From 9059eded3ee61f8b201e63f852862b449d424efd Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Fri, 3 Jul 2026 16:20:45 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jul 03 16:20:45.

---
 .../20260703/20260703162040-Binary.backup     |  Bin 0 -> 189910 bytes
 MikroGig/20260703/20260703162040-Config.rsc   | 3287 +++++++++++++++
 .../20260703/20260703162040-Diff-Config.rsc   |  122 +
 .../20260703/20260703152002-Config.rsc        | 3700 +++++++++++++++++
 .../20260703/20260703160002-Config.rsc        | 3687 ++++++++++++++++
 5 files changed, 10796 insertions(+)
 create mode 100644 MikroGig/20260703/20260703162040-Binary.backup
 create mode 100644 MikroGig/20260703/20260703162040-Config.rsc
 create mode 100644 MikroGig/history/20260703/20260703162040-Diff-Config.rsc
 create mode 100644 MikroMaster/20260703/20260703152002-Config.rsc
 create mode 100644 MikroMaster/20260703/20260703160002-Config.rsc

diff --git a/MikroGig/20260703/20260703162040-Binary.backup b/MikroGig/20260703/20260703162040-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..23b782b116b25a1aa8acbedfe838c9dc73ff26fd
GIT binary patch
literal 189910
zcmV(fK>EM$sF8El<pKZz0000M`Y0@C##mq@``Tpy0002|`~QAG&;$Tj!s&Kx4t}fY
zM(KF^WKZ^9gQdDBv=bTNvbIwbwe*9P!;WA+EX2Oq6v`r)5dYktbq9S&BouMhFoyE1
z>qwDlmMth-9mSjbkisED@E)kBEYxl$3IB2@hvKhza+DM}kRm0$*#-~}?thTf;Fp4^
zJzgAc&R({3bCORz{iQ<CzfzzeUoLcjRnIfCstJNdB*z_j%u9h{U^?|FDl>FPdpxhI
z+ESf;ecPP>Bv%z4O$>fJokb!*cwm-ec4X5VTgimAkr;_kH^B@mhy1$>5;!?HBM}1#
zXr;(^1<(NQ=U|`Ykx`bTtjjYKRZ18^hZ1?Yd)B|EzMgL`s-C2~0Joi#Qy<#N86kRX
zqwZWnN&hpldNG^>2{eW**OWU=4>`h(!h>^GO?U$DJR`IdAMv6`AdkmslB49#@l}`X
z0%*?dfpUE{w6|RvM}w^CvMlT>;)nJTV>j8R0;6esz15yo`k(l5fZlenj_rf%=%(0}
zpS>=F%|itjfbDCEWIg;WalXgL0^F!;S91h*71@>kJNmb*`0c(a=9dQ3aK*9{s~lhl
z%_X?;P+KX~Jon}r?yFO7Sek&bHtnSnO!B6*N8Bt#O?q=l=6_@Ln7?r!1XU2?LWK+g
zqf8`Vf@>q}1*vx4*g?3Mh(+2LiWRXh@%lnqApIG!F?w#gQUlA?k5d>Pebhq!*^r8t
zKX7s|kVYr9f8+#jKE3&<XcEDEL=?cV`S>3<K3mW|0iP5bV3m+5THkR6@08XJvdlQf
z>2xQ}XDw<`+?Ja2KYtLvs1G-cT$VsnB9%A^;G+d*k)nb;qegN7VQt@-vUO5w7#yyA
zXWTxNA5OEl*cWrJ*^WK7ly#l3;FeLIS*h_w&r1We*4a=Hl)jf(!1R*Vo3p#a4J?Bm
zhACpl<}(1>9%(<YFYjf$aKT%`%2!E&Q)_zeZSZudM)kWpv3lllmYi<pBC`<@39P!9
zB>+AI3}biL)&oR~8MjTT7wbuu>k8F!TRUS%w`v4V%L8%Q99t}Ot*R_xY!j`>{1nI&
zd&Tjw4<UF}A4j`GHCacD-d->d4dRu$Nwr6|ClBC_tFe$>G7!EXMn43eeX(^Cw}!yy
z$#(d7+T(O<JR+s>(&g_)VBsMIr$zm+h|+iv0FU?GppeWCJkiFz)?t)$cG};_WIN-n
zybdkr!gDCdx@17ve1JCT%~Nqc{GvF~q6aa-n?RvnR>EJxnJ2usX?2?UjlQ6rtv!DJ
zTD5^5#GS=Li4BLLQDghDG($V)>MNF=NY^8O284Zff`wRIBFlhI2T9JY+hCkk`@)h4
zn`=0!PBF;9RzeabTR!|pUjD7;B!-&-4$KU1RY%y&XLcAp0U;m-gdU!Fps85MyVfvZ
zUs*x`%2YHyO-v5K261%A7k>^dsq02aAibcdl^MbQy|x+md~Qw;9IUlR4t9i$12nyJ
zGe>)6g<7*C<LDy!UH)~@X+Fv}yi;67jz=^7(Xdg<$m}7Jov&kKIlXjDVzbUTc`+wH
zCMTGMRlzjQ))WwOk<pD!`!Mg~d1Y!={0L2KDCWR<m@{#`1f|VPyR&)#fQh>zX`|BL
ze9XGQUFhw(^MmR-6O2YT8Vi-q&9KLChD6F<w(BN@({Eceqj{P~6CI`16@~ci^KwoN
zy~zU*8#8?QVwTdi*aT#4mV~6G?n5=4;t^Ue09p>C%NMpPs^QbMV*$XFQ*COzsnVPY
zpL9N>Wrcn~U13ae-PUSKo8z=evGU_2aSTa)YeA}k38T_`&n%|h54hVyB;9b@UHg4D
z=;<XhbpuV+QEnkd`gGIR@-`&bND?w=nV*t|-=(jR90s}i{2BKUhMSq_`ns#9$py`z
zi_DAWs%FueTV<jBp5%Is*$7#H7QU1Es^gN=?|E~#N}g_Gzs%PCX4B9iGv*1rQ{=iu
z(T>S`c|Uh>jG|fwR~S&xoF}J=g^MF^p~b#A93O(f@H6HjGFL}p()JumczThflV*I!
z^(ovshs>H9A!#WB4pu~$rOh{YRDZ<eO9&o0IUYIacX$QI1!~r)9s~Q$^nVKy$Tn~t
zX7&tqbZ8?+g$-=2kKz)V7-198m2e7G&IMH+3bd3X89QPLk2clu$LtIzt=uSQ@QwL}
zyYKfGFsX_jBNX88m=sjm;cS_S^z1Su*6ROpf##ldZr8BK=)FOSY-MyEgU9f``j%KL
z^s0Bb>4&VX|M9G}SZzc!qoB8LZ?!Chq-4VFd;Zgm{*3Z0iNLjIOZ<d2X=_b!t9~3w
zQ86?tCZG7f_%PO@ErJrQ=_aVMNJPN<_{f2?HiepP7zfY&#i-M8c&)YATBUM%U-z64
zG#^fGjW~h_^dAWNq6tu-^B>$A83D-aK)GS`muF?bVkCQP>}^Y7&y2JXp2~M<H<51?
zo<=(IDC)OB0r0S|pb2s63%5aMsqqj0+^(JY%_dcb1lKqxsSao%EuI0$prbE#4nQyw
z_WzI0z+Z<2;4R?c$Me;Gu1u;_l~$QDCENc`5dV8bh4HV=c88C55a;ojfq$6aE}?F&
z`MiL+$qM|jiif(?K)v;fuKokAulL`PO03lKw@%^l%KShydiaPH@OEDjs?YdvS4mBN
z?EV~l1e;gU>}~|{NaHmy^qE}1UP5grbfnLO?r>34o_`Bu;~$|MZmt?GAu|ybx!<M;
zxN(hZx%e>DPeqF8eh827-}%u%7`YYrt`69auzKBS{9m?wWeZx{?v*|nvm<K_81yh_
zH)31x2Y=>GAt0uTJno5Hhi!3DrD6K4R}RdM)bA*}@>tFuxl@7@f#NT%J|zA6c<=8%
z>}iEws!~zo0Vcq4D~#nBEiL0DC8=YLLI9~Mw72H1p2xFr?SmGW2JAb$eatjqo{4j=
z^c5E^=^Y`~%$L_=LE5De=~*zctq6owKdBk)46Cw8T3Y5ofEV)=9Fq<t6UY($#))Rl
zNl-%vALA2zWM%cwb*{?#r@Z7jS?ndk)6N`Q0WVwhNLMKeOk8wVW~JWWs%dpW7M*0(
z#l*@`2w^x>V_I~S#YSasZmkXfi=tOn#}cg<rPN@O4Tm3;^kxi&1nY@|ISidS0kA%O
z%7pk1wT_8hID|1ySW=#iu4-l55O@O-OAT`&Qd8tMG{)BAk@;Aif#N;Pu=^X|VM#TW
zqnkYXyE(kP9UJ%qAyC9pQqf%gFPRoUKa0=DXu+-K*8iME1yO=&JW>&$=`lBl<1im$
zTUemgW25;vocJ=q#(ufXYUCgq^&(AbAi{x9CUVMoQkOiaxs;ysa`$o)EGZ^WWrt6E
zbP792uTDGu0&io)h|J?gblv07roP?J;XrcK1AL3acc#j~n`HmpfjV8IOV;tD{<pf$
zN<c4rG6L7m52DW!R}nWfYA^4T?fn34;<14au>Ibz3ms!!x6$ZPbK>!tNb*9zoH66n
z+r1Usx^b&j$GPLBY70$}WN$)MO_1094*$)MWcn9h#rbl58rgTW^gbYE3}S@AuWQ7B
za8VahQ3uRp;DnEe$~hV}-a(DRi<(4gn`#2_<#K3`V>#2|TpEx1M>QV)*UM4`=-oba
z%sR2SIiwPDK%;PZxp#cUIM3UQ_F;)jNq^!dwm-l^R0Qu(gVV7I*IUFvqj#pi5B=bw
zCaE&R?R!hZe1sV{1&FZsQOLM&;Oy(=400$@i(agxi9r~dI!-!|Ee=K2iLcb|+V!fn
z(@}RZi?gHI4>z=ejs#E+T+r$OyxtaU1cD}24Nvvdq{iwwtS5C^?A{!VCBe8AI)+*T
zB(BG5F>xQh%t3B$Sy(SCo@}BZ8Ae&?wiem3#P2Rzmy0YO1V8_OQ>>g&8H5Keo3z-K
zZ=u0WEJbSPBdOY8!BUe!M7xOn-l1^V%IfZdh`?zzEZz->45w>z$7Vs`2|nY;%w?sU
z>+L79@T_0cCpSg;K|?f>Mj^Q3BP9+>hd_Xxc8j>`vGtbvsuKCU=O=lc?&=Zsu=~Vk
zKh?TMRrqxZAy`Y#8lZIQShfj*T)$8hLkejc5SN8Jzod|Y9Qpi8sgzik<+#6>{+3U5
zf4<C$P#~RO-gSu?ZKshX_nK*K2sC78+WK8rJNL$YZwHX0Vq-oYa2yzHNb&^im1He^
zDGe1zrUaF^|F7=^q|3QiYne}*HX$<JCzBQA!rrb?1hbIJ!>qKPSEwAG8+G(ulu}-L
z=M-E$AN?$-+(XU6gaYj~1aC1>URYrM{LUB~k{y2nR{}3$(Y{c5<kqD_=1@u06fY?t
ztK`RCr3N3n!oYikf@C(2`bGP$V9dN)k$(QVLsew~*X8;k$13q1H6f0Xk*AL*xj6yE
zOc#8fey(m%&*Uk<lVy1o$e*3^^9rx|N4DB0$hMBQFLS(TL9h{QX1|x>Gl#4TgI5<l
z0hIb#gdh_hE0i&^{>{6Vq(Pb1edKj0&yWrffgg<te2tR#vD2%kALUvjN{rR33k&C_
zbggnQ$rDYrtGA6h+ysdQH9!DfKBjIR`x9TLt`?*<ze4gGC`tF_y~QXcJ?7WXxN7w*
z^7A82^Vi4A(vp=OozuAny2~l-XZ_hB|GK(HyE;|}-;YT+A@Db4^$_$SV$?~aco4w;
zxN2p!o#_7L`Ke3mS4h{cq_t=mlA({Klp1u+LeOA(*YW$ddwQz#HK2Ab8e9i*hJMy2
z@#>6<Qpo8P1%;u*4oYWwKi01YOB_;b2mApiSLW?ZF<^v+sX_Y51y^iXd_0_el;JRb
zy7zb6I1&HIaDk#WdHWm&si}E!0=E!W0`r@^SKvGGQF&mSXr-8W3#C6GOIBXF5O%`$
zeTpJmh>L^f+J9ESwk{dd<7t%p;R9L%>V<AX+KnB=y%u@Y&OVil+P-%ZQJaqhFyqr{
zNL6^_Jaq1UO`i1c1lfQL?6LX?lA#y$WUUqXRkIvF9mU$5C7L&?qIhY3X!hwpS9$<e
z8H~<3p{J>MpA=PJ&0t6*&^(#8+s!{R8ZGiq_flyTp0h_3HI5s$(JBry+0Aax&Go;=
zhm<G27>ipSkOE)ZXQWiJC=1yeb(E8p?4QdynrDz4nf%w9eUvJd!_DN*K+IQ_0eH6A
zMfU!l&(AvMPndsP$ZlVhqseqsTvPhAlAzun;wPQLaeO|J{$7oRU57{m7CZgEZ!XOK
z!MvVAt*AvE2z3nl8$PL~+qD$`lE>N^5i%NXDVwXKltxWXlq{qJ&$28!=q#ObXw$#-
zU)GSl=AAO=NZ1@7kyzP=<M0PRmRrkF(W4Wnb$i7%DP5_Dm)dc2hBxvALF-3i{_C>R
ze-_i8!B!g@PLrj1c^WG}swJKfP&*b!#0?Hk10gS~P%Cue;_hB}`iF!D&73@cU=OzY
z_zN$1)YC!>;X$?4l+)Yr#E3-Y>w|PTFO^{*7E+eT#sP~{ajqs=hiD{KP+x4{I><}x
zMniqJ4ry*+&hC-nf1t^hX|E0+WroMk7cc%{Uguhxsy+UA>P2hr94P>rH}B{X)G~VH
z8r5L+pWHXT1Wdi`_SZLpUTjz~u)Xj1#(5Zar6qY%`=FG^Y#mJvb8vAOs%}hE!#3pP
z`V!)g_GJ7)M22+wMY|Fe2C;goU*w;SR3k@=dKCUk3WdvW4FoHzms85s(9KoZqGpK9
z)60DT*qr3PGifNsWNyupmm_l~8&6zgO^gF9kvr84BD}K%b&W)vnR<^`yz}2}$bm(I
z-6}t<Ba0N^`T<kL=Bbo4SROlV<LP}I;i(Ai_IMC4-UDqtpaP`$ljkX}hS9P@Y00G=
z-bxa>-++3S4Wc#m^!;gz=w<i-u*t(xPmH8d3}ewk;r_kt{ruX(!bAR?bW|$QA_eNT
z9%jW-N7-xuw8BV^0a9FW4r8ILX5}ma(<>|~OEJxmnQ|3Mz6&EfrY>X=j;acoR9IiZ
z_URo~a?gf2^Ncv@+17ejq5rIz8VG=}tnJYYo}yb6vT7IlrFaaGMv|{k(_!aBzc>hZ
zTT9#*U&{b;g4HLryv&{A1hQ{9|LGdN?sMOexl{bExB9v0Cnlo!8QDLnlwCsUqlxE$
zT}Mg~S--On^9W1-y+V~jFd%jO4FhC9xK?)HtFu1Itbr1JNt`ou#VEw#nS{)Ty1UMN
z3!VU&z)fzr{Gq`YW`|ZhjcmC!fvoK$+S2uep3JEL4MnxE0_+!~+vmO$M^v{Dq!F0l
z%bCkFSO%=E<P`_fv9EF5cD4+dg`YAI!5Hmy@Q>fFcioMOf-bKc-DX<WRFB<GIxklL
z;rVd&B?&T5Qi<prsyzibr5yvSE*#C%JchAL<WL<6O-&ZLw3${_ym-g--Rf8c@i3*Q
z6e0A-g`Z^<D?6Mpy25^qyJEm51ehpD2V2VxOI8`9K4N!5AvAFReb}+<GNRrHKQ8kQ
z3@`n|6S$4cStNZ1-Jkbz-cs|wQFddh{ViBOYdO(RE&~1bKkZvYEOMvnT!$k=_WD%;
zz6Qndfq2NL%&fM|lo|fqr<M|NpuAbfNgDE0<ri}ReWT6Z5(XK&<hs0fB43FDu;aLL
zL_%K@G~5T9$jY07I%5YT<p)pb|4-%SGY#>U>(<i`Ov#}Rhouawm0@|83a7l3qOcnr
zn}$%AQOQ+B<HJ6lZs-jxuHDqNd;2H5_apO%_3Y=viU<WNJsH7(zoS;$!c=gaCK!nb
zNgnRLi0Xj9WUV*#^sIz_*INX{!?uRLBOHHRq?C^w=<l^I1#EazKpjnXSJcu=LM}?}
z{)60()F~Z)5P!tz!Imv)%X2_Lf$um&0+~A(iV_fPY|>#t84#O9Ig$}Y`6&oqB`XWh
z&82iKutR|rC2&!z1OW^dy>qs;Y8Fp1q#1&S7frmRN%T#1Xs`-HU*Ju%=Ih?wy>Rt(
zWSwA1h;nx7%RlL1Rp5B60Hf1#xWP&*x>7N>aAC)0nw$FAxllKzu({2EEAE)mrFNWF
z$qGj&Hc!-tW4@WrJyZFiBb#7~_BV7WPEWFw8?k9z1HVsYmS=%wgU<`o&ODXJfGwSw
zc65z%<DPIz+Y3I}@WdJpxF4r6FO5e6nk&muv9@sdSF!uy<9|=-ocCF(w{Inyrcwp|
zTty|8r>h&lY!Vg(;!v&Gxu+!Sit_MsvTRfub}X6nb`!SsyA~*?v$77vilXovb5Xa&
z{z~<Ux&;FCfIYs=`&Foa>P23F91;~uvk9}BPK}9{@_ez>;i!X0SLQK^E9Gs$8aVpI
z{wVP5ucpUTvc}aj<h*peihEFr2&*HFmF8N}8Aaaw%uAa}&wes`1zT|J_sH6poXLe<
zah%}c0!Ktk-=PZkh_M|1ov%Cz(MvpLAyRni!!~Ir0GK3deUcq?Z=TlDKrK!poB)GL
zu%9z^+A%ov>V=AY{6I`+hVr0U_C?^{`9tXn=~;y6Kg+M2kTrUW@gJF3(e(3$lCU<5
z{6-r?-QeJW=o(jb!cO5V(u9n*__lXxIyzJGt>slgrSXu!qHuf>z(+__M~60p{TjTO
zhV$SLalV8}GBqh7Fz@Wz9h(kXt<1d4jX<&~&@lIG(ODJQXs{0m<_qH0I~rt~W|$D}
z=%yuwQ!n6UYAsNTT^=W&ktXSZ8*HEsHPO8rCn)6==oR=Ne@_$-*we&3CmIy?*!rI-
zfBW6$TZuAkU$r3r9F>Z>5XP~g??n)R3;4=(U{<N{iY>~0E`H?+++@Bdp4*uc0o7r?
z0DDde(kg9-N|G7@&a3&eK**Jl8b9&_!opC%vku0r&p?IUO(LO1=$iR+?%SK-oFHG(
zeHgoM+po@<BM-e$wy$dFR&e9H0rxE3h<~}!(yi~-eW%tJ`y`Mc6zUYnL>DgJ(>zG&
zl!sP>_D;Q`5`zM6w_k<~@nVshuDS(LhVeo;T&fO|9y;gls71*w7$;6MdTa$dVcePy
zsb8zSR-!&E6R`#Qv2e;?i0FG^;o<+8{wxwkLVljGao+{V*Ba<|AFe>eCCIa|V?957
z&8}SGoU0!Dqb%<T+e>Tu+gXK(X0u{_?iT0Q8AM*R=7O1QX6BMmhK4FQ^xtEMkGu^)
zo&{6n8^~Jw<Zhd`9bMp1)%x}*i~Cdv{<jYg!sgVezZy+|1kAYooL|2X%%l&ePDa@{
zvd8*=QrZ(K-=aS27eIOx#sqitcjc5K{Wo3F!XZiacn;k&ZsXTbRUo0$cHuKiMk}7r
zfZVIR^%QX8bxgnG@y!+{Zs!ta4HRq^`cItXY@KOR%sr$4$CMcwHM0)#QSGAQ?uAai
zHN>{TrVCdULQ5AQ<DgDYk2@F=TB%=NO-f4MtD}GQ^izPw_ZqGi+w)OjH&aI4%PDbH
zs`J2^M>?FEAgJUpnU>39&YQ!Exfln&(b{j}1vV(L#iiMgK*W?*Sm)h`BNj~H^tK)o
zz+EEcE$?i6mHSC7U1-9`-gjrIh$+0^H`@Lvok^|_lY<6cfMJusdH@2<^K~*0j*L7x
ztvLHm3CDyyiWqScUPAP{23t<ZH?6X>46mnn!l=fG;~e8Am*ZOBj9xZwWRhQupkMZ*
zc;>lW>~J-D?Q2qY02LDa^2|>``ss|#8#kA8)3a~Vbe)#MO_<7Lly_nXj7(%TF1VxY
zP+WdoL(|xh5Qjn!Mn_Ad7>HCoC2j$tBv+V+SD9{zkUVrkCzfQ$<(PR@b#-t75Mi$i
zCcB6!cc5Pd;dQG9Aa~AIKF}8aXr{`#B#Z`e6;%zau#k+Exc*-qI;$aWDN%UkC6O{{
zB=x!jsp2$<GAeG?BXk!B(DQLcyo2t$PW91>H*3fDE^r-kiLUV^*}Fk0ihE(DuX2+@
zSYo-g?~)wi7(8Q;Zyka>Kej&9rE`eiY;S@GqN-PRbq0KPCIqHr7^mCd&8pk^)C-#{
zN>C9Nqgqr15dS#9Q3VR1ivq$Zgdgx;!be~B80eLYq#uV>rcJ8b*e=B&i9QNeUBn&K
zi(L1$uNmQM;r4G+qqwX|jd)RY?$1*2JP8+eT|Js<?p}K`v%UFcHG$VFDaQNv4}06e
zGMi%*)B>-c+Dxlne^NoYX<Pg6JWmKA!Few$d4^pmvQZ*APgx~}ue9jWFM`Y!$HDC)
z*_ctL_%L6X<qUM6uIZ0)f5m2SV3egeSRJcYIVHBeA>cA16SlLD{&ESQj8(E>)(T?g
zal#mR87XmiZNtA1=!3CTH|_n5x`j+taE&25x261#BUsr+;Y|ikC(#UqA9lA*&bE*8
zrzh_`s$Ud!Oi)Tonb^kDDoe)+wG<#uYk-Qh^J$3~`GSra(x;b;UqgwnpY|A}10l3T
zcXaT4;*foq<d}|fhSKikiVJJ2NV*Fu<RRgnbB+!uNx;;VOBrB|CU6l-NH8&wF1kBp
z00$Zz{W03!NJPCDP-_EOw5WG({26pZ`a=@AO&3|fi?rDBMg86R1o$nHZ*P3(AGvMn
zDc*W(;>)E#G;V_?JzS3_1)*dt*#&e->-%1mT<Ld8i<x*q;aAoz^FdWSZVlNS@D*C3
z92-?-+Yqn;G-_u{9BB`;q*DuvVL%2*LTfPT0Hr+q&8Te_?ifSt<oNjcjA)L6@6qa)
z!7#&0pxn#Mj@w>qBR6Xuvjw!EHGWe#*-mdL^X}Z@E$t((5@_vSy3u3pXx$K&(%HvE
z`!sQ<X99ju=AdqXZ7(z!s9=uju<ci~Ly_42##Fkqr$$`GkhuoeL^;3dthPS;Trcn;
z(-XfsLFH9QWCQ#sA^{aA9?$e5-rJ><FN`nwf(>qm`aMBVU#;Xnr#Q4{k)5!9OFNbN
zcuY8pWV&E`7xzwa0L4HPBZVkaQMy#Fwfkr1)j;)v{(wsye`mySoKQKTY3mY7WYGOw
zJjj62G~&YbJ5-T!X||YUCUF3dVD>H|CK|M#E?0s~;AEhbyQ*(?DfV3K<n<43A2+-w
z!o2v5?S1eE98p&z+12>sNEpIq9{~a&e=iqKq}R;XNbHdYB;hz_B$5P6_2^Br_QITm
z26s)E8o&3xfR@w(ABmF@+!Mehy|jZS9l03(()B>N!|FLK)fmN4$0-32CazTP01?~G
zC5<*trd0&(?K5}iiJD%IAd55{D9t#D=7WbAO<xLrjpl>4S@D;b%%YeKXKxIXiis3?
ztbE9Ryx>P+iuiSzuh(H)FQspAh&M8C(2*v1hHW)YZ`eW~&5-`U&D>b|ByEdUx?`8`
zWj8_iJ?+j_T9kj%>P75%l2@b`g?iy2L?PW}c7ZnYdqB3&p>vP))PnNRZq(iCk2M>}
zTwK-EjF5zw)7xAfvJ)jU>g=4+uxRB3zQF}RW5BP(P6%GO=@fFDfV60Jr;UtrLS1z?
z6UTzUd13es&3&37R$cZz{Rn#f3e95dd=Ji^0;#PWG!TU`U6o6O*d?Jh$6yK1;wiiz
zWFLc@Ma2)&tarnN!Q8n}FO2?6mX{UE#edhR%}p%CgWe5B{p`3eqo^Z_|C^(0s`oLS
zT=)Bw#Z`{_1qr*1D33U7I6u{Pd2z<`XV~P{Jl`vgSgSkrykTU$HN)8=;%ar$RNNNB
z%l_MqG;v6!&{hKtlQ0`oYOnh5f4Zp$y?v@G+Wd}|;V?v=z+_s6g`XkioisR%N8ihh
z1iFJPXi#@qHBrg4vQ3lfP26j@l*TP|^DGO+-U6>3(uUM;Nod@mODIsepHhv$>kS?{
znJ0peJrmY0IPqw}HDfv=$cR?cBdSU`mJuMKX2|^dD^L1zSX>61MjFkI<#CQxlv7pU
zuj#KkqE(2wf@T<Vy(^XMm(c7*eA><3ue23#>q}a|qx9icGh&OsesUbB3KS+OS`KzC
zf1<@Ly`&CBDsriRR3=J+Get>!i)eYWPl<#38~@N^T82kA>#@G6N_j%u>-Xk3b!&lW
zsTPXLp1ThF1H$TeYDZHbWOI#cKg2f*+1rQmfFGp_==n58SQxBnq8;KgKNAi$RiR=b
zuNPLpQS;#ApR@+jYTTZrv!j&ixIegL#onoG6G*&#yj+9!t<YZTj^trQD0`}W*Z3Ni
zS%^AXh0Z4vdF&}kOzjsGew_-U#+=W=Kh&LRw9sMSj4F5ly$`%}@>GNV)SO_yNXl*k
zDcE<rvEx&f^(mOc`N~(RmG^)K*jZ6Gj7^WxJpshG{%8fHXtA32o5O0KrRl$+iUwKU
z-Y-S#jAi-0awx`13|eq%Ix_}^0q5s#f}<lEm1ALhg0F?oza7|QrFx+CxaKU_(uC@P
zy45bqM+s%`iU^TsATmF8T!}K{7`q+0GjL!Tc4KAg>86vYIh$a}nk3+Q5KBA96R8??
z=}Iq6J1^I0jDKukw)8XoXx|=7xAgxnN3`r$-NHb{F!LUz68YPiuFp|m$CdsISGbu9
z|Fq%x5w$%WReRxhw&^n$QY!A90efMqN^6)|*0esPVRit%y^yiouA3d%>^7TYIk>l>
zb}px@{B(ks?xthUND779VNmcTXVuMaUuth_RS-opXS%0i_k(A{aqIIX396X^|GMpk
zpUYFupTPk8HTKvFW9AgONzcDu3nc)aOh;Ay1k$b4YntZZn;Yc7404;Gyn<gJ&utD=
zN1KU9-yypQKbSh=`tY`_CZy`C=mH+XK;a4++)Y4wk!A}EBJs$(5dd|5S-&0aMAQSt
zNBlXK8>{YlbA&GurtY-WCB;1fb+b+2LypnFuf(N28LB@!Nn0H(n$EoQFFK>yNr&wH
zv*=5CzrZ8oSgQ3-{4A%gHf(OT&L6sgX0jWAJ+6*^$gXP)0HF07NQU#b_k1JKz{SLa
zom+3zty$-t1z~8Vy1s&<A{KCwEpb7R&=DXK6DW9xcSE<CLc?LKKrV43H7u%tR;Cc;
zvZl3!KT80PyLjR3?om_gP*B+2!#W|RXvw}yX!b^(G2EK5o_cQ!$!{H851^r%+&9A5
zD~pe1qeEX`N3$93`7B|ge5DU?SWGToB<|yF<a5p!Biu{eV29$CaIwqSjD9Qe4agd-
zs^BjU>Ma5xZ-~6$vs_#69#z9?V}da!bmy-+=UVg<OF${ugwq8@zxQLRPjxS%te85R
z{qg5xS>NMt2CZqUV-M`Ja|W(2{Ol)*diqILcDE(@ADkE~mY3KEK{fPn1}NQaao87^
zpm3#I<0o5^p(if%l9696GqJ}|7&BqS%e~C8aL<|<rzPJ8E$87lpI(Ypm+jM2|K(wW
zU;GU{M4}#-TG^Qe@_f<4-7k~cc_Z^`Gw{^o)V_D71F8^D&QO9PPE9@e;M3OiwI|6m
z;BH}(?$!+9{$cpGfplxyzq&ppk+!<2?uq#APv%*W1ZrkL1@sG~jlV0!U9BsGAeSy%
z1!%gJr=qvNf&uc%$ap<Fv;#h{k0GIr67{n~i6|KH@thve)t-PKoY81FB7(MQ0eERG
zrLgqYv*vyzS{WVKL<47;$!*SOhEgYR|9FxA<$@NzZh%BysOcNu;%IWy###p18Cv>g
zn)kOiAse}j?V|s1E&=<H)K>doK2e<>Ie~hX2C#P8o?24O2ve(GNN`Y}_|wq7;t+)^
zCK&Z%SJra-TK!Mxbtg9{vrB?r*|+ap_{@ki@!*Y6#v=X=Z(5vkWA%F$#<8k}{7qJi
z&EenOF5LypN~(=6zWRjSo6Nlz!DGx55vSS2kO2z+K7W-1q0gwOn5xV6{%7R1N?NQ5
z0($sRU<GklwSS`A2Y=uB4r3S7Seeme87PY?X@H4iSUX|u866DA8?AfX&ceq)jAQ#R
zZ%qCF0&*6JuU<#mD_X0s`!E|#{;pOp<$LZuc=HZ<v2aAPjo9H#7|`O`N8dg>(5H4{
zF(fxccF(Oo+LqyWU!!G=7sqA?3xBJp$v@hvlaZfX#gyZEuvEC3wg;U{${8l1+=nWT
zCNfdvS)J~V=4X?#2njD=xi&Av(!0X3Cg)~=ae0v-z{;YgoiSd<@mgZuu-WOcQc#Fb
zEfR>M4Yzn8|7P}9@ZB~lc#F!pxEim`>g4N4&Mhi%h?J(`g^MuA5W;6y1ilWYcL}0-
zsHIX*_<<h|poPE_X-%iJ-tdzm4mxl8hV6U*fj7J(i+yvq`EzhwO++v%d`#}LVE53j
zZ9i_$vIoPEP;PGmUuFt0>l>0{Wr9He)v%+JXU^w37}R7fPghtCO^0%bArfwOVZxoq
zjvvwC^8Y?cH1M<?orgCfyc!Z+#R!SRO0d}QSwJK@|GlM*Ar7<XXp1Wi)AMaGAOnC(
zI6eJfdsl?4HMNOv{9#6L_$J~bwBnbcUe1YFp>9K04FvB*d-6;pW~W<EJ3obI;X?_8
zk#Vuq_O00bw!sZ0M8KYlSIjtIvt@b)^?@#7s4j+tYQwR3)kVW}3(L16f79^TwM2?;
zJq1*15|f$vfr<rLLG+D_VUW0Q8oTU@Rfd{U{_f*i!q{gcHbSJ|B$=4>K)qH_ac82E
z5<`9o>0*_0g^wl1eo*l5?SKb;p$jW&D@07NLqcNp*I#Qctl(t1;YdfpR3lZrQ_Y0^
z$;~<yT1P$y0peQ!zZQOFemIY>-GmYAP3*eqdM*`nQx+7EQkXU-7e6C(pp!(Xv@IQR
zSZx~lPO^03!&s;)R(&p2P}LBoskjo*vEI+uZ$GF|M}#GmY2G~vaz(5pX*o-~F<e5j
zcQ)yNva!n{=H2cn8mqCE=K6t8o_KiUU1Mj4htkI9tz4aq%M|~h<h@^$$OJqqK(q#9
z7>0(@)<K%N>~{JsL_Exx0IJSd`UPUiFI0BILTmr^IGKO+>;m-mk1w+w@lcysjDk`g
zOLV%t{P`YMk~C51wDvI=zZEOfsBS3D3)eEK9xvhgQt42v%yn8O99b$j)N<e{nOU7k
zNFsRS7(6P2crWRfv}HX`>4X+)k#7K$-eMLjrZim81VU12?FC;B;U^7^+B!cc3kH4w
zpnFBJre_@4jB|@MMCK0U>f!r6X30*KO?#z~eH9^D7!69bm>;hwRM9U<LTluTl%JR3
z+`ZrB^tOLGEK=UjF9+B*>JP4@=ZePsCY8!oDkvr`y}tT$q^mqcV1*AdZ)Az~)Zb`+
zMji&D^|7W{CftcoS^;Jjhfrz`cgS(Vz!CAYF4kmgKvFFZ4rGRQa%F={H8eZ>!j0It
zSdLlNNBHo?kLX{E{U<gh3{um8nBkZl#2{bVLIi(vET>lvduJGVj2<OvOUGEQ@yCVZ
z{ZAS>&j~*BMDbZ3F8Pd5+?W3adfRz(K<Gh(mQ&^y$e_UcvKFttjS&i<)vf8rV;-Hy
zmfTwOEhBLr_!6-6-=(e|=Uf=nn>+p4>kEKrB%9t3Ac+!xL6Po{kH?>v{KtgylXv_S
z)LTN5!(*sM)oqfqfO-TUj1=v87^uS8>Hnx`U6aheAgwRch<-BxP2BGk5@D>usYyjP
z2u6Qwr}-Wu(J*+&tP+^StMmNtFzD5=d25XNR#Q#ns&Y@Q&Xj~Znf7l^3kd4l7kvWR
zZl}^MZgchI&oD=k=PRbbuI2nw>7V1=?pqW)^~-Ec)5fo%9<J{~qoUXjV~)IQqh9FR
zPdLo=?o%-#cZs-Mkfx7%$%+b&=Hjhr=v={d#Q=osi;M})D$5O;GKMx3^m0G!Iqgah
zAZX(n?dKY7$HLBpNWU903HFKQTv!oz7Peoe$)r`$^?3T}wa8ml!W8OaYpS>Dyms=%
zCfd9tGF5qDwXLO>70TOrQFBTsSsOSJgT5MUE({1UES|`MeDk!?F8`@l{$GDD%m$gi
zEgB(pcSP>yMCf3ka*O)+T63@|@!UK>*wSS7FnaL!|JYt2uC3bmGJ2r1vtpfP*9z&b
zkY_^a`z$Zo5gq&tJD3~4uIUa=K&oGaszaOs;hrlG^@2^BozdvbWm@G=awIR5AI3yj
zo<c#in|XxV!J<Ck#xv<i%@!lswQZ-zhWq7jy!Hmuh1Yl&@KBF0=YxuIz9wK~F|KcL
zZDZ2vYEQw+k}e4k{dYhTcIgGWe*5Z#z;Z}x7r6|clXuVEi`Loqxb>c#9mVi66WHgI
z=Y?~Fg<}NX4za*UVy4~%5$f$cJH_U+&<vr3x3xKwW2jRexh}@uJx?HAyN``>aY}CM
zQo`?`uuQm1Li&N~mHlClVR+9lKW?-8kcG@lujca8vR#yqydbw2Q@YZJ8Sda2wWIXN
z9*r4!IG0Tu>?`*eRV22enUT*xX#bkV1N-X<mflS?vVqNr%~U-$!EVNe;nT#K^n_Sf
zu$>3J$NK=XWzsT6=h^#T6!KCr8S$g}qer|&l|Th-0^CsFZWVOq?YB;W5bsh>EAL24
zxAjCr7EZFt!8c;24rBP^)P^VBu&9nXvN`i4!>^WNGtWp_s|$G%HHJ_d_wX5uwZe*x
z)z#cC-|aX&p41wTi+gTe6?jx3C+T>z91P3!mKxySVYO!}`y6Thh1#(!X0tyCJo}&s
zz^6~s9;1t*+-?If;6k5Y>a7H7%PVXdEdPlG9|D$i?s0vIXm&NjC2Ma#zI6(q>-cLH
zeS>Adx0E_wRK>K)WJDWl_G4TlAq!P1An?dl;S*kMey^@~-OzL;f`3XJ+aKOSg=9Os
z?Umxm9?|&8^5lDt)|C=+Ubi-vF+O`gw=GV}BQv;;2h)mLx;_v-fYGz&$~EhPRRq`#
z;ny2(Jw3<XU!qs^y0{6$t}qPpaM=Yu$VKtr?9J6AX63MxiYlZO!7<T0{P}0}prUf@
z0=k#|JfgP+Ya<L`&}_nnnYfylWY_@i=-#%T-QTv#I_)7_Y~zdDxQ+~z09KrVkH*Vv
zje}pABEL9<-gT4)2R(d@*U&4xW9nw09oRc+t7L^GWNxOQgu6fbv-Vb=GZ0w%Jd*)_
z%J7akPm*1!CG+c;(_Pv9@MXQ`0jI%a0j>UU(Zm7JPBUKreK0!Uy<}+zhWPjhg`uDi
z2Vmf*!!mayY4`$_;xP8(u|z%Ipih{8P`5Zn$6p_3?^=2me>|1u4IR=8aSR_cNA%9z
zL<<+;DHH@K|DuDmHQ*Q@>FpP*S7=tvTzM+IMo2o=Y+99OX+WY3Y-|RU>uC1_aMxm&
zE&?^Iv1K2OvBbml6`V?HAF8}_`$D`Q!yYp_Ar1b{{Oz|=3L}jSx;$ZKVaUcRNcead
zj&9wop!9s4`Uehr6ayE&P{DtvYX6f6TJQt0Nwl#()IU+*#H>K7Y#2gcvU07#1eTu(
zxs(jwuaAkQ0~<sA8+FOyeirMn{X$l%U)(VjTL2fKrv;F~@(3?p_l50Wo8?=b##e7I
zRI5ARMnEdj<*Zwb-9~tO#-~RS3<-Ey_1|>+BH|#1GqNjXJ<!T@1Mj4qs4|aK$J8+H
z){!ERCTM~NAhhx`#f<mO-gxQB30Mev=z|&Xe?HRa&41{?EFWfd0kcM%wUkFj+b}6%
z<Ymev%0TW9cF0?W^3$J7v;>q7$BKlb=9B??E&|Oo>j3KgpC_HCC2Ih&p?-g9VPGS(
zjd@AY`(@8L01&I8D?8%(Qcmi}CVz)#d*DzAGTjSQT)S+%J2Nl*M#+jl+}?}?5YSLA
zT;)zMd`M3N&9bHdi1??7hcTNTs4lDGfJc|TmK++^TV-zg;U<z^40^>_q-^ybDoch-
zB`O?qLVa7dT;CkJq3%8ct=6wCVZWB=W-G$Mfjm6vPu%`DfW<wfHTi5Z)cSa<fdpNJ
zx2uJ9=w3jr=*=>Q`eRyrOUH#(EqALZYKYFe#wJ=a)tC>De}QDU|CJgA=&41ibD7@6
zb4AfIQbD##Zwz9^k3DRGj&<l`SIHT-5j?sJxf-jfQ}H*V1Xb@;2OA=-N%t#qC-Ar(
zZnmSpsnIPfriLSsyJTzFTStQ#wpBJywA1+y3uMQ)=uzVZDD-)lCN@~+fz_w`5^#2w
zwLAZqA+M#cS~<PwC}V1glSqBb4ro&E5C@ZESN<g!f{<TsFhMPg&1P0dR1BGUvJ|S~
z-49VZ4Y05BORL%jH@x97gGgG5tNad1EjhW*SwKOl-k~^PfaH184B3weimvKPJJ)va
zD9AZlpTwe$@EMO;SBU#^QYCOX{Jldnd(jm;5Y6CEe1cc64QnbH#D0gUWU@+(vVx!#
zi%d`yF!!yKkAE=*8!A^#y&>30B__!>TEeYYy4*6wsU43ra`3L1Ra{&!upq(n-};~j
zm9*gwE*i$k?S!T|$*y9I87;27%QGqsNV1JpFqAg#v7Q1B_LX_LslU0Ly!BpB*7d+#
zTU==@7%N*4d|UZPOFiKuKVMyTB+_$s#NRLBZ)O<2B7n8b8AG=$aryv+$3)_#jw+lW
zB$j6iAx++rxHD%uxv+n8Jasms!#UByE?rKENMT+wxI=tOJ^o_8b=IH8Y9wN}C>)Ya
z@}(l><rE?i=zZj?JR8mWC-Q?aH`FU!p3rb@Ee5v-+Y4x+ZB%t<7#i^>p&88Z3xI5y
zpSe7+qHY(9*H4Dq*REwb(nVz!i0pm}B)9x>o+F{J7gR6)-lDB1hsz2bGg@>sKtFwg
z4r6~~Dg*#@7wrg)5u_*+O~-VDA2!3mK;^Dt_lQo+7u?Xi;I+(%(r9o5qx^ucfW1bn
z0X~9FT=&C(G{F*$EBga>o3{D+${GtnI1uiezPLk3<~2Di-v?As|0N%_TJn8ZCyFJ-
z0y6_Rc!<g&L+HF?huznB*b9!hoyp=6Ey%E}m|rvt6V7~O_YkXWvJ6^`C4sp~E*Oba
zG)xx8_A*(i&K;p>PETOBeAGXI`>tWBIJh#uVb?W@0<mLzva1WSMtd1dGlNglRD!O5
zG^kh`#7c-#d~{8#HON3-4yg&>0=0;s?xN*?jv&VW?Q2<yZo;pr=45!>EACLiwD;&1
zjRj5uf0jf@_0*WfzDbZ3u4ZrgPG#O4cdGUCxhnZwHCl^x*B+ST2Q6gYi&i2WVX6pi
z<pPIGj>ty6@hseGMals+Z}O!nq9ils+_obem-ODjYn!xBFoO)B<jA^vB#Pl`TR!3r
z6%>y~++>7jxv@t*fv{R);{G-Ou+jtiF(cZ#qSA$ut4;1WtK(@U;sZAmd7&wJLn^Ke
z!jTph@oK(ctnToEhdO0Foe$Z82VX@Vg0UQ3jU~>)aiZgI)lH`(U-5eb0nWZpZ!~p~
z_ak&@fye9E@B5$+FAG541nOj@3R|m_OL?)l-Tp_)`D*bi3q8MCSoPW25F2`bzt`fL
z;lgV^z$o-JaJ;OW%q~9Ys%e8T%toLXaaL-T2kF|X?B&yN*~7z5^oHqc>K(@yGXk}a
z3q?Z(PKJ7S*$FBqL8W<2;gl_U!5lhmOd7Lhw)+-Q+NG(~oZB)2i?wQ1*Fuw63RPy~
zlpQk%)G#GlKbEj8KoJ?#d_n@CA*IH#0Jag(tJLv@^8=tGK>+O`2XwhVrEjVzg*epL
zqf`1ZO~kO<Wo*)S+tX;l%6@{QfxAAEyA%{m((o);Jh3MlYK;IO+-S*6b}mL-eeS01
zFh8vmUY&JrfDaPzmQ#!$-%?%=$&@T)Q^hu!F%$oV=g)RiW*!_~<r8<80wnj-5OYY^
zuJ?ex>S)mFT-TOWrWuuO{5_k#C9FmT(`Q9v);Of<((o?>3_hUrmS`d=)rJj&&dU>N
zgd@{JP5)KDqT8I0)8yS322n*Z=ui%0`h$YoYUJ^59vmhpY~zs!rgG-uGuc)h0$yi+
z`!Gqh#^T%!8I5+R{<Md-S9LIH7EUk^nBa`7MaPbqCQ`-3MOMtud^9>JQX>^d_54p`
zh5UQTKE9~dZV3Y7DJH(#@t0}M!BxG?p<dM?Jl<+O$J&tl@8ej#+P1f&A5R~TeAa_7
zLGAI3X7V{dlg}^q2M{K9clNjk(*5GKX=HmlS=uP80>ll%uF&7C8)L3l-TPm2m|Fm1
zlsUZ6<g6A>F;t5I;uZtJ-#w8GP9U$o(KQP6&kvaHBUtlwHqc5|whyr_E~(Xre}nPa
zgf-^`GqN)gMW{Ghf~)C<qQuaOdycJ|Qus^%C?QGn1g%wV6&lV{g0|3gH4|9yJojdi
zg{o7a?3I@?PcsbnfheL|9_{n)@9TM}mKS(i#Hk?S#!TgS8`CtI(XV3~n|Ndp3hgMY
zw#0YchD&0!iNV}H-F~zm+BtWS+_Q~H<hE-|+$c4(y)KgVJZmK1Vh?X)r(oI{qD94*
z?(94E#C*AnE>7hA6ff9#z2DI1s%StW4b5wv`^=os(F$@3rulIVF58^k$u2dQ(nn0^
zIsae|_EMx2cEe}AEwI||obinHw58GGqpLUKfGY|u)oj=8_LUriZ28<4Uu5V-_rrDP
zG)@rw4<D5;vZ@?*8{sk6$yr%nWWH1gYHQoZQw&#KXp%(s1wf6uZ{joqqcwKYrQSU`
zEJT=TtR*)k|7vi4?;P%;8^<^5G`9>WbGs3+->Q>=0oMx)V)VG8SZ53{UHk=UD(8}W
zLsn=zh1eViQ<~_D&sL%l5z3G_CgS9{O1sr->%Ew0o!zCaf-Q2-M#8>B6rJ`4{@%R>
zJK`j7_|Z>zMLpe!HDj6m{<_Ju?LcPTi^OcF?MfrHOJfng9oZnuETdsgVb$%jM3>-e
z#2>D7gw+-V4Y0kzWtB6nqy1F^YU~XoD>diIrcwFo)hhH1TvYcqD)=uwm2W5-KZXB}
zIeFQDe>F<5EmMm9kZF3kw624><>r_cO|BO4hbf{r(dxd{(w!<x7P3Qz9+2P`D_^(G
zH!oU(QoO=E(%SMYI<^enljuX|)ke(Vi{Th_meKTU&q&3$FhfT}I;DAD00aMlxV;rH
z_sQ}En7oAPOl~bw2iMPNPXWD+u)i1Yq7MNC#*BZsP%DsGO=m1EERpGGqPGZe(1U~4
z>zgF{C{d5Iau!9Q^gwmfq3w3A7;$UW)H&Cm2?^F9$gMX4c@CI()~&yo<bLv|CHZ`C
zJEkb7O1_6$kdgPnfq&x&tLtrPmwbQLQ`OVxc-u6yZ~g-1;)@52b{9<n_R)k&!p97^
zWoK_Vxb*r!U6PF=#pSI})pWVFmo?KBv)^D%>8{DKKqiReLgbT{R)0^;m~bwG*x_u9
z{>crpQv^b@bX@ewHpJii7YXPr<Cyw*|HkgcQJN(w{(Np8g0(OHbSzW0upRmQX+fzQ
z8{V4(Mfi{;z-esSkz?Qx!Wi0}5%~uV2aK&X$GD*y-g^{$&MUUFZgMwWbRA8KnwBYb
zGvbMYyk|EwPZ-~r%s6&N+B9UnEG&a1f?gKc$XbhxzUL1BOtG~F7fs6lnbP6TG`WG2
z;(>rG!v(xMe3(pQXayfMs}DIQ5b6HlPk-HKTI>BylyAOEGVDY!{<Q~=NXwAqA_+p%
zi(8u8DgTa3ufqRD$BCiW-}&R;b!<NHQ#jYSUm!9HuEQL8dkp){Kl*+XQ3@hlv8R14
zS(IC7_UO>ozUogr5VwJ;8W)~cfxwpQ26m5e@r=fbWb^DBc8K`u&Jc29XRo)PW?v*A
z)VS+m1`1jlN_LN&+RaG$K4$$^eXpDvL3Dsu3hcig;QI5&mPgN%!LwD3ce(c75RMdl
zP$Sk)r2<{j8wt(RPVs_Ag)6FW_AZ4pI0>W+ZDAVMqVnbMPvx_scG#f7J}i(&q>ttX
z`$sdvRM}D^;L*0}_Sn%h(|mVZw^75=EVbr+Fj(((EhxLGGf^98Gw+w7quU@oB|H&v
zAUC2=(@1LHTG19MOK-JK6_x5m9m2U^fiTga`j@a4t}2`YRVUJdvcfyHVgj94tB;z-
z`hL2HX!>kSN8oLA9QZ;gA0Uq!+;*0YJoZPe@Reb!M~)kqs4Lek{jwZ^7Xtu!P~j$T
z#mF7`h(#^?sAwq*!)PeF+fGaWmky7__D-`7UX;6$UUpBr%rk&xjM#-bg44p9N0o>d
zSV+xx>t<Q*(ofMt<WbV6qnT7*PA9A5g;w13CMDL#0!KX*F_FYdS+0tVkj`TSK+r@{
zU{U2``lO88Ak^OF63}?dJP}k!T4YBFC{9|w;x#7BH(TR0!;2LWKDKocZZTZ1<0F_c
z%e;T99t=owcJn=9z0yPB3@8n(K}`4&JbX_cJgqN)+g~-^rGBblJ^u0ur}M3iDHK$(
z(03&Z9=qgUm9g}Id0T^__;wh=-rbX=f#zhhQ2u(V^r(h2w3N4=KOh!1Oxocuj=J_>
zRT*sXr4fPmc`7(wHL_jmD{E)V1T*w?t?S<tBP8La;Z_h5Q-9FKW$ER1>l9Y6XktCe
z)MDOrzKJE`wwrlD)o1kgk1KkM*|{l<`m8KSvIZ;SapX2>tIL?BCu;6YK15OBzQkjX
z*Rl!;i*0Ql8UwAUd;w<yb_bC<P_l@<-;=x2nLS3|`F3WELM#*Bu>Tf<WD6J$FphsH
z9i}tDx?1xWSgKve1~Ir34GENTX%oX5p#voZ@`x6#4Gc>z{V>jk7NX{lv+~9Rj_7IA
zzoP4?!)u`lb5trOWQ`rMgv$MVhxDw8D?t?nwd&uP32gyrs%Z?1sa;ggHOH{g@t?#p
zFZ-JpqlVCCe2EYx#);2ZB}OV6Y*>E}f+VL;Y`t@r5?<Gt=bYt{)mrVRcv**;p5=do
z$y@Q3Y69=2iI%SD-0I&_D{&(21R+wyXGPf_4a~$5>Gn*T4sT*zu$|~_-67>jbVS!!
