMYUSe-kDtjBRGOfxm|+z&<u1nBv{$}g&s9@sGS&u2$I;rnkY
zh4pNS#r`Sdj7k=l^u8qda%DQK8?cQx>KWCX*#ax_9e?fGi4@mq4(Rh`Z}M!;Ku(1p
z6M_ZAmG2%~n>y|_07gFlnnJEF4nKQad35c@g4)|z$7}NXn^P=0{%j>~2+!KCjxv~L
zmazG?Jw`L*61Gl#J@Fx)o%Fzx?AopqiLvs`4s)7tK*|BY+`&+S%)+4jme$UbYD^P@
z>Df;bCpZzkC^vp_pJ14&{fB$ghl>lN057wdvQ!oW&etFx3L#I4eX^W1rNeURGM%Db
zN#f`@R}oCDN_4~ShFhtiaaPrTjvSsqTVN_`)vXIQKl44;9G^0^Kjz|jtW+UKky0AF
zkTm7#W{&BT;)+@iUT`A(K_(1W#fTI|I$dHOmF?NMWX>X-T)kR`h?LLSUi~;|l`Q!F
z)E$rMkg^?-kA5`0lx!5a9fD`FuZ9oz>_L;~AEEzGuFVTPaI&mv$;&lVwu{=q#;Ap3
zdb>E+@pH)0_3{#iLq!Q>yWgz^*X&kcA|IjVtjdUs7Pz&SKf+5XOB^_>k?xx2bT@Pg
zph*4LqJ~Ud2<eTT3UD%FJ?%^7cfh1EZz5+(D*j(qZJKa~O|Jk6y)OHB=W|s=b*2Z&
z#-K+xq1-OZz6{B9D6h|>6P`obxkcnil00$XyU-(w4Vm{(Or1$GcmUhjq{@;>#@`EE
zReF#fOyexQSZ~o=z#`)tqaNMie+{kNB-Ze}S_7rl$irJ#U4>yi<8&`_k!9mr*MF?Q
z{kX`M*`gO<B_cU<H7hQ-N=8HNqa(ghWB61UMM2KPU8So~nxLy#?fc|Jm!)JmXiJ>X
z{yVK7`ZrUS%cW;=Wsd-X%?(?xZR$Tph&+EP#2c6OdX+<f-6c(m&ySdzXW79Puz!*q
z7J6(W=2xf?9yF(&xm-P0af?D1u;3kdZ()Tt`$t$01_}EjV}_Ywb&BAtK*lqG2Ow_!
z1^I-5kxooNJ~Rj{vvp|c-2+T$jpLbe&yt2Gk$9D2azBe+Xt>3Zu1om0g0X0`Y>xd0
zu;Z`Y8662xnj=>#@b2zNq?rV!y`yGRMFP-hK}E9|Clv7uxx=~s8=b<MZCQ1d)B7;}
zLJ*g#+V{$%!f~|am-piXrSO=PL*$g1KC2WW77Ei=Nxs8F6dw+AaW%^O+lAzeiS<qg
zpoxA~P9<%|zi6Q?1z7B*IctmPeyv*{EuoQI(!2H50JO5polkH9a}ZOiIwjO=he+fG
zw1bT{iN+fl7?~r!^S&Tg0H3S*M5N9sRyU*nDDUSp^o{UKT#NA~NkdAJpz}J)R8EEp
zQJwLX?}(Il&KmGLx(8rMju~gYOyboE2INaGSB+1r#Bu-}XdhZB$qp8smHGzzFR=6&
zUf~osc2&dBDV!(|iPSuP>pcjLb3FTkpV7IsKtGb-M9?df_-IZ39rOnT&7d`@;frl2
zH_ETEyY{?bpD6LSJCmueky!yxNroUxlUa8reCCn0_Wk^We|Wn_llSad3?b!D)XaT~
zL7h<Pj}=f4_Gng*N{M<#Z?xU;cwWcNCO~Df@#K)k5k>gUgMPlF_;}q}v2{NeH#mF;
z1$Dp}TT*}MV6LBom2~}qxStOgRYJ01u9P@I@BoyzQJA;mPy5S^Sm`%b^SW)d8iQwf
zS)Hy0=|HviI8I$2C1<FqzZ)1vn$!$zqh)s9*<Kpb(=p58gA-hFr_IB6p*G`H4pMuK
z*$NW^9YLtK7mjocxrafLQRg)WcF6lEl4{f3BLNj|5ki&wz=QxCYlhs-#TlDjGureo
zpNq#2Xo<rKsB5SlC}E_ixs-}?Fl)nMajdUCjGMLdBk#nwl737qA~}ZA-fqh`{>Qb1
zoug2+BQiqwsA~67QE#j4Cp@L5-m@Nia8c2(aG<ULaQ=353T4KWT71TS-0UYkw7rJ@
z14`9xPx7EjLs<;7!7OQ`P(}}g6Eou%9j=J<CnH^=Yc4WeMMyXBj&x_9^2QQfg0p<e
zKtt1lW+PPPj>otVLI1gIMS92AsaO-Vy)rde%(nITu5xYGu2k8~0jI9X2fa`)S|c52
zB->8fxPkNf+n&tX<EyMH0b@EWF6*U)0E*ep(8)fV)^2m6#<6A)_<GFdN1(O%rIGO6
z%EFlwoRqC(^arZhED>wuO$aU4TCt}s?L*4%G<4B|QyGOO**=1Jv8zV0rOhYH^n~nx
z{@_EsJr@!n*kJnEV!4FL^)gq(@5Zw)uemztfB~<1Pm!yoigvOXK}hx}Y9wr_d3nwS
zV@(wrwNMz(W`Yui>$f=l2R;$qq67Md5{jnOMboRtAno@_T*Wg0l08I)^4BwLooV|A
z_N&F%POjYKr0D3sMpVw_04D6`&%B8ze-tDqHDGRZUeKkU;EgCHYE|4wtdPIPh9lS?
zb6IY))b`j7&Z9(hk!^}9!^!k0tlFW&Uh}UYYO=c>yE+p*?VGM>!8}}rSqKZ*K7mD;
zv@AyM0a(NL*E=F!e@`CsyX^nTZSD&%$x7eSP%3eBiFl5{LSXKE<Mg%lpIRC~?`}-i
zzf8+kz$wsp0SWq<T{J{Z{lTw&3qq-uCaS+@RX?8hJrCR4;_I7}L<~KboE1~66M!68
z;Hd^SMcJ~PcErp;Kg(5+`6oDH!pp^J&!*F<y5JsK6GCBz9K_B*;W@p+A84%-q$qIJ
zy;QW9Mqe|ov(?2^t^zfyW>(7J5Ap0)7zTmQ!-eyBkP2)xT^v<%j5C`7a6wKdK|UR<
zxpaZlr}XCF%g^!R>CTR_u%IzBeloxKT&}1y*7*5?Evc!mBGF1wZe0=(4uhJ$fVYQM
zTce|aDWLtlKxJMEFVXIdEdC7-FZrn*i#k@ost|;AZy@u1pIUq#{Dsm$tDBXd=)4_o
z4|7`H%x&=_#nXkS^LWp@G%&}>Jt^eI%QOdW@@qgrLAw(-s9&zkiT&C}q|fz9_x@9l
zk;qy4VSZxl&+<&SNN$!^=5BW0KW44e!jRPk9>j3mj#41M?4>)$1E`1tmO1BRziqP6
z9M5wFx~VeC_Fk!n|BwG7Y(-zfem<K0p{7iRNI9(h(3nbj+eu{yIkVmD`tgl_*$hhu
zX#K{k(g$n$e{?9tbSOaBHEl8*?O!y9n)Lmg68*Da@KEpSg!h<7<e4~F)XN$`t_E;w
zztM?oazo5?L1Eeow5jb=u8vi2mc8Q%jH#cpX=_YT4}b3>%|yVrssNcfdTGGz@Dlq2
z*<Rk}^xthwdOG;5nMpG*A&iPMrq<3t>8pcDzF)t?@uBTqmV)A8r9U^AI64f$i;n1-
zT5_#rQ(n0IoK9zi3dLBG+UlLA`2PSbGf;^Mt_l?-HTz)i3;-oVJx7E_1<u;Y(uNYM
zd`O$y#8i29l~{XOwI5T_y-7N(z%$1$lr=c~i$mnRFhNeviu9-Q*Wq{nC!CfLT!Mv4
zJ0;^x22P85272{f=d>HahjpkD^58Cvr>E0TO+pSF>yoJrj?>T2Ua>&nNg&aU8&mMi
z09lF*<Gu-&xMF5u;%E=oQ;v>Cg60Yd{yJm3gkb9lcBvF(;N{K~$+oNNXw}058hrJz
zt?Mr1S6j|Ay6CuolqsQ=4J#BixcQ?^pB%5#noI%?(F>j^G5TTM#Q6H9Ki{|SELTZZ
zDY$F~K&42KF><Ya{dMmbbOU=%{v#jWA?fg>2j1>*v?dv}dV2}ZXnEkRtJ^Ea)k2_5
zTkm-Fkj~Th%=n{oTUv|<U?90y^9I6+7aU6b{by@L6ZTk}!~JK#%3h=aif~k4@*X>i
zZ|BG{%YmsgPq9VM@<DBOkqRWR))xHuFrb<nVd6Fp#YQ91N6Vt}k&UD795AVhcoB%5
z<zU#;$g#Pv@Ml1!fdAi)+}4)vN@KOX;mA&@5+fRnr3IZ}TLqkVoN~PiUxo@&e?&mt
z8H{$0fD`+FE);<QhZ~NyAKC39#Go!`<0$F6v78=ogg0t;si<NvDD*9qi2{_f&;+UO
zkvCBKdO1<{I;V)^uNILh6LVkr##J(fjXI&JOF8+PZ~oX37!s1hmPYCO7(_lejqv5C
zb}evVi|;Hm;K*@={`qUNGw=(!-B4gwt)%9G>Y~I3HP5{5{{E_aZx2;3|6hvLlpfd9
z5bI{*Ezg-I2LYLn6>uEaWkIajK!XWSwjT_5ND%*RlH5FIAF)&s33YgKpo6|4X5~4L
z=cs0;olRDgEODz<w6Pa8Fd=k?eP@PQ36M=e=oY2!(<IVP3mu0^OT#0a7A^S)>gnf&
zWiA6BqR4yzrx+FZl*=n|GELa{B$03CrC;V@(zn12!R#HO7M=mV;E>uDuuVV{oGbwU
zKLEh|7v!5S5fLlfYcz|ec($0x%+5$Fsmn><7%qD`(zskccqnSFiL<q&9ILV4XPZtl
zs~r7$o(z(2?X#YtiNF+-8Xf6rA;3$w1RJ67zO5EZUsh_ja4{?WeHh_-#X=3}2sqOD
zW@RYsN2IF;5cYv`NJwz{L-IU<Zk(h;%$msY1D)RyZ7FD<h8AI9vs~s0I2;9IWFDiK
z;I5ZY{v{kJ+o=<bk_x;0qei6UWuHSu<(;L1J`lnO1l|~3M{hUJTu1lH*-+<ryupW5
z!}s`?sDkF;*N@S96Hkyw`$ZOA&A4?A9{uK}Nck^+KPm0IKQg?=P(Ta%4*%(*aCFru
z;6$_&x;@;iBqlhUy54s&{AoGo3Wf~T2qP&p<4J+v$P|*6vmlAqQmEFnJJ1BZJk4Br
zw<lIK^J+B5yOKs9_dFi2?2G?0?h5^3>wX{yWSV9Vs7SMaUgrSX^OrVSmAvLEMVs^T
zniGu<)V=Xdn$Leit<l4n<5fkQ5}ed$_w@oV&`;kmy7*CA%WU{>io1J>M%8!MzP-Bk
z?jO5C&xUYUSbNBvp1ibz;9=u%2fCLj9&a5ve@hyrB@x0OReRag_|Y#OUr|D4?e1@H
z&d2<-186_>8cn-EFH?Z}{C0ZiYjgR|9+||)d4<udc;lqgh`l9gF7>t8x;BtG|D@qZ
z@4!M(A$RyqQB>&Li~~<22_;8cT1_k@J$rEyM&v-F!>Hf`Qb+zZjx_73#uwe*-}#@E
zKQvVo9ZT-q2V*!%so74dXrD1Lk4D-PQjJ#-l}s)+CmsjI>E&C1ri21fFsP-6JUKi}
zn_h_%yw1|!GjXn#jS6&P;yJHiO*(pL%7;qZmTKbvy)+XgD*c9fgOpnqI2Tpk*0}1~
zIc=#To$sPx)r7R~4}7IRqOEh7twjH~`PJFWcScX0<<8vukLJs#GdaRf0G+GVy)i{H
zt08FQjssVhBbKWR<Y~16oJy$HMmg}Mf_05G;bQFeO}r2NpnMzkR%EHp42f97F8=$u
zE$yLapV~M?<63XM3J0an5O!$-^3?4T>DW9lRqV{3%EB6TtjNm}Rx;eI23rq`R>y;@
z7tk<dONt?bM{HZml3G=ch)QsnsOBv$uX%mtv!#cot5{=XAR{GYnzQFnEXgOu_0Op^
zLxf(NdZkV)A0^1DI<eX<i5zKhzpdRj)n$0(@D9=xJQwwS)!^(%9zuJLM^j8i4wsyh
zDl+EnU?f>I*;s@y{Qmg?*jtU^;P1@L@4E>Y*OL{Oyp}Jf2%#BSc-9$Q32gEz7mOb8
zX#%s4in(8rjR({WLm9i1&mfT{eM2JFn>l&uSObIYQe}JyYqe?B%`V3yDK_FmOZS9~
zx&P{-3Tl{AA64AYyV(ouI$p7FEbzWK+WhqtI$~R(i@d!Z41@j5nnQ2K8jM9eZ@WgF
zLqs~)zVn3&cK^^UrdiZdd}X*QIxA(cG{aQ}<)VQ0GR@cpXMPy!R?>;EbRxEF-1<Vq
zjdt+GvmTB8!VYdh^=xcTGhPW%Zmb3;4w!}h_`6X~EhF3q0ZxuY&0)q6z=Hu^GUaOM
z0{A<n9<e$vN6Z^$D&}vph2PSsIjCp#Ynw26+9G)FV}1k`#|O=U>A5oLFwSl1Z|M(T
z6d!&`Ki=@7!Iy8zR)-zkzCLC2wqA73ZgG}1wq$@ezU|-SO0gyMxYy;Uw=SN5JP5F$
zlOv&kfAoK@M|8E5TBw^)-c>iI%+Cv6y1|<ZZY|rJckt*4R(}awg(Y1xA)L%G6qZ~5
z$nWytXRroF#S3&f`^{g%Nw-bHqt+Nw(wOYTe4i;|6h?c9ihWLa-(q3bT#{48dbkT%
zvem=8Vlw(muqV~RxkAfuo{TxOd?HBKckcF1;&JS{GAU?E5+=I9s9~Zc6{KtaartYI
zpsZNSsXT#S8Y!I<Eh*1TH(pL8;Sdtik6@1f>JBT;Zi7gMd27l=6`9b;I9XRU!Ulc7
zi3=W_)3V^u3*7mk)LMTigoBI7ZsM0KAr>Mq<cmG=WX9h5eBI!s_`?>=gzKEm$P^pg
z$mTNwgq@c3F(b}~`5fZk912N<GlCkve#0E9`_PXVpg6{f4H@X-=~zX1pxLkNx~_f^
zXPYWGAIK&!{i~(0(3jOP!&RTt&7>b>LQLb&wU=&5Z`M;8%^@Rba5E2`e1=c2&d{$t
zYpVTW!4{vYgLOY;&eqQ%<>t&m1p-8($FUL|xoY`QAXFcsMSpg~rLlvot}o}UDgg&{
z)LY#$OhRh)Z<5DJ1b{%H1YWQffnP+EoQfDx=YOROu4FWJ;SkuS4eL5Eo~}{@3RfY{
zsi{Xnh?Y8QRtVhB<&MPc>Bs&c3Skblqf|a0^<%MeMA?QNMg-#%hRcifwFIQV?3k25
z*1-ktYYgj6DXKJEWq45d3>TrmP0uN7WOU#BX{PBgC3ZIrTF9?@o`FKGy@qq^XCHGA
zOS=afjb>>$MQ^ZEnm3S`QjolQ%7BPbG=T0c!C3v}eOu`S(zrH|LfeTWFP!w5-}-U3
z^5zu=%e*Jj-f7K6ljKqX+t0`?<c#Dd3JgH6MLoUVf>4cx+$H#0o?>C*lu~?)IbU)6
zE0{CDT8uM#h|M)lG+o8sXvT=IpdtdC0~({urCo}4L=u6e`*+?h5@Y$O5HI-MP@Np|
zjB+n5N;C7rrSbSRR!4~_%ZJ^`<dJSK=kqfBRb|Ex1>cD<3_9_$IVQfhb7Jh2Nf0rE
z4dpU6<bg>6k8xu-a#xg|_tu#<2?k(C7sBZwxUlp|$o4FlHoDd_eZL9*W~D#w(yQQ>
zjXIGA77#N>uiWm1jYLiG5=VX;yk&@p@X)5Py)BTV%LOX+q+HK!Fpuuuxy$HYqaJ7i
z4Ko$$=J|>~E&p$A-CsVmh&uvXqBY#huBFT+@Fkch_BwK>_Oa$iJ2b(az4Eifu1J0E
z7@U6K*EDpDJ&&Jr*4EbI{AY{NHCes1sn{1yA1~2hvoyZ#gycS1u?!Z``klg&8C(~v
zND&A&N!JFpdU-W~gdVSR`}R!WD5R3JJ-2~gW9)lvf>-}%#Jx1U_m5Sye;M~sb>C(9
zL~(EsK7v6M(L*+NFNTV_`a9Z<05qc?Ndr@wZ6(eMf)2`>6+OmWC%&SKo>lm4>HItF
z50)G1pk<WYc-(k9i|2FNt;GufS+~pAeJi+To~--6m(^`NC-5u)>x2+uTzzKDn^1)n
z!Kkt#7Ff3}wQ1KJe0fI)P!>RI2U}*E3qM<+vPFXxqDs^jFO49uBA$2CpOYQ-X}~VY
z9{0})I}&ONSE3LJn9!mvba7=nMRW9IA(KlSz<4F{TD@lH#wZHd>M;#3rcXLhtDdVv
zMiO9l6HN||m2l5T5z_76aT;V_i)YD^ShD=-F5yhfAjvEBaN(mik#OM4reEl50Dpa2
z1eZs=K>yj|1WLcAy0)bs<#;oEQluMAn6{FYyzH8>RRzr+?yA7AZ=P*ie0wC8p{2AM
z?k%@>-uE6MM?#gXp_4?TcL69gHy;Pt{CUHNV(`xW{bt7&3&L)2S{PU@=4uJ{OQ%g^
zvBUgJ7HkKG^!91CKaiZ17=i1aSP!f~(Gb{7l}%ak6mv;{?vQ_i#C4`R&C3?MIIa-x
zoj#8oC{P0dv{4bb0Q-VV7-o#mtddkA8)!^a?<is-#;-;}Aq^bD+h<%YaIVApJ!I!m
z#|+rjkKp7@qM;i=zLFp@Kf3lw<xDNYqwE810~|;KMR0)%rJWzbf#H`X_6LZK3L%Iy
z;)3c5Z4S<tj}#_nI61Qf0ckM~=@n!w3o~af<r{0~Y*+SD<%}0@r%g_*Mt%4i*zfqB
zH-nj1AGOA;N(peWsM*e%<71n1e6=P*7D(^x$*GCW1Mm@tYigm8rhkbnb@uWWSZ2m(
zAZzHYOBLmfVGF`feX&&>CGeo~m$yv>wGnVa-w$T7C=)Sn9Z1NdbO7$D!8^9Y=JMQB
zCRpZZOk0wCZVTo&;f;5FrWo&qGM;&N=X0Zju(415F{>r7?F?!T%!ipPqP~$wD-);+
zjIXjy%iph9U`~7-2bQ*F^ZXT@_z}I7|3-bkk@xTkh(a(HkFK;63UjwsNbhLxRyB9l
z1QwI~Fx!n%e&X>OgAw1B$uw%fd)ZJ?FTU6ONqcD|;;PLHd(Tvavv6{vHZk*iCVR8{
z45LIOs!S=*h&%<oo7}GUvgEo<YypwbbJ=bLckIXr-+1~@1#L4Y28*R2>7F3u(}(3a
z{TEvF^6{?Sp<JoC;}9-l*Q5Mk0e?U~53c@@51bcm%bVBNAReJssKmD*bv{#B9G({#
zZ9eJfaut9V#4z5;igxsKx!{&@_G#JxoAvckqZ0mfReXJPv`+C=1tt;JV#G%oY<KM%
zwA%H`cr1ZD;la{BH{YFbMxl&AF{3;r5?rxMjJ`yb$vWnR#l`l2P%$~hu5n144F5P+
zI?xZ1XSS@g(9VD9vguUd^7I-b5zNVW85I=wu;}3tW~0G9hF?QJHwdm%{fH=$HN<h;
z40KKo1%GtQdGv#87=zzDWbrpK%FV>a9;zhL9mziCfKbZFX$7eO(Fji45yGTZFmr<`
z%Ymmre)v<OK?y)uzx<cE3AdhFjG$jSb&L0i_mg8abYWh~RvyD99*`~02r({zOA4`f
zDnu)7Sj_QS2A$OR(M-?orD<j792R*AxQsi(0oH;N06(tJ<Sm!Cw^_%B_=g(hED?W+
zSIW=VZsabS-et_}tkAj|t7fc{7$aCxUHkEIxC#AGD}u;|3`G6yL;p3^Do-u9(GoK~
z*1`#wFjP!r<omE>K`<0)IkmV%l#7QMT&H$hvVcs$;@zQiIR$`b`y5V!(vnd|K^zz1
z5N1+8m|I>{;9S>=Zp*0Ljt}9f+e;lxVL0`5)Qh?^V3qMp!29>rVF36$ddA;m#0~*C
zxWSZ+6}>FLRXXfmjn3(PUG4-jW$rTVBIE0HCrp3qm=A@nvI%So6;V;NFy1x9d)Stm
zyo&565mZr%9h*P{)zq{r^cqtZ(p0bf{_kF`@;zLiM+6-R^NC9MjK`cpD<cQb_U1mx
zkX#HkEK6iq@z+eOlDF%CC%HpD#80C-u3ug<Guikbt9QT*IHvr}BT*-T8Q+l;eOe6^
zi}%BFJht32sXzv4dul$R1<0BuW>w6XUe~nggcTgiVY2_S$B@v3=2Z9gTMiDwKAKLK
zxCFrjhvWmN$__WXgzQjNXY;@`6wyw8qNc#46F&c9!8kxNpV!F)C{9TEjbrC%1FAG^
zh`1%s`dGARDe_Vlk^9#+6y8@Sf3jHgM{1e3y2y?Pcd(3361|2n@pl18q<ki0U2g0b
zdN^1LYujz2TG8~f6E`JYw6XmeD;49&=*K6ufcK~}N_5TBb2qafykX%KEo?rb+JsVW
zLE_#u3Z4^45&0;|=;O*Ocsh*^FIcV+l=7gzH^iOLt<Rl`lyMs&SAZrI<H;?9Ch#bf
zMaN;tr?|2v9#Z0y-$3G$YOp-1RF<9mY(0vGG(YZ-+0)FB=jY$8br1ZG2>jn6Snv-&
zcyPwPQ~n092p8B!Y$(dL&pk0mD#LZ0xmu+%E$j2!xs?r5TaJ0IBKOJNG~zH}zG3#?
z*wMI<)G3GFTkbZQfm^K%9SrUc6{Tb)XI@-Ql9Y$n@cRI}7oP!lw^fbKfRVGGgPOdI
z^S4_!j8DjxAcY?tft-4P-Ce?>%>M6IHz!k#gwB5_BRLs1`kjpGaklanMTe`L8ee!(
zTloFnzUL_!vW&DIWD51`O-Jh*%p*P*j9VaWclU2v`s`i8Yx-O8o%+SFN@v)o=DlAi
z&!Ghq7N!+IS?Mvb|G}G4L#y$yy0p#`Fhh^%T*bgXxUtFH=l_nSGFuXHQ*D86&B7Ic
z%SxyB?me~moXtYc2Kaq)wJU>v%V)uLyR35}dfUPSq7N8H3<Tjr`7T(EV6d(21yn3a
z$d>*6L`5v~L=QqCsy9VmIPOD$o=|b=Gj}wskKQXrPmtB&>4z{5S>!-9<<r<Xo5A`x
zHZwQmMaR9ZpymF;z0ZD}cVzzb^xB6sauEGHUXadDTq-E#(0FIk6G;d)$_!x*Y75|n
zqxEt-3I4k4F|~iz<#BIZw9O)evu%N$zQ9MV{DPeJ!gwg<PG)#^IOoOYkqG+D(r6ME
zuUh4JtV>L^*_mJX3S9|XD|$dIU_o#Hk_&`Sf0~tRp+KNKed?tl>Qh^B9bP0+ko!(n
zwAVH+L#q~NME!Y$gsSxJ0B&WT{Z+l<$=X&k{{$=K$D`WN{Tq(4*hGeM-e`lurzq}O
zUmgjnT9<rgC+=b59RO_6g7;q|gvDhyvVOn0r4`Gyg+@3&%=QQu>k8gjyzVU$gQxx@
zQt_}i7LR-35@dl}#?Z*uPVr<YbL%6sZ|f?L{=okFI{CfLvjUkIX(XVUmDvUPN&2$L
z%s)I^fY2mUQfuvE9uUUpU(*p#g(Uy9KBAwZn!OlzGL3?d-?|$;kH8>l<P%!nAYw&b
z>C)bnXC!ufC9=Lp^)tLVk^~Om?-IonIesx?_%a|-^yPyxd=OD5wONesjDh8HZQ;or
zo)G=dw^j}l3FPJ;k;h|o*38VV871}@Qj;U%w(jOE^()r79$EsUstyS(-k!aG8&nSH
z>3z*VhzNy@HU|!LfxpskS%0#5dl<)gs<XRuqsgoRHZBixn7~#bpNXe(&m73)%Z}zn
zY(1`dy`o8k160sNu=y0mY1kq)xTV^hiELNb;4qA<R}&eBe?n<vI^UMU&~^zDF<O{4
ztRKmxjlF@%+hU5_N+c2BwTCP*;CaJe0%eC_>~@t(GHYEGH>=<qX#MbCSdOvCp)AgG
z30j=*L;BmhA0t@?2k%%3;Euq$OG}Oq%yO5~&!<q|FI=x+i&4d~GahWC!V~%fb#s93
zs+Bmy5=6nxe;tNIhtTTqr6vV%L}J)A+%m9E-!Fh^f>6dBhc(|k8;AR!{z{^_b1xo;
zHa>lfdS;*9T@kP}a;vL9j|T!ROA_k(5+4tebr@)l=FtVAX!<;g%LCGtL65pWj&YQx
zX0NneuCvU$;y}FPt2C+c^-&#b!Rxf4$~cuK_fCb7sljbwDNh;ZRVUjLTHn=0^gIpF
z7rx`<0Zuu#8X01$p{xb~R;s$MQDnByo2H=+yc$u1f(_w8)`voXoqFb^tiSu=W@qur
z4|g+mmPwt8`<=s|zw>%x+bF7$Na|dOHvBDfONn7r!RK;L2%hj$2xL^m0WgP%l9L{P
zbOSAO2GS;9a)d?k$H2r7nQECaS~oZ%jbRJ~SHJ5~OH}>iXlLH=v}QyPZBw4`pf2^A
z^#hB;Lhkns1h|xT@;|qtWM?IiI+p_#37>OiW$G0$B5DOu!j6$t(FvpAA)@Lkv!6H%
zmzSs9eqo$D_D#d=Pu41E0C|1Vfio$~3;k#0Lug`>&b~-l_0q2R^i1Xo8yygd$G4b-
z;y?4B+RfNx?a<0&^|v{OHvq%#H)=?seF=<0&hgeYr<{LYDOY2!5L}a^pb>#T$3+yN
zZq|rw*qd~oE*)eWE`f_sH^-JZ3zHKC1zR$U3At;OnLPmIH8TczRjcippOZoD`%Fi}
zY8ZYCd50AQbAQ5&X_na0$@E4cY(#uURZ{6t8w9g|8jqP)s>|Z9=Y`!MZ(cZ8&E$Nx
z2Me=hAw8T>YFaNRAa+?U8#fON&0uHaqZ?0qCf5xF$|8K;<6vgHn9?pFMe%>@^1Ta?