z&Dn72X+q;pGS>u7_M8;D0RKM#z^>KzG7++9wcixHQZJ$10BrZn8|re;Mr#vTy<8DF
z+@NI(b{%c@hM@0eazTuZ@dURqDwp3S2U9>{r`4bwFzmtu=8(FJpATDmi~p--iiE$B
z^kq=hOdL^h{f7o%cu9Y^dHYGNzURkzKEloqy~e*%AD&BGV_e39m<gHO=4t3(jnB_L
ziMm21&N$OqE*&v%Duar3{7h#RC3l3m*3lhL0u7Z^zA&+7hI-S=BY=beIE<=AUDQ+1
zg()pxQ7X6!;FzyC%y<zIqa$#Nf#q{0>PjboU`JXla2N1XeGekCWeS;xM0QHta~k<P
zVPB3h9efXr#K{;qsGL4m<YhvZv1@MW1V4BOmZ3%<^L=^>R7M@{!JWY(X)PhTlQwhf
z-fHg#Heg1FLJ{^{>{!K9nqCD+itIA6;t9s(n6!j;*;--v<RIu5!(1T<rlktTT$wc-
z&*~vGm8I(j*06<UJA)z%9BKvIr2Lk^1Vp$bis9!cna=C{gDbsswg-NHs6y>@0Jh-Y
z{Y~mGTz=La4=Lcat#b^0$i}5o?NX{?J`sudY|TH~2;tS&=-pMDGWLPu(3^-2c~GB)
zRTdVq_7!Ek)|mOi2M_SGevrU(T3_{Gnj%va4(TGTk>DXaLAaSby_p^Njs&B&5e>k6
zK7io4>@)gleWO(Vs?QonD%ty8*Bpz?<+=o`Dzut5@-jY}y`;ao8&$!j=nANJ7aZ#~
zUd(Fge`OX$Ocf50^@BBxxdazjuGDfi_QbM|rD|_H_G24(D>h(VaAHfsgOF(qYV6mm
z`FtkNuyRo8&Z^es=0t)5vPMTI+Iwj|=HG$V+Vm#f`!p12pibl*?e5C?3X21rZr|(R
zA?smDp|vh7vQrgy^I_jC!hpa=>M-!7vx@8uW?+Lq65-zn`PSWm6r(wX{MePc>|+54
zYd)v!YGUm??15*=46O2XF0PB(rX@_}fuzPIFz3^G;nD;6m7JU}Pgp=(4|ruw;cjaw
z9VOz|#bM~S(d7F&LGX4sHV4TE$T39}O)4<a!WR*1bDEQ4`as*P6XKl$=7HDV)$#_)
zD0Z8VD3)D0h_y8F&$4OO@8l45^dY?*)%{i*%LmYj!Jc}r54Lw197T#@Wr}QC`kxLU
zPTd-t<$CAP9uz7&DNI<`uz()`quLw0p@QnNt3CAL=;3b*ra<R1{O>M}a=A5#igfUG
zLnfw$J`KT1ThM(;qwyS%q@Xfbm0}^C1bw=lsIu-za6MtlTvKdBA8WG{<Z00jD2LW}
z2@aC-GEOZOLd`hqO0VWOJKW*X`!Zx7!)};MFF#_;$9=pe)s$q~r>t*Ep4>fwJ%*9k
zkVl9$f9B<0=YEUPykcMr+~BCo1-)lxQ7*Mt|9TJ*EjVBtDmQ?y@Nh+u9iY<}MD8Q&
zsDO|JZ1O!{+<*9%+}0to&SFaM)}KXXtAB1CVX2!C56Q21!4Wq419WiVo#7jY`CrHx
z>(79rkR}Daj>Gyzr@-FLB>9||{}fYJ?dnQkj=NORWd78@+M}%}OF@{qddbai43y5>
zMbkATvFzrQT?qR7>sBHPGs_PbHY7>)_3=hmOGQJ@>dTFhRlyk4D}p@Z!_#<}DO<OM
z)lUlaF8L!iB5}INv1hr8iR;UuK+FKHCJ{{D0IXDWla~{$)_>uLl)nqn(`~PI_sMi<
z=B^GFTU^`kgdFDaEDAvP?9N~atpLv3lUpbnuY6O_Yr62R87UV(2MSm*cei)@FK~F#
zMC_$V_jE`_{gh&nD%?&i-8eX^%X*>!@*6Jm>{C>N2#gXam`xF6%oFlovDuwKf0Wwg
z2>*VJqt81r9YJcZTjNY&EK}jUfG#%gmes<TwMDK^TT3@_tJn^A4UW})Dw72e(J;sG
zJYmELVg%hk?<`Ze>R2qc<P7M@guSAQ`P_+3)5+R#qs77<Yt&Ez+cdcc)5kC?bSdbk
zZmQM-9-)}b%rEXJ(TLG%!TW624D3>x&2pX3I8QEsmclNLwM2YmRh!-vOH8Sltxo#D
zHdtVYWKF&<^D?eWOJIkFy$rUBw_JN_V@AhA<Q0xWRp~_6%vfEIK4!nE`vS^o*cIDS
z9M!9BRTsk)VLkFtG`z)dF;ne#H2ZPhEcw{GX39Sf>HekK%~>+n2VAK{_ts8Vn3EC3
zm5Z`jE3KpR<UAi*6dm3GewLF{Xd`%n5WI-Ps3i(Hz(;j5)#?KmVYUz#>k##`wzK09
zUOLWti(~Y8F@W$h6+DI@4=cFXb>-ozf`K#{P5ls2`tda<a$R#`t$Mm=^47SRBO2`#
z`pk}8o?2fyL*>{<dG!bjI8NcBzM4$1m#PHP`gA0w#NSY0#^=Dgw?>4vLMC7#{sDGh
zV9Yhs<UxO61%2Ksq+fv8{7v{g<Z>cdu5Ej{2unRWbUS%5--Y4!Itgzo>oIL2StE{D
zq0}FAUBOQP^{cSU=44^m7VY`{DWc~wxIDP*=<I8!rfwVZ=lUFD<xr*4F`WBnBt~m$
zRxogn@dAzWpcskZZQ2z}5L{O1BwjPYjCdqz38?{*-ITxY`sr(sfbDw<ule(9B#qTp
zNWl<P$LY9790s{gWg@|2EBf^}WHl6=3(6VFvjt;xexe|Jxy;~^L+b2CCf-hFq{t`L
zy9n<oimWI(Kdvniq~>&9;dp#TnrBZN``0SuHu#xTBQ4{oP@Ul1C>umD!il+{nmoBX
zL??K0^2^W1iEs&o01s1NHaNYm<W5YN!Ntv{LmU45t|xwdj4c8`AF0$?>p<;$8jDYP
z2JvaXvEaIkNI00J?2Qze3t5%ze*wA8SoR1wg~>5l0En3mF7h+oBRdr?0#5V0Q1joH
z;7`f`6RJiWq-{cvGllVPqlDTmoQ|PJl6-v?MbhGnp@xrXp^uJ!JOz#NHSm9t6?}cN
zzh%0h6Ei_`P)|DOdKz9ZD|a=G_qS$Qr{uenHeKcHahbrDi#fo3&zB;B(k!Y>b`6L|
z$0*(!9Vuj|W1~Q*^x>M3$WEFOz+&PDHHQ#X9O1wQYN|Bc9CFCZcigVIlxv5PYsIG9
z&<(pvvr*PiWG>cZe8;AZ87~$hh{QY%Vb1{;R1PGf0+PRRKa|Lrhkdz*wh(Xa7NhLU
zGTRvv%9l}Hd|R>8fMeLiqtvkxd+Y&jjn-#72v}NPo95PWBK7fuHaomVb~|>S86m#0
zK}aL<#r5{pZc>l-Sa-is{*)18c%317=gk)OvRZ6}>I9Vn*8TbXAe?^7sdPM%M{Q0i
z;fyb#OC(4GzTJURtOPncd>1US8*Pv0p;O!1g?ahBe3+9sXd~%u!#pRr>P0#Mior%)
zpxEolsc&zE4F@WI@mN5h+H*v#Okov7`U>rW?lmNeDI|5&iP12A?ez|f1lllaa63C>
z<TQht#6H~Mu{4T;#Ke^mM-jB!UtM~=<_JezdIoPD_qbuzZMD8Z!9e^kom#1}jPnvn
z*ta&@CA6uHEpkAAJ#o3WDXDompV|~A?<}jxdN1mfGEmuDRj3sv^mtq(C@Fq|msVIE
zMaF>u2p3S9C|53hz>rnpd79}mOPJ_=Ux$mDU1$#@!ScJlalws5;v-)0BJh9B_XHt4
z6VCAF^lY%)OM`mh{f(rfpXX!iLX$?MbyQO&`x4LmRIhjwu9|Doj{xq`p5hLB{gCB9
z7AZh#M*u<NjCbsx>2ghS*5(1zXwIkuY%Mc?to)}9;KgP;MU5`v4ki;Ut?NT;bRRJL
zbIKF~;dot8^A2#Hn9EX_H#0iRWqU*}L4AUO`q*8_w0HR(cUA7nVJb{nQuf~@xH$lR
zDgcQ&`Q2Qpg=f8%-@sN)X5>mRuMcH6!cHnmCQ-)e3`?_J9$T6m#z*EzGExF^@;e>f
zJxg6Gkl8v)gJzTkE3~hSEx<*1v2SGJf-mP7QP%4M0bb7@vmPx!tXOm)aI{pJD!4EV
zdw4k^veY9n7VP0wn$O1sm6{=jYKfwj&vkVPRS*H$1qwxkk&M_LF3oECo)XJtR*PYR
zZM^6AOLc~>R2<%latA*5&KD&BxCQx^%77DEFd!E_FAKL?4iU;yjV1<Us#Gh23H1Hq
zl`7u9DE3jF`;khk6K+<Nh1e4}ojTftn41msyl!F@LCn{#$m&Jyu?gf^SHtR{zXm?i
z(i9Wum>Q8AY5_cuxPR1ZqPPIqIg}^WXNNM}PqAp&dQ3sCh88`y-|8q9=Lf>4#^tZX
zOXlekz7*=;-{_igiPX@=QiY`!s*HYxckKP@BupUXaI!JpCA8xf3B{*-@TzE%?^9!C
z&O3kys?`Hjgo_P<Yc_{JuEESM8a4_-o;#-Nv`l?g+A>fKDKQ`Qo(uP%{i6FS2$HIP
z5Fl{2(I48)R%0m^QP=sNCpbi`)ul(5k3$5CGd;~B*Ty7_AgtnMwBlXjreEu6>|}Ne
zQ94nGo+P!$&iC;FPzg~HFbAH>WS}kaL)(!w-U2V*5k-uOBz1!IZSDzoXiAxf*2zM8
zhNqx$2iqt0*kS5PxJ(C7SX=Q;Gy7{oNQW1s+!e`&i*ma)`gP>FzFky@KBQ2Ib9tu2
zRhbWuczRdZ>ZZE?vvGNiHPs|Mt#h3W&3|&DdT6A`6$74Nr2|?CN-pQ^2h&rO8E02R
zbx$8u4k)Wr1Gtmb(2Vn+x>kM)P^`^jYY=Dp_|rUK5^@|<2%M+9nEW7_uoom(jip1|
zR+$1{%kXgLEepaMDqegb2t|uj-~_Mzfuwc)a*gWicrTev(D-}~$B+Mb<@6=PgCpD&
zS<h83Wd#8Zh75Ses$tC3sg_K9en~dvlVlO3-$)_?$VcGx&n`(nz$0<!J23Wm2CyxW
zB?jrfpEHu4ezOq=;6($fZr`9Us9&0}Vzja{ue{=aa-4fT4@Qc;_tmCYV(P8*bV7bg
znc;~7<>xf41A&S>!%xVg{{=zI2<scyinCaw0dr*zfle>{HPPJUZW~B}v|s>kLr2Cu
zXwaI1<qQkDHhqpFVVuHO97UzM=P-cZ?GKJ}?=!@XqH`!5bWYo@(Hjt-ef|WmtDF#z
zjtV#eFG>$(rr5RJz8(r@>$l>qJ-gnguBjA^4w}l$0A`+7k-D?XxNbu|JhL(}p~F~X
z{Y%<S(0p!I6t93N$bH1zv{wdffuB1@%`{Eu7D>kcrT{G$fY}a^*DU<Dl<|gQyo+15
z7^BF2jWP<p%;d*F&W%pw811qm=t#Iy_r9$Nu+aaiHv^#Ut-^P7S_n&m+L;W^PC)zW
z(2annI{jX0w}#lrGLNBHV*aJusTdb6XK!aRA}4RKQ&B+O0Z&Tp2@e_`MW2YV`zUDv
zyvYRg?)bZfGZbFIWaps`<S)xGBD2=B4~>qG165;9^#VF<gR<(L=;?N_C}I!lAS%hg
znhpt8l9*BZ@#UJgFuvi<e+SXzfsj1jl0yl`*gkiVrV6|+7l;1+w<=V#jinLQ{_VqE
zG8y;YL3xVOFb6~9YKssmkl#>>6<g5EoV6ABWjK$$fLapJR3sc-^gD3tdvG=gwqJ7?
zy)U-86jqtsfOsW3d^-RQZh4A){{cpeF40-ry!W%uN`>c~P}NI!C7`Epl{vfFr&J>O
zs%6YzNwf_51MITZ8&oA@yuP)dJOGm+0(Lx;OfxB*ho4Jn_1~9U&f*W3teZk<({t(D
zy0fI(=p$sH*2nVtJ`}1_tTB{9Z!C+=wf(V;d2$60gNIzTOqfF2#7aTL0|XdtNEp27
zEZKPoI=fp~9b`RiwUZ#3i4>4&w7pvN9@H@toN%iuP}&mawLMQVb)8ZvjKtE)!d&{p
zoFff$KbDf=LO$(4aovpoJqh!@acYMI5txXiJ{O3~OGbuGgaXq;)MMj|JCl*GO9S@e
zv*%3J8H{}l6<(9ut&lD$Lv&GiPRgUCC7Uuyff_h|t~W1YHl044XSl@X;8Q(8;xHNb
z(I^w;CoG=6<uHJKBe|G60$uofXwIVQT&L+ajs#0~OH_IjACqht^Z{E2RiO<KqtXIo
z@z{5o$T!7+=k{&S5QjMHdZT2!$vZlSX{CPW6J%Yw3*u$tr}f`;;i@LBX>mcm&$!%K
zlK~Fd<fxevAsyGmL`XF`bFJNs6NQ>cD-Ah?oGE;#k6atJ;Q*O0AOkDUZ#a$jjc2#k
z$#Z<X8299Xk5KjGS+aLym|1u-giYY@+kPw)Dk;l?Fs)KK!San8L^?K1jtq?SL|UKq
zp>RXc8ai!|<ZSALE46=a;Zb}p<M!#16Ro-0Tm<Yd%YQmbXciDlM;i{?kw>Q1%4Ykp
zIh&uPc>>E`#=U6<lUJ2cCvSFIl<dOY`f{bx{YKp4BEZcp<&^2lpX5TD2`LU&>?egv
zqc7i_Oc_6}_DzqCXI6*lP6GNcMD6j@$)!Cx2&a*HcHn9YCKz!EI5R7nkCh}QLCuO;
zOrMJh|6Y=*6C^gB@g#{p9Vqc7g)~qm&i;)f5Dt!t9X<%UN7ov_v(@8`nN+9J-3|O@
z%{=S5c9eBtb=nbW@0Uu_6cREBHHDzzgCF*wzp(b*ivu`n)8bzgRY_US&AC?J&SYNU
zo7yt;#VfEjk2+#92m7aXi7CP5W6MpZKqlO&il^)X|C$Tb3#xkHQ;oFUuvF7-{I%go
zgIMgAf|8v76+BJl<g_}lWl$u!!`2xj7I{kZs5w~CbwdB2ANb++#M-dn&T|UFQSnIq
z<HQF`;dp}%sm6v3e-zTVI(DOfP~bnkb4NT%BiO{jIm{sAI*P@Jez6<+EMT<RvwuDn
zkR!?rMdeDN-$H`I-Z+z*-JZ+zjIRkqoVN*i%PmHFSh2=`f2ru08fKN}28yQ^vg1KH
z2h&PeK~`lsMh+&)J!h{G?!}QA$^5`+Xo5lOO62n&RH$xl2U*tAPIjmBZx7myGJkk2
zPKVjR`=@NQF-abQq4teC#hu3X8rQ1g`U;6(_`#01eYLy3u~M_Bkm7U-l~NcU|CP>y
z4U^{y+K0Q@#d4o}ih_#MuIRZmTGL}P{*K8T$wceoXOd7Dd8k@#?pQ~5@}5O^%(wsL
zcYaDiPtFhXIjr{V^;IVm0mn_cuflZP%@8SAXmJWtMc+1g0>3`q_W|o0v6smsWKmpe
zjOfDoACiH?n;{O$rK?Z1<eQT}lTq&WlBkB?(CZYGE9|mHuP)k29TFiGFH(O7$F6sX
z<TB<sX_PE%jBXluWmhn(JNMdMOAG}gAiu1Xj>{O%N{Q2#n;h?sPC45DkE)try4)4i
zi}*^|{vM8>-?FeNEDKYx!`D<WlbN!cCYk<8+x1z+OXdBuqdSwFf=Pra_U%(uC36N_
zrn0Q2R~>&$1@=mqCb!n>$3vWnMjTnVyvNab>O4B5<CrAK?bUFSqWbEVvX_j<Ns?E_
z<-EYI*wG;eM^KcSD&3W>aZlK$uiu9C>`0HRP$__Aab`U`vh#LzK6vX8Nq`U_AMW+J
zo96<v?QKn1mKd?XwI%nHxFn5Q!vC$56uK6Cw7k`k$9A#3%BgVhQ!#a`$HS|VZSP4o
z%<>B~iOun6wCHrFVA>ol0WLCMl&y}`tv}&r{1%#sF|j4FP?kWnd5>i0V<pn&V0(F0
zk(IC1_61CaJ0dxZy$@k#VG^y!&Zyz_l^^I*Qp^#(l?jerBp@}7BCEh}gtU1NY|>~p
z1tos2mk2wDi;PlNbP<Y#HG#Y-B@hNLu0ww#i7<aoL=MO-nm2!TROztfYWpk#JWpHj
zD=@d}N#>3GNq$q^seQ|2xLr`~@+O1IQEjYouuQ&hga=uW<;JjF2n8Hy7YjIr#xvQm
zT9+F|h{h@1?_bkER&Rymqvcb%3PmDI$<y_rqQzK=PezUA`pg6qtmo7O*ep>#{jB;%
zs%qsqIG(;1igQK9u>3+O?xv74d4QesVFbNRIJFXeLFV%5B0hJRYJ7Q0uDU~&auw=M
z*+o$zP$Xb%4<WgX3lIp$5=6uOI}eX+vEk7_&JAKgd)CprK8WhOxLmMLGgnn17>43F
z9t*qFje1`9`=hr&Z|DU|0uVu*PoYco6L%({nFtaMq{QDQer>cKLa)z1f#{%iNX5j3
zhN?bHtq8sSY#}tr6?XE9N$BI~kg(mAJXOU2{15vEL6ADjkI)OR*v{6(yz9I|{|LQg
zRo1>|sV70!?JK$=rqo%c4ITLXj(spKxfGo4r%F<%7cwTL{kncO)k&b&?lOLhiH3_@
z(|JO_1iH94MsXc4U^HjDK#;COxhC&jHu$v)eRzQ_8)3T#f>;;U6*x`K)$EDvA&5dX
zv!N2dpB^c54q~Vpni+tE;GuRW)Pz;cr1iGP!33$uuID1T8Si&bI^<NLvrv?Hd51<H
zINa+Pe_lppF7~R6*=_5KF=FpnJY2(meAL$QLwpDmf+qZ&u(sbi3*HH<m1AXfJoBxW
zxT6839wzp<08_Oie-D&?vD?=Lc&^Bvdgie(Ol%|50b<5sQU>U;1{rhQ*bEt|Gnr@)
z39c>Y>DYS13=^oMGUEFj58P{A)P@p%NBi7`o~%;E*iMHeTUy)Jh_EW3r_{mgS=~d4
zLt}2}W=&r)!AJ3@rn|ykP2>9-`6sdP2?qYqo=p?|*V>Gx8ZkH2`@@N@YKAY+4swoL
zgGiS>4r5Ner}O+l_#CKZMp~G*As0EZHtBX1@NU#aE!`4Z)|KjehcS-(JKEXSMt*tu
zmu_2vHb+ieUJvLv=SnvTbt!-N2t}Mg=*E_s9(iaMZ4^;1@yg2cSxmLCon_=3ku)95
zz@J?XpscqiyhF1yXQ{KmFJAfgO^ec>hGre>ogIMv6$_u%T0&68z7LfHbyt>x9)&(m
z+T$K;<KN1%i1_&?%XdZ=xC7VM(O>uIYrj;j;32X(P#DC?6SWvI&Oh?3l74-mPFqAZ
zc70(HVUv&UheZb+4s}y)JX}(+a@DS#XmhXrATBc7*NHu}Cg0C30y&q2#XWSn=xPu7
z)t0n>EvZV}o$iQb{>}w&{(KmPWvf{q{7cMdRjCZR_K{u804Z5iH3?mC|06A4iRMZ5
z&UHXN(sMWI#L<J@Rk)JT&0`;4*}pO33==bla%wWHX9nTym{Mpl@$P+jS6m&C_VYKM
z2au3aU?vjP+&<_068=bvrq+DPzi!u|-w`@ZQQPK0Z}u{qY}xv+xiq*RK=w;Y8Xm@M
z)CSe^V8kO%9jL~RGr`yEaZ>F&E*O}d$=?x#gE_JGZ;$2Bq$&d8A%+Fq)VFjYQy$~+
za+7-VJHIu{S&uh1F>>hhPJA>UmyEzhG_m(xR5RnvK`fHBH9O<cV^UbzT8{6)*3#x*
zo|!3(uuoIz?Z((?OUWYb17%uz_uonf)DPx*-kg(psB=sx7IG+tkvK-HRGr-w+C1o~
zgvMq9O>ZbG7Cxzp)}=H@R>zSdleQe$t?5iTzVxcb{Hq#RCxmMFOn1@x6^mwb{Po4D
z0rkaYP<c!;+?%lb)U=Rjylvq8g9Vn~UCdtYZt@}UQSaxPUX=CBPJX5GhTs_j!yNa)
zf4H@=Dc7n3qWJrZZ4>e3yV9pWn@C9zjRyDF=nyeUEB0EmysKdzEZ^*s7cyP1{i(r6
z2+@Taw?&xqky!@4uk1baYkeS|t1sO%p<7wv-?<oVQ{X9Ko}USSuWC7#utZy~wE-R6
z^IxJU?M!zKWsG%VWx$>Cu?m}D<lJTyiYGcYJioJ#dD%<yAFRtF?D#<L`5o;IHj)yv
zJc^>oV=d=IB)1{TlwrTBR=?bap9i*0lfC9%i1DB_u`gfAxj3K59u`d&xids($kaFs
zz>-cK0Oql`VqlW#mdF#3Z}jtgrkwNPh(LY>p3V;4DKuR5D{#%;c*>1Es82l|ygKR*
zgR>TNT(*y=4Id4K#<It&Fdm_^Bvd4T+TG{Ay!?zL<f5Nf2>;0x!~&x-i><ZrU<Ff$
z&G)2{mhmSrC5|>SlJ=i_<vA^%mzc)3vVQC$!zyFOw01eAN&Rs+MkEM;G;5{-L?CL^
z#U!c4fx&O$G)j+i2{L#$Q!|1_%$PvVpu~S=^ZTXK)xq<?5~ih%+S-Q59tyXO6u8zR
z2D5F7Xa3PYv}OUjgx{va2SDlsX{)(d2Z3pM?`Plnm<B&gW)OP8!u~p@H-zs7YF&+b
z;Swf&ow68HJmKF+z5O}Bv{E!?87~{V_e{T_n$>dDys~#bbo;YqkyF&^fb?4;F4coD
zr(#9Q8YSt<;QY6_P)iRRb|K=P9f!*-m~8M%_h}QQH5@xE7r6<H8WbZ`u-ZX!6`W~f
z=fklff`cJ)t9Trc+AdmOhy~<J9v8NZ0EHmY$#>fIcPyyzeh`F@?>(u5NmlxowV_MD
zU#TRlQ1K0<SN8sTOQY$1P0ed-16Cr@{k^8jhIy&5j+WhDugX21(Fc<quk|et$u246
zF6H!vqFxBEOnCy7J6EKVD&d$NKpnmzLAC*+M8S`Vb|<%<peYWuZE4wp#VHPZ33O64
zT;l@#xy5Y>ZJX$N@0~!PaQFCbjB_-=$oVM(5=r0iRSCX4x^NE%W+4uv8~R%2OEE|N
zf+{@doip0;5zY<z{r5r@WlXE~C*7GLX^OTb(^iEpzP?&}y<RAz9ry9CObChS`WmnT
zeW~M}&z{F*zf_U5t1oyL+2`!5G_t6nvNh#LU=HPPey0NPU>AnbO$@PJ3PER?qnx%S
zjC@Q8e4>D;$n%-#G>F}$MBN?glhpX{6*{$b{6k-xtWdoQdwaMyl{T&om|;WB!Tw@8
z4&+)NdRrB2G+r=C21eI=sT?cTF5!+w5UZib<OY|>yPcOwFivFA|B2|PUw5!!^e-uA
z?$f_PE<S(&Pw;Ksz0gEIT?G+%&+-!;IO=dqd5&j*UuwcpotAm`hS759y;Ya|P)1<t
zJ1<_ZM{6GPJ1uU7?=eh<Lt=)ydodcHfzF4soAEbFDrwh@C-x`Qa9L$bQsGRYfm&Z2
zl;?c!0Kk*qxClYzwqUStJ0*tBdR|&iA~3P2QM3seLBZgMv1i!CkHIq?jsq@8hXtvH
zEFA>IN#v=?Jd1I+02Ags%^N_1^T?K3>S}b*&8B1)plm@jMqM>Z1cWn~u9?A?aMrA%
zqrOkT3OkD>M=G21<0{Pb5m1Tr|AbO)jl(xfz2|nPw!@K_0v*5v8vQ8p1Pm$@2#TJi
zp;M;yvMI=I8JKR8VAw8~q6B|1#G_Bm4Q{i#liSXJ^AW@8Q*D^oT@LPmiGbhWH?j3!
zMFhDhY9i%q`}?8dw^f?7qiK6-NC91jhPdha8B*d1Dc;W-p<m^Gv^PVp*N5vvk;tiX
z<1<>|>A9mj8v=j^Slr{$+fylB%ZAh{TV61&nIP+T9P7L1o*>KFoEY#9zL<k&hXw=j
zDRmX4N;c{02KzQ?nc1kdx^mU^4_prHh=NV`1^{>?NC7SZGb~3NVkkiv0$;lfRyMga
zaTtvvXxOl5`~LI{iSQjsQ)T|^AW_c<Iy8}loUKxjBj;xy<fh}pmxJpoR=)t-pGRRp
z({)%-03VTApSQNZo*A7|)cdY<^a%D(?b(uC^o5mkz-0Qx-|v{i<?g!xHc%MZD6a{h
zUvQbq4V!7xN!xBGv6E9_LPL)|lkE0>U8DwlEHg?`n^Zs?N;CngIFYg&Z{%8P(7LBo
z9QiN&kq0$TMCAw%cq+uCPvv170~UaRN0e`Nt1FCM3926|@)NZ$c`L&iKiYBc&l}-{
z+_MGdeLNJxWYR+UBEE2t7fFkFee;L>#*)5zHYerK?#=utRea6Z(#23=woL_VFV*-%
zyy(4!>BQa)I|Sb%@Qs2ragO`&1lieXKGGFx;)fBJ^|@~=IK?Wh28d`Ad3oUSKAYlB
zsPs@j$>$GR1(*~Y^rt*IUE6|rv`QdUJI@_z@agPB?+H)6Z@_I%0pY6iW{jE+!U#V}
z<gK;2$KFpl_t=^a;ypA3LgRM%-Xb&Ha>OFbl&PvDSsy%n5x&~Q{NEGo@ZLv0n=$g@
zuC%w)FoJJv)2<S`>CKEOkH^m%HNXTs#&Zt~3aZHss~RPQaSam%Z_s4`Y(#PI27nUA
zb}^j{2pJ2rbi=*fhT1UbN}Pu0!;e+|p=xDUsqeLpD|II=cg(bH?Rp8cUDgp#R1<=k
z5GF1_H4Nbv*$lSY&=6~kfjMH`m2$G5x8>J{&<+}GQJo^iBWn48^Bckb=-PSgF($x;
zZgV%AZ&%UU2=ihQukv<Kxzb!(VHf$JtSu<K1k}lwlmI34J)er)hb}=~xCGPk`QQb4
z>Pqw{ga~E@xH|~x$>@5L>P1BJOGmI#73xMip!EhojH#e`Vp}7Bey7B0-a#jjSx`-_
zp{#)aBz9U%wXdJtUW;Njq|yICLQ#J5NJ}ArxlAY3x#MKMQT2XfFeep$#?PjgU6Ivc
z{)>*q*O!EY-La<>PrSV5w7%J|^(*N)0oaPeW(Y0xWCON`lb*3<4Tpfqxt~WmwQ%I?
z4^6}E^196`@6*`<YK)WV)QJiwx8`$K4HXHOfo2}O`8f=cRKqK`CX%x}w%}>lDzbpE
zYR17#R2_R&`0Y-7#!bDF&$WHnW9$!f?_UUlr+(R093fv<-R!SNAS~4t-uux8*c!-9
z)auEgF4@S&1|J=s%>T|UfOZod649y1gBHu#x;%I2T1DD32O~lFtjPhU7bvF3EWEC7
z+sR0}wne;j*W9|cEud|?#j7zdQ5Rfc<ZS41pO7LX$j@PRgPO#b=)<af3nN>BXqSPH
zmVK+Mvw!Rzld#CPJ=>z*c7kAT6>uFkMIzy3c{$|hF4FH6OS9Jmnm+B+!gy>;HoAN4
z=Wz~pWN&QNJ;o=TjrmS(dL`^3%2rjS#1|AWVF<7}snp3QS;|yTP24d(4PEdU@IT=P
z55)xG*C}YkdWli&%iWa#Iws2;d7WeHPM2!R(SC}(#%S@5s8xmy4wFTaPsAj|ANfW<
zN{C;1z729#d>*KU=FXOCB~W6qULVgK)cOlc<@(bd-LUI)_=3R)4yWs0srBwBKZrU6
z(cUWFks!T0xUzSl3zS8QD#knVYz1rrEhOT!y)2`Y|JjFOiYpnd1I;6_W$0nKmMm+h
ziFwovu1q5Q#-jD<6E|OToJLuG&oZE0H@O6{hP-CP#^#gnj}|rV#(>8`@*+iZ2%;<%
zp$BMq+C;Gi7vo1x=4<AB5}%HKoLkaeeMk^%V*j<Oi&LhGPZnXd<XDy!iaxa4%0V)P
zNBfRY&HlrJml}JP$a#hIepn;2czFMsl^n2=c{2r<y3h}+nY8<<eM6H-wdC5DTlKCV
z&Wl~KrsB8ums-{Vq`wYf_(-t`l#&T3ec)i1qxa0oSPlA9AcgNAq*2;7wrrIj?E#N}
zH=~?tGGiE6>?naEgFkM(C$vh_GI-~9%vxQcY-9M1Y&Ze_Qj(gevoR{HIkFvy^j^Qh
zRLsaEoDB@OpfGV5MaTVnZ?10&nr5G(X{6Y5&SyRVRwN^Gw*N==3EA+<sU@R(0CWK&
zkUzKK+k~gsV23<`>Vu0Z=(Dcnpj49ZR*YsdluACvYQq8I1_ahHHXXdi#mbFSU`WJu
zsXIZ^k1Ur_%amkzP$r$sWB^F_cxpPww&%(p(^KIZ%s<Twsdcz+|54#pN}KF;Ov0n1
zUb$n?8j(vw`+=%)4H7!dR6;p4<GO3OmGhA39d2cqn>PxpDKh>$r@w@Y;=zxR*v-d3
z8%*r{zK(!O0h{)=Lsx=H_`G4e+MG_mr^E_zuX~mZXj^Nwbw>5K!?}uqD-wQ)7w!_e
zEepy|2?amnb_NbSKIE^B^?%0A=FFM1xi=NT4amLKE#zR(6zxu){20sEGl|gf1m9<h
zD_(eR;+}iUH}r*fR%#OL+szz$oRDVYjn}Q^Z$sJ$=%>VIXgZ#CWE^nH#cIhp7b)hv
zZ!xs32s=vsLpDvUneu5%ee%89x*rElXu&id*@^L|58f}A0K?mB*_hiBA<W*K;1J!!
ze$FH$n<npU;rP-q@zLk!rAA%L^wo;>3C!Kt&cxCpsx_A9&0k+ck%(G0#SzDzc8zM#
z#hwid8^M_9nB<`jR`|RBc*P_?OgGywXXuZ9geft(Ti}h5f-J+ih-C3`%St3tA+%X+
z;gCFT+Z<?e^$C$Hv|>Z_7uHU&>YoiUh8Yy2FC*R?pv+Cq{|HJ1Zw;__l2-`sE-Qo!
z68L;BaKz0fqXyHTg)`CX$#vYn?>u>dRy>zu!%RHYMND#-uabj`DIR`n&8jvZi+#mp
zC;lud?Os<^ZR~O|W!@^`%Whan1>k9EyKlK@+oD)hz7|vTIhc^~w#&<o8ehI03-*#?
zs(b{#akZJoiv<tAmDa#-d)>h+g)7BjcwEKrTLGEh4BOf}<%QaF7zfel(Z;j)*`}9-
z)+jaSfS+WxF;^JiAf2r+QPw724&Io;f+<PHY9BsbG%%+*Dci0_2DuHBu+#MbzQ*0B
zwc8{d*7zfnBfE*=c)YYF?ArD2>?4+<H|x!JBwhY3R;fvRp!)W(7uofi<m4Yv6#o%|
zITM=PH;33Por*son+V9M*G`fhJXu#iUq`gt!!9?7{r4<(0EHP{AOS*K%_G2IG22vh
zXNW>HDc?;t{o+Vtc09*|FcX$%UK3TVtA3s}`aZ2)=Xnm^dBE6oz?*iB3cVRY@en-$
zd&JsoE?U`^jq?@k#MWQHFUvj;Z{svL^4G5=3oRF1gu6#<Jq)lg`{_E^tnI{dUWEI^
zG2@C4a&>V)R3WbMyA~*2V2Pt%%@=CRFZ{PCOO}d@6ZG3g%oMU|A+P*SX3K<)2OxMN
zjCOP{m2yu$T}8Q&2-D7iO~9(Uy_1?*pe5_pepb3D^BRE3Y&+O5bHw&aZhjU;vX&{D
z9g^2h+pUzz*q#mj|4R-vRU#kH&<sfLaF20U9vmaCrowa%>QXfliR=AsBOEfU0$YMS
zV7AkNWkE~hk>pg0DL1$AtrIl6lbi!yzzsD}bN>n)8E{9epEr`QWAX}Cn6RSa5Sd8e
zt#cj@-E!lXh*AFHsHpd=dYw4~z~OWe{9Ss!NshaJJG9qZUvA3*r8c&{Puqt=!b4?4
zZg<721;Cy^YtyIqzyPPaC8N)6{6JHZI&&`stLEePBQa!D`I}9C$y?{xoxvn{gB}wT
zK$RDTU3ZQ9&KMkOhZ-afaIxFzXQ=U={*;c<Yj55Ecn;@c8)M;=Sui+BZ-djLm?0l(
zD{|rda`^CVY!~+k+9OQ+IXZO|5{!3Pw?mb<#cS{)K8qG|52vQA7j?_McATLRecwRp
z&~-GpjGDxd?_BO(&l>S8w!>qgAb{5J!!#<3*+sqx3ITa{e-6Cs%MIn&X|3v7+<U5c
zV!k=6cNM5fNa487S!GTVgS)b;aVbg)9$(-w&kRD1<E}=1wm(K=9p&~e(lp}L*VR5P
zzAVAYtSNk-4EAp4c<1=HKcieg(fR03<Xd-RyU9z1Xh%_cGcmT#PtkNw_|s|7PBLdM
zvm#?R*LqcnENbqzRL0_>IRXP6I`wD?ny_zcLZJXtF)%RGgTWvBmYhKE1<_gw1v{zE
zo_r>|)x^H>nn9w3rcWbF&G<8=w@@`9&{DSwx@LIZ$)!y*xl(7<vw`*V{((pX;BgZm
zQ$7DI*0iNnljS%J1?Z~546)C`e^;oWOWwUgilx`lcnffJCZi}n7;Hh2ggtU_mb=KY
zy_6zCJt(Gyk&g3+k|1#=2Ud>dN~;oWN)5xtyMzo{sKt$GM9w{-jR%K8lKzt>g8uXV
z%?!UI5IfZnK+ub3sD7Qw5>hQy*lz!)fk6{wb#O3OYUlG2GC-#!5#37CKsP=dj)8fp
ze_35Kg}>x9HAw56y{(?@GEFxVu`|y7Hs&{e?u&qa_Q1@@Vd5CKI>)kuf<L9{<R8Xf
z_MU*Te4SS`3AFuu^oMR2bb#aA$Ss4r=RqSQXNMlGDSJ}FDc+6bUF!DHW)8z8^4vTq
zi5G#(vz2bDGci*`YR+LPIPElGc9HzY>Tj3PbNq~Bmanp%CMrC9GF1Ke82v2(%7%5M
zh15=J+;>8>sCx^4rJJP>=wOZBA?LHiHc<?Nit_Ch0IQTfBE(UhQpQH%9+7Y^45LP^
zf)%Io2@o@@NgMR^c+c*QLJCR59-6`y4(zTEzsI~ffrERzmy|1f7?xDg(rn&~nfukD
zi6d6i+=a7cvVt@at1;X@>T_WPhP5BO;2t+&i!Kk*6c@rQpQ8r%LLIb-`hQ-sd5okE
zbwdT*9}Wl|yPzL7Oa2@dh4luG8)bHGP{4_vE_?2laRvq=hZ#`ZK%$(MEUDyexRFNA
z;AVacs&^?Mb3CbevjL{GLI%=wp$eC_zfhHw8loEV!lE|hPYNj;?{G|iNzk0FaLjq{
z=_T8q)I&WNhOzuw<9T}pp$EIz<>kyLR?4z4C0Fao2kfo0vI{Vp2}E6o>ZQxDOVvX3
z*wDi<VFBLp)Z-CVW#en9B_%vZt1&`i7$t8Cby%-7SJf<SGj?#%D^}_|@R5C|u3BQA
zmoHDwQ7mCkO52zxkcB=ZIHaRvSwkrgkMJslJonwN*2&FP$kl(+Vze0?LOQ~S|6Bn{
zG>K(=futHySK>EpMv9Nd4Y<iUUJ9K}uv0!U#2fj%j}_p+`of!U_CdcJ>uo(NAl<pv
z3_~9tW(6R#l{=uny7!6>DJ03c^#YFsbYZcC@Y&q~3YeGIAWa`-tM)yVG)QEq9dBoT
z#^2;D;^~vv*VB(fG0;mbz10>cq~u1C&1fJ1n^)Wq{R&wQrdcWlf9ItxTa(6{{^+pf
z*%yDejkHxyjfzTrvH!nRpN_=PT9HPo<g{AN7b~36CI1#!mO1=JUYvv{+CF%j&qJHz
zd}xx4^c5k3A`&;{oWzWnm6a|<GQjRoz${(=Dr5i_(lN6MGj>04?p7r@g#n>U@yIKO
zhJ>bC5yTn=%Batwk`y*~tlSPbPy3%&J=!aVdK4siaxo#HSPa0Sjr=%LRG#{vw!(^k
zl;LKWIr5_|yC7pg#7I($N7(eyC~HKOyw1T27p{qEU-ts;l9fPxUkEibgjM6A`<CaV
z0`GqO)qKA|a;3%hx7Pwj@CMvp@<A2N!U#S(qOhmtS3J`!x}x9}gTe2(Cr>Jgo=R=$
zbC2w!CAs+MJD%@#Vgw~N`^$Y-wJf<Yyfs>KEj-|PTjmHf&HOI!*UksskQyt`hpWTA
zSyzI#{@)onvnwvMsJH;vR7(zyUjQ&l1G5Sr7aGA_UniT>Fj1cK4G}XEbeV$dD?!0P
zz%`D5MimODUp5O4oE~usv7=3o9-1D1JA(vgvM_nM*2~6Q&(^#X8_v_Nmt6hC-R<Dv
zCbbO#>r!rJKIyjW*m$VD_i1&s>+O*SGmqQ$CG(P+I^7K8_CF{k>G!3=h+D3ikk+$p
zoO{FLTgZAkI9gTtA~uy_dAsOr2L>8;=~mYteYtQ%dZhVt*C2R9j*NNFw+Wm7l}IBU
zS*+{CoxK|LQPHs9JyezRT{Y?yyYfS*AP$`*N1E^ncO5!nk@{9tFRjweKS}~F9foA_
znZ39}5A70#S;4dn)nSHY=_6uO46YuYEGXBQj<!9ZT0JVCGy*_DN=L#>dzW|UYMv}y
zO~d}#lnGex^}Vk*=PD?KM~~W?8%N!_TFtsfy~yF^59OBX&Hjx@2plHKHD%_DC}gqd
zS&^%!E=Q4mZek+t+MMXEf-Ieg^E(q~T@u8YyLG}HWvwz-ZlOZRMQabT5Jwsv3M^YN
zYNfFs{}d=cI#WnVcrjb(8+DjF8mlo5r;1!~aOT(U=?{N!p|`@I^{F#s5iC20Y)tP9
z2OCsFl3WY*HF#%)H6MC?Ntoh=lm9DwyZ#<cRAd&!eg~W|9vd@a3<w8So_V5I7$+Po
z*`{K$tsksx4#^-g(lO)onqlh@Ju7|~-EfR25UrBnaJ|$d>>x+|4b>`D@_hB!<vUT&
zM8p6u(K*xdoq|Ohj!H#=R7>o5Mp?wY`pA(6GoB%3daL+InfnDxE!g2s(#FI#P^CE!
z(RvJsnp7gai>E(e4ndP+9~`BKZ}(>Cv$W0j%XjUb+vOrms@zc#uIDpzUP%}Hs$S&e
zls7;bVIY-ItSgjjc;L)c{3^F24<_RO#T4-r%0;GHzoY<t@LxvwgfDt?h_<@Mum>>0
znb*gdUzTtc2rdA1fR}TZuLpelH8?ntx$*`GaxcH^hsp=3t}$SEIB#IA7d(0cbr;b(
zf}#t@#>zgT&V_)(6?C*MV`kx=Vj$E+yk<^vbDM03DCvnqA)FC75#}e+ofp9}2dQZ(
z{6*KHgkn>j1s5n>CpWO`*xSXzp9xplWexX^9c#`6q=*Xwt!fc9KP)HJGXRW7s`1Om
z07Z>P<_R1%QilzJfFM)C`e+pzWs&_KEFLeN_<A<y#F8;B+%X+KS5uAg9@GG7F*;pJ
z_};T_5Qzeh@G0xKNS4=Y`7q>#h1Qc}gBKp1U1ubh&uZBJ%=-+oXX0(&fe4@g;+*K0
zrA#HIU+AkJ4Iv-ylCO^>53u1NXlkUvJ|~KM;2{;o+%rnwee4Z<JvG)M`w<MEA5d%a
zKBJ=P+0m$4(X9UREmF-JsS3anRZJ8IM*O>3ZH{BBd>@s8l90!+1hu?7i+a6jQ&)8!
z^SV^n+S{|Tpme)*V8xYS)lC0?VeO^Ae2pDL`~Ad`jJ=bn3&KhKhT%Zmo8t$TY&DDr
z>u-IT6Oo$PE9mC4!h*O7Y<457+gtY|KDEml`~9Z->=_!;TP@lQQzbyutf6xES>ioT
z#j%`0CjKzM>9jQ?jyRIcy-U)JA*8JnYjea{kr7WFn5cZ^G&@x?q&d~g<D`%ad8|D-
zJhYVRCq`lGuCFzCp(-yPP?5rNfw#;AG8aFwKLyt>4x2}qEcEqt4h}xI3YI^7Wio##
zp{y8jc2e{hWyVLhBDVhBKkY?qFp0^y&CB#*xR;_oo7d4H*0#6+c$FdTlVW{oXzSAX
zb4bXNL4R#F?P^!CsX#$pFgZa<H?Fztrporo$Rqjm2BZP6&SIAyClM_tr_+{3T!c=G
zd~FWu9R|0AA6mWfcK9I{HMK{jSkeHsq>3-|y;{;Cui>a`Rwrm3o!5h7iDZ&`0Z)!B
z?h6c)f9!Wt!?c|k0(~Y~u5*_ixayPd=wJ~)HNn5&w8g}`=Mg$oke(>OXsN`q<jxkJ
z@Ccj69ygAc@vkQKn86cqPr%}Ezk;_O=ja_kT|xSMh@W&+GJ3V;6O1tNIwAX+LJzo0
zg>}ym=1+>~q$QY|45@;TNO|p^vTg0+aNk^L_bLa6ds1Eyzz<^F?~W$i?U*nLTr`uV
z=+UB=U^v=;#1d>(cB08;g$l3>%g}qfzkOQCL3>J;Bj~2p|1TVUc9#XHP%j70_!14T
zA3JoA$i(MThtsb|8XQke1Y^4)&m$kp$#(0#B)^=88x;0yX=fIqey<7$kWVEOqY1AZ
z_TF~lGQJ^K0Q`2_buSyhpxU&)6LK$e1amsNHQVT@Joo<tZ!5dC(^lF1wfA(D&L%35
z!peVKc00mrK}1xO+OsULsWRT%2w+8nO*=_zwP+AD#ravxlYvCR8z~B*P!{>9Ojy$?
z-45JPcy#)Wk|aXd?I#XWY7uZ&679uko*L+-`RiR(M|Oc=ysa0~dn_*MW9sLKF~ddW
z1W7H3vZS?-%pC$qB$@ZE*WJ`X!dO|$tClBYl^axtp{64mE#IiUa|)_4oq~rFgP~kJ
zmhPtr#wF7(QlDJ4Ip1!s<plHmU7(Ecj1cwN&wxKzF54WL-LR;?xe|Y*iZhEYU6B|?
znRRw{HCb1rVC6+dVV)|GZ_5>oTPhxG)npo;B$uQufb3}FsNk0<I9Sf}!$pz_e1kKr
zca$I#-}4i}#MLi5$9Ym?&i_7<OUg_f@ivMYG=bfj;k04p%7jyB=d6D$Mwymz@^x<9
zUR^{|Fd$$6=!PIie<BIEDd@wZ6KV|XFU)g^7=tH>Xy~z1OpVHP+ym%MZKQ+Qpn>OX
z!bhS}WCfPw;av)UpH<%m2!(ThFf*A(pQ2)))q<{Z#<_#=pnY@tCHumEAN{-~8#hxr
zO>8lBv=scoFc+q))Pj4$T0V&OpeS^}%vsS|Pc^d&tOi)RY0^01loGGYJw?97ZPK04
zbA9OEgxj4Ssz1r(?yFO2>EAlSp@`aAL&fg@K!EzH^tYin+e>ilP8N5xm#$q_z^qQS
zUSED=w280X+J<M?pkge_pTf&&OT$qV(Kg?Z!(qKuu#uReGce}<VB$Epz?^B;3R+4S
z?9`FvJCBn-w2$xn%8L2Zpb-c-Yu^vGQ7C_gzHg&PZ$xP&%{V2OX{zb20T^CP=A`2}
z;&5|(jGBz3&d=(Y1C8VE2fHdtHIqKJ2N+zh2Og`n1eRLtj;_q}?Ikb<1+K2Ipl$`Q
z8CP2{+lYyfmYS;pQO+Nnk}+wDRjPHm^PA>a`Y>w7`6W>Cx<*c_Oj_`mKzt*9X~9^|
zbhFFv=7%F38!-TExI`HQrN3&nRsmpcutV+63vED6_E8IuZzT;y(`AYc$5b^n6P;MB
zqVqD%n+Gi5s;l+`nLJD`kU&Cd)BQ<U&0smLsV#Ovacttaz{p-HQVp_8fHgDn!>S9G
z`~-GD;hbU>)QPcP1p(bvGsCmB--n9epF9lJzcnj(YurqQSlxwOoDHu~FLXsw=81ko
zogdJL@S1^x7~*F=hrA82xFx<gor_c<V0tV}|B7;){CyJln=K!p)J;If9Y!rvHgo=4
z0oI#%VYk<ZzF>%zrJ#S>pz!IT6_XFI4NwO$+%hYQeQWVJaUrqLA!D5|kHl{cjWJMJ
zGo3#<$n!%i8PWxh?yN+^4_yWWy;`>JsI?8`n@}=?tc@{(p<i=o8jFL<T6EoM?56#@
zI`cqV%+zJ~jiEyA|FDZcDPH2t4h(mHFP7f96Q76`ntbevb^iOy(d<>qF=U&m%LbFc
zZ*`*pN~UIlv-;kvD9M;%h~gGotu>-<<5hzb$i#?)uf|TW_)n2AcP8~;2x|F*P+?DY
z%#w0T#g<b-j~7q^Lt*@a>L{m@8iS2aXVeXp>%|c)<zRxe-#x-6{5{afE)%0Cq{!yg
zqEO!WvKY)?P+0q4UU=RPD%3x9-@EeU*D6`j*ipw1e@K12T4V$&k~2(lv`w&d;M>ea
zC136kkG7R#4)&B||3Fn_DSj2|84Re}1*Wil@e=R-5KaASI>Z(GQzaM0^60;}rZ-**
zcNQgeANkiH)fc&Fxm|meYc0VVUZQQ0T5TLRP0|ve`tcoX2wvWXfxW8=J)#0694`2m
z#`sNg^+3mE*%w_YbV~61$>~+v1f<D_s;hus!`za4D6b$K<rH4(&AsSqcgd+M(UYD*
zZ(8z8=6@kdwBXCcRI?}r+4%Yl#Q~gY6=@=-W59!0=JaDYP6K{Y<Pdy^g%_v~%Tgy`
zA(O2qL`qx~H}W}S8??yM#8@L6Rd56Nx92(--xU_^rCr9yfv-$fK0!MgLoKY^=WXFr
z4-Pujw}d9NK>vd2K)9R?Zcx0f-HZ?u6$APHSw(@Xm_YDaJGfj_P=<yMu<>~3_Yr@N
zZUY4pf(&ZG8L{b}t0)-ek4g(W6YGm70RKM#!2DkPprL=?F-X<m*m9#aYP37G1@Q&>
z&97nu1Q*N<*jEAs=~PauR|7xn9w%|f_fCwjOm_JQ?~UaRjPzF63`TH<niRI25o%H6
z^~e>#X>N1UDncHraU@vaw#y|_)4l4Yda~noZetz$Gn7E$*99cxeXk7<<9cQ}Q5bPh
z1c9`_IzJyu<*<?Vm6%{WWLvb;rELoy=xR{liNb^r_a*fg7ZDnn3iKsi_0C2g10y?A
z&q=vjA{S`*EH}G<ME89d#bisz7r^uj?9=wY1{h7WP-Vge)2-BRUD8H36Dm}{7q-l;
z^*yoUE2JL>M%ElV+3R5G6@oKg78gWrBhaF$LnOHb2oQ~iE3Y~o;hwboZ_9?Yu>)fN
z$4QxB)1f|CjE0%XpAFwEY;oqY?RiFZJA|~Yq|4l+5}we3_Dd(dD10|=`rmbVpdUG$
zbyXdG_Q|I0(OW|J+1-&}VAn7?OVSAqZ4cPEwo*Wd5RslGbyhZN$iU2o*401;Z0<*A
z<kC`y;;-NN#W<wR5o7)Lufo@4r2lk{Ld-JzdH5g!u7rdhVG6D_qf`~hh|duEY62$C
zd&`m`g3fSr&l)K4NiJ|>f^3jHG>E0A7|}(ASAo^;L(NA6TrCHkEIwrlE{Vg;I-Q`%
zabzxBfm3+6qD;=P(NXQcVn&fzO1Vnl`OfzlNh>*itXuHj93efGW6&c|6qv}e0P0%y
z0efFu5=U?6_Fp%4eBfGQ{~<3*WSVGgM+c~-bedeG=LYiAtFqHnLqNsYJ>FJ#K{A?(
z)u|t(t}jNf7?a774gBQNh+b(fpAnuJ1&4xS^pFy2Sx@g>&ObbhZnM#<aD+bWqa09S
zc*_r|hQk%bePqJ)-#>gi235@Uhf+m)4<(s~-72Q@F-d}nDty)F8&tC+T=3h$brAx(
z&qEU_UQ<+`bDEViCehlaQdOmm+|Y!zM<Rp5jxJ=~;M0ZwXLP#YO%%6eocJh;aVo<F
ziloNKzg8zz8oCQTu0?lrlCwD@84=ZQcOhRFT*v9!F{UM?^W(jVo5_&Hv%U%ojF!Xh
z!fFtkb~42d$03k4sq1d*xG;dlid()!f+v(~K;i*mIng%Dq|EujLFUzC@9R;Le^vv0
z`*9_s7DTE@gz&#G;Kzz9CrQwsV$YKlrW6>ym&x96*(`9_id>pYjA(ljzIl5cz@4G;
zKv9@`yDqu`!C;pI+ijtP5Mkd1gO%FOHqU>U_xO)o2#fz>HmirQH%1YNzise*j@h8n
z?vxQV!ULk7sZ4>Sk+G~v6R!|12NTZxh?8L!aDebwf^_n}Xru20mE6JH8>YFtW@MBw
zhyFO+6egGCI_hf-TWR~%ZfV2)9+^>-IxxtcS29RkemTVpRM$zW#tZM1Md%qUT}UwC
zcu*RpaJH%P(7m)u1-6Bd2vufhh7<W!RmMd2wm}DGChw_vp85BHJegax-0BEU3ScSP
zZ8;q{!Yg~dOyen~8i<XC*+q{ZC6YbR0`5t<?5(+6maUsbUgQ~@5g@JLsv?zEnj2*U
z-q8dgN<+lr5fHj0QGlNvC;Xftfi{U?rkinWwywf#IR|3n@xhe}4pw=^?}fftJF00v
z=^l`!L4>JE*>#Z37!>9^OkLo4iG`tu?@giKnu>Umi7s<w38H?xL+pGK>1~+Kf;^~K
z;?Tcqi42)&&t}8pA{Qc@P=e>L(#Lt_&ecG#oTyZ1C1J}d^M2qq@8JQ)teW0BVG*fQ
zp+%%$RJ7}ri{k{5HV}Tsl>O@vI@y1m$oi?#;tQ;-!3>UQn%I-e*Y<=G=RY4m)znD!
zc5SxTT;NJ_dKt-oBL4dAuy9{~l;#pvSxeNiPwU?PFOfNwjdbRjYuRRUe|@?7g=g$;
z{@vX1ZCddvKfatGz%9@WKFd^~aeX8WQu6TmN`lewRDT6L1#w=7qpska#mdwiL`1%o
z6Wp5$^SBh69xbW6Cvy)fqC<sDoEvdhw)D9(nqBD=K69)YrGA=mSBhRnl7YN4ee~Qk
z1o>0%O8Z`F3Bh?g0P0V?uazILRk~y>ci;6q#zzvsoO(NET{knDLH~yS*MRf8R>Gt~
z8{B05Knj~t7j~nL9G~^5E7IL)b4li!{z3PK<M4kBb%gqFSIdBc`FK<9@7}%qFgset
zA#ZtIX69~^!J_YS0t(H}Bs(fms~$xO_Cn=|=^kfA(L?MG8r=p+LDOfps**`C>9g7G
zD@3~35z6I6pG<LwnuyQ?tD{?gBRxL%F2zHMoi)c0LsqCG`PvoZSnJg)oK#qey%}?C
zKe_rs_<3&ZdneVkF-1nE=^ri{)YOwdpw@}5{WM=Z(S;7b95?e%&UXkjwQxNfPCrT>
zB9-TsX_J}Ii}{p&m3t4pLiTq*bB_4|HQ=z~%~P2)J{aSbL4h6Sb|ixvmoJnV<OhgR
zf~-Ahw)AA5y={iTPAWTf78H_9u9#Q5P65j$)RXD!qFi_2Y)qWq^o;fI<WnD9qHbo1
z?qjZ>Wt`w|bygT;vrf?EtXziz<5hz+KBhkAocU*Jl%X40!voep>Rk8&4nZ(j$jWC>
z_W<8)Z$u*CN^A#j(fmVI9eHadHRJK=!V+k!LvTH@4X1}tl#${tAbbFy)Gt7XKql?8
zkSynhF0~i!?-)je86ZNJDztYBHv{U|=$EO*B=>|RB9$h)+y|i{rJx4*_UdvwF<AoQ
zOvm0-pqx7P*C*Q(vr^>>1C2ZsnTkNi>INu8_lexOwg$e&&+zxbd&Bs92?~W8i)jQt
zlWk?#47}mL0-CD$EgT8tzlSR63<R^&j-nRDi9*LZx?!@bZ!mjUtGvm}0x%tm;!Nx@
z%eVAyL!&5;H7m%B$Wd%|nx~sA8z{fX2};$q;P-W`)PL=H<o{uGRH?Hsg=5L=dN7@o
zuC#{f<r3_|!fE7bSL$uvnOp`MXe&yv3@oDs+qtF2iH(zbRHHx2C82P?b~nVi;@@BG
zA88|1B{bdQmU?H`#+{U7XGBvpmIY@(gOTD`8`E)+s3v=-*!jp4#QznQd6LmLFgx<L
zD(p)F1mwQl0@X*+hf9pH=nIw<JEj_ps$JJON+3VgK?ajT*=xbh#9u1(c`sG22IbL7
zT!sw{!G7ySbB$c~UL9$?2b|$*Kx;PA0?D?yE+f$yJ)hfY0+U|VrR<NyQsU3n1u$FN
zGX_O*52~v_uN(y1)m+sal$$3xS=!7o*6&k9yO0<865hQR+|-+XA#x&o-c1;$6<I0q
za>9k*bP-ks?hNs>XwD-VJoW84G(IpWE*5<FRQ{Ys-(Q1D4>ca@GI8EFE0m}SNmgs&
zrEI<dd4v*0t+-8*m*#JXQIIMP1t<^+{|+v9Y>q)p{rv<~qkxFzDSU6fgJ5i>@@ML$
zvDM@Y5u9#=zC8s^b`#r*EZ8Bua}5{A>=7NYo+fVkH+2iFQe)3_hJ+*~vmVjdHwyy`
z_i=o1DxD?u3<zO8gNUE&#Do?a68p>DE@mRu%|;-UsYrS~%-^WZN3PC5ksjR2p^C#H
z>4Er-41nC>px-#Q^0YO31o@gg*x@PQ<(iRxtX21i^AuDBTow6Q{_Pbn&cV=~^#&=4
zp+;2DQ3-S(24kQ%zVaQLZ5sKyo49jCN$A(q>vJwwA~qZ(w}f+oU)xN!KtG$F@o%OQ
zYR==&3<;=&SNF-#ny~j`%Ials7sSFyMh|6sSn?=~HnFoGp96;8Rw}GyKd2bH&uguU
zx)?eA+_`#KZ&~;yBy2Q+A?o!LrnI*LYI_AALJ(`Gb42kQMa~cDnW2=A4MR|>At?Qn
znW#REB22?!Ar#LbbhgFrk6E7Az9GSZE%X;SuqyE<G{^U#7n?lGHV6*6GSP6#%sN6C
z^`aM-x!Vll8TN8vcx^5BA>YIO8v;P_xO6TPQF?kG(|oAbG1I;mD<38a{S>`?&i#cT
zqYnn<>oyDlAa6}<)B=67)Z9uD<k-V!Fks5X5SRS@&Y0~gjBLx5>#D=wE7C%Kj3Fx1
znGChmv5Ni#^EnuhIBL^7UJOBO!1;MOE|gXE>MJ_X(a<cE5gx$*z(m64LRE<@Mr9TD
zEld8|vF~=2uBB<aEF&rzu2V8Eh}nb%^WvoZ_2Xt0xrABHIW#h{x>9qYkFv9v(jS+Q
z;LF5Vb!|p}$AuaEGbC0}4H@xdhx>9Rv&5z#>luN#QY-)1$#%IiYr}u&1I~ATEj(oV
z{lJ86bSy8FAi2MJL3*<1(lyA;-!l7rR3BhEXmcqpB4%zf&!?T6jfHx-)8b)^<PP3?
zp#ZQj;K&$noI``h$l-Hy8wD@6mA4~9VyE}*-m8p{LkOMA@r17%5m9;XtkC7{_0kv-
zJ&BYkE*|um>6&NmEapi!#xM^Eeo%Wzy_oqB9ovE3BD%F->XXl9^2P+w*QVS=Dq+l`
zRnQy85Pc*V6~9ZB1zip+(j2tC^QTH2M<{2L>0d@06+@cOi(R#X5=PmyL?lFlJ%HOh
zB%#~FHA9Q!6e;pG45B{}W+;67C`CK<;Zf}LlW60s99Kt~OpUpVz=R00h0f)jQq)6U
z!8CQ)$@-6>eKMl!-tx>*mys`mQjX_>E~D`QzTi=q0Ni|m#M;I5bMsPJI#?>`xK}V)
zoJi&sf0{fmm7-z7uC@r=JSoJ7nH8uLbf3Z2XPyYfzXM^qz$I_MY!dcu2ZtRn?XT%n
z&0afY<?g96Dq#s^xl4+sD|=|FhrmHu1_zh5AnFWgUoD0Ztyjlbkk7yJrpmcFRy@B1
z>P$5iFJE#Uh=n_YhX!#BL}slchLiANSsJY1_io-o^H<gI%a>cU60OA>#kPpE7te{?