z;UT8%Xag%a94Mvp>D7HGl!t_VGc~eVk{YF1;Fr|@fmh&e32eFk{_SuSFoVrXrIYbN
za~RMj8dBXU^0HeGh_a!akn)Z}=ENqoMjmXvS9m*;a6QibL(87YE#I%7)GnissV(n7
z?AwkRo&!wnnJo;(Fu_5lJ;y60hg*c`#2c;@h)U#rd)EPo*x87`nx6W-13kSKOu03b
zS~ZsSZ3g@i=Xg;sD`0PWzTsNoC#)km-_&G5%aGb&E0$=98p&?4x$o9QR8Jw5S#Vz<
zV#IerhPv#&FOrU(Q3DD-JkWhmZ^{gm>r({FdzPoFUKFiUtd?#eG@9TE=FG!VKpx3R
zq-1^hN64r2UkfzaqX4yR>)plJT)rkVg=5k7>44O<luHj_Hzw%c%;l+nu%;_T#^Ejc
zn#c?_kxb<5h?+_7@JLt7-ui!%CGRvPj>18aat^;(G$uBYP4s8jXx<!>B!Bc-mdW3j
zyk3f{H;?1)em%`o%}V};c-5MdTE${>DlimPzt^QG^cy5lt#Z1%_)>#N99Far5R%ct
z7rSlYC>@J$jn%!W)f-mYZYS$xQRUJ+`;+pREV3^#axdnp`o$aLiahOXDq;8^lE7WA
zReook8Skp%k1xv%%u96|wmEgP0FERqy|JYi`TU%Bawe;bqT@J0DAzSKjJev`*KJ!8
zMnC2fi+7>qt>gG;d9H0MW=-y=#wyuC4TO7^YBE{O5k0=Qitw;9a5+(k!C2UHXBfOb
z0O4jBcmDdzS&q}v+8E;T(&Jt=3cPZcff>#xfuqkr$;wRP#@<=g*w+rPfFCZl`qLYo
z^2nDO%!pJAG%h#+R?C0JN*ec_%L#E}olCd%zH_p4>syMt&o<W2?Rjby6d35ywD!ZA
zyOW|JmF@O!QIF|3nVrc{S|V3&utlC%x{-Zuqsu<xV0{R+;yD%Iqj9KPcjg6*iZ-Mk
zccvGaj*H2kQ#N}{`33o`9N*3_KUPjTC8dWn0iP+lFruW{*bTSnt%$69KA(4j@FAIw
zOJ3kubO8B`eio4mW*h#`ouWffT!~cJB6eFcY_Pey2zJq%?Cav@z%gPm20e*9r1Vhr
zvvNC2uRMeWd{T>w!+g?C3bhvo*8JBBZC2s>Hoa}QEY3z1yCq$EP~W$_BK$_`8h64*
zTuMWK8aetUmM5#m_E;*(U2W=d&H@_DrKPS->MF#id^t&T$ofVw0c@%RsP>ailMd_X
zg!tku=`_o6a(#w~f2&P6I0g|xuori}d~F9j((s)@+}v!k^or#^)6l}}n!DOKZC@q>
z$Z%oNxHs3<4=+ai<GN1Ly?pFy%-tHPQ!&uM_;ho6bAiyN-JLmI3;AOt)TdX(C5@Al
zG}>XTI3@4-F0Isaq$zx|l4;PMrLs@n`0Zetk+>CUuBit2Jmt56uBJH@ip6_Yfu@QP
zAVzXaMD_0Xdxvc#9?_m{FUl)9OhXW!=XfL@A>P3Li3Q>uVr2Lmj#j!Ta1p)H^*ku&
zEOPxvx%F3vO(UTUMeH(1A7R*(4Ob`oXgk|&hzo>)Mqr(1;Ko6DZ--=PL@9YwHsju9
zc-;xBr$^D>KKApI;rL>TB%j$8D6#fY&8}ua3=9cVoCOyMUbj@~hD%nKdbpsY39@`f
zz^fbE%Ayfjc-$W(VnaM-60qT6d_RHXf2M1D9DBB1AX+1=V9xxu)vR;_B>KMB39&nQ
z-OD}JuJfbm0)A%Kv=1Gc;5>0pjf?A3f4yhQeG{pEC94<OwFjvYcPD0NHK>=F%`+pn
z$E~^)GZ7swko=C4c_)rr#B#lZXO{pKBxAWjG`_077w8z`w@0uJu*<b4<N}UZUvF`a
z`1FwhMfz32uc1K%-oyyAmGQKxPtz_`W%>`{FWiw$Y8>}w8%hZdF&ej2l^oWq)nBM<
z>*;P74pctYD?sRxYK2pa*127URf`4?t6}zIECgtJ;z(xk+~aM%f+@2#OGQhd;4c*~
z)kzcn{xR*{)Yf=m#pPQ(HcyH=?WY;e0I8)N{|$1(8loi>9V7uU6T|g*uxhkkvp@?>
zNsJs2iUw5iuf#LdrWng;hS2LV9txQnx97`j+ZRtPemdopUTGD2mO$NdbC0)XsR&7;
z*~xMKMI8mkiMFMrw5>V}PqV3TGn#=Cm|q~5ynHD`QbvB5b>O~<0NJ%3yyF!wxi4d8
z7Q_YK<|!)}R<qK}IYA5GQl?THvfX$#<uXIazQ((CGermTIaFiHlGqK~XC?gMUMcnV
zdT9f3+Bh`b#f~KLei;y_6$Wpr#(U1A^dIl;UaAJK1_i#y)YExz;KVkWQ;xXLg1no6
zMOx31ur9CgvV})r4&15OOI;waq8y&)L|~1+M=}&OG5xk`hx(q?IH-skXq!6HSSzn7
zAJ;sl92MnUC%*fcJ>{v<{i(XAfkc5)(Y0V1c`Lz!W@0Z(RaCsYk9K^V0h4Q_>At2s
zZHQ&(t3-A-Is;+!RVY-}8b~{$<`LxwwuGcj0V9Lt9N8)EYqF<225pU@WR@^ltvZLn
zjp5~ycg{CE0j%Tnzp#;)G`}&}{5l;y?C<RZ_QB*53S?HcgHhiw+uEk^on>5mv$x($
zPhy}g_wGffz>_<0@fVu5?loSE{c;L?96da9N<<3cdLel)Iq87Z<N)@XTAytI>c8wb
zArmzNc`8rd(2W&)rm_cSzUwn9!(r>jl^Aj>K&clgXY&=G;4j*-qL{*1^5N!URY%o-
zx^<b|m2UIh32GBEpEa7=O%rZ>_j5A-R|#-ic6oMwOG)4RK&Rr@?q*+*K?5MyGhx5t
zqy&p)Lz|brmg$1U{~@`iCLM(}c36OQcASluLsm{YO8O{~OW)wti<#k05%|o>S*Y5T
zm--z!?kG<R2v^xOv_cFQacUL>6Xtyj59AVgi*Sfy##xV%uFc=C)LmGihFBXrYiw`{
zT1Y3>!QK03N0H8h2!^ybbs@L_Pk1~F-d{F=g8VqHX_m?dP~~)hJN_Vg@@`k%Yr!9i
z0gn0o@b*_&9qU||?Lga1uF-!iU4&PmWjTvh5o`@Ha0?*Lk#^fHQ;iaOMuJ$W3?e8u
zVLCcHW=7QTPfClh00|dBu)3T^V4sggW`d*_|8i3$(*_yEcAWg@LkgPHdN+d-AJ$yT
zPeTH#PbuT&AT3>0y3v#NDaOaSc(SieOC9sW(Y~k~pl~s1`!Dbxa{nv=c;bahspQ3Z
zE;v{xN4Bxb*Nn4uftJb<wS&{(xQ@-MTx%k6kB|se7n?cCEJkBKtuF{AH4xC5(+VI>
zZKmAv40vYFM&-kI>R#ne>SE*n%e`t}Eg5}Yz9RJ8=@X$&-4QY+z-U-&Hs;r<O9&q6
zw`qR6I!1>bS68yz5WNypAP!}0#GM1<d?GBOIdYZR)u}7GZmd$Vyu!!qMxoC5z2u><
zDaLVd4zL~E$NQuV#4mvRnQ@{ov*v($J+Sje@CMm}_$Ft=JgFvI(|G!F_Ml6Jj2w;^
z8rtmvfP>Qj#G!>afTBifMItLd2}xy6J^em_q0}lpn1rc!J_njV+I}l9k6e|WWOtRN
ze2fwb(m_k?+*Y}t`yGbky`eJp5KIMh3v!qI2*|?Le}daLn1cjW?EOsd)-@#e+_jn*
zb+{J19k!r?%7*gEC4%<W1HjDy&a_n|kqbchCd_T-pJ{W);Ht&kp<NBjO;D{e$k(AD
ziFZKAuLsaPhY2ZXRly-UOBRmM#*~FfIby7s7tTja8@&$o(knKrg+w+R!`mCHRF~O9
zb4M&c{s-PaLz@eB#YoLMrdaDsr`R?0SET`p7zv1bVcKih^+_CWI~?(?^1BdQhuL*G
zVQzm<7k{4;9k=bd>jytlK;M_(NMIp+c5ge*ZA_=GVDN~}@`{NdTe12PFPs2^#z2#&
zjf<nsi_d;+9=vDh(;rTI#O4ioNe-78bLM6uuuF0SbgyH}hq#y@I4jSFXBtJcPuviA
zC)sQcFs&4R(Z%xEDcKn%z#!$v@OKF80!{_?HpYRiy>NUm)%y9y0I68`{w>}M0DgqK
z{4}(C=3pj8vl~C~9GUV()NeGgrk{?hsXf7Sf4YP}686^4Gg;igXs=5jVyY^=)aKRG
zHF{e-F=7$;#ChLMoR^O6RJ`hBO(~<PbF5!JlH6%{)h*VfDL4VNxHMxYUZixhRDlzJ
zkuLGsox?{dn3xF#cUZ`h5l&P{2}$s(B@1|g*MS+K^}1isSNH+`jyJ*syT$ADN5mGw
zs8tXYQ$Tul_6yGK#zyOYl+9%+om{}53FZJw#`zjt=Vs<7s@-3FOn(Jggyt>scb5C&
zJp06}EE@Xy&D&D=xWF{|x#ItNTYZ*^s|S1ep4t+OpiszdkZ0?wUy$Vo%%|H992l}2
zE}s@wyJJzSXHJoF`}jWnM#<i6nhIJBRmIz<a#cLueb$n{_&i?mf~`+K(Yy0A)h2d2
zSP#Gi|Kh>lyE8}joqbB4z6cL;61tLny3pSfYkpTGoBtN-19q0qYYieq9zz9zc(g=0
z>ztj}`hAUYApv}Z%)~gGAV^i`uOQIqnyS)lHX*vU)`G*_o9X*JZnicUetDsbM+fs5
zn~`QpUOoZ<gv|j?$wTl*g;^jgA*u7o|Ekpf*-E`<ixX3JvW<@aZba;yh?{;YlHz{t
zf(9aa(xGpMb;d2@ak{^q&Iv8{0=Y}%kv1);o6-*-xiYK#Q#Aqjp!v~DLU<(tV(9re
zfCQinIQ&H=ncrFdAilv_Ocw3Kgg;m<PCJ{JEcA0e%gGJkhE>c&;0C7RVdDoALSer8
zr}?^2KWKCX7okj7-fdx$RisUV!uK_PgJr+<c<e58PKKG|W`>4?9rhTi%!|cd)HlQK
z1u|fD8W)#K+M!H>HhGaaNHWu1?a;*}hc%6G+)Ih!*V#(CZ+X*!@}=HG>hDC#t&IHi
zoZb}i+wL4q6ZG$ec}h}Yc52Pq2VxoPLXw`80P1J=@&cz%KDqae$iY4WXFbT4)<{H5
zfl~@qV5(LWL;T2Vk@H+lj|7E@$9@x6Unip+yCtV>xnjk#02v^pwfq;W9RjF8y>A8N
zUAP_ecdA2kA(o6QjPY{(@Wii_VxO_QtDHU}6y+2(Kwu{XS1DX!pSXAV?k_XX>@Frr
zxevWSm*H%JEobi&rGLTWm6bq8QWb8VR0j>5LSG^3(n&uh;X8Jc-IeFg-@BSG-n=Wp
zu9I~Hkq(M7#P(h*1?#X8M<uyGuN9-=(3-E&cy&vf`H)%5YZM`gcij1=xMVNThNb7t
zt<Ux8vy7#z3)4l)^hrSf`X8KOo^pmR3bP<hb>(01j;n!HmTuTsL*<M<IBlfMZp$tH
zxy+Iu6$I^cBfc#KqXSOn>A`r@t^Vo$k6i$KTUNdfM-CnIE5-u}7xU^wO9Zn`?t>BH
zF!$FpFWkP}?r}7AR@I>3*;i|1^m(=Jl`MI+Mc#-)YHD9TwoV)b7g$nhD4@k$j-udi
znGlB+1hoAh|6{toLUV2&!Jf#tt7-+~EuX@Y7>jyDbYDkaMhID(LF+6_{Bw6l2F*+5
z_t=bLB(y$YSMNNjpbwttUtped<lOg<F8voX*lRlzx1)b91|vbPGUwiYz7#U0S(IvO
z?U2Drel*zu!RD}eU2u82cnApx-;dZ$&BeVrnEUG5<v-rC<V6xsJrxinqFNB+04RIX
zyHrGZ<|BdNBnP$Mb+gL{E>MGQ0g>yGCcPI*J-GL6uo^g<NZ8y~a*H)lJv*o9k9Y`n
zk%<<?+we(3R(-DB$;N?QZZLJDslvDqD+&EUgEdFu{q=2ECo88XE|n}V8LZgJw{m}q
z4mmWZwweI0Y@b*5GkR<DVMONO=sVLDzDg{&V4+?f^*r(S-{NZFVrh0+;Brqf!^Y{$
zP*cM~8^sd*)Tj-ALqF-SFRIJqd&gqfd06IRoJ!hM2w*BIVOf!A{RInlMGX8b6-S}{
zY9Rx%T}5^TQ;Wm9M?|(&CAD?JbC8>@wVJ&+1EuZP2Z2SO;delS0p~2(U-b_{df1W9
zn|!lqc<%LnigRiv3a0=M__CzO7k0n>t5C!NgI(C3zs*YCUbwFNUu(frvCiEa9F>*w
zp>dA`$ANdii@ez0O`A6S){ZBKC!Lw(`g>1Bb&{xJ9mqLERLPI8>UP52_+Sf81r=D;
zkNu#%(MT%UOksA*DtKv4vi&o6%?7XLL0ZgX4bjpo-$lvc_WN~ht9?WU0-W(~1{ux5
z&4T!=$Yiu><zs|NVp)`7io{~-Oz(AC$wfK1)GQi>3V0z)tpJ_v)eOk^Ws??KH|h|!
zTTcq^$l+>Xfuy-T8K)ColH=7yJj!3eu>+p&&v)<R>Dw2OtLSLO8~#_j`VAI~<a&2X
z?AcZlF>TenPabd7Ws?g(wP$eK12gLxc0Pmg;}T(dqPnlobuOM?w)BS0)BUd8Pi=g5
zdIB=-6L0Fx@oTo@37h<T$_Nr-$H)=|PTPM44pCoRpH8drURsA;Uad%n%NCMj*<ju3
z2MWoC;}J9Tv>TKuFPsDQP0gDRfj2ERv}B&&%lqH47fw>T2fCAL`W%b{EJd@<#=~Ll
z^33zPNQisuMmNF?u9+9#n<pyq(TkdfQdqSY1a)vhH>NV`^ey$o(l#3mN}#2$#<YzE
z_V1`$zh)aa6$;yG8a1?h`AdB05FVN5_&V5J$kBd`3@lJuR@`yr85d4Gw}$iO9g<f7
zO@23LCs1qLXFEWt>`T>14_Eq?+I5sFeNk4j3)|g$zDC!ITBVnmVF+fe*{6huL~rEY
z0}X3pj+|(a&7WKyC=k<#>%PHXCLAs1+)=%D|D_8Jm<*t*f7tB%eHKf<n6tY(Yh(}X
z)@2lm;%u9rQFLQrU|rzi%MT{8XCEUm4X#mZ%nzr-2(NA+1NQF!;Z{*|K{1cC*X^hs
z(3ty=rX2a%SY>jje&M@luzGQIDkvZ)z?Rx5p6>&D)xjM?t~$AoB6niR*f1A>>5Pty
z{0fM%D0L9_SzE^N^qV)g4WY1*4O*e+t0y^<;>9(TGaN>E!+;Dthht?#XvdRQg$i58
zD8*}dQ^5b=mXXIui!i*du|hv#lnn_rJ4+%c6oQqT28`K}fY=G?QlXZ9#hw|SpXBkr
zcxs*gb%u~db68wVLB;V4>&&y~03J$wnIV<km^pDP6r$H?q*#6n3kQbM1_YD??%dr+
zxt_r?r~M1U`p48cw$N8@KRirX3tq9QLs@V7#+xY=wCQQTJqYz^ueh|5TY_5NpBEO2
zGhnUHibuS>YmP7$dYd{IbzC*X?1<>yH_8pYGaneSQ@Z0irVU!?)7uX1?_{Q{{!e7`
zVW?kTsX=q*muD0c`9eF^w6fB8irWpVu*Pm{y)LF_zU@8;&k}^b+Pk<2au}&-1cO1q
zPGT~*y|8BXTI>TFPm7Z`%pYq}Y%01}^WOMYUdGLC2g;HWT5gtc3!Ur%HAV0<ftn?;
z&r?eb1dWvFf}E?d@GO!nI#*A%r9AEu7JHuhlGojeFH~T{y7N1Xn??wI8XW}x0#4yu
z>ao@DO<vtuX!H{6HCa*?5KF<qNb#KQlE#ME+INYzP0Wzx*LX~-q}j-hu^w~H;_Lta
z1!cFC@1Z(pE@U0Sfayotn2kY15+W_wr96D&)RxR4;v*|oo?V!_SrA@KHAlS}izkmR
zS)YN{ZoLYWc5%y%QxD5$zI+XfS`(nmVG-F*mKOQ9lcb6@vFTn?j8pHU-M1u3`|uIv
z^}lm?6CaY>g9k3yAFkTe`F-^U#dgma8S=scoNLJnq+6UZpe%Q+L{RebkdG@VU8D&7
z@gY%4hyDkK14WKgd{ndR)#_hrshkVs@f-bZ>fM%OcFNVmhka5spj;|c@6n)qru~Aw
z))ypxoIr+IU~(V7<CbKrbuz5Mg*>jOV2hJhnm{reV;`FvQK7hMHEt`ziIJXQW2<5~
zL2r)YcPA|-2`4Uh8AU?Ing-o<Lq0*Z0vSBFU0Lvl7JH&91%1yRTi$M=aJ1tx2rHeJ
zcFWE~yT}T*49n}`a;|r+bieW#J*}-=t(l%_<?so`)Lr;8?ZAoqwd3NsT=gc=^$`oy
zyUrZ-BSXLOYky~o%*EXUfe)AO(4ok_%0w1tyaX_j^ir2!*o@vHWA6tNgdbRD+OMl8
z6<KS&&IYb2G7UTaC3%AuVYwp7WGAzyq9SKMvF5|T%Grslu#O^JqwlP_F<(2$Uup`U
z<;lO~0l{uF=)Or|3O)Gg?-v~^*%f7xc#gIhie3mKJ)L+l>h^L}${5^-yG2`oSCka|
zca1BPEUpY2IbSO>A+YEyl1A^k6GxE}fOEz>ht1!x&#KS#hr80E7!hAc#*2w$?qwL;
zfNMs>S6}LBXON!?8P`dr;!Z6XFP68XdwiDv)r+<aWQEruKUFz|wuR0urvDM~MZ-3^
zoV@L)|Bs=%&T?3eHK@^hN$S`yt|K_>DF<<;5}4MBI0&w}TcXVMGPh9;ey?^m+uy59
zShtJELK;If*gg~A&qfQ~wKLiz&R>{Y_Y3)_TN0Zm{j~=#s40$2T`FG$I4f#%<<jwZ
zTE|#UpL}<fxBAt<uZkmxEu&yeMGXHKt$yy7hSBq;N3L<!!kP{-UN5qmsz4ZHk&-E|
zH&^N=@a;JxC6hH~#&ng@T>}jym!SNX9)B-&DCn0cP)(8icf8)}nOQK8?TIt|*qqf4
zbfc_L@T_STAb`?6|0T=2Ciw_5wrHhTUHAW$bazU~FVo%7@bDhTjeA94YWXrz`n4z^
zAY+hsv8AfiaCoi;BW&vS2O{)DPI==?Jo2;>nLfD%)F{ze(&|%HWK{zjjyOeZM4vxU
z5OfCbQ>*%#_^}fQRn*!7$Ovb=-4H*q+N1u8>NNHe?8nAo-P8@@OaC8(N7SO6FH$r5
zRsVS27`|*rQdc06TC4a?3r;?b?lDB{{f?KWV`qdYAxfmn#KLwcdKKL}D;Sw6lcpj!
zu0GPPTuMsh#1mPt5tU^E7qUZ|CDI}s%R&3FeVSw}d`d}BRUbs8LV?(H4b38q=N`cC
z5?ogvY<7X|6!5X7i2s=DD}s=w>5lpw#;c{D6!BGden@O&FAaMX2z;3MXwQjJ%?(Ku
zm1M<N1%(;=Kg&sNir=_~qgf2{kUVY?9+@WbbM^X~d6)CB+v?KEbSmYJ)x1?J)YdY<
z2V=IyejZfjG8u0){h;wUg{m3<Wwtl){!4@NeWNKia@jd66Fk=zO8w(-jPAb4&!k@K
z-uJD<7;xB{l-X|K4$RSzm!qbn9$=1!rh86S$2Z3vmkDFHa$nheit%Lvt-r`d4P`W%
z;r$=o@x3q3+MGA`|7paNxqhNjZ=wbLVkVd1VNSUs0_od8$jm}(TQZC6cR%aeRtcYF
z#-0DvJ(ZdF8n^+_0qJG@mNVDKqB2~7+P|)GoB6q3YK^vPXcx^zNk$zcarSNv6MKzV
z2QtSfvDpc!I#$+Ct!z!d-Ce}?fv}#B=@FoX{2MC5K#dfaTn4TWgd3Zjr9UNju;k)4
z_Q{19Xj6O_5BKqzVEdK9K4zvHiHa_Wx22fD*vw4^muFE)s%x}n8|5N=D@s3e+j5I^
zJ`@}8FlFlV%BZQgu<Qy&9Y-<tP4BkbhZgDSi$9~Cxgis$c3cJKr_ZSHfY*{#RZX`n
zP(90lRgGO%617=6Z!uE1!@TkLjXV0SV#cY@Ey1?^W8Dy|#ePaKv(05!0KV+aG!8>u
zeYBrtVh}^98|j_~+SK>{Rzhqt+BS^82lgQ@=NWrEJ_-Ue8>g71+)@~oqnW!YKdIQ)
z>sCj%y(^!GuAE?r*p(;Bk8={)r$L3H28B$46Pu@fQ`|gW3T3}A0muIz=F_7N;ttWu
z=VA*IJXpSTSzxW<Cf%}*$_dk-L!OTTXw8h8$rN-Dt-&+6?7J4t)U)5j#sgpfgg+<p
zA0-$8Blqo6dUj5%H5#hM(-eQLuUh*`z}CsJx8*RpppJyW;=J$S@uI(F#B7o_*^495
z<5yoYbvn&*8+mRfme^!@!BDfEuakwSM^-wW=Y~oEv4JK~_ckMAe~zBpn@Loj&Sj#r
zJ`$BmqA$ZPD7!Z!GqPP<-E!rpS~fCtrFWi+A<>X?a!Vmzf@Q<S&CV7})KG+{{f_Za
zbTag!<&$C#6+Y7P(k>w6TErIAbo!;7U`QSHjq;IbcvCYlcg-en%R54mgNNLsFj(@I
zIJOqXf35h5fu0sp0opMkM_|~G#8o#0p2EQ=JXy_=@G)n>QJ`31E)sG7Zz>iQ39pZH
zpU1B73Faf?i)03N$C#p-Ew0C*$0qmYIe6q$q>c&Lm3F_Uqq|yf%gR1n!+piiKY!)_
z&nrUc-CmlGo<uMd?_suaXJ!-^8o3&SU=YJL)v@i%X?$;^FhaiMv+>luRk;wSScLv}
zFm~>>LD*c%b()_{J6BZnzz*%*^3Y<rzm}A<5v00&GKZMA0vE!^e|sujbJEfG65)e5
z>0M~HtRu>?O!>6^vLu6O`=V>{`>cEHb8Rv6fo@jm4MJ5{BohmCDxO+^Wh#fQat56$
zYF$aZw7ZC|oV<ftLN5s6dte4Vh&$PBt<?(xQIYATZHFm!`*@X!u7I7ZMIGe%E4kyq
zeIf=>>SEl9y6D4!?*|6qFu2kgTjNJ%5@UZJ1{Jqtz~1<ol5W^9>*;bXEglk6O4Nhg
zL*Jg9gS;dnO0_EF$3F@mb$!$tLs;8YF8{TLE{ka&Wo-U-7=tAs05ac@tWqlc%<gyM
zdlw}&wO>AT-<BTy$@a5!fw9=wO0|!-JvpeA=SnIb@h(->d;&^2m}1(r?OxzPb_jjM
z35Z5H(cz=9N>AM<&O<Waf@pl2@oj=Pws2oC!?McW!DB(hPGsR7E1xX%_k}`b%VBd4
z3sQQ;&T=)Gj&TmW*RH|*G~82Eh3&%xPg1Jtc{zD){{X^~UptAIAY{sqpdn&u(M$d8
z?^0)V(+=3`w}mYbB_!C_R5Fq+NfWBN0rh*0p!*{}0Xt7Y`*if`O%aCq*KBuPWZ7j1
zywoyh6#SNbJlr1@fe*u$>u0<Z2noGs>yGk4EHKJ6+Q9Z+@|gMCk&-NR-)Z?Y)_^Am
zJ#ca?ex*Ii@BnSF%s{59hr6Dds*ELk!U@~~7-Yn9jII&Sn`?co84zrz*RUfo*A;M(
z;WEur*hWl@t$lnfH0I8L*FBRReOPp=vBCS;RNR6>1K2Bmtd>i+(H<b2`rUSjs)APS
z3nkQz;sFoL(vA4}*PAs}D6%8-<Z+JUIti0hJUrt(G(+YC0+~&sfv4>^3fH`iI)4lr
zp@(6HR#H5w;8ehJ@TtGIM^RkG;tY=6;7l<cEnMA0pyR}gi6+&!@?F&lcD;aXp|UIB
z-=94LO})8n)q^JoevqxQ$hpkciA)7*Q3Vu0HLMbjc#IU+=%)iDlGcf09qN5!wdxUp
zM@lamTXi;bv8-W-6;S#$R`t>vl~s$FxT0R@rt4UEy1vsls&z8JOTp`26#H3)Uhti;
z>z)l(3}Q0o*sBikkVzii<owC@Zl<q8@b^#)H^g7sJR4z~zH1fhX^a<acE8wwRkwbc
z*?swji7d${7vkAfe7)Gax3u!lvLHG*W;mlD3=lZArHN|iV!ka=-ALSJc;$#QO`$(4
zk02Gg!Xdv$x0Sh}2f8SFy)tm&=4Z+ng8AU{p$!r&TKT`i0BS<<?F<bK5@Gsws;*AY
z6)u`nch({AT*>hX{{8PVwXbsAb<1<VAA(Zh$>G0gpC87#Oa6y25~1_rUBp2k4p;rf
z!*PStQS2ME7Rz}Mdmn7pljm5-=#m@j;ye(^!;3K?W`1!MDFT?sfk+XKPdWyfVg;u+
zE@}}|?QWxt-z$B@|7>S<!8PI;05L^6_c#C{E=pxgS(v-ab+<HlmWRPABQ?`vpHwy0
zvV{<AuIdQ~GW=0}2)2pJmPW@gR#SnKR*yUgER;1SO<1zj-oYZfJGmaIR){76w{~pv
zQO>FJLqQFc@cXc@uc*bw*xR1hrgi4U>g+M&gko?TQ2|?*f{f~c`1b~0oQPyqV9e8n
zc-aE?>;?9)m7@@W`hyCNKa%rBx?@-y1NBEt75lh5n>A!ptA&Cjv&7*h5##G?Nj?B4
z_Z$bHuR$<N^G7FaE0(@uW(BB86<)fH5m)san)z+F(YKp|^%rJTDt_z=py<o#U}eww
zQiv(P!3F$>LQpOL+};~WO;xeZqlA3>ojmP@N&&9#7+lVHb9e-xK!}I+?qgQcXq<Bg
z!}Wj?^skaPF4#G$iCzIA&WX=}jb|c|NdxC+7$*F0y-^!$N8iH@5n!j^H7zpDW+nrt
z2jRI@Bs#tKFFxnD8Uv6$TbRwMD0dy!-PgGZl1lqOASyunKwbJG5h)lad`9QO$O|Z5
zQk9EYMI<nUNJW3zz^k1iks*HH(4tS;Sa(7Wy&J*9S>KR&7WG;*p1Aa6^-r_*hhu;R
zWlXCGga|=l2})irvbpl=5>S2RF;uMSxa6N`&jP=E3|CuJ8>{!V)KrVdTU!o?F!*Pb
zx-G|)pP)e?tEW@v;@;9uKIb%VR^)X^?K4sTMjz@5r9yG~#~llW*UXb9XNy~mfynx`
zfWkI4I1j#22pbY(ul+o1uH8&L2bUEB&4^{_>y;30!ECzgqHJ1Ax+5k=(nTxsw@}*|
zRpZVF@b)4?D2VW(h$}apDfU;CY!)p(&YzxUhE2Ot0V9JY$UpB~i4?_!yXDb><Zr*F
z5H*IVSA<s5Co{Ok9xOhl<PK8f{o{V;10|n+S~$Ae{fL@dh8xp`I6{>b$_T__ylpv;
zaNd~Ml~Be+r%QOds%0!>Xl|D1q|@DXO&)9MH{3^eC@Xdt=5F~|>nYfx#GjOE%!Zv`
zpNL+@>q1pOwKt31BwwTNgzu$QKcrt3`D7}|d{d!!H48vg^$=N^chiYKOy6^<7*^~F
z$tp~xQ&3n1iinoA$hD_TD$mV0*JSZ4D?*N9l^WVKZvu&yF{^!=mo>*Vy^>zoi#?!+
z+-*vAQKO3}j4KD)DZMd0(4^yq3h1Y^#oFfo<eu_-eR<g?NBi<gk(%LBqyeF1g^@-R
z?5Zkyda7N>A<8n2fW+{mw^B?v1*Nx<U8!G2X6GgJ#Pgwmx5ayr=X1}Vh#-_at*$|;
zq0h^5wPC0l3$xFA(AwVJsT?5rqnKDrJ+6GsHgbwE6d^K+{(TkPjha-e>5gI1AM^p^
zfAhW22eqV?Zipb4yc7HT7!IAf?Ld1c4+>@0*UjKJMmVe)3a?vnhJ+@%QJG?oxv`wn
zdQkTy-f;pUS}6fRs{s%Fh<_-_6!aJ-p&9Fh^3$GT8tn~GBgAG2D3w8bZB$dg!z+KZ
zg>3+~6n<tY+~qf8s;ys51DnbqU6U{RB=#PFfpb1iy{%Ak=QnS-M8x_$W%z|=0rm{4
zWZq-LSI+uK^d##W#vRsap-~`?g?R2>d^;0fxU97axa+p)NJxTjN+v12hbJ^P8Sd2O
z9GO`I<R=b@xsp2aBdAs~m{*g1|Lbis6aI%XVnYW0B6gk-gQ<;2B#HPxCd|_SHpl#7
z5lvI@o3mL^u6=HA2`=pjQpio`o6R2=wmfuOh2K97LS~hahZsAS4FxY{)R=ls(-l0O
zzde^RtX&;@?M-W+$=$)IY7#cx9&!><1(jGWdG-f9Lb!uF(JjnM_!OQpUYdd%R5Ux|
z*&n2ZvNv68Lk;<V$fi#|lkj2%dgGrsD&_!-p>{qI;ln#rA6*Pm1n>^1Fr0%KV%>W^
zA)^ypqL;tyqS`gn6E$gZ^LFtEZL~1O)`0|)b^mvNNm|!4%Au$t^;I;_MIqXgZ~NP%
zQMlodOs)U|K>fdV2$LVziZ75Lc1x*ym>F_LKPpsZlichY;LD2axBec^{6F&|t@>}!
zK8q+%062y-Bl_K?ZIqp(%%r$`>pi9E^w+N3^FwT+_PCrhLvztlX@E3PF-0|l$Jvwk
zBwzuYj9ER=ffR}@hG#>h*j~tCY1u{gkD)39dS}v~X*|{^4#p#xEIOsg4@U&xBV00?
zC*>6-T8jSL6LzyT%pWx^(77c8O#Ha60R1sGn;G&&M#hE^O>lhRVOhP`1iO=berPs1
z<4*pMb%CTXXKaVWq=8CNQV}t|DWdn*&yMIdlhyWypzK(Bi%|J^oH{`Z=(NNJmv6~q
zFK>#Z%;@@mjT{sTW6c6bt0~5?J;G`2d+wl4YsGiD5fj)-9)-$*4i52pBgQ|R<<XXq
zgXGm;$B<St>+ldlEY@zpP80BR`G>)(Cx<SIf4PHY0DPM`V;Y#ZU--Uj`UrbRvQ=;S
zJtj=ha5UbCrZ4Vvo2ePqnqJzrd{}^5Y0<WCYcHF4F0~}R4;FH=JLnU*kGTpBdb&x#
z8*?}aYEO1VGpO>T*aclbJi}TMu8e*Zy<Y}vBj{1(#Le*-+`DJc5y7SUDw?S5{Sb1h
zF45=-E>y=%eS~paqFmYk!2_S&L$-Lx(+Jtr>07HiuIyG-YO(ax!cwmlH5Z#c_9o;d
zS-0Oya(g<GBypJS5?#yIBRdz(YARN5-J1dOu5c3I2XailpQ$q@G;Vp_?;2PS0g&hw
z$j+u7Qb3&VTd?ewz$>qC-TkR6Otc{Kg?`cQXLXq+ym&Gfhc!}4Ej2bRCz$b>@F2Qg
zXR#Ulps4~3Yqk=&Dhbf&aJAYJ`M1?8QggJCGOc+p+b5NcNBlS80kan4c1r-vB%V3B
zJL9p@7W&oyACq$B?bPk$(FCoBpaWWXX^9%|tG`r!<CcA0@hv06^G8R-jo~d==e_zE
zi^l2c&-ecb;a@{yI2Fl!1yM2h&EMPf$^V8Odd`8Wh#|_Ka52(`(K?|0XPtQ)Lf^$l
zDWwpdKKjv#zWjQm#Apiyg^mR4vZ^jZKM%XOu`HnU$}=?d!qN({=a^)NBFG8;^@goW
z_rA-RMIDu?pW;26mc;2I6rRV&+Un}VN3iHo*##m&tNqp?By8(!izGVGkoZh~xm5Lt
zv0b_JFcblow>7A^hlqufGG@SH3jT2}%E9sRa{fLFbJDN0#f~|xIHJMYAJE4*yLP9M
zV_MCd?CC5inxsjxx3j&Vf$d)Js$Q)hL0uA?0vc}uz+HO12zEJK@Cx_oisi6gT=Dbt
z<w2cfz)cdQOiJ0<;nz#=2mC=5mS|WuRt4I}ie4*;j&gv}R<2JX{Hg@7mZ5+Y{(&2V
z)Xs)rFu3bCI*_M#Sod(p1|wV52RP5cl@0n!Nh-sY-mt&w!X}V^UM%!9*cOx3o5_H`
z(ddiBKGk(&{*w|$h%i!SliirBGpYGn?i+Lv_HZuQ3kz+huvXTo+71@z#-Ckk^98l(
z4`LQV#JyGJez>3{3B$79@edPkAX3sxj(EycueVee&^+V_I})sI*$>^)UT;FN_hr)b
z2G8xeUh7V>y&W(w?E{s8T5vNsPVsz{C?vckfAiJkn!jC0Mwgv*B<n47TfRUiL7elk
zr{OA;tY;)cIwzIv*`dR+KJ4@xh;$Xu<sBE3GHbHq3OJkAYp<o?($#TJANxM^@lxoX
ziFsw+<)tnbwM9Dst7;ftmqg-w5mirYD&>M|sx9gF#o|w^qMgrU-=b;-dTPcKM=j`7
zyblo%oq44(-|zx9LE|xypU|{tY~jI$(%c;|Mi?|gjj(s3B*4hFCOpsPH|2Ed-|Hz+
zr%vA1ZEL)eYmC$9o}}@0Z~X{G90on^c=#Ioily!%U%(hKzM`4?k9SJLxv06q{#@T^
zz<NS5t4uuyKXM+@-P>z%#u4cxAN2#ff{1sE-C#;(V=LEQH;@Rw7c1Ux%joCbv<S)&
z!zhzTTkJOZg-7+`10)1lJsI57%<--IM2nSxjj*RTP019+a0N8~@r4>d*c`ZhMq8mZ
z&ZQ5%6wicb9$#9O@xzphlz(!NXm1u_C4HRRKf%M5S^`GSQ1%4;i687!^CISm-MbyN
zbb(8|0wFl47MBcBk?l2p<Cef*O5gaO99C@qq{N$W_n6^#wNCsCjlW}`YoU_{yF5#G
z%@W^+{S+qAP%tCE;R&w@c^UcPyfk9n3?9k?TItymDujD!++@d0CaUhN0pvRsqCGtW
zjn}!3(A+@$#9n4QaO@X8u{~$W=g#VJ&xfTfkQ=&k(2h-9R;KHA80#3WzL|BtGrC<Z
z+nd_#l0A(@*&C*WzA$OKF-NxjTE8*doscNu;ze_1l5n`~A*ctwK_<!t1(}Qs{gIs3
z_1Gmu$|ZB1siD4*iDCzMmty1K4LwC+=66ra31Z)dm{m>grtoKvM*+ACeN))i$Nije
za9HQ8zWeN)Bq#iA3O8c8i?pCu(NlbWN0Sk_)+GyO9j(@E6rmTGQsvqwxYX^W>T@`;
zDvVniK$eN^(%c`7TD*Vx;#Xl4gq<UE+=2|wefe!-!KE(@&9A4<DEUpCdc5Q?kcnXP
zx{8dn&1#E-AluBJMcki6XHrVJ0&4_`Xva|HwIN8(Jo^43ARtY+p!lH2kFR*<zY1*4
zJe0?lP1U3pkVJED@?E&&>zS5iR$H5!!j&utskg17;#xEFrY}ec>mI?A5S}PEk?J6g
zqC4}9Ys(}0*p`6R@>xN7A61&)2mh_R?t(v=T@fim7htrJW5stImd|C(YkB2$87!)`
zVgC}YrqEft0*P`i2BOb^fv$|Pg9`d-cj{Tr9}A(7aGjB!2#A6gNWA~qO2kl*D>wu(
zu=Jk}CR%|3i%pGm)XsuCPhE2&R54ELZuD|DfR<cYu6KF%b<R4n<DTNSg}X&MDIu4^
zO=^Nj2jHcpX0N-!nl2u3+cNVvyQ4#GKY)u&IN4fr#Ag;enfE2^2~Onp{(ZdM(P&i^
z*}z3aij<169ssXinL9Sq?vgWRoG}N`W{HRQ6u)~ojV~~1jhtR!@hK3IJHV4ocUU5<
z{IINWB~IiQ0mH^geZa?+><j(n5X;M)W#Rr=eIu?jtyzLcQyr}rl(tn(&ml1(=O0Og
zsyaP-l-4ZJU&3RW#tf|)_T{Xu@xzA9`(QNbP<v#i@6Z<<^}zWpF|Q^&(5M^Mbeu!v
zzK2Pl1i;2_OVVYS=p@0yb>VOC$UJ-uzg{jmG*l)n#`#R6^DnT%HcD>;+Y~<r*&pmt
zHZCIwb|b43&svD?U+m+7dzss+#s)ExR>9kMjm!FIcU@6@=R8;(`G!-0R;-kFLafcr
za2`;V%W|t;nC<#8{E5#5TIb9A+z{@aJK3;odoArB=?u`BRLN$ovbSGA#W)TlbV8S$
zdoIxXh2SJcC;nV29b4FFh0N#^93KRWo9mysAY48B2t~ht5a<4;O?#W=?)>ZOe=&>+
zST@?5oBNMPH&)S{ur>C}LQcV~B0I=YsNKKbh0mJku||R#6g`c3sAKcCOS9;O8vQBf
zr;fwco6uYG2e7uxj!{Gut`V0WxbA8l@x$CDzd?9d-1mWePg%!)901I`_W}sVC6?sc
zmzPH+8jY?k*Bk_W0Sfvgzvh}R#%@x{?W17Q`Wr_~3d}vOSiO{(-?s>J3v(zGm>Mbw
zB5x*>nqHt($c(h?nlceI1mH8tIPY}<3)1?^O4Z_q@9dz!3e)6qJ)Tta#SE{%|FA$0
z_2_^C;;!$V8vGOB(rZZzo`QvxR@&qJ_7oq`>9^|v>vjvlp}Qq9!nofFF^===ou%PQ
z&+Thp)&DK9OM_uthah7CC-;yqKZOOLa2ucXH+Z#sk6VBq4i@6ng^IF$wK)PE;HaIP
zhm-H{5eqgRdwBEUq5;8$*cNNr3s};FXmDLwToiv?QtT)Vz@I@ZIh<lRbk}@(gl07;
z+!lCO(`6Cl9>bJ|artAK;1zOsYgPY2y-_D;qb2w8#to1>7^G(Og|Zm<AH93RergBl
z%WO-Q?^JjBzCt1%!@&E+6uIOL2yUJnk4KV3ahrIZ%Uc;^rs$Dky*_z1H;aD;swnUh
zk;vTV?WqK?H0gK~w>wmbT3Lp-PNBS<>J%P7;z3Vc4IJ;@>mlPw_vdGN<%KqKfpB0d
z!ELwF_$Mdow0|*oWGpcXmlH!?YuyRSX_&$@;mcChmP<nD5mlSj@fTPavE;3Ca8z{s
zQ<ZY^M=kam({>UBaon`La6hUYS3nAIEp|{nIn!5k?m_jKclYfG5<E6Ir3ey{4H{OD
zgYIyFmnwi^PEMy?!LrhK>`3+toka<B*I2WvPvpu+Y62EvUocBU_$V1RucVE}g;2Do
zb{6NcrmsdX$hM*p(=ZZu85}*8?WK}tmhhqG6f8JC!QT5f=EOEc9_-Fg!FYf1Mhbe0
zQyPz0r;8>xRm(3;GRAN+O-%7mF)vw?EvIy*lL|f~o{EqZ3Mt;TZLeHe12AzQa+U0i
zRy9c5Av!4(+*-~wY-$Z3-G1X~QUOgZF8c7rKuy12;IXW2if&?FwnzuU1!B#=n-(@7
zW`cXgxAV6Klx^0)5%M*xJZaJL=AoU8LGYgZ0hMBfI=7oNFiZ8_-j0kwJ(YqgL}3CI
zvEm_j1Jt`$jbJbn2%>bf;7&=j=(a@un}=yWpvrL*yZ%jec8$J|PKW?iH7w{FZr5RA
z!M^Lhc242^oCKxCvqVk^5L@L(_-5Saas5-!fX#Xtjvly*<=`{s4nS#k*?rY}XGFA3
zf7m{6oI-~pf0|6ri;~-$F>O1e>Mqlae!(wd@ip~Owkm55w5T)AGl>$El}ORa^_Kl)
z)trT{iU{^ViBTeU@ps4+dfY|<QfJV}mlo=YX4**%L*LJg-Xifzfr}BkzhrcOJr{5_
zz^^*xW^aqO5lWMS<T`qpdgxFDF{!1I{0sRdFtEwHNu~Xz;Ix;EcI1_|T=oP*e#sh-
zu_@Z?I0^DByEYwf67ECEAe`OKydM;;x+2wYTl^*$(qEXc(jR~UI<O}_nJxq`;7JNX
zsy@Vs{%C&7UaAarpGtkBjQn}b>0Pcw?>1)y($1Vv3N|4ebo2(i-i^3ld2Vz=Sf#QQ
zVg4{|x6X6G*z+lgd#Dr%0Ut&_agLf*m--jK;NvVEdTX<vhY;QsRP`d8tNuunA|^S0
z0B6o^;=Ad4<c*Y#2``~8l?4ED(Qg8S*5$bS;sv2*jvqN3$LQZo8+>b|z|e%2N`NW-
zpk{v5<d)MDe$E6`3qZHutq~6EQGu*3hkYa7kMq9ht<-<GG&v-v;l2;>CKR?mNT^P6
zX-y|L!?eL*3^N7>^04|j(ibA-eeTTC?#zXf_q@dzj!*;wu`z|Mx|10ibky?*H&=F{
z!zWD>jGzI%{9<(((gr1aeGW3M$&m*$?uwA{`(N5Wy80`CLUM<#BDB|`m6kTC$>dPH
z)iIDI<bX3$GRuxODLyp`|7Xf5jdDCmmRf6;!+`r(`_(P`7m5kdn<#@{x2Do}YNZb8
z(3A`?8yZsNu&U^!5|c#0Lf~Isu^NTfxwCL?R&nUY1~3WTuIQp3wI=#33Y@#vVlT|!
z8&I-1mx0HjpHIG2eCA*^EBDv2D|+JgCH!VWn!9b0Q_XqxZO5|!0FgnbCmmjPJcdN2
zKj1N_UM)1Jhy7Z{9TbOAH+bA6xD@Q(ibJcb#)?K;_dhuYHxLaM4lQb@zFR6|afeMP
zZ^)~G)s`m3XU2R&{7H*vZEZHe)Zkv9My;Q|ieLgAw!{t+iNBZbq<hNzG-Eb^`^WcG
z9tF%G!^ib_wn)6YoQiy;3@Ke+sy<s>Aeb%NL&i2J&kKWD_(mXGS@bNE1K{G{{8P<=
zO2#4uz{AzIgLiSNd!wf|VAkfC%hkNYkf6&M4LYb7U~Z+I$2yW4IT$2Y!G-yOp@fG&
z#i|8PUQ4XG6W2V-Fse0W7!;if1oX4K-{qees6|@{j%xeq0-bK=OG=BX?>(;wS`Nkq
zP=L7%Vf-lCVXdNRk@ayi4sMVU!P495{}DdIB1S$0mXjD8Fk@pCd;02oW=)I6lofQc
zGT~VO-A5NT+d6wLz1HgTSX{t^r9b!hd_%sv=ZqtORY8IqT@r1U_sQQT7J?+E`iPJ7
zt><*{cWWaH11`j#^4pdvaQ=*8iX&b@ZkEH5!UH$Zxegw+Jz+Tpwp?;&$)O;96*@RH
zTN%CvVa-^>he;%_MMxVcygD^Ul(bpMVxD<Y5C-=UxesJ^1L_q`V=nKBOlcWI92x=W
ziiSzKLC>8Z{IQ63DU9%YPOqZ{fFP)c{2qNRev6f)8|p`zQ=1`ith7(lS%N)-K?k{K
zsWK;1@C@>+YD&$#B=U*`Mk0t+{aH-cKye1CEcG1OG4o0;ZJyXT5R`ysx^Aq~8N4#r
z_u!<Av1tchtF|jIsboS18-H(?Z;hq`eT~>z7c;l{RE-%`Da$?U)%TEz$t7K}-i^LQ
zAirlX#sVY(dlJe7X*Dher`RK;eBb8MX?eev6Wg?Ly=hyDZ82MSjb8F2fV2Dxs$8MS
zp)LfU3P>xn5Ml4XgN#0)k_%D&gvovdIkNB%hgyp#E5Bsm4KVbQpaaPDu>(OErrP%^
zVRX+{4073pK5jnG-~n+CvgwDp{=K$SbaamN4h5Nnr9YD{gywKEO@<q6OG(6|tv3ZF
zS>wYu4x_vou<k9XQz@JB0?Y`r(z6!Ys51gM8}=fH<w6W$6jNyVGmjA0Y*t&$Q9*m*
z%^933i%QklrJ5XIss)vOvze)}``E~y^X(l@oATnR+SEL%d$;#_aeuU_zP5fmb0)=$
z@2BzP^@>eyK&syVIOz~#76(y*VDvrMuD2Mp=kl2>QvbS1ck)ka7r@7Pg^lu2&GvG1
zudpO0U%<XoEOe$!G8R%3uhqvh0_12kA)xH3s_Q7CH||D#c2k%05V6~(jyysrZQEhK
zm^nV51-tQdGU^>_dR*+Kit&Sxn62miT)woK;Ojs2mmUUwnL#9(9hC6waE(s=i+p}h
zMr{xoHDdJ>6x*#dCY=;NAIY#61Jn)yzmWT@EH|E!S1zu#{mYA{!xpree+$GJP$ffl
z`e%LG|Fw}q@-8UpN`p8K-~nd%v>hzM8j||g2V$N+FQA+Wt=k_&@gi=kRM3WujHJYM
z1F~Gy=JVjMc{%Lhc*3g#Nbomtx7M)piTK62zf*j{@eN`Z9CdwS@%!<)qJ>)>K#dM1
zKE;^bV^n!V(0RjuXjVmeSzX!=T`?$2fv0JPr}O}dgM%){{UG76FNOFK)qn;qkd+x4
zr?ch+T<rMnZB`Z-o?$3XBQ3Ifc>;H%xhVHPVq83W`HB?))d@$_rexh|6ci54_@C(&
zUY^i+&eZ&R^E^2@r<j!Rw!iJ!O-PGbQ94{$w?-CV_Yo%Olw6x;BPbjc5B-BK!QGQt
zM;4fjKGbi9NcZ93nLxrf(>K2xexxp7xBLS$hom83a}by}*tOl}tQA4^68K$CttzN5
zw6iEt-lGL33qcjYLM^u_<)icOMxrDOeC>k+SbZ>uIno}a<a7ks<_j^NW#dn%ZUz=H
z8Ud@{#4ANZkkkdN?_o?f)Pi6XyEbjd%s{3jvXLX2yx~q`DQ`-n%oNZ8L+r${SI)JD
zD_>87<5J@Qs*5ejC&EtE*hsS17vcM8?pEFuLT^qq4@_R*V6jUI)FMH^x<B!jBZ@Km
z%;daMI*jS-xlr;R-^CL{^tVO?AzuHz9f{|Zic?Q}0fT_f2wY+Fv*1>L@4Ke}jMMD^
ze&I()k4B1%T_u$rWGkWs_C$valGQ=0R|eXD3|au@qmB3hKZ&`h```*;o$6i>l*@i%
zP$V0gw!wC&21X1}j!H=D>zq_EW8XN>9j%DT)o(xYxCjUo-9Ii_<nT8b6uIpKnL~*;
zYpH2N!siSmwclRy5X-P?*TU#7oK;WHr;g0$z0^Z{8aB}bZYEUZzx~*z>Z%3J#V!KL
zEC|nn0mt7&YHB1n?85pHRNhWxNIK*SoHSmc=+_s^wC2=xUxNgmEC9wE9P1|{nOfF_
zf!MT;ta)1)q(7UGBdgff=<LN_I^ki3Q_bx_&@P(RKG#56Ul#w|oxk1=Wtczh2_R&G
z=1qZ3Fif1#xSk6J&G}9$!)}7$FVIh<zxXio1p!^J0i~p8dmZI#<-2-mJ(xOn7G4;p
z#WV|0%Gs>+^d~%lR2)ZG+h>A03TpKqrd|NPnyfcY-xM8P#moNZ{t4yi#0oRj=F7@@
zkmRTv*K;5n<lF&G580@;cPEa6>+#3~HpSdgkLkUo2hW12&N!^`+`>|;b&B|a*^Z(i
zx3$9B2(`n>%)NibYad?=i(qE6VftyO>=i1_oCR!Uz(KYbH7G>}A}zl=uRLrUTTS!N
z2XWhQBdT~UI3Xaaxi8T%Q=HSl0GR!VJp!yVgGFsNPwQ_^JBH{>Ob^a5J!MG;27`kJ
zzZ$BGb2+A-pemVb816;9mZFI)`Kkbd^4qPNW!hFthl5CvZ60X9W%!NcOb=IlLTQ5E
zVKBW!vjwZC4S)F@f?e_=jm4u9&o@bmU!%kq@QQV_Dw$lP{Pb4}1dt78hqIgmjF+7t
zP;9Y0Xn4Tm3IZZ`kH)s$q|>G*|A&VU(mldK8m_8u^lHz1jnqE5uY`Un+5P<Dg)<<F
z`fa|X;nz+ziyjFMvX`1qfq)7{@DUhDY|Xe^4Q#jbKzpUy5<pD(nF+JmB?%A=U@-WL
zRA~m>C<3)Z#_PcbKR6`?w2<z3O#G;pwy2qyOZ^-EIuXHNU}0m7t`GKmQ@(Q|y_oz-
zoHqUg{tlPff>jM3tVWbVD6K~m0=GW1C?kVr1ya#2G+O}T`8ZgYjSdA#)O}W+X)J)l
z68N`JNBa3N+i82Avk^}~FynzE3uZ%cVRpuW`y^KXsZabT6n3($isdndt4dIHW&nef
zz@%#lRMQ2>HaV}yyRmKycy<#DXP;<8U=xC<CplySJ6JR`)Q8~GHvbH#RELWDl-<3%
zEaSe^0vKN5TrdIZ`lhrG*$oR?tP~!|pz;Tl9G|5jxpyZp40h2orzi2rp*@}1VZq_^
z?or&$3Z{X%vW3Ga&t?5fA*j!PvdQE`WKF8Qxe0j^-<=G2#R4|%8G3kElhHs}Q&`UH
z%E<$=AJXx;VH;*cD|6|KBb4V8Gs6}j$f_j+N)KzNg9qBe5KWz^jI6(XB1@%GY4iAK
zIwXsS>B1zO4gmgm*__dVf2nm_l!Ce~PVbvJmXt>T^t-o@H)nhZ<i5bjr$3DO!^4!q
zA0p}wPd~l6YsE0wMR5^S&VS`kYE?v3*T=gQojJe2X|N!x9~qUTazJOYobPh9aY)+}
zuy{3;cnf!rWBSF}Ak1vx@CxqgoK8QXrVFzLnYYlJmsW=0(Zj5p*V*whQ-Gf_cioM>
zkL_n{y=g|#tiz`Qcs%(B0*iIQ4#7SgK{p!?Xng~ECSlP|eXJf7$QhO8bkoth3rEpV
z9Y5*2DT|o(VsZT|OP!SDA!oz78i=RO@6vGyZS3ho<#sROLlmfx6ILSOZ{$W{_Tm%r
zUl{KL|5^SH-_)kowdcjrSiE>u(v-;J%U<t;q~B)c5mb|mj}Bq%w0*#bes!~88DEY8
z!B<~KDTOushT<OEyq0?PiHWo}3e)-mqnBX*Tu5PZj@lYBa^N~JCu=Ci-n6gWRvXQq
zF%z{@astDIv%F8cB5u;jIN+l}l!TsrvUDfyi|c3ULl@1YzpGKvf%oIVIr%-&MRH!)
z*EPwtifmjRQRf!#yMycwI|^~OEu6=UOJ$XsVvM*yJfvym2(GL`T>3P~z{5zKzq0IZ
z=dA?fL=pdFs5u}YoH@jcUw93ZAab<_cFormtrVGkL}QQkODU)A6_D23)Xr1S)6E9j
z*U}dgfAV5JBq5nxM?o~ptOakPP~|?g^E8}Gd}a)8u$3PA18q&fhN>Y7m_!AQUw`Y8
zHG_4A-eVEMxIqY(%sA9OtbAv}kqKr!ay^stme}&Yj|PQ3zGW1=m&S@)hiOesTZ-3L
zX1Ji5a14~KiLh)0S7SV&loDsJ#BES`{;EiZdb(MLVr=N<-W9tEtl8H*%}sRCT2fi2
zO$BBLePPIXS`UM@?zmC6ZTZa2Xn1vDwb$9Fv5?e&-OlJ49p>q2MHCV40zuMoYfu%n
z|A%(MT|CJo%aW0G{q--I0|{MyFWw~*GwbKCDOo=rNdvk?&=}rC08|IK9J%%1a?n7w
zhMhbXqk13Ry}z_?@|y9Q_!1&P`pyM`Q4-~DH3dWbi_mKS`T^CsqHZSblrPU69c-8y
zyjR1FI8P@t-d%g6m*i?vzTgToaIJ)Bt_pLHJt*<!<0x&XWfgeKz8C-@CeZYLmI9no
z=|5off;}{<jj$s22%$Pzc83yZ`|xd3O<tGdUBQ~1*i4k<FHuY$hAa2)QRwwFPx<==
zA5F%*c7Xzn8rp-;tx)%}j0ITR;1yDEV_XM@;-bhxv0lfOnLY^szXK=*$sGUdWG`)C
zZuGAO&+Q$x8z!4PyF%3bhUoh7R@^q{M+gm6CmHf*ddqQIrQ3Rw$3eP>c5X#&hO*0d
z^b+R9Mh=b2ym0xvnce-Utd&C=B=8=U(p7*LEvoDL839O$Q+;GFfd8<;ppU@T1Y&^X
zTP^#a%~^=Em^-IF17Ep;%?9+Z{^NZzVPQOr+`omjkuR|7&hM)8h}x+?{k0jQTJt=&
zhC6QV0Oz>sReWDNL2sF<PSl4t3a-r+15_&`VXPonl1CmTz~iY}_F)?i^7!bcJ|JQL
zhbdFLqwAG);9OGcJT9EPn1VF#gG!zW>CAP+py>%(*-iN>u1Ywx#>+`V|90fA#wVGv
zNmA(5ZdUX~CN;zkxNof*MS-ZKZDu)Cd$hUV)uPjlIr`irs1ahsyzx7Qp^8hJl|?ZJ
z1D@)3N+4{BNRTesmS@(NT)t9!DktO=$n&^E=gAP*qGtz-<E`*pxnhKP1bgFvmvyLd
z22i<Fy@u#te(Zt8+>L*KnwaYm3D4x3e8b{qlS3L#L8mWWkbYFutweY6!LVR>fj#EX
zfArO4R24l7k;ZFeY>hE5#~RJ$?pe>?h4e;mchneCbP)I%^SYaZy_Ty0U`e6cfv`5F
zPL!74xm!ysK%J(!$j;V>^<Y@N^!Akb#)Fumi6dVEwXarF;4!hkpTimCgdIwp?eteh
zGgv)_3j}LVNr*9mx|rOR(iI<U-AeWvmL8iTrIAA(G1}P)WK)UhR1iKB8)`;pk8?jI
zG+xJdj{@f34lSkgfi<>baM4k^c;~SkQC`bc>a$f3dv4Z53`9?|EwfQmJh3KsGirZk
z3)3mUs2x83=dSmED+HsHu<-btqeSYRL<O8hX_etvRR8MynZ1ew)Z85PaC22f7%pkw
z$8=i@Y?4^CXt@?92@EM<iBy2Bs$->0HBp&CetFUDT=70=_~X3M12vWI>#+g@N=S%0
z#m5QH45%0%d_#BD*Xec2eW#ikGr~+}9_q!nnTb4Ee^9WmrW!=&b=U0>(mTd?p+gy6
z8E_GsMg6HJt>yv@o$~^-0D{j+8A5X+Y=NR5^X5~dWK}3tRd3vAt$W+yq@O#s6<Zml
zJRF1A?!o1X2I2#Jg}zl~Bn2J9P5eB<Vi&7Y1)e~hyjeV3a_kL#q&xJ+41i#>^;4Sj
zDk+#Z&_^LGbQRH%O@`o#mu1)6D}51904J!D#{jR>P*#J29wEIui9RBLOD~g5=1&Uw
zjl6w(kf6tWmn<88B;Ogni8x_<8V@Wi!0OjRWQRT-@Seh@m&@uUmO{(A02PQ<iFF;Z
zDZFp^B1>lt9lco|u8`V_#ce%v$2uXKQC7gZdWelks=ymY8I&|znpaamiidPo%?0Za
z$_G9ndTrDIy?iNc$nDA_obe?_oQmEMG@yMb-d^4N<Y2WTt3D`f*nv)HW*PrEXp=TZ
z$V3?Mqng$XQN9A?pu{pPqAZg{{^$x0dJ4<}9|<8dqo+~N?^rmDprwHBm@Ozy#ve$#
zk{{wSW2t%Lf(afZo`6^Hl=(SJ0_l}k6e?T;cV2#_iqh4!NQ<66#ZDdOT>PeJ@>_F{
z@ym?TT(1XGi@pgrr4Gw4)a?_!Nr3$Z>U3AfZn!c~L>u>vGH8~i@zGuMIwRxc1xyFr
z{hBau9)Mj-f0B?Sa7-!DUTK1wi=b>7^L0<_h_#QNJedQ;wb*pI-sVd4K%$^0N!{nL
zGx6H?-*an37QjpFsUE~@!|$o^HN@B5B%KlmI)(w8oAM0uK%5>H`Enokvf$dd10a2U
z9`-}rqK$SPfd=$a;^>+>*#*T^hbN?H2DDPO46$K63-9(bTy8G1J~MxLRk6WY4;d*g
zWNOBP-YM3`K2z{A-l@Q7q=`(^C_}-kQ6fRF_Jbh`#tKW^GlO&ktjSQs3LDC;_tK(J
zpYriEVSM29C?p<Y;N?*%(&B7tYE7IU1i$>pnrjP0<q0x?EBAJI3pH`^El-dwLA4)r
z_;=tGL@2{L${&UKcnxSIt{Z<Cn8AC40s58jKS>H;zbNT!)ao<SsWJq9jSBNhn5g`n
zz62%P3ND2AyFj>YTl$ri3W<ak=lbK?NiZF^Ja8+liYPT#54H453hv_s;WfyAd=~(=
zo%$vgN3x1QJrcEo_TrarAs?fTe(B93Q*c9S+%!pjPkxD8{OiIrai`u*dYV@wq?u2|
zIY(0sC7pZ#mFS*_?^{J_%uwZ*gL#fwU@oQv6-5W1nl9>&Lm3a^iLWx-cUz7Uzo?&Z
zM>!wDT~UN4t7|9dRUAkNy4MP!(qhHPFtpf^a69#m*?H#V-1PKb8pai-Y7l3vL7SVG
z2KAS{<v0+_^^JGtNf%db{n|Gt+*;i!_bB#kBF)SrV9dPS0RguY8dY`cje|@D8OPa)
zrYH{^ct^(ld8k9o=;qM(mZR(6x9@%%Fbi>3<?$sc13B_+;VWWRFcf<3R*_S+r=p}s
zv6afy*myPF4PZ3>{#_ISM>6NWT{G9H-Blg`QhxkTaY%TahKxb)H?*g5!D%azrQVjB
ze5oY89NACIB}$A#WZ|*@7GrdXV#uUu(E&jyl_M^8Dtykk>a6P3QhhGZz)ti>u~r>^
zSKq(6IL+fk^Gl3g9W%kT(CuJ2KKh2as`jyiJ%Jnc(UcSq1Z-;Nr;$R%*34LJaddyJ
zapIR$IppPrBXmsKyuh5%z6)dgPx>4us1!lSBLb6{L~#POsfLA^k-#6$(h68EXTXBe
zZBk83RP+nWp-uODiUw-|xqVX>9H5<L+Ycm7rV!e&EPNFY&tZ9<#5Ufi>Na=KB;;kS
z<Ti;xS5jNo(b^i=ilumqS5!QqcP$G&upe18X^)|smcYsC&m}7lFMA21o;2q-k-qx#
zI^%fmy?AVr$;=twLE7S%!o&;m|Fgd!Xkt=_q<F4ct6HC|ucZS+JZV>WLLGLel=lEE
ze;#gV0o|_FDThd;IHZb3=r%`7`rg;cVoV@Q@<KB7V~zCWV)zQli{UkSR02AmucOzI
zXu~boNZY9<^q;@ta<%PTGCGglcyNbqtSMH=Op)z#^BRl4eR@qi)Cm19q?~0dVJ13~
z;h3R^gPO@=9lOk|6(YIGb)9)0HDqTwv)nFLBn;Ft3J_}I$C()buuhWK&a7epQ9CQ;
zH}dl+caLf7Hy?@b5+_4{`g-WWD6@q0@ihNn=6AyDfvL8OoO*aRo2_s3K?~8cyFd32
z+X9U{wE2CO_H$*fO6(lp%s>Hax%?(H_Ac8WChqbWr$eA|6St8bk*ae|Bpy~@Y`G{H
z)u)z@{`CG{ApEBGLVK;^NcHhpp#zZwJyAKQBhQDBU<vM{DJ*JizS!@-8ww=0+UTFv
z-jXQjs9dn)XYivtRbOK>*V@56Ne9*<EW&RqM@ML@`v&6+eX3XL$0!VjX^gAhx%7VS
zFSR_;DcF#p{d#6`)Z=68dQm^WnGOFsLQg@Zta9hCVZzvvgbpsmr8G3CpyuDpog!N9
zuIuyv+!TT4&UrhKcyxWIfu2P|<Mxxvo*cL-M#2wQBSULHF*K6VUD`Y?SoLe%79$Qo
zG%K|*Vl4`3X~=vKC3FDLr;MN?lpM?shQRc6j=SkTSpA*8Cr#Eqiee_vur0}JrE<B<
zAvR?Y*XaRma`3tO5QE#Ivju>T<ieanC*-Pv>s<;AjrXAQ3(DpZT*Z(hxBrbjzY+E(
z&RcTm0^TOfhi6O_4ha`e=Bg2Tmj!B))$JCuVR7)yC4I{-q!+U6Yf&A1wHAcD2R}ag
zyG<gbaPqCX!-R>}dbn{!ASgIx{o-6I;mNcTFGicXfFx+v6hu`^?gB}>2Z?1WSLvHG
zh3pNLU=SlIqTR>|-))c@`iEwB_;7U?Zm#i(p%yv9?NIhn7j`_a$OOV?thf6vVh-nA
z`HPcL^%4`dpB;x7)l`<k>>kP$B_;2_PweWgd6$1)v)nGi2s{3{D4rBkkBdHhHeQT@
znTd>W%HF_-N4fd4I$<legK;;VI9Hm?YKY;EJnuf_q0!-BD-%V-h_w^%bwZ(D{<UBd
zVU0WFInO4~cpXEUJ!`N@6_z}zCBK=+-{qDnM6?!uBcO$D?zy)Tc}Tra4J0^u%_Zkp
z#N||R7p+Bnqug9~e`VTmUTUftS~1`Xvw%EAjLsf1MN748P3;1wa$JJ_(q1K#$=h|4
z?^E1=fpq@DRnZao3if|-nd5X-#jtTu@I-UbP``Pf%j5M5B+Y@u)Y<DlEtg_UI;Hsv
z0;JrgU=OysU&pthrdN6ICp24=Fr%m_)X$UnIeJDFyOlubDr6rbwop|kU{^)S6Zmz`
zyyErUjwuD41)sV|Lg4n1oPwVo`^gKI(;ibo(pEruS0uvnKqGijiFoW+FCH_v0cUc7
z7bZpejLoilFeG~J#5)_{*4Q=yRc6s$p|yr(mkmja@=>Kq9ryr?MQ!DDa(jwgdFPG=
z%)(gG^3Gp`--M1dYL^%5*XRS@lM&D$<xhJ`iu#`%XGD;Vs(1x{xWR}xpG)53aOxoJ
z?y}VA?_=IV3b`b9%dc279R^Af%7mc%Tv$5=uY@bVElad7*6Mj}P%W!u+2$lg>K4C`
zU(&u04S8z$BHCSSC;znXEE;=(<x4L}cr?c^r?9E^-+^*A9~%E*?nOtZ(}vN^&GIFG
zvh@?R*LLO89nXgeDAm_z6VQ5>qi`WMCZ>P#@M4x-_rKji;35g5v*$~h36)46x(Xj`
zm7+m3ormT66U1l=ar<(I1=ty<aG>p6w?R<Bny$cZk?%&`7popBVSB8rJG=DRTN6)Q
z68_C;mSf)K^M}GTc4)a;vW}71wZ5fSY4+FXPFY60{$|d*Mz+M43Y*B~x__nwJJ;_t
z_fiT|goO=m7PvH^ZmIRe&=N<7g2O8@6pue08G)l4I(Lh7{nm7*)!bysFF+U_xPLHr
zbUkK9Ur=#yI;uhfi9-Lbjbdon;qzL``hvdpK>?Ex89n?S-{5f|tm)1L==ojADAFYj
za@%<vx!dG!dTVF$*m?T`JzK|yS1bBaFGF^|w1{UKKgpMIZ<|p4iyUx+I_zv%t{pEg
z;J?gl8n5*EVXI!{>I^kl^c%v^b3kQY@c^8>_{)s&)YhUzlg_X66xkod%PY-Y?g#(r
zB2=)IhFSlJ9wmQQS6GN`AEm8tXtu3LI{l=Wt^gw$+qdAn@v|Wehhl3kjNxxR;BLCp
zZ;%b+6y25H6|K<V2^@*w`0a1pTJ=pD>U|dTYo2~uk1vNFAGHG7I72y{kl$T6$k6{=
zi{mOUWB3;ZVT0AvKf^)@E*P*sLDf{?dE_}NwJBpU{1f_7fv^@S8sPSDEHW<*?3T4!