z;0v`p;^VK;h@9-L@V0k}nS%VoPQ{>WnF75#%z*cv6Z_~YmteMr7*jX~Z-6Hw0R`%&
zVUh{<cbOtQ)8obD2~;xB)>;A+K1?H|(=#l7>f)(qR$W|+TFHOwWm44FF|yFY^|w~L
zJVTeRo#ql>0ua43NLZ<+SGH$LirP_Teqv3nRHx7iZrlZ|OTn3at}zo`KRmv_9W3RW
zt*8|M`r<)-*cHY9(fTOaps#weYdW*J+<Uv5EVj5FNFu|gM2M*KZ<%urOAw2c-d=*Q
zi!(U&2+y#GD|=y=ir=FR6cEq-l^aiXyz)Hn{^($mNwlJ1TIK~&vs7(`h7sGOElCfI
zT~|1XXUKYC7=Mq*tuB(_P%kNrxIFe8ZeeA91>kCmyr!Wt5hS0Dz;`b;0#L#wG+7<|
ze5;ZH#5thNP!l3@db~WGx<Hpm&G>*oQ%<RH&1m&+;RMDPC`Aw7G34b`2@LId-(MGM
z+t|Q>*JykrQ{!*QBUyev!q3o<aOZLl{|4dfHiv!nk}iSw82Yg4ykOvX&HjJ%`{EfW
zBNNMUgkng3{K6UJG1n-so}3Z=0{|xYoyfA4uP%{pU~KB_Xc6ftWYd=@YGyJWLRlxs
z{wf*?<Ve~MYwNNN1memBzVSYeY^yO=-pdf*uF&-f&AY1<#oZ6$(qGBxm@9&U`1h}J
zdP_+pO<{G#1WcyIg=bB5UT6Y`d^gSl=R5Sv=}-7j9*VLxpx!8TcwS~M*!fi+Mc}v`
zu!jlqABE+v=5tDXi>+NlrGBphK`Wk?7xZXk2SgTUZ9#7cI+m{*${3FXN*>xmy_s`N
z_jLr5)Dxw4x+zvtV5WCTUf7V;uqX7Su^bxkd2OKO;_C(5RBgiV8AQ>DIr=HdXW0W-
z%xl?}#D!u|N2b`BMrPVC!hcNgyl|&v6P(r{-~-TEe``8jU_3yn#(tTGXNpSLW(oJF
zq}HD(Pa1d+Ak}J=sOL_~N?cw5IoM+GGu0#rc?X+UQ7%a{Ru61DcrMm5z6XDVfg-j}
ze{F1%oH;9gkHF*9nEO~jk@^w!F+HideDt=k$VJakbaQ-&4yVVRB6HK{6I>I@TVD0|
z6mZ_~+k-Vv3GTlFIKTol;3h*wi_XC`&Ic&uenoo;CO;=G99eP6Dtf}DdcZlq5UFuk
zjLQK9eE%Jf#5>@=P}T$)8}FykxjF58I<#Krd2_`hX#7a_1JHc8Zk9u%;)=GNXrv&h
z#4qEvYdDz9f&zSg*Z{e`OS=c~jCmD`WLZRNMCBZWu@k}%&;UOhk>orH>6ZpmMiH32
zt_#}%v<|tqtd7c0K$FMIbu{4k&1U(GavJwxy+J*;Z8Ne3c>q-4#~g{cw}0#=r(@SS
z6~jxrZpOtG3Z7Xr*|FjJyNcK40%%=EfhZkMOT{9H464t)D0Pm$X?$-Lb0DweDPYRT
zeW>q5;9if`A+_`QL?dwRPQ5L!KZSq`fu*ouKJjLQ646?L!5hw$HH%~TjlTnv=AD9z
zdv>ug&eNNsF%ZZr8O&g;SFpNI8d*84C+bEdWi5G(rxSXh37~ic_bvf)CBWneZl)Jw
z*kv>8q$m&S!FHK?2i0fh4;TPjF=CfPO>W;LXm@KHkQ)9c*%X;TQ0QJ?ey;YZWJ;Jb
z=*vMJcFsIOdY8F6gVFf`3_X@`?|)!GD?Y%ZZG`gd5Hz)+T#~sr1~sQ*$3PF)O(oZM
zXrkCiJ~?`~MNrN+F<((kORJ4-_kjO$YGVg*tivti(_!~?zb?p)(2HWOhub9zk^HAX
zgQW5fF47l@Mv9mq2KUxxk>B4_%TPRMQEb{mN0=s4FqkSD^1dhfS)u}7lHBf}fblI(
zZh*P72?8kSYkm7(0fT&BV#v{2nmilw=h{T2=yRSxKXHvLmCJ{g$V+nhJ?#CW{#l=D
z<md^5cr=y?e!vgF;d1-_MUa)(B4&`v!@4Rg(ccz1#dK6S9a%>53<+fcl?=-cG~g(q
z!M7Z7v_G#uhpap$Cl`&y4%Qh}nVQ*W`-!nX{n^r)b5(l}U;@=g>l)SArHj28qcmgT
zv^ORb3>U-D|MVx$kthpahR$+IWp<ydO)h1qrq#lu>)WbFS|&}`(YMkiuccrV#e;#{
zJelnv9fW}F4Zqr@Rcq@tm|(<4Hsxa;0>>P|>^ibuSTH1C0Hp~fy`5llv%!;90Cf^O
zsJ@brK$w>lbgDP7u?+oKP_fn8NDks6Rw0Cm(aoEzlQG=9hiT95w|F6mT8Nmua@kqm
zTTmC&VRHiG<V)p#j(ea|4BV(4Qb<;A>0V@&VD-qxwJz`D6SN*z?F)229LoNEb#jTJ
zbn@+&jq@A>X|PSMRl$cQf(!x*&h$Y{OYFgz*sr>SSE2ZnQEcJh8#3zR9k5LbSb9*i
zWDlj5ix3L(S%rpB7Oig*raX(95N%`#my<M)gd!O^FjCVV4d1R`P0HK)Y@y#6)N@@9
zt=PeJU1~5V9E?Zw7OA~4>H#SXPwS(xdQxKJY%$Cl4lI+y0ZWXxyBr6yC{D6AlV`F>
za=uLyK%?Yp95&G<?m#Bh2(SAMyoVlkdt|cgZ4{OUQ&`v;((rg|WH*~8XB~6yO9p}|
z;yt@`l%Bfgyv>)b)$X<R(XJ*7#UfyHDD~Yi0sw8;WU68pcRhWB5dHOgcf(ew<}&_Q
zik3=>7wC8@a%i>3C)h(eJ+yQ12;;soE`G8lLyk}LwNji2eg^~(bcEz|-Up2ZdVzpn
zLFY+$%Eo@;yoWMf-?BCJ<nBz~T&sykl>8M~!oT!-ZgEG${D)nJQW-5{7;zm+ZEZm!
zcI;hDHvnI*Te7XNEIfyA;3b23(p=Q;x=elsjU3jc$RV|$YD-RdjE}31a2{7_If>Mj
zAF1O-goaLd$ujyJ;%EC7x#Yp3`&ZeRapB9plg1-bP1aQOfAJf9p$c~np%RTBS*}zr
zr3mRVVw1;tD_%$gNkZ=z2SYTfNHNV&Hv)^LQVAr#TY}Re9e>m%tU>`uF58T3<YTr@
zD6fBtR^oVBgjB;Dk!e41_d+s{%@5T=Rb4d5Fjhc*5YN_ZI=Yf8uH;27^LglqIMVYp
z^!{;wDKg|Jou4?Xy9f$DnMTtoci=I;zOTn+3LNJNgzdgOdLqOu+>x>kEpdlaGj`Kz
zk1|;hDdOTxS>xb4>ope}$8gEfwe#4R%i~Ihc|d<5zDBsQYEz&ETyZTgaIo7GqkiVt
z%xWhOgMNE0VP+*t@cXtu$uJ83s{%`>&Ec5!@M*ep>-kxuN#d=S+1QMaB0(zBHs_Qv
zbl_tgfG`&-2OWNen15+a@P{%1D0uul7YeD?OpXU$%10;Gs~$H*k9m{_|A|QDgu;)g
zbPVrSt=UA&x_RFTm@AqaTAQYmNDP{r2mzkui^?a=4Fb2mIy;<cyaGyto>I-Nyx_lb
z9y|c2hzmvt^d?C6Ns`m3|NL51m9(Y`-q$JF7a&F<R>AGggyn<Gip+{{%cfU>p+mda
z&IA~%EYIg*z*d+jicDUUW15|-nDe*WIbG$-*(FRPpX_Zg)3?KjMmOXzUcj)_S|y2q
z7%Z$vAA;lLwL&sje>P2vTbRsg1+h!J*+rlIk#07}Zn13*yFbT)&Jw@fFf0f;ySDBV
z#{^+8GF;EsiK(gz-{fiP+4~3IVrn4KMahaVc~$aOr6<8J2-|8Qx(yq$*45xvvwsQ*
zw}0!#G8el%`Wo(3D*LCQ3WQTArs3;7vNmKKWdWc??DuIx&p>1A@<+DxJh40tWJlhj
zTvt1;Sj0sgo@P+wcQM9)hGeNs-}whzfRka~ZF&LwQ`*4df4_d^)IB<2NSeAijUt@k
zWJ_v0!wB1iaKy^vlCu67!TicrA={EXELfjqm@JI^1&~zP=1kvUfQv>gtTw#dMmw%1
zU4eK^?6|5Z(Q4Zr#{GI<dC;ixJO7^po<gzA7Fsr*@|jZlx|}_fNi(Dvf~I0Hq!--?
zaT{mdL`bUB7n2wK{>}~QLN!HCfA{u#aglZTl@qZbE8$QOx6Rkh%*>l6Cer)K0=6{}
z^L}y!Q}*zj5g^8gh8!?iIF%mAB3+v*@q=KMrcNipCCVNDx2J#3zYpP~;~Ryl1@8__
zkla+;cv=+tM})H*R(MTG%Cxr_3$7A#$g|dL5nK(9;pql>%kJC~HD(F%hQCf~G7xM1
z9cZOzl52`x4qo~Xfw2rHOzUDfPA!Zef}&_BC!#aI$|qOp6sfNl+5tq0C(p**wnIto
zwjv<M5*l3`I0S`@eHjLPwHJT<$=#|DI>??+N;LSV!pv;i9rAO`P$~B~LsMF=DwE;J
ztxLOy(o!Go{htPaxgZa^SM<@;cb^uUo4P9NdO87kUwgJ^VPcgQ<ycH`=KFjQ(L91G
zWGhZ`Aog9g?<nMYH|z^jGV2A3h)_qY`^mrjSo?!fLRz8gP+WPz%;y<vY8x{|r`J8a
zL_KzzLTn!0p{nxh2GNe5&=4}8^@%NiLzFxdMNOy`hPc267&mGVH3vO^p{}RdeL}@l
z2Q*qlN8}esCK3Ev#m1M1y3v}>8V@JbGF~=tYAMuZ!q^MU;6j%u&_|!6gJ^1W;VWbG
z+rXc_FSc5ous)Q#9-p6<bgSJs6frm=Gz;$yFxjml1ar?fn>-mhk%-GOyVs=PhDy(|
zity7iPY#AAb5`AkF0W2IBgQ#5ssH+3<$6m0Walh_m@iFwm?&<eJx^74`>2ODa*#k|
z7^FkP%%ZIU(#C8!roiQ6N8L}886$MHDLf3U0>pMaA4g{es$hCFizP{aNOSR@>P2A#
zJ$7c?MyrRUWi?_y0=-SFrBWFw=XN!-)NglVRbwGMkPC6MM`3|hU0}Q75p#Q}5l=G$
z?jXCaXqe!!rA=$hteoj~by2K&;l%5(9by76b(b=v+14TL3daR{b%6sLPfUii6WsH)
zl<E=Ra}854lp|i3=n2V@9O-=|G-;1@`U4q^m9pa64HsZ*_*tIszQS6*GLv3-O@W`z
zif~3@?<>JE{E?A|OGL|6iLe|TjxRBybpOfm8ZoUasvHy7Vr{_9q0_^Je<(Rx&K(dT
zdOffDW5~i^+Pc4XbY)LeEf{X>C_gW<Rx#F6Cuqpk9J$!g?b%P408mSt`wiwawdOB;
zpx80NTMhk+>|brT{LP1nH7uWa_=vdEr;59YJ29~3UMpbLOl)ZWkzdHrs%fev<hWX6
z4p*NNxuWS%#ki!crf(!_-ra<`L*`!XzY-Mig|dEmVcJXncq*g(5U8Ew;Q?ETs#~sI
zTQ<5em^)Fp7o?bdNtU@5z1*eu`kFMTa5WzYndl7B`5%$aTfA!p*|X_pvhXzayAR=b
z0R=pE`ZM;&Rv`xO*?dOwewpZb!*h+x4iT6pu(VAIH-Ui#nzqOie2QJ_{IJ+D_lSXv
z9T>2S5<L>^T<kqxeA1BXvG{mvS=<Yc-0hb$Y@7+O!+M;a?a74tBoi*)NJU#|mdb)~
zm}_Z1+ym_s*OLvXJ8zsK!HI2b0&9>>4@GrHnvQ`ARz_OL!814gu|Q55;Z%)Klm@X{
zO1dwgB4OZL3zPVoNUJ#31VZadBGX_k)jKvUczA|t8BK9x14okYc7ZPeIJ!hBzmrt=
zN~Pg`rk)oZK8NGX?%h#IlZk~DO_DR`R+G18t=<WkCm!OL#TG5ImnD|o;R6~VE0zDP
zF5elTP~VX@AFv9@lFGLB2Xyz41L;$$Cm;6^#WqH8?ja^#<;BaIc>(kxkQ{35baCe=
zF$j-1hi---;*r+YhErD>|05-t)C0$D!>{hPVm;)&J_h5eg{Ncs_1YLG;J7T8Zlbrv
z)j2>rLZJG%Q!S@jVS?^Nbd094YZM7i)Fqi3Ex-HL6ZbYtnK|D|u1n;bZ3FGTiN)gO
z4g+_IjF-1B*1XZfMQtv^wy%8)q!A&YOnr^mE_=dxkb^xh_`$kHN0&h4H8j53pCAux
zCwp;z=fkYN?^anHnBwZ2DcA%{l0K_y1K~Qgd4Dzt(|5iFsPoQ{O--Q`a<iO!UZVNe
z3l5eiv{fm)Vhx1Z0Let5as(}(tT7MT(yz!^0&yDZ1qT52YHYaM*@stkmFlt}^iBU<
z=;vrXL<*XtVbYAY4P`$uS@#lpb6mX0KTcReBFu~AY%_e?0N9O6D}?XDPk>C4NO!LC
zm|7DQH<@TeGC%#HUbW!9R<>~b((|uz;}s|lQX8w4e{r8M04cnkEp8HEW@m(>wfB5B
z^Dad+Ie^mm*}{MNS#4|!TojvV8!4$s8o2Mu^h06+%a#X`fW?7L>M}pZe`4*kW{Q=@
z4C3}!PX?FJ0JF7s7G#0n)fi0t0;`L<Ehltq;KgBs_KL3bz$@2#iI~}JQ!3EYKIH&7
z#hl&hOb4lOf9RuaVAgU-%ApxhE1+%d7ZuV53)m~;dBNM~68C%1@QOvrU9oJd8xZoq
zxviQlL+J8x>y*}D*equ=wf)~~7esl!aj6#GaoP72Dh@*y2DXCRKE{Aqn^Ke@vS}Lr
z3#U8iB;qk5R>O+V%=I<7oy1a!=I;i8{$%5coqX35e)Ir!d#Zz2OTUgoUPTqvVvlm1
z?`gTnPo!x6q`9sktQ_d^k|DOhge&F$fDwQf08^hdN@bGBL4(h!#1<kY)-&>U?1>~T
z9qN5}Y>oY0k?V>KfT~{i6eV8FGrKYI8(KskL!tQDw#={sR$O}NK%-Wf1Z`hs2}5;D
z^VkmLL%CCx7Y>#A>=&dDS7uu8X>7^Hf}r*_Ng`r6jiK@|L?9)|tq)KRIwAjT;MIlQ
zZYvZgPYG1DHGcplqa-n4MS@+P=G;x>)uj`Qj-UlhmYOB#>SKGu+54iPAkX@w29t`M
z)8R*azgICH$U$X4zL+6~zlJq3sMy>sKC{Sb0wlx&|KZ{+TeDrXZOf;<4K`_?A=uE<
zF1rm@V~Dj6aIWc+$`1`UNK{XVuOK?F`N7T$KN${@QV{>_g-@3^c#_?>Fpu>JCpG98
zuQN+P1WnMpN4@hjEu#mpZ8Ha9M0VsKvEq7n3i87EovvlwI$0`8XBC7e-WsseP(o!1
zhDpJL<_uilm}xE5%i5d#g=%WX8epVWq~CTDTzYP(8;&zxk1+BKUYSKOgXIjIK^dLV
zXFR{02oa|)n3F5n#Wzmak;=3?W8Wu>{z5zu&1uIn66Xv95ytQY^$O6MxucBPiJljC
zX9IciYizA$s<umF-IcWp%A8UHmQ5(D<Q!kuTkH$2&oDQ)`8n5_t%3i%axm2`jD?)s
zwPlL$uLSM`djL9kg(<bhy2Cvp^s#qrb|WRuFP*V`aP1w?)1W#aXy{IU8}6u-eRsp#
zM68m@(>VT$okar*vKgW_s9Cd*s{2&~H3qOww}VeU7SXEQ6e}L5b?&I?=3hD5kOvqd
zL$BUrO}u3i!^w>c8X1M;GZcMvoBehB7Unuvf;B9>xU+BbqsMJy*SxV)h(fVC7V3Je
z9u#}ggxb$2LK?rBS|f<i$OAsRxX(;eM;+mqPWR-fK1Nlp<=vcFDGk*M$QCG$KAQWh
z4ri9R5okd$_u=yrQp}j;b4%<*oNy1tx;F0Xl)UwG2MAHxU$qX@-Wm(ka7hPdn8`yu
znF|*(SC>O;5Q&MwCg;a*(QzJ(@Nj%GY%?PhKqf*`Cz<WJLqS(}=Gv^z3eB+9Vk^6C
zOD#`;qNN+$*5C`fFZF2MEumy#!_H?#fVy+ti~x9QuBi7rCkkxasd=3adaIy%C`~a<
zOl90XASS16xK)<ffV0k^5B!d8nX_=$O?4Wc%=bc@&;zmwT@3tjF|Ic@OWEb3Ga*JT
zd1+fF7|@QiwjV>-a+Nh-ReA)eNbf0urN+PAL+s<JrwdkP=f5Qzs?o+6Me|sRT9~~J
z!}ntw@(F?i)~d|hx(n;Io}F8Rz};9*k_d;1OG~|kEI(+HcB>p5>1P^d9R)+Tt*7H6
z$-5feblb9^5Y&7M96jGuudzW|E4IXMw(Rj)7iI*`y3<7q(bp!v*J<LsDOc6QwTu^b
zJrp$jsFY9uBW!uMsDK#0-Kw12*=@Oy&D+9}%@&_*#;}$Fm;qfLBT-*t&ey@QqM!+X
z`9_h;=Zh6Y(p6k&-w8do>)PkCk(+v)*O+kPcS^M16xUebyyQkdmoI(=ubkfnZKH&5
zELb8D`A6Y0<yi%X7~om^8c8F4K`F)_=As+2Gq^PuiNpUgE^2O6rDLXg>!NQ<-J|X<
zd#|mOWQ6qj`S|Nt>wCIbc)0{1IrLvQmk~J@z%m$Y9htU|Zu@O{L7OFZ3_p6ytJ{NQ
z7^b!+UbX!qTWMab_-A47SD>pRy`K)v-|RQbhk)L?4vvf=W;9J$6ig&D&m&VaP4ts-
zyLNMRemhaev%k2|`JP?+F~`?WwE52u#{~{Q;<FnlIk0@rdU3qG@n2IaG-UbUb9?!q
z2(U-{#yo3M&S!z=sw-leyhHoqD!ljlchw@|)IIIWIUr(1Cg}bZ>z-t;Oclp&F;;<+
zAB<Y5A^FykRRC6|2^ohLX=%r;X81^F|DHFyOC|+&9OWFIIhvC^Ih4A?BXwdi)&zV7
z%9JaUk=9!^C=SRyYhkc}<hUl2)i&=j&L~ynq+9Sh`bB6!(-JR_^==JBG1^?8h{*?W
z=$f&gp9GLx3EE#-KIUA^iQRf}KuQeTzI~pyMs*!&PX_<6tQw+DzDqU2(S8QOKW^y=
zs>c80N=<mExw!F;3Vn$SIniW1Z&u5QHkJwd(gTCm*>y9BPrs?t>t7|k@{gl0<;^1u
z7@X3`*#h1pL_&<I@s%I5LMm9~69Qm<<&x2x_&*3hYsUb14zX9+E%ze4wqT3Rmz0iD
zu%+Q#i@lqInR4`%1BpN5gcheFJS<9e=2QM2e|ztc263P@9{zM+oOA6Ia$o0uVN*lr
zNdEf7)G=N-SvKq}d<4GuA-7sai3X}4VI1QZq~Ezkf-}gAv-NUWGC47#+1j<G86nr8
z1gie@#!BlH0raBh|3vYgRPG=JxrZl0i_#HJPjJynnkqEDqrLXAIUr`FW@#4vp<}Pf
zHzU`#7b{n+xD(8pzGB>DoG4FCW9wf~{NBG%Yo#sRy(c`dy-Be^p}*FcGtiv;*?w~f
zqEEUaRq~+BPg4!$AEE;k%0y#AnYOs9px{s^(_TIGte%FM9@Kszt&5L9j@`39(23{>
zCMB~Mz7i63?JF=_*R99--^D7ySCAj@vl<W8qGa}BHkHnRwHm;Skx`nMvWG$z#{8{U
zB4RDc%=n;A3d-i<DBcaaR3=P#3a=CiMmS+;Tv^3l4r+M|O+6Lt*dyJtu$z!8==_s*
z^B~H@CZti2z4T4;R)6PkP2E2Oha>n#MOQn+%v_6#9P$UQ`>ICPVFUOT1|_D~a9*p#
zr0`&A=|FjoZ`^tcQ>%`mqhxwWqk&L6`3fmbIUD!*g3N|0(_3u|KX+zf_&(g&kZSU8
zym)sCHw2pn>@y9eYdxaLgG_8w7bR`LYH|L~I!vkp30)5Q{plzEQI-+k9$W(VB<eCG
zzFqf6W~X-EaiDerr<EzvH*`aIZ7)%adyC}@iZrFUaHpJ+`5CU|SKtw1_5?KcAx~YV
zArpML{9cUVLnlo_<2IYT25h(&_E6Pq8Fm-Ey6!joFFn&wI~<4sbnwuv@mcFiG%mjO
z*_7L9%-||+4{an@5q2Al;aHda#NtUp)bIx?ir;%O=A=Y6Q)>7~@&l>UHca<nx6(yT
z$A>=UDS3lX6iK9IO5@ym-J$8#@ht8Uj2GMQwZ+!Eh%{c=Ya0(eQT*7xJ-v-F&zyqo
z5#I&iv!?pa`bf}npUuGwS~5`}pB@eo&ly2mnoBeHiVlTg0C=sAa4x-W@m}Mf81c`8
zYz^c=xQ&7aMWTaN2<jym-G{e7hIh<I)?pRSAB&$U5D=?7Ut69bsN4Y)^B=Zr%&k|7
zxA`1MPWW39T-F70G;}7eBLr<AGuN?VLDrBy<h1!3cGTpP_{Hz8Sn1ah8D{C(L?OI@
zf{PTU;R~8jz{^SV_FO{LSprWThx(0Za{NWT&OZKCTYT>kcC?=7O#K$d^T(cExqxa{
ze&8@x4oA1;oouQNLH&RZb-nR&PfXhnVEic(sMoVi@^5Pxee@jPDHa!Rcz~X!j_Fas
zd15`*$K1af{xB@5SKSepXEZvmM7rPTJw;bRA_i`0Fn_cTAPi@UD#pY{7Y)Q++gxLU
z5jSbwvr}FG3g$WKXmN+BQO$80S3Ic<$e)W5oCE*Ya+t>hU3TtPOwYEPeB|4CdgcN&
z{@z+pZHRC^jXbXD$;BSj?~t3}Ugr8Q0^0i8F!BN8qX-_&0J;p<x^okHZwJK#g@#zT
z)<O*m7gyiY6a_en{d%Lt0<E%LU2Rc_;TkmRE{&Dqb#gHwLtjzk+`JHaV;@Si-pT@O
zdO4qpuFhH5v-^#UF`{miqqjAy9@f*&a=`|-&(4Qij>DF?%I9t6{Ss0^PPv<gNQh*x
ztmUzNLz6}xE8cQpt!m48dN`?!Q9}2M)(Df^nnVTv)fncQ-!JM$a1rneGG0wD+4MR`
z=gpE-@$7P!)ZeA3%JFm(srUZ-M}%yu9y%n`)eyJw3)xij0!rptMv=xdc;$s`VLjJM
zavx<unA@~Vc*8%z4_9RT%=|-w+!#iQyO``l2{uyN3(8WIFH9+t{-5#ilEBN5?_1*&
zeEJFkyv7=(>HYg)^)Yg_G>fHw+}xy3niP6Xaib3N&i{T<4hgCr21g-^M)r=jnkZcm
zTm|$D;^U;**^86Ga$vwrBc*j1XkMhTG__4N_PM_GjC|n7!X3{qvmiQ)9~9kQQxW6T
z`-i)Alba&0NeJd7z|%2$vze+M?nEse%!fRs`Lf(<8+Bx!RU=%*MSM{Iqd}I0Y82jd
zB_}R={nJm55SyqkmPyN1+4kF7iv-B^WwkV4{=7K0mgHc_(FanM1pAiq&1#)00cwIe
z0^EH-glviFmmbdR%la(MuMP$A)6k*Sj!)>KSL^m7qPe<1<@RO>6xY-{>&T_%Ahd)F
z^5&yv*5?|(E=4)jW`2=|bGB{KsPk^rAyR5Svriunb7zRaO7!MRHBoi|*8_y9wN;NR
zh4T80o%Q0%lCgzcus+3Eio~ifsN{S)SmU*2HU5wQOPa$nwO)o=_nhyYTsn{`w#1&&
z^?_B+ncbs55PejC#el6<u5%qURZ7thgQcF;T6$DEm%OygEqR2AA?>*%5$Na``c++Y
z@-VS1C~iF=`?llE@*3rgZKvTcyhXTDTjq2`ENS>=vAohN=rGvMQ!HaJO0bQ7V>4Ll
z?0NE|p#Za`aLrMb-S~zt8m2<K_V2=-Nh+`PmaJ=y*5;~~WuzzCrIY876#rgA*RGR7
zm;-w%Sk`FgJA6TXM}m>02o~(72FPp_w8^}W2)570mxPWIIpI+E#JKoduW2eECM@c9
zPw#=62Ij;i7~+k(c^-af<=NL7sB{RLxiftBulOuj%>LW|Aq5rPJ|<IeUWB2grFM0Q
zmnRv9RI^)RnPj2kmP=M&$E-f`Et?pXCPfd<zSchg@>y&uXza@DUcqLql>?kF!ZrZ-
z6@6Mhj>TOlb~-c!vl%(f$t8pMu^AN3POd2h6mA8;TI#k09xRW7uK)%QlSli!5aFGk
zb{7he>G^i;)0LG@iUzb8p*6;ag7ErP(NSkqTfoZsikj5ieKu~9bH+=kDFh>0mOFjf
z49VL<Y>3h%azVJo1U3>uskSD0J=c*cmRnYw%)N;|DeS7R@F*;<T?METl(sAEVmgdA
z=QA%??cZ!W@h(Ra-Fbm)L|1ZNW9hxN9Oy8M8KHgpe27dYR=%gb2R{`ukg>F}7mqx7
zXA@5-h<+By<3X#_Z~%4oi*%5b*E1*Sk51$F0SFC8G)t{b1NrGmPo&48LqXaclJSA>
zfh2$iz{Q<H=obfMz2{|TgSiwx3tiM1WxZPrxTIiws>wu4(AGLrWMpfj{{O1!%r%wl
zOMtO`Nq<5nV=;6)gS0wc2IdM7)k@+=pBPdzhXVStHqW&|Mm{kP(%>o_`{7p-;3Rbf
zn~0TUWsNo^jY+j3a`UE$>QtZ@h(Y0-(eZtnh>V+a-Jj2R`lfO1iw2vkf2->a5Dm$1
zdL4pH5>8I624OQ&i0w~!qX45ZwIKk*`h_5{#hwOmW?v*`9C+tO<Itr+P}*APocc4T
z)v-b^!ZM@Vq0W<s<Y1kOq}A`-!t~;K0qm2}B}<z8I^b9(&v#uVabw|dDv7>wqC#U0
zN!Vxba~=K^;)D_uxjWml&$K=j0ryjF*WmBq^8Xqc*i$IP6ubYZG&Zl_0mB;v<SY%D
zKc;Z@!@$Kb9-+y+sG|rebud>RqktNc27|n?G6+){P|!^#nuj<21LHSMa2L-qx$utl
zLp2gzO9w~nvGgT%@dgVI3c+yNgLyAFM+Xq1GKl3WG>lU+3~o7%xnzkY*8PXkzoVnW
zypyf4T)^mFrTH{y5}lCOo?M2cxqlv;0o5E%N23LxG*EW{Aa)s_>!WQ{m%h9d{(K+|
zjyn3&jzoLGwWDa$Pbkb8mT%rGty;GV6g4jlF72S<Uqp0>up}zpeJ|RqXSu}a76t9H
zeaTaG5ZenV@Jbp6NT~;z%a!kk^<%F8g7wq!V~@R6rN8J$diVy;(*E#Z!f0k{45(^;
z9L4nkiPa56XTuv}QO?ef=pU?EpHoY_6>h`z16W+f5eW=QXo1IKxTI9oId7&ijSvO8
z;OGT2Wf33(12xJ_dQhP%)4Jf1Tc6N&C+GJ{+UOiqry8oNYN+O<I8Kn{=;mHm=Wp<3
z#{qW$X_=^u_fIzX&11?ww1@la4)J3`u>k#y7l%m5vQoF=$XNat#uV2%{Vq?XbuDBg
zsSikmT~OH;>`uWwz=mg+p1>V=Ew@Ts4Wucck5bnCw~-VweTQ|}B$3sz)>qClTn#gB
z|J=zo<bFzO{A`Is`9?~xD1WSz*|i-A!;59~u@CH6z@6-_!5>v*6s7?L^zc4|p=nXJ
zFi_C7I+I87kh8~VHHKtq@w4kfPg~BOCQ9MmVUBOd%suI!BabKMWKX(v;xhkuDW)ny
zOHi)~-GF&Djbh@lgsQmN&#|BPEuzimo1S1^*V_+3$wXINbMvRK2ULa=phtm=1&wdQ
z?YUDlBAo*JaOstf$3k1pesY7wAjJa{DuzK`OvL`0?vV*>jh2coh^(&t^0l2u*+jW8
zVGnrZkyB6^8b!rt6f-d0cd6IeP^3iK+Os)orcTU}!ghg|>R(vaI5Wn=WD_Lq9nh^K
zp*XtwtX&v%HjvP&cwm?UaXH?$@(3^Py=WW+@LbbJsj?+_;8Fq5g6UB%CgM6;ry}Ga
z?F81c8XxLM)jl+y=;_SIP@w`WNM@RVR5I{vk*fTidtW4g6lG$+p8O)quMiTDO;-hF
z^7{!rB;PZPYPY@fVSJ6-$jG6?q%gb&w-<YqXB_h-@4_DTi`xDUsG(#oeouAh$t{m}
z(z3`fD*<<8E1WU)463-mt+oF+$n5055PuxQ9!uWvOL9N7Bz={`SNaZLSyHV6Px#Dp
z&aMUo7TflVVKGB9IR&e^xtjfj0;y|l-y^o_tSb(lvImA`hNqozO~!1LdH%mi{3${V
zzfoAns3`NTaX;|g5FDif9UL9`Hzw{?J(fVvToH1$I>6z8jrQ2C&9RbL72trnvl&dn
z*XZeQy{acBiNIWL^rWr~!gLzCQRy8xc{752N-8K?vRn0_;4FpoPVqgWYPPkqy*v%N
z7)SL!W;=}8yXv#O(&!-)Q8N<wMp*_6_bdie<fp7!X3{LeunW1FQ}PZ+tW}Q~Hen95
zA8isUqW$vQK5nIm`B|0w^~;c7M9oF*!EF>5Y^`?AGQ#%y;=6T#IxWQj)7cY$TW&pK
zC;<{Cy&Nj9-Otg#FYgAJas|%PwGfy|qd0B@1*Mi#-=gmOBjDGjtIf(1>mfzUae@_u
z(Kh+-XjkHvD;VS|+s-Lt-R|?@_F^~7eD${LDzL3r<|v+D#1Z5%hvL1mYbzymW0JFR
zb$Q3hPHL6RC3{jzJ^GLctrO5KvxnC-I@L<`QYW_lC&>*G3RW}W@bK({|5*T)c1wp^
zyg`<_f9(%jm1Q1tEK;qnQHjttH8o}*CSjj7UEBDt8gd18{9`dsiVBsVepcvu$uv>F
z@|;Q}*C=9l=m&erp9mQFdzy=6-s+0-$Jb?InF3WJe^33om!5qNSf5cqmHxbJDbIr-
z5N7f@6eSS`j`Zb4vkic<{0!Ytl|K&pLt*!~*MpW{10%nU1T9-G4SeNN!zLZpfF}JV
z9tyTJH{XDEV9?OfwV})re*<41|EdPNOb~J@opJd0YSJu<@vC3ADL#}X3n=%-n+Tqw
zkI>UAf;vutDlZJ_I~kk?BckS8V5RBY2m__;tTVWQY=A3uB4yOgBt=I~7&bA67?t&a
zt2)4r?$ABMzc61f<hywKidr&HYtlVtfSBWml39z11wG0AwW>|vwCFxEvd9nTQInov
z1FUl8#vcz(i@k4AZ$+(Ez7jv!6f?OPL33lbfWLKn+Bz7TXIxR+Q_f{JjX){jC7WAG
z;haoBKF(}S*_xI9s6j93*fM=0)P<i+xoEnZEU5F(y;Kai(D`zsT|PT+8yJL%|AgtT
zeZF3Eh8M2biM5Lc0{AkhPxx8m$)fZmiw5Mv<jxcbzE8y@3nDKUKxI=ZS9}XMAI(px
zDY?*uSFGmJ7J97$6a>*g$<6C&lpMM$b_mSJKFp%h{KS+iY93rfi_cVe+{sP6d5Rk4
zw~AISmRVH`>5#9J@GOEYo`6ka5~Ii>W`VQVq<PXw1}(53MELghh?b@hPMg$du?pY>
z4Ey0zK4%n4a%Mu8d}v@z7{h-yaJ4jPOQF65!r4rlVCouORLtEm-$ds9UQsOkYy;X2
zRn}bCr=^gYw;~E14JtjM2i`e0jOgoXTqBx~7K`9=^jco1CbZ8f?~adVZxkik?k20^
z;CCFyA!szRO-cG$)rh^vC_`(w+<Afi;0ut`lGyornAPRcbSSUbv`fwFI~p)&p~x0Z
ztaa$sBWC*Hh71kfSto^LKg7kddpIo)HnaB^;+?z)l?^T?u*%##!Q@Hd?In_apU~~@
z$1By@Lwtt1SdUv7R4T94US~J`6IK-Z@q|`l?+-`@{9D_u?z6ndv=;gH;SS{%(TQ+q
zfdhN|0?@JlG=P&qfqfHcGdgLcMTygH3ZL9kSJ7T-)j_0!>Y|A9un~Z>;l47cIBTO9
zCZk2>%uu{^PviV#F%sOWAFNjksDegra~5s!jwF|vPhG*00$h=udY0hI_+_`^kkAro
zn#!aXUN>28)Y`CGS~7h!Z<iVBD!LE~t-?Lj_pImA?Jroq9A2;ab|HH`TkoKSGpA9+
z9*0kiJqmjFuzB9mkNBW(I)bEFgMfJSewfd8CR-m1OOAg`Oi}pge2jjCLn!7Ug$+Bk
zDxhl~1OE6|H##V(O)N^eDK%2`{1L{JiKV$CDQ#ocX9{yIL_lGKJFeko#&I)x1oZAX
z=46Q$f05)O4DL)t%yvV8-zhZTm`fyjg%Z`nQ`=e~ZvCJ$KGux7VC-*BfNC<>R6J15
zL-pIblnk$VqV7YNs<|;o3-MjZ$J4r<pVCb?;lmeDtx~c_2rN`ZOv6WYUVZdT)Z?)8
z-v_&QjQVMLvFE(QHMhQa+I<8L^Dn!-9kd{KArbnBO-YQjPa~vMKeEp~(x}|l-)+*-
zXDH(yy}EoVEm5QQ?%}R|+4#amH2ls`>1h|wXWM{5Yo<90105a9hA*?=en@xAIfQRW
z@$0~WD!=8n{J}zx=H}m7*6Yz=AYP~Kq%|a<HkV{r<-moaaeCv)dOiISxHO^z{a@%2
zVa(QL>>E4VX|s%y+CcA$ajM{OMNy0TB)#3c6$%cV;3<dnYqs;CpN7a-#l+IUFU-^`
zs_8Ih)ag`5nl$CpW4405DAyY%=jH4NQfyH2sgsVe_h@}9tRo4vZe;y&8U2oB-+HEx
z6&Eg(p2K1$rImGJ{NN<(th=HHrV$%ISMXbsZs-e6`9R<))HezC89dsfqC&+IJ&hlE
zxMxF`aliQ_=Xp+|j!fc|1Git2mIqvU^0tDzZw?KO_*guW;J`>nzbbkj)vK|Czi|Nv
z3An{y>9FLPyW@2__WC}lX=NQj4>xN|BvFg02?120&_2E0)=P;fvCBHp<bm;ei)qqT
zfV0d$R=JYuE_>HNkYPr#f;$tb6@|VuvZF{8;EerEt-&R=2B#%I&dmv+WBa&RGSSJq
z_pOOr`I#yC)Px8H`B8-;!vlRi5XFJXh>XpB1QS0@y&Ppv3!$~h58dn~YN075HXW-0
z(ZdhGN@G7<Md?7y847-jGvQD|dpQ%{Oub~v;Pm(0Y^IZN%iAC0t&e+a+0^go^$a2{
zSUun@F1;9?h$m$?hD2c*Gc5FJ<vtyS<`6Sj#1v1^&uw5ZV$=uX8qFQ~CN+RR5X}K&
zi}32*=bj5w3s5ebC0=>3f%yuZOxZmc#Thr(d6Y3ch{cF>{U;|Fy{*w#5aWB6aoYJ>
z8v@>W=r<&d)hoD$LPTD7<NJglk)~iRo_5`i`s}MKU$Fm6DW{Em(8=?+O%z*K0)~v*
zS^Xb;SnM9bXRllE1xj&z%UN-@x%VNL&?Q-?fdC+~(vg}_yjxBg99=5ckEGQ1*27La
zw?b$xR8pt(ZR{1nmm?oT&BgC9Iosmq(NQ6^`(S@R0RKM#z@j{&I3bEy5;^ITB(S~T
zMV358pcE=R9Lq;oIlNETG3eDVm-TPtxd-Zahy_(@DOb?KFSN;$DL=OO7p2u;r0kiX
z0IVPwn%hZlWZN9<J;|eknsHO~53+elQ|3Je&Ee=Bo3DRbg-b{he7_>6Fc*?*H-zN5
z^M?}%Q{A=$WjEhu<-2YM1Wk;NsgimzkeHiK>|IISR$VhQ&721Io!_yy540MA?Ih==
z_}5#aqP}U3OO9Q@%59T(F&7aTj-%{I4gXDb551DS%7G?l7ng=0g=Fu&NA;^!SqTP*
zD|C$zhhp23bF9GA=ntAuE^v+11|XHwzquj?n(Y%;onog($fT+Uzi|#27xi8fU{ZS;
z6V&Km`6r98pAL@mF18(*0nrd1=&5KCFc)g&u;eWul@5k*S|S-H__-(If{8;p0k1&U
zD7Y<*40H%W(S<gP^;td!ragK4`?$B3_gl69fD9fxh^@*Rc)CCqF?o_OPf02DA<&F(
zoDjg3MnwuH6m(PV^KN2i0&a|8ou3kKMONf8B*RUPM<B#PAgFVcEjn&8gWp_qtZPqW
zD6LIBTS5o@H4Po(zzZ|fwcS_Ji@bh9Gk0rtsj$(NA)w<>3KPjdQ6wTfmk~m3*2&w2
zVb|Ko+FYsnSoIi-mWz+V^yHx$qxE7XD+yqTm8+1}_2fO{PbS{B0N0%(*49hqW{<A3
z@hKM>ML(AhDaKmU0KLs=B|wIH1KvuQB(Ah4p&k|WC{#s5zvSIp4N?0EZU#wQ-zHER
zfES+Z?&abZomgb`aTR0%&joIW+@wVluZSPb42bfP+ON-eD^kZ+XT1&2VB}Y)1Hx(3
zQ*MTz?Af!#wT&?qa<}Q&9kGv(tmwma9hsx3zfS+=@bMd_e76p@&Qd}phU6g3Dz)~t
zF#JxYvL5tq^N=o#*H@XP%-jz(1JXInBh&Y}KU8laPfCAzb!aDNH`#ZCxlyTD=E2>(
zF>cFTh=u90q_xz~y2sYjZgqy|<}3d!8y<><6RFq=(05^iO_WDka)^{te)=xOVaOkQ
zLTO?g13qY*sFeyym4DrlrD{R=+^&PvC`5#y`Z)lIgEIR0u5FbA-|}Aso|2cgDE3dO
z%EwNi5^3FrCm6TH*jf=>3Y;d1-v{=iGm2s>F+7I%^&pKXafipv>gKkGtc^VFcTl;V
zjOs%Fa#BPeQ~PcDp{qDZw83<o_&{LK{uEIJs7Qmfn3b-M2jbs=TDgmq|5f!Jk&jOI
zD}G0{FWXdM!3X&IS;S&<Ae^Hc_Nz3R;RrRa2rLvy*gJdaKz*(`6#Ms51W7<wEYZi^
zVEhA6xui5r{%j*?l7#=wZYHk8T|2Dtt=f)~WM<eYtZF~cBNvaqgyp^>UjogCWpcrm
ze5PHhAYNELOI(M_u8tGwk@mC%v`n(a#Bn#mzY+@n@$xnU-SrqBadADAX_B5*N}N@Y
z1UjXk`$9*@=@MHr$N?80MQLh-_=1?sN*59N^t#+tRbZd_YM0%dm4?!eq>$~a>P!oY
zDE?EbOb_5WW_$8lWnU_Y-cbVNjcJ)^ylAH>Bi+FCO4v3(MJyYhV8HhCvBf`Y%?X;j
zv{VC1dQ<=|UmanD1D8mM1W+J%E+s>r2tF6OPmT(Ba$%#+%2_!K`s84nd7u+mo2CR4
zTn(XH>>0=hugioC-S->T5ujwv2!Lv2g9%qn(hl}6TJgO)XJ|2C3#pSZ!Gh1;&s@?c
zTg*RY24*gF;no?P$}T;7XQTuEZIWzVEmj+dm$GO&ge)P(t|Hs-)KSLzbt$4Uxum}7
zeX&P@0En_NNMAmVr4nDE8A3xE%;DLrL+{1K;FvEV-3D~k>BleogOl@7`2P9W;l7xG
zx^zxeE6$yjZ;4#X$p%)NIQ!^UOm<kFOOomLrU;?z5W(c*w%X3L3l?6EgYBfNYQ}e<
z^83*@3xp6xHSMKnWhl0L%wq&6A&&oA4fI8n33V^C&%n|K`_@WcTr!do95wPz$dc;Y
zJki_7!l^<4UR&M2mHIeE^~Mupho*fouv0-efkMvS2W)k-Op5T2)Xdl!<jtl6117dk
z->udF!V3X}*W7Bw3Q|l!bYGY-KpIg)<jtewTs9--VEr>OP*?^118)6rd^T;!%dpV+
z01DT8@TT#&F)G@D0q_#f33aC7bF;m(Y1b_dR27$+B@?o&{GqNS%2y%rjP5$FbQOA2
zL3^(Vv*jY!X82uf*p$W0^<yQMRPjOs$blSPvM$X+GtAiQ*8sMiDqTv~y1^n{^97oW
zS%V439`|DLs~HPbi68n&|2SZUBq_tZ6dxf?!MpYa>THS5-cqO4D*}XRq;q-T6M(JT
z>&Kp#z{VQ4m>osgOD(kq!86E(IZORr!|S|xDh{*K=b<BmQm!%=r<>}&E{T*)j40j}
z@h`U5N_w*79zXZ@NkX&^V!_~Dtd&6X{P{vLwh-=p7vh@vYiGK`2vbqd{0DDc<WwVk
zyY@kd&X+16(hZUFb|C`k;!)tH)OnD5AAIw~?LcSiJn;6dm}ATA-}(FyA+T|~^IVSp
zDQF$B6ewh>Gn#8_7W)3Y^22(F1K?3>YOJ9&IWMj`L*$p`1FrPFi_3!|nh;W`wLoQ$
zn8es0-K`tDkf=D>UpO8cV5eYkIi~5VE~t43;8#Uzm$Aww!PdeSwlCWCbhrikmt8L*
zz-s3-3rbQm)E;pz&Oy0YBef~3{u!M7zGx?Jd4wmPe2?FV^I<UT-Pd+U4-XI^J!+x1
z;H<S(=bH_sV0)BNJC;@VS*j?ZoM8#A{(!R(+=f!-jYVd3hng1@GNhW;Up53ZbNhKn
z@Y@Rf<!al{0lIYLrV!n8<(qF%b&ejL&O{a|-fJtzK!a67uo!np%MXix)<7R6$J76q
zkeIDO?z)oRRTnmmG|hYdikLb2>(E}olORPay?>G{TaHta=e7TzI4U)mf&HklrzAk)
z$JNrY8;25+xz@91g{l-Bt+-u(mc>VJTS{_~0%4pD6Cmx)wEC!uu~VlQa`9-jX9#Zz
zTQJU6Tk|b#+yAnO)1mRZR4c6M`TiE`Ok*96JEOUF-XmRsK+kZAS`YD6-(#*E7tmsk
z>DMs283b`OJ*t4%Ir>;=@OQ;r@j^e0ArTFALeIfDsD(^~q!DvQ_R~(kQb;g#E}hl@
z#{sie)Afb&L`^Sl>C**~E|3DyFW-!Pvv3!Z^Au6yS7Sgt$l^fTtAPu_E<&4<7WiX7
z*N8QP$Mntw`KOu($l=m~Ci6)!hb@XG<X<DH7VlaFin7CZgwBzuQo;e$vjyvs1OwqZ
zQ8I`g-~$guh;`MMRtmT79uvwDgfIcD1dnj<MgoiRCo@w7x=kZbc*)+f_Ef<g&gx9t
z7jk}0H>y@<e2Az(P3ZJXIwO)ce2qj&SL}4&P;GZ-#6?g8Nth8+1L>w|$Rhzu8fzmc
zH3f2iJ)&)O?)!nWdaqVNyfDB5^A9cVEhRXqhOjl3b5J@$k?Xw{ER`Ym*;-|#gHhEq
z3><tEXXJwBa0ob)(sEm9a)Ub2-)u=({aRSF`_Eyn$5?QF>GE<-bu~mQ%QB{q-k7bU
z=<f|(j=Iln9?pF<x-$AB8UAWbe0}E0XZ<xcOYXind|Olv$V7W(y+6GRGSL1)C0)q(
za}mitlB*k1&+UW-eoMn*d1m@Fb1=I-e7$MNs0b!jqu(J-LXzp#Mb+oufdf3H*rmD_
zhZwj1E?6Om^*QsX2&zFnH;i>{c$uPms9@vjhV_X*`e|2`7>BK&OP&Dr)pIo<o>*cC
zQdoZo2e=xT<D*HBz4T?{xUrhwb_Q_7BNG3+TIpw2Yo!inzW48z^puH#oNh(4(GrnB
z)NPSuC$8jHE6b4+V-PJf3-3w@?Dl0)#Gvp_jX1FUp!f7LROHCSh2iG(f{E+8HEI;;
zf%eU2S7+z#_>x9*U&*T63hx9SO|8%xXsSXdO-T3PT7g@OEpSDZ9|esLETA`{{3Djm
z(=s0ep%cwR<h|Ssso$m<2({%$0-z1Rs6UB=^=(?|wjv4yCljm8aOEXDgK21ouF#X7
z?6~B#;nC~*>}Uz4&6UrJ^0oq<r4mFb$VL>D2@N1E0AH$3fgHFTqIZz0#Fhag;)XJ-
zPtC5i86`tH-1?KmK4_1nAesXiHmM_W`-WH*)u9by)c5NU?B8CbyOVsup1`+JGx7Lx
z{y7Fv5X1lZ3Z-%RmckHaT{CbgexwN4vuDQvosPQ5w`!(ZYV&2`k9ZYE<SMi$m`kvy
zDJ&p_&`Z;`;fPJ`;#P@88FBb@E!RxBK_}tPLu7wpZRZDD<>t+;_G%n+sBf{{<X1A3
zanO9~nE}xbSW7%At0AR{;3$smyc|*zxlJcAg|@_ok-8C`a=gGY3}>RVOWEcXJ-B*6
zHU8P(?5fxm!W*u=+5`Yw4i>t~FjaT`F0}USZ;fuj)@fm<GT23w*#zk$oKT+l&v+tK
z>>%}2_RU-M&2SLra8w~INtP`+y25Lf772v>0oPX^F~cl7o^e}unIIR4WquVLZ3A}N
z6K@2wa3%{a#9G4>QY*b~^iHzuNV>9VFC2C`@!Of2c(KbD*~73JlM2x-8ZO<NfXN0H
zy}}BvR#VJsAOMCeVOYK|5fRns?!ib-q?Eo0sJsC}yFyc$lZ-(Cp?Hbrik9^EjJcg{
z-S{;D_Ta?>ck_&Irqjf=9L_S{oPDiYk}`iJm3sHV4P4<03&_<K<D32AoofqaIW<uF
z;cAX;m4!|dh$j4EH?W9XUr15o(Y0>^l^R7K@E(%Zy1?91Wtok}gC$Ukt?!fb^5~m7
zE%%JjM-g?ZbUYLOYvqyDw`N%<(ZSONh`|mIpDP_-UpEk+*zq-R^B%#0TV|AhnMngs
zhfpqp^58)*Da=d;ed>?nc2Dcq(h&zYaF1D-*9kkI2Lc>$mo$b`O>@_+O-Li}JR>4M
zpsd=XH;6AP4T|6Q9{PI}!#!r-d-<yA4S)8j_<>=c<+w!i8jZi^T(1=&Qgz2ffHkgK
z^^BzO=1<@qK(EthA5EoNdPk4Z1X*md9V^A~%zPE(_|T!J0sI9EKB_{!CB>X*_OE+F
z`6MZ7>&~v7!pZQn3sx#2U83UX;vkL+Z6unw<!W^gi3_<~U3u@M8Uf|SoM1$VU4)D*
z#d)r6JmM{^coGJO7X7P>1@xeMyZCeuS+4*ck)#J**l3c)FTBA&f=S}QBZSSda6};C
zwD0Yh5oHz&no^uEm`LK*x90)=jWlKjy#&QcSM)i329=%SVh*IuKkKDy{fuV9`u%>_
znsB^3P=XQSf}zjo$5PaMU~Lx#%QAxt<01vH?qg$8uQjL3DauNI_Ja%f{JNYN^MWZ7
zO8^fho{fC!b9j{cyoZX7a?JKgAyVitvp%A4p)nX;XU;VJ96YassP*8JVBn26>;xA{
zP{$6~6!h~{uVQ(M@p~iwDCMN%epQC#10vLeK@1B79S-m$W{Ac&W~K37PZm?cs<-T_
z@=(pmpJKHRCi)5Z|0xJ$xSgB0T8*rBL)}c_;-Imxfvu%8$Sp>S)FukOqv5Wcx5Tnl
zCwiQg7o~#kC!l_^{Unn5E<&$UX|YsiDKqM;6A7p}Y!_b~1cQ1)VUWVo!wiqMuwn@u
zZAuSAajD|2&wzak(v!eW$S>Ydi00{D>aH#p$5SQ^FuacYv6wf}$d{bWNQ19=@LxSc
zNdiU;NwCWqnbYDt2>$&}o1aiB36Mf;j5;Orcp-J^=^jN&UgTicN-Ao^uc*8|j$eaX
z@6+iiQrR$#{-*>j-e&#xavuwO?PHP3Q%Q&DBKb#ao$vhh8ud2R#WwQ|y%u$_dewT@
zG?v^04)Xl|$}Om?@U0P=N3pRyM|)W%N0%bwoq#?3XWd;HdmJK2HK78nqe@mJYxz&>
zsC8DTM$ZpN$=v3W({-$=A!s*{;Q7S40*bcQ!y=mT7Ii$5zb1kOfA`V*5G$Wde$#w{
zfy#CLAAWL!dh`CCH>W_TOlf~Mgxe9o3J#TkR^-LXnu-iYgmAd96uBo|{upev$pRb*
zR8bSi6r;Wb`KG~q6meL^PmRXuJ3*=3Sk<=|*QRj29!dIX_4#*Cr(gPms5+VO`&d^3
zcrwER*yB4L${BC-DmxcKK0SZ#a-n?!T@!=>d4-(A{CGS~G;y|=Y^6~2yeXunB_1%K
z_8IlNra#FtTXuch{?O+x_aoF9=~NXQZXlO)ve+VATr(~7N(a;Hl`OyadPqkqp2`Np
za`x0IWOE77@`hnBIbSb`S26@41v>1=k~PuOK9~ezhFAm`6)G@+C4`UC9|V#p_`#6_
zMg{2qs2z4laIr=a3I|*sN4CTmuvhse<<oRC)UYC2J?OP8VKEd05V@j`ad>V1F?mhA
z3%jOA1v<ViHVZGE<BDpy6q)OYh<?O1_qDp;?0)~3=x+u21XlvY`ort6?jt-zM4qJv
zkk)ZZ!Ya|*v``Ak_S4W=e+nFf%AtrXwV#mr<=d2Or}G}3<NmnoIrRG-D*(|)tQf6e
z3;ym^A^a1)7(Oc1K3|5HaJuIN$KjBP{jje=(sqc@JsNHUv>nA}xH%*b7ljh7yd){2
zvLm-;+r?Qaxsyn;HB#rWFi^<^*G%LLE`@esej=d1ndcG+g6v?Zcg{mg(jRmH{^NCB
zINsPY`g;|)LtB)RfcxSUx}=(q;>h_nfXcXe8D*4W*QpC%%?OKl!PY0hNoiB{@joN>
zV76FKhq+pZnm4|BHBW<6olFnHbl0~`nmsy;fm9V!H}<fFU8eccTT=|kx;N3$33W5m
z^Tq>h9#AkyGoXsl@dVHzeOM>tSy4_3J6Uxc8cT5h0U2*aUd;yeW66c_XLSaSOKTql
zT}?oH+b2m}RuYEFv)FYD>QB*<bMu_)z}O)>HgQfLBlE8?kyThiZY+@6a)^jMdT0cJ
zAe5O%^?yF);6;&DW@62>8WxEJ>rMlPNAil1W*1eh1o4Q4{brzdEF2ASpdZJ5NCMoU
z4I_+&UdnNA#Cs=jy`5nKc?#oRyT>u~cwN!@Hw4;KL?fE7h?!_<s^~-pC4z~Iw#Cg3
z*$wGlr)Wj}$z9bXpec=t#Bm0|+eB{_G%`RrJ44S|mLY#h#fA<~YU8#{#Lvu8bw%st
z!O6?);@xa>x1Rt@+JmU#Lzc0N9bTVpUr9MLk6E(gs`$dz-=C>5g{@WYn&6fTVuOPC
zDx1;zwf{Ob-;8|-6=+u%`9x<|hrbH6$FKuO^U>_|^mbXZV)UJVz6sBWZP&*swD)DD
z@9bQiswp@@y$IRsm9zh}EJlqY!<3Mt4LOdF6|k1kZ@lgn3SI|`;;CDZj>t?N;w9i=
z{lNFsnI~<s5|yFBW=b<l4H2No*e;SrI<Ew9o3=mA)*XD%E?_PG6p&KJRM`U^2|M|0
z&6|)pLqH4iyD~A+cR8CcRUhv3W<^wZGMd`P{36)OJN~OiEVJS>i?ZqGIs(FKpNEV9
z9C%xx%Hbh;CLa28x-gtbkqmzwO@5habxfDRD+o}W?G$*89hlJ){w62=*S|xVXPdM2
zlLx}BKX_Dn6`Dp`CwFNUWd=pRIt-u#^E_uz_=^qqjAFA5vS?)4sH#vsOIj_oJg*FO
zmrlB({Pe-|@7>FL@COfg)D0+X(*$cxvPWH_D$wajKVL6k(bTg%ZnjwHweNsxTqWH@
zr;tv1qH`Ff1G;<%iR28{R<A<%e=f09#uN<!2b)IrQV_qREljC=iI+_+iF()Z$^;G(
zHus`pM#R)}Uy$k9=BruznQwy2PuO@zu4HZTZ>%D0uV_Yw1Nbsm=Q1by3ZmB)^mx{T
zLUWp&T%ihezyy58w9^ILenKa0)bR)PU};rMJwADx3XlIG5CP?j(-LUGWh8*SBQXnm
zVm?BuR1Kyt(;I6lOOQzXV$uHAxpBXRYOiM%O(sUlep1GUyD-b)*k<TA;|%W9%#H0y
z7V)GqDN4=b%-BDAX~OAEeIDiu4$YN$je3tnL>c|n6yUy6q60>{OYft+X7LV)nJB<G
z;X>SLOBJ*-#!jJd<P(9STOWriOZxleAa&=!yv?l0-*)#2%@i{L{O11fmBmuWCrPJz
z`~h^#is^tETzX%JYuRghuzRuA5eHTS5P3jb(6rvZdyzT&^<Cw3BTY+eE1`PQBcru6
zfdD1*jv*zR_PdYT^oUmZCoJm1P`O>}^zu|}HF^EdTG&~!=9w7}VdbXzu=Z2C2Vw(l
zJ!!D9y)rg6o6Zmd6Xm~Z<90y>9{13j10QgRPDyUKqioZefS+jY4?>#2-?ciUg{0$0
zF?UG*IWYZwC$bw<XQ~9Cg~YMK#4ZxZZKQUd`N}PU>T)gbduo4tZXn3)>eK(KvdF00
zb(V1?r51#Acs`B6lYjVnM9)tBWg$XH-K9J(C1>8U+kk(kRGvzwi&0cZp@Y0Ofi;$W
zBL7g(O~tlMi%LZ_vQEZMh&jTUnb~6PM`o^=Hwj#UO{UqdBs}>oG=4V#cuLf~st>P3
z6~f1}*duc25{*Ac;iNt67Goo2H&pkjNfJ?gWn4!%2N2BUHMPP~)uq<pB3!g0C`Ndd
zZk!WjacL3ts<v}=%ifIchA}-m<{v&%TXp22f^U!@L|a~T9#f8jK!@NxdV)AS>LiSh
zg3cBRqkG-|_C9aFlT3DrF>9)h)L^Os8Ih!tN0Eb=tjdzsaVLGq`ZyCrD<f1)6YC4<
z(;vfGQAsyT&QzkSnH-QD*lIASam@X2CqR|~8WWHwsK=RQ(_m|OHrMcPsIo?4EGXOz
z`gv6J@b-J`pXR9Ut(1YSjS5pLP6z5m${R{-!b#kLqSK-+m#m(Hs*vabp9+b57L=sz
zm{&Mk71tb31UoT`0F?rIb&~Aza{$$bu>=3n>1fK`XLu#zOAwVh{larE&7t`O9(<u$
zHM_px{=tiENwvXnk%_MRx|G#MtX0_+a1ibka-=%v7k5G6{7SJsu5@_<-xnG|d1hG?