z;i9CY$*_z1+j`-fcT#+ywnwOpCEqKKA5=79xE!jt`(a(LNnI)f3hot(;reR*6<2SY
zA{nP#A_qTKNf4$iC;T+YBj9ylmkDI!ZgSO?t2A}I9InNfG{+?ujh8#FB+V!y9snJ3
z$@;MBZPLV<e{JB5XU){*D_74df+&`gP>2<z$LJjGs49_eMqJsKvnRKk>s~{`$KoI(
zWP9;V<@O}N{zm19`$fwXZcZ?RU5ShN1Mt;6aHV7=dl#0P&||;SphXOvh5Pj)@5KLQ
zlzoJ`b)V04Ht;28>{K<Sdy@K7N*P|84v&^^0fd<cRjXv6<&*eM7z{H2?hQ(Cy_N}i
z(17+^gM+tyrPwaAWbuCGtU0PwdOd!0PxI+!YU7nqi{exN+dj`A+U8I;Ea?u0HM$_7
z@to1}J}HOi?!DD+QB4ZA3|LdXLT=9*WdZaKI6VCU)TpkiAZsSDrFgs@fG4Awj>`+0
z-~z>g27Jj4<eWDIe~NBerwB_r+fK@I8qD4YmEw9a3MgY%eU9$v426{~e$(BWE$;w7
z<FLhB>k4}_@6bT#gjunG`9zo3{GSM+*J}$0$TQ6yS9H$b@xdU{Z)MSN>4s2~&|5My
zjBT#WX*o4;s7lK+Q)epbgH5k1?)V=g2=U>6QE_04rYVKL$OYeE4|Y^${#?zGTrmv#
zkrbQVtT5pj%60esh3ltsYLF#=eiCWP#2GR~5L>KbQvN6jXV?*q8i-xIAc-C&-vSCb
zK1OgM3(_0CuP7B{Px#~J?7_w}@_kxkyKgAt8fedx4&=uLN?ge*5qQJ6%j5Hs2RIoL
zj~j%flGsU!r;?;S*=pVBqxT#q@upmPuzb~e-<PbQ4gVH!hXQCE{AX)AUfQVXj~j8)
zCClQe`P~T;?V14A?GwCG0nrhrL#htA#_2&=nlCoE+1qYk<SEV3$Yp5+mOw-DjyMa7
zuS`Iubf~KeJs)0?jQa|~3bg_raA^Z?z;9$~orw3glue^Ik`$Scd27PURfenhH1VrN
zw}Jr^x_uKegFwDyqJNmJ&rYf88Ap1?qnntFqlF*IG+nTB@TdorV~t3@kAUJdE=bDj
zB~}VacVBjexz6;O!}5D1%p<Z;fvpXj{$L5#d_8n8-+bVkZY~T=$e%>%{@Ztvs%KT#
zvw0XCDI8M$7!vh|olq^-Z0q7MK|AeWE6tD`pfj`h{7$gzO;LT~N6IAh1iEny2J#~Z
ziMKkO^!EQ~6cK3jtEPMq?k3bT|0lMORw1@m@3v=7d%SszmbT^A*ZdbJhsiGTaBgkf
zkx=B*rFr>MT;*cnskeuP#?R{Mt+QMm;TnUf-G;J%)B%)w6G3zB{C8EQ^+O<Fc%u3g
zqC_x;+jj51u=($eS^89-Neb3890$ONLg;4;3Pcaq@v~lr@*w$`c7v8eL|L8T<T;ka
zNivgqBVxcFXN4xePCi_T6=_*Ty=<Da<(JA#$Bk7HP!5=oP^)!{qSW2&;Dish(pMHG
z6v8W(73<2dy|-_oZO&j_d<;#6ACg=w&no+~;D0~4skT53^rk4&=7?zEw`LQew<abQ
zX7%IEoiSBC_1s%#8zurJbhTpqwLUW%$|>CE2X~cs^ia+^_bGSXo#*|O_+ogR=S8P=
zmnf}x?lI~~L1#Mk$2PUFl77QEB3~T(L-SRCXIxNSWCe>B@rBnpypFP_=0%NF`!y5t
zd4MNU+jWpFtv0g^QQp7!5-z7XE8enEzwdg>vfBM@k`)al)T_n(L|6%-d^_@D8qV91
zdIIZbZexG>{XhAx|2*d_PU2%CpU|kZ;D$2}7LjgpX(Ge_0Od&s3yHgI<k_f|pg42h
zlhWe*fL+^lbO^QKpdQ#}R3a=<T)X#^jJxz{I}?jv&e6etPy3iNnXy9R7NDb%zU_GJ
zOi*0-v-0uJD>ADlBfQcJcrHLAV|34i!CTq&!X*w$8S;0jR{5VM2TAYK?jD1-h6gW0
zU#kG&eLB*_T2R-T6KV-c2;s7EML*AMSw5jY@FYew3|9ml`#NtN%HI{I^703~TT?D8
z_Np4U0acY4k^&FAFoHmtD0yMV+~LTqB8qGcj-d?3k6|qV@Z0dGNwVwwTo5L8pKX99
za(eMO-<?7W8?k8zSq&OENu6^j0Bm>ZFN!tO$vXL$*^lF2AU=u0&NbS-^fV_ZbBn>V
zOi}ev&lU_hC(zm|_Bvdd9n`G4$9D0EXwTMGjIDSraJ>2e^*;&#FZIYe*ejVxF{Mi1
z>_6SnPf^Tssl@4EOp^!~87DRnS+RCmfG<<6KLr5CM)X45mXHM}EL@z7pVF6ffcV~n
zMKlAT*$Jw}&!;+t(f2{`&aGWsR1t>qGnag=<S1bdBuH-9<m;HnWYK<YL%Lx^Rv=2t
z!&FJO3B|nlE?vY+L+s_1w97}Jy4gm~Vo<1gt>_1Wh1yk%DNGOcQlVL@v=Q1G6avWO
zUI9%Jbz6xU1*f5RoESAz{^8|Z*MT;O1uP!Lj<fkc9K@R~Fp_8cZCD6NQxz{dUjTr3
z+d%I&lxzarWZkn1WW6%udY!Fw1RT!eT_HIOQ>ev+35M#Kw9*iM{AKr`JOCcJm2@^_
z6RI;HJ1mn(sXok50FYh{9l_oc^6{O3ci<Cf;M;VSyubypZ0TAQ4i6Vg@2fd%L{MH@
zW*sgURRNyOv6G<l9;Ue-n`Z+K>c`w^)V28Xc%b1SzdXQpl+u0YOI8kjQ`BQ(ZVh6w
z3qdYbatCw7oA5BZKEU{#QoxE?`2Agkc&eIbyX4k;K8}DQOSVOCBi<?#PG@$Yj9r%t
zHfz^q@TI3fq70u*fRT*GA-)!}a_J0*F@CBCoC2|2qXEv3SH|sZnzqcak9#S@sqj|g
zPK;YD`uV2XI1e#CKuE*0%EPg%BFM-<XXy!`Qf!edc|U|i&-G?J{wOK=8m94@IXn!2
z^49yd5(zOqEdQP;KN}erLx-WF4&Z`%%u4-Pj^EpW)Tn4c9cSR?1LsfDr{riKj@lT~
zx^^Idw>{<MevQ1UKGJ;sv<Tpg=}~|;ZZJ|MA$dO8@nZ{O@;aEp3)NTki|13BA+<aE
z?(-P~H-Cl}>@1>d=~)IRWpb6a4HDkJKTuyO(#v(@^1=_)*LP+cYLJbM4Xx2Q&^&S>
zhpgJf_igqI5N{)1g7wv52Gsm5j95m=14ahwBVeZH>XnOcq-NKINwE|zDALYI_OuRf
z#9k=y*k9{mw0>m1VBv52x-~%-6PjdHUv10di>vN2F~5V<f|Ldhm6(D12bw~vgGjA&
z)>9eqD<46bQL~oIo(67kAd^;ijgwkkjCvcWuRo=43bueB_a8zhWSv4|Do0G!PLi3+
z5aXF(AzloGV8>ri{X`Zf$pRG~3{MYUTM$tt$zk>crf^xJs><sI9=@CVwR_a<KI=KV
za2-!6)|xd`Nn!6|kI;_m6@4^AOa6UvKYS6q+?MTph_t9qmz?SpK?KST&?X+I5l!w<
z7>}MgTGwY|`E*+sIZbZ~Ue7@b%x_TwaIBz@x4@szJvE}3jJ+_mJILN&!9f&!baDSQ
zW1%K20PA(Ka1JCxNc$q9x^9uEO^2%8zfkOCjhTOh6=tjpzLJlPcOidl&apP>i%(h8
z4~E|avwc*#ZHM#AFtUi#zC|dfSLlO3lS<S7OIzd2z`Bul_K8>cL}cT!P2NZ-3ge-f
z>{uNPB|=LR^)En?>HnJ2PLTnhQ!O&?h9F3R`(B{6Bjb?1jIKKzUU|G7i;};FwbdFu
zCua^SIg%q^df$vko%p--3)$MRwrjZ^B^wqGZ^K^2*MmGo6h+KT@k-|~@wi&~e+K>4
ztA_GIsmqyIcW>KAc;0X@la-&=itWsJpWy?<`eFs)k_rkKTAK%=2*+be>LwBc`ik26
zklihG4uG9!Ei@2%fG^v_7IBC&<wO`ZwR}o9uBn$TWBs4!tu@ms^wwDJp+U+{FF7k%
z@%cZKDcys0aHsiI`JfkMcJeuug0<(s)X2zA-!I47gAb85sDU}_KD}{lzv$b>)$y}W
z$iV4YdG|cZUb+Dt-qF%J)~dnXFDE_0!q5y^SzHr##eBwN6_UY!l#)iz`vql5<*oGv
zSYzt`!L?<>!L23vt3n9_>SpW&gIc!l=dIS#*Xr7s#pW<XVl+=l7iJU)Xx(p5X4Lts
zPc}6ZhstQ_!@8VfCo|$O=QAc=y2O#iA0`0#iRuZ&(F?CPfW;9<%`Mi&Ix{!*bZ_Ab
zI}=m^!WGs;AYGc{!7;@gSlUQ7z(`ZW+BF_{iik;kt+!vbHR{l$43>W;(Afd4!AdmM
zI;+TtZC#Sh2JEw5-e?&MkM@XB8VVmC60H)TduZmAB2mMlr-kfl6%sMz_Dk-+-?5T|
zHbD80nW~z%n`T?rsDv37TvJ)I({HFdnm+4I1>t435>01AUq1z7fo^%VXDGx3rOXQC
zxhV*3<h%$G&}Z_)h15q-y8durg&*6^N^~Wg@T`L_+#EpsGqh<~s1#hfpyieD=xNqw
zKvlC1o5c?6wCoygb#b^&pJ2)!dDHo>UyZ`^G?ymUm>if6;s+*e5~esOJk~Q41cj%t
z0IfTfg$gdz(bj$YkV-tLy}-H_uD_hLR97!%%!4I|1hw(fjH<8=aaqGKA2KmiJC->Q
z*adf&iqN;sSb6m5!{qVvK{Q`$u+v0#pgZ~nhiIeLWBr4Az9b<uq=d;hdp@SvUHP&$
z7H>h?QR%$$RmiUGd^XZA`=p_-T2&O`poRca6*$3YaTiv`Jwl8nbrE}K=RsNBVc~M&
zacE7pYlUj)R=>Zw+lR5cbSgTV`)1BSCto^W;h(VP6a1H<U95ZhU!;*PA?|`_bwzdG
zk#$e}a$7?CB=tz+=HDm-Vv+?7y093-iZcEo6<(HagY)z}LyVbqcJhqImy!JB+Y#4a
zEZU8aw4CA@Thre#x4SAfz%z~PU`INWo|yRl!6N^3gQ{JZG~aAFSBbe>t`6isM3&d%
z$ckHF##^|WmS?56q%``eH8D>Rb<;Kp^-^Js4Cw(lhxwAwS}70(m~d!Ml7!+U&_oaL
zeLW!EvXCr4QU3~>ELa15OzOJzJbPvU5z&mM@E~;+Z0~;-K%54E$$C27pVEeNMdq0(
zXKVz2oP0&(2u2)Gv9kSm9w~Zh78s|OGQYjc5jlHDwKi3CReU^)4fegrie%@pWOZvL
zt&~g1R9UA0Nt33IT-|I@)kGm<WO*QH<6KAelJC|_6qMY?>?l_tC<$9awFt?Q@;2VS
zjLM<?!8M@JVOx4`*yKX@3j}BMtBu=8VGlyR9tsOEcn$RLS6VxwB&@_RI58m;PydqF
z$j|dRSo=mj9AS_<Cp$<6V^7ORIm1hp7;ZnZFVZ6nn2j)r^FI?gHe;~c@PuLypRp#!
zR(mLlk-bl9WO-c<X=7vOa_2?Rwi~^`zo0tmArt%706IlT3V&hGZnA;!9&ry_LmlH&
z;4L2}h@xPvdrLwlZU^66h!s!@1XZMlc+y;@H`<2qPhgdSnfINwe!QLj%Bb()9WtXB
zUONo$j*e+E6V8a*(L&I85mJKD>0=g#&Y}Xa6SMw|@%|;EJRfr{;zi*rDZE_vXErWz
zE;GN|bB_mwm&JHfEUcJCQN$~wA&gseX|pJPwqZEHYna<(Hk{U*e;hA&Yl_qcF*Y$E
zg>L{~!#ltfU4N<<Kz&Pg@c{on0Kl{~g<$H(e5-s=@Vd==yYc7|xRa$ha!y@oLYzyd
z+eey|{x?ys67}F3o_FiZYFh9%M$x;VrqyZ>@9(6*g{PQz;*;sw;Uo0kB!&8ZF5_R<
zd|eM}P<hyLW)*0O0QggMYIeg25cH9@p&Zbfn$Wm66pdfy+N9nb+UE_(>u`666gVUn
zD5ZD;7e-cqDU^JU_>eGPa(AKtoLGz$4+y)vm^b8{mC)MWch2?w6|8hDCN;7sr)wcC
zr=57rQydLh1%r(q%ucj*_XbEr;NG&NSlPr46TJ+7nC5|kt&t8QOId&ke=V!mYqYg(
zB&?kEeL`EMuC;}iEnBziM7XUH)QU%pYpUtg{SsnG5d+=IT4X_mK(CH#VN@qBSShX)
zi-k+Y@Na&Crki$O_ZSSid9g{KVIDoL>Wo+l5)E9F#Bp~#L1q1!{vHG_KP-;E!m*tF
zJ8m!T^-<HkFwQEfoVN<!gN-w@0wiIH*G#<qh>}FKaSfX%IM`raW@r~8*;QHB4I5oA
z#zOYxU`Q6Eto9Zy`7Z3nHZ{$pbB@LIjC$NL@s`Jff9;)dV?&v4#R65ygQa8lnP_N6
zf(Yr`#Udo$VuwX4eH6?&ouH0&%XFe4QV<vXQpVGAV{7F8Ye?`y;ppf}AftUU<tAGR
z=0*LGFXjuh7u(TgJ9rz74ub@AZT(}*;kbeFTD#TotJfy}@gC)ds=&c|v3M_0hl^l=
z2xb^pg8&C3Rxik-imVxmp?U(3^cY#L`kFO$e6(q$6T+UM-H5{k-d}B#AK`=&I2{GG
zjfck~Z0#uOPk_^4lWDs)`@9y$pIv~0K1T9G6vjy`I`|lx=7^4kWomd!Xb@ECiykD#
z3grBoO80M8!wwn=$RgnltSXnA)rDPt{5jJogMMZx!)&o(JH&sx=?4+mQ43L{9s<}>
z(m%xQ6G5=IFH(L;*$PG{Q|#?t2XLB)ZL&e5<}v?id1m15_hY(laqnpb6!8Gck}gk7
zp~|Z`oW;GbISM-(A2-hE2AXteRZZ+&Y_9gTakCB5O>FwX2no_5uxx{d4)XQ=N#YDP
zb~Lq4lpyMoi_rI0F?}^(Z~k!Ty`305`9`l5q;4UD%`o<>=4hhkmZa^t2z&ht;I7FU
zXX->2_c=LhY~zvMl<rC8Qn%F(@$E#~#4cE(RZ+HT803m-Ue?Jjqrt&f1Z?yAS0P5;
zP+HOAf&C#?t{8V|*li@X1kObE<qUOEEQ1+-=Q~E6wPJHXKY&Q;EkP={-$!eY4M7Bw
zH%>i2--zKoU#caCb8R6JS(!7O|98c<#?evi3r%F@{WvA;=Sc499+Pr)L+iVpw$|OW
zy(C#MR_3GIk1FMhacs|jHs4BAn&A3b?;ygJdsRJ=?YH9_o=g_;CWZY{U+M?YzVp&`
zlu7O2-I9}w$$W=qoTB(~X8|z7nHU1$;4R&E(T$(%TJ?GZu7ZBRv~2rmGAs<88BmTE
z3)|WBbp&8Ow@o3I({7Ui)yuVOqk9pR!hJI&4H%EXbtwd8OERZn2K=v5(eW6?R5W#i
zj2H*eC(@R8$bjDzdIDXG`LG*%_s11z;a$S9#XJ;8WZfmjPa-}~x2G`Oxv}NhObHZ&
z`e-oa`&E#$WCo(dll-~%U?@7)X>+J5EbS+1lR0TFT?DhJ?u9Br@~vFqyqrxW)Rg49
z6T;doaV9{}(jOEAH^VVuIs_=WUE4#99+Q@vP^15>nH?|!55mb_Nv5V0!?hcyho8ly
zip1*{Q9K|S?gGDsp0j{c;p?x<p|HaY*FjZwq<5%@Rkdzd__cOLGkX8p3F_$K!+i!u
zISdxH3QCqh`gVliQVOpn@c){(^cxsb(&sE0U=i7JHi&pTZYRa`!Yp}R-?sJR8R<-j
zH<zg_$2+gsiC`*Xv$DYS;YS+I661iwe2QcV(4}hw&yK*t8uyDt*v97#+=E*Fj{>KP
zB6{(ZPSD38hCbbnU2FU7BKp20L|<wgeozig*}}(5n1!+~-FVu(q~kfO)l(*?mmD+X
zH78^RYrRjiwiM)XAD)6X^`<6C?>M8a-kNjXf<n2QX!FgdRES(7{*JUn?g>|2;I1Z8
ze@`L4qLPsq=`o8XZ$4lLS@>1ZF#uEJkgIW^p#h+?b=z{FDeI8W#|&L$%>yDZ{0g0T
zof$9k4Z*FEOLE@$##v{?(+=wa#dYY_=PxRU?RTlImj#U<%$D+YPO16raYDH5=3P)Q
zGwygQ))m&kfTeJK3M2)o^Y}UjyAsBk@nDg$z1l>?dP6kzFv@Nrx#B%J7>_^e04{9p
zz)E3~Yz&R0!1@SRvSLJlR7EMKO@%5C1Ji2GHtA^@z7BIJaDy^?FS=HthJZ<EV6>px
z9Q@SO?*M}S7eZ>8|3V2f?P{^6`o&hyUwhu4LL9qX;(=?^@jY?^SFc!H4D^``)>4RV
zEvQlgl)k_59o3Y__HB}Y#x5_J31lu?@0+LGz8|aL9}_nOv(mq7cOiStswyNx=kT(R
zrb2Ry;1nR^2zmQHJV)wa0qnm<?vLfp8d>Dt5=%L<2M8H!ppV>*)k9591&UB8^Rpnz
z@d)bedQw5ZAU8gTe3pIbu+>d9+d{@BFrZxObF4%&|Ej&9iSejFIbMscTZh9R?;UP$
zu7hqdCmGh@D6_kkx(7~PN>(a6yHwTsK@*a1o~;6bojSxsc5ZCuTRdpf{0RnO!*Ts5
zw`7D`aoeC3?Y+No!DI5#cXmr)hO}s)cFQ@>Y-Nx`kAxcUTTJYF@&EuXHHT&m*}QS(
zP2QAIJO9u&iCAVHvjL<>jDj1Ag8}ayd>O}MWFoKM-x60F33d{u`{sCrw+}a>j8fqZ
zMCLsRJoQ}CU!WRf_aUB0<$$Ha0ATYGEpgH9F>sNN_+6fb^4T;DB?pRFX!+q>x8d6i
zsTp(NQQi}}<OY6y*-{gAU3Iey&v*WL7JuRCYAZTP)p1Jtb>#3Exy+$aYgly>3gWr(
zsz3eY&VW5Z+SQ&qNt^~@QarTlZW7hsemb3D>meAj<lhc5P;-cPrUk@=BBWZ_1OZ&a
z_-}ke9D|3}CECXkdi2<oI79x{FoO<{EJyir5#B5a9N4at3Z2UG!G{saio;Ti&(!JV
zGgA4-_2^zq@{f|0F~)#U8AiAr1C>tWx}Wndj*K9(rI+6u&+pEy1o;CYyF2UOlR}7k
zQ9U3-67P~u1Zqm>SaHEC9PCp#;lt}aRcV>iJ^G;RBr5=LZ=ATHPyHX21Np*{>y|<?
zKK5XC9|rgDhiZJwU5Tx~FXUVo9g-j?^fHY!Ff(lNQ-tr@+m8ttmO_QaS`*Rm=Q+-M
z4IW_mdr?_AC;?v5<xm0@T^*XU+=EYi>RLavOED>2(j(Up@w4X=m(l3Xp5hVOhYRZ>
zPE8HdBfZA7tt1O+8@S}x#2}{FI#BI{f&=VkjLv#`_a{6no9826x6c;f8t+N7UcSa-
zDKm~+?O`UI$2|<$$HvR7xLFFpWjqY$st390ck5#7QppXOe?v(|e{j=}SXT%bOchlA
z1rMCmh3$apKl`Xs5FlQPg1k>Dj`yt@KhY2yYk-zg96a{znr&IF8Iz8>!GDGP8`CA-
zO}Laj$qut1v@qMv0vLMinj#AM^2Fvk4+N85%|oz~B@VmB9R7438xyL|gsAVTL{KwP
zr(7<jipM0{kt}LEJdz8(s67+kPp1gJ=04BJID1LPc;CPP3i^UC^M%?W(!Uy$DS_Uy
zd>E6zi#zPG?d0xW!^w@~T1!9`$G_sOq>bKrA}|RN9xdpK>YjLd`abJx&FtBE?7oC=
z!|$+X?etXeD@G6nvOb&|3mil6i&cPSg&S)sRCutZySk{VfXND&bGQlI8;f*+l!pWY
zyE*aef)?cq;CndI+T1)q6S2OHl;oDOf>vztrO*%gfbVs5y)~^O{w<(s9K6p2O6}bP
zvleQ8*#7WIHC&eK`&USTdwS+Vg#JoAU+LWRg`6M0Mpz@Lx?M>)9{Q(8$u%YP!HNbk
zD#c_Zt(LDzWc{ImP5ytK-S&oI9r(iVeHwab>GN)nzicAE6f_|nN`UaL&<qI++0fH+
z>&8t+9l&^NdY-m>{dQQ)elJsU)fkI}t>gVD7OO#6+C#5$Q>L~mQQ^jB^?dLjSA*S)
zQvAe95V83?EvV<YWS)PCp71lWJ9{+HsLFGLeU%NYBR#`MMuQUhWX+JOw|l+or24of
zU|f3B27JAZ%weD5O}h$^3EJjM&CNW(yIOmZV{1&NM^E`V7s{4(2QTW{$Gz%D6!YtP
z+^dP0e77z?4$4d$b*}2sV}4i|#q#mmXh-a&zu^fRLUKorG4w9<3k={qAB_Q#guAFf
zDOz=(ZB7wWgJuVRB&?beqwbtB&T%#(5<RR%ij-+sgbSy%y=_NF+z<ZZbC3^Uyl>An
zSf;`^8pui{B4SckkkT58S_=A?k21(Nm;vcYO^J9KK_ZWhO7DZX|HO$lJdc@>Sp`5(
zd)h3>ALo(s69*LC>D1nQOE$4!`sL=p>SBVymuPm5<6OrunnTmcuZL-DhbsY#xd!x6
z5T_DfY1o#;^r7cm(S;&ne}P(&D8!^tnpmwdL;x7xYg;@+>u`7D5icg$mir37h53QQ
zz@cs)vYI}qidp&%<^<txSzM_6wzJsCu&IqjdJ(bcZ)Z`wkV$VY2KRDzi+?bz4Xqo>
zy^@3Bl;G3c>oVMKcXu9DX;-A&8(xS!Xko&}e+_M{x%x<XWNxY^eCrC@>cS=|A}_4?
z>Kz4P=rc*dZeo;+>0NQ5$8k$N6;gUZ3@4a$5$m%23OS2(hcV+B8Jlh`q3P;N#onm<
zBNXbgr-dMUhV?%>9+Di+c&|Gjqe7D3|NYtmsE&@g*MP32`o+ZG1#fqJ2Cn;8KEb&0
z@#%uxdAoDU<BP!j=fx{jwh@tt3JNVo?h$RjD-{_f7ktgN3jli85S9UCMnnw6)iVj~
z8Qx7lS|x>D>ZK8${gc~&d|~gd>TzPhQjJuA8su@K$S{&}&2>p&y>th&q%L2ZFoyQ5
z>vUfgfIvA^9^S6nL>r5z>+xkxGwP$Q%1(<5P2VV|ai(9F7Hx2B{hHGZo%=L|d6uIj
z3$qJhz<wqykRn`_P2V?cE)~}(d@@WK@sIz|?8g$xbw>N%hp<wi%w*^*?Or)vVD?qp
zS7f*?8Ucm9uLpm#2I@c_B`h0#*OHhJ6+trPo<+!JbL_1x-~5h}5lEf9XLD7Sq}==8
z&N;3KVvbOV>S6bc=H*X#IQFGbt)NOJBw*BE+Wru)#^GVbNJ}9Pl4NBigri0!Gx|~9
zQ8}GX$r9{cV%?X`wa>M=8@{y4>VN-D4XeUT>!GfA$0<liqIvg^<)&iyFRC_}H?Pyh
zyQ7y*oBNhmBa>D-o>yT7y3#aG6DwWLtPH>sbD83n*(xEor&(`znwCf>m!rCaN~02I
z|E6ZS@Qvfwq+3zQ0)s7Yf(b#m?%Fo*1@}*-lYEHM+)v0vuW=r$Y8o_HK3dchSuWCL
zWLnlfH2P8zAz)~=)3#_mplD~@-F-`WkV;^TqKx1^u3BM9(b$Au(AnR6mFK`fGc@FU
zPQftb>vp@`g16r598V1?8MC{F#?+AW>^|_T2KwYJ>B;JO9Hlc4a}ATLK9b>I|9EHc
zKfWh*fysJ|AuR{YM%~oFbpr-Z9;2FP+$wQ$`i{#llC@$SoE5sbH!oa?IXDqHq#hhK
z1Gg7igX!MKy9uq(XK*0rB~0#!?pcGgZ@$!Q{E5dFYx|+e8QB%4XS(0zt69&w%9@bq
z%jwJD0Q>AeLt!ol%1`LXxL;rYEHrFRgwcf-RhlzLpFTBxPN^U!9RG@U(Oj{kKh722
z=OOhEq)z}UwQ@1-Cg;TX^GQ`l^9&;4_gNHXcQh)O*HHBqX!WN=&5ev@4CUH%EyvuJ
z{}hRGM6GMuW!RJ3WwdxYzw=E1*j?PF^y5a}i;~6IBt5tn49;a?-SL#Ew`Snih4@6-
zQa6N!F1Hb{ay}_Dw^*=S5x{(^?%2jdfnf0Uk#k!xP)B;Udh!^p*tnXC>=7?_Xy4_2
zc`HmZ1j^nz(fD*3t)aaKdi~|&affrHdw<|PhjZXgYkR?Z(U0Q~@f9GS8erIpS4@F+
z^68SNCaS(g5DC2dbnd9=_f@#a4r?x3-Te8rjkf95TLry2-zoWlNHRienm~{z_e+o#
z-NX6qH{+$%vQ^+#i=A=Mei3-Vmf}<vq?cA2LWkwJD+hdPH?NLfhJWPpf4HZr0d8I)
z6O>9v=EFav5}P5vw@Ic`h~=hS{udJcCH!4dc$i^9Mw@j3F&2nV)i-vc0D=T0Utit#
zdwmYe0k{reznq%D`He8hVN4aKHZf2}z({?yRJ~f2_@6%_^`B`EV}pSAGlEOLDT@=u
zOghKt|IY8=*Sy9z5A4B3q_3h$R4&!6e1vvzcC^)f&*RMjMqoegtn=F6I62(M9q}4u
zyvFgLi^);L(jg2nD`gPnOYIMb3uvXqE=Vv6$VQQ4kU;B$0;fn;@NOjdv#&5D^pcP|
zUn?;qcffC=7#gZ`6NT|-v=u%1AZbCX+!mRvDU?Ll%BIJ_=^7EWJ#mAq<54d?fh4sy
z!PSc)1#}ew8tI|s+_ar~aFt3sfVDKcDu93aQ))}c-QLt`9!pclCTF#9ax8JLQvpfB
zQOnnDF&>^(w0wFyQvangY#c>^a^8GKv6PuWlSd*}x{cQ<-U2N|bsAzw%k}tIEwFhq
z+LudxVvbN>wERC(fQ!of%l{rv;)-7$FnZW~rI;3s!|9EX!-Oo@x~nKiA)KquHM|tN
zA_{yO_&<8UGE%Nl!KE@}t@VPDLf9wo#Vz!45DP8^nTC2C;0G24epi4z{5tyMk3xbb
z<n9K9(n*eYe_LC7?>O_a@>w{Hd>7aj-{jmwg`h?4aO%bu^#ZXF<?V$yBtp-Pv*Zmb
zK1I-DP-6)wnCoawuezV|&g6R4?UDJB^i|9ubh>YFfR6pZoE?UjAU`q!nk!XsM|~H(
zlpIupX~j5|Pwe{coUw6>`k=~);K8VLN-Vdab=NOHCKL4vtz8#C)Sm8A;vUgN)WH;%
zC^?1%Xd0N58x1F5BJT`2Wh2MO9J~b9y)hZOog#780u|@D;-oI5oU}=)aAnF_`Sa^U
zNZe5y(>|0Cch8u-)mOfeqQ>YQE%cP~#-S7)37QJxjA6Y@x&+`<!U0axAy`VSie1~Q
zNzG~^;$dNMZ0tcDZT1$@@y9BTxB-D^z(xH_(lh?!{|C93y(A%e@`etjAMcGUnwNcn
zNHr-=M8GsPS|lQ&psh5Sni31TgqAm1k@(2`;Fi85SnO$E9`jD9*z<SNNpN>47J`}9
z$j^ORNO1QC@`y<by6=anf!!n0wl&4jdH^hPE_@oDM`>JBEOMoO-_N<4^l1K0yjFC_
z;qqz_52QBG`jass?AW|n5dI^)on@*CH_Z?rhw`wmf(>+-^|z+E&UfdvI2U`i-by7Q
z_M`PUv%A0uLpOLs+!m_sxuF}*c7Hbw@KF8^25VN(XjWHnN#BeD$+*8Y5PH>9xi44w
z;%e(wixv8%)XNhHf@Rr0!EmG(LCO4ejt)aoBFH;{xU`?d^u>+V?{m7Zyb#(zj*XW4
ze*-G4-p*7&7Pmxdt}=DBZldS)E9rn@=t(3m)5P;lnqZ3ogh%I({3)>B97cH?i$G7D
zcQ!48KAkMt<Cah8z;K0{A0YJ4VKF<6n=9OMHI;G5w@clrVh)-<p!;i}fOSe%GgOZl
z5g+;OKp1eNh;|_seJ3gIsTHp4tpBRXbQCX;LQZG1rzZDnj}Wl&3qo;-Y~4QQ>}V17
zMPa%x9ZV(8j=)A3Mm+uG_f*g>v;DmJ-Vc9lzn?9Gr#ydh`V9_+KR$z?^K1p6(4CMQ
zt3JvaKW2HcSU*yhP0?`^({`+z;HXUUPTZ{TyQ!Ci`avRytaEL~<3?Iad+%P9uD#!`
z*`u1Y0Xt#V2tOD4q)aqCp1(r5A#p;hK;jpqIF!_k9wMbRg1lX4{9pfr&kv7?sE0`@
zWKZTdK;wD;c1_{H9g`|F#W-gx9Gbh{75Ek|#;{=ypX6~sXK638SUg4Wo5WOJy0^)+
zaX{}4S=YFxD^OKf)*h9zXU0=3B+cCnJGo{Izqb<B^o<GpMOJjgA+yYs-Z!UPRG6C-
z$jY-f+S^Y8#(M|ffnOaX05I~&##sJ>vVXJ@Vg{k=q1rG_$QzfoDO8sUw+!s9B0xbz
z8(|4@02e>T+#<_E8<<mR8!O^}o?m2L!3&F!N2^nY7jJc)!)Zz|1<7Vzgy4y8+5LoD
zQ_K)J2_Q1Ry7LBy9@3$8%E;yPmqMghfdtW;WXudF3)5@WXGG;AU@PcvZ>!w%McP>#
z`Q-aG6fq;^<uJ)+lfky}(96vHYNwVV@bs8N%oY4O+nz$EV1s4OMB=Gs>cR%~@+zoB
zk<gb)xMb2%RFq=a%eL)c;zv=Zixz|Q@p#jvyLmMJd{M&aj6KWKmh}mca+}8mQ@L(F
zym>82iwT=vFeTEI%QHLRF2)-IZHsdyrFG~6bfoqO>YIdVGD!wOpInD)DNb7YeXhdl
zZnCPlW4$!r=_cqv8>;BKYhVmT5=;VzSD4rS_^2{3G2&kh-bpVrByT_UbOh6EiLZ~n
zJiRSy5qslY=n{5(EMUS%XT?iN=oZDNH@qauj;}RUvv_2bxK#-F*A?4M71N+I^q^XV
zUMI`(d@gTr@q5~MzDH(AY5&FaCC0q*BR}<4!c324@rOkAgLWHP%7v+`{Bic6N1iTy
zOGyZ2#(hZOOehvxGEf=BFqtVVt^g;dUvl9|(nn}5rooznf!WY;=~vgO0^S%2E}yAQ
zCmPBRLJLPYh*gI_AG5PHOF`N0E`*Yp${&WTh28^)#H9=kY75zy01LCQ*D&!fgO#Rj
zCIWQwywR<7irXdjq<?1*YqUGcPcrCjb$jv^*-Fe&??$N1i3h;CC5uBWlREHny%if;
z$}`*Svd-S&H*(jpgEPsq(NoCq6LHg4Vd*BeJ6l8x0FrAJCJ9|j`0nQe=DyfRzJ=}$
z_N72MhudoE!(+F(SUEPbjh=d?1hc3OKNk~6Y)-t=n3*#NqWBM6y>jYvxqKu=zYAOJ
z3<P5C&_1m%WpF|l5!hTzNjv|*@{Ea+ToVBKQ`4pc&k$2u4s3281TkrL3DW)@94a0J
zi$k$7(?A-Iv%f&gbhQ_ZET_w9_3q3{!`SvAGlMQcHrSm2BGJTQfLs__^6wu{p~WM{
z7e9TQM)V;T&RZkI4u>~OQn#QLs{Pi#SX0;Y77|y!?Yj$Mz#`cD*lN?s=R`Lu(co*U
zW$|5pjzSkKiOHJeEO<5Xlfu(htd-zOl180dF*BV#l{rx^N5pQ7lr^vuXMGq0zrgKM
z$4p|#FWZibQc0sD4|Q})rZ5fTKz37~e6nO*FQ14&<4~s~!D_V<03<FuT$Cn@dbl`S
zt6!p<ep={Tw<|H0_H-X6ZV)S&x$Go$eW)tu$_*o}-tkb}-rI$2x6JG%!(C~h8UJ@I
zaN1}=JdLJK69(;!3Cl~oICMTt`ULvZ;ZFAH+5(V6#rI>(d6<av$OVomIH4~nZD+}P
zGpxqP7pzAe|FxknG#X+TFa$JW9^Eqv4Nr?Y-svOc;XMZ5rn;W2Rt%Bv0J$M@&Eu^O
zPyq|iu5<K#-OeIKIJ?IhIwsVNO*aTfxzVG1tdVZm@c6OtKH5g}AZYD5KTvY3qeU6Z
zt|=#}Dv$l)536R_Oa}v0j--&)OsPNtbBp0Q%~Ni`et)Vo8snZ;zq*7!7DNPEEo){g
z!-kYo-%Uc9fseS3WyTUjXgj+wVpIGIeO&(_=<>zqn`n?=>De+DW}3*#I;@+#{v;nb
zumE(s9WEGL(@$xHY0d>IijV57Mx;9C7QZ}cp)2e2xb*^+LjyP--0s!;!fBw(<J>+Z
zTiXi_evM><+Ljl}$dCHuREO?tNooTQosduzb|X;|?D1DtuR1U-xj9Yv@Ysi%ASzu%
zGQ^AMwcrM3s}3^?78FH;{>aTp?hv8uRu<GWY7xV)2{cX^w!i&VuMOeU+pruTwnrr9
zjF{nQ^JFFaa~_KcnX5V|Rb1IESs)CDkRRowvyUUhC*Mpwdu!;@EjkAIV{U37Cu;Wg
z?3)y!(oFTG@A*+`L~v#5<>$i}#yHSR(2iOI!~JBuzzB-iYDHFMyvtG+?e~vjbG>xA
zmT$)<&3J=&M~twTm)ap=vF1C*d1vcoxdgM_?IVa#E4jh>%BHQQ_WI-nH_4plhK%yF
z74HU|j|Id9H3dcE#gRIwngy$o0yoWN<Smx_OBk0e{VAL=yk)hz=ib`_;~c`5G<+7D
zh+mV?KF~HcsR|2R@7Jl-C2_szThDio@U-e@O)@(l@f%Dv6Jpfm(2*ie&675sR;Cse
z4c<%ArXS}VAV{@z-Ul&%9+CQN1`+#>MEBqfeT(}+gvU}|<I4|v^B2$KXYJYYkrtq^
z*uk8;quD%@IR@K_7JXzHJys~?a)mch3i$G(6o3!o;;TMB=X==ukR{a9c!OcZfiUh{
zqR5#PjZXF;;vLze6j3GRU%3d2+(c?t+N(##Jx9-gwfDZp2G^xO%Bh&~gDapgP1I`U
z(7nS%jj93A**MuTWV9GA0YTHs7X167f}hhRmTV~l44|@_z;alh3VvDr7UI1h7fj=G
zQ&d5K)s8OaM=(%a-QT)cSRb9uVFG4u8gfRoV-PNJ%Pxc}2!(_^q8VDZOXM)tAOWc6
zSpb5Zlk*G?Z6=eAFra?@71{hK<fP0{?bsdp0%5CDs<1@UxyVzw+2@;`<0Nl2ABZvW
z3q(Wkt%r6>+wJRy$Brr(bCFWT0z#GonYo9QWXvWf&5O}|7QQZ%gr}`pc%|0D4uWue
zAsa&rdqlz`CWS3@uvtg4M}(f=I#PDEq1gc;Y;cm_es+KI4LKeP#Gi#;D{lmDr^d9>
zH^!a7OEAp)b=Es`32}aqXUtW{5jXc4Cu*J{l!^LcHIfba%QkvYI4t>Hp+wy1;*(<m
zS0aSg$2+N=wv`EUND_dOpmGL10}mcU8D=s}fD)5{T$`1cO^@^|IT=l?+twI@{K0kD
zc%W*8nJB7g(q<?_J;Q9xNKmnLg^GTYSe;OVui9yQyLjB>p0?jqvSw$p|NZfp1vfvE
z<8I4_O?P0_kqbH=5JDt&*^2Dwe5amLbZ;6!(Xz?3(JYq>DFsOc9@46%2eCe-C(4)L
zlJUY>!4Zr+mrq?~5yJ3kBQp=}uWpK6m4MTUyUKU#=7ZoNdtc^8w5|#Soc|HiE(33g
z#&Fy>19ct&<RkX4Fso!4xfT>88a^4<@FK2?PeS1!>oT@KIF<u=)5}2(;2DXM_x8Za
zz`V|6Y`Y_{%C{-)0IgrfSnr~k+U61-DNac@Xb)`l8%|_X^^Vio8ch2lPsk*!+s)@X
zS-kUpi1N~uUjq%u&<yBB<*~9^{I~LkH)CYkj^^0{T`gV>_`dXDfmy1}29<$v#jvO#
zl0+3bc88oCs~PWhidI`aTw~@~PJ5o&)(?MoaRMtSBeEJ-;JQ<&i!9gVxh-b))H(+*
zKQAFcgJ|kOu(;UBv#Wr9L!~sM;J<rO2$AA}Y{#l!1E9diJ7c4d%gX{bkEPTugmuDq
z?_V9o&GoMz*Q-tHMeViB#Q~3CK{UY9(5p7z`)N5xwnr*wj%ClB;jaMy$-J#4OjrHh
zsY7rR=^JCHn@8^DW?63d2KS`R&6H*(gL-f>;vxXo>=u=WA0|O8OM#1l=)p}`Bq@0p
zMeOb77DU*I@WHusy>bEREiJpPZQmX?9b!Y^Z9ai}9Y#y6^EL!KMI)2ROz}irUmsys
zvyRDv^wgQFx?X?N3i38+w)}vv(GNmBM!lD|Nugx!9FQ2ZHSE1>n{O%a$5o`2Xa(L+
zLn(!}`n~C2TZ-rCD;uiLBvM1WAQNpPF&cN2czt9H>Pex9*9>5bZUIep(e_6`JMi^<
ztlE}mLnl6^J2|UY0zMiEmsfNAd&L4LOGhtfbY8WpYSj2*1zP%In_Go%0x!H1V6Nyv
zKd?+9G#w^J)j~(Zb9H5y@u;Q=T!U5Jua-X{{h{P>b-buz{v~w@BLG{N1(9JCy40R|
z^UW*-xTwv8(m6FW4Dob(hPv?HOUaXFBq7%_9iz3Dp}!uY@;^Qg6wkw574wEBFdnSQ
z$fJ6gHE-ocOyOnSp;b?YV7sn6a?i^Kso2xQB-lMsm0eaMsvWX)1={;!37N$)W=BzW
zv;a$$ZJ{lw<wJ9z8>8~ThpaF7&~b7U_gb3H!0O8>C?b3{(qh@~wJCPpmk{+BI9tJ_
zG&Y0B3Jqb+Vbj92bKAs1U`|s4erT9^z%Y}d^CMd+J5)n4XJhDrlJU}mM?y5GaO;O7
zZUlG=XLDO<4soSncNnag5;YFDsZ5zuZ+0ziSb*9_E2j{VKay!BqA*#EebPzk0&h6N
zlP55b=pyk<I(P7Z(`iSTJNXPBGCj<(udfxhuLw1cJkdyg@Nd(C%M+1H#`ixNhx+#l
zN6|-ALH3`wrpII$?W3pHWU@Tg@UbSRmSG9yv3@2U&C)lk36Fc<t>y?;?UHwVktkK#
zD%fotvM}8KxZsMP3qTq|x1l!~2b<IsLqH~fI!`=5TAZEk9V@!}M6mVO++IMx5xZ=!
zKXndI9+lajYs=EA%@vrzdhIUOCgJ-0H+vugQ^i7f&V{X#iHvbe;E;0R4=7fjqpSFU
z*Li(yS&bt5_&YkO<d2h)c_V3sDJGGqnU?bRDkOdTdJ*G-@1IjkxzMP%m)N4z@NU(@
zIB|^uLR%IKxK<Dn2@@_<jXBFla^_ica}zQq?2F~POD7`#`OsjlS%J=Vk$s*YC-+FV
z%sv#^qHE&R6YjJs4a(`#sX6U{2T3kwmma-)jYaNb_4UhAju;cwHg}@OP(=bWmJj!A
z*@tRK0#eIE*AVg|w-wphHKoY}0A6oU-zarq*Hp<BU!xhZ>hBo59xaaxR<RhrOAAQG
zIVLMTm|K&ph2MXtpbHg=--PffbDIb}YHgkDFw3tMs=e9Pv<rTQRuFH3Sf@G$3BS1M
zaEPoNjs3=fZ2IU<2C!PWU^M~*HvVa;Z4aejwm#b+1nod$(TK6BmZTkzik9@brn51r
z@^}j)gx%~O4ii!98uOXcCl(c%g>kqqgVzmDN6IWY8JsXxE*D9-`o=r?+afWF1h}Oo
z2zCOK-`AYQNas@rnsV5U^IG9<FWcEBi83Sb<E5+jyNO5m>zmtj{QAw&E@oY(wmF))
zpgCc{tJBg0^MG1$v%^rd6ymy&`dE@e{56SB7icrOhI*(y;wWT+6ZA^uride75_(r-
zcbAY+YM^}(7OLXxLop47ON3$3SXwfj`npojGp+UbzJCBs<3+yHwo{L}Wn>vDD$Ba=
z@%8>pKkGPI2F7GsU5ksYH+nDi3aJ$XK@Fa?_j*6(8s%?*m^UJ!#ykUcNx~ZRu*vvo
zWfm#-nB``MOrom(n)_UF4aG|MlyE>_-TEKTeum&?y$^$QYI8kZP6;03R6UEApQhSm
z4PNByydeYk`yUrl6iH**Bj0_osZK*$0(jkA1}lmKCn`o+-bVam$ihwu7}gbse?PV{
z%6hMn`mQ@TBf-ir52~sw{Mm#jR_ir8vf0kTt?|ffp`}{nZ-5HzX32m-PZ#X;9lDvp
z)DUW&6g@4F9V_h+JR26=b&Q}OasV;$?Uwh86gOCWB|~}JYA9FB;kZH~+YYo{LP6iX
zA6szAW4&7DSBszseePoy1~OB)NGx!<8VGEWg}8Zyv3?xD#T5En_TV-9<Ut?JL{#+k
zE>l1U2P17ah7ejhJB<M)=_u8t?!2r?eLOfR2CuN}x_Ikq_H@ITr%o|aKsGT|?Cn5<
zII}yjBt-i&iF2z)<+xdDemcleF4~<kse)N*God|Fb63p#G=(e`$dbrz&Ipap$DG|Y
zh<0?CHo3qnB-8n3<(?*bxH4~wpKCGqzPRfM353=n^Wo1pivrM2el~KtpN@=$oDN;&
z;Y(|0!uB4mpk0bu*a#eURKt!>{hBUKzaFIBYiAu(`O?5M6%RiPwS$*H<+F_?NO}g_
z)a@j~ZWqecc6m2AfUc$=U3(9njlLpP^m8D;FWom?n|`hHhuAYMat5`jl{0lgviA7w
zO0$rs7&#SXOoo?;Qy3f1JlkFEpA>i_-DT7XLfNIOwW?i&nw4X)mqYqM{9*dEJx%!Y
z-n8LvhjOU?N-JmqftkL8`KbyDv=|%x)Nu_gJ;c6cto73{SVyb^OJ4#MzDjaR(7-Zu
zrQAUqr11u-QcaKbI%#fII+udHXKgJz8Rf0A_mx`WzSUgq8+iC7!+HG$_jHRl89oh=
zxbbe>Cx*iFaoWhymespyu#|cghD37v$#;2inH~sQ7HN+<kVWytF~dsAZ{lj8Bk4E-
zJ|Ko|3HM&l>w)z>Vp+*`D_?6SOoBM2-HmnMaDnYL#%56j#*P&wmJiEQaYgIdkwEJe
z(PzaBT;+xEq-!4ZlkD!*lrx8eE;)(1VIHLbw3{H?ax={Z4R(^VT%?fHWb&-K8Tkk2
zto2@U^IKkAh@Tr^FoeSAv-6G^kSI1M&7pB#sE|*vPJEb}T)T**?othV@&xi4mOiyb
zzwiGS>4S@Dn?~Z*qow9fK7v4U9wf}YL}@UoyUl{Yv>+hZa+MtHk5xbJXF4c@@NQV1
zN210y4kMGiCTZ)@9rQh;JH``w)Yy~SxB&~+-d2Ec_mE`0(Bo~Cq;ioxr=CK@u#NG(
z6ADb?8@P)5PsILOv<XTKxsW+I(BHXLqKa9u^4%Zz&2H~5?mVY$$g@v&gOM(<HgDMb
zrkC)2k2kE*sL;6&iDti781>{+MK!YBNd_e{4nO+l*eCj#pGrxMSa`KZ>#Q<)1?h7G
z(9SnF`HBT<UX^^3>-sns@JzOXk(O19Ydn6Z?4sq#lq!6^3!*2-AOIVlJxhdE@P0!P
zX&k~X&ADIbd4B;VI3wHUE6zgmaLIiFrTLLQX$$els^EEbZ*+zI@Ow?aiA!$&gEb&@
znompHZQ94@qvFZpg`Td#guVqrgxD}x^49{>aLUX0yowLV4wgeqqq=^bI{!MJ?}Eo4
zKnWLxdjUt>%jMw1&@DwfHtlhA5{HITJM<Vg`fwgP)!7vZbKWeXiLKKg3R<ZQKAj4R
zWx&OcRT$5VHt81Z5*03##+#okz~x94B>F6hF;yxU9voir8)D-B+{rB^DP@weh}sma
z{3-J%*0-5DvbH1qe*6P`N<n}<_cO{F8Aqm|e4>?rK@u>N1?4G)F<R)QiWHO^cOy0<
zE>7Adb$=^&gT^XfGMt*TAkyF~WMXLvE4SiQ1DLkqP|(uQ02bpSIGG7eE8Qo%hy41{
z^kFiiT=(qL>#nx;7a<nAZ?wxwn)MGannYh{HfqWq>y_Ra{&Zyn8Qx9|pGseggc2wv
zX|Vj0lrhW0@k+Q+X80PWu*UgilzaU$cVRLA**_$D@vhu(Uia$9GQ|l;MG*zX)zhNm
z4Zg;aFVvUn*%%rAAYSy}G>ZTlt3_p|6<zt1iwJ&8hV=2)&l|KVH~YZ4c&DODd?$7p
zejBQ$QA^t}p_EZ4da}(o%O7NZg%{>UwNv#otkEH7z)dl^beL@3*xk2k%?N(Crm-0I
zmd+EWWe9j55(!~GKql#%GjU3k6&fw;$%Dy_1xtE}M{Vrq;fFaNrc*)x)ou}Any>}W
zh4C$=tL5ys_zpMbI!WH~pdF5_$aW2go8?1_*C6%e`cQ=Lt<0gS2WWpoyWDT(>q$0m
zar=TNtz<YZ0t1t=b8oG>NMVI#*H1XGK(GVet!zn1?tZYF!ge*#u%@V+Ex(^L50X*e
z9HoY)as1fl`fdmU<jqMZ^?Gtz4d7#H$FBtB^m|iC0yU5Mwbrch1QG@T;lcv{W?abN
zC5^gF3jwcNQf|m04F)|{A1YITKdu~RcZ#!3Es^zV->X`i`{e*&)}MsUvZm_4aVtoK
zfYtbkw^jrXdc`R16MCZloo}8SDjg2%bz^mbD(=`MJ0dRkVbQWOuXO8i6VIO10%9m|
z+NWIhP^Q0+jNxOBnUqL)ttsSnzywyH3qw@_h-XlvhK$8X<O6*fhTR7kU$=FRTfAQG
zV0Sx89bcCM&P`U5#{XxTjzY5*d%m|uJ5El;FA0V$^i;AO5hjPrT90;MYEdvF&WRh}
zppsX(p9|}1l2mv<feiShNUam`IXOw^94|AR@)66>vbnw1S20McAdXlOZXb5TEo1vl
z^(t_G+Gx%H0zo7Eb#lh%6q7>ldhu9jzXZ4E&k-uVO!T}~q^K-2w3AWd_l<|Jsh8Tn
zYDCbJuJWpbLoxEFstEe=f9b&&D@bmpb!AN0i`JEn{0!&^nJelXG?>q}-o0{9$d`i)
ze=wVOCuhWJ;w#h9*hAz@5GluX-rsmp<dhMXU(FEdO(O7qtI}t0vOW4rNGlUt{Ww;e
zQ@FYERvvJl4z~Ax+FUilQ*S@}FhUC-jGsD`3H71Le0k+HD~ikNT)Hn1cKzPt0daFC
zCk7oRp8GK%ZMQxOaJRVk=>gbH;_Ix2s#?1~Ectb;z4uDuW7LjqjC{DI#h2X(Ik(_Z
z?mvgXWyLdkd-z=)%+3<!aKPJH2do=UtQo&fH~_6vXE|28q2xm>?gDkTv{6N}Ni+7N
zWIHpXSTe`TlIpfl7`}EG51#6_hop{=DG32aM+Y2O*yRcD>$ei3m{#?yf=6-skUtU3
z>BHZk`}PcrXW-tauo$_M%X#y?E;)kxYU}LMM&VTOoF}4M#i4lt-S~78a%0l(zsQpk
z36J8F{diwCh8rRp4p<MCnZP6LhVVHB(iXX>*YMc5)g2+iS4GZzb>9H3>;>_wUw{MX
zfU@|0WXlsD?Nw>(*r*sHW{yh#0mm1XVKk(66;#d5*fuN!fFj3EJZQKQa%&*jLuZ}r
zkapb=D_Mv&>hrS=x#-4<uP`A33YT75hZtsI`B@PM^#I~Z?eT`32>4XQ<9#mNswn89
zcI3v#yH^iBLF<b8Y}YWipjqeFZ2YJX=|U9_V(y3Mj@-^)Wn4Ib7C2?D$!H###MQiL
z#}CTCw-co^#psEO=!ty|0hcy)o@bu(ckj=GG*`OjPfg??6oRZ_bdl1wm3Vy6D)VEy
zYeO!5f;vm{2*JiU{pBN^=W&F)1DK=9lXnZ`7cBiH-)U*Y@4$`Igw1jFF9jIbfx;|k
z-0*j|4iM3VtDHiw`PS(W7Sw<fW-h=!Haqx5R_3~&`0ua4tRE*j@y3R8TPI1+C7s>7
zF?0zYB<f868bOu&pw!06OqKol8y`FCq%{=e0*hoz8SMfj$b_ELs2JR`F*mu#F_(Z5
zz{DFrP5c|yE17mc|1#K5&kqs{dj%UTAHaHO?ih*>d<X#R{*+x1Ft~P~UU=SM`r}7X
z0a4;nv?>VQ^xjL=92_FF4Lo5~OLkD0S6yp_7*6&r>j$%Ktel%`3GD9i+;nNVM{9%$
zk(=0@RfT+gX1so4t~EGUMEF@+n%)zUHd_AyOaW&+11-;p6VF$~e&EI#MF_^C4YR_j
z!U1Ts4@9k}hl@cicuWF2zkDA`Ur;)M{DKe1_6h?)t(%L66)avAD1IteReMLwlReVv
zpkI6_I$U%MuU%B)T0yk+y5i%j95Jn7GZiFc2DZj0%5UFWqsBD<x3+dt!ju;uF@y1-
zLmW8${8TpR6F9V&+^)2CPbHHv(o!?IU;6V8^0C>KqEL(dp+Uw3C>tMn1=F<+)=9j(
zo|7u^$^oghP<(dv4+JrpDtsrE0J&92rD>B37{M7f(mXLwv%@Su;Rr`)55BjohVp6D
zv&lZ?icmhtbvmlPuVMdXBXxH}`gEp;Z1RK$(_b)aYc2mYL#3DzD)1(X91je>#3lgu
zc!H;=c@7Ruu+<A2zIlQ`72QTkj=%WBUPEP4ZQ1MDj~8sTrqUU{1vg+2ci`k?H%|$)
z(Gsd+rR&iR;%zRw5_94zV$@5S-kzp+ve!<}z$y1tUkM!r{^&qmLd&FVoI=>p=Wn(-
z$5qSni6D^GGHl}=?_%<KRngh_Xl^~lU5j?7F?k$63hQIc;`)%U+y)cZT*Sl`i0u$-
zc2&XFFYU#Z058y6Ldi~}kb*afEKPDarS`Qshf`5ZpdxzQ&LJ0sf{e~_Y{ZcE474xp
z3)lFN*kR&-y))DjDg<|4i>bLvs?IB7)a)l;aN2XA*^{MOIkH0#58_x<u}Ad=)lgAI
z&VI6w*<ucF6`<=0H4!qiO~7Y-#)T2Sp#I_r5Ttf@f7s>Af>Cq4o`C=wyRXCegW@%Q
z#-neK8=LwZfEmH>O;(NT>Q47~79>cNMJU1z6O1Mn3fmhq_aB#kpDs+OvwHV~opq7u
z4LO4)3<a)rbX~uImW=mjd`)IMk;3o0`3;q~F7$3NWsJsCAZHX=Y6{8U;KDq&d8{4H
zn31KitXNEA_kow=;k?gkI8t*}U0Ng2^_kNITKbTtRkMTO^PxV&(?)A{J&5JKHCI%$
zg0hA>L3qe%eIWrgpyD4&R*hXMgkvS6z6b(TwqqdMF-9aG7BL^~vIj3hrtIwO#T1}z
ztp*n3U*Wqg?#9m3t!}2?tm6y`Y#D3_0a}KZIp#6yRj#R=H`J;`T$qMQ4ferHGJnU@
z4f+`L4ZoiykXY*I8#I$}#<6;;NOX}vOIxi8f;wGW<0V{P2<BjZmYjM1^qHGW%yA6G
zFT?Xd{<aUCxF}J)SZTbo^FZF30WNkGy4LVSS$|^n4sv_&4t%R|EXx%%vlBCP9MjVe
zknhQAWX&<dSyOL$AlbIH{(A5+hm!oE^)qEc=12jm@X=YxtWp;5tz_5_tViZ5QnzoS
zDBm@$n=4h{0`U=Jh!F4rhFY(Y(S(ggr)Tgb>k+DKCX_#kK(3U&{vgwRr?*y7MW_ca
zwfpjS)Bw??g=`D=qN{Z={kl-FMhu0R=I1bN=h;aqD}?XBegZDV$%&?sj(Nv!CPj_V
zEt3lWJZJoPDIAx4zVbS`$o-i_^Ji2yG3e*JRkD~1d7ml6F_z}saaWD+-~FYE6zV|W
zjV&S}9g$ZB#0l;u-J75lP6}eXs)dQhAgH*c6Zy<;W#BHS(xx2aYR0e`9mA0Wb-vEt
zM~RjiaN?55tr*pi!GLct=@aa7m+w}LYh}O_s%-Y99yAVS0H5DyBF`O#kGUXqMQLsQ
zOqBM({2--wD}AX25D+eLvv1$G^YqR58B9sBMAdD=*>`5$(Fuc>6O^DW-c1|clGpBK
zJDJss?8)JhBMeSd=2H9bqhnZ7@>TsyUS}o4>fbj#5;5=3q;-;B3t|ARzgESRp?&>8
z{JyyWqT~QbMIS*{kwN7qdmau*PpHP~kEuwBDm0fjQKKl?T++_viv1^KA>v3m5t(iC
zNW(F_%)HJ4SAz#^BEl249?9NE^lCDF=Ir$2S&nOUOv7bp+AbN1BXABqk90>@k%^hP
z!_b!_6`5Me8rNYsC37iy=Ksa4nWH)b{psk}OdqYkhH*xoB?~mWVgzb`8W8+4rujM}
zm{D%;y*}zD$*yd%qJ3J&m<60J7a<Qt1$}JHK2QCMMqqVbs89<|gAM<jxB(J@?F9u8
z_Ezs3?11bIrPNn+GO@sN=u;LlnX_LAjhPa8LXQx+FcwCv2jnmuE2N+P)5<L(+f`O|
z;kpbo6J^(~9eirau^*&&bXDd+KbrpwpfO-=lo&ht2Z`*S{FBp!$J|YQv}$w3`<_aZ
zO{sp$Z-v=MqMQHc^?clY*gd758f^X&?d}u7s$Kw|0g_cQ2DSceG=$?g8U07Q4hE&4
zImh(kAFn?klc(8$HvhiOrtK}-dwsZpg;|wB@V>){ufUB?BrFn%N|vijyqVw<L=kEv
z5>6=U`%~0j9=o1`Ug*C9cVs*l--fLP5bK^v_Jo#8L7rxwJV9F*JJLFoz|1y?uk0^l
z%lz23Pa#jtgSLMb>2Zw}p9Ecd6%=L;VPggUc8gUhS^lyWen+s^5%4z;L2`|FTYF$P
zsO!;HCAomggK;YJr#znn@G!EW6F<z<LFUUPm+s^zTt5%lGB<aSI#;iJLUw*J7gX{6
ztfLOWtWN?Of_TrX$}z&DtZ@}>Ri)4S)#DtTn2{THKMMmo4^1$r@*F>3%FY9w9M8W@
z$DsPd<NA5!6cAF_CsDgt^*+TI)OB97H2r_NGtFkB;isag7(knW<oHV!{?x$<oW>1!