zyVdX^r{7QHf6@W-iIwVaV(@!K4d2?zQ9o265^fq6HuN?+AX%WsH}Yw$#PXJgJ!|fq
zF%gM~DANGm8sWK@G!qBT@u?o8?XzrfnhR2aO1%@Ld|)*zg2#ljwmBF+G(zcOy8uex
z(Sys0<R;zMe&azoLZYk>@6ry3tyB)}s64m(K38b18E(@$0#cakYw}HpUkV(P&Et1|
zeBx<H=9eVfy`tqC(it7o_a<f1YvfM|<{OsBTF@@-S$vhHRf<(V-DGmPpQa1KZGkIr
zQJJETE<6#rM6$EWra6P^q^)id)f-co3?khVBMHUr0;{y|(f=?xl8lJT8Zq_q`TThh
zN&Ctt&5y6E!yQY|xW+#4WnN=$&iIFz!t35~L4A53;K)b6v7G}!99Z&Fn_60oUksWO
zV_wZoWRK=xmL7{vE>pMcn(wLHt<cy@E}s6y@g4#b6Gm`H!SBFDSnesg(K_`49w@L|
z|Ck9Yv}&~-leOE`D7{I}<2`66Xwk4UZp&$qZW!(uPr){A407i*oG{f*PoVnd0bdSM
zcmhS+r$;ae2HD*WA)_6X|B+${2DV+k{uZip5w@5%af$hHr*3bUm-Yh%G#YSfn-unF
zFAS17aL%!ytK_iBV%eZo=t(=LX!&tKx3su1ypHZW4V`0Su9N#@wvigIrU)z4@EMoi
z>2b&@w^<!8utbX3m$P~5`O6)T$yKNK2I9g8m@Zbv%9VzgQ#CWyAzOkTH+kC~bnl?1
zd$vnw{FPV_wr(qDe9eI+W|vLV7=^EfrB`tRb+o^B&ovwAld4(6Tw}VFYX6f>9W08x
zhdU?s%8qwswTDZ!@aUN!=<hsTZA-`q+c%2dqlcH#J~h@1FFreVB1Ex0>mT&>EO&9m
z*-S4A5eUrr3dFPpGVYbf%7xR4TqWPW@F-Zz)ifWNiG-IGekpk<Bxuee?+!Vt0(#hH
z)gXJc;V~G9Mb^z;KlrP|xPEI41hV5)dY<PM+qpi9VU!`pC5m(=BK8D1`yhbW__WqW
zDn#P{D}-4bqIefv09Lxv&p=f!5Gn9s6kyF;YeoOwyTt5(w>M#sR(|ChbS$1d+gvk8
z;=twNRcorG$j%XGiT|PR03b1lQby>$6xi-GEx82-HLgLI7euO?BA99UDRF38R;P-*
z+`@lj=pWR9Hfe;ouke8zL0`B0=u}+?Oks0d4VQqHieMK|t>ReX`VOd$m%q#9!7q`U
zCB<^euUM9PgxpVbnJvjrQZ{KN1#mg_*Ld6NR^!~D|FUPH=VUS;C*e|Mxm7@eNy~o#
z>%_Sb6+HSM%%8R0otdLy&>~E8Q}o1wC3X(cK`kT6`<ZBt=!+6pVPFp9x26Q>=ECM5
z8x%}H^s$R_Lo*;b%xhXf=a$!Yt&<EUXjh=?Bq%<^6?0H=2xj(&)C=g<*GQ)^D<GBP
zK5U!c#$B2Z#{AwQJNjTxb)x7*{lz{dVB5tv!E)kdmt;+33RRqaukwcjZIMNA1%|-7
zBwsI=W6Y28aH?HSioS|yr^JPu_#YLjL?S-AyAQ#L`@sH<p`EN?#$vAjr8>4Dp3a&J
z<Oub@64>6QP}Wor=2h#FEd>L}w{oxi|Lsn-DP?^SN;!YMI{VgfydO)qL$O=Z@EYo|
zb5K}SJb)(ocmxn3gQomBQ;@9qgZGlk(Rza-<D+h6uo~54FHO5PPd;<nn8j=v*1D~H
zCg{UL^%7;pv#A_mwDG>LpC+gEDFx#PraBO3!K^DfC>^0A_dh|k(E#)};aX)PF-*?r
zmjnO-vyy%ScPX}pF=qWeQC29w!n^e5d-lF3!};srG<i$ifh;E{t)cbOX{4vW5zm({
zzBn9fH&KPg71Mh|x$irLV0+zO%R?Q$)Y{+;Ae=$h^68M8a5==2Xov?Jp7v76$cS#(
zW;%?-_QrsGEcSEJD2k?3`L%r3wM8>djp8vWp#pTT_0D+I)5Oi7PfnxCzvrVgXerPC
zlBLjU6DWt;=}esLyxAMYXbK@?5Vxmpz(^cW^a7Fo9yI(kr(mIbQPrk&MmiPJrLV_7
zcP7MndN6$~qb!Ui9A)?vX}&NwCx|lK9f{mv(YM*#qMG@>ljCmw%V3EYPfQzM*V0t@
z<Zao>o|F9}`A483$HCf#JuC#OJi-RYC76iQ3-o``*dx8>$_sx78KX8#eGTF<=ADt(
zxkd0i)c1pa=nHL2`|bK&7a34wt;EzK>EMllY5uB#4iF0U42IkcPoB&fb20DGtWF{W
zpc$qVa*a4zR3LS8TzjJvIXzG_XztTAbtU~0HD&W%_Vn^>4<g`yCt0@6dXl_Bj(rd#
zY30~Cv_>Y?d>L9|)nV+#D_=W^P1|+1@pNZRS!FUSMAVONbHZWgPEIP+m~s5R>Hd1+
zv-o&Qep?Q}P6ukyiz@3hCY#)%L||3RWCCDpcIf23c|ZKgJmHptNvRuE;0=kB!M??Y
z2KbnnaSgVI+H}~SJSP>2|IxmgGb?NkJnix}=oYD4Q4w<v<xH)%;5~E(IJs+r%zpe%
zhYZw(A07IQ;)$P|t&l|!jn7AJ|B>MxdaL!{$^|vdR4`*9r$Jf#qlLQ#^7?aaFAq(=
z%}rGtcIUuAa^td8@I5=%Md*|<mVW^yN(vl0m2Y{~NuPv_*Ea#&)O`$?RT-p=V-2N<
zQ3wV2M@VaFQ{y;u-WAoeYQc<juWw}fR_iTG2qU0yv6Yu1%jLRW{()g`O3^SFB``Qw
zHJ(wZ)jGT2#)JmImL)SZ7N4O2Aeb{T{8r9h-=19^p+=E0V;9aYX%Oi0Qyt||AzFp9
z4A@-u9UDc{Ad~r>>P51mDl!7!C#NO4Wbvo#yGbHVj9-SED*#8RJK+>B?Eb&d>EMMz
zuHl;vXbnH%SvZFrp8GjMBZKt%*$hzhA6Wx)AjiusO>1Du_;+S;8`V2eg-h}o?40FQ
z{WJ^q3u;;pb=+FhCBpPQR~7)MMhZ?we_`^o67|pTQ2feEyvSC?^>4WY0?_}Ya3C9l
zF$YtBGMhBSeuAQeiBw|*Q{mPJ*Rl9$=^&-!1>Sz6fcX|?=ECMhLfIVArYZVv)GT<H
z8nx-n^I4C~J8kN-cVE?Q$x74$PwcVXFib}5Ch@8VrGrLQgq~$`)TP8$O}=FF(;cs$
zIld`jZtr5Dv(gDrlEQIgpgQ~3HsvAoGKD{QUVVO_a*1)Wr6q+u--dm_#>ti#L~f*>
z{@B4v8PxZH%|<N~$$;N6nF~n*pF#r;8JEDJO%e2Anuc%_+|8TI#>}kOJC9$U+y!MH
zoG5V;UglsAy|YchF-+DXo`2HE)ea<tnmCs{$x60gf~Hzb+qi6Ho5*CwNTl>s1G|ru
z<NE4%B>EvE*b?8r&S9s2awo>=@6Z@kIv+{bYC}g$eXWo=CDTCquT>L&p9zE$sD7@O
zX-wj}A{rp}1P;@#8?#)LCG<|}p=>ugCQddc>3n@Ino2b^ad|5pS_(NUM4IN1xfb8{
z#4=FRe^Pw|c~9TJvv%at>b&D{AOoujZ#Zfk(q9AaSprZwE+fSfUvCT%cKyZ<hd;uh
zEdk{&%Q-C2>0IRK%4#n831B{RyS<AGu_(bTyClE|QguW3oeTe%+J>scJBFEk#c#^A
z^9-V9?uaYYBfn7B{9<=5Pq2+sp#3!8L&u$yEq9au#5(I6$<480L4<{Gcv=IIgLEO&
zofDO=PZHC(Y-<CRepKw@@2L&Ddz{deZRvRdRhvIDI)oXfI|z|HCv<=E$x`f^yB%0&
zJLG}<j1j|q7c0s@%=`>Vn8wP_@?C@K_Dm~DTyeW$YT4x$BL&0cVvI#P>aV^7K^}y!
zX(Zg|$uH)uyTt}h#;`DL@td}O9I$I~Y8Wj<#mz-|0S2f{GDOdH*QMXlK5bYp)@2kr
zLBXm!g?~z-e1@`?67S2x4Un4|iLTEr2|Iv5d_0Y60Z%3{lTh`HZM9Jbk&Iu!CA+(i
z&I~rE`7ox#O#A(lZineij!V%1CYz#*^Ye-HOK(sH$~%Gu0#=PURj`O{YQEV?d%)Y5
z!-?nGtZa)?RX><%&Dbz40+uwfqTSVP%!`JCr>@f46_-lG5*UTd5vDrz^q5wo_&Tll
zMLs`SCQaXbS~X*Vis@1w{Ko4R<<(bm>+M24@P%f-MNR4yRg*tytwX7=nmSFj6mppO
zz!5ms5f@9SL=X&Q&%NUU8dL74cO|;M@8XK`jIx!1|Lh9ih31GZggaRoU$0GU0`!D8
zA5f)N=FALioot)w>Y3pA+?>|V!TaS&A~E@6xjbIv`Uk=pq*Vf{!YJhpksv7xrGkTv
zs^`cw`}q^#E-T1`BV>VV>>Q3>X8p>0_-(CFonfudc-5a(C706`-dgTRwrN=Vto7xY
z;nN_Js<4yCB)omG*ZWO)1der_U^Po7LofWW!ne0xmzn*}5Bi4tHukvN<r|BN9tP+Y
zX{!01Uik&~>omqC{udU1P1--ET%3k6MJk-w=Q5qdDp!uoeB~E!d0{FdK;9rtOE1v(
znDLxEWHpt5?)CVtto!S%P3jDZd6DkkFG04WiHC5&31bYc*Ue;pNi8C%Xd?Adx5t<V
zBJVt_fn*fh>)HLhq{kI(#{xuI7V~r|G1949x_qANfv8-FQ!nksznTl`e`-tgxVBC5
z0*!S5DmPp@hWu&70E@sM&V07kNN&j_9_zpa->f3W{<TJT!at+84CpogiDT=p1NO@c
zr5s2La;^OS`t3w99ifkU&yx+~$ClqDO0@v*q#$rj+n&eDm_xk2<3by&R9_vFf(>^7
zkFeBA;*^OC^oqhaN5;iAM5oe;v4AW{tOY_fP67%E9lY4ye8LgOIA;jyPxVHF26UC~
zetHXD?hb_in~3NG2=~}V0Y_HXFTKl9Jboi*cLw_BCh6~LkAH}n$(dX&|55i&#nO-^
z5VOrk^5<b+$o3wY6L)*Lio)RXBkQYv6(^tPR9?a?h^-(cLB%3wKn=>SMD1?@5!LtC
ztX6M0nQQ||(#~D<5gv>$%<`5@HQL8#gW9%pe>|FYe=K*SZ8u<m*Eglhm?wI4rB>Y*
z)31|(G41hpVnDHG;<ds;-6)B+U|m?fFUWuB`)%hnhF<^tnY#ONTSZipU4}9kgI517
z!D}qxrs>>m{l*CIR36NXV+%Z|)?&SgYPwJEVWHGk;I2j^I)(Nx7>8Y~`6|d#cG9*G
zD)r%-K+P7IKOA8vL4Yt=FANN<n5Aq|QCPI&C56K-GKB?6uu)wzlXK}~fuA`Uj)T&-
z5|Vi{^Ab9GA#P+Z8_0Jei+*~%QPOfczFH1u4okq(Vp}zjn&dF*6$2`jLLSWB_tr+%
zB`k?@Ahzg?lOL_7W4M*3Yu0IJp1Jy0!0K>UMNl5@FkgBkZQVJmvr0|ua{cbLORe>d
zX?Mk*spgTA3T3bwVf5x!2vbOdM^`I9Xn4!i&;|#)fqSM5lPtvmex&2vI;e0cjnm)e
zfo$&mrj_S%n#bZ(I>}xe#pIEt+8BUrPF=CDEIB8@cNO!t8_X~dND4(DpFL`cVX<@%
zOf#vXy$G%*>?QOeVm;y02j9DHYdR__o$|f`yIKf06CN}f3jvt?mnb`b0qX|VaoSEl
zN<5|CARJfcR8I1@Ef=#QCMH}*>s>U5)^)vA9;b&DoC$!-yvNs;h9${G2~|PqinHi>
zMGnm~#Rpmj8T~2n`fcX94Z3ccXXTycr|ilriP!2i5Wu3T8D`F%@=vCkE(YM_{~+)0
zO%}?>D~2U5GnokI{<#dLDJG@=EAIkXX2db<Y2?}DPrD}yMxmx9Z;nGxF+1o(ImGNp
z_WmOyrU)|~wF_NCyK!Tebz3T50A5)BoeWTJFFH_|Uk2T4usFI_Q67KQR;c)dI&zh)
zy<8`-k7n`T6J#grWFg6;Qt!me$<%s<*oV(@-NYvYC99Z5tAFZ#4T_Ek4~99=m*h!A
zO0r6fq$TKTu~O$Hv%@<|8nCWWe01t?y_Ws)xi!OQa0@phpq|<>L$d&$#36tmM9@2a
zG#I^~i6PWCcz>Un!uvMbzR>L=bzD!x4T6VmE#y<ur#fi;vrj_cVd@4Y;N72ShKKLN
z<HjRfIVPV@w|Xha`L&1c&viNVARq4*sR-qa>mJwy*(_ZH(P!qycnURe0%T}!;zr1`
z#oc>nK<yg2s}(W!T-!3c%1nyWqnJDlAR7K-B;Ej&hlPc&E3kG{&;{>rwv`PYD`j%m
zG;%oOlC?>(1RGxQ8k+THYHzE6)V#@gy?=i(9-a6#)F^d|iW9;&h*UBTWQezsL*uu`
zA5M|1qt;9P8~$3Q#5F9LQS~ay=TxbG@GeC^K-*cZnubOZQi4~HsBMr<d>%Obb!X`~
zk)<;&A#h32DOAF3=atVT3OD4b0D(fJ+Mi~xaU3rgG?Ab={y@FPC;r!NWCNK@md&!^
z=@A7MdhQi!x}3r@+Prmz93ex9t$Rx@;=W2U;zfk}7j2>yNLXeXY#3j4u$##`ec*@(
zoV<hetDJfZ01ay8*wGy217|Ks7%}G>do0D#3qpdHSUj6FPJ_=G0%S)_1vSPsmO0@J
z>GC__T?2{{V$*#ch5iN4`8Rm_Y-j#15e~`20b|B!A7NvhA^9k}`*{ajp9)b#0~OFO
zA9#K4iRKmL?@2|+n1$;6evsIBTm`8L_i4-?o{-bu&Bb$xR0+|-cYiMm<WnmzRsmx7
zD~~HuQiXM?<s-y9djIWJWHXkH1f<&40UU8GglpoKC{VFwEcVzJ###Khu4@a+wF0Ow
zp6nM?GDFQGXHGhLY7;>q^1IT=pmBmk{s5`<?LZx4rS3;9^U`;>Ttz{)&#-K+O_m9c
zNvEHXH|D<n<>w@$cqQiehA%C5N+7Nw5HZgF_L|~$%VSbv=}(~zy%$5=U5-+5Av2o5
zMMu*xFmY5&)lA{pbAd~r>o0_MLi$Y*+qSVeRkykQ{=(-OC1BF9G$N*p`hY}Ln!c|3
zNr^pGoVpsdRCbO8O*aZ>;r=Hs379VbkhlSD!{U2J0Wk30`)lS~C{A06)Sm;obcw#Z
z<d}p#)v3Wzp6S~fC%CU0OGAWI;bMi=*Hn$px^1N`SFAGY`O_Oq`yL#}2Ede*=n);)
zP!<|y_j&9IBgfyZlf$q8Z&3}42DYaC_AxY;vSn?JQCr3K{RU0-1dz8ICUPPWW*BrG
z8MdkphUH&*1^7q6CUe(4EuB)fo7Dg6G37RVw)Mqi<*fhQT3(-FF}?l4X^z3J*}pn=
z5CKqJ-B8wiUeLmAZRZN`viUEMmPsY}PbuCFl@-3edR){Ya7p)kv-xa-`5I(5xMg}N
zAXH$F24{0_eZ(^bzzIRsLNsWsAG^YSnSJnG!$m-m>we5n5VOeeq^QplT=-qQNteyK
zc0<_2W-E!x4r+EKr$`nnd3o-BIo8JmFl`uty+Au78TF|<#i;V6@4OK7yQvB3XX~vb
zGZ9$x+Xd-^wmnewAHcT#j-IqW=0l2^q8i`iH9lPuVyR-5A8G=Au|JSimZDdKQ@WZU
ze#9OS+2S?IqXV6GHS$Kgs3LR@iUe*VdoAmO(sV*K@4^W4Ys#2+uN}hpXgSx`6)QB+
zofkeN-C%vyESC|hoLV>6>h&@s<eb2-PaPi3BL`;XCTpM_nL?O(4cpM!!Nhy#5fzI6
z%mb^%jO=$#t1($qP)V_QYTM=Kf0DX+k_ZvZ(pFCRGy+90PUK=_7ELn|s(HR6R$wh*
zS*;&3MoHfsDAlhM!J%B%1~1oB4PS*y)i`v?LiyZ&R|wh}wJ$#&Cggy+v#R3xsZwoZ
zHUNR#|2|P{<;uA0o2U||6RJ8qNmY%QWW>zYX(3VCHPFolJY|TDLm$KLVRkjN=LKVj
z6_B0o%^CX~b}KtdG@*tzXt4i%K%s5zMHDM$AsHFmfX5c+9#cqMLJsN}{TktR*G%=>
zv`{)}e2&aa#K0rc1hMw*VGG7)kU6~S2`bXPuXDDUErQCK?lj^a-Z)>Rxa_02XB=u%
zioMt$^83tukHm5qZ{W^H4VBJnmr4Kod`|h!<BPi|oJzYcwAl3hrm1{B{;0zH5&wMX
z>qkvkvt27fslqaD#!#|wL?Q0KB$pOn6CEk=H6An+^I#Dp=9z{zmoTQ0!B14~SQApW
z(%TL+i{9CvAcsPhwJZr0y!^f5*WtqOtUeDc`FiT<&eV+bD;pf!mNPT#Kw@TX(w4s|
zmzA6D61r)GGXrQo9ZCCUT)LgqOXX@YF9=?du)b%QF1AgRdL)_4@?@?R3G1VFq;T8%
z4>oe?>C-`WHfQDkE?Nz&o>nQTW{<ZWlI$ZvZ{P({&%c#iGi8dsn;u|i_5`+#1D7z4
z6g$wb9JfV*m+ZD8S4hM$%F__8F1(>+VI;UT;S45}Qvh~2WvNKDW?YrH7}!Key&1#A
zwq0g4@}idoH>7g<I(DMQO$#Pbg1IF{&HbL7YA!VX=%FUL8&ELNx=Sb1!wyrc4efXC
z{BT~}CGd`lJFif4KcfOADCgvNsA`=IyhvrAM*{JNQ5YEF$l1`-`M|PA0;TaTyj>AY
z&)r_G66O2s8RL;0+$8^66rU|fzo{PULa`RSB3L(~P0ZB^`cc$<7bl|vKyf~y6%9QV
z3MZ5WXz4}@Z-1iqKXfmG;POXO60q)ZUn&#f=HFE6=E(@CMLPvZaJqdyzdN+Qbj7zm
zi13h75-UD@u%r@d+`!0HjqP-uj(ez#C6zUcEM;<tvfa_f%Q~_H1fa_qwTiaJpYa?U
zbf&l|W8MjVh3rgbZ1eg3xNx#R6#2<OlT9Mp*P|stab<~-v{<VaOL#H<_`ioMH-L9L
zj&BaS0`|lb%cOJkx=(I%bA;EcD%%XUHa5`Y?A9|rRq+!2#gTZg=K^gu9%UQ%=zxiB
z#GU})ob0cuiL4T=!6IWhv4rG8HJrDVu@Zx`vx#Idx(aJ(u{wrFNq?rzMsK7qB!{Y?
zr+u{7r5--zG24U7<gls@xI8v|DhS3hwHlF>Zw*`9U`B}x4;W8FCeh7OvUFmb30t^A
z68BNU&>|IPW^Gqz@WJL=^UNi1G4`}e?2K(sr<@NJ{>zK@gv?<f++~1YDkrqOsd>H%
z=qq}uQ}(O~Y@(@1rkb(l6}e3H)mr5-8u7*<8?8L_tzcvqvd85LoPLTPuh3-|<5d1i
z?C3xf;>J~~2hm0NyS_a^lP0gmLrWz>0dgH^9zFOVGxa!c_KZuN8+rets|-dBN4i@b
zA$xa!g@k_kF2AB;v?#J#E8LQ_DXd{pCtiS&1r;d$Q*<cyp3AC&9`fi~(s_uaJXkL<
z1^nAA4gJ<Ce`An0NM8W+B6a2n+xQ8^tHn0#nqRp9Tqx{yLz2kbB{=`_wKN$bdWzNl
zY*iB&__T!U|FRjsJ~iKW^QP~*TN;7)?}p*Kn^UH&+NV7QsNC?Ebwj8k#49+E#yHwT
zMTg({;4g&6u>5`hP*-}=IA}Fm(poWvBc^ESa!9q<s}RWM$R5Aod6k!$$=>QFiqIS_
zsmq3Bxm7`&Y+4&vy7TW43vt!@jz@f>kSpb<1(o4>wC+6=)%;8D3_R$I$c{t5u!FBz
zn4>pKH@JHUxJSq>D6L0=a@k<mqwlJWGmc9?(=s7B&4sm9q-C^J(v3B*TX~)NeVsvx
zGKVybo>VlXU}pq>7E=4C-b**FEH13cedmsh0!^@x=@cix$XnmrBYkA{*EN;3BX<qj
z)w6;XaBz8#Fuyb~W&KS*%BBrCnd59vj@ohALz7_)h`9h0ua;nJN+NctlDFxzp}=|b
zG<~-(@vAXX0@cFuBm94QQRy3gYM=w3gD|%$bCh#uy6KP?FJdz}zwAuuG8tH#b!-u=
zd#`1LV5T7%&>*HTp}98^RJkv$8DWY9)AL1!J#<uZzF&6*+F7Czf{Bvi)x6tODb4zn
zM<5G^vhC5cc|j7@ri#`r5rsq-TRB&yP{g8b=M0{LkY<zqaeL~Ls>f`!tIQ&+rJO<{
zHX3mn<K@^pyaJEBwSq+5pKb9kpe2FplfY!;tWnb$?Rgbl-P`IEfw|uJO&hO#OaVH3
zPz^QlqD)Xej^*0>l(yXqf<LqTSf;{C)4!_2r@ow89MSm-F*v@qg{j>d9LAn=jRolF
zgapP4Nkwh_W<&n4$j$U$kFMm=Mc=%9iQQDS!BYKJcy`12;9xQvyXi~iRBC?OzS|17
z6eIC`iso^U=Ab7gYjpsuQGxx<luV1cel6VN@beZUCiXaAx)(K{b#uOzbS(sQOw(=!
zE|Jn_8Ab?DWC8;6luUD2?b|^Pp^}C;!!hb9y@}Vw8m)$Fy+df(Gm}T8DgkyoD?&RG
zvswmf|GIOK<#_;`zy~sLJ|FyZDF4f*a44K)X4a9qx*IMULj^wAEC?-n)}+O(O11qO
zx7%S#BVX?Y8Rf_ZrBlaT89K#X;*XncS@#A~tZ>YT0&wkCcRuHK@})75;z<!jV&4Si
zW#I|lOxv)Eo|k+;b%CJf<&Uj{tXiDcWu+KqbEH?yCjZjh?GlVkoKCA{_tuX|EpR)G
zr_W#qt*?MLtX9II*kZ`9&`Bdw{Ahg3t_<bEy3HYEd5`w-^vHag?5adfnToI65};E~
znJEiQx!b`QJy4`jxgA0<q;ZW`q+%38n=NSOd2}7(SWx4P$xs}k{9?K6pNWK)3SY^?
zB6@T$9AP&6aI}hLsAlb#`&|R{J+Bk~eW84}R?TaTINC<+BZbWe-~T^<x^g;4sN0Vs
z)y?L1pW>*2fBE+hV4twRj*b6nJi<CNcT?>ig_<%*9cTuEa=lxRSSWg<ddjT|(ADIe
z#g@Qw9SmrMY~bxM78x~Fo6oMsxG<%b9CO1WKLX8DeIp45u${*DQl3HT?=NqdlxpvC
zn3W(qEURIEf07bKJ6C_P$?E^1UMT^!V@9K0U{92B38d`49a(Fj>B2Vwz&rDGgx4Is
zA50RZIY}|mZaH2c4RpmsX8ZtFk);4rxjDRO;7T~fJ`=xKs%N(o-5rj%@Un#a%yaym
zd<r85K~8^2x;mKNxQuNgSU&Xr>=hf3;br**hB&aShUQ?T#atw{<u&PC)68A`)O9)F
zO_5z|*AEN5T2xWPVgU+7Y2pX8HR1e%)2o{A^e8I0n?8@m<Gb$HccMpGQ5TQ`iE#YM
z-RRloqHnDhOZzj<f-8gZ&au9i_BowFQ?k%P9mvoBh%W~;u_;`Sg(zX|);kZA8<5-^
zHzLH}O_A4nX1B4gSC(DXoK2gyI#ia;%2RI;#t~&OSooJEA5rjJvvTB&JuxibE7WB0
z@$_`|p-@Mabq_&-r!;C`xlKRm{^`%iL4(Kxr}R{9-w*GtEYV<~77{3g6ioKZJS)r|
z=>p}?v$ILu@;c^b&6bz?NC=Ri{KdE%p+zqn*BBJ=Ph<zedd-v?tnF@qL=tT(IKvWP
zoc^9W8K`+vN;~+LLY5)?7IDSOnwCDXx`L_#$tkDVy8rUnGI=p8GZHwPzjmIqmfV2g
zy~7(sjEhQhx2QZ%3x=8t(4rY#R(TuBqe#<B4~oeM9^Tsd;O5a{1%K(ryDaCqy<Fuz
zr2hqiNeL|5>9a67{{UoMH6xpUofSGUu%LVd_DrSXE!1`P3^r>!k__L=*q4p;%>Mkm
z^Ln5E1~`%JZm7e!^gXJO;1CUGFzJSLT`*N2yVI@2_^Z`EgQGDVNX~ITBgy_c%O)GX
z>6B=XNEEvE?+dgTGvO&1^}9Bknm;r8Uj8SV??-(s9RUk&38B<nb&MkD%)CJfZ%?YH
zJ;7PB$qY~D9|)ZN)Mk`)M@ER0$M(e76W_WgM0+4ImCl&%80`5@j2l@M^tYCAYn#$0
z&H5xBx;;mW<c>lfRvxOu2ih|!#P85hw6w%Z>eExyQ6>5<CNwl{T5Cre6H5?;D?5W>
zw0J7Y)nTC-O4dBwIhNRI!~6&p_6SI!Ncs^E+gHTCDFX;yY$}p<{+H6{4B7zVL*>mE
zDplC>gtr`?KLr~Uxyk~B$xM@cv10D7uf=@*#O{BwXKR12+t$yfnaB~@#=Lg{DqSdO
z`r%D{!UrI9PT555;&^Q~qz`6esS}X(ArvgyVBM-1h6#MPb)JarsMP2bMcPOaLXOGM
z!@0=@QD;mpXw}|Z6@@b#i19rX9b(7R)!*%;5=+BEaa4a6$Y&fm?nQ7CuwKXC4Q>#=
z^u(2k&Sv24zNBn-6Es58fquBqNc(dFbUZxW_JrQ?j^8Z;2v8>7z1ZNQi~yUG9sqeS
zucQSg3kDdbm9IE$eXbd=?0oqFo~B;;`rXT0p*)|iOx&>M7QP%1_?RmzH3f4DyyoME
zc;|!3DsmnFr8~ma1l(=|yTQFIh6Mn)jLu;e-`ls+E643vr$fwxX<>AdBEJo{JWddD
z24DiC)cUkf2OK7=B;Be&XR8#hJ_9tPD01B8RESNFgwkZRoPT7GTVYA#MUtpYsN#}s
zt;+CPP4cR=Gfym?z-I#py8+?7)_wd23>6qL@@VR#ro_2-59wwf9;}D2L}qvs9-*k9
z_RqHKO3!%4t&&!LWmmuM>Hyz?u2)txWD&!GnT9mbzK+kJ{O}<T0RKM#z%du33_aE=
zt{Q6n@b7Y&MNl8g4UG_+h}9!a(}Hmu&4uAJuC$R<hjEbhyMXs@L+o9<Kwy~%Z~ICA
zCY3}>DNTxpwnYopjHx|Hgo<4$ASI?Z8n^_Q1G7zV(Z6(+AMQ-xmK;1C->nvE`k>Ka
zx?4J%e8?Pa!Op3$*dy*yS*`3VZ^Vkin_ITPuvAvD4N>Ey95Q;Oga*bxjUmF6@)>&7
z#pngmVR}eO!Ib8C(sLf@FD+M<yWRt~RjaE%BR|d7ff~09wQ+mYes+Y4J(6Pq)sG6%
z^%;ImKS9Vbw*e2S+#d(~TdMy@Qw8;zKcW$b9zKN{puAdb7Q&Rs)|Zxf_G8Cu)d6>D
zKi&?~w7ZdQY&Zafj0&#r&`Pmey)=N_7F@NJmI+>jX}2PALhu<vrl|132mFezHd*`R
z!4?L(y5e`Al%1Z`;62evKhL+Xwf)$9;}CNppL+Qgy*nNqhDsIzN_y^CYQKpN9dhzZ
zk8aMMa)g9=;S_!k@AX5NZqeubz4)jdj7XD8cbjG+XJWI7#X)Iwnj6al1!B@FGSder
zG|@n3rbvH*`H<1ywFqe&22Wv89?Ptn&Ii+B!*Yj`U8ziI5PGMW{c|^EM4%)C@7Ep-
zOPe_xYT`iv$TGvE7V~*nGduYoY58=wv166dAj0KfzFEdQ#Oz;?Jt9t6?Yl;~#v{=3
zq2xqc<(vR3q@eUq#hG$Xg})db`qZ9&!&53y4FupXM(!~MgP~p^j)vq%{sAWGUy_br
z^g!qlRW_UFW5rBlK(sg_DFYr=;5&0KQ@yTE>q8UWT~-`7yq3PTP>0pXWMPvhBho)O
zmmaX^h%T?gJ5A#<<^?+TkmO6AkpSf7N1yvXyALh(x-x4)I~~;RzZ<_#%?PD%f26;E
z1_ZqUXk5B#81vQ4_VF52XR~C1q&gL#!A}~?EZ16cp_A$>rLMS-vEk0r48~!s@gT0q
z8dV*tce>fysL1I$VN?!amAScLl;~)9lKcIU&?s!k)~upmhWEiR3X7@T{C`%h#G!&d
z%#&+<SUF#oh|y&Y{rAWz7)D+?O$?Xhf>LAmFq&uWAU~b0*u0`C!Jx5aAjWKA=-v<m
zAgH3#30C6~o#Mct<dnb{>_fOi<u;rfLfG#3NcA{{AO<(u+Z9kdICE*{1`c<VmUL|c
zO<ii*E3{9Bzy9Otj(t^3xGLtyT;`=Xq`e!}+YWXkrcDizB?m9~b~4VzZhG|BUvvHQ
z1I7OX19mtt;j)P|0%iPwP#vtIzQz9FAk}Adoui2PulM)|G|ae(%?u~_eV$NRe;HIO
z%E5a*u_EP^wC_%|VB19%O!r^mev5ekt5(^l7=!TVrVY1{v4g*VNr`?F{pim%x0Rfb
z1niqWFrI^<{l<STy4>FKl~O{x(~=n{x$QV@-F1jT5V&|=3}A;J@dK}XxB<y*-sB)D
z-kA{(zn;n5?h<J0_e6+u7^<D=G{Z9-oNa{(O=n--AQHOO3c|Bw^D`~AG3KPC^}Ncj
z<!1`#$Jt%>V=A=VbhjkFm+m}Ygi+E=C+)SN6kbDmP{rq??=TA`L=4Y}&Tx=Nw&$DV
z-lH?E64ShfF8;wdQ;m|B8X<M06k4LDjW`Ww4j^JiRK1iUptAfM){CA{7*kB^AK}4F
z+Qh{S9g9L`uo`YZ*3$e)b0r`4!(}!lu4&W)X)Upe=dMFyvI5^-cF(k+u2Qn*0<s)r
zwcD|-(T!9~iLwOcFY5p`q~8XF{!?Ulk*~o?F@8+Fh15>|zXD29n3s(b5949pKW4Zj
zN0@hVm8XxqHKrxh@Ni$ksdtD7$(<piLThmTQ@vNgT|(pjubP+7{Aowvq_2@}^Nd#Y
zch{n02SleZe1KWNXiyDJfooC4oj+Z5%#xW`brPPSY0zr58reYKRThyw&?L$%aMThN
zY9UrTUcNhofwunM%~`Nkj7+_J21F0?e>Mv%D*ekkZ7E0C-$M@hL0a6R%O-#xteq{Y
zX3el^Lws4~xc|2?swqg2AAC2-nG0*f6D4SLIrt@Pn#IJ|TQG5;4-_#{v04X()H}HG
zHIPVcP_{GcCK{(lUG;{-HlrQp0<lc~WZf+cG>-1UWk?<`H#eVT21KBASdRGx@yxmG
zzHy?ZXcPvwfb)+%%`Wg(MoCRs(bkg;)3k=Lw$7Pf@3+O@_boln>|ob*X83q-szokl
z0K~XcM;tGoIEoFc?u#RYRF;^}m6DS7trpI#E^MQ0W<|j0cE6}bRR4Ht)AgJHNW)eZ
z{laj);)<<->a_Gg8Mln`Czy4{ew|Ds-W>3Y`0L%sa~eE>nP8g0_61Qq;ip%)LzQ=+
zrDniL6D-iD8r^o0r6Oy8v{;+@?Do)DEu@{ehSA+5==m#bH@!_A)fZcEMAvd~Z034p
zz=Q5}lUBG{3+_TlnmR+E5?P5nVA=0h5V$z-#ae@yiOYg3;XTvFiB1PXTWF?58TTMN
z`iwXLMafHL6Umb@TpZA;Fm<R<YSpQ3t&5UCKam_lJ9MSL@_C6Qpcns1G1a*}zFL@)
zJF|s>$gbGY-N$Ot2S%6a(nnz=-{BbpzPP%hN3zrjhy;Wmw<+{yue_z)U>&cYc7#2d
zf?Y78$ol!oLL-IEF3K=TZKds}r0qZGuJt%~S_*{sVJD1r!dHC}J%8T|9gx-g)QOH4
z9o!HjT?J%Q6QeaoF%f6SHZ+JAj4K$5H;0f#8)pF+_ex3MWtruo2qsH~&rBFh&uzT_
z%7A%FCqB3fR_hu7`JwTixzl3tVjgm9_2DmjrVi^i_Fr(v?yMYyb(<{Gfn)~CarE+1
zK@jTcq>7N(r~(XFj>ZqJ-<H?qaet*Lz>3M8t`}2D$_h&Y0Tydio>a}v&x_$>r&u+S
z!}*3MR4O8x#iFh)UqvbZj~Tybeqzx@Ub8SMo=9K_0Xgu!!;cQ8p6n<MA_eYOt1Jd4
zs=o>YfXhq6+~&_X&ZAY?{bYiG9JPURw>;sN)w$A3Yk=oS`>17}xiPTUGrrfBX^;H$
z%adg(sBvF3unpBZmTs+yTUdHa6^mYMCO0zw#u-c7VNP=s{T<S?L(9kHsSHKr^D<<>
zYjuAdZYqS*JN7c>vz7oM4)66+LWw2~!;ur(AQY4bjmDm{hbI!T>wFNN^d@;ZowR;;
zQx%%4xNw`!0`<N)#<~e_(4KlZ@1H|&{^DD%01MAfX`tXj4C}<Kv=C*@<U9F&<hHs*
zucf23UF%O(BV1{gbv63JJetPZEY_)GXFv9cIAYFD9qlU-O0OS6B&>VUakisp1bCK?
zp53J19@>1RQ&b$$Sa&o42wx!zoA=6hDh0B)LxcOA>t4CaL)))`MD?R6|1@>Z_C#}_
zQs$PVJ4d#OsLi)rA5IK>ctA-QjI@@mq2vNASe&KpZ3A;n>J5z}6c(;MQulAZIVOtk
z8}GsPt(Z0p3w@r?q_y!1i&`y_tt0TK!51qmQNCASVjd>9F_fWW6f9K>p6G?DDr-lc
zBLy)#y0ebvT5jADEz$N652QTVCY%Q)LgB-vrr0fanPcM95v<N-S8A8Fi5wzQb7^el
zlg3Yhqb3rjfgBx?EP0)5>t?X5T={e`=5z*oqP3Z6CCtSGn3g*G{HtZ_Aw#PKLk3!l
zLl+xQHxE6&JN30VR)7Y7qbyAQ9jPE#0|%RRE(rSICD&l|6xRjEHo4<gt7@7r7?ld@
zwfhX4WD({1^h8ll{bF}=QXCYx&r5OLyBxIUU(&&U<oplR^xQY(HfK$x=$H0da$9%R
z^<>J+=1@SsMy=)+d*<R2&4X}SddxT~cfvoJRQUCRdjcjahQE<&KD<$;h=W<<4rR}i
zPPC~CQ=?TZiJ~cLVLf>7l*FawlAtN=wp6E6Q6Dlf#5)Tori8jv!}aItaIW$kO5&Fv
z5aq(8O+AK;{ai2cU3@jz7&S1^9pxC}qy%x$*+=vvG@$Oj%V2(MrN_f!ynFo4gmU{y
zxi{II-W{NE0{~9Xj)Eq8W)2f)-(yeM6~$!~2XeRbnuJ6IQ<;Wc3Dci%piRA5mI6`S
zMZe9E<!xSxMYcJE;CO(ZU{>X-{NE;47Yc1@=>)+D?9>f1J2r;iwx(e>(xGZYM8F>q
z-ff7VbhvNEv4wA-@S&UgfP9HBJ<|!>JMRvrP9h28&=Zx`wg*_N`A;O8)7z0HX_oas
zbtY2L^1W%jj=#35Vu!6KTmP03Av&)z6Dh%L781MODMU54tmk4_x7-+|Y<8Tv;4;1j
zw<*owSiTNND18YilnHtzH8PQk)IOvkL}{#rNbH^kEzqq#R>I+;#w3;?r}$VZD+Re<
z1H<wJ*DE@9HFD^rdX2h(`EYb`aZJU9nBF8gq23cv___wm{YEJr*&F#L`}TK;EHgwR
zK%^bWhtl_nKMqZYLElmncNLp1WisZl$5*=ZC_dky3SH(jp6_%n-~e9=)>WLrD7d){
z`!aD@&Jc|ezI#F7gAYCIp~{<)m)GfD#irMSV6HXPg;G<KvG|pb9*y#Y97x^vC4dn|
zoFmaGMS&3x|8`wXrqMLk7@rbyE9wuv<&cM3k2iNkQf8ui#HYu^_!37u6WWZ(zI-()
z%kTI$P9nu5jPunz+2asu>#)Fcco>&7WaE_*mk-=rBoIh&)?=5zwd=}%df(bMpk*Tp
zLjeDkd59uubXoj-u-W*r@Y9|?plMk&;g9yA9vmNZ=oDE^D#K9|RqNcUj^*E7h36qF
zAz%8A^6acI%R%{PK&xaXN^P-^BYug9fHlA{5?xvls&(6y)AV~(?eTJ4tE_NBH@+Dv
zE<H`{GuiG|ZML&hOBKIklCx}#=6zB$K(@~3E>9~cxB)!&5sh^$>oLYRM(FwEmXwA_
znCutO{8vdTcv%25XvHb&^a%Od?p_ClY!9VBAFy>h=i#v^@RIm=2M+}c!Mb7pzCYVL
z=Hku+C09b3k@VW#5SLg4Nbd-y&rjjMF!SmHWy3+t>_KiK;@A{sY8gE@7*J_q79&?-
zK{8bt0~kM-5=$mvi#+F2^kAyn;8D-6jwl~vH`sQCHnc^2y+R#fC22DA?;r~#OO3#h
z2kLJ9bJiO1<T?uCs}z`xEmU;SWw>a`NiMD*!Lns0P{o>ZSttOxKGBwFNt76OyC+F@
z-^ynO)UKx0!n26J>#fXCGN@OyzS~dvjpagqezHfm(>-CuEQ2$@nyoGI;KG><&X;U;
z@`+Q_z2^4k8}NlOlW-qoNPR!Tk?Ws2k&3ayurkZ$_9I>-Q2iWDD)&#h!0|Z8jcbSv
zEfo*j)+CB;E2E)A4|#zFNL@_spEgk@&Sh1f=t$Cgu$9j>&Icdq&XP;mjGEj1%~O8(
zDxH!MS|#FaO>d&gXVCXnZtt%_-h!Siul02TGPD@K&8-N>XtQ+2^`bg6{tv*DMR{U^
z(o7{-F&QDHhj${Lr?Mh)_uJFD1D3I8W<qUi2t_R)_zAj|s{anN1T1XL*5>nQTM%5(
z*L-=Zjf(jOz2cr2ZXoIKi~Ron(iQe`y;<ahth4n@QtdD|7EhXNl~Uxg*ROqwud#fx
zyW>Y-96%p9-wIB>Rf6p?U52K-hq?ug)l+*a?*2u0to^Lv`F)+bt8ET%s+M625Ke-0
zdMqOJI>n!g6c7~4_;R=nq6zzo%hPpUoM&b<uu~r^Lrr3=$5M@FMmt2xVv$#{a?7Hz
z)B^hdfS`8{O;2Qtr))##1P^JJWKwxR*S2!LL@duH4sw=dhn5gSP`HK|!!&07?oIqT
z`JNm#^trlj-C)zdty4*mn5OE;kFiR=+}Pc#{S|q<&gvb@S>6l2z&CHReRu&;N1xrq
zK(4X6YV+BIeHiRXZz5h5v3{#UJKvi{-yP@&G~TP@J0Xs<6lL21j!Iw?tm_0I0-xLV
z`rf-P8kTQ_^&fD4Pj)vkz%}KT<QK!{s1{<1BzIdbrpm|#elV&>a?N>~_9NFG-iGwN
zi4hVv3Vc5k&oiJ6cw=Q!oyT<za<5I$BnvvK=9M&|GYZU`$DeK+UC$CQjh3rVVMcV%
zV??Z|$}aL{M;zZ<BkA@jf-GeQbFn>wP1#nfo5m@2UIaC&P`nA#3|Lu{Vo*!u?sa@@
z_2nEO=b^%xvwx$NG|&yE`R5or{#+!^;gZC;>oNS&0<6<&8&u(A4$vC|-yd<=!x%dS
zQi=#6$jF^Y{)Z~gr^9GPpAWa#xGYqzYbHV{HIOw_)0oDE$Z5LClDB=xmx*~T^$@aX
zY~fbusM2w7j$~VTts}<rS(FO6`l}9+W$?-}%aoV-&=8Q0vHx>I<LU}PUjyvhn`M_6
zuJ;^BrSsH*jPD%iQaLr3GAQimlMsGMUxJlQeX-PfekDo8@kAKbJu|l}AyJYlwTkdt
z*3<}=2JL)T(TR#ND+YhWUqmZ3ux!Xa0TZ}et<E$zCYXEog&Mws{Al|rqtuwW3#}oI
z$Px)%Ij#%<m*-01wcC0UEs;F{iNSJhw3h;#*TWzOg6J)==75jv1ic17B`p;`N~3N>
z7ZxwEYTf5&_2PyRYw!<J@3<mu1p|Ps3L(bS)M8`EJc~sDyR30mp<Ww1fnYp!*nYBz
z9X)IH30=S^Qb}xU8m=QZdb&1o@Hnd=;~WxcEAX=BClk1B*i`0C1#0^+n^vX~@8)Rz
zy;$04;PMQyO4%(V=K5n8ZrzsrcA;#}zDr9q5@Taj-~&Wk6q!D}U++O|{FmZ^tc>65
zmKeQS?uEAPT0ROP<@e0qw7UqsfsFu6!>3k&G^>^D469acC&f4rS_7aZr|5?vhhK+i
zYbs+i(EgvKweoow(isMOn5P5PQ$&+~wC@`sENePZinwjWLh3{q#N1=Z;Wn>g()B4h
z4-MLwLCPU{tQCFwPV{*g5D1!|EypL?Un0?9bcg`j?TeBpTnlvM1dz123^sOLfu9s3
zc~@2vH?*JLuy>4GKy%ImsS{^onOSyc&nE?+dBVc(-0n}Ar?Wl8`f+53p6X1=SyJ|v
zR<TSFZ8@S@C|%7n@0EoMdZoyK;58K&$#1Hpk5wkTg>byIUj6*q=@E9`58WMVkpXM#
z?FoYSiY@5wX8S|ajE!EOQ4@G+K<o&8lnnOP$N4p=uu5f9L~yrOl&H-bE0fdApa59a
zoxL^<)eYwAAW87=dC00ZOM0K-`>s@P!;7%~O5-lFX08NtrE32}z#7SgU@yHE={joo
zy79)6%KjWlyh0MyDUDuYMq=paZr2HeL~BGrV7}Mt&V@EU|L^!UbLFy36w2s%bqld^
zNsWk06X%D_A?02F!ZXq)7*!?i#|*z+*CGk>ucSdMmHiCCDw&Ec6%8AROM!4lUqRbM
z0gcZHujU6u5l&Swo3%tkwVKG?#Jx#Vvl`3T3dr>j{ReT4TAgvGRJz8jPWQ|$n?v6+
zANd*0#*>E>$r2?bHi_hODHp>`r{z>^HA_}YFCN${mM<6BqEBWI>~>Ritg&wEzRSjZ
z`ulQZpR7uK{zVS!Yb3rWV3*i@3=nyDW<jAC09%95m@*U#_wTi3XZVA{U%IYLnPy`e
z3l!oE#!Vo6`GPxjr}z;*`s)I?QL{fF>&>GI+pr_o7CvbIl)EBFtWZ(Wg^m!W@dSu|
znEDi%<e+T-Wqeitboi5M63Tgjo`IOOuk>fY5@g3jC%&<1D9^^OWL9_5fNa?Jk9ULh
zEWD>Sn6fb~tFC%Mjd!O(3&<#7j#1p>Q&<rVKmCobckiTEJ5qWTRV$+927Tb6G{$Bv
z)DqMGAgS7v%w+<jfI`sq=d%+U@_Qeu?uxMJ2h8!GzvH~DCg%Vae0J5{H=0w#DPvZn
zR#?=%D^zUn{=vgS;9@+M%l5SSbzi%<dL^iV6E%B#@?ua(<Z3cD(4y|(R8Fb`!N20k
z#TjZ9(6M=l1kriJk1yiyL&8t6Rr-nxf~Bo@ar#p7(0n5!2s9D<5`iQA4;6BKHr-@`
z_VF3Fa78Y53YoX9I!%aK!^R#aD-&0?Hux7}X*a7{H&Ku14^&t8?<iaX=8Fv71AxGG
z<<PNHai1^I&P;LoRek*>6H$!HG$~$s##wf<6fwCUG6fmj%zI3uW}{;W(()sE1V*V$
z{UEAmu<BR_dlF!KKk@THF&o<f-~Vqp3Q%K@OsX>->|YN(mL#*pM>yHc@q@G<tgM^0
z>|!F&qw=FAKGgj%KpKL*rWA@o#19}8UYQ!U_~gJ7BKLFWjG$EJa0e*{k!E4C8MH<D
zWe<Vn9Rh&@v^*-x4`dJ0+76Rnq`<?0zkxKAIB8)a!;Q|)8zu{|EiBI~IbWD`@z0;6
z$|s4zo91=|_zIB^-NkPjJM%kyrt3ru&rLPgysCn28du%fs+mbWb7kRt$<0kvT%&-s
z{yn~oZq5->OirPd8(%!?jV2W<UjZ&aldOL0as~bYy&yg&Oh}fle3;1s53s@5WcX&I
z@w*KZKG#EaU2?(JM15G9vRQA);tdU=Y<Q>Fk`V`^ugkadx&YfhYDv{_!myg*WL4#F
zTcPY*=C#WmBA^E#0i-OkAYx5Dj6<Byly)$#?s5Ekisg^X#Z@FnAhI5k$zbl->%uXx
zR-v&EJo{hI5+AfXx*MJktw`YHu2r3r2=KHsueEkB!|SV05S$t1k8VKPnERU{-)^{Q
zgndauVvnFaAb-XfqBuQnNC*L7JR5!Qj6?w-wsI0lThHbK`Lky6jUZ68;}_iWp`G2m
zm1K(j6~1+(8WtAb?_8EgCVTF)W}|9g&nz2*2Tx0S?AB$>#VV7a{0jF~QCG~pzJTZ~
z_MB}z1*BKUQ^r39@_B)Re6>}5#Lw*~TCnmL2x0e#-RKnmd+gi9lrGG6mH;+cAMYP=
z+%J}+7w1>;Ca9NsCLp?SCsyvAc7Dw2&s|VVAAa?G^4FWee~9SZZ<^cXx?CqSeoJs_
zIasvOnr$C|%@D7B2Bu`H<T;J$;oLf?v@iG~U*G`ox-e<sYmT8>G{_IxoK9{2B63UY
z`r<lK*ScEvw#8S1h?l&CI^BB2?Ed(!KE(culd00dq-LrlWpg&u>jB1t`y;mcg&^QQ
zqAj80>2+)4;S8YH0foRk1VM;w&CP^?kgXQO2yz!WV=L$ZTfmWd;~ZRQBE+JYWF7Fh
zY31P%rfx;M82G)MK?B}TEm5GEM)#u@VJ1BrZl+XbfeU%<jD%9|OavGn*@{vMI=OJU
z{WZ2z?E;|cA8J`35czB_PA;HlUmN$VB!D1pQAV|Z`biwhq%$d^1=cK8PQ>fH>c)pH
zw;ppvNV7t7JN!Eqa8Mb$Z=ICgVkQ!96L_CcOHM?UY2Wnvvfo_Lyec}~Ewa}=p&`j~
z-MP*P!_9Rh?Uaf8V(M-4oF&jd{$OlGc`G7_W;n_>c?G7R0UkL2bPh!Da~)6@$7R-P
zHPeV&@_<uu{$)|JAsMxt%>^o~>hx)7Y8<o(OKdez?b#S1_Ss}>>x0Z5c_Fw@oL92W
zXKn;^Azu_mTCjDk6zrDVM0>=2271U*^7pT?G$-chIlCGWaGg^`Wag4u!}1Wr0HOH-
z%@Y=|ewrEQu2ZaMjdqk^%zbrFmiTwE64_fq%^v(^mg$*muBnS84*h72(_3_n(3Pq%
zVmfemfhdToRNGUhdP-y1J5Yx%u+4f0nQBp9$w!t%l!}dF;JU867m(e~m<k$oUo?}$
zb$h0jt}VdCTGSW8W=y{-FuJqFHa1GugJq8g5aX%aN+V-a{^DY=E34R{0#sDmSj9RP
zr<~G1PHZuIlMb^fCx>Txg+BLCN*%Jo&>~oM!yR}&Ay_<e8~Igf$i`n1--R}XxQsLg
zC?PL9oZZgOC6S5Kl~}%w7@d21%qXM8;3LEL6S0+C2>d1nlV$OHC^4iUHaNBLje^3+
zb>5UMx;10U6TE(iC?41_bDAKT$nMXjIFx#KZRxxT{H{L=HFA^LaTFlB4BlMfHny+c
z<-iai4A}lDal6i3T*cy-bAg}0zswm~>ft|}K|n-LTm<~B7jT{~9K1!w(m(Hnc|p<9
z#!PBXHPYb85j+9bE-upHHd_`G;F7s?|3Gi=lxbL2s#%Jc75f~I{ARTG+2Ze_L4$Ak
zYyhwwi2&K?g!~qQcH2R3)>Jpt{rtjfBc^Dooa_D5q+qt(;a}0fNhrqZZmRV$X@h^l
z0~A7I#4E?={WiVTWDeJL4DKe2-1<}XR&#d6HEB)M5FdClJAHf77FQpkhb<ZUs`nJc
za-Ye-`jsn=-a*z`vNg{UHAz#iN>oaGSLuk&Sa#q9v2X{&b{k966-j-cQwaKxTAm6$
z$UM=l1;{{&0EVc<4r9)`?b9U6<vh-aQ`pMYI)_$XM!@y@6FzV7#KucBTNyqwKq0mz
z=?ih>PkY1ex;#C9`1z97D&WKHnr94G9wZyofIRJ`Jf0&UgDK*@@`VGb@8o_Jo)#tD
zFoO>n%}S*!>qJg&S-Fzr;qHlFzb0-_YqKQGLt<K5HyL?ha)mN^1D0a#TY)vtk2A@q
zRKy$&%HWE+-$_PP>nAzkYdq4Y<8PzBK#zTVJIEl(5M^yE^@u;FKS54(#^dS<r1Y{k
zrHdy+GD3L1D;3mT`0n#WnZPHrQ}3K|9>_49WOLY@=c`|l>MMnqF}Go8qg0==$GU?7
zj;jC-_+FghL9g6ISDEMEgWP*9Za8&1VKoEiW{+)f$L+_47u7g1&R>D9UO4Zzx97x5
z7O~3clu!^QHUBhg(ZL{$Y!#)hyg7F2Z!O+>LnI#*a{l@UHlV~%e9Po*vPPBi{}3Q6
zeas1<lsJ)}IN8M>gA==#C}#86FRr@40(DpZnISFMxgeb$3Qe5scO_>zT<B^UH|UVE
z&(o%IA-Bpz03!mNhiA7<f-B8;Vw~WgBeO~pKsJ|1Jq04vEuux`9%%IM<M;^icyeEs
z`{v#sTPsQl2mo?5xBP_f-A3utWm`oB5>n(E?a^|vfX#?Dv-N@KF#9hMw$BAynpu1<
zjh?^_k4C36XP}jfJ3ER7)!QYpTq5}E9EBGV7P#VC#cKB}wne}q7FCAbfndzbg&JQB
z;#1o*a$8;!Vi-+PLZfAEdmLHBdTJ!QytA0->W(_%UbSFetUZ=d@K3m``pPdI;8zlO
z_u`l_Wvp>P!VME<)V;r4H!1GJKc8IxH^Z`{=C%W8p8FC=Jf8!AdE-J2JY~^Ac28zF
zqjFGEp;osrsgjF$<g!uOKk3Ra^lP@}b4_T%*`Nc&qu5wgxvXx+11MAf)wK+x{9<e=
z#+$;(7irW$YRj>%pVqC+jt{EeWd%uvpGt`E{rN8eBQSGnoE8l^L1o@zPo8uQ0=IB_
zV!KJpq(*<<a#J#hk5K*pm-(<No~s)_in3&?pai$dKVVSah~eMh73UX(CMW5zYVlGs
z8h%MJq(8{3DiQFN5})W@C&ad{e!rKqaj0D9u>wM8rrsUrTe#|I+J<yIH;NV~DGRsL
z1VQS;tyauUMgy6lKf3!17siM>SdRUp4Q}Ce7q<&EPQPaEk4}PfkhMckXBO77+nt-h
zQ91_PW5ZZF$+^S-i>tzIh5gG2PbY%%LWrBnj5YMcAXl2b0iAW*hw!0>pId~Wn$z%V
zfK=amR);W7D3k3vLP5RK1UhR54OgK&X|Jr2?t)1?dDHqW`Gc_*ivQ6lpwei~m9;iD
z-H%OjuQrX?eHbi}7NocbsR0^QBSn-gC^GT&fGLo+C21ec`sw@tp;pVJ#(jNzgvmG_
zEq`-I!LYXNU+-P!SD77pT_hrTQ4H`dcPIDTz0I41G@smlEI*j(u`3G?CI%mk*hVIZ
znNRtf`%NFQt?#UGEtCpf_Z($>aFn6!(xDC&*|*t9;e9w5hu$se=`TnUSM(!d(C-fd
z%Tj-6Z-ryHNK94j{cN$78fT!2rt#7<TECZZQ3|3(S`aqJ2KR{R--h2X#_Qc!4T<?}
zqs||P_;`xP{=7N+hzs;XaggkOxirsLx9?@W+!!v}R`{<GILvjfCFMw>Ey(Qtx%B8l
z8C#K4J(X*UBr(+5oYffvZOCnMI~Z-tQC~eVKxI*Vye@`5<B0?DbvK7_VLj>20K>!A
zD>Zshp{8LB&Ges+BXG1Kj=#}l$u*EzwG6YK=3UeXf-ivi9cz3##u~naZc_02_PCBb
zP;#VlMpSL@q?Buk*VXXPB;Q2Qi8ddlonyeJm~bWd!b_A7=5=H$H9`G9^t3OO+Pi+6
z2@7oyOzMYdi83pJ8Adjslo9j*wi_aR=Vj^&@q3oKi2TF_GZBlwKiremkwGXIidF|L
ze!$9q8Wdg9gS(OMz4p7&WvaI$DvA;p<amNLLOP{f$}M8<1T#6h6QJ`Du3d)ajFopM
z=H08H1cpl|4`b(a9&){GD_^^U(<&&^-va@$xO|=_hfd<)_oG#_RuC`k&YOIM{?j3W
zA>)RUoG~j}cY@JTK9ncN>(Wx?OvJ&%qB;foNqcpn;Rst<A9-9GqzFXS!bSiKw6I2^
zPQ-!ZU=2KEd5i-CDoL|)8s8g*0}WeUVZ!sTQD=qo&lPAi7ptp+Dki-pQ(mkquP?Vi
z(UdW-&BpM|M8LR$krp^P{C=cW_MOtO;hRm;_d_Nu`zcw_MlHk0^oB0?nMPw+=Vrh_
zEv~Kys${LGD}Vr&Gx_OR^K_hOw>s@H#(gjG5Nf1{3h~X_4&0b=pb2cw4s9FDRp@^z
zIbcfnw{8|tNdByAN^INj&L;%LZgTy+doN@Mm@kI7mRWggGwTL>lIn0R^?u3WlgG5A
zVJSofxAZ=el=OVF^!WYeIB#&kJJb86oy<+-H{Qt~m(-ta=bn3zZdPr=@lWSzQi-b*
zZW>y*iiD<clJ95vXB<S#?aH8po;;)zyzXnXiv+61jK67sKfbSOOCVyJvIFLi8pCM%
zNBI{02ig@Jw3*wcLd4b%ezip$f+$SKcbcCuW1YiObQurz1i}0S2tFa@o@*~on091C
zLn|>-H+3^&sRJPuWUylF2-)Y_tt2IwJk_<(y`Oyx&w_GPE)(lTUm6h@0vyHs#9kl#
z?2<Hz4WM`yqs=_;D$aENZig49i~S`}0?32*#wTB`0vRL^(Xin17fhP`*~Oniou^UZ
zDdF?SVUsr1`7s+a7*EHABcp`HOyiwRmCwQWmmhSc31n<isA-?m!7mVj#3@4Q9%PvP
zf_1??Ay10$riT2V#2$>An#7)xpy}>liz!#p-{qZlGxV_*Rorlv#GJzz{!Ca?<B%_}
z4Pu7)g>GzSg$64a10paPi~MMKg*W|x<?!OcylS#-JT+<<hL8sds_btkzMde&h0R%d
z#ZGDqRN9W+J+fHb=u4eZKp`)iDWa87M%oG4hz1|LSr#xG@K9)|>wn6TR7fG>$vp)e
zBhH`xHqjWRfc%fJTf&hF7Y}_*u#QLVKWwORWCm}%i>XiUmFo`;NEH=mKKRHz!}5JX
zHW$c2I8FTkCos@{S?a%_#1P8(Z*4tK&8e;K0G&f&hz%@Lks)Enf^l@KU-wZ+VY-=)
zp@!I>Z3|?tpIpA_qEUo=p+Bmv70J4D0tc@UTfj{<(Rlt*%UFU9f?TB7d-*^$k(Jm}
zrd*jBCkOT?H-O5rf;@lPH^{PFL3qu}-|W)bp+Tv$O>uh}#4-rK)aJ?F1WKOLd01!H
zcg30b6@mHX_>_(Vva;ET<#cm{yj7NJddtTxsUp#b;s0_F@&G~%gyk@swf&7rod@O`
ziDRT5H4xL;bKR@D<P%>2zvKEa8G3<6${sa39F}ITDJFuyhk*$`AoW?liQzDOJFFRG
z;}iWX$SLp9O2WvklV)tq-|CX1D}Xivn^FM7<d$v$s&bk)d+v7m@K7y6p_7nDO_g9~
z>w=1S@#Xck!_4ctpJNN9nL8SVs%WZ~<HK{{pPi-v#>-*Yz|Bz&IaMU}^w(#-?87Gw
z)MfZduj|cmI6VR=p^tBIf;PLJE9t5*IznyJvfGY$m!}b`)&cG)J<Wel+-WoA7-dHw
z&=s<IJJD;AwLv1xu{F3#fj~u4A{8{iix_tlM8La9B@#>H!?_8YY>I!gz*U!RG32ts
zv2XckQ>DChUc}#5@p;-JfjlY2R&2&(^_H7@LmwrPENt0gwW~{45D`d>*4H}TiU>4P
zlL$}^N~y)*ng*`M_v)c<m6q(-u#q(&FWw<`>*`cQbGRt?Wgr?P53RN+fV~F!G+W-b
zb3af~S^_6YqTT%w41N0L4~S^{bi!zz@ho<HCnU9+-!86WYONuPv@)b;Tlk9~x+URb
zj5XlxKlD#`tyVc&W~5#FxEcFC(Y=Z8n^dUUTv?D#c71?;^);!R5)RrM9FjdF%dmp&
z*k(e(Lra}{NO5Xi+^`Oc^LeXWMXB;SAd=MVB*ozvrBB|ywr3ich8x+|LSr;5=i#t<
zR+F9EQbE%qtN#b+z*to4*7l218J-`9z(B3Wqi|#n2psIMhITOJv!DI8&Zyo5vw{u3
zoD<<q!l)qZ2V*IV5qoJ0EiSoPexy?_f>{MO2Ta>5{vHyaS29rbge3Zjtz32j{sR0M
zRS8z0D{F+hom(Vw|AOP(-IsW6<4bKzkjl#X248%OZfqW!fLb(n{PPP|<4p&4x)pW2
zTiVC!S4LSH*jfWQQ|!<&e?)}^gveC&OqQ4b6o=jRgp+7R&9~<+Cv7PQgCB)oB-rb?