zn@yGn_*tZPn0I9JQ`gV2cosWGy$Zv+P4GG*fj$3D7A<}88s7C%W0jRDo6lOgn&%4P
z05aIQFwE%So_?08Is}A$G0c((c-x%XX}PKUYyr!%ud5+f3*yv6umd|l@JU;|A;s5|
zf=FY$>c8|mh?}%m;Q>1sr68<G8NK7?`D<(=p&w&&2Ujx{g{iZFA6uN!xn#{t?4DkY
zvUxC}pnj&J*fSCm_!n)FMbq#VQ@(yBYl<2ON1bBE0%pn~GMxofcTME1f2N!mw8Ug@
zd};;SgO5|_ikPL=b1<q{i*j5?{pNxv0*T3*f0VH^BZ=@S6h6U5)vEeT+d*13DrI;k
zo07GZlW#eiDme6DlNh+cn(0rgc^Rl#s0e@@Cw-7Oh10(_8Z0Cj?k#9-{=p6Nz=<E;
z-lTiZpDlFi9qfmyu_bcOdm>JycEamc*r?bo2nBVH%c+zLO9m)n5HT8qPL_uDCpmXQ
z@Ocr5QlHf{Va71YE@<P?A#b`lbca$>e}US}EIh$IM^d0FxX0>NC?Yr_g=5$b5~wf{
zE5GT+?DbJ!H)~5h`dJ;R<|=R$^xf}FoFN?_ml}*jj$sxV=MiokpL~1HY7Lp!uJ=^i
zHQ%u=_zM5j-~N#}qsED?P6T^6Rqs64?BzehR~(ODM%BP7PJ;PDt;>%c6Og+_G5u*H
z-UA(p73fL=<ZXp&mHgbo(H(@=2dy@FvaX<hv{x@_NO}VC*hNe@90}V{o@efjjBW_B
zYttd@NwHeMV2073N5}f|LdOx)eT_a5N!y!5dH;6Aoz0Si{?;tJ)i1?uBUqB<W|=yw
zWR4uf)UYw_Bo^>HuryGazZjHTx;&zq1{_Zwtm0-hv9@U4p*6Ab1nZ%~K_OVzOUYdA
zmh~nyV$^9PwFqfO@sd;D=0nDr0U;GJUK;4}I|Lt3g<HH!xx96AzS|#WMh3hI_TSJY
zA6qxce0EZOhOp3-<Dok9q{z&6p;UnG4lB~<r@2iZppw)udQK$$7;SbD*>7j*AA{4@
zGGNRORQ9spBN#sZWUBq1kB>_pk-3TO$cbb;>OKk~L2dO=&;izi`WI@>47WAgT(f!i
zwtnr}IGj6s+{69EZKwA07f>?YMNY{^U^e?~4I|U0u-g&|i-L~4vz^wPR>6v@P3O9T
zH+F`Bz0Um2k;T0aY)-i<!6Bvxj`JPuydV2l*gbr$!r<|vVq=&p4;Rk;+tql+X<N-P
zy*4AZl;4pwW}3ZFYYxB_G@0&U`7b=1{Qv?${lBM;8d;a3p(a2Hi>PDib6V9w;qW%9
zP6y7Rqp?1JboL7~oQxAkan+zQ+ZHt5dW?@CeyBy0NI`|@nysGP2mdtZsRTM5HMmi#
z_8JlxGy(}KgCfopf%8$d_XoF{+g*XvJGxp@Y8d``(sMEeFrLRNjIN70%LGJsLFM4>
zLtx?~FCZlSJ-Tl>srj05UW3kq0873LxgxG3*5a8p!zF^hjz%1e4P6ZNJ*=Bvbu?Wy
zt?dB2F3^E<g&D@6;_qEt&m0rn1?vRnO0_`8$X1JR#q)8fgEzY!=C<}KL4Rqnz(IdE
z>1ib*rxL(JIs40I{W<2%mM@#Qf0<F$C2HrZniz?=4wGR7xM?qG3T9EacN3xJbrGku
z`A^PQt4v;SZyk>QT-gA-R(O`0X_qoM1q(xN%XT4FYoM2`nbD5d*+}am`(fL)HhYhX
zP0;(eg}f+sU3}o9vewzZ0#!Cr5`fhOVO4kl5wLti>v3Y{$c)NtHWWp5awvn!C3q3=
zb<0~n=gi~&Af-DiYe5>-w+H$f!(p)Dd1ixo%;!x~V*^8^|G_|);7`g1Jm`QNz~Sf>
z5(Da(5l)QHnvfh^oVQrcwgT~Is!()xBMfA-ZkYMpzHs{JT(((bu8RjC6r*AptHNQm
zokT|VwgWwI9#*gj;C!!x&wTU{{(1krPj6>|9F<c3fa`W@tr%-LTjIzSsEBk*?MScR
zY`k&l6EiP0I5pp%3s<jlqSOXHa_c9zoYIgOW^URzHA9{2=J!Ojr>V!_LkzIntt7!i
zBfEL{*{lWg2<AE9%XuKuw`CePZKUhmaS=J>V2RGgGe3qZNmUwgg{s!n4o}f>B5K@b
zw>jBM%-<tWd7Gg%{&5&oPFf{3q1mG1f!+|fq!oUcQ;v5g_R5Id9`?kD9ZIO-;t52A
z0p&mRX^0G+KVfKPz_A&%f$nguw8BCRNGYQKaFVGM+lzYt7DWyFi<u+c@6gv*ilx)7
z8HK{r4bBM!84$5>M>tCg$sk9mELft^1<6th|6t0$^1J5Xv>j&@D&wS;5qiO^iBNTT
zWm2ftGh?$X5!49)ex9WYOw-_q2*e#*U$|An>9hbrXGbJIwK@}|;Xmc)4rbZxEKg&A
zY*RrB0Vn*pF<MT7PV^Cu+Cy;j-Y{pq)C-M~;pJ4ka|>(q(lF}73JYp~K{1i9X5az*
zpKIM;FnlTFW}$J@{m3y_3E#xW;GCywzXh~x%wS=CZVV__#7t#2w6qGvyr25Hr7<3$
z!_3UjTF@rLOE<f`ApzZ-8~s!z?!2Ze2U-W7qCxW4RRbgqHT<Os9Z@3I5;im^P1!DJ
zte0KVp)w63WeYA>vzVWPVFx}t)lWHKFONjL9NOK~N67zB1GHXbi3tPP;0pBm5i7I`
z8sou2n9(Z&>D^ildg5SjsU9tof%ZFRs6!WkF%v=Oc=+y-4SCF7d6u^=cAvh}?9uUc
zd<%@?)tqUyL(FhgGG;`-hLIP9+b|-2q=-JQI2HCbS*k&FgY#!)m$nia&-;7KZW842
zMyGQEc@h6yqYln*cDC^BnXb!kAe^r@<*MZ1hzpNX@u-mq(F2sKsjukl@tb@ZPY{Y{
zD1~%M+EJ1p0s{gLNE2}#4n8X$i}?!p?zF5UPSCDYfT6ar@V%GA)ZVaWK-+0NtHVHc
z5IVR`{{pR=6T{JhlXoyRC6LCMJf!YyN?)+FLZ|VEc*QAlDCR;k&K!e%`D!8knh=4J
z;u-n_q!;jzHFiIc<*&K=8jqq}_Io`%3#Urcf-FP;uK<|oyIYB25WS(ybV2PCXrJ`z
zJMg(@uIE%qh32cBt-Q0Qf9Wu?^O=5N;_!sRF7RFeP17e;DmjnM7k}U67I<c^{oMC!
z;;0BHHX;;Zfb%{82YgcQj<`^Yl&U6Ou-spdRLi;^On2f(<v7M7S$t^suHkx1ch26w
z3yghteg?1V!N;w$XRD5I+Aj&Qy&>y5Nd|xrXrHa`qRsOFh*AkO8fvsr38b?zSc0F`
zM~h3T=>WLf)gaol?8}G5+sO`7WWT0+UC=keI+;+Rlu}a5%)H{CLG!WLIyo>yHS`lg
zR`8`az~fKq6O^haG1X?^QW)~gw1+J%Ja|d}h)>0>Z$?Z}TyN>>WkA@1p^naapq4Tm
zqpOVc@SrtdAGCdftRPF6UK{mRwKFVB@0;St*!fYa7Hze;N}#&iWo*|hMBO!-1#F_M
zf`>eRBl#DX#v`9Usvv<)fdPBT+AITkiJ(>v!wb^$QyaDLg0T@5zOKe{kNay4uxT%D
z$1t-iXITv1{~JX3aNfPyd3D-3@KXmZCIr^dZD!ihI^9-sjQ7uC)n-h~eVEX?j6?bf
zt}Hj>v&_t{^q_tQq1VN{!95n2hnqDeTJ5ht;w}{uHcHwV5`5}j$fC8B*W?ho4i8T$
zYOd;?0cy9rn7z1G%IbnlgAN$}^H$vCiYC{VMI}Zew}-H3xZKv8M>+R!AZ@p&=e`ll
z*R$x{bi*RxpVP^y{80?;jp0M<CmDO<$(WhgJL<-=&ym4)K-x71`u=FuwPQ|_(bBrK
z*Y}_d=F0N%=%upFMwftok`SU^x=9jg*0k_cpPA!q0RqjmOot#4pUMz=t+t>{k+w~-
z48p2MoMlIIAwY-9ojv{Q_=I}jNn{3~COD;_0Kr*7*n82xM7rKdOJZyU>Ck{ZlcCgb
zfx}8UYx;Um_CJ`S#n5FB23ts9$VsdyKC<?t!t;WM_3^0<RI0-v%jM^x*b_nysk8>K
zSGaqJDBbd{fE?|pLN@!@u7w$3Uo&`6k;!fVGwerziEWGbH)qZ6t1j?wDFpaDE?Vg%
z@L;Ii1x7L<zfXVRjFyn3UNYWnTS`>koJCW6+=GLQkbnG2hTCeMY<(PId>+@BF5{7!
zK2Sw1>+1yqz#<qKckzx%z6cnj|IH~pZnP=Kn)v**R->sdENJ=SY_(vQEGkf;oD<bQ
z5`Cjh&?7wm*w0qm3*%M~b#1u9ySB&+!uV>T<w0bB=@tFY^8qhNzs#{O?WnxSYga)p
z9q!iL%x58EQQ?tK5OhT>NHonSl>~}O>Id#C^|szJWV-ysuksRIVG@_2AgX|JjkV=+
zYJ*}=C!r2f)ckR-K{i|{jDaB%Z~4yAL-S^cqaH8vfLX<NshfTxs#7{|muX^E^*c%w
z3un_b2&J&EyGuVrS8M(R%2zdc`D}svspv^m7+$s+m=}MR$}z@$R57jeHvYnMPj#?h
z9_f=EfLn}4o8^hXi&q?S8}LKtGS8M+eE=n2$3iPqS+U2Fo@=Hn=x%93L1(Bi^>9d&
zHIZTWDybxuS&mSq7r1Oqc=}7P$A{6waGd@YJwL{^!ZQj$BfY88u7Jdh7k)xMBcwS&
ze{}1;rufwBEVXhH;0enJ>&i@u+efS=7@9&aD<{%qTo+W-;m>D!)F0=?zy`*mHtuXj
z<VyR>q5%SVa!V!(O9H~6gFzAzp!|tELmaL1Ywwo=O&zFzzMmBilZi&vi$n9?H-n33
zTdR5!Ku81VCv58HrfML)(VsFB#>*gH^=SI7MxO5pU*(~Xlp2LLr-hs5&Y?1PhkojS
zgB{-+<<}+KH9ko?3{+cB(=M7!dnf{0Ye>5rT3xT#DhKw^nn~9rY=VELsUo@Q?tUTK
zkh5w%cSfBZSt)`4CDemmNx?Tqkqd3mkNL{ZNdk6%Wn68-E0y(FSJSe*a5ovdZ{zgu
zQ#i(Yr$HF9b8+||ww_~_mR+IklxjZx32*Tu_ykVqzp(aggy<9_e??R=DX&A2ol%GL
zF@9bSw+U#ZVd8UrjJp|28a>a3>9n`nn|5`PtY$m0d1`CtA=-3$ADU1G-JH`tgt>#$
zpIMjRn5fB$R;;+!ZGM>&hR$Q&dbfkNtqR4=SB2RHv1F#r7Q1LQN2ROwV2WOT^DtAC
zIPXEh5FV;X7YUSb+bonIWwh|ZqDi;GKf=qji8;^gr7f4D8OFmKLQ+TLMb+h%mP=@W
zJ7eIQ|B)Q`w^iX<s<i2bZTLeM_pl`QI#&X+5DX_a*{S#7EVN&j2$?RW$5Ix)R~i#b
z2G3?zT4&mz%gnEDGim$DnHk!4{Wv|IGgz|~N<4oZ>P?uHy@}98WY%2-s7~I#V&i#u
zsMb+epJ8Dz2}JJp2#g>WyHS;T&C<YzW^VBO_CExQ`W_rD^L)g<5Bv@@M3Z)_u&}j|
z&dGqs^v(?Q`Ynr*i4C8VTW~Lfylb{J%OS=S#W<^AI@S8BBb?5B^#qA~IcD;@PJ~Oh
zxRPn^jFU4@N{Y8C^`4C$-qW${zm>C@Y5$wIx>B{3zI9ip^+Iv+KD3m`R!*I91+XHq
zgK$a0P`g|<(#YJ}9w*S)hC*;8v<5Z)-%_OEqMxsDON5Rx3{{X30>C6AX-)Wf?|G)p
zv1_yMM#QXLl*MMoCMIzhgy#X16VG=a&1Zf75j18UA98|#R18Zb)eW-;V!G+&)9Jy)
z{D^0Hc;sraozy-gkA3`Z%-JooV|6It<^8A5X#2SizI$xXd&Qz^-+%4QGCG}4f@B#2
z8&+23ckioH37LYUrE88h7<bkR>kl}?=b-Q9C4QGz8z@TSoxrr0ZxrJz?y)f9!B$JK
z02ptmpw4*aVDNc4`amA0R#$!%Q4rYe(N|P7BjMPhg@J&9vlLS^qXW!y9#z%j#kQ0a
zwU>7Mq<m7sjG6%|2)4HAq&20KI;oV5b{?_an)k27D=$q^653Biuz~O8aKFKP@0+_M
zUtd7OQExwI;`)G){%otAosV6uF4a(Je_(?I)J5)GrXiIJ7Xw5%7;=RYBdCke5G#!U
z0x}2^-Roh0#oO<^o4nObTOb!Gt0Xg`kN}~Up)M&k`Uk7y`KkBrn!+qL{DYagKRFjL
zrvt%E9||Sv-ny?uHL-+rHIMQa0oCDUI4OuCUG$a`jx2p;v#1YvF{9uKGx2T|RJ%gO
zqZBGIk*o)oWQnAS=F&JMna_Nm-`e75M8vJztITgT2DuQu0NQ0k^Hkf2-qVoN7c(X|
z&5ft`tL;6giuR2U#RGpt<UnIEA8^Bt=1KIUj)=zoD_J*UBi>rDNNGEommi?q$Cd2?
zH~dDn&T9>J4>Wlp-Oz~N{ApagwBs+yc3y;8%L-J}hfzKi8R<p^bk1nz%QkyKQ`2pm
z5nTsnDGO$u<$_7yhRx#}WYb|K00<Mf>$fPs3QV@_6YzkkAU+KPW)oN({xliboj}uh
zFgN7)FR`eBR4V`Wrt2vzdy=)gC{~F;JaUyfs(W0V%T2U5w$&4}T?uVlR8680N_RI-
z4RpOC*6-8l3fr9NYBmdLL-#xhT5lB_9=>$(5MwsiOk1MBu)&W9=5C9>`~deo6g%53
zt~GNI7RA|OYZ4w)P&ek@HFI>GU_jm)<XTFOT1@qJqZ*VH51kOPg)xh&H@;+@)^kKS
z)L!&|Y4@a-d~(51`S?qQ9nhzPbT5Kx=8#aZjpQ<^6aZDNK$FaK$O_`{(zt402D(O+
zxfnJ|G`Mk|2e@GybB|Y>QE28QEjN(m=!ii@24Ro}gb;&opE%HE9x$;h@Zc-fk!Wl`
zDAU2ARw+OmZRm@I>gT*vkqmLdGo!cqg1ZmZBtOEkC2431I0-I>3mu*moPq7F6tGQr
zl9>?PikQcrj#F?H4P_QsX!mUc1{R!88zn<rLm3ngYVXo)CWS1Vnno&hK2`KBpOVdS
z1{?8ZdlQsPH>VQufr}+}w-EUI*)~n-JnmPDilQlH+f_7_hhklc-)sFY-u-j|vw;W8
z7Q)|RtB&3P6*yePkd?Vz5Ong9(QrjztKkiLEcbR4kI^{;t<(xZly~ncjYO($nDk^Y
zbF`1|MF?upDm{4p3;G@Mf5ZA;d5|8p9nf1S;3}@Tm=%`k$?j6Eos<EYsP%_7q;pUN
z&+nHF5GV8lD!?b|mq-y95ni3>fTfl0GD2{Cx8&MkAB21@?aSEIhn8XSf)6+xo-C#w
z;i}4|Ssm67kng|v=V(AbR_uB`;CRxEpG^=KYHb?B(f^jd1St=~KVg0RFIey_7R5k)
zgZmS{VJLul%wotuqgJb3wHx^ccl;NNRbKp;WyeXg8`B_KZW)lACkAHuYVL7rVv9m@
z;-aCpCutydKwG_OSVyi*#cv2M5HnV{KQ+sp_Hm2TW{J-7>{rfNlq?yyo<e1ojEsK2
z%<Ck31Ivh%VaN2tm*86G<i10^N0;tEL!5?vQ$xNtH$;(Ft!SZRAC}Q)d`%GDyQ!T_
z%|9P8h*|EyA_C`{?Qbmv;aJRV=RcmCAnVd^CRb^eLGb4|qme+xO%$lK&`J8<Ds0Fs
zOv0Mk%G5e+EPS3`6$_bq{>H+MIThu&SvCQ>2iK_ne)bRml+A*<06UG8kqey!Fu&+`
zpbQr}jP$YP$|}2zm`;Bb^W`3xo5s~j`nnm*;!{2gIp{6olAE&{<P{KtcPBp1`3hVW
zwG*I$_7W6Dnqt5axpn%k?GN){W|<*?pgQDfG3Coi*h4IE5$V_Uc+mV_@401Z>pBgl
zt@>1{y~4Q7f<o3rJhqwmd7(0EpiN{K>w4ttvdbUNfA!x3z5ccS<Y2084y_~|9pn6g
z7E%6dm$X;Yw@8AsNVz)|x(-wTiF=@OCQIw_;{F9?UT=HAh|M}DF2G09q-g%*?5`8_
zN7EXI0f-KxH~bM?ib*P61e*cx?fhOAmL>o*F9J@GXZcqQ#(m2k&V3_aa~CTF7}&wo
zP>h(i<)IE*0PWuyZjkqlZl3Hsw+QRMNSVfzA(Kq!{|9k0=T0AH;E35vY|1<^Wj13-
z0)a6sbc^|LcFJ|*U<4YGsKgLEXfsLpHZ=P3G2vdyGGGco+%h|TTOFQSXL~{x#^Qwz
z4y|?7R-)+#PQB3!I+nNTTeixSAe^1ZbPk*6q^o4r-X65&8g60n3Ka7Fm~fJs;eJyg
z{ao}t!~><Y>1~*ZT<<s02kkfXI$tzOA@`EadmTJd23WC_m7D@l9vz0t{&^GpPq=~J
zvoDc=ifuQ_w<1kfW_fD1A2i9FIQW8<f4_M{_pu-@KX1xOpf6;L$TSqEr>w{_UdOiN
zG%{$v+gcld;+jx|oJA^CO`)xRTES!(=q_Qy2#||+6E}}L@}C>0j=%W!oJ4^@av47m
z1iyT@oxJ!uqZ;&S5F)D9KbOq$Jc*+<-=Egq^%N2FK-&w?5WTv+AYhTG2GzF|_KS1C
zY6!oj{8PKWEeflizOX4ZZ3UhOUcyp!(TLti&S`O2=*7<yvt1GbBR@$c1?lM6wvpTK
z!Qs5DT9QR~7BQ4_#U}|boDNh@#SK@6c4185a#*McE|M_80Xb|Rw9F7-Kw%Vhu3dI>
z0gM#0m==)#tkf{8B91+r!`}#p5s%=VYIsq?Qa_2r%P*cKZ)k)t4UiT5J17vUG1Z*O
zVQSxkj|O^*i%VIy9<(p01DEcy926~LAcQYm5Jm!D=fIJn-5lATo+*i{tN^f|QkNwD
z2?KNN1F%<zBCiaRRM(cD7FQuonS&?4FXZ+q=)U632JV%nE=xuvQ2jtMeY8x6APeLD
z?72W3JV!axOnv1K)D^aa0k6+GTqJ8PW9?x#fcItI<>xzMTn^mMh?ikQY0pb_8iBb(
zOxr#hOmk4<{L>e_%RU(WVZa~-ulevBxqO55XUf>vcHza_VcDTq7v;n=@XDQOYCL>C
z925#R4S!y(1vdBbo+ck+lDTTk(nQs_+;h=${sw07^_F*+#R3Rq0iiAVSDw)030Wi(
zrpM|2?NpL?Jjf;X^zOP%4yO%RC&`5iW!W`~4^+`zkp0_B{x%9v`bP62rdCu*_U29_
zsCm?p6SDwKXU##^_Q>QH_fWB;;w>jVPbR(^ua;}FxcjbG7Y2{dKrr{M)Z4QyCc$L}
zzMgT(>RbLEh{JBS5uDZgG;`Q+|90G$=WZKzP$ewF<IO|%Ho;@KV2BScW8A&MtK43z
zYJu=1P;bg%&FC}j4D-Gh0ng0r0^cH<+}?)0IveqIU_zg9TYYeMq-_3E=&bUb7jcgA
z{^L`s;#5k10wDVhz)HTE^U?6#@r}d4A;RZI0O5j|UrA#LNYnA9KnX`b+PY9&4YE@;
z<)6dfUU`VYy|;&I`oKe<BQ@mU%RcHBWTEouu)fjB*Rg0-c5y@N9r_ktpc-z*s_eg3
zRYtpwiLY)rvs{fJaBpRlb@vV9#XR|sweAHQ7kP##JBFKqPw|ax037jG$iy%;2~UZ3
z32O8CA`+{_Y?m)AILf7(7JxagsA3ZRkV%?e8efkRaY2l!kfC57-V)Rns)AunqS+c`
zzRu{NIyRFiE*(EEI?XQ_{kVB2=q408l-wTzj^IImz|%Aw8Q6M@$Wdb0DR1>Xoz#Bg
zGp-KU$n5K7;!;mtFFdK(pMi6oM{UGKO`o&NMY+)FmT&IHFz&A~IidJOAWzQtv@3yt
zBC7BR5(88sZ%jd3*?;Dhx)*T~H8DG!Z$oD$sTG~Q93)rP<xfy!-B=?RY|r*@A%raj
z(KaeeD#a~AnT@?xAz0VwrA{~EFs|C1x_{jFa;ckOwGTle@DwkSy6q*}>sMMI@|arW
zxbNeddjc+9aKD>9X<XgH=cX;l->c{{OCdN{@ef<#wn;q!w0u%**%a-@wr^a^!uwpU
z&!Mo^j6QuoK2UumRZ-{*;#+sVwh=f#eZ-B^#};b#OQ95wW4@wUQ?8Fc(9%J;Vg#X7
zKaTlKSF(&e5h-n3U-}jSTZ}*;CYVo#AQ~jmp$0XzjP%Fxf}FxYGUrNh{0fGXx*B)H
zop!<N`8_PBCx@89tpd_;0<^c$9VqV14`%Bcszss9I)jnll9`zZ&RJkKqgai%OpWM<
zD{UhkfFA5t6mMK~<gq(4D@@*g9ybdQu(v$IKy_iY@yYNrn$c)m=?lGwq7PYLRhPis
ziLC#?Fqg#I_8?|`Y-T15;p7>h8d?ukW0)A#Tl9^7?sQk`^^4~wZ(fUbwZeerPP)%D
zObR9>h?HJzZvCZW0)@ETJZgOKIy?LQpW8qR?9O!X&|G&lfHRG~Z%&^{LEzOytLaUB
z<Bv;^4h2qbAi*!|8JKf0S3srH+N%lC=>i#^w5#PxjYx)}BXEe=3kpcxLG@Qrcw&HD
zOCVm&IV+f%g8y*V!aZLO6{6d2;(>jT;*o4db@8q@zw-$w24X#1w67+rhMvbkPm6^u
zA7OLgwvjySOQDBAhp-LC5$ZRAHPB^keZ9@ni`3<UIM;?-a$v)mEZzs^_}C^}d22d6
z#RhkR4UjR)=ISOhm#)46J6q*R@%LYM<AbIj?{G&V*I=d{Z`?5}8?hF3(P+D<y#4nP
z86m4fl?<m9spztt`gdb$wda`G^y%jx#Xn=8;Y%t$hOp(wS1Tp{UxKhVV^eE_e>9SH
z=P9M}EuilGC84k=2IjyDMnfpd5vYu{go_CT<k0i1<^kg}5<J$H?uEU!^q>{$%4Ze2
zOl*V^kZ^OkCPe0wIof4_5QEF)WE{1D>3zo;5o{crIoQErSaKD}JoC0=b8T>_+sG)v
z=ULdf+1u4t?{cm{WYAkLVri1XS{CgC7+BjZz9%bpFj98Nze7>el_7_HhD=&94t+gv
z3}ca5!bObG*6sgHW}`=9x4omwKwxvhb=zIulQTI7<8?=s*G^jpcYcHVE+rfI;=!Pi
zhama+d&5S*$4<X|;tw&MrChTE{e!=4^MI6&pMZNdqBSk8Acsxah-&ll(1c4cr8pnr
zozIVt{Eha-f&s=mY+`z~RI)1vSNAl&W`wf=e|(BX4aMt>4NujEO=cL!Cg{u3zwRwG
zpc#&fS?aIMozP)0_!Sw(xipF8GMsb42gScy;yFn2krmpRt6f1so4D*lK{yy2o$Wre
z+{4+eMK>ZZ0>DcF0{99v9jm|SlBW#9@|1}7Q-CS7fwbg)-(i>8Ys$A0V-my_t+$8f
zIzUGGp2ffra3IAuw%g89^`qq&^71?M5+@>qwca%xX4a|GG+zfEsNy&CdPB3cKt%%!
zbT~x`93(*&@95cQ5YlT`h%?~K>~?L$a=F`-!D+W}G*=VBDp&}KxduseLTDdlMw>n9
zmGQ8<q$_TjAtHlMYOo{3y%#ZZwJ!z?RJ#(_x0hMsDM(y8n>Ap?zNu(BWZmd74_aEp
znK1j_%_FD>g_~>P?AE5-2dUP#cg8dF(BLYIq*kL)h^BG&i5;fRgi)npQ^)08ZitD@
ziGYG&ga@HG&pq6-pOp4w)7=dKTTztR7RCMx@{pi8(q6}#>|urT1qWb1w=nELz(NDa
z@V@mD{x%eI7h;PM{*<P5n?O54T`MIa6_5-T-ZCO2zD7?xSF;?1d*+l8vuH1Ehe1^X
zB&6g#ISM>y$=>5DA!CDx7y}fK{G{tS{%d{(?_W}WDGo@PL68FZ`8=37L#8d$72*54
zq6#|KCsSx~s{g^bxivkZk3Xf~b0L&;)F~nZZc$1KaRB^O>XiS=4)KEr4)9suA3%lt
z#_OHQ)q|wx90N;NRRMp}N7-vED%kV5mjD=DHa0ydo$YQRjs-nl>W!pdZYiLNwzle*
zlM_fG(GQ%jmekIVgEtc66Z`z*!bQ|@pBr@MZ>A=}aVz?JOeeJ}zCsi>qqvQSxWaqo
z_824(GWcl^4<C43VO3TR)((i3-#hL3acqX>SZy0GX%7ho^Igq_^lWuZ-;N|d3NX=t
zXRN5;{xAe$5Pt~Lcr>Lz>583&7$ls%*>w<27(Z9CALjq9d9(oG?}VW7C3FvWz6!kI
zAPh*$U}(ZxMx)i+n$d~!MCZaAjLbp^LtsZ(&Nr|#uVNi($NfrGl!Q%;nXysfMAfaN
zooXTKqlDX<|G)?qvs8MjiB=Lb%U+;y^0s4#g49K{nzY{`jRKlU(Lh=sS)>s}`Nslh
z^aEXngOmj|#8BR>%bjmEh~Iqr<5g-I4eB6G17Y~uNCk%k=BcC~6B0KLG6WcC+zTsh
zREXCb@Z7!qHkc6S=NC3(yvr?BhemTAUA@p(f(4{1lHpmi({*R8DkXJyLY(Zka;lLS
zL}3a9-qOMm!X#%qsV-^y+Y7Ju9<xByzoG@nfGsa(a^yivMo((5eH4K%jE6AkC@FVh
z5su`&FdIQV6uwwDbSt;EU(iFD?QR{V;k3lV?+m&*<Sk*?b!~6&VUC^bK3#LU7MR0w
zeA(5fcvBX_oJ#MIhz4jQ_n(RL4<we^5iw=Fn+mwFH0ZY~tsN*}Qb>&1Bx-LxzIhm`
z|1IvYr;eTG0i{;j&n@%>nbVhau>4PQztFeT+m>b_7@{fNBQxqC6}E<)hBQAeRFFBe
zBqK=yv}D_gQn_w-tFFA?=wW@@tsGacRS32c6HPdmH*kC=w=sGVNou~Qqyn!u=$uO~
ziQ6VQ8^4@cQw7ldGXN8N-F6zOizTi*K)dlRLb(2OiB}O>ka}SBA~Vh~)fx6~<07A^
zBWdWgr2+ZW(he(0ND!jLvpJ(Rvdjm6w2<`JaUO={BL$YX`!Pvk8LU1l<3E{C`(6Ah
zdz{qJbU5Q=pVjZ8YL9SDgVnr}NTbV#gE==j-sA@sz_j2ek8y8bNWkS_qm^xJFCnAr
z1Amv%Y#d4x*7%RWM8dk``?gTt)i_!-N`5Po#DAu@X2;mU5NAaK@+*3-WCaU}koX80
zFki+zGXd+oPw7k$M^<9X$6r8uh6z<U1A{Sv9aDWihvngX+UnlblO#Wc*D^hX@W>|M
z>mfLBLR}ox3ps4rcvh-C;b@4$`(khru@w*V6iK)}?o?Q?nbFLOpXa09RWt=5s<TMM
z4<@O$bG#Hl^(t?Ggq$oY70GaPuCF`PgmV|TTC2&%NEr}yuv>xe0}qp>=oC7S%g@2`
zOWwy*_7^h~q+9TX-7KpNQm0LO^)#OTE2?VTrE{XzLRD6Cja4_6OSi<1BwZW7vun_M
z^-so$bjp>|d9D;_IMyEgw*y%KcL<xKOtp3zx<GUk*FcPo7?tct$b1{!i`e{|4NJ21
zW^4!P2mF`k_~PLcJ+P%6u}zaWz|ImFNj|gypM#l!zSz44UT$E@V;Zx^hD1#xWf+Z_
z_2HQKgz5%{UZslEH+NA{M(YfUdK{c0Gg+$BL7C9ef<Rmq@Zzat2TstKI(EEz<xP2K
zTjKj@ahoXleSj975w|O`&lB?)VP(?MiHj-UDiMEGGU&pzvzc|T0tF~Hb-+74t$J-G
zr3awF$`W=wpf0&0URQPaE2$Smx9hbmvdf8&o_#pavRkLRK~13r*T(fio<|u~Pk^ED
z>^v7joy0bCc8jPkA{C~lT8Edi<QrSGvCO77kgmR>*VloY3WsUohg_@VN+CkF8UaEG
zdTe||wP#)pHQ-N7NP*IOW7x}9gg|@oRn1GY|CloiVbpG@&u83EnlGf@TALXmp_usg
z27n=ktP3x|O|Eu&EsAd{)5-xe>N!e}t#NWV5zm$a=g+_y@EeDOH<mX|!nX(RPNz@W
zR*(yCiBL6FEN7E~mzx!|tJ>k*gAZ{LVYCQHq{crsD|sGu^B5h5d8^*LIQDN2fA~*f
z5=pD3PP6nY$(&&pVN&YB2N;AQdY;E~J8g%HYv$DF&*aLH3{EwxIs7uRD=PWUJYdXr
z(tBO91hKQ+XOE-FH(VE1v;`)$pIKS^bLm9xxtkoTMNyqRLUF%lTAyf!9EFPYIm4iV
z4hBk7g+*dYP8gtx?i&3XmXv$w!;C<PV9tD>&hfY(k?Nu(G-T4c=73^){q4~tvl{QB
zOT4E*NsDh+2i@M5jg<l!0@CDBP8`=s^pR0#B|8FQ4_<^wUEj~`%OGCwc}XxAS{W%W
z_VhJ*{yEe6;gEvjdR&5C=xZG}q70CAc8H!t|K=NF&ccgm*C|)6>%^TWYbP66=Vqlm
zlx9>zbzRi!FvX@G007HbPyp>|f{TdvWhJ;t{3U^yxEKiQV@O571;u**<W-jyoRN)>
z$3I$0DG-!pu|uWB{C9-05l33wZKt)F39xxtKbchhI(VQ60i?2c-Hi4;G!2TI#iZJb
zsAhl%e`)5ghz-z#AJwtpj>H%ONVgN0m|EBt2CwJR^Yp$>93u9bAI)W!EZ-}Cc`>Ui
z76)zjNsRzid1b;{B&P&gX(4iyaXUd;ikUYiv*&7a`9YDYI>h#`VwcM-3BYV0rf|hf
z2Drh3MN*!g8ise-hg5I%$;CO+iOuJo7gB8bY6)7Xtj1ChjelTFgpmgXofN2BSQ)WF
zwonLH^tWDi`6hPzawTQODH%qrdkP(;C;YDh5W%AF+3}FDmf~fxb6-HQN=eZ6!Y>Mr
zafr{MFJF|(#3_Q_xz+(pG`V(ueMS*hrtPL@CAk@rd54@(6B%dsOq2KH8MM<{)iWd!
zx}5)@E~x|#fwQd~T{+IV6b6jR1+q?H%HEHbw1R|X5wne@Jivv8y+d10y4VF#lea03
z0AgeApcGYyFfE^Z*Cl}M<g7|~7J6&|4?qdT<-lwlLu43G=qTOVIsqi!W}wKm;)kPA
zc{s?4dfD^s=p?PGKE^KxrFb8IVXwq|`&(w11c~ZP+yQlv7#8W0Yf|^|`d+e%FwQa9
z3#8j%R&L^AZ<K0;S+&Qw+pC;)wmhBnKy4#QY{56eReN_DAo^3nLOMs%hHwJYd++%D
zDU;Tk!Oz1usef<By@`u6x7mKq^3(?}?=uG~*Qvskz_4<g_6j01W2^3y&+cNh$}~us
z(qmAs23d`UIdA~Yn{b>e376nG<v4V3q_u6#0-L#R=EC91DEY|fcY(uHu!=05IH;Om
zAoLXxLwIJbige`V9fjz3c1gbF78;;zm6&?WPGU|@rBH+;X&O*cNTKFbm%=eVS36V(
z;g&;QmE?gK*;t!R7TsR{S-2qZBG0s^X9V1Hb&rfeTOO~|^lpmR53&}Nj8;H<Rqc=g
zBD3V}e!+C7w;IH>_lI2)Ylfr~@{5cq+fNhkZ#U${)#kon2yW!Kpv2n^)0k(?X8{1g
zn<8jSGl-qo$v0pPdPs_AKL@dU`#xtM#UmLPS4RF}`E9+{YF{Wn;0II^s|9|H7LhQH
zh{ik0urMdGR<D#ot8Ri}qw)53$tA^u&pL{uLE9;j5DhtKp+DB&2oI*)w1lKCko?Ad
zNQ)!iCKqWZGscvchd5}})3Iq+!GeD8mJPj5_zJh!4{v!c<Ll<E2Q{ik7)Y&n|6iS^
zfKOP~JUI}G>Y6?PVim9uVQ#V;i`Oeg?Sk|y?wG5<xs+X9S!?Brlxs!Hs#&5+1+tfc
zh!?gd-9p_&%Cg}~DnD2A3-S<bLtBVRU>PcXUQr5K^CEmU=YHh?D2+4NfYHyZB#MG*
z?xGf@)BZ3{p$BtAh<ZO%=SC<i?h$EWUBZ00GRL{ar(qbz>kCfjBd_6TM&<-tiN6jP
zPV?BxBOpr^4Vm*+f%wv?XHa;L1!Sp~as{+M*#+D**t^O@U_C_$M471p+Z4%$FlEbB
z;)+4Hf>9lTN4bW?O$iY7NF1n=SCCTJTBCIZGL{54DPA`WvMoS(+#P&y=yo}d-!JZ{
zoxqXrjQKp{H3&L&1IVqxIB9`&#4>%>_WEzD^dbwZ{x8!K5X+O5pu;fN+khY5i!540
zWz5E#FL0FXv-qi3{0FBL&sn5rK#Y|7Nitk&%sA$sC9R?tU)u%lnXM2(Mcx|BJGw{*
zq{SgLKIt05`f+sKVDCvc=LphX?Z>g?$on5P7W0bm9cFGQBC7QW-&v$|l)Co&{4*e~
z)+tM4Xv9$lB}>C5LgKAD#T35hslw0fIjy*F^js}%8TZcVxz}i#0`O3=XhY)k3eifY
zp)ltO0@tb{#f#AJQtOdq<r*TE7Y%>h26%<5*8oz1EY8sd$V8d`)e`vHbgXCEVguP@
zM2hgtsFWw<(lgDN|7WMe3vGscK`pK#bvTCq%iT2OD6mpFsJ5mjecRrE59J<lRT_c{
z7&YZ4;T0YgCQ)`gX}}7ycijb643kDqkU=6vUTr4;RQagou{d#A_%hwex(p+i6juvv
zS=3}py6Y<)jp_}y96L6<uI)XFzv`Ia7Lk}c?L-G$On1|=8UX*?g#$akS{sVQxmNQ5
zxcea*7Z&_s(O%Uwn%RZu$E)sRPW)*--KQ}6V{7_zT(4&+R@!Av&e9<Pei=28MD9>F
zX1?Tq@VcbIECaMorP<X}=VRDonRY8Far53Of#5I{`L6Wm>uMpPdSlj6o0fmVJoIj$
zB}NOtxRQV4UW(k8ssJ5D-y|_ewZ00e>V;@v2g{Fb<FBWm_)DYK9jn4CgAV$?=3?!V
znzDW5meBb7{O(t8tk@t>!@+!?{WA6a&Bw8<y9E6!O3_A6?xH|U%Ce#G;<H>+6PuZ{
zrYz&+ahSYUabFZ`r9=x76pze9$NG$^;(e#k5+F!9963Y<>k-4X&ctyx>TGFPW{B|p
zgjoEjO%-7$vh;BcT~{{s7y4)hmbCdxco~RVT6Zm3uJ~8ftxX=#*dbA5Gyf!OqK4qM
zVW3AOci2-{YeEZ%%j<Dz_>hdFdwITG$$8S-dt(mGm+}xm=(oN|AU2F?OGacJ5xnd-
zto<0*t?s*Vp*DGl(cuZiAOs^(W4U6ie0sM|)<^kZ9?q#}0!NtaI#*ES93~Mi#n5ur
z(9#?@?F1kS2`L`ff3UBXO>M--5?2Wlgw!V5CrsHv7}Z1ZTNw`hF?E+WG;6`dj7U}@
z{-5?Px$_}yk2B}T)r7p`LoODJY}XsLx@ey0bM6B+6wBZIi=508pX9$x>Jcx@m}{|C
z60_Plp`eoGYrpt~^&>`nfTrzZ-I%5kp4sXRd_8}Nw{>p}4dO(?Y=3Hn7iSud*g2gS
zR+R2<RlOLq4(I&WY6vR$`RpKASSlGwNWj~Vw7>vbD3nrwBe($u`}0P?X*(T0XD)%K
zqIm(ke-K_E!pU+uO(8CaCksa?EHqV}OVU_0;)_vF-v;hcQ=GlIkBoxogI^&<EchSr
z_jQ{ejwrfB6%t7rtIIJb%HUE!cW?u}-jt6!rGwfTlkt2LSy~OgP#FE#XFaEKZX?%4
z*X0tCPmza5f${0g3*L|}4Ah_tavh7rJHx<SjvYr2NMeD4Gj)9SSFDJgOD=JRMd}g8
zDws#B{K+9;9l&tHzQ~^^r+?z>`>{xjm_`u!8ZAAQFu2tzCXz-Kf0%s^KFf+Va!$ST
zS6Y5%fH0-L8MFKkwom{LxnYkrM(xOd8aSh$*6IwFl+<nFJpF=X=v}($x}YUdziDwC
z5g0q5ta2c&&JP%9gfcw)fo%h#s2@elIS`P45jYD<#8b-;2l;^xoj@G8HAi_0RCkO0
zt<DEzjeuF`u&n0`V8H-Flam~juzk$`-SBlS9!i0Bq=nmAE|RNd!c>8rX)Al>zz5Dt
zdjif>Hl4xR!zJIbWHQD^WGAJjJRbnT6?PyvL^v0EWKjm!#vakjToEyI3$;PCP`k8W
zi=S_-cSJplV$!*U?YG=dt;5<=zTAM5%772^0Zv0M!i8R0c0Ab$Hu&R56>JwQBcT<`
z5;DM^Ju1V7Z?nSc)@Qme*2+E3J8^X%cI!ZUIaQ1_uC8(N>o)t1@pG!hzU)c!-_+D`
zoYA79SSs6o2$ie$G$e`zz&WK>4ddvs5Lsg5+I~)6S={$0_862qHv?f{<+}Gh%XkMV
zlNMy*$ufsMJ0OaCVLDoNg=4_apM>duJqZKaQB~s+4Y!&ML>YbmEq|`EdIfTN9Nr!1
z<{T;7`v^CQ-|0qJiefg<m|9Y)-{~drz>tAx_6MVaB5vB%y}aQ<SnGSd>Wq%<XcMo~
zousn;h(!P{y;S`(wi*Cz&A9BfINsuHoqr#^8k-o`)~2JxL$(By+O1-ph;O5&?Uv#1
ztu3=QN*QilYdyqF!3{%$;R<$<swD^%Z2P=AB#>_VC-gYQvh0qumlKE~q&EDRdDs2N
z7+@>`kSyud^$Uqf#kTVqpNArjA^qF6CQ`e?se$4PSm$cgW(fv2EAn4|*tgBhROH$#
z8nN=SjS`D^t|w4Kc@ok&Il|7}3V}I{s=I#BQ$7xln%nCWz&CyI%xlRXAZ_75_+$v<
z!%k)gaU|$!b$PA);7|9e55n#bO3JV1`^70;Pf>07x)Zb1HybPms>1!2mt`(oKTa3v
zd8KF;h<<WNehKT6`sMG#NMo%32;fpcZmUCBQO$FOPH&-SGqYp$`&aZ!LbTe6vHH;g
z(wu+W)k7Eio72<ZbOC^F)moqajA9$UV_JONo2F++jk-t2f?!1_mbsil!=hQYa4RAz
zwjv1FRySUJfy$R~sG44IU~0aW6rsFK%?5P+3)yCi-x`sN?l*yhw{*4<lrholFen;Q
zi&hO-yf~hhj7=f-gcl$#>cDc}-*!Dz1uTM>RbgG7I4=?$HGTznd<EB#oc2x{SxY8W
z`X+4-6y6z#`uzyicJL_q3>(7ppl-${b^;k`w`e`9A%Gc3@yz&P!ilnjK~AMwjDXap
z#m!~6c9EFyJ1sV_?PL|2T|+v~xIh`zDf>fzWHe;z!?Hf~NKOFk9s;IJ`EG>B_rln{
zql3#WD{xhuqAOmsc4}m;4;zmlmT)SilZ%l2=Hm-;WAJh3x;r&n6Y}o_YL91_iRXh%
zup29@Q{-!yxl}VLl6XJ}BPv@78w*+Midr|5t45_+tozsTwOt5GC^K#=Wtz!=a`j1*
zI`FDLw64ODWr#FxvI?kbqpPZekx(G3!WxBg^Mk78kR5RNgLUQZ&ryOUG(9j5%KcD8
zO13vt52E|DsN`XiIXxkwe<q&^;yNSECA3$n7@hm1S6zB?NjozEQhXM4V{wxB`-R5)
zh#wm}&iwlX!|Z?qW1U27z@Xi^brJi<X#bxrq8}54QHAsjZ~`rl{YBUl9VqDhPA8DV
z+Y5A+nb<OK2LjSY%?NH53SfMdhEJ)k++O2?m%0KM;R4#P$1i?u4HSH~Kb(o_sS*3<
zM$N2#AU#4!O#1<$t{X<l%ehc$%_#~O!CL(1-%v}Gb?QUQ{LmXL+kX(C7d@JCpPgpq
zHb#j8s32xXyF_1^aIJG~m7d5xo5jF#cQLYP7`&2b=|^W`zu=P|%-^huJloxM0H_(x
zup~gf47!FHaX4Wni~$hj;?E-K4e}*bpzP`M>4w-0?sLN-yF#5O0z!c5FDzU`+y2CP
z=4yJ+^pBspjn+z|zx#sKOT^X$*v8GM+&z}7G(?@+d41YnTfZ&8DxoVN-x=n!C0iZ8
zGt*z2%V`Adv9J36PM%%m-d?8-b|rkpACyg$ioT_V?}cvwOaQ71Zh&>=15qP<?wKhO
z4Kr}A0^g$}->--Q2QngMDr#}etwFVaS`+nwEF|Pf#;%O!D_LL`ilLg4L9b`A%dUm8
zHp5;^JsAc&bt3~j45z4pB%8%&wTUK|`72kcM+V8P3IfT2+k)`x?RRd4Cy#Nc=_G+}
zs{-udeR)HS4@dmcS{l~aKIgP-m*uWO?H{#zo2q>0|F9H1{Xy=*_cYx@m){&uVYZP@
zPFVUdxqUBN$e<Msx~3sGJILOhvC8(Cd|x)ltI3TG++TEWaV6(BBtpQkX{3t0#A!Rd
z>E?!tc0R=SZMYZ|3fdaY*&VC=VGJZJbOCpv<mBFLniVQ9R+E`sD;`O+Oz$w=P@gM6
z+l~__R6d+e3j@hx3h1gv%XSsnucj>0g7&hhHFp8Ps%xvndIYK+<$Nm6(y8cN0V95=
zY1Ty&mt0=W9*SW@#?Ja&h~BAogIhaXV3&6tJ?XaSXL(4`0a4$i6f8(HLk|3a^d!_f
z-lBn6e2theT^a9SmZOtz7L!1<J`$f`4v3|c!50|FXB@$mUFDAb`vx+X;AgUZYU3P6
zn!mR>Fg{|OtFicE;S?UoI9P+wm%0ug8T_^MhvI=K>um+zMmvHup0B@%giZve)v)25
zv_*d&%)s@<vD>s7gh19>!LH4kvmOw67v8UV_UTe$yB;=T9gWXZ;fM9B#CJl*+A~oe
zdY<YU!8@FSlg{#G2y<Y7=1|g3WvLFFr`Wcj*a(-SCWe#k3R5kYg@wU!#-x;5=xw3Q
z@vNy~+U}(7Q)QlJT2GCh<bB`M#3(_vY$YKw1XA+zTSogZgNkysC1hc{Dv5MLH5?FC
z+OI0}-s9(r{CMjq@Xr&4xbA2T=LF1a`1?qddSm>UQ!;P>@}p6e9i3T#t6EnoUM+-V
z#RUz7T5Cw4`tsXb^Z3l2k>5`NUTgJauGGB+$vk(}$~9>skoY3xl6@Cq?mI@<+Pm)z
zH&qEf(#Y>30#;C$aVv9=Dz=zH{^%0Zrd=%V_2=svvznk*W~{ZBwJiX5G-ovxn>WoI
z>kB{VMsh<Cc5`wWPQwcjQP@c!WZI+xh6y-|l|N~(^cL(pOw0wkQ6A0F2_-i2fMpRM
zKTkiA!5M&0`s7Fd@D$e$mMF-wUDjFwK(+mo_fwf4JyVjXRc%>!Ch>F3F^pDz;IBC^
zBx$n9ZD5f8I~^8~Pilo-a0?L~<3lsKCI@CS=~7f(brOQ#M{G<V_o~2qGHwzl4V(j^
z>u;#|(cb>>FKG^Lfk@<HbSZq(ua*T1Wj>g0^SyNYGb`6B?z>i_aUspJo-l*~Me(tP
z>icDnD&MtK4Njeq-*>Snu6{o@LSIU6#^aQsJ>?>tl8uioBk)2Hw;n;dMWY=F*F>Os
zC`ySezV*+ttqB`j<M$SNbC~>rQE9(fUgF5ZWSW!EYc8|7x(J3M!pF$pHY~9|9V<F;
zCpoNjbJ$J-j3}0n`<Ewn?!O6I-8PHri;=rS&zU8QkPbN|TQ=s*QWA4)bDdT`=R?vj
zUe@g!a+0#sq>NQQI0=v;G<8HFH@Kz`4FvhHYGZAvsJ~0kE~KXuFEInuc&6Z;59I{&
zfaFpirQx)1`PBoeMnuTHUv-=4QkF17$hvh~3HeE~uv2ZQu9LO65`4l%I8-u;Z!n}W
zPgF$qkn?MEK2|8p-clUdJ<2q1TB{@sWtQZp94+_YdEzi`fppReOc|h0fvUtZ?044%
z&1v<@sLftt#>mtUgx*$#QTYDEGGbB%29)wD`-O(JRugsKtAtUNt1<M_o~e|T&gR$H
zMKkC;Y?sDvec<(cu^EM?y@y;lsk_W4FbTZP%Vj64L*u-dCQl!*MEZcL8r3`CQ$d(S
zG%&N=!ykL`G2Lz86dJ_Dy>zpS5dj&wcTjiXBU^6p@^Td+2ml`}6eqjo1)bK*T7BdX
zUu_mW!2pAmgxV33f2I|OYfdhQUJ_0Ee@PeXfA6-nVvX74Vc0N#Nf}@*{b06L#S1X;
z9yS4s(Qn<$0z*ZO={%=?pkzSBoQWya?L=;e`}@QtLBz@q{Ys@T2gp5jC&kb*{O17e
zRK4)#$=)WTaRjKctBp55^qq6Rv7?g42r=bbO&OiC@^8Yr6hji%8G#6Z<RWB7sV{E%
zh_#~h+*1Y(?|6g<Be8*YVp*isE!8;Yzl%Pp4CYohh>iJ7>YWRMR%mDY)o-V6txT3w
z?g0R+Uzm^^UE@Z;sD$0fiL$A!LJ}!ZB>J|C8RUe(4`IrZ&yRk*&lbrHQoiZ1Zk|<Y
z>@xq6gA&YJ0*YZu4U$&}v!Rya5)eWywz$X&?HkeOScbR5VLi2;ZZ54YJn$&C^iS+Q
z4Xgqb+ZI^^MqFWNp~0P|Evo4J_Pzz#uFX_4oI0&A6#Gp(ym9cf5-0?Y12))I+vrY_
z_$yD2CIe>I3gKncj@;;a^NYJBX&+`~)y97BmK_;OJ|*Pqp3lqXJmech)-io+nCAjW
zFc(P)JV12p9QH_)h8-DDLtwDLDn=q7Lgd$&OJhVAO-#*Ym205^o_si289S*(RjwO)
z!=CgJ^qTw&sdKAaLkmabcGkVg83}SiZARIlVJX@)-$!SuXA{lTlxfpj<1fD>3%U^H
z^FpJQ5lo;%jsy((@+mltYGaQaG~ka9e?;Vv?Sp_^y9V1y6?U~KY#QYY9P=D>(=@MA
z#x4uATmd|}|0$Ib<2B!`nRm<TEfb{Wx`Lil1Cf34BC7{3hmN6|i%c%Uuq+@9eE|Tg
z0a`<L=*?(_chbBiYl1T+sJ-v+kg3sY`5}&<t%IgSb$xjID#Z%J&U|F`4+$;3;H(C%
zB_h~&ue}z(RhdArEams-`9*OP$b>%vHe_5oa1_FaKj(%Q8;O)=ky~8$;&=e)9SdE`
zXH`ZpE(ldz5S2(I@_0t}(?iS+Z_zmPEYTeX;&~rwG{mHiBRMMBP#%k9C0}EXg9^1S
zz;q6sIR(4f=mqr^Q=hFS75tHnvNTDK9AsD?A0P^H6F`ph`N+)AsM$BsFyd5dHF)c*
zSv&s^8WW-FN8+bX!q${Sxqa}>HKgfW?j7&TZV`fwHhK<oBtoZOmi9eO@>l1mBWEVa
z-ylq<m$C)nV3x(=H&8dgG8GMa4&ktU3P1g0bvg^BLF4tFizwyRS4)R^+q+<FpZC$5
z2eIjN$j@iQRPj{O2Mp7i+rljSMNemNqUOG5Pyg^?M>{`<UnF6}OK}nD+A^GU1q+|e
z#{GnqKz`9zhW$pFv>leqVL#=M;}(nTGsP>ScYH^5<W;l?0fsYq%#_;ZqBT~;ClCEB
zI=CnTlL+SmN}K-A_pz25m11-tjgpBYgtA!Cm?vNrG=Q2x4nGrI=(rmE=-gY7?2?}s
zv@jc#>8XAC?tETs!OuPP7<6*mi)4x237m*y2GcG02x*hFbUPFM+0TFNj15U`I2_fr
zNRJNzfaNZD5v(K3Oq$9fnEKen6+cltlHk$?|8QjNSS-<+irDO$_1D%v3Qtm^`x-00
z$#k;W+;2NA+-w{+DfhFoNBm=((Ig;J3IISP_))$D(qoiIrrA(ps%ZBj)5@vs2>>E2
zK9gY1-XfTggY!EisObgKu_bg5`^izMp<3VYzs{qUE9BvMQ~Kg1{&3SWX*ABbS(kAl
zxQdR)itHr&85CBo`<3NSP-94bEBA$!u9|e9OjI&O5Hb19tm%t=>^c(2v$DcK?CpFf
zEBvM_;HN(n8K<TwFul3uD@Lp=RmMCAt3ttJ)U|%2i;V4<#2Uip3zFU=b(;;wPUxxG
z`R=YR#d}kXcUirTIS#{iH0cE2A8$yDm3RL;nX;3Ym6bMD5l1h|3{zf`;p4)GPjipP
zOU`K5X~-L&eG#$~yudPn9IhrNU&)nY1L&4m{jrkcpKoFf5P~hH=U;u+N8|z4E|c-e
z0)H8H)*U4eSde}Z=MXDfl&87)eNT#Y+fFap8$1fPH5|!PeL-61g3CH<Hv?Fgb@Aq?
zixs2ou=E51$*FQ7-s{4NetW@4-BWigi9?tQmaJknSs<PEF2~ft)KD{MT1T8O!i`?J
zzuR1ncs=)Exxs?IX>`P$M<dDB!W)r`hqLhsn(<hmcMtuE5Dn!_WUsf(=lXbpY$xRx
zWX001nbX=808*tI*Cth&=A4I^8zAj7h^bgIRN_GwMiR7&w_>z&<}|At4;9VI$`Bj$
zx&AhP`9R1Xx67G?oEMUv>9%kWNi+y>bGmZs4m?-316Ok*W$Ofw9~<s!!<VMSQt(Sg
z$ttl;d`LG6|JES^_h;ON|Gxvtt8onH?sH^aB!|tLri0$kf{&Kk$MAyE=%ojK^kwMU
zz$go!rW-Mt@<Z>WI8=g;Vj@##nF-E1rs#=YlvN;dj^Vq9W7rN@Une8*>I&y9;-Ay%
z?5y&-mT%307(jsJ!b19^Nx07Z>3+Iy94}9%_t;xQW?=2*c@Pvo4cy<Nc^wjtI&yva
zR$j33!>V64&HtH?zR_TmhhQ0@I(xN&AR!LBe~hrw9!@Ba<l&vhF@eadFuj@0RQNj{
z4F$16KWPWt{(R`ZyRS-+0bixIjXC6LT9Q1n9<S?LHCDrZWmUXt)c1zxqx+-I$!%jV
z&%oEKddoI<E}%DkmGgHw@Uj5Jfusd)4Rv3%td{=YkQMS;iu`I=Wo-R8i|U`A1ogf!
zI=5d6r1bupDU6XU@p`1J9$wPoup3=Xe0qR8{KEe0h5N-ra$rbGT7gpvJ*m&_#)*mH
zlbb57v<WSo*@@Q1n4NETRIgS&`i#bQ6aUUr$Ea`9FH(JlE_2ZJ59TV;_Y?^c(S4FR
z`&$a8!Lj(=3$Jj@;I+D+^2(qdhIO7Nyn|J0rFyXco8Nkfv%G0crjt9~=gQlmu`Y*M
zF*NBemEooL>R*+P#NxGhoWAn31#o#56)&XiSV|fq2da*%Npo0qZoAAxPHR7~A!v>b
zL$O!f9=?^xr}0^TFp`!14LP4P61tK2on@(qJLpWOh1?q91S{qp-l9xFcrAJdL^sgF
zn;{-<$#R3w`Z%z*oWLswn!auHYG2ls#QA3pbB$8@V5p98&(lI|>Newm8Xt9gncaD@
z(Li(80Ds3C6Yl?J)yXBN<UENSvHhq;5p=>g4To;qieA!gPY`$YGMuz|JYYn-NcvrN
zm~HfpC?TUOW^<Wk5nZ}|Ezm43SYLU*V7~8RG|!!`IZMtr>O3GTs$S}(BxBejG;qfi
z|F_-vYgVuk3C@Km5$n=^5Jnfc(GyfHENjpb_Z?vc;8b9XUN?oz0C-qFY_1^5vOXV0
zkI?6sN=TO)+RVaEzK5F&M>!TayI>PKK4@V`@7fumiuO}Sj9|j5alqdO6`LFy;fTNi
z9(BCUr>xn7Y?j0?V6Pp@(ku+JZzDV|WrtAeFfO-P?47Vg7e<rz5)GS)HQRd+KLv}C
z&QsN1$cR^-{4D;2ybB1a+2*YvSKjc#sv`adF0CCR1ZHMDL3NEJg)yrm>#v_?XI;tW
z1;I&3IG09oFMJc!TKJqp5i2t2N4tN7ky$X{m|j`&-23a%3ubPoJjihhVGA3TT!0k3
zUtVDL0QceL1xhY2^5x<w^ksX;luOehi+HBLF+vNHuy!K*FjH44AAeC5bJ2@jkjgQe
z9>?}5)*e~&$Bz3H<pl3TE1kfv-YIVDXGiqEzS5H`@sa8g?<Xrld%BnkGjV87ND17X
z_J<_OC$48OoDOTpoC8#mFwM97g|kNFxUBQAhQT0s8-_gmIhJDFVn5nzACy?81c3AO
z9a^NIf`R?A*OwiSy<(=ZXoRAun38N`%2lidTs@s|PZ%P|RJZKEF3+TDQgcX*Q@88@
ztk9HO{b(v^ofKa?VkaA^98#w+5_J~SQ8IDYae&30fG?^HtV@8&7M0fVRYCDxe}9u{
z#I|gX@uGE0`G66$`gB=8r!+|<!FQ28#zCpq$^oU-X0-Zn8V=?5J~PL`KZY?InuaAv
zGhO?xJcz3p1m5Wb?}AF}X-XN&Wo(g-)s`j*%o62^X5^pJPEFI?i~(=md3(^5zBWAm
z{-uEm#9$UF_fDcYCz_N?enB=0)RAtH$uLW~MH9DI3whR-RUCuWuEHdlO(lEM$%G81
zN~G5-;`DCSajI;U>+mXa`}PTb`LzJ>wb^2$9vk7Qg9}Aa2mn0K)#cxII`REkIW|n%
zW_*I(nD*v4-?5z8398?A-Yp*+U3=wjNbgr>Kxge|wYCtP7nf1fSAo7s-djO|G{b~m
z*6DOIE-pqC!zVl-tUK`0Nx~2l#9GiyPPRAf6Y3a!RQT0{-Gc8~MEwzdeg-@zq~z=m
zN1wUZe%}^0d<NhWXY>fATIeVDVxh``^1r=^+|LHYfsP4yWUM=lzO15R0+3Ds1-*Y(
zZjI5d#+c~dJVp9^$6q}OVvV>d9sR5q@?YA^vv|fMVZ{jXHcrVasM6yvj&=#dE7?jc
zMVF4=_b}YEfU#Ej(|(<~y0C4y?4YubWz8b}NI*O5U2y$bL2cf*T0I1Pr!<GV_!n!S
z-&gk;Pml7B>hwy&5l_MHy)8%YubwY8m{7_=-t~P;yb>BOHspTH%{QsY)aqini<DnM
zQ%q^^SS+y@zC5rnvy5fd_Cl-%ZgzHrw8f4Z1y(yDZ&GcAXDFT-wqv(0iVY`iml8_z
z;S@abq_kxd0`b9c^t}p$58}!92oKX%JDR=_L@fn8K*NuLnqEuk_k1pEMo!CI$q2Uz
zpZSIXuFzmN`Nt@D5J(<vF8Af1>$TZKfHZ0dcWTZhI4z9BBwn|#7OT6a$ENVczh@M*
z#v`+cZS9c^|FW%|Lp}-JO(=tu!O=V0cwaE4;e^0cTbH>3H)|=d$+JP+5@fH@zVYUi
zZ|jSok6Dgnd8R}N+6%<usvc(7v-)6zgfIv)GW_)KL6x<aI#{I$s}7OuXlw)l?0K2F
zUNbOk%C2(6dvmb29yOd|gbIlHKsH!in&+<po%`N<&oCG@zELx91Dq7>3-KRtI3mY_
z!iyC5_n(H}hz}Y8+?sxHE$NeHwMGX<J1a0`92gDT2|1WJb<b5L8_{4i%|FQX1N2dc
zk$<wa_|HjonsoIPZ~59FStPb4-sgpjhb;X+9x}7;qu#0<S2T#t8N<b)HPmkp0IrA0
zD2PhhhkiE%ERJPE(II;|O|8t&IdVrH<^~w<UQ;<X!?swFawT_2EF-AFo3}z7yKN**
z<XHsk`0q?t0Wkk<(@s9^rv|f`QFAho>UPMTKRzdc6Hxi6DK<C{0j6g^RJeiQFtutl
z4J5SCPKgR`m+U^#lBt+pHPhFlr2H%J$&P_`ATKeIzD!cY?v{2L&V^@Amr*T0v`bgr
zDyi0vr9C+@dstRl9{uDu*_@98Sptn03MN^cns}BwLv8M8Ef7%WHz}F`R?1#gFH?v2
z%Ol8IN`TgFDlU;q<b?h@rZbXna4<tP^!J{CoUI`Z<@1~k4zy^o8097q?8_>P?*N~e
zZ0t**uCu<W|GeUhB_-%6Js=2qooz9tetpEunb+MiQ@mpo<Ba1~=KSU9?IXjzeEpYK
z(IHr%2^-qZC3|@Cgl~Tb{8-DF4=Ihq@4%@XeuhReK8b9c5(oj9)H@S6_P-2j!grF|
zO=(pp(!3}mOoP4+Lub&E%wl<>WEJKU+~h}a!jq?x{xb`#eB*Dw_wGQr@Ai4RQNiI1
zQUv*>=|X^-G@%GLn(ivM+urnm7R+1IVhWf+?eUShE^!tK&pfETwYkA(Zs4kEWjj{!
zb&GojQPx7|)|p6v)@iS7@{$nwyjoN4f~--mtkVg5R$#0z%HelN<cQzv4rFE!GH6kQ
zgoMyDTA&@=SGeI=%+Am7%(>?t5Ht^wdEi(uVU_uJGE>}t6*AIRyM`0c^8PoH7a=Vr
zyoQTz+ioO+Uqv;>+ty`)@4$0cAJFi{qug;!r7x{qUeBT|<6IT6y8%RSzG6l7B^GXT
zq+e)6xBIB7)El0+ANH)3BD!5)@d*jfk?IvV!!1rUAUwQyQ|E{eR$vj}_tExI*bUk8
zp$BED5Yy<vq{k`B#vH>Nu0?4EXD4=S7oz;&Ben7=lmJ(x5*GkR9P#*MUIroNqb|=N
zk3~dSS<lduuiw~`7~KXamO=3=pJp;qPWdgs=dsqyF`G$bfTHL=7?hUx>#GayGF~Tv
z*tLzwxkDR9<%9*aNNB80p=X0r>XI&ZfMo0YTJ43a#elL1+YYa|VQ8Ze?d81Ki#B5u
zXR1O~eS0R_QI)=Xz=w$(X=poRlRhi1sDUBe2_&iK`nn_ZJlZ{YHhkw&+oqajU^8dY
zkFH1%j1(OVvswgrJHr5xCNv!SbEMAmGbmEP7zNz1_Pa6(H;4!<t=I1SrqLgg@Nw(o
z%O-fo-H%^6(sBv(|NXxf4$C90l8!gHwS_Dk?jja{ME%|Hy2(W|8R_;IyBwM_u}KLU
zI=b`UExM~6yw<+%{SD#6>pcT`1GB$Dm<RE^r2Rws8v68NsxbVR3u=#upA1QCrnAf}
z8HMeVS2PHrj<+u%jG(qt?IJ2Qk@2NTe(VO=SiVwp0X`3+X^+(LG-$I|5L>l$bnxM#
zw{ulwtAc^LFWZV5fLws9nZO{2#VZxkTY$5};^liNnLrHF6tlhdJlb-p+oVj}%78(M
z^XMCloLNmCIn?&76{ws9%}RZy0evP?FBT|5H=f)F^8}<0PR&MZEL#@2_KlES-kvhd
zUBep?u*W3!2-RJ?l}p}EpxzJ`atPNt%Z-U|wAx4b8&S3(Hs%lMeox)o*JIQUcL*N5
zBsPh55e<~LnK?dQ<rLY+4}LWl5X>IJ0OssI1ICdkuKZ#n1tf<{QzY5qMncseJ^UfE
zlo*)uLMBX$OjAny18<6F8Mp}O9aFi@3&OeyS7{h6rFC62QhP!sw&S{AYlpv)7vM#F
zwkRN_ttlX<%k=0=oq-+w;u&<viw&(Yjv`9?s)hyrU*`~>nrbjzjMVA0`Xo~+bT-%{
zNr73&3S9qBH)%@PXHw!;x!?cQW^uNA7vRBsfWK(*LK`M2j1@ttFrNH6!GeU4GUuRD
zqW}N;S=Jy~y#2Mgch=Ic2!PC@e4$^-A>wG);vRM-!B;cPHrrDiG+UQsk~S~(KM4)<
zlYK__WZ5)O3y$|VPMKKu@1y_^tr3^ow2O(p9%*>fa@*ArvG(K9Pq=~n<sWJzwnZE0
zM~Not7t5u8(&RC>A*{L@QQ&NKKK!O_d4bLgo5HRHd4V<z!bNJlBBnHFw&pG8%|b&v
z6*^oi6n28KlZmhh4&nk?eHztox|PR+vbpOb{l+%+)9+;i2!76P%GQ+*mL0nCSqC7c
z%ts$`1VoNvHwr`t5Y9-3Y3kIZ(e;b?v{{~`%$v*yz#C`NECt#hdH4$!nkoVgAS#y!