zuY3YjOemzwpb&{2^pX|YljN`RZac^kfeWDN$(0)<R{{y)Y7A@Y_XfLST`%yUcD2o2
zjVWf@2&R0>rmZaTdQ@cwx4tKmI-n@?#RB+CPrPvv#|^nYv~)dCGpz>JyIhHUrN1nV
zZ1+ONSWz3NDr<lS_pkWEDNs9vL{zqdi}D&Ow8GsyRFQ$GYMa)7M};z;dZ)$_SA<~I
z^V82)J3rtK3=UK@RpniwjAmwRnDIau=+6t^+8)?M!7-mX7XD4`-XVRhU9o$oZPH8*
z#X2R3nzmdan>~oqebv)7Gy2B<qWl7L2-0@Lhy${nc&}OL*>pzU>DV<OoX8VJD;Z$d
zu+D}@-M*_E^_(V;Ex|t)TCt{?<2jPRFIh-k+IGBt@TID#`;rG$gmh2?ULsmQJ~O=|
zrCqNgF3^FHY|YfOP>7}67I|W~7o>@Dk~|G{eF^*XD@Vxlx%`Z%;@B4639LVafC|7h
zzI>D0jefRS)F&!?%0;y8a$D1g+e0p+*0gh=l^l+Zdt8;7Wk(tsns=~D24BLJOJKgd
zaX)un+;!s;*Vt?9$JFz;kK5sF$WLq<vdl2RmVfZWsDl!O4lD~){+qN8_=ujIS$A@I
zd%u2DatMs@YJZK|?8?H$trJB53p?f$exbZ-nMg8@9~9-ak16yX>wCB9qn*BK<Uz(2
zl@VNd6ZnP)ojtEB7o3*fcB~MLvv^9ET9-@(%;rU08ik$>ytykvdcGIiDp1wKF?m2m
zo9p1UcE9VjhXxd4e;5oQXow+1og9e$HQA7;ZU5wc+f5HT%Qk;ZqJC@HW!$sYo8C6r
z!tZ;Ct8+#r4|+(Xneq)A|4@g|G$uUt3OmDV2*3(UY*z?48f1_deMqq(#Qe&>AnmF1
z0AtbhE@F6V$|Y4c@sD%^&3{Ml{tY_<1TVuPdtb4*2Gi!vB6GzqKQ<AB$uKi_i7gAj
z5o$dJvg<0t{UkS9z$<}DfY7VnHkcGP0f0WcGj)6@UGb?Ja{jo;HA%f9S{A#%idI%r
zKbOBydIR(=plbit`Q}W=2K>{|^yc*FYeu`LaslBF3vkgxe{yd*-v=X8t`+g<sFN9h
ziGV^vrYXPrmGk9IvcWrM(K(3jSuiQ=!lT#7R?ZUH$=59d%TpZN#jwFmhj7>QLNK&R
zs;Dc^^Gv+h)3XC<{V$v~EPg}LN)Ml9c8&VF@bS)PKEDl>Q1!uc*<LASXUeY#X586#
zZZ?pWW!KCy+*9*U5C{%GhaGoWmbofRAV_Ag9Loe1wLuh{7!H~)Or9_%^%vqPm=H$g
zf_R<#+Jqyzn=$k!%y+x)h=A3iVG#86Ct!%<F*@u$gb|gnM3|ab%%|ZKB+@`SGzLt+
zHsaHrB$26=@dqa8XN^sQ)rNfae%sJC9{0f;^k3o?7P(A!Eh2%Tv=NH0c-JaMOC9An
z;(h<fjyft2yheF|f@fCmA`~A(m99CVnxAzOh_YBfiB*?Qed@0J7mJSvjt%GIa{Fw@
zji)S~M3#vz2i$-M2OyN-M#h`<>LwEDgQhoBD|(|-QwD2;kZbwHe77nd|8Y!_H5k&L
zy`&q-6BW`x9n&n{8?yJ{hXL3xx@Gf}rm4RZx7TI!*Kuv|J7j@#@U<z8D6L}5;YJql
z&~mr@;p2i!CRJhVRolLA{1|O19(xpXDFDe`iA@sGH!=644Q}-^hJ&X>ZEH#7e}nL>
z5iN>AgyTb%^}BuvEjDr*B&pTtfWe7;u+*0FQn_A@<F|d@^_5@zdq%c*d6r8N_Ahkw
zxdRFy%yfM$*+~=GA0a!$hh#zFJ0cHbQ~bh)zf7vvhMzKzq!C_rJ4;H!5?F#uBPLE#
z()dxPfy;?j(f^QOv)!tQ+YA_ClBI^m6O7AmyxM~$7&<5Kt6cCE`*nP!ox+)fCWHqI
z!qqXtiSCuB&Vt!uWCX^mQ-#uek8lSVPR*%U1VXlz;i%pb(GiEV%-&bk;`Y}r@Vy*f
zv4+K=ftH5(Vd!MOvwpsPQ`Yt%J1eCw#3Fd1zgB7y2q@d#zw_Y<>&o1Ec&$(a50D~&
zB_t%b8%)$dZ!Y!CH~8<Gdr=vnpCyFw5d<tTIrbm6!+rxE=Y5iw+t!|Z&%qp`tI|LQ
zIJJOm{b#F+XUOue)w?YH!oF=_r>62ENa;AiWaxnWWA3#Z)(Hzxo=yoNd*tuxJS8C(
zRWkxb`TmnaWj+ajyr0#^HU&Kl44Y6ip+?QUj}A!^fo*(APOs2{V8GN^?MUMj-wse`
zEIM-)niUrA(VevFX`~$g6Q&rp<&W>q&%;0!tC-`JoqFR;3$4uOgYOn+Ro$XAr@AU7
zL_71g3i?-HQ2CMKI1xN|<q@Q?Lw54dT$j3^bBmmP(QwtB411M1w(^2opFR5ZUAJFP
zhC8FK5&XD*F$S0YFcYAL36#pYF>4sO$xF`qQkp{pQwKC#r}XkFo16|K@Z0C5DCGcS
zEk|jUPLV;-G)p9X-!CCY9?o|==^G|Li0#*tOiWr}r#l#{L2ord7E`+BS%tFx3>(O0
zb7NdBo0{;|p-I*`!Dgt~`FQu)eiiL(Lsqifu;u84gA3qxI{yWd6eN3|KnCvz2NL6s
zpV(n#4?Pz`Ir31!_SjtsuV%{{u?ALd0pG*R_jw)7T`!&x$8mf#7xuBqX>f%GDPbkN
zL(`)iwYTcOS+_y^8?-}ox4mstoL9z4is+W-r6D+KVCPID&w0FF^lb!lGVdX5dNcWT
zb$BWufAG2Xg<k0OeAPVb-)P;RFFCe!!{FD4RN1!Y)4X*K{s-fp82u#JCX?X8jvw{3
z4-INxX<(4b7;sHD7&A<l16WwcS+{}}iumB$R9otvfw;Dfdh8Bw6NLx}ag>a2<mL9-
zOq;8bg^SUCU0kNPXY4vuR$M3=i|_30Y%a6mqk6|DoZBFSZLlh-4`z#)_Pja4;EkQM
z9P9H2?^x`3@O|D+IY7b;2D;J#bPY8~y1>zdn`j?y$cz~|UkuXcymXW6uP^q!Y`20V
z;W3-;GL?lSXwueKJ3BeV-`$pTPO-1NZo(}rR?t^O(vV&fH8`qSUC|MlhY%#<vhSM<
zWM<{3;PH%oi!Znpi(|(Nv+^0^q~Q;d8L+MQIwk(QRGV2(K%uf^1~l9+mL#LudDpy8
zwpY71QDKWKM~y2m+Mw`QSQA_oc}%3`UGDn?=~5ERa(Y8^@8aXd{PE<xIRj9(IE)_r
zg`e<cTQsTOB0GeW6ZkaKV9klDRx30Z+=g}XpO?`5jY?gMqpRB`Uuq>$-T1AKNW;Lw
zy2k3f2AKt4ZIPpYE1L1Kw{*tU$gX!8{*SJ~%}APT&ndNw3wP{yaI#sV@+R%bff%O}
z@|<ryk)0(H41XUeH+zt^0J_2<o5`yK1=H5984fZn3pc+*wytGL`r#QG3iaL%4B~NS
z!Aw_!fX~MxNDk|#0*+#3#JccSmiS##=f8-I*BSnJ)x8Zd_G;H$KJG^9drcEBrmoAx
z-l(({#PcI>kW#LufqHQgdHbrvagc`Dh8amOVeG&cVRitX69qdGRhV|&&^d;^D;oHI
zZ2*UvK{HR?1jOS%10RU&K7@b6ye=o(DP620aB?&?a*S_6jdPxDul)<E5YK@NaC2pt
z9RePk9diUJw8`yX;Ts!}hvX{pxAP=Ud?01W7CgqM9nOff$-q-21P?BLp=i3K39ou#
zbY3%^gElFC)SyX-flcnrJ4ZRu4Oude#*Z6c2`w(aav*9MmZ;E${Ccq93%Erqo-fD5
z;=yeL#0oFxR6F}b9RV|dKEHw7iDZz%M=ge^^goo(7K?Of`czzmmj*M`MTX$_@gExJ
z9vPs4Q$-z{^hD6IB~)!>8awnf)KLh!7Xw^rjf5V&i`u2#Cr3ai6-d6}$lByrv83;V
zC7O9Qc;Ft4U*h%~@VZ2g#rVt`v!jOq=}=)mK}Fhc{n6#$NDj$qkP6+4goV7=d@n+m
zjtbYzbVl{?(u8m?#ct3>w4u-Jl8{pI)Ox&8r*$)1MIN~6it!watOdYlLU7ayf*0rq
z;lh`P^{>wkqO95ABQ#<3p_Se<v8L!R+z?DCEBI~_?;??aNP$TMX#&ewJ4C}Y`a-TI
z-<I89-Pjb1*<qNKOMpIhv}%>&s{L*p!;ri&{SPGZO4<MzyZnGBq^)j;;=#)#ywE7Y
zcG}{Fcx9_3ysXL8tYHW>F(G@agzc(N2jYCUFpJra&=6%HK<8a$2^j2;M7M||!o7f?
z+GyNPwJUHT{xKOD+i({%Va#7P%t|4aVkSf++7mbzw$Kwknjt2?sxBWsAiZ=<7L0C`
zcUL<Ym+5tPLdN0CbC-~@kO^J+(G_v)XS~Ge)ez$^-{?#C6l`!b&O6Fg&&t|tKp^`A
zg8ediD2ytSvwEzgF{PH0SJ-e4{WEW%_;LH8OTx6yhi~yb2US0x4%S6Toh_6?jsHyK
zBYNfI<{^<AI;=k&w9(tMo*ExFCaNj*LM*XU1Z!#&!f!k;N2niwwfk+zr4x!wPEmIH
zQi?lH1Za%O9Ghdi3IH-Rb1_CaJP_NaqKUzpyPmZNeK;K{;Rl-9C+@EMY~36`l@@MW
ztW9LHRtkl5D`g-Ez%X(}OA^V)d-7Rbb#riO8-F)4l1u($yAHj-!dIgiSJ!h9h|mb{
zf9yYr+o@8Ji9irf{xfFS;5K!v@d?#`jO9=b#(~j~=2Pa^4YpYJS}GPKN^WeZj6Je4
zC+&|^y{~a3WtYi3Xq^;f_&%&ihvC3IH8OMXU}s2DVFf3Jw#sW?&kd-Flp~mUL!il@
z3<RMiNy2lm5fRhavv;sQ`)e)~z6J9IDtZ;u1B@rsWGN6w!{#z6S3^b~BcJ77;vhRK
z=&26MkfDe=Pld;*Oq9AhgzaP3tBw9qFXK<L-<wgLANZ5s!Zsn1OXCleLV_LoAxhjg
zSoH>tEW5vhU1?)f+KwA&beAt;O%w1qzs0zxs=Oo+8JZozT{g4~V!30BA?0UH`1oi>
z|DgU0e)o~olXPUNVY#{&s>S>EkcAP{G44ZjDatlqqp-shM2jF)@Nomp8c;a!6ExGy
zKcc)}#??2<trl7mV?9K?t{>ou0&YJ>GgcO!&VO?NvwDvaYc2ruT@xTjReSaAWisn*
zvgg6k2=r(CQY@h=O0cVPyD3$mb214I&crZ!LoCE%0&&0~vH=B$Jz^;^YW%xdPO(Hu
zChyyuy@b^Enn)JcA*5H&MfaO5Ym}4ji9V?F#Dh-d6kQnjh8%$G0MML;dBDqI^s7=k
z_wom5a6Pb|7|FO_`_9o4P*Te7HMYA$Tf6zl4ECEoH~-z#N)nYpT|m6NONr6Q{tBe(
zo%Wh>1kx;2vucc3|5k*0wjQ)W7fxG7;|zCSgH;h8l)etKSsD%wX7J^dy>%}a=xN}0
zjltq`GQz?ocfIYdSC7m6+x;X%2Um?K@w?DFOT{(q#1T}=(AW1&%|vSsOanHl6KG7(
z5UbC932R_Ur3y8#>#F&HV;=N><R9w4^Y6H2{NjU7Iy@c0QC46i7H<5r$B*BASXqxl
z0(DsVOVz*eb53FfD7hZ$GsQ~!%g5>S`XX>e#4J+{>znU)uX~f=1G2H+8@tAu%}p(@
zjUoV#PMvsfH_pT704vy?@X;!M_pM4=eC3-wt#qBjo|eV`0n}~*kx7YQR`);>KJ%H}
z*X$~AgCz?%u$Fta>ZGttEid|NqQ?0}IZ#;rB`V^Y)x8WChQCQ-ZD>Oq9ICD;DUu&|
z+vSR<i+h5;F7h!s^Y8?h)7!XIl|f|K?<|ht^)Z1Bm5e9p_e1Q#nz;UWv9Hk<2`xRq
zCXH69&$W8F+5zovutWqu!TS}HppaoH4?Ew%9CS}SHR}D%J7Bfx8dO{$&=3M>-gr&{
z>kNj6W4*lxvCwV?j2<v8CUp%(M4+Ty+0Xs#BEm7=-QD!-E(JNy7`$>D$U1B>0G|nx
z2M<Tgse=+kiq7USz;6-CsCmr0wIq5Gsmo1;1JrG9LO_n2H`4M4;GOq&^NodGK#@e;
z<;3jtcg61XljE{m<;kdlWDqbSLN>WTU-%CeRS=oO_eimg^V!I^@CKwi{Nb=KbgS<}
znfrX72g&~bT|Yi~f<NS0RWZ#>C%g#_E0P+P4veFvupAeMF*jRsi|+<<I5Ud*-n$GA
z<J_k#sYLn49ld<K)DtqU(9&^CdU^p*o1+kH5`oYHR)o{zQ?@JJ)(=nWNIs1-I00wu
z&M&Y)BU#5tjvIBvz$33n33<c)2Los|4<!Td@|u&^B#-WH3wLI>QMclkC9u2L04p7S
zb(esw2nichK)yc-R3i<JX^5g55$`A?7eP|?VKot@Zrb0Vr%n2<=To@;Y<gtn;1$k^
zUoAzf@e?X_3bt4uU7lM~Z0v1kv~F8zu4o6mAu~T*Lu&&XZg7{jHq(2{1>;YYk|sPW
zMatNeY+cgaY0dA0L69JQsmRMLm*9<r*G>uPDpOROkM)R^ucG}C1_4bKzWFfhVLmDQ
z9QEJ4u=1Ym(Y&%X3<6^_m8n9h4*5c!L<_AxDcM&jd9yyX(IZTq96>R`3bpltX4Njs
zXr(!0K#H8a4{;?h;Zem2!2@{kA<K)|_iN%alX{DYd)dd7tNOZ`8GsDj3zO9ab}uI~
z0j4{1FSwO!mj%q|M$fKR4%U(1nHwua^i)!m19VW9!Yd*y3PY+|Y)6?ZB$=3U?(6LF
z2j{r<Csq|*E8d{&OHj8lrD05P4^3^>hmjiMN5-oE{kreS1dg^fvcYz#bbR$GvW4dl
ziv3swP6uKnL9*<M`dDDqp=??vX(i?2f4?&UmfzkQPAjPFh$*H=@R6<IunyE%7>BPh
zBGY99hDbY96_rO_rmQ{e<0H8z_2!^WBfrZ=bcD<!0;Ntpf2P)BC3AG=IYH0O0RKM#
zz}+Ht%C$e?uV6Y->2wk>+C&)(V4@)%bo$)5SPDn0?(xftbog5;qI2=TSo=Mp4e|T5
zX>goWCMEWgegQS_wDU@ey+?mq&JV=AnIvEjqs$CIhjxK4gSYKZ=3@iR`&k!H!F?5t
z4<XW06&myMsuIekQZib9uErO(o!iZ^#!t%xYRoFz*Tvq3-mNQ2Q<CRBLVHaUH94MK
zG_$DI-pcC^V+?4-%-U(!Q;*^A-uvhB65@sEP6Dv*xTmQp?;u+nT_V{buz<sgOf-G6
zu`VFfT5Yo|wy9-JD8cu;T;uoW9!|WgdyB@jQ^P^I#4?;;`GrYxU%l2Q%lwIQn2RO;
zA+XwaaTf@wSEd4#%IiMs|FR6L32QwtHmsfR{0FW#1i-j*W)?92O1movcQ%R*Gh{9Z
zBOaph0p#5IA3;t{h}rt~`iQ~raqKL#y`J&}u<d47b=5j2Ev~OB+imRrb6R5ZJ++ZT
z@}K|<%oUKjzc7UAWM{r|Fk4T~ys`Y8`m_;hjdyXdaVPOwm0!<{i(>0IO0eod$hCRS
zLT`K?UlP|J+ddxg=E?hv4im!{#np!V@k`SFR5u^y{Pad#v+k~;dXFZEfz`89WY*yS
zZ$<VnK5~D+zu7~z7xvExCV@uLTp3*iJ}2lh{dz0;J&DN3fNwyE6I)1T=Ju6zNCZ-6
z<)+4MoT)NI7ZyyKRB~O(oXft&Q*tOExQ`+cX=p@1o1tV_88HPL1x|lpfi>rEz(2~m
znN!rj$=|yLX3bRD3^sNu=@o_?Bz)`Fh~RHch@4>Ic@jIRfveiZ?$syxt{;oeGDV}3
z^8P=+N`>{3fX_@Wk12B4K}NaicupICi<52ko5zh)&th6{kxoP}<fgD(33*{-bqKxa
z1PYNoLAvT3D`SwBC&-CkV`@?LEEEJdhKd2epI~X|r9drQ#IsyVz$o$VJo~`JWknvo
zM?##9$W@8@${BA_8^G^+*blw@<`dt6s##Y&N`(?b<t1CRS+1wfHqu<6jNldRvFiT!
zMV|=;HND||ZTRfH`9qp1B)RnU#rMSzwkWY>x1DqNf1fODDU8p+w!*t8D!OZXmG>CS
zyC!nxSb9Lw)L(9t=NzmoiM6Sohc3jWwjslmP-wCxLf})i_#=JXH1yO~GZl_U-?ker
z!vpx+mtdFLYzh^5*77P(y({(9CZJ7xk)*{y`@-FjOSC{JlJoIeFqN{aD9v;3!Z^^7
z<ger}`mCIj_ecWgK=t~5*qkHVabcZ~tL&m|Ary|50xuBCbNjDdGt_OOp1)#TAogLs
z5{WgwKSJ*gHY?$m6}C-XsbG8Y5&A0qjt&iD`p^dK&`5uD^ikHv6`;>uGqZtK^s-o`
zR+^^~-UOK9sI(Eb5ztZQv|X&}0N@3fj!s-8t(dQFLTZBjq6gUD)Oy16%7qRq6kjUS
z&bzTJH)lgeg@!mDeekC+ES!vdBQzs(oS4If>G^`=h~uy$hBu+rD#VNxyB%)2s>oz4
za>1E>%#&TL*H5_sHKy(zUy-|`C7EnVD~+2gknKrU^5By5Ik)zg|DSVZPy4-#7H1`(
zxlOxD;?8F`BI`Y}WkYJ^T~UDsKhfi*IB0R?Sqh6_#2E@WM_h4V_gniLWz(3BWF{o5
zjXu)UCf}yoGBrBv<XhAOGgyT!PBTmq6tGB_YgDN{R-W*2nU6aicvl|q9B#dL+VOcF
zZP2(Mwp&6NDkk6Sn#L9($3JfvkI{skGI6G_%|XeZSOKyQr>JF?hE#oXuOi*61sm+u
z{W%hGs)QGHjHY+oI)f?_IDF|RE_0mmB+#sHpxgBv-M?Ckw`}<kwjcW~j|8B=xf$=x
zw4N4Tju{5pa;R$bcd-vym5M(V&Gk08c3jqAw_+ChY5I^{nwLnEnfI6&tZd}U3?Xfg
zcpor*Jd>sY6ebuFl-|=A<(WQEO2cL?{AB_Ru7`iC*LT-GgJjfRP-{Gg_teLG*4C+O
zcOoUBL7)Y+lo`6W=HO6k>0GH$fP^VStH%;{F?^<~mi|Q|lSmmiKbrM7{Q#1k){0KX
z95c#xa-h;apQZx)b<tidA}UA8V`C&3Cj&aEMD}Kz9wAz_HVpDhRq!S?NK##R>nerS
z57@i~w4&DwDQF{3FXWQBshEW&p{hDJoOx%m;MW~aDcC@1WGHh#7x)HaOEw@flG%l}
z`Q5|YS6f_;j$o{(8&796U+q9U^mj*TJ2gva%qTgP@w^7u<S~Nz8+O1-^kx*Zrt`w-
zTZ8zE6u{F`LSWVou%c~C+gevFV?mR}W-o90k)`Q-A>SO=#lk2jXU?hX2;vjGwE7+q
zTV;TI(Yd6AV5OnyooLRg1~Lj8vp<-Qf!=9=BP)ACn8;ViGgah%X({UG;?8V)tBDhu
zdFabW6h}t@LE#p%Z6q|HJ5yHHTHm35@ga##OTWId2fXF}G-8yI$%!X<Js3duh^|#+
zrMnKM)wube=)x-Eu6g7X(PV7<=7n2S#qS>Ymef>514_8bH{4nl`cec4-Fv1*y?>et
ztf!_m&b86jUCcf;0mnHWgzOc~PN;G{H23}1uK19r4jw3Yg~$cMG=sX^iwC#JtJKac
zhtu{D^h=7LbB-F7AUHhyS!4)(#*vew<O`>X)7)7?Mz_DDSZOgpx5W%6Y3Q=G)ANt9
z+*1IAGY|6SBQS%Xl$N>S{%q7Z8=2SwJA+3r=}#1PAUI8S<Prtslalx6gG73FcaFf`
zAy0JxRWOI(7miF2Ow_9QF7b#x$HJWr)1YkwVMPp3+`Mb`R+rZxD6zc*chpxeFLxh5
z8$?`ul<TSe_V)MNcCFkO>aPg`z;t;xb66IrWC6?A-~^bEWHjSvZGngkQ~`#i2{{{p
ziOE1UIVQH5k1Si#q4z$@BWN=EQ6>eKn1ot?wf{3`LL3!NilDqSSZg}6v}<f;$%(o3
z^-_xg3@C5Zc9D$#hv`sj?0nu5i<7CjYTtdk)mG}734h!!qGKq<8;2Jb$Iwy^`HE0M
z_<QuHEqtP?L$^`0c%yo@IsBZv3$;hsnu-SW;C6pIUm&bEQz9vs9g4dq=YwVy!XXAi
z*wulb@T3KdauA=1tM#nJ7$tzqtk7jpC`aeXYro~px}?p`m`NX3_^m5+{Un<bQ*S#u
zI{-MUs(x0}rf+5nRBr9t(saPcV@F(Bo@$*~IZ*ao^YDvD4OaG(s$OC2H^h>pws0y(
zp?)T?UX}~N9v_;5A033-;$uJYI&Go@<X0+!IDilM<o7%|dYa0sAp&)+OA8-Bqw0so
zHQZ1+DU1tD_r8C$LFP`pN|8WdwWi;>r=|6!cmzYpJ=e$HSa1+pdMo?bl0rA;>Xlxw
z#j)ctVaLV{<msEpALG=(tR6lT^||7}@9ANNcUf<f+WLVhwf@_LCyrzX$}PGNfK(n9
z5&1Hs!BlzA3EKWsf=ftrLStN|*65_BBS(=UkW%3$;&@cf+6I{+TSz^Pb)17##H(Zk
zgGDj*4g%75mo>alcd*g6TmcoM?}AVt;>mf(s#ieLMfL$CKUU-p#Y(WNMH<sCvZ*68
z`VtYg6h{U%1{q<jpQau@A&aTjp$@^<kvx$(pNUJ;9AKoA?HsGZbHG_{c1{khG9pDO
zctlUZ<SwDi%Z{s~o>T{!L`tL+x)p)l#c3}7<<$2E7my&8sWsuesN*3TyR~{njmi+t
zoz|=Ip*zhcLcp{rd1xAsEI+SWiM;^6v&_;>wy7B>PSVw2XhZj6w+_J2a8iCAM$ArY
z+D#9$>0opKXMs1EIZ<>ZgKyFSB3Nrm;jr5F-M$^2)Y{%H-|n@5^M;sJhr+e)V_+6R
z@*|QXy$AW~NWfdZEBZ2emN)*}E8s+;a%`|XkBQ5^cOdvjycfHo4LETnn0mvzs)O;0
zUd5uA+z{r2Qu~csF1Od}Tze0=0C8!0r#=)zV^cIm#-H-(Gp|91|KMWFIcc+l^TR@5
zA>~qE3);rMkM#Ws@Jj^coV;Fy=(}50$MW#&?4ftn(FBHjX_W1S_R@SCh$5GgV!fuA
zk&9wM%ZUM00Q43WD$by=NJqJOG`fpt=TkX3Q`E+@4rP~Uj1++i9E-}z%Jpo`<A&B_
zqgJ!u@Wh@v(gY1wyuiA^yDHfoh^a4A>WD@M>&(iGX%{V(8Mee;MeLwvR&UfXcS8^2
z(5~#v`OLt0YC%awyAwlzkOR^ux5;f$TBJHW-^B}<QN>Se>lR2xe%FN*Vn9bcQ|T$!
zg?zp*^{ZM#&MP{EDiP{bmc@GWhN92dp1VLE_BzfY969}=#Fcp0@6-d|3XqX=4s~?Z
zeGpc<TE~NZntdo<QdZTXVWj-B1@VtqpoZ$Q3#M`X@twWYZqC?o-Bxb9Bx2%UuTveD
zpEuwkL}Z6j7H4en8qEhTIA0`WyiUKe{tS$yZYujG#s&Q|TZZ;fMU<3r#>1u@PP=tB
z%V4dOAqq9zT3~7>@_OUBFj#j27fD9oxUm?>0!(6sypkl=#%$={P_HDe4PwXOe9+mg
zVTqVn^QofnrrM2!9u9|r*W9zSLokGgeeP3Cz&&>u)g<h<6FhK0OcxyjH&6ZN+A4s2
zNs^|I!;`KQ?SxNpf<?g?xxR9oF1d+W1jRv8xhgZvlDV70KlN`gTDF3D8bHmuNSaoj
zt7f;5EZOmaS?{s`mQU|Ku>j%k2EHm=Qyx{Wl&&FcEJ>wBVfBB{nTh!yZIq9dcH2r*
z{5NVC8$n=<2i90_-(V<H$U^yxnZ=#v-4BPoPCRjFa9*lJjxf-GBp3H*1RSH_>8|;z
zZQlaodYJeG38{Q5ZXSJOH-K&m1Qn4X0`RWohh8A+0I<wv?ENbe$Q}@3^s1;d5C*AN
z{UMn!N24AT3&4S8FazSa{dR{j?6dSyb;RI21iCFC4emPBTFbCByOMJEOZFvUPm_H>
z@|GA|jqAmIdaSLf4<Lr=i=IBcG8WhZ67GI!k=c6xx<m{$G?>|7Z)dJvo$;-lcOqgP
z6Vx|{DB!Z^Fj2Bf`s_w18PM<>)(Sb2xob9u=#FDEoc(YHCU)1FrXsm+x!0gAVU*>q
z^APps7T;euc)Gq|&e;pEw~DN_3TkWu$V!jZx(S%n;SFBR!sh=se$*)q%oBn}5f0dI
z*icPM1(umiwBjaUo6Cbh^T5%4uM)<=g!ISJNOk!Ie3)u-;#v_L@E!Xk99yjW8Q{?<
zaZL5}_!)v5#WI!fzt$2Y<US@=FFsF8X+Z_bB?>6-d23hZv{hZNxpmz@HA`zoslyJE
zeGvcyDSwK(2sA{Y0c0jb)d{xX3?NhEGh8LE5@=9u$Q{Ydcz$4_BhwE~0p2)|e5?SO
z>j4+G<FvfXL095}`|&6zl4K^Bvah<Jq2P9+&HMjkx5Ad;#%1jlSr2zw?j_A_W9OPu
z5g*}M1u0oxN{EP!zXLX;0f|n;Ro2Z2W$E7HYr_oJtJkCU<Y0}JSZ{=MwBqD66*${7
zHMa*J?YOibbAtfNobxG@WmWbDKCUq(K7o7AA$2|hDqSt)JZ;WruXf`K30?Gg+K(h)
zem}AWS%qgV-qA|hk0np_t)nZ)sSgzO)DzVTVCBf`Hv;qdQ+5bNJ1A_w78KyqkHaiT
zWg<m?Jq0wv4~L&YQIq={x6nx-L8%*1OUdDhoN+d5F?8;YEyy<*NAK81zSCEhf!puP
z03z=-?<rb<XpuqbPlRYdVx&YRy!?OpXDHlPHtKNNUO<t5fHfVwLNn^kRFe4>;WjEf
zdR|DyFfF6#`aLSzMd&ATPWl+X>4aNz2~Q@+Ou|3|0r$!02CM3A?l{nL#zSCd6RZ{i
zLNF0V;Bu_0x{rg2))m1_agIWp&K^^WQ5;cSbZAWid18{LGQ-F3%1nN=Qsh2HQV&Op
zc{Sp_0WUhoSSI>J@gdDvFv$8)6An77JNpt?a9e%3H<3&N5Q<!`%I;W=1Mb|hbs6NX
zEeJRko0+bmoH8&utXNDkKz8-z`N6UuUC%^jRLn{!lKKh=y?{0)Bf4)oOTB$1Vh1>w
z;1g{fLz%IFRiE&_gvGU{={Ibdts`)RopZx_dShOH#b0HDO!_&Ak}b-02~iA+Chag*
zyEx>+?;zdb;#ul^$7qqid-|X#6X$UN8wH0zZFf<mEbE2L;M{Lo)xfe=4~j1?v1L@a
z)6Y~Qo8O8H&YWjID8K~EPa3Ol{~$5_8cikx35Ne5c2YZn-*gP~oN_CEIl~FZheP*#
zz=Id{6()zGBmLeWw(Xpt@irI^5LRqU(0zb?q^rrNg!qyR;mTa{A@|qP&utTr!aQ@$
z!H!U?kYR~cq-OJez_Ymv98f*S*?MS>juFX^hig9sRj?goEyXzEz3E|^f*z&w0xy;h
z3{B|3&IK#<$q7N<pYl!-^=qWgNwdNyf8ay<B_}DY<%3WIq~hNs31S57qR6cYYY3A-
zbZ=TlunPjnX5nYeF_VHf3fH{V<*{`bh{D^qIn&aaWdHwK#i|=p!Z7HIt&C!r3+ei|
z8aa%6o<SW>Q>DOrAm4=YtkRH6@-xEhl}}c^$l--QAXD<K=kz>&V`I3rCbMFW3!qsY
zVNKo@HM$(Uy{kIkJJd<>xyN_00xi<naoRP?sgwk*Rf!tQsFZo?3E(YxigGa7P6JF`
z`i`bGzos)BJJS;<PCVkr#_cVpG-%#RT-WH@V?Li~v-;Nlr0Ea?$q}`)(rsUKw0`$b
zyMI0LY^%gh(^!%GdELJ-TBj;VB+SNDkfJ0@j0DdGk-NEG2pC6}3lI$E1p)1P;pyG4
zw3f0}SRm4r2sqM{E&#0`SwzyGeakPy1PApC3kNed6RcOhO(zm3(Q=+>MjTG&*g3wZ
zaUaT1msC<rD6-<vd`iK~dl(pE$@!>SA-C734uwneGlqJW&V+ROq$HUHo6kJ7sXj<|
zN15+GS(kX3DL@V~-DfRrXPaFb(cS35XRXJJZM7^;U0BCQZW^R=^8EW&s_G3RTl7Z`
z|JapF9bTybfCdBIA6w%!mIQg<>+My}M~5dAq_x%=0xk9X9Chp}_Qn{*&S=>6q@9({
zGXWCpqiruB2KMi@vy7}MDH4fU6Os&Y0h`}t2GH{(=3JK6?e2CgkWSXYyRHC)-b}Q_
zP9Ch){^rv7Z8J27pHj1_^SrPY8ClfcQjl%be!q%j<A$r6MXSI8Q3Mz~0{qRj5E;EZ
zp7np6Y1QmhDSs{iTlN)6+ut=}ML;H%7TLvyP?q4D&>a8F-=~7#04#u)`acXT@kMhi
z4-$1t*A{%t&cyJ_uE_X-ka2|+ADH`7=D0fpSun0BMeZNjE8%xq`x{Tr)o&L+T8M3n
z!@Ddj{*-$r+YH_j0;Crp?THuPMrj0nELh6W2XYD5`<>8NG9iveg+JeDNUGXfMGkv~
z`a9eIY(x64EO4gS+f!M4Sbi3g%g<lgEEc??`95~bO0Ib5drPBTLN~l`d%fWhhgl%G
z_1y0So{-0sntm1j78CKX*uwgd<nM7F+Bm}{%~@jRe!xpN6q!@0OPor)0<V{_FwZ7O
z{6reEIJ4&EFY;&xwzY_Ew31joHA##FD50*kDU~371ZWv(J=`$Id9diERp=(H(B>H=
zWYr3_fUB$`whazI*j?kN`C~8(*X#MLvXZ0Pb~B5EqQD8Q>|R^=fqji`bQwvVA8AJd
zV%+;K3n=-!o9NSGOG7z%No=UC+z&nE`R=<DK^kzfwLM2$V@;wx;HH3%&%7$jo!Y1_
zSPJa3D<l>oWjEu#`7@OTG;z^1&b_%cII!;SmP?cv*)Q2kCD<D_V1%33)Z-5gO_+;k
zp?-%2U27Khz2?zcJ{3muLC*VdR|utwjl<tn3Gp1@RY`t@Y{g4Hhz;F-BqS9Mrr^3%
zCkiA72G{wZnX3n(Bc=r-1IY$4$28kkwS*5?i(JSuoE*^VCzXCgZ!g}anc~tzcgDMM
z&zwC=P)lup&Te_L{Y*?kdVa-4C@b%yh2|9UdQq_uO~CNM-ytrkcp1qzO(}D18(<2Z
zr#j1F;J*9Cz&gyRaI54HiHR9Fk($o+M*VBzYuVM0Br16D+b~xm%OtpX<V^lFWxF!<
zqJP*ND_5yf%?XOdx*;YuG<BW4mahrvuoSctA47c(1tlu*{3@B`FtR0(zrw@6rUl=e
zmCI&yvmzPYT_#k0UO8hq;D7$Yr_+DHA1@vIqL`V+gIkPgF@@a_FIrHEaF-3P1s|o8
zLo8Xo4zE>$W@BirQ~I6~o-lni^?yKs*YT_liOkIHwl|?8DvL8gnOvG<nVBu(axLK+
zuG^XDEwt3-CvwMg7X`0SIp}KcO`mMr<Y=$o#0$EuBV21i3a6`<)v=`vI-cuHI}Jr+
zVX_sJACo3aNXV4lU?jWnS)c$M*7Q7x;6CYA6^l1c(m$C)F3^c-3w_wHyD@D~>-UVL
zYt*;%fmW{{>C3+tAPgKNf7;@a&w-@&nZYK2N}m80J{V@rwzAPLhU8s6d3`9Z&@x>N
z)C=hSV;ur^&H9|(R3<L>{0pJMGq;0#ncs>cMvo2V@@P|DkEYxt_ZQOvZ0MyMY$~Go
zp(dfHF?AZDxh;OH>T4Y=huNAufDk$_B>f@UdG*MBG+7XoIB)%-C)qhn*8p0DP5k1&
zg>$Y--LrNM!ox$h7@QCqM2sNvP}E-eEqH;4G_N3OE#_dFTr?;FDB1bX{3n_j%)}ks
zc#)@f!z$Gx8b$kL3&mzen(v+8-2^{=ee_L4)M&jsh39JsqWDHvXup00Q&k|};4)3;
zPIlHxR&Nk@F^8#iJa3`LmVwIt>xT*@25;`8EenLtnPXCL+{S&!CP}|N>M}cob*(}M
zj{4=#j>9jOgRHg1mr=(%I5Vk<^nG3Yky$L7fWf~&BR+0oRO=t`$1aePm2ICBpOTyp
zM&*wuUs!0~O%7-$!;IG=L=+0p9zsI`U1lfoop!?1kUizkh~D$>tUy2ps0wjlpx_ic
zWQ4w;*GuYa<3A!#eRKreRiJf(|2-3}KYdluR||C#@s7JSOJs%V+#MS@_%PaKk7;Y&
zfRC9PFSf+U%q|jvx`jVKhT=jSC^{ytqbpLsErX4>fcv74*)B$sS`!hSpIMA^0mwK8
z5EuR16DxCH>~5Dx+udp-haD+FMYoSUBqCue-Z}?hE%zpRZ28GTNm9&lux5g1tq)#X
zyd0W+kg+i0>rD)v?buq`l0l*pb@Rjlfhc06Ui)jLEogt<xMD<qnSu~_Lz{E0QL)j6
zjZoR(j-Blj-|!nFlRjD;`wq(>bc=fUihh_B%KSkr@vH`F0_Y2*A|%>4%sp@(6jgR}
z&JlY7MWa;mq&CP+`@F}k*uDPC09){tp7;yma6!hrLvEEd#zVefE|_78Md{%jhf1%n
zO7tWj4Mi`HHl0z}^+I2auBq&-b}0YRp<Qyc_p$yhTpjQ%9a<A@DVhm)5LLg~rNC*?
z@B``Xl&GdFdYE+-TjPbCBYd&qmc-1jo+=&NS_;#Bz0=9De@b1sreP;KZ^_FK7$(Qy
zulW$taLFoS;k6}$sb*TV&lDh(5Z}V=&cR0_5(@pk=sf6xj36>g{jm8}a^3j=p*ZI^
zUH|QSa3X{K4i6_vMa8;VP1h$EjXNV05mkCbvII73jYgoj^jBPS06!5H^FUI}NIpY0
zA$V`f0CZ17h?>I*;oi?D<SdZ8AQz4PpzT&vD#1)kD!Pmc=>qQt^9Hx?<~DHG3%z@D
z(k>RYD9s{*l(j=?R|i)wOzZ|0%gyhF9~-dL&wilV6M*sWZ58aMoH2v2wkp=jYpY4X
zJ*N0_0+11Bz>VKqzxy7AkKn<+s70S8DkQ*A+n6vU$kqiulu90)A|n?YEchKDVEmx6
zr1v3~>0|s*ywUzUZ%|GnqJ;lLH~Eh)Uu8L_A@W;3X>n{3@DunId|bLTe3co3LU;%B
z7yKs=V<nX@3)u>%sg#cQ_vmZ+)@_cHOxt`9-zYBjPy>{D|6fxUo04%G`g)=;VXgva
zHUs1f71Ei{{?I@z>(9fspby)19a`s63?FzJS1KW;5RWOk7Dt9YG9qG5dar3E0)Tev
z?tviU11iFpJLE-n&i&O;3#Yvn|4PlNlIvr&ATd3R1}%0!m6^+RRh?dYV;;H|@R}9#
z(Se<n9MaLJYdQm6y0ubc%g)ps@Oc1=AoXU2g6_dI^V(zr=VEl{%=69*;LDQw)heUZ
z^64-Q>);+;a}*Ht5s$eDi~fKECl=hFpS-Z3av|$w8HIY!sgH0+JE?N`rbKv`cPO4A
z?vQp*6C6g;Hf&xQdv&h7#$pEe;BhnoWO3u_DGn9FWJZ!_xujObdicC?1K$p<rJ4w#
z7m%6MEljjNn+cPjI5e`zU+MsyqKyNI)5sf3OuFn>7dYGqF=MiZGn-soc^9~(X1dtL
z7n(+v*ftpsjl@-<gt&rNLPo)UYd)N5&H5+MtWr^affv&FX629u8J(^B+9zs7zWpos
z5Z*@~DFg(H9(hi+*GJZ&k~C0rS|V9+hD+pBxDvkJ&gBxWLzg@rn+_VI;#z!^W>09?
zZT+WjS&bW}LJR%yuRPuW+X@VSu-I{)Xq9UF7++0Ka5hxnaVdX7YQ{6bBKp;G1eqL@
z@BlQ_zH^aY=6;njt^x)k``OSJ?F-ANyTbe`b|+|w>mP2>$MtD9H#K{^Q7aYa_U^w8
zOt<3X;=m6kEdBbD3i;SAJttA73d>jqvj%}Pa%tB$xNE1Z;%CaO_vT7pID;$qtykWL
zN{9`0o*u>U<z@4AfbTUA#FM6cykVBh{Ds8eQX6jOmVZt4_PE8x$0n0Z_+A+|i%u@@
zzCmr=2tgaxqc1MGlc&o6>#$1O$v2fVXr*EatgH9Kxq&79<W1O-O%a=lUoZmiPNNpj
z6YT<l<P;~JB<A-q1166}C|E8Pt=Ti}?Tk)0;+Bz6X)oZ*m(1-ML>DwIL-GQj|H2{_
zc2N5ud)T4(=lDwQ1^8OC;|uoEI4dj%wd!OqIG%S4;SE^&;X@GEs#&yK@p35@Fwmze
z{-6J-b3js#RJj+(@a*ftv+^)QXt0hzJ7DemBNE0pEKD+1*PYZ<$AI?`q6;J*&WBg?
zX`@3Cy`)?O(Ism-02hUmQ7KZtQX7DKFcY{@?aTa8x=@mUf6pru3dSHnE2;@*qk&`J
zJkuBRxvaoCE#2EIU(yQEcIzbOZk=qa0vKe_CG*RyfFoS}OOMa(_r0b5!-VToS#Ab3
zPaDp(IA5z5xq~oZdnAD`sLMOQRd1X`CJ)EUrDcjj<O4Ri>C6Jgv$Vxrj*^T(MA|96
zV=o|u=CjjE*Za;!Uq;l_aAVlq-7<DhixHp6CNRYrp|d%S(nt8KqvVs(x}WPhXM`SZ
z?09qpRZ3`%WUJja0!k9$$KcC)?#}%nakfqg9}UiM2~}S@!5=ZuYsnhcm66813=UcR
zK-p+GW_jFldOitBvJh{y#*U@-LWY&NNeu)%uEf}Om2<>fBWfP-(}#2g?gV4rkYMXM
zPh)9JqCuRf;1!RrrU&E1($U*Q`uLbl|0w=<EkgMQV{Y$HOlJ15YPeGuwk>$)kwOlF
z?zM&IWw|xsT3l<Hns=%R8FjLON6d!-%I57N3FW}!Wti{jptGm+Sfr{v-Q^&uwO*Kz
z5Y~9Rh&R~yWi@k)E?^PD!x$=IWt<cks#jIDr3v+A_d8MUVX&C4wE(Q$&fdl_KRj8z
zTgd2Py`K)@uatmdqiRja&mseV3;SX){4*6*MiEH+ql(2MnjzjGb|V@|AxYX*tea{D
z)dahySWca=1X*3>&3BE()t}f$4ah)e!0-0&H))gAn`ijMC{mwPvlRavw+UBJ(vXJ0
zLXjIMf@nbhn~v!{lE_~Bgdkzen9Fi*uafJ?I2t+Iys-tcVW6r^NxK@KB?`$+`_KD#
z_JAvCU`NCkk#~cu*XI~j7Vq@A+r7jd21ii91};sHM_p1@K9@CGa<=>DoQ+g^_HxXy
zNLRV6UI2yviYG3YTg6`?Po9jJVD-nYh1i>Y<wM`$HCFlxjF^E*yleF#=DNmcCvGZo
z{M7!mi5qgX$DBi-!+1O{;(8O#pS?sBv@CFMkd!xNFh%eBXr#D5NK2!BEsoYP96=a(
ze@3;f73#a1mA0Kf(`H#WO3CXNp$xQy@4etS(`v~mSDkRqDLW;%JUGVEWQ+t70HoJ3
zXYMTeb`3yBo>vf7u?KW=&3t0mW0$mzm~7<{Xrg7ffd8v<rR%^f;kWEms~QhAz_|D3
zKGaW!kzlwwO-wEl<OM48Lbo?+>#T~jp}2+Nza4KOGH)UrRKmV4!{_zXp#1u9pe8I%
zEt!2^6J~3}y(WZLGu;{tFMh<y4%Hc@Zw&jnnpuJbIMxB2E4>mWGSB`QqO(P=6qFbs
zMqVopXf{*r`}Bc^3JO^B89jLD3RR?SY)q4JcXs_T3haqJh!z==0gr2v&%1)x+WxPF
zuc7kV<P(7VeztKj3AZ`JGJVBRXxzH;^h&GjkmkCpxCHx#5Q<3n!_>U+)Bs{v>9u>F
zXFH)paoj{jKXi19*SDJz*zBU1_fIVED)+h820nGk@7~L;`A0wQ;&)5|J8rjo`!b8-
z-LM13%>z*h=x_6KCf1XlvnX~!4p!o|FL>cwf$KA3RdUcDyVbW+BA0>keJ2Xvf!3Zk
zyckx#3yrF1uo5&Yi5UHMhNULX=Cr4{wS}Z!z<98a{rhCfSq1OYxqq|U6Xb4V4Zd`!
zg}KaskpUA5IzymsF;FA$*YaeLkwG^B&qi_|JbrsrSiM~*9b-g-rc6%5dqboe^6)pK
zIBaIr3RRWD#R7~Y1WN*<<=$^WyQB+Q-_!2ZDDf0$W@naNInC@DcJKcIP&(yN;GX|O
z`s`qRKw#rvp8LW_&(3|cR1mK9L4ZDgbGDT$d+k}f7^Xt?h#^z^d!XsbrpMSx_;c%&
z93*<?xWvTkI^~S#k$Vv1du%Cz%`^15%48huCX5`ouU%SZZk3K7Lz_sl`YocAhB`Hx
zDt{WkK~rv$Sqq0uL<6}YG7B~2wF^`|_@Cn>n!^`d>BtcjdpE~L&wu`lwtWn^(fu)o
zUOEbX$~|gs5#-zJBRpcls}$%|CJ9G|`Z+BgzjIXBy~IF3q208DGtm4mBGgsjUu?#?
z68vUwQseo@7w4o-O+-XEd+1!l;1bHTD(Y-`zHceyx@a4T;N;jpX=_nBnd)7X+4F)@
ztR7RAHyZwF>OfK7mZq8lBFhw`XVg2_1$_HZibIjMQ#r4H=wYjVZXr<W#%v!|%+c<Q
zR%U-uMd66m7JS9V2wc{$kq>&!BD3?2#|u7E^yGQJy}nu1`+D24aShsV>Z-JFS#NUK
zoZgTJKnPo*uUuC}u_kx;ze}TfE)I*jotfvC(7kk}%!ZL>d$X-QOxycUYcN(AVtSOP
ztG`&WIUjOF-@LhO6<8G8z}EBy;FlQ_PzmCck%}eyPJ_A-TI*P*=MkrBb$<d={Lm0y
z_aU?nlx`kWC23Lwj}}pgBRbZh#zqHZ!*8Pf#8+Ln2255*a};$Kjv)La45OXyuiHhj
z3Wscb;wZK|O<~@5%9F{b#vXi!_Bu36Wei_@s~GE`c)DT}^>Y=z6$EQO1{~eTr6VD4
zl8U5!bL=-cEq11i8NN5UUXl+N^tQ1=Ew|D|{pAahO5?2=!s|z#`Pwm0{1`ATG<fUe
zc)ej0vlL}Jmxv2Ew!cn4P<=yg8qBPt-A9c6=XG;V|L`}tT~1k)4kP_LXh9X;5{^jp
zrL8J(uoL<8vD#h(<S}1?Dlr%3QZ!HyC}_(|lMA2XU5&r7@p_YY3{G>G-r~4vuJOpC
zNf`eN8V;^a+V^8P#%e5H@1!{_sgwMOjt;{@+i=B_JB$iAGDJ6BL##YuWe!u2m<c36
z8edV_8yk>dp_A|dJRedAA2|WmwpBq8V~L)Y?z<tke<1#KB_d01;)fnp(lLjMcc<`?
z$UllIW$UNsi-=3n9>?};TLy+2sS|FZJ`M&^=cE1YC-!$ZJ;5#i?hoNXr3_}?-x@Ve
zt~Wsf;3baJfqrBFgyaDCMDLp;mV%21m?OHuv?&!Ab9%w^Ilv%dE})M3{Zf>aX*0Om
z9vq~u#n@jLP<Aw&-=MH>hf;O;<1%c|x7uqf*M2iQx8V|e%WL@EUz&%_njCZIl;h<o
zi%U)yQ#uf)E)hYx#p4k+7C@rT9zN(mypDMERs1}nUs!%8mR=x5+;61rj4;=JOhmpg
zxA5)M`~w;N;tJa7dDe6V;hPs#IdoC6YxWO>*&uud+p~?+<EKE6dMfSo?J@HWYx1BO
zfm2G`_qQ>Emv;Z2Vdp)6eA7;uLt*w^>$daMKT%1WSHD&d!}J53&PjZC)-@3ybeJXi
zh6g&}Zcp_llH-G#$SqWjJV6rFB^pq=ESI(*tagG80@Ruautzk;66Nm~LgZ1(WQ){-
zR4xev#E#ezZi(>6bf$w;G9p)xw)?eQmggHYTr3K^%)=*TO$AbO7Uw(rZh0dO2DE|1
zv#MLSu@O3^6N8LO@23FCQ4}7ySWg9dbFX%Sn*~+IdVYM|CsidCFYj1`sLNXAm~Ig-
zY;#geM+{U16WO}=+NtJuCIR0VX7Vp9uoW+`3^Shh=$(IYP}{j8_}lu80dco2Y{@qU
z`3@N`)IX;%S88@*%mbPrF>7qZJ5C|WZDk>rr9n7sDA|MNcYgxsOPYIz$erwdb<=&m
z=jtuvfi&6uDz9|>v><4caq-fF=u(=$J>QM#sWaL%eoNih0pN3u6EodaMfe1Pi%XJt
zSnvig0lf?cEMpXPteT724}J1Z%jjS&!=*LHEUW7PtoRK&qGfnG!}rdBm4!C*`(_Rz
z{PnT^$9?R3tXR$amlx>`+hIP7?Q+|%I5|GD)91~$D({gxjfn3)nH~gO;PO^Lxecgc
z<cF@Yg7)lfCL4FGa&Od94~ffKxQMiYc|D<fb`7RHe+GX~DQf7MejS|Y`1)Pw3j~`+
zX>GSWUP2_ZIJH~!e)00mCBxGc5hl^NL&oCO6K-uSJNwyoEem7g90H=NIg{V(_ijl#
zA1l{`)nY0B0z;&f*^8XLSJ%wfwlizrE`_c4WdZ~P+sm^0i=I*zQ0!Gm!skE~5sNg}
zD<}kXfDirceg~VY8d&{)#~2(Ez`4)#B`>!hnIA-2e!AZyH$a!hm(81Cch1s&X}iBw
zOqG^`L#-5!9d5U&CV9oQ(Q#XvbfTszhU{-pg__FOBYcMB7VkcwTJfjLb?$|3Yq>sD
zX|-eR1)2j41&mxugFU4EO<gBEJyq0YX}`zC2BGMg6dhSwMv=32CvnMv44TJFYsXCs
zfU=RDQq0>Kb05Q|=Xu+7)AwVh2uqsPy<r)Ozy^_SO1~ZXyve&T&l)k}{LWsq3LnYs
z{K|DZ4r;a8!C>6dG`lLN4=+u@F7jW2MPp{q@)&nQ+BSd@*W(6Zk)}DsD<82V5S+m^
zABdzUDV)DxP+kw4tZl$t&F%cL$rt`COp6J~>Jrpc_=dw+rr=jmvR02`c(|RZdb(C)
zc&*vqHyI;hlFl3FxxPS`T0fl&=_7G1qXeOsz;owMoY!WC-BE5h8C6Ve^1vwiZbsmI
z;mM`Wk@ziFL1oXssA}<wte<y3#@pEcIG?x?i~2E(KX-MG6Pi=x4@2ROlS!ueG@(%N
zjyDFcu0shT$h0!UhwCsjU~D9;e@@EO1&ghW_-maMcey=;WnNxOTf+YH3p&`TaHlrI
zA&`_Y(qvWkA}3O$P^z$A&#fQWtlsSaF2+hJg=~`B@yt^87ziBJgOM(ETge096c8rZ
z(%EG+>xqO%O2WA8!@xXpu6%Z#9ao5pJcJiFE7X#dC$l|?>g9?HemkYagj_@S!{I&E
zO~BQoyq8t+&WOp;+cJGz6e^8Kf;(lt>>rkcoazmD3{BE_K3-mmCYd6Yl4iohYm7nT
z0j^TG^SkXvAx;V8hn#sF0m`Xxee@d(bGC+UF$LQt8&;(%H;Nj|J9BnP^v^ONauOdR
zh#I;QI@SIeOp~otwOmAa$ZRk(E{S;{`s-G?A#DSvgM23GXseOBg$D|B_*(O&kvNf7
zdb$m*#*sz<M|K`JpFBajF6!(W*z#-A;$hmEu;lZ3k>O5NUiNsGsZ3xRjeFO%y8EBI
z+$WOl$)x3%epUXhP#`$zy)tMT;yD7Fhk&_!I4HZxv&)Xj>GJlvQ3dB|0Cx|W?h@+q
z`s_sT6M)%lo6^k~IsPW1ojM0F{VH5SumT68mO#iVr2Bl>9o}5GraMVd7AMK8dZE3`
ze^K;Az$;QE@w1sU>}Bx1pp_P-H4~wB-vEPH$DPZr(=K{nDRuRaO9~bQ>yZ+2DeWV}
zt%Qaf`7s(H0beKm*VQ9(le4&jrYZ-j9^HYSD-vXd>VJo>3Qa3%VBFndbXe|9>euny
z<6ijV!Ff&%`WFS)cfhZ)a>YwFgs=9%yjChLRb%RS;1M+2N_l!%t|{=lf#k0UWF7L+
zc)(j@d^j@HpGHD~*d1QKhNRX1o@h59$l{R|lQ1pmNecb2G9J0DkO(hf!#+r>bo5i;
z9eNVp2vDb}ts*y)31q}#`;zJb|3QTEUIPgF2id7C_QrONc<A|${azNdTFt0p{mSeC
zI3HR=rAU6eKY(cZ8w?j^TG4sJJxyv&L7~<&;338=meuJ1NM~TB$1Q8ZZY|NpBH?~}
zLgk$RCHma{2^0sKF$*b&h~u<3O7R)OtCd+2nb%@&aXdDhzA7n0aePKO&Hj1sq=^S8
zfuf++>F#lRt&@CJR1CHAmI*)s08c<<7PwF0eToo+e`wbdSJX7@8;lNMnAVf6SOU8V
zFEZ(wA}mMef(!>2!=JT~9Wh4P3z`V}9h+0o_H_NPR>Wr=FVc&EHUZDl#jx%#_9HWB
zF{<{^Zdf=>5nxQIeN<H2FyFnxt+;BM0~kWrc7Dppk99^mjArdVeumCv(ZluVyKJjX
z#AE-7A#Cbl45~RxG+S43*gu2rIgGE>%o7O#<>hDQ3w`=H&<ioWan?5Ov%SZ#Um$0d
zqFsMJqu?UHl_0mC<^=KBmi&LTRc)=VW?K^wBOlSryuO`e`7hJYS)7UWV1_6nk4;=E
z$vN2Ut*Nu5si<9{xe>SbcI-DAZilBXw^RoeB8-4wOyi(gR{@)o_ugS7M3#y)RYpbm
zf2&;KnR-YcXGHH)NHYa`68slF_-B!*vP9Z?!`?NMg#x3@BVn`Pt8{_FOD|y5->l8g
zmSUb}R5t4EAkq)#S??P;1T!xL27Hn%{@J+ln|Aj|7lkfv9Z#0NR^@LR_GmOJi!z<^
z5i=nzrYk7=kWmHjF3V;!UmEGaDg#m&YqhmO-RnxiERl@$Q&EUwvTd)GrSI1$Q=Og0
zl^ZYf2{y=}p)X^j-T;5@y-5W@iBTh@&<#s)G~j{-&@y}ODAPVV+IJp5hCJh?<Zx{p
zwc;XtT8mGY%2Q3O5|S3q#UMEBD4jxI=EgGvlJqhGKRhnOcA*P1o{0{uY2tfqtkD*m
zN1v%~{%^loI^d(t*^6t~AJEZL-k=IQ$$f6wh!+tl6Zoj_JdyC<JLG^R3O!Cj!K_|(
zz)MWr!;p=HJ5Sne<#n(w1~HD0p~L`V|L8(|!F>!KxoSf2_%%b{&1y1sth9hX!NmHH
zo^HgT;jEi2u;rNYN(?4GI%xP&DE}rXf(au41zbhB$&ywS(iz3|X+0gPpqIlK{!yBB
zi{GL!dX^vpqB?Xbl_2ctwYwJ|d?x5pIbrTvU}4EhE}Q~ZRW^$S_Edvk;9&d^AG!dv
zA4tB~F}d#6RTo`7BdOY?k=7zi$Z;K>2v#TY2inS^lAZ<qTRXPD_#_ZlHhOpTv`a6W
zr)N^Uwcmhy+s|XP`1DRLiZsEQ(oEU&wF6xpzt0a!aiUU%e-;uQJBG66lij8Z9O?M%
zupVPGYHSbhcARH1Ne^$DJuW^Bhu&fN9D^nvPo6ii?}e-AHv74^s8|tkAM~G`L*t^x
z%{)y?1pf$a?hF)BG6>No{O8z8q{h*+5QX*&#P{~QzGB8<>;#b}GaA0-7fb5Cv1OX7
z)Qd!gp8BOKZ=K7%8VXaHhf9yUW!AT6o{o~9#r<HC=?*+=H6h84+LDQ1FYgE}1v=rp
zWTH=GFFVZ%lf^T#b(wEtcc7r(_ajqPZcNJKc6L)6T&qe;@bgc;wlMl&yadEJFbz8R
z(kCl0OV?b|PKF&3PN5f!wKr)s*O%g1J*uATYt45pRjJ5s32(A|I|DZ}n!56P1b9Mr
zcU6&>SnU30hm#}nkJ9QixEIkLBnft@k6$t(Z{(k0TkO80;Dlg(B2mbq%PeITP$Vi4
zY)c(=e?{|Y2woqOE%^~OS=6Uy%kGewWSN18cfQJYQ9Y-zm)B_ogVfnMzZ4D{xkF~c
zRYU;q7vmQUgIblU{+~$(gfb+hVJn{i(qDL!&ib(47UmiUXvIj2MCl-<oN7b5H6fDB
zVSWdq2bs_wAg->!IvYSsml5(d;btRBv1Q&u$9^w@IV{OcMq{1IeTCx+njW3N31E)1
zbpfE|!)g0(ha^CgpN=I;!v4gWs%z;Gm@~DiqLVDnk>PkyrmyK*%6AB~(nG@_mcKcC
zmd@E5uLDcrHy}$+uf2!9HIfIC6VB>yR6?-ZA;RQakexSqtOA&`$yc@4QH5yd$f?DM
ztmGw48xf+;6>9v|!WIFUPEEYxNdBGA2Fr)|K`maZ?xID22{=mSogp*?$_rY(RT!t`
zDnsW+F*1i;y+SS#=NQF3nag<RTMx{3yrr?UZl{r4y7N~d-G|~829|Lu9;WWOeK$*k
zk|SOWYfO$>KRHA$q&_`nsv^S^-o<{9ljnk;KDT`^CGbI_5GeSTu};5&G9_UfJ6_>&
zNQGKo``w8u!|ZqTK6U0>vW*ExlVY_BsqqS^fc~KzVlvwWhuAjfG!|LFR#<~soO~wL
zPtS;pAO^m`t|6#Z7^f8^x^obM(j#f_pCogMV?1oSYvc%)FwT{+@7q;!NC$B>X^1)$
zgo^XM-d4?9Nqd~dnQ1Ez4Qht~b%<3Gbj0*;;CgaOq^H-?3tH!J-y2HlT%`Rx*^Oaq
zo)Fk|F{kwImM!C)7`fipKc*hhjx9<g=@wXg#8P8_TJ@Cd?9DEXcd|WTav&c?<BeGh
z+m4(065w^_mWwi8{cW!u$>40wHZOuh_xxD-r0cAF<8k&_KM1u{P?A{<Ohh{noOb0O
z7LM3#W`9(WI3N(v*fcDOS5P+(E_uY>3E?EY>W(Nf_>oq^khosTC(3onY5JRkNsSH*
zZ!FHGD}DU_atMPSm#uv{x}{0<IQou--WY-p*oE^7Tpp6GRSR@+6If284xo2!Z5}&u
zswGEuR<WIgOP22+2?Vi$pnY>SBHW_@ou2m9RVpF(XVLjX8tJv1iOLgO*}H<&FsKnU
zzpOWvdU_~{)RNi$cX@v<JVGZvnex1nlzK>%57tDpONv(vKe)n_kO4Ld+0vXnSUkh<
z$0JcOlvGhgfJY)I^qAHPF{sKbkWlqc6~FHeRq)X+Kx2L?-wGln*d~}G+s|*sJ5w^#
z=PB4z*jbcB9N5OBxXI$@b#oLd?TeKZ!Rd9Tu@zqk-gU{iIZpk#mOjK?M1BWz7UdXg
zpoD_Q@4~k2qR4e^Q1FkuT2*_*%(pi4|Lp3#$$-awOK7CoX9%gZ@hoHsh1T*(KVv5z
zsjVx-tco*}?tDa1bmj2nM~6%s00X00@KVrOWO1HNvO-{^U{FF7;BW(!Dq=fSEf`1R
zn!5%^H#>@&Ip}B%f*xwjzbybmPPBH;coCi?v3I|rR7IE9!9!N8t%JqRi9P?=Jf^}B
zb9~~*o)5p4XMrC-V33wSABtq+mJ=+vvgp2E)OACciC<Vh<Tk!vh}T$h+;eXHw5hO<
z7=%nv`X&5Do^k3<hSG24&b6@cJ{#k)Y~GMihczj9i9C%b+wGrzm5f{Kf`64WkzBZn
z;BzsFd0ADFTomfmD)6r3`GFg0C(n`~8TDx2wJybulw6u#z46Rdi^CTFLBeM<sL9Z{
ztY5Ca_p?N0(_WAKPHGFCHBu>Z$1!YqC@9(6CLi6B7DSK>frzT=<+qH)?GqBF2|252
z!=&(R5vxAG9iD`Maa$fc>-Dk*9w+W&wezLCyC7a7mTtHu<;+#WFc@Af(V!@-3-eQa
zob5xp|769MJ=_PS2{G!pQW`zG-#?>XkMNLkeD=Vvi$VS=Ln(zExm-p#E^z>t^gB&j
z;6i{q-sz90)0WqPgC^rK-6o<D&|*BM$neDrb?WUK(Lb^qkniDoJ17&4#r6XUy1r{j
z69_1$W5w8n@sFT!^)YhFqAyn`dW_M%*qrgu@#Fp3S~8?fbJU_>CUQeslW$J5I;YUv
zN0jRj*w?uu4v7&upzB;0ka{BzK!8{zK*v0Z;bIBfE-<4$qwCl=57H%$Z4$o9y#zvN
z;s5RZHbqpt4-lD@AA)K@S?R_#9PA%OHDmZA<lw>~mP00yA~Zg&x#9ZdkPsbJAR=GH
zmbai_EK@Hz=rS0V#TE2BkJsV}?E9;WIvE=&Zi9G}RYW&oM%QKwODin##oW>$$C$?Z
zEXpErgo^`-KqaRl3!xLQX_D~YZKb?=cN6ZMX6r}31<DM_*(3a4aH3?Yyd(t!=X}E2
zrKlvc=s*(3mbf|Ps5Rk)B;G1^gsdPtP0lJ`QdF~|Q;lYX0*sjtJf4it7JU>KRgDhd
zahNffV8vro1I*If0j^RiGVPVHRDBAjqYC>iV#&?w7`QdYT%u>DHZyh>%oi)x4{c{|
zD5?MVFQq5{&4J?P2JL>l>BCov>ihf=c;WuZ^3Z4S>`A5=wC56EesV<m!a<u~a1@@o
zbei!rtJKPB?Y0a?>dxqs{mxI&GXjM+1zyL^Xue%19^E0@o9wc6*z*sbWrcTMNU^t#
zicz_0AuerPrj|3`Zm}w$@+eQ?iii=Ja&b03x_#FOca8q&IUp`j@d1&ik@Z2vL#nXM
zT?@y<3o>rGCgRgsXD(VYMdoX6W_L^1RJ)H+#Qky%yx0*21m2CLLxg47ef1iuTy=ZL
zG1eLMDjF%7G@Eo`)Y)>VW^nVLEY1FGT_+5=wM<_^FL1Dtf&E=JP$juwZoEp2F~TS@
zu#V~W<o-!6Wd7+Iz=}wDfP*aWdjW55fbQCA{~u_D|4(J*bOqGkTm|40f8yfnPdtp@
zb&{B5==!xJ655~nNn@n_mQ9UGyBXh#|Ilr7OhfF%(NPF|NZ-eXeiYFOehrORoDJ*n
z{iLw;(U$YTV$&YsA}%mx%KqQAH*kA#|4?>@?;XvYF9~t`yn#~o-sbhP+~A{37WDNY
z_P?$Y%c`xm`TrLhp4Sa6zr9Ni9_V;6PnyB+6##g+77DbANQfF3FF6=>tHB0ATkd-a
z9`jJ^v&tAYR$84vtLlJ@mMktfF{rod5S%Et89|%7l9#4UB->c!5rjQwa7sRN;K;<G
zs2#0Iu!18A+^Oy1yy`n@ORH^Lbv=@j>kefzLN%mAO3l|y2Qu4$BMI3kVB(BbY&X0~
z{`d3H0RKM#z{@-;C_)E@ch-P@cNgcDswIf#h;9_cjn6PiNn-tt*u{p2$K1`Al@<Ad
z7aW#Xnm~sEJNacaLT_l7o2#k_BpYunri_=q@x)EZ8cp<gV`*T`0a=p8|KqJgllcgX
z9^qm-%7+W#!2p&cp_9sjoMz!WA1}eErb81p(=J}#2VHG2Nr_QgEkpMGhE0%g=vMa$
zlta+(qnZ}&n9bZ?%NFjh&%fxu0ICx-s{r4|+j9#MG!u#mK{8Z^*d*@&eH5G>%{DaH
zFk@OBuNvK}%F$o<xTPpMEqxaUO>X<9brfmu!XjBC6W<ve5mW=w)a}L~DK)$|(WKd5
zdJ9*&RjsC2x&R1e;2HS@81;YLiysN8$5O#&awJ%HyA&*~n~AaOFT}GM`)%t!CKZkx
zz}k-t%Z3N_P6CA+j&F^xzF{_5!3*##>kRr_E!GoZlDu6M#|#L0%h-;>4@FdOcZES?
z;CRhaKi#qKuY9^KN%oAbxkeK$2R+586vK|<PU{5@_^=?(ux2u#o2gXlz{<Ug$4{8|
zhrfLz?vM9p)*C3O+AK&v7wmy=!LL)szU<Q6&!QB}k_WIQB`$Jd5_;LlR>`o}y$68B
z0yNQ*PH;-Jn)wuT^E>|g+dec?s{A6hBWKS@c(eS)Zd@CS?+WNwy<Gzhf*|^G+uLyQ
z*RiSKO^@UBv+yesxpDgTfDXj(;A+md#4#<<cFa)e_u=o){9CkXPXXBtarA?*c}F$u
z)NH6wN$lPX-cP+El%6Qx0ns8x(#R}^x$@VN#1*d5Zk}_u5GdyQK(z4ptQgJm(M=l^
zA4-#TT(eMdozo?~k&ed*B=m!@ax-f5pPqpRLkCTa#KP?-AE1nZenp+V10}66Xd{~t
zRQ$>MCW+4L0n=WU1lFd?nFAtxQ+_CG0N$->0xYjaJE`w2saPPS`EG$rt=tD{`fp3<
z?rL8cJZ=j&w%(#WW&3OOW8*IXnrleP3|rgGrr!)-B?#BT_p#VjupVd{ShJd4^|_E#
z-ai;mKa#TyPz`@}iOSB2s!27T{;&81*g;7W!pwEl05)8Ari{Mg!k+Vo6k33qL4MIx
z8d!S(O=Xn^7#+=j+3_>*gQJeaNk~|6f3jt?COoCaKMNZr^vIdmUb*%|-f3$e>y*n3
zqIhc=VME76>`9}5#>2d_?hl;(yHb+qE&dU)s8RkDbg)ATcP35JjakGXK<DXq6<oYX
zZn^uX_};?@DJ@dX!1ZF_Pc%2sx9d_?mJ>ndr0Ji5hgs9b_oM=neTHNJE^)YW8TQNC
z=eFT6C5%Li)<dv@#M8v5yY$>GtNPhEgRTxBH(yX@J)^4>f=4NC0SJypHUs@vUX;-x
zM+{;p$`b8vXG|35{PF{9<4j<Sz=V+z+;OCsOLpR*$jh6Xz*`~(44fwW2-O$P-CO05
zP8}t}!6F6^PzqCxNl-~tJI?9N)wCk&4>QD{W;SFDuiR~{!8+33!BKeBJf5=bpNFCx
zS`0dOZ?wlw6r5SYJ4##ayqIR|Zw-E?IZIW;&B2-g`l5MT7{SgeX#Sz4BipwG^6gz{
z=Qz|)?~j1enX`~pGJJQchPoePb2Doh!l4KCRcpS7;*h`*?0~jLLTJ&2ONV)^Z#LwR
zAXaaT&+6`%sL)A|*kz4n3RbIkR?e8Zk%@0eVFBPO(4zvB`<xQiKB=}nsj=&eSGDac
z1FGWNU#WLNc4`QApLx5C0JPZg6t@R|C67g43U(28s(?k`-jqXJ5Ef#g;cJy)#$oK`
znqJ(@QWV|>%r8I=mjzc_Z1v!3I#FXsy88c5xAubMIXR}@4p|lpCnf_cEY~7CfBP2L
zc0Z(cV)b!%gFslj7@gydnT3qBG<XkzqMj&=f&_tOj(#Luh1@J~lyLh;aTUA4FLj#&
z{25f34YhNI_g@fn0Zaev5|QoRvnCC$W-j9YpTsTIj!k$16Z9Z>zrx_EQxtPNvmO_b
z<KI-$_rn9SrIUU}6U21Zyu8((%?S6joT=^7mpE`8a0`P)+Rfi4i}aZq{<IGDYc@5V
zHbsYVIqTN0+_=zm1@?XMj)Yz-6NQ>T$L4+e6*o*TNH5W?=~8(I_m}`vK9(sTuw!Ho
z6~repDpq5WLfZ~<K<2IZNr(jJdy7aBT5CEZPKe~s|D4mc=9%qL)1%Yo>aTWvrTU{7
zt>ptDFZ30qwpHAspsE+Z!Cc#siwCt>z$ijYCx+K0muw&RtNaXt>3+jcBf5C`K-)N{
zAOaq^dj)6-!TdWvHUNb++XeXEw2?7r_8gfg1i|_Cesi(SIN7_?ZuZiX)kIj2^;xsV
zfp?E3Fj~MvFGO`FicPO|67a!XV|8=x2Rz9bSI7tg;Pfk3YYEB{HV3MJCEn2U1tcN<
z;Lj#dZA1R9?BJ|tn+F((IN*$Wg^sb$V2@nr$_ZPoghT?-jCWhxvz{r?@|!?yN<p!r
zXG2(@MpTYRDZV~g?Kv1VIfc>29}HGrbn3;{A~_Oec117GNd>@ZHyYop#VRxjmj|4)
z^T;N!jA}dkOh#1{x6e+DErr;-<{8sH5MWlF)T&U5t-C3CTBr>Hn@b{Ha9a_7`3?sk
zRPn?Q`!4_TQ>+utD@IB5{JNta9Rq{VimwdgwMn0A0y5^zb=~Kq7)$@`;6*XrL?goP
zJ&tP*62UgsltxLH#J9(;V6$a|Vd!y5v_VG*-g+q4RrtiQkVxs2X$grFWA>vPXV-6m
zVB@F_Bl`LAgE&5r7^XLhTxLgqeI_E6*`6zI@aK=BXKj5n&y#pQG60@RFuA~59Yv*-
zG;n}+%(RYAulC~Ff`6@iYeH!+H?@h+@IDL9!9eJXnr%5e*r-)Ah~E?EasNfVEY8mD
zORI)smJI4?p*FSQXo5P65>VLvqpMX}wSyKg_lMGpTY2e<n95@3&@i6xvs9*u%X9?~
zAS})V*JHe4m=}|b5)p^+zvJ;0j=kl68O?0_iF$2gTCR37oSe#b1kNbn$eUrgP0W1?
zc<JE@MqNZ<UV&5#H%>$F)7eYQ{)3BGck)%6V0Qde*cs7-w`DR`w&fr_jI3{om|*Km
zw6O)IKY(m{(9hoYZPebQHv%Tg;(I|rzurc>S{-5+2bjgXOHaNU6bHvi-TwGE-O6JG
zJVdsA8flKN0WTBRfD}+AMOC#Y4~GrJqVqC@S;QSw#=^gu`ek(y&o%usSAF5v&-+%n
zz%?o2<p^~ZZpH6$<tQCQX)n&;8n1Z&3}g_5kTEEm=OB$zTudBh)J=MQZz*OoW~@)`
z!#qS<2*u|VFf(nt{Yr`$&|Rw2;<TrhDy9S3ZCzq2F=X&LR?3!0gqe)hEI5gOR6d%x
z8Ae#P8aft<4qf8dgL0l+T!8SJ0l>9q9?YsxS0F7-DIoD75=$PMza?GS^28%W60Zp(
z_~X+lw1M%+3}tBW;#4q5GY@ATJ0*2agM*(_5c|Esb^*G_s4?RYKkg6}FNO@GFGi|J
zY^X8X-YbOnl+%siD-2-tf5Y6ayTU4u$CrD+d*g6%aDph@3WwDF=WPCf0b0yvy-H@o
z<kNo1@iO2@?S}qN{xJvlw4!g=KbSI15Q+Fxv<0QIl?4XD+bb}YO~Zcrrh+<C`Z)JQ
zK57NPjB{4_bN(Um6HYH;tl~Jv7eq9W%$gWfQZO16f$b^3?00R<4b;U<KIAdz%(+6g
zhm{|De-_)H%`Wuegyf;0vQF>2a1+`CUiU77LMHvx*f&W;81t5iu6nWa;_%*WSrfFP
z3f<(*4tN$M90{dRQ=BaA!0%~-S=od#Fz(rycjcdBKn~bq^%@%l7LxJ<%OMo*C`(|`
zYYJsIigh!WAjBSZ_OLH(*d1kHajitnyzR-Co0JXMV8fjqJDLoCDja_XJgZ8<(-AEN
zwfP=JB%$c<5D6Z%wD9S(Y<8~W_+6vbtaUZMun{qj#3P2Z=UQd6H=#~D;F?D~^7YCm
zl+`3}Il?sq!T&&cS<L0Dv2>H*MUK=1xz`u2&o|XvFVREZ0ne&SZKESjf`2>IvINc<
zz+Z5<@H#9$wH^vTLH*#M;6q&VF3YTGz-y7=&t=9s$kh<|{3e;$w8zWSJrYH#$_z;S
zV&G$CI4G#=z@t6j!AlBf9>6CABS!U;Ch1{_RfHO_w1{oaLt42`$`(on$#s9awCUYU
z)OWh!csrnICL!#yGE57wQ5!~EuFjb&kO88;CPoz$>h2>`l{F~pA6)LK6scyDUX$`N
zsSu?CduJ&#;FNP8O=7JUR<(PGF5CfZdd4P*g9x20SBW_*e-~RTc%760UADBB7WzJW
z(_cFNdg&Z1_&1Qc>-%>koIFd|s1&+cF#uqAtfa86QD+-$GR(<#um{vyFx=4MKjTjw
zAV9SkdEW$2P&d>r#(dt2m3^(^4p33plK12dSfVpL0K7{Q-dK?8a8UTU2kU_<6`zn>
z_Bu%U+t&OQ238&h4_3EjX+|LOVzPZ+`bGTV_X@H>08OItQuHSy8|h$6z*3BfJ~mV)
z!5r71xz+pIT`ZyOIpd6np+lYGZT3GohkQp7Kb9>Mi<X?#djXPN^ahgA8l(RY;D=;%
z^Gx+-f?^RY`WG|%y|y08e!hm63nwcIC)syBD-W+toU?@MLQ#z$Nr=i5HbNDololcS
z=-p$G4fmp2$P2{_PCReQpT=L;IrD;S1pLev#$IW5YU!twZDxd_=+*1Q@MO+CSU4qH
zT92%vg~nj~;}6JK8n-1z8*YnCJ7xvs`VBg!!l-3gBq^=GH2w01k_rrA*4AZ1C3g!n
znz;So6>%MGEctm;e}{oErM#X-(ogjy1nwU~O<{)M^tP%Hvl82}VlZH%Rg_P7=)1(2
zbX7W(C~w<A#zWVaJ`s}J4tEru=9zNmydjXQeJhBws83`54`kA5`AeU#x#wt}M+g^h
zEjje>KMj|iPCG-0TR0XHL12)-Iavfqi=_32#;NK7Vs~1xc8DX?8T#kAeNl4BFUXkK
zY~)qfgBEnuAgDuE6fnH$By2{iHuS_i9iZug#*;$hyfNzc&UY%HIr6C2&vOdYk&ikg
z#BFCx9EC^}BT7X*DZq<Y@;8wUQ@$g(o^1}n^)70+b_xHwo0*0^tFHIKbj0MuHupk>
zclpcQ#S~2ZrayJ_zxE%EAPC#6gtm_<fFND<bz|TBCB8z-lMV^tnh)YYDWvO&XBOL%
zSqjIJdl;VA5K5>s$kRO`HtjacBiO{cDP5<VK_1*=-llVay-}tHg>R|MlMZ|4p-}_M
z)PZwe_+_yF)`@eNFAU55k_g!o{9aWrvg9Uu=&l5HlEcItgmZWpu(yfLNGQ&UW_O(-
zK;xo-QeUB?@XDSkSvC!95_qNyr+M@%f$`%NG?~nhcHfm%2KsA0>79TOu>;_AO36|}
zzI*4!ReWs6iJdN?`^u`|7lZM|!$XKOJzJ0^%<F64tq%mw8s1hupTtZ<)3Lbve6GDU
zSRxO9G&G0~yfAQVrK7T@n=FN<7XU;6Yk;!DUYS-T7F0zJMmNRR7IQ&$|0u!;D0LR{
zSC@;MRWvffdh0kWW$zwJo^{ECs%)<KJT!ir8}*Uk)&*tCqsQ$`Gq&<Oh}V;S)f<WJ
zXCg`B83#+!xf%mS{kVR?lm}yn*B(^KP%&sur-QC8>Qhc0(O1u5CDnXGF#;s0tM>6=
zg?YR6{2me?3AD!G6R69sda&^4ktNR_f(l)FCzvEvSXY~_@K%`b0-ETn)i-E!GjEl8
z9Zj92QMtQ%)@_3}-_B@oQ7WE8E8B>>08>slpN|=c#y=fzQ+8U~9rN(RbsVgObsubJ
z7yO(o`MhL@Ir=2mQzFayS321OBb;uxUHj3!kRyO)0_l-08}zI2f|?8{MlpAkF<^gd
z_7kunwFO+IdZx_Dg*Mr?5~P}1>}g-U0TTA}zp$(HiyxXx6lb?(T){FpVcjv&Sc<Fl
z7Kh>SgMsc-7sMN-K4$AZ{2<*;!_&6iwPZFoec{#2BEci_D^2Q<(g674-udLCS}agS
zsJZnIVhR#SbAYffi`&^ZPU7ia0%%V1=$zbxx%lOwsq%t>=LV@ZAVYJv^I^rr)bu5+
zk|O9YU2RUr=SQ*yo-MJ2?LS>G4&|SlBWQXtHG6$<<HXfk?+<)Bw^=un{yyciVN<nQ
zfo*>W&qCDSCyc@ThoW_tFe1D(3KfhQhUs8_a<B?)V4~y#+L7B2*f%yk|E&~)=R^@r
zan58(NXLz8*+U0Y_7dzUx)f9-)2Yy$#!se}p2)0dik^*N7I#VW9D6bM^TC}3eRb*~
z=Y(sN8#z1t4VVLc@73tASG>{3^Dxo_JIp+0Q>`I1go#8@H&j-yul~`yxoy0U8{|L<
zqBI1ytL8R^c^Ck;-Pp`+ek3OoA}>>Fn=i~LdALPLJZ!;=$wx>avM5#>{HvBW6SB&z
z5RGqB2EyShhDsy5Kzl4gj3O6dCGI8|M37B$|Id4k^L|4&+1fCR9(%C(+g%Y$i3o&F
z$K;l|Iby>aie73vxC{ZcloD6%uLcDLR^%g<TohE<75{JAM*C!F#03Zt%*u-TqV#tt
z<O5d6qO3S!r4sWo7^n_hU?8K!2u3dfrF<jpUwkerap^qs)5reijC0Yc+syOt(~EEF
z7tt}9a}u^ZWOa&55~z2vHW&ZcZ`&V4>EZfJPnrKnLd9Acm$zNRM3jgpB?QtWPqkDC
z3IBgSDP#pE7ET2v>hF5VMAq~fKCUFOTyBV^pjHH|>eXle55A_k7FmJJB5$Ky?wBvz
z17yr&ldrETW~<f67{cPzd+uyrJLHuNU61L_=MHocS#P`TbH!hII(ugf7%4%U;z2UY
z8ppdE=T+_=n`UNBi!0%io<|%+GN@L>Zo%?n3}N*=mQcW8Et@@|n+b?ZEg?WVu{nS;
z%<<bROoF%MyQrviTO0AkCmS`|+>cx_1oiFV3`u)yUR3F~U|b3Xd*oIgcJqEl;%0_e
zR+{<NB)_z&QYvha+`orA?k-D#e`#4{q*mQAourBKLer1c+Hn^Hyi&D2LvcB@)cxZ0
z-di(QXS!JG*}c9z%4{?2;UR;F7s(i9Ab$vHa<p!XvJ?XLD8o05o_oAarqV?F#5r>3
zdvLkvp=hlo3}o=8;$7LqD|~o7ExeaSY*R(RrA0+!dq}Nd%vn?V`&qxH45#N5Hqcci
zha0_nspQnuGr^vLIrU-zg<&vs{BbEvkUvJ^9_4_S&9IyzTk#1>!O)Rj{}`Ax%#{|8
zxh|2p_Nypn5auZzv%D3a$p0`X-JmPP5PRe4)EQy8LAwowR^Uz3by_|<nI1<(<}?YP
zuZ4+Wr3cA#pGOV1y&WaYF&M*&Z|!BQB-jUPZQjCtOj<-qrJo~M!#3jMg*u7=Hit-H
zFLaO-WL{Fv+9+ip#|aiy>H(~cClPlN@qG17WAM0A5Iq3;yRt+IwDg%SXrL1U_OC5|
z+-S%c-PYMvZU-93G@W9!6F)M9qs6k)twjo21veE{EK}E_Qg+scLIPJZzt38^R#4bn
znfwH?lzKS7t!5)#NACgTv&c>=(t#L%&eQal6FxQ&f7Rf3V&%FkDn)b1%RC$@cU5Jg
zc&4my79S*-C-lq25W=Di=$eFW_^i?gal!dMo5AT=rp7I|WZe5DB6wTq1!hJ}LvI+H
z+7_i;(_*s__@S;-*6kA}7KW=9NNCTXSp=hv#bJtCVA_~5P%o%<o4K-;2NPB`Wol-F
zT;=#0`;@toQD{hsPCvHdh5dj-_&>{bh%CqlM+B04v6x|zcr_C;V|>3SDqq`j*NR!2
z$=r4=t68I@S~M=%sj_UglIhGJAZY&~_K4WR0Z8Mb0(L~Ug|cvwTFY_;vd0_Jhy4A2
zPc)KIU$y49u<Uu|KDXpr0^pG+MnMJ`k212MH^mtYnfRTW+dzLx1zI~dAcBW^rrEPY
zwgJ7x{$GMAFoio{CyNpZ_8QwZ6(>3`*MsS=pI#N}r(D{iC@K)5QwGN)A#Z~zv97!Z
z&-;PkXVwZfi5NYHr+~a<SKFnKU_X7X)Il;m4SXsM`ckRSlFW0ON~{fy`~C&2of2!u
zOLvEPM1XYbAcbL7TP^;H&mn2NPz6RlK3OT3Wb+UY8bA;D$!6F&@WD*w8}uJ&<4<<x
z_6r1OjX%0P((WfSdp@vq0j9jUjb=sijn)zpezKaFw3AR{tC5Z7m0cqzLgr>1Qa45m
zv2m)WG)FMbrR~EcUI`7-wylT9YKln$J_x7%k@M2E2TpEI`Y?wQ&L9vJJ2_9hOu5nr
zWW2UTc-E+?E|G*%+(<KmxEER0`%UwfVt)B6k=2x4hoZEKbcR%1?`O@Ye06c}GLY19
zS@hzJ?7$kJY__`Ei`RWEu4o+kt~T5>UpOAe>dBB^AVhpJf_o{oG*y>%Um@oHb|#=H
zZx;Y$DY+%h5AiZ^Qc8Dt_))D9jE;YJN1u11g?YNeebr&Ax??0zJj`A>r_go1e?LEK
zx$!TI8x^;ey7#!F1m|Q}8SjK80-zi3mj}ap$Ci3%cq<`y#K#DM;+85}h<=kSCBR3a
zSWQmDt%kUXZuY<#7A*S8`-h+5+R_u0;xF!00kl@Mxo+#MbVJ5w)EWAN4#a0&T&hR~
zFEeo*Fpai$DzE9oz*s0Iiqw{0Kiw61HPiu*rtiJ2w8IoCe&_+1M?hl5#gwOoRqC)B
z&Ml_&g83`Lhj{-r2tbmx;6%4{n<_ssNNB^fsf^Jsc@J5mK>q`=wywfCOKy#_*e@55
zma4TW3e7Ux&Wj!F;7&%CsD-t^tpY<a8qWDTug9HiBWzy;+d9Src6TtaJ@3wEvHoAx
z^$ix}-}%07kBZGMxfFu?`j>#ZS4~*2bu078^L5#2yAb-o(~_!*a}FuwK%<BfXA|GJ
zrbfs1j3sNVa-j!29Evyfr}TmIKz)cnk5?tIwD(d-WUQ>ML`t4?w1*HOf0@12@M+MM
z!Qrkw<ik1*8D4?@E_csYSWD)oZ0O|cK@E1(;j4+da+oWzgP?hEm+RjvimwM+xd%*9
z5S)+qr|1j!TW%&TIO}mw^{)G8-h;RrXK_AM64(-bs*>HOMw`5)N2QUKTEMQ&+FnQ(
z+uh}oD4)OT)5V}tDz%q-Y5w(u$?Uc%jabU+GDvNUNxPW=`D59d!U_=kO*Gv=q5Q*i
z?x;!ms({=L<eO?s6Fa&U>hV0L-678eeR({y7D})R;eIJKqGcUOnh~R4^6a2-!~+E|
zjBdT^R)*urL_R=pM99Y>oZsk!&4T9W=~^)!`~w5<5_xFE6hLfQ{@=cAsT}!z^xoFl
z=`ZL(aj2>;ctHi5C7}CsJG(Z|_4fJA%DL0kaFT|A6j|Q}Auw5&3zEhPN8O_Mh|oLj
zy>5uo64hh$#~YGRCI$}0uGPHz9yD{^e(fWCxD!{C{zzq`PqxBEyYa<dp8EoBXvGmL
zpt6Pla2XH>v<|$HvsYPinyXqj_!MW2*qD~krm7gM!)=){K-(}^6G(u0z<8QdP<%07
zY-&#j?HKiyVEVpzhgI;eP{cBbbjCBK95Cl5W-0q#f7g(r55Mt_6MA3jFW2_AfwkOH
zQQ2XGr^Nb_9%;^Hz=5vFjUh831{uq}O46#~mV($vCSVb4-4EEMxY%#yIjYSs8{Wsy
zY7XnB*9ScyDLnC>7I9(J?T2(6fM!s>N{07c!+zHBcl|GHWR@2}!d$RAP19aKx(h!|
z`OAEX*&OOSf+IH>8*6NLQ~||DTM*36^T9NAD5sUYJEBZKXB4<=az;4+Y%Z_nq}3S*
z_OwtQ-R!iGV|0RjVdm}0u!=(#G_7y96l_Ab=?+_-{YBAVK_6YF>GH_uC*|<imbzrJ
zpfYN4rd@9x9yDdSbB~JTJk3O}cM`3#hJ-A3gf=;RIvagmh!1w=Vq|OWO+gmKGHnB0
zlj86y1Y1XK;?YJrI&@GTzxC;W1OYnIL@USjy9KCwuUW<EKZYLJTRKf9g>~0;_6gB-
zLmfNdgeD9tH>OCzI~_{w*NCPi;Jfbxp3f~VH^9p$KJKA%oFGHw0uFDR?N?YT+`g$>
zADCnMqlask6PA56k32O_HwLC~ZLmq#v}wuS)Yh3oJ1aV>tFB1GD;>*n3oG8|xE0X1
zCRS5|fvY2bJ&S%VUN{3WESM14rbTDG8IJnjnDP-ewg}kWTTKOnxELmVsP3i<j-l}u
zeTC4P!+bs0suo^B9&LSyxtl9Y^G*ZWf5OZKp5(4;d?xc!_d5EY!Z|*}4b<U=>wl@+
zwkmg@Xj|ADMQ!0O!`b~=5MOx21_Nkb<CmNAFe_8gM|TuLe5Mw?F2c7r=JfC@3@>?z
zT^^R*YQYH)`{0`(PJs2P#ifvW27iC_N3tT<GEdqpa=2^)6H=%V5tkg~-KIwl**z<o
zYC&#;mh`5hxF|GJiQQXF+e=Lhhn+NIV)hyYY=<D6OjzYCy7{3ca}WsHq{5<2{o%nG
z146@j8{F{rBm|yh`vaSaNsbAXthiI|eQNcb7k)vq!P9<4F|;C@)R=fK4_!-$5INm4
zdOHp+*1Sc*uFEf1>_lA9G0Q}=H{(t+TYpah9!loKEG0|JLNCbQ*0VI5Och39Gggww
zsQ$2Wrm&TF3yUvpaZLB!j({(d`XBLT@9x6|pS}Vv@anlEtbAO|1ar6Eg~i~Q=w`76
z?bPlbYILT6pvW%HV(CL=-V7of4VJ{VoIzQuxclO8-W(r()KG|lHKJxbb?zYkk6Tg8
z1@n`rX7izD@=>B97ma2P3|X``57c=1jD2QoGgZ^LMhW_(CCtaU@QsyQ4uzPCt@JUB
z+PyV3yk3DJp^S)*W+1^H6k0Mb&Uxe&tkVc?Sq@)Lz|_C_`PDh&)+*uXWf95#xinIa
zt>kCFGx5gJm>D3LUn*iZoYKM`06z#Yzhc;{*Ab{@4F2t!Fz&mJuOZiyq@lrOgp5jL
z0Xfrf^>%d|RCR4{uXMK)-f~Osv8E|8EK-?XD1cn@vk4d}sA*qp$a{cm;c70Pxr>Wp
zqnQOg0%o-{w!u%ztD8{r1F+APG5SB!(UGlpNOV3BrR4k)?H-Wo+)aL8<_7m6KWcGq
z)OG`N7!8HpisASln&wt<(EK&@!jEs4$Hh#4j(mbbNxg|{z-ZBc_soX#+=ZUCU-7E8
zXt@`YRHqfx_Ubum$0?J?zLHqA`wpm29dQm3Q5H4LZjwHm%ZHKFv~tU28*Imsr`U@)
zQFH7+`Hb#kDzR!us$Q&tt_ECgm0B$w20dN1sUk<+jU@Gj{2bW)-)zXWGlXpiv?N4w
z<3)qoMuQ3I(M^C)YOTG$c@lNHi1yfq?kZi^k;;55sW^0|7+HgQhrv*$I+CcHkTlY3
z@Xuj(O9#P*Z^tE?`ockO-=!-&T<pfQ9+(nSZtH`ekP@;g(fw<kta|u9T({qNTM{0H
zm(vz<fZ1qnQ=Eaa)5&jLoS!IC@1y{a@XNNLU5<_6dP#{l6(-=vK{a3e{p7QVwpp;S
zkA0K*aU8->fEdx_y?+!11LHP4G8|f`e_W`8lC&Y(TnHmzNf3#UNzpvUDBWu6CUtnp
zn?CXMtjS{|*&dK3@!;SsKhrE({0Cp1Hv9pQ49T8xC@jb5JDQ)y4R>+TgmI&u%8&=C
zeak|Q_5PHD*M4DF+}8?5S4pt@dpmv56>}zQpzf`drsq?j*HlFVc0hlpRVg+2Hh3^U
zIH?litc6EZCdh7p%3*EG>#(*BNKUl^UaIDJj9^v6<|c^K+T#vhV<j>0Sme|20iGPv
zk)*(9|HA}>wQI|<<uX$@@9$vAQ)ZA#<f@q^VxYEQEyU_#pEZDy(W50^&@9wWcR2tH
ztfE<}$R~X;%yB)x>6BK0q&B&)k>@05VqM0&PwwOd8vT%9{f&!F0^ZlTHO*H?+Mq0n
z^aXiM;vWO!Ly8Omnx(ss1nKqQ;d?e<1m``2Bg&3L|KffvFp!@o+Z}GKu)LGop(V;g
z$g0?aT!@%hJj9#^CHFb>jI6CXXxX@?%C}Wz3?s9hR>i8f>cVC|i1$)B;SsO=A;6N`
z4<5?@%rOdbn2bkXY0b1Y?>|xXz>D1b`3&LhjV|(juHg5~ffK(&fdTdGlz6x~l*2SC
z!#=jMT?l06+7dS@C0Vw(t?U9k9^e3=+7_ajn(nwk??l1607SWSr?oc**%W8#>_YD1
zdR~M!#`vqf>~mK(ZnzJQRSZK~m`K0yH7|BJ)a@+Oo`#YcyNkbOv}mjY*_vX;Tds_{
z{@Ih!6lV>kXXY$0tbV8du{3PT`REQ1K&q;>s%~VKv#p&F>l#3i<p#^N2+Mvra%`N`
zQGx&S-V9+lk;-+d1$c64yS;J|>F`rTh!=mFrUPGF+~y5;-psNUnv~m`{DDefUIZI=
z5PRb-RpFmgaVZm0mp?TQX|tfm^kBFMCLIN>MHcMoc{fxD5=zB{a{{&uszi6}O|-#_
zWMUa=<yoqmhio3E>K#NZks=!uL{w%YO@-1PglBP;Cl+6zfsKIA*X40~PLaemD2Xza
z^%^w{Al_`?BZ-&b&+dx3{aC)Xkfrye027s*`=b<)ZzSG`Tx%QZm6$QhoLOIoxCJ8H
z+jzlAYexp$Xgz^lO1_SEyLXb;M_WQ&QC^|MP2v=fVLp$Z_~f<6RFP1ExVCYN8TS5D
zdF#2ULZJziOsiYI5dcIMB0|aJ1e!rQk$K|D&-rMtU8kh$=xp<`RE}p_^0N(<J+`)s
z`18rpfEk(v-`3>`VGJA{RIcMHcPn9(V*|@1!0$|!?bl%7upLK0M9bhI`X=O{onpE}
z@iC&Q?yeS9IwS2LQ2=TdrMZHGL1x<d4bE(do7){E|IyS%zuiz^r}91iy%%<C>;n`l
z@%vPV7&z<TSXf7eT7|d04`Hol0AEo3M6Oi@>Guc7GRSt@)<~IukrP>iooU~R_ZN9L
zC$O=@ssmn7a&=eK;0@HBR3wlsZJqHib?-}fP({tQ?p})YJP{UMB%V#4iyz*gR8jsx
zHs=XD^oHsF#38@Z^t=iz;EhCfwcv5wLxt(SKzPf|xv%2^W&ORVrWZuliBXo?4v;r)
zflsC_&cJ4)8!qVfPW@zdG4FNf>(Gl}hbQ>nO~<;R)$QjDu(s@ez}+E_+gy+Upwg&_
z=+LNFzRl;4!NRj{hg49{75Wyz{TB?!m?e^e5Km$*V^`=Un%-3X$psdEg`RvDqOE8w
z))GPPgs!wuYC7^^Y5bU2u%>xa?MG{^P)`vD9w4lPD(72{<}+bNDR+~YmD;YVRlyka
zYa=UtY8ICG(!m`w9ZEaL+xi!v!jD`{Bzw}XOU|t}2_JH#uh76eg1W8DjXoqGB|2$q
z50Cv0b=WjwmHzI}uRNHf1W73{_#s+@tw{K8xW!4pwXiOmK;J$7sXNE6shpb{H0?*g
zgX9T3hbqurAqKHvxfaA^UnRgta8;S8jSt*e9qPFnpDvM(I|+gu%wmVp&URv##{V+G
zNN}=MWy~T9N(TbEhmpQ}6U%ygnQ$5BPw&!o$=~56c~NR3Q_=@7o1I?UZ6P=zSW>8U
zyqcP5GTi}v1d-EVU+SE&4>JPwGpO$f<$d3hR11N-(&kg@+0`mY9T0+c<4s9>^x}kj
zL~d!<a;-&$Zz$k)^hVTAorch-d5NgvUaF|Qu2<U{vUU&@zSw1%z52K@iW{FtrCb_Z
z)UjGT_}2;wk;wO*%^+T~XXk9yO)_0?PZYh`=0ZcDoDRaBLr2NEv`-{{iD;<tRFY&*
zp6ON1_LlPkplP4cWk5AV3kR0rwy)C!Rvfc0nL>@vH_TKyJuZvn*65o{vL25HOukDc
zZ76x^%Z9VPcc*jXy&*h4X6cwJP@FUS&Zk#-{PA!gIg;BH70;(KCO;`W?(Hm+K(0}c
zdp$d>=_m0)qjX0S5@Hkmj6UI94Q|qxE>|uC8oe6pb!sw*nFZhM_7-INkWMw7T2u<Q
zoyP~;VG9|CQF2{TKO{HY-Xdm&wkS^quB2*m{;a2zA3loru~hXnJXiNo4lLtfM&mp+
zjNW}vkP0qmI1ux(KTA~M#(A9*+KSRPVJDm9a(1H}Sk9`C@ZmU!Ij4O<aQ@IF01Lx0
zpxE>NL1KxqUk+^c+Z|*k_}CX}Q7=4-<TuLmO5Xa6(=MNBN4W9NHl2(c=jdKa$;j$(
z8_1}XR)`Xc4)br@jLSzwSJqpQ-Ie5+GWb<yJOv4pI0*>UCaoaUp;lm8VO4k+^ey+~
z&mi+)b{NpCx=E;E>*~xE841;1YUC%6X+%?$UGH6hTT`}I7`L^`pHU?me9v!7lR;hJ
z<>0@;xYxDtVEq;s^6A)us90%%KKWML+{3xPFF|hEyowx2cfUKkiCipMq6F_c_H<Hw
z`D`e#$Tc!*l+tErWevBZ?Ib*Q16MoIZ!mn6CYDPTW+E;eNSM2IUqP}nE66C}D&&1L
zXI&%FBar9qFC^5B>iNX}jyT};LnAcbg=#Zhu-lyCyYDL@NNW4kw)0yra-BP#?r<q!
z$RlShy%<fn|H#CIbFL)*;YuvcaJE7_=Ox?h=MbwMfiMkjMK;Jg(<yP9ZSV4&jiewi
zSXZ#pjzpR$!}5s)?;c9;+pApa1FN^_DIj@-jX~4ORXoAxRSjFNKqoHo*6BZz*ZZP@
z!1T4Uc18{?ZOErum?bG^p7qVeg*rwI-V8(g*yvJ-QNCXi#5?C;JwiR;%=Y4U{O!at
zd3s7nzbm=<8Fg96#h~SRCMMn<F3hH;Qflk(cM-KG+G$aWFX)Q&6~q!6WIhXu1v)0V
z^$e%z%e)mR_?O@B6GVx`2e|nC1o1-uYic3q*j$|cODAzz8>$!hblE8N!G?Sw30HBP
zzFYs3ibQ(pKY;~m2&FS2u^IHjfQ-&=)kq2*i$;abMB;m<kcgkV0Gg)6>ii<fL%^gG
zinHS^){E?c@G2YR*Z+n~x^M|3<4Vcfu`R4Ypj+inq%o{NwIs)#KZu5ft7p?&bWv-R
z4t%NaitInm$U}kaLYHqXlp9;tTsvRQa5uM?Bro4G7xj=<IpkgEgpeL}pkueO1KA&N
zd5%X0<Xu)AgYH#)5|a2ri3!J~;XYIXB`yl?C$X5<oXyMBF#jb8#qkAUDbqmf2pvPw
zz2u_PsVwXeLt3u*@s~b^kh}I!$L}`7cfJ1o6#TJ8i$Qw~mPJZo;;dRt%bTz-AWX<Y
zBnI;)mVKN>`@y`lCHyYB5B2`wj%)@5arz3_vA$Tp5m&Ss`k&ZWF<krk$x(YG=7;?2
zf3|3TO*ZN0{dqnrr<dRs#DBL-pZ-7EDBS00Z*JNeX#M{ge&>Tm!}K29T(SBF_)Qbv
z1t2K*y-z#<#Fyhvi|{_9SRNv3*TbvHxoZf(!vOCJ8-#uDO}$PCTyG=MVT|xhfM7-H
z1Cn$cM(U#=iZuNE5@82DWO)*s*<^gE$&u-c8?)jH6;PS<Ud%_CO*&dWH>3&4@}uzw
zZlCM{f@R!)?A#T!v6LBESUb9{DQIZD?xSsfq<{M>1NMD@E%4QW52Mqc$2~SYM_FUu
zTUNQGfLxL_Z57kVOkg-erpJW0&~WGTp47WRfTg5tkKT9Afkih2xTgXQOyKr&@@wPv
ziltb3HCvK<JRb*0R=$zfX(oJYz*R>8qb$Bs6ny;#E=d0UnKCsGkcYm}#g|p{dM(x5
zf9uG;a@WP=(-yIygz|>{masFbpW*gG`O_fTEQBTc^zS$d2T#==&br!9(PT^VTSsCm
z>0WoQ*mDc<#5|dRyu8u*_tgiJ7Z5W6+mhV3r=B*Ht+zIHyN4N($s6OQcF}w2*;4-8
zyS>om=1GPY{QsOh&(aJV!Q(3-5r(S@(?eL;v|nskE7g=ATi#PhpHXrlsj)RCyXw#D
z0Q8Zbro0t+8i*Bl=J-BZQ)f4-{c~8OZ%Jvc*yrsjWD|i#IJdn42&I;T@+R4!Woyj{
zawn1OhQCZzO<EK=B4Wb(e54p_!VxaMKBLgk8hLSUaoCNCA)Ha-sF!h0J*L!HWDSCY
zQD*{1c?|tpB3isTBA9s3P*X4oTX03}v5YU`o~zw4({&DSc<jisG4yFOLnu9kxkahY
z#zBot66DKwI78Qw^IK&?;{9gQ8k9@A1$1?UZvi`@ZK}J?o%iv%9&YKKmISDf>Rkvm
z1%zC$A@N%=DLUM^v@}Y-O_D^swm7YRwLw+#L&LwSQmZ>?>rAlfA4nDQYoRU;^anVq
z;uN78Ym%>hem-qThFu#GNq4RA`3g3{r26`bf_(dNT7mRN(k2i9bMVuyQVGw9p7RoT
zBb*s=fe0Iq=?pj+ItF4wBs)mjOl6*r3BP8SNe@Bv*ZGqiiqbf_Tgp@5MD5=oJG|A~
zHff&5s#_winfAZx^My2w+BlRG#NT*mkjj*=H8GfV$p1HhDToQstk?y2Kv}bug)m5B
zg4sB?*nSW5ZRlSx_yTuUyi&PA|IOsO9N$na$G&=rU`DaGz5KQQM`kKVZMT*z3~4a_
zhF<DBUQ*$wBW7Q*F~P#fIWx6jl(J`8;*HKhb+{L$yHOA166CWfO6=N`a-foA8gN2t
zAH;!uj<Q*42!e7((GDF1QTS7nFI+sD&f)s26=;lLNh8F70WCYFDYK5wNmABHcd#;b
z;Eu>ZH5*c5eW~)b5;4VWQE+HX8MOYaE;gLwELwJr6XMLz;y7r&;u?_ocP7!^t4EB?