zk7QhO!?$f+gG-dEe<KrzjpvXN>Rkc24+k#`Fg^ozha=ZvfEK!vJYy^qq6&y`>*QLB
z#_jCh<m)>}YD77c36$zcjRqGAFPkw2(ee<)#5&%p%43=^APssI^uE`=W4^$;rCWI<
z?xeatiZ#jrBw;d!JwhKz_Vu$W_>vuFkxdI_jR?@ct8vuGs(5-q(R%qVv%BbbuV*K8
zFI)ZxbT}H3_*Fg>Mpc53w1g&S&!_x72YX{uiY|6r+~(72?RlzZ(e)D&^h*T~jOJpU
zWW5{|NoM~04Ty3)*+LItyuU2!6qR8C>X%Hkv&LN#1<yB$p1r7gx2+ToO>H*Zb3O-w
zYws!6vC{=n23S2XLb4S~1W<S+jsfsE#@!5u&Q=Wm+d8|1s#$kxz4~SXVZb%n%f<D=
z8ktED?|PWmg>_YeuOn9@&G`t997xI|Oc7oGw--hZtHBl)=9H?daIFm<dKcZ85MNQl
zYbK%!f`^CqI0H?-d<oUAE2v*sM2=-YFx2BbGrFT`Hw7RO^XHsh(L=S`|MhZsX~HT}
z^gLhdq}NPH`gtp>_HN!4(4<eKQWXnu4EG(cGg14{yyRp5X=<mnv)u4x`LjS%8Aq+Z
zB8%qnU-sbj98i_+>hVI{>Ve?3dZ`4BGs|H_qamm0<pH&^>*|-4NR$Tm4w4(<bvwWD
zSl-99l@XJ!FDi!ynF8W#k~hH5;2>G$4c)X8r$XgO%pZ)#1-3j6?YEE2*6|bMH9|9O
zscNsGghh3DcW)WecEvh^w6J8Be)};*->~{g@MI=Ly5g2TH-sN$`zf}hZFXsM7h7Sj
zWMwdDpY8>apQHTbbv(8}SaE8^nDY(m!i2qIeGB9TH{z(ArU!ATEQzfJCo?No9~N<V
zL%<%gW7@RjrHIedv<M<lu?fV^E9U}28XU$9-F>AvMHVlffJ-d|FJ`OuZ6Yrh!e6h#
z0$K8why81r+}3MbpHuV@s1&If(@mDpHej*U0hMzPfvP|ZVawY&tN*){DQvx4@c;Bo
z_<dv&FB2Y(_uyox;khwV1IenOGNpo3Ok#{+wi*_6Y9$N#dZn9^X=bD>6{P<^sGCEw
zy!%u764d7S(M|{ou$ucGiMhOdF-FH6=WQ$}S#w`<Y(NECsV#LTrm#l8M|k_8u3nlQ
z;Nlk|y{9<e0#hm1mppA$|IpBeah@phcLzQ%-0t>I)AQM(y7xf0ok)8x%K_(HirB>q
zLE*bb6otQC{^6k_=G|*rjl?5jdXAv2sGQOgJ3|8cB=pcZ7%V)rmQ7T*T`TcHid8_{
zq4KcWcqB}S%6C}kmL+RB%k|D;J}_kzz+Il|EoE?F?LYIp2C;Pq!p+j*mbVFcZbBnA
z4S;Ks`1?9gt3;)wH#o#f=IPL)hkRJ@(XRSQjQG^AtU({Sf&t8HdiF_Kp|B!q9>jxK
zI*(vRY5p#n>1Wc#-FM@-B+7<$iR0d&F<s5V+bcV90LpeRbwX>fSdkKGc0&1>SOKl3
z=s{u=xHN^8JY|!7+8vF$3NVH#lYab(Km#s(nbafyxoD6IQwt*KmdT2*r$62JK2QHx
zqGOrzZEEpB6Moq(%XN~pzx4OxIzhLTjxD<p8;QW>EQb|RzUj`a<5Wp<*6{EobomHF
z%E+tYbNnk-2vs<W#YJ26I)YQ~nlH-%=mC30&x~7ZXu2SZ74PXMT?q>@SAX69_9dHi
zApu2#gkuXal3(4lH&c+E0pGn12>w`*G)F?IqLG{jO=}0=mTs#1(*4VaR~GGUDG&WO
zHkuYdEXFksCq?vUbN)mqDv6JG!@4~&bzo@AQAmp=%|LjuBHO)U;V?hU^+58p0x8#S
z4|QUJJZ+!nzRr`vD@4wl9ym}p^?>HyjMG5`EDi{o?sl`Uj~zd<F_3zGl&3w$f>rCv
zfeVH!pYw2-1i4EsL=>Shto;|vdBrk}Y#~@QgYo8eqoO=vtaOE}t=Aru2nj~l=Z>02
zRCIsVm~9QJjU<Fi%kpVsAyMy8CpqPF<pk0+I-5ym_rijiruJv8YF~G+h?9>H^mMN`
z?j{A@qRSlQioCf_WyMaqvvB!v#)WcNvOaV{c+d!RL9m%TKtOiqr(A=!v~c$YnGlUT
zDd@%CEx*2Nv_3uv6Iv1cDRj{9e2zUPltVsRH+9c34X53Mv?D@))g9rnfn~oY=N&)8
zHcL7`r#cUzt54uvwS4snd%Y5%P|ZeVI|=;%`_W#jkA4N3L}@8tzMUSJQQ!>uT?~4k
zh~6~NXqMf){glo$>p&vN(utu4vB+#Cb}5WGABaXY=S!e%awqQW%0<sa7<9?ezUWtu
z{O=u+h)}hFqzDs;=CBrAtiHylFqnl;Q0CK690pQ||AWv1NPH{hG1_VgzP-^u&d*JK
zXHk_jm|s@s#5rYUAIA-OxtHFPgEO-B;u=Q@mK-Vv9AA4F7<Z1M`-F7D$FNu7j~e}9
z?@V^@xDULa>K0ci7j+6YcG1_B<Y2)Fec{$G{z5euCPr&md-{O4ZyRvVd<_yJZXrlX
zYB{`eMx=rZ%$?uO`AC%p^)nV+fVSvGrYP&xn<k3GE;Tau(NPGsfy%*-I_uA{ZP;fp
zl$m$~PEzX?h+19X+4?k-U*7u<vce*VhdxMKzjPBEva+g)&TwlLjFNW|6h7oQ?6^WC
z73N5(ETkk#XJ`hkke4Pk+e!p&;WV&C9@&KZVo9EE3MdXx*3MW$Dc)6K<`sXjD&!Ja
zX^u1qS5F_e%bEaapDU>G0f3tE!9fNQ@0N*rF!t2xR%ZCx;7C9)$vtHJNBt^?JHuZ%
z1P9y)tC&CCScslT8Av9q$oR+^gfaM)#D1Rh1enmA`^6ZgM1gdo5xCa)HbNkNtG#)7
znTW^!XJ4R(segtd2V5PzW;NSm3K%uXi-Uj$w$zLDm|Wgw$pO$p0>CXPM1KORQMCCH
zb3nVI^j+96xRTVqGdfX$wxa7kyJ6}H>aW4$#~$Zu&`YfegPJ(P_VE-rUvKI4B-k%5
za%IE)g$^N8C6=ctOYH7WK85+};gfZ%CiF436=DPlyJ#dyD>s-Clctzq5gYTb$4XYc
z<RGtSfcVc{eQ-O<Bx`xN7GP}?D~JjhywtDF${Vuy2Dry$PPLFyOmjne>W55(pb^Kt
z-a0Y>i0sllEa#j6bs|j2L5jttxm_w`6&B?hEJfAPrHbN^e5$oU)QxI_G-ilB1Z9dF
zaBu@W#~THEY<vaON?|#k=B`ZrVr#&dh6G_=o~KDKU&pa`!Dk!G^Tk-7bTOZQX|WZ*
zem6SH+@5~~j7?jEhJ9k?MWH8$O*B)Puv?<W8y?NtVY8fI(lCqQ{X?0137|Y6t=M4*
z{K}m^9U#T}b2ojeJUi&PFZobUk8R4k96BtMlIUM43#yk<$^cKJU2jwO@cw6Yfd4B4
z5p>F)a4QW!Deb9SY_al^2&IO}0SKWIgT_0gsbd@w+>1W|IWUj^ipG5BKDe27RZi&Y
zw9@U)<cHhvM1WGSw>nMF<&h<|g0?QvI`wMa;sl^{o0>5p%hX<5+;8}3W)xjNX3mi)
z_#oXQOvvadYn;C@d!-d82a*L+ypi=Z2jTZ2b@vNZFqsNQI6&^lVXexI5n6>DLC4>Y
zR(9CunMQHYeJ0t#(rs?!a#GjxUjaDk(_-q#&6=hBc)NFYEs2OrFty(7lv-+kVup;b
zNZHp7Mj1}BE(zfrWlU8+4yLF}Xhb!-sJEw=4|XB(TKf`i%9j(akmAsO_y$OFo;Z~T
zfEqofQZ=fU-mxJiY8QRw0KO~?knB@m7|{KAvvY06K$Hq-#9OjsFTx|9#!|?0wC*XM
zFFiR*HwF|2Dp}qKPH>0=nwTE}`k+uWSn7-<&}@7Ua90;Q1^CDuX0ET?eRTOwRp;hj
z$={`@mpwppe;bnS9x2~ks<^Q4PSw~mSMiXvjqtbaw#{M9!XION*0LLpJ<vMq1ypS~
znp4#%&womrimR#xvkt$bB#|tHgZAG+H7^!hFa_a47E=BV1&`m%WGO4n2a&hm9c&SL
z6$k}3VTmQ+Jy)oYQD%rQihWDWtgJuCs6UG?g@a?pG12_R0&r{UCmJi1w0NqLMy~Bl
z-M4r7QmQE)&Oa~K`N<nV^(zVweBf&wRi^-NjA5`>RGrw=dx4EBDI;Xo;p^p%Zg9h(
zC7y0!x9XKD6L8Z*m{+)#S+(a|WR(#PaN_bHVWFzV)JVq6&#aCJm8f~th_laJxQ!c$
z*FBe!3$cNFX?B5C>0$!I0&<b86-dGzk*$qeaPPcyyd#_Yqv&3;FZq*Z7z1u&TtCU>
zSFt=@4|1M5*e3GPtAX>d$tL&32B+}%g3mZ!$JCG(j(r|?HA5^&Yh7WX1OB>zQ@&OJ
zY(L<lBvtl{B59_ZKU|xLYCVr=0bZ?H5u87MCI)C6wifbeg|BkPLjK>0%Q;p~X#qzf
zAC+(J`tD>fJ3FB{dIW`83AX&tnr6T#uP#>}S*gcGpLmZe%+n^u)PYrmp^dd;`Qu|h
zOgOOq_NwdanW?8MjOU)gwc1x*_XbQ}Jl&pWhK!lmuwT21>*)n&583@}fm~V#Rhm|F
z(k8fR1y`iyVX~y0+-@BJ0_2Q$Mlr%@Z{EnbB?T#gbG<tcEw3et75;P%7ZfO{Kg;S6
z=APpk(~9rWBnk<^FT<faoy~6bd};@}vD&*T4jNCwBvv*lGV)yP7wJr&%Zq0p!x(Hg
zWIvayW;@Rni&4Sn!S`#jHZ?8f)!y#A-LVHS%E1|5Qm}fKsfy)SDB3(E_+gt~EXs9z
zngK<le*Grl>tZriV|b^0d_h`hNbC(`&mY=Ne|s&Si4OHjV$5OMmdm9x<G67Tm?`p>
zM?>O#zwJJ<Sc{l7IznfOT9Z5GAzxY`BR%%iKwtejpC2;n;@|+C*QTG#_Dn7gdB=S?
zl{Xc`l6b}}_t$*EY}3N%JgRIj>eL8T02{R_o>Do+Em(gQK)v<OB28>=c$vj4h4_=A
zexCyQh%g?yx-Gn^Md0pUt>e3)#dSZq63}(nB-FdZk^*~vm69%31d^Pzt<ZPgdAWk#
z_g)wj)+_^OZDNSkM!*FeA{2v0k-w&i1n#sLaUsPqMFXYOqDhmvN^y(G9|)0!63ATh
zg^lMLfsakw)ETuJPRH;_<-zKdVu?*AzPpeRyY1sVyjO>Ni>(q30+zL|qS!ZB@(!fD
zaT&iYg-~5h)Aqa;S#}ukJf3>G<FChCJD;vu??Lq2=cfg7>Rm1L08vG$18G!fKR(h(
zOb`5ht_Ju?eXmf}G#3Y345_QHK5V5#XL}X#=rs2Sq^p+<!9aA~l^WTNr2+M@@e~zn
zpK)CwWtmeDPt{`wID{g8A+Twaow{NMazgc-e=JcE{xnPMFA5R_wz0=e?~Ig|NyM<?
zwNWf-DZJ6fI%u)}D+&Urfh;)*oA+m3;FZ~{Xbjq)wNKwA5Uf<)Hznc6NFsmV;x<tt
zr^*&Unzi?)i>!SK8AzIJy|x9NDxg6fM|=0yAV#7SP5?@m->JZB`sEwCCLskSuu{zH
zSEAu{4okfbOUaNy(UyE=|DDn?Hl1mmrhQ4@+uYQt?GfO;<3?HR$Pnl{*@s1X#47cq
z2UI+Hj~$7P;&~}&+XRyyzfqYTmZVYldv7(CusM?E12xz!Quaxj^C2jFnA3R%=or8L
zwDHZgZ&z%F>;|vgO1m63K|Qy)PjcoPmDCpkQiR6i+RFGQaK=*3iDYXY8WpZYDz9u0
zK*E9b<Pbu{!>H{4_0b+mKMO3FSr@P^K0QSC;u_@A1DH3i16d!l2&DmNpD4%{0EPGt
z@RMNK@;UVx=i-v}DlX0d8;-39#Yumo(-_e+MVgz+BOfP30fg+7WqByofe7SE0v&Lt
zhiqf0qR+QmFb`rRBz9j%3n^%ke$0YnO&uMK%y2x#6F5B)pxpN+RJI27CYfSxnL_;F
zXRiW&<F@PM7+#7$X6PY#7OyI`Z;yB#nW_`_gZG7A9`>ejHw6;9L~Sg5smqa**#9~t
zRAwwJ49T_JTRKg_q5V26M=^npIdi=<oxz6$`c-ZppM*e3CXh&W<~^?=bp(pS$V59J
z(~R#3+c7T>NEnrp{=v<Z^RO0>YuqJw21oF@n}68AdaZ1>1=aNxM8TyDB|#-R__u>0
z%4dZP^+`tuQ(wCK0fIckK6dg4Z7YQ+s{VjqX6bxKuBhJFn{_4&0!mVgG>86h7e+^M
zOX#CQ(eVDT9_&;qjli~pJA}6b8!umuXDW@QvcT_$EBH^N1#WnF)1+Z#%JruzQw(+E
z7Lz<Cn%YjrQ%u+6>9sz!Ztc8WCB(BLkNDILV>X4OjUxF$JJmw3S2I)ccdq?35D#Q7
z?mmf9<eigY_jY(=5~5Q90_mW{pvr5t@+@-aW^wT(Wol3ld_uVmzVv!-=8rg1{o{Fq
z#pJWmdG1=|a_%hu+}pOX&5}b^Bmm|eE!Tpp)zU8$X&Az{S{uFG>64jRSmg1XAh}_*
zYGTibW|<mvz93d;&XxUcx2ATj{p5bDXi`7zf=(rg?eE{DzTj5S>=6$3XJ}A%{p3Z2
zQU_UywzR43^hGIhMEXd!nqm>6ry9EYm?OL-hN(bRiaw7+LrCII;l7vy&REzurHaa(
zFT3=FoNG#H%!zy-{X0X#Y7hn9*=qIpr6OJQJZl)TtXLXEa=>RZ=8Tp;(DjUogiZ{3
zvK9xpqdx7S=J+x~3H?HmLjOt9X(u;PLPN&fz<TVbW0U_?EB8mvr}$7<WPFsnBTsqm
zYZuyletx+Y#mf)dyrV<=@>`WAFDiFWQ60U!QRUr5nxe?ei5teOR*JbT_;}Eg2hL_B
zx4NlIF{{}G9K@-Qs$mMumojS_-6lej1m8Npu;Gb`3jwq9?fT^(S7Gfp@#k?X-Gws(
zJD-We4YvtG5o0Eaof=m@ijlm!Az}h1Z>l^5!uVUCoAe6RwFIacz_Dc;dxm_@{sS+b
z+`vWi4BLCT<g8uUnwAs3RhNXNBft&bDM-EtRu53V7E%fs%`;l{{1Z~-xJ<GrlbE^8
z==6vsAdFM;%M?zW>mlq0aLb|SPgp9y|JFe^e1uhioro|9E0VQ0WO>HI;7%*M?+UE=
zmvAQ5_lM-*%hfD0NP|PB9{U3c&p+%nW{WJ@zkxL$DTKRxg)$oh7$fbZleBWdTPMUg
zDIBZI`9MSm2P-&+KxhhwuW(<j0PYqI>gZsfU|JLjN`-RjF<UJ0Vf7*}1@zGKODq&6
zsIr_i7;92B-aS+ljdB2K&{d2&h>c#i0E!9M`p#djtFHV3;WHV0IZ@9;ySFjD^AMMy
zB-14c)kLR>Ml1OkvBJwncL7Vc0;ypZS_nEqc8%-%SUkFnD6fOdSUxoW=D<}HS%H+1
zxY@1x6rAC_llGBfFsNXiZDWWg%l*{=(~PUQozA!c=y^9)OG@jW02$|zIJnorbdSSz
z6PCvo4EJ>XZN@@{DTGv?FW~?BW4Dd&pZv<WA}|e_XxFd@_#mGk;>Kk>D+eKEY?+r0
zTI8jzRFPBW;~f)CI$sVRH#K3I$25w)6VWZjEm+pawoL9jrL5z(g%7tgcU;Uyvv#$H
zr;L7v)aIh`$<!E0e)-rT+eL*WVWD*9R%RbY=;TmVbwOz)P!Mryxm8&vk=B)<bQ|cU
zHZVVHY}MMcM)&GpEB68eA^j6%seFQ_#mMbq8Am<QLUxJ^KS$>Qe(WBbq0Ly%B&))j
z&?UoP5OIm0sCf7Hsz+|(ZHq)hIma73iEKb~_OYef<KgLcvEIwni;LTMT~J*l|4yF;
zE$u{E%$@my_%~$0i(4I_hk*|^si`wU?QG>YCYjzNdKl9ARyzukO=w)Coh?*Rj=?Qv
zzVB|Dov6apeMhEGj^=`nkPO@0fRckNVO(Bodt+d~UFv7^*6^ZbTN9P+AS?`1C|UHn
z3`x~^qTN`>K?Q7`=s*r>`jaRNW0m6{<Sy-3|FQC2T0>Kik;r;Ijf9Kv{ql%*eGd|@
zEq<5pMFrd5WqT0S+E>!yl9uUV77C)X7Ly`*1{8Rq>bk{aLG2|-*cbdNYkhKxIy)L$
zfpV0%UiyIb>eW(2atUR5j@TFB&X>W?`)&S<E+jDw8u~8<37<(zNO6<YbiCp|e!l$k
z{!oti#aco}>*Ig8g`B?3C0YD3!pt^tvO(J~QRxVU6JGJE7SEln^`MmE9d?!^dJmTF
znTi6v{rc@u5ghBCnBkt-uA?u;F4~=yGd%J*rV0pns(mFR!UYJUeMY&-qML-|k^;N;
zdH#(?D}iTt=XvPp5J>u-5%7Of!G|3n4RtjqGjBzh+<#`x-P*Fcs{2j~C6ltSG(`Qu
z;SB5VlVE1io|#%|;}ay8DNDmI<6C>Y?Y|2>gYqCJcYw%NbB><0j*mM&G(ob=9m577
zW4L5-+G+t$MbzY&Nzm7vCImCr(CgF{*#BL2=I+4X61F&W!TctXeNA^V_*0;k%w|fG
zlr4>IEk$!o*}+hAVDz@t-~v8tY-Z%5rMxG?w#W$jTo9@rh!ewg)KJQqwx|ICXr*t?
zxmH2ReA`e5Lye}S$C&GIz&(Vv7`bKUpaFpcPZ;9?vhQKj<2$Vdoj=kH(fos-Ca#J6
z>ph4;s%F(p2>q%y_EQC0SfFuy1_D0mI9@atTRy3Vy!KRJ9s3UD$??3Mcb9y(Uz%TY
z-Q|0WT~~L+74dW5QEv$TMrfA$5x}Fu`}jZpHjr~(&QBHdJFASNkUU5FNyCKAFRgX;
zK9mvMfIW!uH$4AP-!G~tWHB3iE(klHids;Aq;x$Dx<&B!qU!rLM@LE5#i2@)J34Ph
z)rSYV5xB`ZvtRv(v%79*>GmXKz))h$6H98OwdVpI_1VH0CI%}@+dC7`04GW-fgtGe
zc<NRu*WWYniT)|gA<qF|2{2JMSFfsqRI<YRd>cg>QZ~>AE0J%}SWxu|%N}Yaic0H;
z{V&Ep?yT^nlIrye`7b5Nlf?lK8I7Td<t!PGcX4)1!lv4vbW1p?0*fEFSGq)BuN1;b
zVYx*mpu_XEZIA3Mky`sSx%h9}qDie&HkK=yT&XXNctp9dsdV(f-)-N+=h*vs>7FWQ
z!@pl2YS)c1rohPv>9baVZ(*o2Er;VoNdaWe@b@nR-L^y<@LlCgoIy)95B26#u*2-i
zI{gEPg#$Sx*=W;R+^VejbLISdk+yv$twRFV)m1U06->%uslrM0Zzlf|;@JbINc6WH
z5<l5-Wanp%xMr<DYT(r*NgR#Xe<wxfb*-b`JhA2`9m*~?1`vU+0-wW8bVdz(h@xVD
z5MPf*Yiq_-l*Z`}pN2%8%>lr(J55g}|7m>7@6Zp*Bj3c!8y#W57!DDv$}8*lJRrxY
zbT^n<*?IL~E)bK$*4icaYKFPI6>G|Fn>R16##02xaSoykiO6)g`()j>rEI?7tE14A
z?WPsx?|CJ!8CkeD2Svk3_2-&E8P(?P#!4tD9z4m|pQo+XP)=T@i~Tj5=9nmrL;v2W
zGwtNVD?JwEB_mN<(gGqlUDTj>5bY>qmtc5X7$qMfr32X%aD5Z<@AsG4bhK#{QTu&j
z7|NK+{6h0$J)0b!d>Pg9+VhK?5AH@RhX>i+z3nA$2f$uc5W|&60qU|^#8-sA9*ce^
zzx-RF^GrVmgOGX>=uMdbs}G_kM9rIS6f_MA7tlV!X5(xvyQ9e`?B4*y0NqY|hDzJV
zwwd~F3$lsEjQ_v-s(x?{v_U9pDmFh{7MiGJr=XQ9PBA0ky4_VokdZy7MFGWA9N9Xe
zSdF_8r1iO=FXEL3ES2`)tF3X>-g?E*x&nTP@L@vw%sqd=9?YE@U{yTOB2D>DpQWWy
zBno4CUI+%d1w>YRz}978RS{kkhs+{=3Rh^GAu{JMCC2U+g3Ex-u?>JEma+wSf{4F!
zM<uoP_Pf|%fF~=d;7G2hL~P#rilGfkDP0xg{;pA44Z5%P<(!1#QLj)xBwnIx3~q7z
zU7r`<Upro|rI~ERE2JjAe?9C$k7evPPuzk8+kUn!-}@;>l@(|yYn@tC#)EY|@l8Ec
zHssyF12<FR<<3p^bV&oa?~T0k$4FF;v2VIji=5jT<v_e3ng2h=3D9oMhVfbw8a6gE
zT8SmIToQm5Xk0Z>bXMLCBYb+VKv)rrWu%W_L~He3zt$TTXecU&l5yk|fKqxaX~oZt
zES+7-wuO2gag98`i)adL=etjD&#rW($Nx4wf@0J6af2Ij(P=QsTrahSi~tT#8grz8
zs@^d}O>rh1<i71b4lN;EJ@dsx2@!VJF=#&2)1FL8KSc{o|2c6M=(7Wtm(=&Zn}OY@
zL;ddYu$csmS<K07i*?vEI{<-lbx;ucI4)c8so`$8@;CXZu^zDi(S?|P4e{#1rcODO
z5MFw>4HyR=<|nRmz%Q`US^!mh63i`{Z1~t>`%PP3vl$eM577ByPz!tm274bd;SzgO
zcXK(Q-AnBe_`a4ST-5|63$itHb7*=pUhJoFhuOD>UdG;3gcg$-<B-!C-k~5BpsNvt
zzdLj<r3UFEVCGqlku9Xs*`2uvw;>6o^tJl(4z)uwtI6h^%D21iIUZW75*QxT>I^{H
zvFHlu#$*Cw9o^Z{bC$TPl&*s7*MwCoqlkuQ(Y2xQpf17^7wcC0I9F?T`6WH=guqI^
zOGHP#tL<A(QQgJoC0OFx<*Pph=ly*Zk&z}P=X)i`MVj_97vfs_u!v#f)SI2wRpa$w
z-AX%vmk<R#ACL!pC^rS@3CT-Ws9LB>nWg&o>1SbTfq$-8MJZV*Apws4iOf$FIln!X
zL{=lBMWNxM)7y|n3q+OS?2|qvXETP+m@2x?M@V##G!n7l!Egcr79%_1niHmsZ=dw5
zm>#~l$aLWSG^61fIcPE&uSL7x3{EboodT_I<Va|$KgIZG_Jq&PfKAR-$YVlU2!q;U
zGyb4`=zNz|blj`phF9?<T#{9d3BYL`-Ll6=Zl#m%#)=O`WPB<7+fckyI#??<aT-^<
z`V8{<J<H3BJg{TELknulM^7GOiAJA_#yF?gWq1EMf9jUiZW9%j^MHc{&l<8GF*?hw
zqw8ddXFe+=i8{VxQD*6kc7xMjh3;Apxb%~n3^_oagTYMHeGT8lB7n@{FFUjKeKf()
zEjM^EpeFsqG9}9%3-9@|i{SZ>vsXyVI3=9GK0I+Az*sACD70Fvx}gg4H{cJ*&v{Ue
aS3s8Bb0Lt}eSgl5fDIJdL>7n3jrF`yU(QSb

literal 0
HcmV?d00001

diff --git a/MikroGig/20260629/20260629154231-Config.rsc b/MikroGig/20260629/20260629154231-Config.rsc
new file mode 100644
index 0000000..eaccf44
--- /dev/null
+++ b/MikroGig/20260629/20260629154231-Config.rsc
@@ -0,0 +1,2776 @@
+# 2026-06-29 14:42:32 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+add name=br-awg
+/interface wireless
+# managed by CAPsMAN
+# channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    name=wlan1 ssid=vados wps-mode=disabled
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    name=wlan2 ssid=vados5g wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/interface veth
+add address=10.9.9.2/24 container-mac-address=78:60:DB:55:90:E3 dhcp=no \
+    gateway=10.9.9.1 gateway6="" mac-address=78:60:DB:55:90:E2 name=veth-awg
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
+/interface list
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroTik
+/routing table
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/723/6e812143\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 10:45:05 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container
+# killed due to out of memory
+add cpu-list=cpu1,cpu3 domain-name=vados.ru envlists=awgui-env file=\
+    usb1/tmp/awg2-webui.tar hostname=mikronuc interface=veth-awg layer-dir=\
+    /usb1/docker logging=yes memory-high=12.0MiB memory-max=16.0MiB name=\
+    awg2-webui root-dir=/usb1/awg-webui shm-size=8.0MiB start-on-boot=yes \
+    tmpfs=/tmpfs:512.0MiB:01000
+/container config
+set layer-dir=/usb1/docker memory-high=2048.0KiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/tmp username=amsternl
+/container envs
+add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443
+add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q
+add key=WEB_PASS list=awgui-env value=zoomzoomrulezz
+add key=WEB_USER list=awgui-env value=vados
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether1
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+add bridge=*D interface=*C
+add bridge=*F interface=*E
+add bridge=*11 interface=*10
+add bridge=*13 interface=*12
+add bridge=*15 interface=*14
+add bridge=br-awg interface=veth-awg
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=ether1 network=10.30.30.0
+add address=10.9.9.1/24 interface=br-awg network=10.9.9.0
+/ip dns
+set allow-remote-requests=yes servers=10.30.30.33,109.107.177.79
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \
+    to-addresses=10.9.9.2 to-ports=55055
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\
+    tcp to-addresses=10.9.9.2 to-ports=443
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    ether1 routing-table=main scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=*A type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Amsterdam
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
diff --git a/MikroGig/history/20260629/20260629154231-Diff-Config.rsc b/MikroGig/history/20260629/20260629154231-Diff-Config.rsc
new file mode 100644
index 0000000..85b3217
--- /dev/null
+++ b/MikroGig/history/20260629/20260629154231-Diff-Config.rsc
@@ -0,0 +1,4 @@
+12c12
+< # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+---
+> # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
diff --git a/MikroMaster/20260629/20260629144003-Config.rsc b/MikroMaster/20260629/20260629144003-Config.rsc
new file mode 100644
index 0000000..d903ec5
--- /dev/null
+++ b/MikroMaster/20260629/20260629144003-Config.rsc
@@ -0,0 +1,3693 @@
+# 2026-06-29 14:40:09 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/720/6faffeff\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 02:10:04 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add disabled=yes interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:2 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    disabled=yes new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+#error exporting "/ip/ipsec/key/psk" (timeout)
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-plain=no rest-secure=no scep-plain=no \
+    webfig-plain=no webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260629/20260629150002-Config.rsc b/MikroMaster/20260629/20260629150002-Config.rsc
new file mode 100644
index 0000000..76585a4
--- /dev/null
+++ b/MikroMaster/20260629/20260629150002-Config.rsc
@@ -0,0 +1,3693 @@
+# 2026-06-29 15:00:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/720/6faffeff\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 02:10:04 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add disabled=yes interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:2 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    disabled=yes new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-plain=no rest-secure=no scep-plain=no \
+    webfig-plain=no webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+#error exporting "/snmp/community" (timeout)
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260629/20260629152001-Config.rsc b/MikroMaster/20260629/20260629152001-Config.rsc
new file mode 100644
index 0000000..89cb1e8
--- /dev/null
+++ b/MikroMaster/20260629/20260629152001-Config.rsc
@@ -0,0 +1,3692 @@
+# 2026-06-29 15:20:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no
+add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no
+add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/720/6faffeff\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 02:10:04 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add disabled=yes interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:2 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    disabled=yes new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-plain=no rest-secure=no scep-plain=no \
+    webfig-plain=no webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc
deleted file mode 100644
index 9a463cc..0000000
--- a/MikroMaster/tmp/Diff-Config.rsc
+++ /dev/null
@@ -1,2 +0,0 @@
-3633a3634
-> #error exporting "/system/routerboard/settings" (timeout)
-- 
2.52.0