z8&Qu^2myI^%Oi@okg+Bg=vRHEM!qanef#Zz)=*O1kATq#jT(JKf}xe{0DFsd?Z*rb
zidx@JHeJ6M#RRK`#_yh0e}I@%W{WsD5q!oOi82trgLa$r{Ls~Y-N(zL$9v1}5sk-5
z$SA`QXGvh>+6cyregBq+Ja4thLx5LiV>gckH1o|T;+3__FY^$$kfS?qAm)9v<L_E^
zMK)50Y=w1zCYO~)TKN0@U>UxepJu_|OCE^<kJk|qf;*RGXmQC&%wQOg18_hg$TkO7
znpksmSKFn@nX9pNv!Enx64ly;U1|*ByA+vF`e-F9)UIa*X(JC6BrcbEAM<_G+x2R$
zc8Y@>m_#WUuN}<yoTzF*7{oVLFrk5aDimaEe-&iAmuvm8yr=-FfCkfuzemeTP(IUH
zY)!7-F1dAD(AN@p1c+vtS4LQtjTmTH=_SPW#!9|icGlt`9HC5CXvLi`uY9?FpM~Tu
zWj1GO9jy(+0l~zW;k}HIXBH8F+J#5fLhIZK)JY4ytmN`k2<??-@Te;UDWadx!Wb%9
zsrdL&;p<Rjv&iS3P<0~0MxrT1UK%S~#Et>nRncYid?y*j1!O2tQ);=qvssevsU)IY
z?I#d!Owp0udKW|nTVP>kIje>Pu&yQK`_&`WrVCAYkzd+#4}ph26pz6}T5R9jnXzaP
zQ({3IuOWmS2>moyACVX*>8E~bX#~P`BVX9Kwg<iJF#p}v$eO2J+-&uIh52VwK<4AI
z*t3mt=m?Q~49nvJlC6~I<zvG9rpeu2yQOk1%pW{c4++SRA*6hBy{0iDm$na;UwHLc
zD4PBcsSO03Q+fez^^8nk0}cnI$wVt3))K^MKOo^lB5AQRr(-RP<-4_-*j^5)l78n`
zT*&!)ek+XjbK>qx6UZ*l@nEwqq4)x*1&=)^6UefXGtK1aX*a<tk=ueMFzmG0Ccgbp
zrH{oD8|4tIY%cx2Q1vC-5=+6NnbzKTDruBAkV9pa(nP&<BC4x7$3ev0c|JeBt=nz*
zPCtzDw_Q#Ey1G7#3)T&Monwq@z7IrK<GT7c6uq+5^G25vw>N06r<Cxdi|>*|o-!*l
zD`$~>7z>0rKlciaj%fBWTr*setVpk}0gWVFth1ESl}qI;+J`byQ-F)eVFc`d?o4NY
zV5g&iC8hWO3{#a9@FiI0BiL+BHUA^UC&|{1+t{iCAo&R-VDCer8gDH*h^+#{^b~u@
z4#}Qzik>s1q5b$LeGcW0i-^qzLZ|-T?YMe}N}h{Ffk+Vo`SBeKf~4iIA^es|Qr#=7
zGfOYOjDCyOCgV%}CjxPMvvteImyNzqARgt=+(&PkVYXGvfbXy$^2RLqh4JbRUf(cZ
zF16N$P97Td2l-mNiavS^F+orkssdFq?gJ#p;(drIqZ=gO6g3_y9xNfSrcN-B;LNad
zH4h^c8st>Rk8^a__$$zz(y<v}Mgv{ZN$3n-K=%B+)wmjgCQZ}_E?F2K9`E4ZiJV@5
z@;0D59{$`?D={3rg<tF|sc|Y-VYaJ9#Hde~d~ND<W)KZfs&&S73~)#GjkTCqr%hF(
z2q+|*<qY=!z98JT!dVkK?pfc9gdb~2_mRBoOkfP3UySD)X;5AoYqoahC;)9loGrh}
z_rSkITXh2#o-9Shh@s%Ct9V+EKGm$?8F$#^zF=_@s)D5MWjnoXtlspbSdgg@k?c@7
zafWB*dzmvq2@8n72r>hkti`08N@95luB{O?ZfPdhv(y~sdX?E{-8o?GvK`q6YxtYl
z@nfuzd1crFDDpIo5iuW2U(>qyTv=Rgu{$S~ceLzGxTpA8Sf&$fbl)^87n8_NFUT{)
z=0t(WW>fg_<Goe{NTu87=+{o7gG2OYK!AqkfB&BLs&|-nZDN+K-K`UiO_<TT3Z#Me
ztW8F)|DGd~`sUrrvG$W5W|9Z`wBaLJ&(>48dj$QBoTV|Z#tZg$H}VJpA)Voms>53i
zPa$#=K!yhIML&JFH$a*3X{OnF(4=Zw<VocL`NhOg!{(RE7w{}7y}L!oy9RZPRn>Ym
z7{b!s{nxjDl>s4CE9V-Jpxw?{590wyKAqWs`%%d&Gph<5V6Tvzt~+;FdCPg;JZuEO
z7YdR^N^0s{ZahJkx?C2~ABl>H08xT9wWh>033PMdxh@QFRSCwn$Fj;W1&<5kF4`3t
zRV-Plj%ywqcDgecIf0Kn4<6zRRL|-D(eL?@!rUs?gSF<tusl$%6VY!6YKhRRyAIjW
zxnOD~=&yS_Afaj>B{4M~Gtg80nm}~x<0L6Ysfj7^jb#H$a!H_$k&oP;H!VP~nnNZe
z6YRI_;(CA%&!bRb!(+w>RiJ-^5T4}<)~2I?>P6tDy40P~x!UxMzYSUFVeA`Hobjo%
zwSl)dTfGv!il)dLNb)HhCIE|0?%8Uxf`saC2m|$Qu9VQ3Y&!tAEIX!S(1e!W<LC;;
zexu!9h|#?PDK488I#^UwMaU(E|24yI2AsZOIes!*z2Jwbu{R_U>4h(cBc%BXp*XWY
zzl@zM2zC5UY7TQqZ)_OACLad~45)bmBMQ_|jz<hEo3{vqIwhvUs=g1^)5Vcy3T5!p
zl!3)5m63&5Ie3OQ@p2{qO)K*yE}mmS4OISW&1pE_8bAzrB~>{&%0{R1!Xr;vxV8Gk
zQB8x*)|hYe`EQ{Fx=#71b}I_~Mb5UUoU0S9o=!7E?hBXMziL9IKVMcw5TVxN1uV!}
zvG|-k^43;25Ds-0eVOVDM64@G=31C~0|lb<4dC}#|6!1&5|jM%7PNDn$~U1KCDOW1
z^mt{z`4Zbk7&L#|!DMCoOhdjJVu~yRq0OnEi2g7#O3N-EdD-VE-;J~+Z%|eUhgS2D
zP2>TmJv!lC5a3Ck;v5II`lJNG|Di*yGgx5zxU~|T`s>Zv{{wpIARV=rvr*+h3I*jp
zEm**FL;c@o!Rx#&;n-ffq91UY_Q$ZI6$gmytja)#3m|pz^}whRqCMV)s6&C@`xfiS
z>R8aWUv35GRZ~#-{uN+w13FSC9;MMa)3!Ei1m>0oEP(pRdR`Z4TxYmk>_?WxpC1)n
z(@I#Buh!~X!tu%<_Sjc6(jYVDkZB6Yyf{{FQXuqRzvC2j+6|R!iqD#!<RXu5l7}^V
zV2d(lMU>yG=h#hyKMGc@&39SwkU6l34oUv`vWF$A%>EZur*>@v4D<nP9ZZeO6z0P<
z&K0ed71#u*p1lYQTxxfpleTE8HP7qj_e?^Ad&kdq`sQXznn#Oqkj*?v^dY9?2MA9L
ztGZb$6FFo7LttLx!MPA`jQNgE2Y_sSU1`9H-px3&#a8kLcNRgvw(FrrIu9SzQ!?>5
zzi1VKeell^L6|v*WlI4E3}40FTv#)o&$=v{4U~vP&KCC&SS+&OHrqFK4A7En9H*1X
z-uj=i!IwL6E3X8RUWuFdcZ<#_T8&JbMunpD-J}Iss7@%1ak72k^me!A-~>tgn&zPs
z_r!m0LLvF=HIhUX?m+vHdFTWA8VE%RVlmCaC1?3;N|yJZWi-}EE3BQfVv@X1`l%r;
zv1C!B)FhX6M`qY{2I6?gg%LjlGhRxG;Arnyc3Hc2*;0dabd$aWw3T|gku1^dC;5vV
zdRym#MB|P<M(l^V>vTdHT$fVcp8v9_I?QXcZPb$jkCyL}HXk#P4HDJ12S!DFZ5;Zp
zfPx4csGp-|=?*XcF8vH{6Z(|$exj$R@N#3vL5{7vRK8h(2;>(HZ*@Ze=$QHAeFNnk
zepMY=bffBh9WUuVKFCH!?$Q4>aSU@S2iZBZ92ZvBj+{<Gf~MF_+7feW()7o{3n&*L
zx~D(N%tM(WPXnuWaf=Ii^d`U7LnOX*HEMjyr6BJftOY00xOc=G)jw(#dW#hF0EA>%
z`ta&t)YOd>);pda1-`(;tR?$VnsGts=Q~6t8QtkoSpntbwFN~Pr|9TuS+|NAOK*Wj
zhyxe})2V4``#gIVasA_G9eV^Uj$q}J7eoR!XIb+JZuW*=r0}nBR88JnTVR4+MO%{`
z7wpX9!Yum#(78&zdNaD^{`Z9`nmUU&va-oSva*s7P+anD3YW9Wyf*s>LQ4RB=naAD
zz7k^iEX89gnB$HcDA+gs!?$R9^|e$Ueq^w|A6)#0f(NQDgsVSo7JYu9$~PYO9Gb^U
zk79FHwXPa6dPPC|d4>=e<k>3;!BtQ1Ux~Ke2`>5}dtk9yi55b4gYxW~0OEIgA}Vea
zr&@<i4t>s;wG;0k3m^gFk{7r*&uuVM!Fw8j6c|i%lVcX5SEgV7l15vP#G$lSQdKu#
z1cygEzY^FTAJZqaoXf;w=S`-H4P3K>Imu}CwR<W+1R(fAMO5VWn2e+zNA&t1<yiio
zyeDsj_&fGKr{x}vAO#6kCvBTQxOCQnCUP5q6}KR=K!^k#qr!jb4j~-=M9Cm@6hTc8
zRrL~~?ZsGDTO8QR_4}D+Q;o_n@X3SvBV855A76=nPV`R(bo@*X-8~@?hwSz=L=XI9
znbCJbjQ{3BrPQG5{Im3A{jA_Rhv@x+Ao^X84-in=Zx#*pc6E9FPxG&xFNOr>SFu_4
zQdx=R<M-gc5Z<8_=Wa|zYZ5tPUC5U4bn)%%s~WUj7*-4WCtgOQ_4uKOfo&KeUQ!{=
zk7+8Rm=bA*<K<E6RZu4miu5)Z(5yqv((<_}Q1@?L@awkWx$)2j9arX#=V8Em08cD<
zFe5)Cd)xF{h6{nHs>Yr{UWn*TqHEH24v%4xJl0H~@JYoAUEO6`)G4`NW=sU6=Uwhm
zSCs0zyLe$7|Kd$|DJwQUBTlG%^vk*FODxY-A{==Kzp%1VK=^KLJCx=*{sDkn%UR)$
z#hGQA>scddmx?>e0RKM#z(3G=A{3Q<x9{bzRL(o*DR>kDVHR(Z*Q$JICQ8&$MI^8<
z$y+RI>>}GZmM$drPCIm#d$-J4<<S58>*P%NW7uD2KeoY3h|G!}3Za5|l?^%)L>?#w
zR_}GYROpGVtSGEJ3ieGj$&(sjb|ldtkR|(#NzTWc1&>i%;D)W^t@(~MMFQ#^*xorm
zDiX7`-^WC#HCEqgcivL|4w;J~CN6s0pnmw29bf}X4s?p_Lqvyb;Uz00Ci=2y_UopF
zcPn0V0+pLWi2n1mbx1X)H5%sw<F8FyJh&+f85elzY9|~AfvXw#Yx+TYjdvH6kDj;q
ztD5K==c4dxewphFt5YkJq-Dk>rr>Sg+X*)cFGvRqiBIAn(Rra97hDV387-CY03l##
z%gmtB`I3X_5s~y+Oe{o4@3%lZELHqJG=5OS2S#8$C6v!Zr+YN2bu!a(%bg-~#G0_V
zF}aKI7>dXY^K(Sa=#0HBeK&-s)e|vSU2W37#xxw;j-S$UL~4)NHAlU}H~w|qdyQJR
zDVi`MS9dhR7sXHxL_R%qPJv=w=#_)x{abZ2qTLO#p~Fvpk~4@DZ?MqbW&KDn!C?29
z_-vx<iIk@%^JR+f2TPGPO=?-KWmxd1-osh%A%or1dnP-0rC!fu#3pye$4Y)(0SXL<
zRC=2dXj;CkVPXw0GtL&O)xY9&k&uD$SMo}rNk&C-U*>i~!c9mkg+h@*|DnL9Da<W%
z@Xn8qOCe7Jw-*+W_!~e=FhtXVwl<JqG+yQ|jG8q@<uMF*#*Wkd8EAwe7LsQ2)-@6-
zw7spW4el(bj!e=@Ld0f^cA38={X)Wwv!WZ#MtELFZFeSMi+9XOX~_QZ<f3Mv%+%8c
zzgR{9qFIpg=yO^j>P&CIG3tcQvB>0~Z|TZ`O(2c5w~XHQT3>^#V!8xF>6sg1ekO6l
z<Bv>b%_&_{Sdi1KT1dkN>8$p;l;Ot)5f1JOjh_cD*HXLUy+)0bC;V=wEX$zy);2#V
z(lR!0`X@rgtnxHrf{=D+hsKj$Vpp0GB;h!<EcZIMoCf1$SWb8e3#8XOhaTZx(Ce5z
zp3Oq!+jR(j)2QmM)cLfJ?#FsUA_dc{zcl_11`Cu0X)o@70)NF({uw!m_~xyL*^<Nx
zf4)RS8u0!i?tKT;b8E{%0T^&%gK9r34+jXp(egcA;ML~(dIN=T+9}X*t>-GU1h}x@
z;{}CPf#?MYEm|;`qPSvWv`LcNr{@RoYY%qEtRmNPvl(x7jKniN)Fvq`B={bLl$871
zreUUddzk;bXZ6;kGf&t*JK&|2-d1ei+XFwAaN52GeX<JV;Us^<lV6k}IUo^1M?LRn
zXWAfOX{#crek~hyV+>t;d^pH(q(O8m6dwD-Hx^i7@2uzLeF#t<)n*WRQ!f`2;_suT
zI>*1j>ZR@tTUSL9D3QU;?`MGjfHYt_t<4Y2z45aLquSDr@F0~B?>3qnUtCNxvv)?l
zYGjqIWJE@f6xUb|hP(%o%9l|@nvZkPVDL+Yva}-1_Z9Ylp_#ux*>nVBJnQ3Fd%saW
z2>73ndXxAQj+Gen=iM2rZjQz#-3}Tuo<%GgHX~?w&w$`2-{-qRic~~r7LN&0ykdIQ
zi88S$Pg+H|_4|eA`onOfiHv}Wv6*(e(pFJ20zX${`4LtGaWE3k-Q{XFgs`UrMV#k=
zn7vJf=3&LmWl;|kXjz@zSl=-A+GRARm0qdZcB;ywgiFPW?_L|v*M!}jL@=#eS)Wpz
z6>T86WJD0(60^eQsoED(+k1?&C^a$7oAvd)n(T^|-k08pcK0%`z&jAv`Yp(M@RC2l
zmOvPyLb4zluboK=q4NF;S+uj6F;c*`V=uBR`4z3<AYBn?h|H&@1XRV1yDPyEbjhwR
zHN`}g8P!)^3XnyET(U#9q;0Mf$16I1>`ee*V?eb`sE_!I@)l+;ssY-*X-0Y^!PfVS
zQNFH#1>(wDYEDF5{jM_nt5M<ME)X={OC-s41#ibKcy8!(gG7^hOIFsq-PA*CKy1>4
z_WJ2Ti{q)!>UK-%<OW?RkBBz=QqJS3WfXIWtyrEGD-qo`Nfm~JOf}XG&lf35b6kVK
zt05nCC&k1z@jZov&bH-J%782J8%{SlEvlqVD|LS0GR+%mHFuvf9Pf06An*XXff}}V
zrN&o}34?#lPz7p0rFeF=7OTGyjP8+C>SXj`z0nnF{^e{R9ReJhhl_*hm0d>(vi2&1
zLq7k5%YZ3$UKK#{%aPZ%OuO(5?>_6R`j_xWGJNkOk4U73By=M=>(?Xu+xc+-o}$qI
zpLsORiMoF>;Ll{g4^4*L-@_Yojq9vbGdU@lkn}8rL2J5_cul}_k#(rx=ozs`i#xdh
zUt5ACh@C-Uyu{~1y)jqlm!u0Rajm;dt-0w-rdbEw#*6p8<&^{-=tC~jSA|$z>EI(x
zTb%8kYfqyDe;K`QQ;hu@kb8l(S)gTK1k%TL$Pd+&r56tq3eXWZk(RICdagatOoIjf
zrz{YV+X<MZrT1|BN+4S!4q$Etw8Mi#4_N4FyJY*F`)p^@=nw<0M}i2C_Qr9Fc`b+(
z1$R*gm16y;3cmn-8;u61(p>l#dc5!T0Y_wE4o=y_AE3R&^P!|h{*K>eOY`dxp!uWO
zXj*o48_0Fk*Oz9Y#*PcU<~@$|Fv-khrJ)^5-vJ~Is^cJth4PQ0*XFrEz1f}<!lN)L
zFG;ezw8<Uk9_GuSJ&C@D+jz+#Y)0y>WD2;iI{z2;Xk;>7AD;_W>QtKi74Le7<lAK#
zm(f+i1&cn#(*E2ANlu|F@>s};tncCj)A4cSHQC+7r`~EF6ubvs=T6u=mlONA*o;*y
zJMe?ZK>f3`tPV+S{71~5ve`d^tY|O4Lna0M?kV$GR@aP9`u|HR-vPxWf&M52+J9YX
zGTyH83dST*Th=?#@g|L2o^z%2&rTI{mY{#Xd*vr2F;Dx8pDQb{o7yu@&Y+HwuYc}{
ztm22QumMm<R#sS1oN_7kt@@Hq-Moz6$FJv$#dUj16}s>5<l4|y(8TW(ML+|rf+eBP
z6FO`}9$z>*U;qHAkW8pha~RlV&zK+))lmrBaG8ydt$_ud{G9c}AHM)HX)wn}z}*I+
z`||_vPqauQ$P*HAoQ_&w3s_T%b(Rg7gC4oSUuKsDjpIjuna7Ey?vF@h`H8H)A=x{+
ze>9uEc#hDmQ;;`BsGMr-8^fJGky$#!?4+kzs7_+W{w;?kSuprFvMfMW)>Woq80in>
z!ph+ZZ4n+GYa*Vt7We5v6hB2Ev6G=dxpGkS=}Pk46D^=J!1o82+Co{Uja+dd2$Rhq
zFtRr%;0>;&rEco{E-n~3b)XsQM{ToU1lw60CF|DF34R-DZ;8Uap*7I{A+T*VcyGai
zvtRv?1xQLG6uCb)fMA{WGk~KEEC`&gvpE-HURm;BQGf&8OeSRp7t3J1R$y?f7Wc;J
zNlH4$EguK&`7*K84_GYI*%%VSh11-*{0FO^e<FCg<HeWLMxO1JA+w*k>8zk0_|Q24
z<fJ=#cS@turys608F$)wJLDlm3iw?}4N?8c2r~`g*?;m6wlLJan6jVW<(ZFS8$C|e
z0G-3i%o&<NyT673PHJmpy^>T;@BDF+<CHOWevqr{L({APv5v6sC#I)d-4~7Vv6Ilv
zs8{iNbt56s><sfx?QNWJ9}4eCj2<~2gfFqZFv{P1G01WsC`ptpPwI`w_ijUf$nd(1
z&n3&zg&_G2J;P+MUa%kSA%tmvo@FH@Q^?qp1K-rMbRSMWEhbF~8p3RAlU<F@bac**
z(~mu!hyla3xVWj|gE$3b$RQnG&*ioWalb-E)d%BaA}?Sx<W_sven?wGmA;q1NFv%|
zA_Y<JO^*M*(UQD?z9Wv<-oC#G`_&b9Tj5)s+fbKp{=(Iv6|oMstiE7`_9nUp%<cra
zT%1Sx3X0l?OQayxFmp@}KDCG#a-wzDpUi$nNh7iY7hPyRc*MmC=&UL&gvK~g9IN;J
zHucV|Vzm^ZwohObo5VkCCU!?kx!wtnD(e4A+!zJp*XoRH!&~A%r;7T;ozRaV#i)40
zU5@6FH>z~@%Xe<no1IV&>U@q`9xxJBW+Ew$*qr-Wr<Qp!K}oUpb={S?Urj<{X;H*B
zF8d(hl?Aft`$Z36^24=D2Y_jm!S&FTCTpB7L&bnxTo0QVIpC;RgWMX0A+6VCFid%i
zduVU9pSKMKl9ueno~^gvB!b|jqI*SG0?eA_AVjb#US~Z>^Gdfm3#c<kWr;v}k@b@V
zMtrL5Rj#gjF_u}=*Q**aKm7`YdwH$_eN7GyMpL{HHt6Fo=0p<s3XN(GdEJ1$#K;Ob
z5^5=#NPpY*gCH><+tMqjOA8rm_8KIqrXqJi*4(M_cc-Xi2*<3CAtBB4#zD||GLTl0
zA+>NUe_B+W5szMo1gMzQ7<lC)p;r?ae*n^1!BR%t5^wx?$AFqa=TC40zvXq->`2y!
zbc~YLXDO=m9XMYzTZKo~#Be&QcZEDT2uzf_7E~Q$!b9ieik;q!*eO!B;|TCg$T0S#
zSQU7Frvdy76DAK*zqVU?<)dlrYgNtvsz4{ti+H~NUD=v!@*APaR|rne*`kIR;ytyZ
zx?$I{4WUHi+vPtQb~*XJJIg&F;!<%nV1I*tkLFquzggD-Mzo3!a^B%Ersuj@5~tPy
zoW|<()Tti5CmGG@scsu!bY#z&+N~9*W_#z{<A~6uu;+Z6@*Uv^A<cJ{hw@#@T7MUV
zplH{oX4-es<V}-%??8N)2R1FjDfI-TtWSTPdTl{yHFN54eMvk}zw8Ny1{Ou$*n$W>
zPxe@E!S+bOnX%>UQw#e?3LesUubSDb+xC*OA5yu?fOX2Rh>LR!MdOGXj{5UWT+Rqf
z3fC!lx5R&n;DbL32PV*j3L&t$r)z!!-LvI0c{jOYrE5(72ul4Xsi!rWhlL=nTGk#L
zk7V#!k_K<Gjg~nLU#@V34QaQS#Cc{XZ-K$~u0Y=2m^|OqVLs+b!P+@PkdUyYI-LC$
zo$$6@I#i6?rO699ObJ3oKr`wuQX_J!4L%)Eh43|y-uQazv|N{q6G7*mG=dJ_UWEYX
z6i_xTx?FBUyvJ280fE+U)pKNSwPuOk(kf;2T16l^D}fA0cs3XeIqeI5%4&RSnfPd^
z(RYDiH-Ew>ZhrxBci=dVSR_SQxKj~sH2$%5MfSA-EuHA>Y$FMzH?os0doyDm<jUnc
z&L}2tiR~9_5xd;OWWAtdGY9j^;O<AJWd77-*jb5~`yFX%j(8#$Jx_Z0=ldPK<Qfsq
z94KeAIlp*m*IgA=%pE++YP-Pa)TPW#2|rgI93RiCCp(8F_~X$f4W4Gf!<>Ns!Q*Jt
z!tBpUs-&1mk}E|`teQD=mTauuv(a(=`{k`^6rnu79ed+*#m815%S*c?769PM%y**{
zt|ra@hB5akL!;e<pdU9c1p#}<uFj1;y<eL2-4oY}V<}|?Z~@FpJ|}O#S-f}Iq%VKH
zsgqJ=J))N?cH2VArQJub(rnkJ^nHG`*pz=5+jcphv)#a`SE}YA?l7V|6P<J{ytQCb
zASR}ZAb;h#VlRf9B*O-a7OqpoKEw!npz#*?nVJj~zb<&>y>U<(B%`xCCDB}~3gr}(
zbT)m`fb3H36MqIPJnyir4FeE8O;Yd0K{$8Pk5^$ppO)pjbsrEP0o(JW0&m!drR-83
zk!9pNK~2(knxUO;pMt3lZ-xJOU|EGV1q`XCgO0pXZpFu;ObFX)ozecjT{1L?ZgJL2
zu!0(Zi90oFhKBzyd3hf)Zi^Btshz?}nWy$}p1Z|&h43``JLKK<5?mOVhIMTlzBZft
zfIWp)NeV`sP>PU*ap~Mzp&X+3qNg%C?ZnksMQyuZkvsq-C;qntO~<YFaIKk(9kf?9
zOnp6dd5E-go;}KL!aTlCar=oU02oK~z>W;NXz!K^vJCnT*i0V@{J(Lbp~Cv+j>f0Q
znngiCJ`m4^zjKH+tI4U+)g`4}Bbs|G9z6+h1*hZ55Z{{8##(~oVG_D%FAZKC?-_8X
z%D$XU0Z#FsCC}qpM)ArAqZMeHvv%m0IA?ku<oPDkY7D|@dPDWdo?tUfzfj0rhT=^R
zE-i9X@imb}<q={02BXTuq+kA{OgjtDEa)6zLd+u%VGnSe0m&cUH_{<1@5KAk;n7ob
zI?;v+bgLaVav_O=LDT(6q8l8*BTw^RH?qt-%7`E}(QGod?T#iG2=A%$7@ZwXrn2_b
zo1qC>9Ti~I4j3d86^ls@MD`;<3z4(PjgvwSx9K~<qm2DiEJv@bPKdB(xv4cvM;1?8
z)}0|NVtc5Qu4}j7p&^$V*zH^6h%M-bu2Aw?aD`NopGDtt4-U^{2W|y+u^@T}_R^yN
zOo!O`;tnNWYAW`NZr1B@&C1MM<T`FiRFl}gzO-?&QxPfUbEydNwOefhBOAGdK+;r~
zEl5?k!!IFjJI=RL-jZcIMjA@!+`w01ZIv7$3QxTfYc*l340MIUi|gOwu@7yOPs!uL
zNaD_dZs?rYu}FALoSaBu1YQwBOWcC`I**IYB~W|y+as}x4KkXtu-_WSOljfx`?hzs
z`J9Q#gq)LI=Je2PF#MaMWC5S7(|gL36PR*UefRZig=g_YJfm@xsy#ZjHh^Pg*8Qxe
zP2Bhz`=Eq9@lW<MxoY3gk@s7Ml%&iSHY2!7xQ{fUq{l?XToxi;O~Q@UZg~x~88g8b
z%#eb;i35~}FOA8TtvLY|_+(C4g=d&OC04$zOSleX5k+xc^VA)KG<|esYklA(dCo@{
zBuc+1-8iz^Et-9%um3{lVxIQ!&k|$3r18z}1xAY|xZ|vKmY)QktkscZa|RDHD{{`|
z=Qq0?Kmme27=}QLVa|LhU|_<zB7`e;2v<;{bpLwSe!ndtqF~c6JgYdng;OG?*@r%h
zN(Rs|+c)~HE$h5k3R}VaG0$@Q$mZJH*6(hf#NJo)YZQs1P>;1Y&KPT7^+xfTrNa6H
zYCHuRC-=A{@iFRZM&GkDm7e$>d)FR`N|oGT_KCNw4ex2EZU1&?Qa-!npVZyTma*5J
z{rq#o`R4(#`d@2wJf7WgWgKDPgQ3TysNO(z=ktEhUP3yGTjb`SI^;R}D<k0R_H#w-
zbRkY48aINRKdymHBJ^|bXPb6l<8X?D4L=y%%Qk5LFIFpaUlBY}EFw&{vx?OM^v2SQ
z^Bu5T4Foi}Z=a*&<2X(#aYw{>3bW88aYs_|XBA_GexEf=G#bs)!au2WX%wzKTa8z~
zOdh|v189q<r}WDX6LqFBWKJQNx5&YAn9^3}!XA4yY>Phhfg9sn*1sDNt2HZ3i<&!l
zT;xx<Xcz(CGw0-$NTz0~;BNvbj*^>ZOXxI7TrulaS!NC$HeFHyj^g{w$g@r9T?R0r
zpo3!9H};n^O$$AIMUOfuG((maneve|(Xloi?gF@Aeyu{pKIBSZB~N?w>@tGPUDv%4
zk{%Y`a$Bnnx)#ru0V$)&9p>EgKjqhOa<H8*?_AQke)~^7g0%drZg!ffsYNG9M=8r%
zH6+*QO`j;hY`?gPXwLJPWz%BXx$So!rK5X(wSmcB#xb2Ih^GiRb#cz}k3_Ng5<cU{
zLewoW1ll0li#Z~-ESP}q+<p4YxXJ{@u=2{7^<~kn+N}>5)g?m9tc(==BNZL`5LDw)
z)319AFA-RrGG54}yCuI`T|&QfvyM$(Mot$`h;~`f%)WgtYl#pTM^G}8?jVFZ)qqVR
zPh2xRy>p&2BwD(EN?PK188m&fJT#N<82R|?koWQ5$9;b>P4l_D(&y|UNF9_Vk=RS@
z{Hn*v)XGVy$WVCf;@R+@9Yu{!8>!9`RX)z$4T`dH3TRH1F_Fztq+tS=*tZhTdL*6}
zIWl<94S@s#{Yu7Tv|hw`q6|th^IUfC|1h9odxhLuDD_}T73wk(HuNzCrA+nje^T=&
zK|8XD$TzfKl&aDWjY#sv5Jt4g_MCeur&POu<2g|EXE2Q(YA24<-5$2wQ5j|H;;Ka4
z#bFK5I_VXlYdc>^tLO`n2ZYIK8DGtySuTO3>QRTca(&&%*N_M_Z)Gk`y(aI*vQil;
zx+?F&4eu}$JN*y~U)Eb9%`>a0Bpx@=k@%T}6q#h$C`uiw4|+=aG5IJxA1MudPreQt
z@$V?wDJYV@$Hu$@pi!4dkj!eNUN!w@i}U0;&*-LL2(Wng)Zb(55AW*ZkbrTF&x!_n
z-8Sn9lth`xcW)9YfOX1l7zmx^-OtQIN-M)vxN=7QcG}bN3KJQpyVSkt<QWSsdVz0V
zG{H$gbm>BhXS|v5Z*Jj|;hF!Ql!a1Vg)^ug=$7Dyf;kI8DF5ogZ{*fTU-qgdk}Af#
zh`s)L@D?qds+{lZ)AJj?2b^Si6T99U$&Q0w6cQn1ZV)l7XQ1yuK|lZrWeh|Jb(c`m
zy);TG=gTV6zjZ7@^{W!EW9@l&?y3`z@Qh{UfaFkZ+PLy%?3<C^i;t1zp3~_*x7M_s
zxtOX&^GBY6fo(Eni##*OCA%@oKnO;%6KKO0TSiTS_;pU_r;Ld1R1(IrexY^F^SY-A
z+bx{K=c#*)A|ZOPN+V(Pp$yi0e%D!KrJCmlA}L!fl5t?n;fK*kRF)z%t<2vkBS&@7
z)tw($RWid;eNANz1xk#SMwCWP3rqZiR<Mkw0^A5}{L1M|&7=-$OU`tjbDe2$NV|r2
zKqN%+*x(DA`w}s+=PX=rw8iPHi?PL#LY11U;uVW~EixPL&e6RTmXFA!+8z%v`IK-y
z^9D$FbzqS%0-?K%M@Ps`kEs4gtcNcPxc-xHJcmlr4ECeWUFUHwJhD-7iFBj5(|H9`
zt+MD<6yVQZ*u}g>;ODV9m0-~62d(K$32S%yeHb!St9U1ZsqIX|xx`%2XXS`iIgtqn
zo<}yU`f8-sbsI`puuOOl?96+meLCHY*Kg8{RY!I{dG$yULnBDhdain#NE@Z`9n5?-
zI3wER7eBl0=*xPnDvFt|AQhjOzI)3=WV5cr;EFbCA@9mP@p^AHKuY=U)afuhFf?h;
zv&Y?8Ll~pol*voa%AM|5psq;sHmws0PEs?Z*}|}R>v@>o>|g;j%O23NJuApDNl4sD
zcIP!t_|2JDgp?Bv(%up!oM?QlrDoFeN~>s?vG#F=bXaoT!ou0IN5bOSRl&&kD<5k|
zsX3bp*$8Wf?C~}x2%}az(4?D<chsGMeEu_GAgF!R`%*13!{vC!fyND8b~8exX?jcq
zry&^37cR9J5>4HH*~UqTF(4Vm*VAO^E|On7@D`-L%?v*Q^CrjxN%IzufH8qT7_n^C
zYSqMzL!}><&lJn=%LmnLg`kt3AxV?qP6JSljU$F~0)E%-P*Qn88xW~0CvsclyB)j&
zpVblC!Y&g4D#PQ2J=*MS6?i&4*m|}<KS2XXkq;6Vq``-PmcEbpg*&W~2UV@Hyt<W+
z(JE}7@d>HhoZ}b(?}1OV!H`OpjzMp;z-v&KJK0doXx+b+qr3CTL=;);9-_*kmx;PU
z`wGGucX2B;*6y@l?&R9)c{_b{KpEpHW}a3+00%{kqc1H>X4ts%bbi?qv(3oC1tkRQ
zMHH>>yo@#NPUA>F$!UBEW2Q(g&3o&LvkhGwY!oet3v(z{PO|;W;Q$CdYtZW|POG(3
z^L?9!FtJLO;TfqGpxam#;Y?9z`7Y3Oy&8TR^<X&l_FD=bC~hmp&$+N7Yj;@{A^KHq
zZr?2yqfIc8*E`P~4pp8%<1trboCKEdMl-c<8`QwO5jp!(Q2EUGTTN*Y!0q0M2S5za
z$X{k+=bPJ`ylApHP)35Mk}nOM)85$X`Qla-Ql(aS{X{O7ZAoqHqPxL9o@Lrv|A+W(
zyYyfP;d4&!!a?qu0!*UKKbkE;qIIE`oKH?YL2MO{sb>p$hXGFu-=Um48gB(Y^=#9R
zs-d8!s+Q_oCr=jeLr7A`@?~*LW?%1KB<4?X9Pos`G+RCu>*2L6Xos&_ioEia<vTAQ
z(dHrmih%?)BOG6)xU3$*Ed6ds6jI!5yAs12m+<4-dIPR!CvY6BY~b)S%xYKfPM-7U
zWmR&ILTuE?laP=N$%P}5-i7cC3Arez7JWO18?sU#!8yOB?B(UyGQ>Lh1cg?{65(r>
z>=|ob6R#R3PTv-=F5*#Z`6&HRtIi6xRBPOk)b5`Ng#--L+gFeN5xbrbhWs^)`>bwo
zvCQtL!Q%CzyuQxS08MX!dsOnfoVUL&+WSbW@^?Dlldw7a$i9J5PRqwIL>|>fH``2e
zfSV^jJC8eK9985oTMFYiw=17CIe8x5z29dht?r7k!jr1#;wuHAMp*Bt$V4ewMNU6E
zN7lza>?=~vP{p|m&Ft$_V?QZ#k4BsrZ%eMVKjO|ZDLx-T-2f8Z-3?!dME>PE8tH5N
z)Xv*Ml+)G`Ts%d>zh^G1!j87D#j%)McOpoOkO#7ujUS(*(d154erc!FUVmR@jFS_>
zIY@Eb&<nYv&^hI7I*k>viv3br9QqydLaB2MRZM`&bK=l-XBdQ3^;L8n!$wQ3VNf)=
zoFz8Ks>lG_pPVWLh3jyFq*<w?++nGVW9$^#J>?CyEi<|Jjv_`R+gX!QK42N!@qG;$
z)A9!0W9Y|kq+)pDEGWD3<)Z)VeM>oQ=dLgkzZF{l$gFEOp1yZ1|G(BqPo!Tm@Ssy{
z_AZ&nH+6Mm?~7xsHdgJ8ksD9z^h=))Ie(cV#sKr}j_qA8S9wG*n@<nDzr}WVRS4Kk
zHafklIK-|_<>RwRK|1Op&?<cO9jEYj{x4Bwlo$QoguSbOYO}*We)W1GqQ(H860XA*
z(MXu+nc}vVvuyWSLBH@;Q<a5VAPl2=n59HpBTTP<<9lV^Z$gQU^lUTi_csGh>h=x(
zA5n0P2^$5KEm0Oy#R>;?eJZ3}apisb6)I~M({0tRcCr5lX}HCgnEImZ0x=G6t6uE?
zpM>2gZP`>X!I+#x8x1ZZ4T(dA<+gR=pvx6XkmT$xv$z0ECzM-U)Y%)DDNW9Z?sv@G
zGf5wsPB#)>)W_lhn-TEwUjr-aUIb_wPqYfy^yLLCk#ct7v3#3BLuB>+f|*b&l+yR%
zC7=s$XQ*m7o-UQ1Q<m!*Dwp$BVn~Vejav_qzcX*x6$@ETXX`yj(?O^>_NIlJx6OrZ
zsWn@(Rpg<`1BcNOv2U&k%qWes1Rm>gC}iG%-86`vJKxE6CyDU62VqwUlG2%Xb4^D~
zmJo3(GcPtVh9wLYY6Q1Gx@sO3V_0|a!c!IM^ERt;KHS-RITr$h2;iCV_3jmf@`S!n
zqH~HKJ1x)?DKO-Ldv1ML(-<iNu%iyE?(~_{@mFZ$ly>h*v)#1&fbs!xRTgXNVia1p
zZj532j%4a`zM42QYe)p9aQoanN0#EkK3|MIeaCV8;OJ_{IJvK*!@7mu7P@}2GV(|`
zZR@|q#$>&Q2BX%R5bS~Ox49qO`|Dg+jki*gCWoFC9ve0$TMcOXaZSq(U+KT943OxS
zx%3Xwc;G)on=d~p@|BeKXlowYy^O)l;fyrnA>MuNKn2IWPN_sm@VPre1L?;_iEBdB
zAu*x)Sl=`zbehp~i^>5enk<}i;NX;&1~HMU1~SlIiD^EOIAUACW3%fD)4Z{S6kkr;
z-SXmCicNul?z4)B2SroNqt2NP){F^;x=aVT+Fff^geJh9BUGq=6sTY(pC%4#c-Hqr
zrjZy349M~IHv`~0tJozd)azJa8AZLL;Tk(mjob_!S8*ITlDoWdBl&Fp;)J)S#`RsL
zvTVq=;mDQ!5z5)tRbuilwH)f-MSDlLxD7uGdizw%{Y6F&CPvI^IX+sEI-=V2VA#)g
zyz~OGx>*iros&f2CLaFk3Bwo&D+ae#wy_a%ZW-xW-}h=St%=h5GS3|xV_Klt;}uIc
z=Iu7+Sl@3D-#PP2co92}rHsi!Ih9$UHuZ}E5ZP+d+QPYyzDs33@02`j8TO2e&>1To
z*d~VjaYRtV@q(Z7ve7Q|65yk0Ltf~f2;bMK?}tlVW~}G3wg3vpbeJ96<qQQdq}2vY
zZ<R6T=`5W^@j~=wP=w%>`j$H-Cu#6>!@(!DjIXYwUc#%_>eUq|NZMQV|HkFl!oK$?
z!A`t|%Le-_RlNk67u>~qu1gF4EErM}_9hRK6^~TfuYHw9g~VQ(fB1Q+Yy0<op$k2p
z4PV^F)m|ctEbTW8r>_<Ba^czeTxlywv}eqYiS#4@vQ1aQ7cgLWRkNNnlj0R7U!Q8*
ztY?u;yztTE{DY-kSjK1ep)f`TDIF5u4?pt%19F>?=aT1V*nUeS3Juzu`sV|r(Nd9X
zt~OnTle;-&TUq`=s5+(!5iWd>L0OtDvx~1!9EzsLJ;Ufr!-F*g0_}VtNQrR_BI5;D
zKmD9BEZ(~~qT>^%;`r)EdAn0yI)PXT(59M)c&wDS<;yrlsuThD4C@93bCAAg^ODDP
z223FoMSgw4X?MSpz7i>f93KH3@+T%C5J}Ky!B<CSpXq1vo8urdiO3g%lbzkyA&<B{
z+X2#pewMg)xBZXPwLNi^F?E`mHXv=Ll>y~HY`QUTN7h5VVsPl_<ga4CS8Z^fYOBus
zn66oycb2dOZ>yTgnZrQ%k5D;_)JXAr-(Jx(KTQ%ivE!Ni_@cB`1P=-0&;r1_lMHDW
z|AY+Tqk+?>;t8{-?BCGgIhZk>3O2!9_{hQBW<s?dF=KS}mw`mEz}wz>g1Fiz(WlL^
zp3+iNJ~W?}d3pJfdLa|YadSyLQK{3N^zB%~<983MmR>RTD+yGleRf-*DnMn8F`LiQ
zIiMV1J1<UxW{y52)i<iE!0bww826+Nd!0jL@Z^0uha<P~rRaXZkeeY-u%ncsBmANg
zwkm)OC>67SXc{Z_YR;i)x&w#?GsuoZ^t$uLKg5_r3Nokbk*lM<(mUn_E52rBWE*oW
z!@0a+xtE`_aQ{uv;Er#)NL^fm{apijaWxLx;KSmIXd;(+UaURV#=c$2&!DcP`f@u)
z$icvyBCYS$4t=YMSC`aNIfrkYGL3Ys1sY9mUnz_$?_oeI?Fv|k$3xXe6tMHY{D1up
zA5H~MnX6*P>)@TmZ7(HIHR4;@>p@PFUP}St&qE0xLasAgdj>vb&f%gCO)~)?G)c|F
z!mpwqq8TV4?I@Nv_SIuV*tQRi+W@K;X1aDs%EN(jkG`YT<IjGcTJ&UhNaFs`W4%S1
z%04*0BkSu&whDBqhh=3~h<{W6;|%B9z{=qRvx+1_xY<KiZRd$9FHVB>T^tZ1*P<+@
zES4f$#@P3I&BtT;5cw?dKrJPcA<ERS;2J8-)-dNfk>0V47N}HcHv3>qNG-~EdJ4iN
zQ@<QJnvL;co-)stdTJys)3Ec)0&PiHX7W<wKi_goH;hyG>1d}){bms{&#8RG9fEWB
z-#28JKz6f@LlzRqbP|{o>v;1x+47+H-e-N2LVy{&6d+yvIcO)d|Lap6Df#i0@yeJx
z(!x#MJxL9VVlDk0gp33O{KKu+tDqTKZuNLm0Bs@rS@W))#o=I14Fm-^Gjl)R!t=uz
zNn)_#N(dcTqO~*PfPCK>61L?8>1knpw7(V1N^35Q(!QYDFtvSZ`5+FCuh%3ZXnLk+
z$z5XIH)oD(qlrsxl*e(MYGYku>KUKZxz^)j%(q)pZcz(GvUBKgTldR$k@m!9)zr!u
zR)KPjR8OztqPH`FyXQuwi7U}iM6*;E&{UYFdP1CsPv^P<Esc|d2m@w%UA053k&D*t
z*Of*m2G4WrVUx~i%ucuu{GAeV`Esk#nM2zsJB`^*1}!X(y^;_f7J*`r<-EgR!on`m
zqlw}zJ*Zy*Sb{D-X}}=OdX(V0^_?1cPe&kAhKmX)nj<>8YOqW<Vtu{IC-&a!lOM#<
z^BKJ0FF@Lo3X-cp$mWG9y4q47lYA>y3C?{r*;@&{HJk0lSIZ@3Rik@iFs3ns+s<e^
z#W|N5JLi{<BxzU<)3ybK2guthi`EEUe@t;j1umD}l$y{6DV!f~WNd#$H454(SzSkf
z;M`x|`Ai9ZEtNItnW&N_1tE>PI7!yd*0=mK*8c)M%gJ8D7#HX>%JHS}`(Zh9YH)<=
znLBV4ZiM7v1HKcwr{0Bkx^G#vg3NiRC$=rRDC~F<1ytyB6yfA(;<CpO`hA=<ugxtz
z1{j|@fB<`#x{Ey`dTCbx)D{Am&kH?3Be$dI^9D6p82xAd^!2aAoE8YL7O0}fHOF6e
zs{FR40#7cVBFCp2D}@x?pQ<tiF0cH8C>-CLzJI#ly#PwN6gWuU4~2#h0e#X*l01$I
zYVmI2bBf?icEOAc?fCA7>z$g8Xbf{AdV^vXdHkl7nC#Js3||z@>L4C)d@qMmbewVg
zMiLgtmVt97D*Dx=*6!u?M2?`L?r#)Hn<<a~phXoAHG%)VUjMBDB@!)ec@Xw#W$#!C
z*=_X47;w#8V~`5IW_&dfi$|hxo_)}61t>*xCu?Y;F!8g)Z|-?;9!?i406MOsBJJ@V
z!K;wR81^Y&waQT>-B8$JJq*>c^VN5$%kGDF%zS<{>Qopku#KPahY)XiD1Li;_6eU6
z9DXTNtSUfZ<*h(bNrCK^MsTJpz?(6aT(o%gzQ{MEsIagw(5;qM=*0vu4#9QXfDC;p
z6}Y7)IXs9ZJsmW7LM}^wTrLOGZhf`R3vK*G0)Tq`0jyt$8)&5F!KEK>tAw<y3!qkJ
z+IU)M^3$(QPQchlq4H>xMP?J-{c*j9)4%aji^P)o;8UkW3v328XVQTW_Op;^>v1?a
zgb=cEkn!H%-bXu(3q_&K{?O990*Y_-&jvjv41^AM-HOrgiSAO;$%Ec}gHM|x5ST7~
zRT><{G6Vnva@;wA<ptdtQ?>Q2^I)OiEjf_2iy6f->CEnVAyVhx?vQcEPbiDsdbtYb
zbqxHCx>k`0nDAC$Hido^6o!Ki9LM#f0R^H197`o~E$cIgS?<L|I&8h(w`>O21J-`%
zA};EUtd#Q1@M?lEw+n(MZfFt|)b*qaX?nl!0%;Q>tT7KoCnwVVA?~+8%m7+PJT87a
z*2A8&zTX$IPlTh)KL4f*%T~zbq=DY2Dv_*x^@p5u9=cbbi@N<bxmR8=IHSdUo|I13
z5bMl_AA}w+KEqy_Vgm@~)+t{VB%FNdcQMXP5Yw?~P;1|bN&3fjaI;`bjR!H-uUKCB
zSZV0mEl!z0jdFdv)eyG!Yy%Ck3^_3I%PpV73!J040bVEy-K^PrM>L^GY=pPb%HfTW
zw)gPg!^pB=TPludiOBRp6H>9{yuJKie>Gecv$3D+!!O{CL$DZ;_{jnUe=~sw-Rkz{
z0BjS}M?hHphMTGI#(Jw>#y&F>Ec{)`D)EEcI_&S@S@_Xn@uJCKl(q#ucAJgdL50zg
z5ObvukBdRYwG0Hq24&jFh3QgMJTuRg6g!ri(3dbMjTgy=L-+9Im?SIeJCp$5oOT_d
z`rlF8wI3;CWDFd&pt`S(rBwWWEL83AwEFk>akj)m;lDqh_n77#VSXl@$6Oy6;BK@C
z-}Gw&3~)QtOr7dKW*dje88kCeGKzcco^S0rSHKbVyZ`(o_nygvdm-+YkMXb2+iu%n
z4EcyztW0`iTu;$qFo=%tOh=Xo)PU-bB59qii$&KVpX;H)-)scFwyi@Py}pTRNKg{v
za(10d@^(2hU9K<^{YH0K=)z787Fuw9v)zx54OZXzhc**Z)!(qL6d2khgTMi@gZn07
z=6!%Y`-N0vw)C7&J3Lt6*I<}f<&JyK^Ck~11xiRO`s1vIOAJDO=N*Epxbt>zo1CAZ
zwCuC2g0HvnUAZOxZY8+Cvwoufc$q;HSq?!L@UQ)1cAR2N59Li=kv}`o@g)UT&}C6!
zBEP-&{OTu1dL+r|UTR+aW-Xf(f`Bh~cfY<<q^gZIL|!B=K38D(Nn#CNFD^J6%Uz-N
z0+kih48^Lmj5Iy27Jr+`{c8(I5L+~nifMDRpgJo^U&w@I+taubXmlHJ!t4hhw!f3v
z<$>qyalXH8BLl}nA#mu<j*w<Km7b{SFKsA^vA`{5l@Z)E=N(_10AQ7SF=FqP_NKIi
zVC>8VG0?1%g5h5!R$>6|;Nt>xa2%l0`|4A~IIdM$VT9A+O!6S>?{l!<=?nrwAWefK
z-mRwexuNV+V!Bm}kjg{nS7dUuYNBn5o%lq;Pfzc-2OcID&paLLfDnj-c8CA3gV`mO
zbEW=CItw`|nzC{`x0{&6(E-Dd{1HmvYF$Fmx4<PcqLt||5TYD<l`1Z9#a2eLJ<O{y
zrY{LeC3Ff*d_?GmAKOmB9tL;uEgF%4F}L`Bt--k|+68py3fM~Rn{{Nxw-Ql}K`+x0
z0B+KRQT46c5gdc3V383OXfCSe9rXt8D#F9NMPdJ+l_Mqd1vo^QBze@RBj(~EXBWa2
zz3=Rl^ffT(Pc2NgyhQ{_Ca+E&Q{^%g7-`<LA~@`F+DLpSc1<ie4>-*HK6LEAE)9c~
zGmQfzIIWJ^_+B82xSLFfmd0U(eSzJeXBR%H-h!tjo_IARe0RCLZn<*`LP3{6b;$*7
z2r-O8;N&9Y88X3`{Zp%pht|_-pOJ@4F1@O3%1LS5S4UexVxz&izsQ=?odkp?>h?oC
z+D<EIrlwDc<EhscAh`=2L5sH?_2DUX#tgY-ljqnP=O304d6Z~cszDeF6!4{ySyb-z
zJBDauqHFFJal8VUL;5I&$S1OJ^W>bKpUit_d!A$kU4l90T=#BjNhzJ-lzjk*)yUrZ
zwM!|0dkV1$Gvmv`DI|%00R@b1JWp?xSZHZH2n%p#o<+Aj%+v>}0fW%3P?f?L1%fIe
zW4j<J$&Kz}_TFbRmV+u!<DLe72IP-R<}!w)B63q0r0LY)vO+eFx<55rEqFLca}$|i
zHz9>?__y6+n4BMbc5xD_b|Dlg*AJe>$vuS%{Kx86Jj3{TP7jE`$J80c_W(JdlT!u_
zPz@XQ)r~NLBs^>?hnMjeLG4c%2M#Rsyo0&^S0kjFdXj{OJMt+db+B)+cklmsnn|By
z&%@ytunM1ETpRcvp!&0C3h02_I4Sy(uZg>jDvg1U%dH}+6uJ+dFM=)oM}-Upv>W>H
ziVDyON-&S)2O;z76?8Soom$mkuAC#7iBm9T8k;(kDmjK52Oe^6t}>e~N1SD0#CH@k
zzE<7l-Mj*0)ozn29gK+aJk4LPCXr&CB2FMe>Lo&e<)XEn(COaBjJQMRy=X!xq`7O!
zAq7kHnTu#!=R}7>QeSUaFfi;OQd^#!^F?xy(UtAvoL}Ohv{VQ@Q#C|^eQ6JfH}<o9
zpN+qXS#>{_EYJL^)8oXDbtXwsdojqaLiigBlh}$kOuAA#UV<2QSu7TcX6W3Zas<#p
zK)J86tX$D!0^5)#9dypTM|9bD%xQKtjPhE+49fJO_23-i!yT5PO~gk-YsIuOlG608
zoU9yFf!y*g|9y>@xpql;jU07wYvA-m3+JCeZHZQro1FS#QiybK=PJkM0GOnC+LNrx
z9KQJwDr&(tpIo_x1u~mu_?XUnFNuFjaW9bdrYrs=)3F<hOos9IzR&OYi1MHRGWD3a
z$vUvgg>b~VNo!eO{1NjIQsR{`M8mQ9jp|f9jR{3QmF$b?=$X2x_g%ns8L|jO6CZDx
z=*6bDLNQW<X(<dFW3rnP2{vMFL8MaGZRKO{;J>sv9^;2&fz0OuO-|5)DbnZ-)&S4u
zPDWIVkoDI(YJnq%Vn}Xi1;(HFOY`_2_CX2yB{MhyrIy-|9%~~+*Cg6=S>7M|<LQU0
zpr4I~=SvDt^Az8$Ww-?P9^dT3?w*G#UuR6n{HvNDl#>0|N#Sx{d^0e1Yf0n>!(vri
zBU}-q5L}XIN@7%#ba}?*Lx=kX$H6~@p<c8QbL+{po+61`U!Vh_&e{$TGm$)cJ6y}y
z7g--B|Dv8*P9E|~J_pmD7G7bJ009n}tzR0|qp7jGemvbacH<Vt`DyL>ZwEH7CVw+D
zrj}Ndei>eVh0A{1hLQ-6yiQMegD8(Z|BO(06vd!??;$XGJ?5&sTd`Nj^^-fa09YKW
zEOrQzXKDZXAbseB!F9cnfqqvSPDh0mOw(RV(USS$;8VX}mc%7{N2lXngEoisp=aZ-
z4P;&2YbSkJrKlM{^BR)?!Yfb)#JX8CM{ERnF*}~~vT*dx;p;1lm{*jNenG4f9GJsY
ziVxWCG(8FuJkX`#VXdnAV=8`dYr?FvdAd{j^&0;riI5=xzyxzH00;;SkVmA=-}<(M
ztliX}xV1Lv1DqWBuT_UXf`K9ls%n;zJH!hG-f-`gS3e28faUV(h#ByW7Xl5z(oOD_
z&s`rl6=C^)1A!nEr9?_8Cj}$LAQMvK_yRTh<4-d+YBw|_4n*K3!>tTXe3y!xP!v&c
zJI-{!&O@{06@P2`!p0v~9+DdKeP9=Q$|Mq)0Euw{Xe;g$bHrN>shD!_V<arW7ERTr
zgY}Z<rk-n;UJC#G?^sE`?QT30+u>_W#M@$rX_ZCtHW>*CeU1}dI338Fri&b9%robY
zQRpM21lf^3%Ka98iD5-P-bt@T!;2MAP-I^dMfHz8qvUoh7Zi~DZAZ93APTQ#2j4C&
z5+~u|nAA&2>xXQEIWc{%`m)8S%w&|h$2^&4h`TosiN;gct6!FafXVcf7Dq3oVd{qv
zfe2HM49!O*p%XYom~klDZ6@`dYCVX@hD73~kN7{{-E@`V%$ZeZr7IWrAiv%T)i4TL
zSY!sLF^0Q0HVLzG6Q4b&YM-OnY@gn1L&cs4IowEe;qvbfex9?VFkwm+I$zS0eJt@|
zc;e;$&T_&!lkBt{W)Yd583;yG{bDwEq<QC>N23YfSPpf|cf`86K)Er`^mvq;qF%Cj
zYu`@!VEg4Wy7~+)IazmZ$em34@vigTk%({rC6@&TfBFzFR)>FB((!3pb4h?a(4vB{
zkVny0u>U7-6ZYB-N$xy}2&~`9hO|>H0Dyw+Ps#>LtnK{jp*X~Zse>Jh!m-#C*1hPQ
zznv+8vGzjmZ0~Y}pUOOzqW+WYTj6Gt-Mea;JKqsE2&Gi6n28yH<B!l~G@ASZ71Do!
zExB=}d32k_#Nu~#A`z!lB;#@0Wk~}biVN;+WtSRg!!=$q&tr|T@jJLmaCN+ELEJXp
zOom-XIR3+6@lSfS!UB;f?nzr)C;lKl#wh-0DG$87r(#e%2$m%AwR1BJ<)br6@Z58(
zn{uHLaX0Z}9eA0@_gN?nlAA0MOQpBu@hcu(=Nt9~+(K*Wgx;b@G9@muB%=a?l3Qla
zX2M28TcA@5%Yb~xWJq}DS{b?vVq+$j8#0Y2rcGUb^}!wUx_u|$bLo$sKtEMEUK#5A
z%}uEN&{Lvz-77HX(szMEohyTl7UirmmMw5V(V7Ut1OnC_6g+RRjs;E(96|Q3Uw!Qp
z*v-TC=8Qh#+i<jtgwcGLQgy1BBC|~*Z9bs8gdu^n>mNBie3DlulRg&c=6-yXIYJTJ
zvem17q^P?PE9{!`QRS;EoqL;(o-Y~6XVqY29H@n1LVGqun}^|FEiJcVA2pRG^wM~u
zbS?YCp{c8g6H1&`j?y0684c@LHqMSsDkrwej{`88DevrNhe!aq|IXcXUMbSgv_PQE
zecZm_i*e1#lk1+P(=)In;@`r`4%sFvp|OFQIqosXb%_0}Dt$6)XYi{en=**}7#`E-
zb9xD+)$ogy_gS7<XqqsVE{}uDxj=73_W3KCXIj{>5|A76f<o@TAQ{3jdNB#g0FKg_
za2`Mi4<<t~W^je^drY0MWW?vt_RW_JaRhqOzRrlP2RQMm!G*#K0K7A{ZAI+w`X(eg
zL$yILQBYZKkRIHyTcFcAtPkw~AmBWi>m5XV=m$!X!!TMk3hB3@_?-PN_O^D+!Q+r&
z{m$5)mq#8$3gAG@7l-_xzE-_cL>G5UwrXAAe<$2yPne=j{o3MdqMwJMg)qP)gZnrW
z$-#jiRONkB?@IIxMLJckv0?IzkELL`KAM6wx-ns?7SQVir4MM`cGvWvlxYr4z$@z}
zxqcfd{SR@;AB+sN-dBF1#80M$b*h-)SFtX}aV|fv*F+nrF|F`nyuL~c<Z^%vd`+G4
zim(JL7^sUbM%$}Ua^MMz1Hi9x2gc9&x<%@vs;)5!i40R?h$0B`L$~U#xNDq*CoqUn
zZce>^<2l$Od~=smGE<+avXcVucn#Q37&Bw|MpbbZhGq;?oy$1jNXH7_$%X#}dYbjn
z6{pk@{c>EnoSq@}qg>^Olo_f(hkXX8Yy@_E&HN#URlGVJvdtRcTiBCWjvXxs2wcjk
zk+ks8u??0U{#t$&QWfTSw;5OE_CQzU4Y{#Pe%IRTxao9%G0<tI5Eoy_$zN~~y9pug
zcuk8uvXb$lHSA7LYQ591!_5$F5orWh7KeZla%WUfFtBk$eRmP~1$a(1*=3=G-@dp1
z2CXcV7>IQ(`lH_Gr=`$5gNjfrT1{5RiTG0^3kk!V$g;tE@#LRxz?fOYj)J_}leR!}
zda`7jQd}a|HEIwQg9F~oTN;se=sPn8_o8rFt)#~5o?}$YZ4s((R1B!!l_1P#3&k74
z03(%wG$Pk0bdId{MkkaPVE&;nYo5U3qEvqhwxn}ZBY>}pAQ7QIO&eo%*vd-$w*#vF
z<aV?hXmeFJVWA3@!K&g$GU_jh>}qHBZ+J1kie|iWwv{k*EA|Qb?v1(?7J@q`O0YL#
z1HGm&;H~~{4@%9NW-<COT{Cy-yhH)t@;({J4u;Elp4WxjK!7B|(!w2}zutA&<xoG#
z0HpP)w5T`4Cra5-?LX05fIN}NlPwbA`%#<qUQNzhbfgg^mlbUCpSj*w)Fy0*mzNXC
z%GQvxoRYGeX=Y7Iy(`#(&E`VPJPw^tCo)liz;AhK?{JodK6mQ1Sja(HjWgC#8oq{y
z2^Gtl%KI6<>&o>a)uWZl3%yLnbK*j&`dX*eR&C__g2^@LiU8_WAk$2(L)eNX?5WDY
za2CYXoH*ed5K`3@?ApZQunyuJezDC8O#0vr^~0DWtb30fG@YodzvJ_3GonB67`4zi
znWS|Ruy#FtQN-_R=7*E;=oSK4zQw5(w8ZaS&3XErE%PC{=w#2EUO1Cbju5TfdxX$K
zLUN>2j2;vzjY|cRS36!o?dHOzt!r^kSm&-Y+Pf$+Yj+Z3H{tqNqlhK{#uAdSf*SXH
zIY}Aw3NPKIr5K{u=}+f>6P0!y{FpiWQo`AM@9#!aGK&^Gk@&_OOx*XVyX<cGfNtU-
z6rl)pVd@iv#0uTd8lT2t6KB`{rm^l#^jqq+?g`9<h>PE7kE2WO&_47%pl@R$P<Zj2
z#b`A1qV5M3<$>Ih-q}gkSw?J1TDr0~+QcdG2_cjDeG;wEE7-m%MPCt&#&gk0__;9F
z;j!K&6Thf1pCo;6DRYbR*8+>ssxtOZ?|~)sr<32;@GW|v%e^Ro*G3O(=rZQnLUiAr
zkMVi?ms-XGDKH%qF$58-86T!w0RKM#z;2dT@9t3Q+*$eL(uJx&zxW_6aDyM1oMnrR
zzzrsVZ4GDBomYNH%%<~?vC8CKtrUl=Olg^ea#Xn(w<hThxD@WqCf80iR?RXoE=nS6
z`ubu8X6xujB0Nt+0K%9_FD2z+uq|TZh~7RGcSGI0iw%5R5)lX)l00mN*i`;FV6jvp
z5i>pN)Cp+U2#;EC@iKY<)7N2==5g73eL;FaZByy@)sa~&8z+WujsedN-MXt=YDqnG
zDXVnkygOs=t<*xkr4K!UuI!W$QGbd)!q=bzx_c#wYjSRrQzQSL^r4eiJG>L^#yQ6v
z*qb0rBqUzEJ^5k#zpsOblBf={IIk!$8qXyVl=FSb5SbD3Yx_o+A1km_@|K&z>>%Yu
z^0%&eAY-on&vn6)oP`+qlj>ky6SW?vC}>#n3we0#d&Yjy8OOp=(}#KMPoq7&0S_hK
zhQ5wBKBLMmd4n)=Ra0jofUrXt0&TKCR(DfTvrLh3wm5|pMCvg@V<o9Oxf(lA1<_cQ
z3ao``0t?OJQC;bh?bX=YiZ>hBsLCpc=SkQ*!nQ3;$7~3@rrLT&Ll>K*=;?{{s?Qoi
zvykidpkGJ*XP-X5jE^U&1xruKjf+u;WTK!cg8TM<$sKE85;+VC);y-k*%I*=KrW!N
zW5+h8CO3}xYSn?N@9$&tHzf+14s}Ch{QtFeAWEI&3I1?9`nXcO(gZ<3!EQUesl$=C
z>d`$DwX;5?6<$Uu@&<SpTa$=NAps+q(?Ec^SQ*;@y;^$UTmA+9<VnaI6qd0YHqAjA
z^ZLJKVvq_2oCT1n?fM1&Mghlbdi+SA5T03myRlTB=kcaE=HB_jt~8bvG{Iy2jCY(=
zs^!U~y_gS2PO=`R<45XXgz2j;TM3PY1`rfMW5vCL`M<J5OUZatdM4>uoAlw%(7>wp
z7u0ys-*^=UoVRm2BZ79iS&IdhGJa3^cPWWWHM)nPVY62z3-YgupRI@JpemN<4zv^?
zneU#30}OJ}x{;K3%&pxvZx<N0vwI01#DV0<%O_@XPs=F}+>f_j%HJD8ji$|Eb`5h%
z&v(kUvUML(afvkqb}RHqj%t9kUwto{wtJs1Nks*#F9j?H0!XOIvN1*a4`pz?qrdFE
zq)w0K1q72o8`q^m%}h*sEe#xE0UV0uCRg3i8HB^y3{<AK#qGan%4J`~+`>`RU~uY!
zyXG)NBNbvkTh;52q-m{kn|OMu+k5QgFRw2<fK~w_r|tJ;8JSO^VT4L?3>KoYsU5y5
zai;Nbh%G8&_VbaK))y@Vl7Ka_uB}jAD9YwEWzDUck2jO6&22!AUt^ZQ*OYwBw3zz2
zbU{~O|2%Ff-u<3tWk5Ie1pv95v~)c4A2=BUJYpps2muRC%9BLZJ^dm?q+TD8S(7_g
zQ31gCuAy&j5UDD21x+qOLf}qvtB3B9r(Jw`S5traKsQbC6?xRE{SRnJB}<1+i>jax
znn8yNx&ZW?LuZyUaQ6W><UZgd@y6Ip3kTj(#{x~q<U|Zd)7H16%RE#w(btCIOZI-9
zBN?A7i+xDFfG<_zJzogAu_$;lZ3C!kikNx%xEDX@Q}4W->r3Ta;6UukTi{0QI5QK8
z=@~SU@N<ZzCaRfx1HX)JC&F3!cnn2E9k(Cb{C(0iziF8S^J{)Q<NjvPLa%Mc{pj;5
z$I#3RBlP~irL*gEo-0FTX*Oj-)&WcoeknN)(<<1Yui??EZh~zpY;vLaL++HH{~B0%
zGSxg-B4s%U!+@}&Q<+JRH*D5gFWDs~cp5(sWS?I+(=S8-zEv!-P17K{5bg0*{G@da
zGaT|nV1Vc=MeLoLzd>x>+qcvj)1lQAYTcv+m4F(4d`9a?(D`)wE(*|#gm6<2h-&co
zKCfi)c%#$HMF_*x;zAA?vJqw$(_EGQTy0Ga>DkF2HU2$Vilf=gnyFRa)*GbgFhm;1
zh%#~dY;XR2R#b1^EbM{WI~igP0oKb8F+DOtSHN28tkO7jZ7{-cG0^og6N9{2HpX|^
z2MZFBK;mb4+k2e;Lag1Qy0AQSqDl&8<8y<ic!;dNTKSXK8A2-5KeZ=Pn#&mN%P|ej
zD6R_nC|SRu0|@IR)yf=ajS}-%ylMQT2*htG<<<~Zf(6}*;N}HQrUC)U3uz(eYp>WG
zN6koM7*n&f7!^Jgfp61A?ol4AvppEUB=U=OQyM1A&1#f`hnf>24(AL!V|Qc2&Ve}W
zAF@<%_JU2|f8=1Ecg;VP$BZgSQn^zG`jx+pa$`i-t5pVyglZNi<Do==APrYX7I%-1
z3g~AngCk~FGU!OUDqr1_gnz+G)0AhJS(LZbA5weYh3~4=Z;ghnY*TRQA2umwcD7it
z<mMc?H}DLic=Cx%Dua*S^M%IAZ+hGn&~0=G8<t$WbVn_O3~teIi#t?d|6Lrji)6TY
zxonCR63-0gJ%WZuY}NMW8p<l}=%|33bN8+P09wM1WaTRXL7pM)?!juXKEsGMP_LMU
zc77j{+pxj!R+uq^LK!_YFzaQ@ZZ$wUN^km6TQZwr2=*qgA{kRMV6$Zfkm<xCm0y1-
zsQB~lATDtKS9W82!kLaOz2RfJm_ZQaIVP?qXMf_fWzF3R3kzlRbef_DxE_BSM%T9;
zDO!q|9F}Meev2%MAKIF&4Dv|S4oUQn?Wb2Kj{RZH8??|fmhh3kP#h%9)PFW6FC}B-
z{#>AX<B<dfrz$(B&4g@zoy;Cv6MpBE0<e{z${R~N&Z_2o>e<VmztxjB<R==o$3#(S
zk{KiY%NsJ+%MhPe%ZAA1qKYmsrPV4{`I;g^m1Iu{=+rd;lHyv<1a{t?M>vHh-0)ki
zN`}*%{57hpk+!<7YbAzyRRBt*DIsl(y3%By^(SeJ_F-fdr%Qr~0YLjF39jvi*XtIT
zYC$}({40i$uVXRiS#`}C6|Ep9xY%BJS-249#!&vAm)%>T#PCe0%ov0Zqcrn=%45rO
zhMkCv-T_YZL>*S1LDkC9jo%Xpn<3L1;t3=9BW^u%)#3P9V7rAOmw_)Yb{g}gO(%!U
ziN@o-6mq7IoxAY3;uaA|ECV3!FY=Zf2ms-`QcnFE^lt=gjp*Es&t1|Il!VB^6d}h|
zGXuHZj-*uklILbE8EOH|$TkbytK+NDRp#oP%>N&Un}ReY$Jw<;y@Z4KN__<Tcb`bG
zx=tg8cHs;0$}L7xRcYu$`EJ-(FKY+s1q@xg&2B);54x%*u5?nk6mP4l?}9VCx<XFb
z|HyCbQmlCBj*G*rKh+GoOEh;X2QOmY9sx74C7D{qbA)}nLn$@gj4M6yt9wWKeTIme
zMBDVXpf|1~D9Hki-Hf${zye_{fB}C&8zPzceF*Mr>00HuL?zqt^u^A+Nh}c4y;lkA
z9gol$ilz8R1PetH4VFpib#@^}$(<eMv9<7f*qcOyBSn6wiDJbZk9K=01eT7aw`Tfy
zZMrWnc>cUg5yA+Kw*OiaZ^G?%k>*EUy?AoEYWysH9xSrsH;^11cx<GJmFStAE3#~&
ze0+J9_a&7_W=>gy&l!HOXYbc>BsKc!O~TK`kDow6Kd>mq(PPMphjhr#rNipzV_@#T
za74rk{(Z#W5-7}7q2J9|R~zBN%}!45__XzX%OO&Df*XaWnp%qwe~)=7##!Kjb0B=O
zJh9!}KX6&?R%^;HXAKtI{C>>o!2s50Z?tDf!u!t6r`+j*r+#Nl<r4RoQ|V8FMY+^s
zj!)#vEDaGURB7Ql*uKGzY>z8*=@QV6KL@H?D@rH9=!v5<G7=7IvD8i`$c>hYGv8(!
zhw(48$$OQq4aK|pLw?%IdR8G*>P~p%bFx3EgPp#G7Ag>Y>?g^fv}u|RZ-awADU%aQ
z=*J$rT6vlAHuoG~zzx2x3(nckH~-qMKjRbPb>x9zkoSxd2xn)?z3G|m28o=CDG@|$
zmm#MDfMFqM5yi&^F_uAVquEWaGl$4$X-gjLyC7~n7wc2DdX2nKS@ZfVkx^JJGnzT>
zIjBWkYiS*opf~~!5=CKfA@e`~p<)~zKy8Aqe3RUroF-70$KMD_wLqo;VCI#Bw#z%6
z&8t9Aq?}z-=YaIzGF?$esrB1ybEt%AoEByTae;<!e#{r;A!tZ8O=G||p-WI6B<MEg
zyKXH@3>uR>rsOE@<k3$L>~g+6Ue+Z1A+)M2R4+-IMDl}Nn2Iz<wjP#v+O&?*J5w`-
zowGcDh1P+^bQGYY=~xXcQa>PEX1fzQn-gwC_I$Tj-|<(M#@Q89VgDbt#&wr!gPuJZ
zmFf48X>PvKBJ+3oPWak54wp!587qf#qR&-UeG0Ds*59&s|Jn2RHI$Ktra%Pc<EmzE
zp0gD;3P_#z0~r;=thr<wFXspn%PJ8{Mq|A>q4E+mU;;1Bst*9WJ`X%Npq6K=(SAx^
z0rCxt#d7(~_qLs!Q&J|WZ=_NSVm(2ylUHBan{`p!iSr&Zr5XIa3C7dZSD8{(;QMzp
z52$7|+X^)EnfXX0Jw|@@DzfwU2+-fR2j?VRe*0@Z+38V!w1yvxd*}oO^M&=BCuQ&0
zHrX!KeXa4D(Rc5F?wr1Vku^>)3>jupp64IYK<jI;5ExHWW#t9bnb)hND^^CZHIP$0
zeJmjX_)SlVxbe~ETnH;OB#H$##MPOHpNkg852pUt6CsXV5vk6pTU?!r|Muv}3az$+
zr!%;~oMu_aZ-em-e8gto_w?B^L&tu%gXnvno|sqy_ghi%j5olmQglETAwzEL=HFfm
z#F8FaJg5=#NF+y#<TWUXWhqXxNg7r;uK`O}(1i}*p6CVnLir?w9tXxq&nW}nyoK^j
zYjLR_;w4}FYN=)&w{K~>nC&x|!9@SPMELc|t!2p_5^X2>K_$c)j=p&in7i-4=;rQ5
zYEsjdr8Fr;zc$mr<f};SxZ~%}S8d}vrj%SQA_Zo(7S60`2~l4B2E3dDt((HD?r-`-
z?CX2^VPViN>pT9Y%i$K|FVg|cUu0<ZlFn(hg@&Nq8_Y@eIuxEio3t5aE3z3<=waTR
z!)t|hnwp8KmQ=Sc)3qBZa`+bha;`zKTKeuhNXg6FMlVC~&;-+>>Rqrjf{SCbBKDF;
zFxW!NSdjv*`pC~O{YGlngXWk*rR2w-%+ke@x^8X5GEZ+NJ~#&<gXqMKLSj?^A)S@8
zD?yxM@*|~Bqb{yqhm-u(TO^U3CX@5Zb#MpX;61Zf2`?;Po508R&7N$z!oblZrRuQE
z|Jn9zU;j}YLLIa@_w-&=;IQc;tO>zWjQ|fALxVVYeGy;cMHhr9cv#1DQK{8?^$jr{
zLv$_v7397w8`Z+EJD0|P`yLyO^7%&mE0Mua6X#^Mkwcr})W_E%#0<{7$Fw;s$WDj)
z&#MNKi`$X2`g{;myE9FtNE_Z|Jg|tO4l#bW?#k${=UAzhb!pZ;AkoAVOU5kr$2f-M
zew<=>>$<FxCZXY0|3r5&Dd;VlQ2ABk{@_4Jf=h~(pdvJWlICX<PW0BafI(7Ne4Vzs
zsqb`hou=pU-HzQ=gf|5{u<^DO`K>qE<waRPO%5<9Q0{)ww_MclcJoG4@T!;R%3)Ox
z?MyUUm09Y5yO}eZTDa_Kvim<u%OG|VN_w*)-g*(>Y&~Dtm~lQ9R5{mrc2u!a4_=w?
z#&9d#79iE*cq#0a6kF*YTq7Vc&2A)o$6^~wOa!29skO+B-otok*~7Gt%4>ZI7Rd2f
zeVI5j`>m6Y9ROyhS}@d+K^{Pie=L{WE^vap1G@%t?h0Q?(kEB0@?MwY#=s&Oxu#Rw
z+d&;#g`d1SYtc2=BK1!~%BE2J=jS#y3WBgZaM^3dkCG(O$7ax!<U8@Z$>8fqyhS3Q
zSSzZ2r?<IuFb|tonfQi{-r$c|I5K#KSbu;JCLA)0=yIj}%=VS;rE3m@&Zh>@$928L
zkIVY9b??{z>2*O*^kE)QuUbXnnw`Eot~ckf!3y@{@bbaim$Omi>&v(2eA9Lk?$|}!
z7otqOi?PenOFp-$<ckjntI)J(*BSDjW8(_yA%t%Oz8)?p8p+G>7eB>$0*vR`!BaGn
zbdr`}9EJ~tp!*5+MO$wOyJr(T)`Dv`tM_Kc4)}BDu330b(@GyCOiVo{*4DHRXr=mB
z<f@)Lldwyj3I)gBt2rE~5yD%`N?bhmZ|zsuEt2_h;aQ3IA;?;^L+rqJTD$`XPeV%G
z1Sl5GzLYuF%((G0O$`eNZ{cGru%8XAT8|bo&I7bJt4t$ozb7XOM6z#3TXecOwy5XQ
za#5j^E9;ooNh2Y@e^P)k*Elg-q&KJg&?eO~h&M(T`@V&Cusr){2mY!orIjsl>7ubg
zf!;L1GdWMaz9=Fr-d@;hC0+I!v+G*ZNcJ1J*`Z9Z#}6~`5p*<YT6V$TDpeOK9!9Tc
z_CC&?tv3IEVk{E0uKs$Fg){ZE>noF^V<XzP@h?eRa4GxUz8|>M$ymUVff}ZumunpC
z(=8Jo*LTMN>>i1@!+K-q^m?W&1``dsFmnx&&JDVraCK~)0IC9AU$SaKd5XTrS@&f4
zVPRk(33b7_Um1^7^M)WK65X<a<N228(3EyAbPIq&D=zui6sVjF!>%J5c2yYKcX*8x
zGOJn=o_(~1(tTl6M>ygT(TH@BJQGhkTQ^G43s?7GinspcgIO-Bi;24m<XalSE*`WT
zx<l8U@xR)TyIgfOMb~<H&Jp-1(aFS?F^UQ;*I?Ph$#p?~BoM*bQqkSL{P{D8rK5#(
z7Q2M7QP&KP6cbd~C)|H_$m8af2gt?8|C|SoComXo5`PKA@>tFb@YY=i`5CDPMED={
z4dapb%wtQ_YgggWka_{#bzbN(ssNoZxX}PY=aX>T(^Na_UF!tx`V(<%QJAu&bq2kw
zTdD${7SvBSTCR1I!sfj{9$luEFXL-!?a+x)Q-V_reLqlE47MjW^*~rIEvmQLAXV(8
zr|><HCH{vc-o3sAy06K{2wP0YUon-<2voo^&VG;QjDf!soJDekfIk8Q0M_66ghAu1
zKwHXAsj`L$^1<Hf5Xf96tuH9_7Wk<VZlM+=51pkX>zJ}8%dM=CND71v_=wZjqSRGg
z8=a~gyoWfbU*3i@>rSgn6p_!RBR?xLBU}Z7|9lgLz&b7U`Bv*?r5RZcUBj^+(9Jxa
z7v(OD{N*Ig?R-0fX-s<Hi}(8FBsjIx64uR~$s4RZ>esu1N_Jf<D<1i>KuKTKg<6}4
z7vFbl<A02&Er8Y2&2c1R0Z6c96Z=x(#3Y@p)wc5wC50KAd&fKrz;HALcnq<72@9W&
zir`@r{U!Yihr=eKQI?E8&BIOD*0ww;A!8Qv!zMsL3on?8UXuZ4;FPE#)-H=>))#o*
zjCA%XT0ra7hs|6<{SaG6(2exz!3Ufmz@N?v9`R{^b}mE#STES3=R)wZfQg_TN<Nu7
znbRLuN~E>!mc)55RS;dNaG+HkiJpu;RxDuxjFX&*3NT3Q2Hq9*&z)dT2y9ty|CcL*
z(VO`tY8{6rHtgI&A~MrzX*SbrZT*7qm3JfKP~|{E9}S~Q6OP*3xIlln`$wKuUKEc6
zpI*eW4uGMp_~kFXWy*Uo(@aE-3J=6~Xei*#%egsD8}Qi&>BcS%!%%Y!B9^%92T}4Q
z{9{mj${Zy5&<qNp87B2`ZQK21+{?c=*;?$K--JJT082wA2be<s44)K58UJ7;^!wVL
zOK;=)YRGcxD`e$(e!Ko!ZfmnK;Dhy#UM&?PHU7WR9lmP%<fu}P71h)TR8d-lzfCru
z9pCp0-+P75k<O@%$1wNfX$G|L!m?oXc|e4}Mrq2MdAot%9yj~LocudwrhggWo+x1!
z3$!Oi)tIOvm&aG+m8Mw65-hC4lo<Oi{orbORamy#)tDFPXS*b8_Lp{X&%Ni*C3lC=
z_UKbzNVJJ`9=qn#qu}$(sA*^dGZ9<mN^k^8iB5p#ZSnAy>%@<|QMy;w9pJ*fSdLb1
z&a+eJo=!6^^L%SdSOS5Kj?ZJqAVKMeE}=G6YH6S=D2)kz;srY&orw9vdhW$U_sT})
zeaVIRmlNo$JLk(FE_e878pzWyu+ikNrniD9LNx@iX5+`XSIQ-vv!R$YDMU-QtkSU}
z%i1AW`=tH3AC(qvw817OiGdM-2y)fhfpf^o0%Bm&eLnOfiMi25ikAs0LgiJRJFhe*
ze^1DWoVIP4=M#}C>cDybwVNgE#J74|Cb^4bzoNRA+1oUSQvk^WIxPq6V5D<nATI%w
z#NL8Q&-Qj+)$!eaMl0%9AAJlc+MEjdJL*|3S$V%gPA$Te3!oajHpl8M=nk+_;{TR~
zVOZ}LAa|s`aTs9U&Q-A~JW9OJIln!hd}|Q;l+q<Xa;NcaS0(RMjO?xi7GwEAVnGEC
z9=j#HPP^xRziRSj==}S$iKS;|uT0w=ir&@?z~m10UVv%YcBjNP`a&<I$<Pl{=@Vad
zVbqKc>5whb%>4ygS%5M=;%bT6{7Zod-zYb?o#dTgIA%lTArU`Aj<F};PUJEUWpfko
zc<_5-B*LlG_i&y-QM1iw&cp<`?D#sdO76Z@>`M5UrkS*FOet-ZDLxO(S#=$(W!LC|
zbIB3Kx+qB9p?gS+nZUI#E%x-%j}kw`cN*Ddeos+<F#QI2JF-9_@)ENL6E(Mmum)Xe
zV!d+CPc;Y>YxL)o@D;w!18>D@42lsu;TZ3r<?gugYC!b&AJ@5k3*0O<wnn2$VrzpN
zP+gl(wM1*+C1r~TT2}k86`{w&1986IXB(EAzi1C%CW_2q^u;d5(y4h*>DxRh12$2K
zBNf0tTd5Vt^mQSrPy};{fiixnQEnw_gvjDA=_s}0$kSOvi7uwFP}9$9Sg7Wno)mq<
z8YMf<f9SQRct+NE_Vg@&?ThI=eMTZ6clp9R*sm3vq7vY+gO-HKoTE&-jcA({O8C3b
zD;YDE4JZh6io9Y7(_^n<4|KH2Luf~cZN%0o6N4ruD$cQSW-QJKWbs#1j-xqfp*K)K
zfIGYn$EuhM_3#3G8Mbr-O9~}cmgAY{@2HbkvN$iJz^~5EPPIY=i|2Zl5EB~tao?{h
zuvl7hVXSZ7{xAj+z%{*%@x&C~?~+idix%~BTgG(=O^1roV4U2v-G4Vyy`ouOhN=vA
zGWNBeqQwgJn+r6HxU$lE3B-1U$4c<Hb%j5F%mBPG_%;HDp4`a<oBbH7tGo?w>Gjoz
zw`WI0b4pR`?a8~SE*=Q5lrti8PP1Ne!pgHM;ts59#!rjv7nNTaXfPBTD}$PdfXI+8
zn``Y=M&%TimR)idNaaQ^w0Juy$N6Jjph38%(Dy8P+sZ(jnw@Ha7exNwT#HXn7Z)C}
zr$*R$`aF7<yFu}%_0*GmGiO?b_|h5%HKG(P18d+Wtj5~i-fF9MBakYS*!Pl<bE7Xo
zhjZK+{d%?iS^>g|F$?7KinOt8y%Ftwg=&(c{3R~!(Gd8F7jNZzkBXsUkj1sJ@3bfE
zDu?%)FB!wePWzOro(nXXN4v!V_FMMJ&9(IMD5>dhpI%IL$xs(R;2wO9N>zPToPt$&
zy+Ob1OmBdQMmbw-Kdf)lu*W&mYEn}OY$oZ9VB*Kvkk=qC9OJojFXXJ{d$fZyY&!$H
zFJ2$9j7!Im2=eA2ucbqd6;HAnHmvtc)5BCf;MN*s-HOIBz>VSiM*0?=A7n6;0=R;4
z&BA<!Uw%{@tB}O2>2EIx@X?iAYY_fz!k`1jc6;UcYsq@?L|GP^yznKCduP-E=pHsw
zK)JiEeG2;o50VA*X9#*r(8DNBN<+YLE4wdbin&kcF`fT^z93C2i-hGjF^0EuC`DY;
z1jFUkt#;nD?z4gkDoe>}2miHjo7B%>P<e%!8e9{|E71USI2rFKXy#6A$(1Pl3ZiGn
zw%UL9*vSct27EfNB_g-ijIFW;W=9@#!ak%q1k_M&2&2)52_t1VQ9x~n8*T#;r1TG-
zwK%&lzVwajio^@jYekNLV9~S-XvypV3B9{#@y5|bnuTMs>MR_E2c7=`*nn<r>oRWf
z5cvs&ifT4Li!VuLA-uR)uajq`QTL{*uB6ZDpwLXr?E-rzGQ<GP4^v4F!PIz;x?~7o
z;fPm@>j*6C<f};Gjr(1;bV_wCm~U57DEF2|LYP80TTd5X($MEhw*g^<hAf_C8!zaO
zuNhygH*CE*nT-lj_Co|X(0+}}A*1ps6V*-su)uTm7m}*Au*ySo)ILp|jC+IESvS>E
zTzaDrH0q2a+&JA@yXHO1(T5nnkZJX@;((VUXL{cqtTqp7y?^mc98}`5oB-I|e_Hu@
zsgZkJYGcaEiSuI}yU!wtJr;7}<YE^o3SQlX%$_k9U?VX0FTdi;oE#%A9&EPg8PhTU
z?jmg^40JM!#8XTSjcz1Wh*a>pYS3f)$Xbi_*o*cHp;}(qU`^@CvI^HHhDEVH&U#!W
zP(m^~d+8_C1g*$kVCckW$cXo#sJZMrDd32azz~baI3Z~NmC~5rpInkoL^rs~(_Hr_
zDqTl=0?WP23=+HV<l%!8RN|1Pz^1&VjjW|Pz{UX+?D;Ky)XEKYlY*7J<NI0$Jc#-~
z$lW@5+?J5T_w8{XEPgwO?I1aL2^iWM6eXxmkIp-;0CHw&K8!GO=<~+zW7hPA=sj&C
z6m0Yzv#ia0R#&R%R8St`AhPHAY;d$UOmzJLH@G_0YY<7nKN2k9o#%)8xlgoL4=asf
z=Wz(qa0PYhgQ6`e<KEOBGBTJC);HuU*yK0Dl_II2yL838HyG)WimgM|xyqor;(k|N
zbK&o+{Nf7i4|piI)@+JUk}@utmP<X9%o#!rdLnv52kf?w&+S4&77)e{k}07Q?d3nW
zC2F>4Vzg>{rzsu@U2ecc&PAhhV@3+TyzK6p->7%H>bIZde{Ks<>eQ0GL?Z5CO*2c`
zv!LVAwD0+=kNUzsT<~Cje4&KWC_9>Yq(?77n9ID`X2fxL0F^?1lQ%8<K2x8h)e9zy
zGhm=e+$il_C?W=i%bB#!ZG|V_Y5s;||JCMFl0vqUwWwP)V&I?GBaaQ?Ga6pKE^i(x
zI#o}>Guzia*lU{7L8uxIc1LveD(VW}(N^qZLk>MQGv2JPK#^TZ6_V)KSq!_rbh}H(
zge0OBC#C<=#*`P(=0jp*rJN}DLdBan%&tY(v7qNEMweV;SVQ+u8Log$j>&i8$|=3M
ztu-zWWt~=|cIEujr|wvgi(s5h;3tXoD11(2{sb_@*Z^ULB`ui=ymhM#lg3LitTS}z
z*k=417CFN`#GC8mu6t^{n*4UEJD1}pOy1y__>}iOJv?R7QINnK?Zr2i)V#>ToI{9n
zC%1j<NNZ*G7@ELEvLXfHp;gyf4M8C^r5iSnwYlTarL_OmAjOk=w8Ea$e%L&e2M9^|
z*o>vFxLr*x8JnA}05O#)Ou`##`tsDyNm$1Q?G#WdCfedrk~eT<keP9aGrS91)@x$`
z_n=}erE|!y@<L-ruN1^g<LHjl={Znc;E<Sae($FZBm^OH_A1Zsh88Yl8^j<`!r)%#
zR&#OS0vgULJ#adDDlLf~KLDc-<+P51R^T`CoCLS8P<`zgX`dV$nCahzPC-*7w$-5L
zC8L1=lN7z2rbwf$WHPRm7mDvpFTBf~2W;Z16yIeO_&Md6<z-{qcLC-y;&r5BYgVJH
zK6`mwrNBTMC@wdOI^qFF{1?UY3FKZzXhr@t!`9REXG7{u>+?hbV7Hjsti<4h!mWfQ
z26y+Db92Q`RYno6mV0jxestxs;8Ng*iLV+-BYG#=cG4c575&I?99?;rQfjd|L;h#&
zChCcoLAhV@PuDL&H=g+Luvm2{(^eQ!oh85@L1?&)wd1U;VDEclesZE>T6-NC1w@_}
z{-^TyUQ!%o@^KY%6by1t8h#6(R^67|l-fyZ$Rel78+{MfY46x>5U7c_7j88SH`ihD
zPR48i;5xml<TfZ31MZ!ot4KGj@UY~6Gp?9TAyjl**+YI}>7^z@I1tH09PG0?ZD*gx
z7))cb#D+il`;`6<LEkN(OsDM>@R}L#Pj$lVIOcPw*_kVk2l`m%rNNGj5Aq|17PN)%
z_N_wRY01ZgVY#UKiwAm5d+upC{6x2J<#ug70m_P?wwRmrIv`jh7E;G|l20#7YX6wG
zaN&)})x#Ev!;#byss@jbt2hEJ8M_8;_>onU+|62jJx^?jtuu6<dYz&FQ~5u}p|E{N
zRjwt4gvBlyJb1(SI=r&X^WhIRpm6okue`_;i}-fv-I^nA1v@B@Jicvnio3TxCB((D
z#M1cWY!b537LfenmGfpMGFZwub9hP=w50BPy8>f?qZI7K25ws!EQ?muVuRo2XW{N#
zSJud?bJ$RyhIu9xPh@>Xo@a0`N5>j*b=j#H_YQ?Z6`9w5&O}7Qx6hX!Wyl>aAmkkx
zd62l&ZDSg(AQyMb-v<Dsvc&gpPQ)a~Iny%d91r-i!<L;HcKr(AAQFR9_4|!Uj@2UT
z9jqr^+|onZdwITOX9qppUmTtmg#+H+U^_@8x4o0%dlsl;<HDKz=Y;EDOYjp5uUiw)
z`lVYIUW%S}gtjn|J#P?22R!+%#5{5}`aBT;3n6^c!0RQIo0llJPa}|v^+^>frwqxP
zOwR03<~}10TPY?-`&uU&o8@H$&sL}Gx;4Sa0`OY!jkt89MUFog7I&frXqh2=U#NGq
z;>%5nx<Z(rPUcjfl-WUh@^-aw?3_rP!%P{<r8y3l)y>>OQ;t6NMDV#+FU1Kjar{1$
zSNw?p`scfp#rFZ$p~7Q4)4)CFPkeuZ!j-NOg6c=S#@1pk6~#i5ZGo*?IaeZ*U;7~X
zT0f^PmzGFfq|EH@`?x)THS>{9Ea2i1??BM)NrBNK{pw;v5Wo0n7WN`?RCx~+O|fVO
zr#qxHqz}k>)S|90CVsuwmb1=Ck274uV0?_=ffF-Rp6rjXXg9e0qbdVkE6<Z)yG?^x
zDML6u>?+d)Jy_Hp>xNA*Ol~8*|69J98$qn+@m`2=N*TxjBwTA>(&40rJ~$Cb89;9-
zmSLt>rc*K``wbuy%s&#E3?~Rk0zk;{OEkf6)^;I`vtpt|+v+jG!GNNR{F_hko4z<l
z!f;u4v1r|2`Xs+(5VA{Jofp7Vr$CC%l5Y%d4ROm_*T|+fPf3Hb+N$qCx~4lGB&a{o
zfR@Up%=WJGb^_O2Zb|#hY2TAuEpC25ZOIQ;1lG0S|MI`O?6l`;o1XOLio<5FLzWL?
zRCXSS#hTV3M@UN=e_7INUWqmp8J9}k?Gi89GW31iYlRE~5)#oVI%(B(8h%u8Nnjh6
zA}0)IxnZYMfI;C$9fMOfP6pS)43l60R>?v?oHB0LI1e|GDI%e)G^buMqW=H81)RMR
zx|3v~gC37H&dNOIPNJ^$Pu)N%2qlx!Ic~>MB`K7L-X?l5J{&C@Op>|L5sl25-6z|d
zC0h85#G3G#X0O)7F@!A$UP;#>r%yhZx9{yATo~8R4S7j>*`5*wGZZ_Xz+n?YBY%|K
zlJ~riknP#0cbvM1mkIs<wS8V531KCbN=A)9BYF)@NdNokx@Dg;1xQA--os#JS!lc9
zXh%nNO==5#35vxAW!JPLQBy#LI^USp!E90%JfhBmbzYi()scGd5Ex^;B!nc53iQLO
z{3cU)cT&GWOiVLcgmds;#DvX7!(kw>pIeDf)nKDF9R3XAp<3t(;}9V|@C&ECu+$|i
z20efLb#;krFXC<P*#lD_N0_g#vA1W%YJR;$5FM;$C*!dFG)c8Sos;0$D@DSo<(`aG
zKr8kR&il?Q1E@wtS)gLpr=rtrRIbC1McfEiK^1|F^rnCz`j=A3a4Z7|%*(w?Jj^Wo
zbJ0EBZkKxcipgQwPD4RTS%N+g_5>vv)vXB`9wMC|K+zA<vf}57W@NGVTNC~Xvycc*
zGMXU1Hm`ez6zLO~k0C7J5o@?Qgs~s8)eu%Pvet<UL0DKLi1EchtSi1*Kv-t4tMq;#
zz0_AggZ`T39qKr;w7y0hK!aoX?h~R4Pq-WF!d6<0kj`3~_XXhB;aZm?@KURGcP&Pj
z>zm|UyyK8;AYssuZG!rg;UUVLpNDk*HRtI>ON>?Y)8Z=Iswg64S-I`;wuU%IcZwXE
z>hgOiq;$ZPb8l%|E;<Z-Ox>0Y%r_|vj%;vDx(t?M;|b!>6?cA)=+@10s27L!+~x0U
z{VOXKaBDkxFpKi}W{IpBWkJ9)Bp%UcqW@u?@g;{4y^vhyny2($6h>59s&!?UHeYL|
zQ97Iz`8R^C>0|0FA9%JR;K~?z+N@ocJaz@QI4y2V4#`{O#xpb!LUr5=2*y^DvBtFH
zqmxeFc=Hqm3Of9E+tFV>KFr@3wu4i>z5z0ScqL%oBrh<|3N+a%j#?O|PvtDo<|pE;
zZ^gF+P>&zPa2X3C5)yEQMaMYLj<AM+{Uw#d@fU(7=9S0EDysg9aZ!6_=HFyH;`S|9
zftd3Z{<TVbwl0wWM;ul`B9@fR*dUXcwe_BNwT0KL4Es7GRoY`YhIS`&)!eKjv-gH5
z)vKr>+0*AuLebF0g9p1*XJ|*&R`akmh+@C_M!S~MaVY#y(0f3(VM%+lQ#7h4IH9ks
zriaXqF|E5s$?y{EhuZOJg^O_B@A7S`;@XaRoOM8L24T{fAJk2f(lWS8Q@yNDRr~es
zxgTh8rM7f(D#u0-4zMT5-Ev;_t!c&SR520j!YCVuUl1VgpG?$G|M62TpJBL--;rCV
zGsKkQw0CQ^6-MVJ%;+t)(he7JWYCx_$wNEj6yYS?ZH%$zVmgVIsTdKMwsEcZA@>R+
zf7`pttvpck!JbENR^qDi+(eMWy`qjlJ@vm+l}8^Ju(n}w;L4J@H=K85o6&1cR4uH=
z{vGIA1`xN<Q;b7go~#=-6CAZ@INI1CQv^IKj%9tic&q*JW%RIiL@93O6<sIp_i{i#
z<nfE{;S18|ZUX6(rdnloWd0F3%M8=K%=ORUQ{Yb!@J2INO@c#;Zl`WRENt1;!^71-
zA`Dy1*VJLK@X*#=YG{u1hn-ZR{F#T#WGmb=?mkMv;t41$^A2PP7m!YeAJNK*gH(*g
z41#Ffeib+&STYeFWD^qD*G>kl`cZbf#mhzsv1WLMoCC~vBqbsuv>o_j?Q@%~3TY!`
z_oZ*4`r7{cf&gZv8M}r_SoDrXR+wO?26(2J)AB7;fBIAXX-;@VtRoF>W{0PGlqVV@
z7ycaYIUY=q<@4ohOPE3(@=vK)xRG&1ESOR{kRma+*Mx@~qqjsh7BBkW2-7L7l)66g
zDeoxCxQmdGJmI6Xuph>Wu-c2Cx?aLw(Vf=4_r^oPsU9L-^hgvE4F8CTPAglu2l;dl
zI2cI#$D(E4d|pfHCSp;{eczj5`4(Q~oQxCu83{!q%Z?TQB0%bEv%SH$K>A4bSGnq3
zB2@YOu?xf{*m6F5@KL&xx(}Kt)a=ZSPv`4{S#)wIs0FM@WI3q9<yQLJ2h!%b!8qZx
zrYQ4OjwVyVR_!Hpa<ul2FfdFU9BXAJnv-&7et#NbS~2Ny(20yuq(%;r${P9pRtT(z
zq@-Rv>MLob5qvl+J21WUA>S$0VO3hAjYMOKFK%BadxF%34c9IkR~jcflIh_w>G*tu
zpLSLB`*wXw0edKFeW%(+(P2PHpp>REi?cXSJ-|*#^`z0JT>YL|x5EoBQ`N&^nLPLS
zCKQXJ!FV1t$`QM(4gCTvcsjQM$L^hh{`B_01_Z|>MrReFoPj8RC+b;d<!1S~8Ea<u
zaLr`n$dgX9N6&?al*y|tbSywPIp_dMBHVsUem|QM(L%P9N=J8ZWlF3bQZHYv-rJ*V
zDQA-t8dS{cebAyyZesR#(m3h;2)_O|8MB3nu}A1ySYKsMR7^U}CpJQW(SeLmA%t;V
z4u{xB8#$6E_FrsE$o{4YtIBWpflh653vx<=x654`8@nmojoh6r4+l5udI;-%51L^>
z#+EL!ueG$$VLS*j3XkxWhoP=o%B(QmOQtE{>FPB*VZpI4D2?xH>LjJLTy!UNt$eiT
zm$>}2hNzJ|pIVj9NDw{lbV6pt@Z5;LrIGE+90qUsQL>gz(-r_CFqiEz=bfAQUS&4u
zgM=GNHj3x<m-yX2i8h#IdT<|A)8I8QEeA%4ZnR6PdN{CQ?i1IimDfdBwa+DU{lvjU
zLY8QR(R^E>xWnVn?MBYr3z@$LJOn<x(zN#6?#UGa-sA>}pqKlH$c<7X$kWh(2>2A#
z|Ecc$UITy$t2GgWv`UBl?QQ4$`VmkFuXcU&buFz4ZJo^yO2`o$9?VIH<5_`t)dlB1
zH=2FP-dmb1&Dc@ip^Gvh(r(>tO1aimmednF>cs7IWOy(deD>_WfX2<$WfPbAB~IA^
zm;pf3MoV@7O=CfUqU!)1;e~T&yq`|VJZ@!sFzJEx_G$jy(9FwrE6l2VQJb@FFCyQh
zWIaGc|9G3l!te(xUgr+N_euY$Gs-Spw^+h8w#ZBK7qFYea68gx-0_!Rwl|xY&p8;2
z7yECD_Dk-Wn}fcNE4{WuiBn<az28gn5;Fcn$NE1k?~Cqnx7Q>^@9TZvmTQP!OOdv6
z?L@GnJsd=7C{;vOI$TOgqRNU|7uq6{YL&Zhtvt!sjmmb@^ER=AmLR$QwEb&wS)=7_
zeWN8hwO05Ip0zYh_1eBggy`_pRn9%i1nF@fekl+NxUc5q(&v}lgO+&6w`zI5tJ6!R
z(R*b4B#5LfMKqQLG2mMtITZc%>!1TF%o+LkzDC8Hf>L@i>^SJ0X@r!+KDLUOGY>$j
zN6T<3S`LLfq1TCg^<(Y4jfp%zwaQxP6@1sPwN?vBpRE`RF`N|#BMTGUL<|`iZ+b~D
zz{6$Yfpqw7O`vx6($v;+SG|dNs8SX8N=8osb3>j66UIgHbvqyW@gnh(bmr!so_qVY
z4&(i}=N$3+I{aX7*DJ1yn+B;eGf65UM-Y2lhVK0Z=@rv!wAk3|0{;2EllpF#O;I(P
z^;!~-6^Y}C4iYDuMe5S791W&g&;Nc-5ZnwivT3*h1uz_y>;&Q&sqbTe(R?Omp63VX
z{)=G}9?C32Xil}mhrlFQJCvfs9BybZ@(jF`DP6p~&=$>3V84&b;7<<RM_|mI{%RTw
zZ<%wWoNVw;5=_^KdIccDp}1Uq^KLQaujTJqAVu}M92Qe;e}1xGAVCembcPXLnAD}$
zE?Y&RO2fK-YA>OhIL7#c89J|}m~@4w+Y(ShmZQks@~HOVOmU(zzi{9*sv~E*Ec#Sz
zFi9ilc5%~?QXF}J*@aBH*>LtvrdUFjc2pt6m$r~&_l=qbG>aoMU)!+k8^3(a>Xj__
z)}rHq*l7Lon!&sXuWKe)>90wfQ>zmq?~Vtf@x5Ln3wR*h0?__CDn3K$83)vDMY{m^
ztTrC^J0&|`UABV<)5JmBogBCBy4WUIssAh&Qu{AEr)U*jaigVlKjLC_*TLrjIcDNh
zv;TPJutR}H=`lY=5bWTLqg-@_%I*Aj)6@Fkfbm7*^#tRB>3P>XN8os1mg>J3gMi7V
zwz8pQqU@LaLuOqW3!CXMKw}r``iqJ+%r(P!(!&W!rV1Dh{X*a8iK-u%yxa&{eGM<>
zkudHmNlL>330uD_KzzBU5HP$`QF1<~YE3YHTzM|r@!IcxEb$OSBy#qv5x~J1NfW`x
z7$oA~(y7201rt9{fMKkMLDyQF<pi^rbFn`fbQ1rjoaYI*xN(i={wQ3uLLo#eoV!V0
zJW;GZsf%V$ip3`>NMcr8o(Lc3un|`Ryy9BtI>xS0NBI#M=;wZ%CJT}RuK5!<z}Q2!
znjEzG>uD+U1S5@xb0{=tDV-Eot&-%o#eA517-%=)$_B+Gdi_X)@+r&D{<=YjYSkJP
zexs^)&~&#~Hnq4_@&H@$y6)spH^$^x_Hwdwmund;H5rkur6}u_i%eq;S{j@_c|G~Y
zmwLbs8eC1qu_FSvx#)7gHdOeUeoZP&JR7>gSNyPSel-T)_QH7DW*^ihLf4)Et!pgs
zlMk&R77Y_H7V*gh4Xi?iX;Mh4dau$j@`oeZpBF1gh%urgxR6Q+>*|JvixnSLd~Aja
zB}Nfj4lF{IQGr#dw*x0Xphdv(bdj~It0(QhIjkM4X-d8@>C2y=W1u?pevYpkejHax
zN7)02;s0kbpoC#<7I(TAflfApaqpXVWNO<HEBuo5Uo_l_>r9as^t7v58YhU0qsoD6
zx8Y+zvjD<ffNoFi6_pXUFxYays$3I^&=_t~l0h?bf(z(z*yHlfd~l&)68&w^rH2!t
zI_u$6A_y%Ejzm<aH3)VNI^>3eJS%kbkQ83LxzFx$W&|gSLVvU3@e&s_C_1Oy2%PFU
zx5Y?)v?hh?dsYt#-|w>GQ^m^_zinzS$0EZ9nsDX*hnIFN3dG7Tzut&euN)THsc*kN
zc6)sy<wAjk$TN-W<SHj1As@=a=?@4PA5Jw{FjpcdNu>$u3+ep(yl;fs33<kpl_F6P
zNl`pSIJo-;K!8g_Jnd3Ze%w+y65cp@Ttn_*t52ZPhP6CtGa%5d-;U7eO#?$Kmbl<`
zPr|N3H}a^=2_kw<vs<h+)0TBn^3h7^zti{x9EUrU+>v^h)ebYkl%DVaxNnQ?q>dcz
zeGv&mKuew!t^SeDrG?5|!Krg(`4=tgT}!mI&qm3N#WFp-n?dQ_-=^bc{rBnv?q|G?
zS}!k24<lL6dB4ih7eeuO@$>@sOHdfS2WOPQq6G>Jm6B7WtwvFm<|qh>Hgv|jqhQ`R
zL05XxN(dLgPByyrO~1!MwS8wpQ(q~YM)@sitO<e<09~~Tow@qVTRJUOfexay`iGPo
z3}X@Vl<)ZF3LPiD^$lJ^e7-&j*dQxvw@K$=$Ds$Nw#F*1_z27dCT$5f#h{zGfB~)C
zI%44b3dfr2IegW;m&KN@By++x*iX*p0@^MaHyVoEAu>40ULg&XdPUuk&cJj{v(p30
zH56&;#=QwC37-&3Z&xA@PVbFnyJ*;cT2?Mgg~KHuwhu0h#VA0`BXz_7RUM`=k^H)@
zcSMX!c#)}79gCMv){uLE+R+oD+PK+er^Jn$ME?n)&?~geuI$U;u-?6N^Xm<(!V4g_
zTZ~+wpZ*%X_dy)B0hPGj-66Wb0q|x=27lh55Kl;8*8KTCX|5CSCR8`WBv0=ozZJSF
zw+_i-h#^<htU8PYo7R+iYZJ{FP%81mOxk*c<$uqlVJ%jXKZ9VbYvPs492tFjF?uq~
zS6e37QjOH(!uMu>5dUjGH$1Z6WT6+PW9d4c#W%TAXmMO<x>P|N12%xwXX0`@rsWOC
z(Xu;B4_v5!1_0RCRI#-(jg2m5rN?CMh6$uHRZmN9p;NeytkFF_r5_Jpw{{|O=H<Q!
z&a=62zy#%+vmh&)20GOMXV*uvYO5|}CP2{TEf1TN+{F}eJufxNyR!`cTY>7kd+>S1
z*$YE7y-A}<tAVwZ{Rp8HiF?G%%J*eawz{*-0jy_SIuPUC7TMd*DM<qzb=yy*$5mZ+
zc$mn`5~s%)4)-7eXR1}uhBw8R9DFggw`Kk4{x$0BJ-5A)02$9%V$$Do{6#JtYtJ&W
zJ)J1TJ(XM%P`tCyZ6(ww*90vi%WoWNkq_OXw)_N+6?nk#Wg=4@iBia~`xzRdvB~aJ
z8;W}T95p+0Fd2t!5R~B?SrH4{l#=OA+8DYY`Zaf5z@#O+$T0)#NIF)TUK#yUu9Oe$
z0-A5~<|i&m5n&B_57PQLwpz1Be4ThZz=D}@RhfdlGVnG&0tu=bwDR*2$hI)<5Bia=
z*?WP)*&RA~QvA|c7yG<-_?o_S0R@0kPEmeivF8wG)6$7gl0fpU4fv#@aQ=b)zz(b2
zY!x`4G2vP7xy(kbTcR`x39Vi;>oG}PGS0RDm->W#bds9d3Z+`uEoYm3|6i=|>xM5w
zutqSXY)h1qv-00rBz)uNZQmD$y+>ZS&m;|hV4m9`V+ih!FJP2rm59jidS#7ew}+b8
zweUHR0s2NaRIBFB_l-ao8h`TKbE<|u)0H~uptmVgVM@G#<JT`3ir&p{TSfu3sA}{v
zZtO0{^*AtZzY%|$gi1?0!Z?a2LN%w-q+;DqhoUgk#+WDeYXPb)5(C*%i5(y5#f&5O
zU23qQX4L<u;3i2tafiXtw%BZ5RF#}FdBeOl024*WsIGh;nFMsFJr!x&*Qcu*xl!Q8
zv!g8PA#Rh9k@QJ0kQ=tWUn57atg@keU#?+hy5PpW6z1e%v8iXQ`_&*l+y`)>n?PNO
zaj=5h?J)KMmJ)!MlGFQ&@%Ii66sXkqiv*Bpvh;a5W2DKdQSQ!p-%;}eDZKg50_*0o
z_}g$6wanvP%vOIEJdW#duwt97<_8Pe;@#WCko-YH>B<a;<>`Z20jyf9u$GfoWjCgP
zgt#uELuzn0>RZn91q#-2Lpl@<k^V<Z7%;Wl2gEZAS9{~G!(1J5ujn7i6&-JhOfn0%
znjE)L_wYZVf)(Igj{IS@BXXbN#b!>7R!HkveROCB`vX*}heu2{Or(4ARCa}819-}+
zXBaAyle>3ZC7AC)E)Zu%{j_cF(><#G-C1RfE$KSnySXllD5Lmmg2PfQs{$ekMmZZb
zxS><iTTi|KMnwt5cRBH5$;aF^x=@S(<%?e;boA7TLyVH;9Pf&)fUj+1h5}8`xMZL+
zx7wQL{-`!?eCY-)M$-rcpPqBsFG3<d=UWEq>(F2t-n$7Sv`zVrp_RbYrRhtw3FO7t
z8Py<8U~0*$&DiW1dLDI_y2xfUeOPV<1V=d!(ZA>2x>9N#G-1E5r?=z&>x_QG=VvT5
zJg)u>;*!3?^A>@m;<`@UU|%0ulO1nVzUR`9kz8#`{TlfX+T`(^bl7voH{F^=5@3_#
z`viKXA2NKvh)Sbe67h#hsHSb*2kxIVB1m;j;2tFxT>V@m-OrMUNsFT8_wA?pL3RbA
zuKRUpUmzGFBbGwob^xFE$$1EPd#Z?Ewi!E*H=HeV5{&H5>tBW%&Dlh;>dr^HU@ZRA
z9HU`W1hU=b0ubqzq`uX^|HO`8(#aw0e3S38hBQt*+0(j+C(Cep8i6jxgH9yiX)3OQ
zrWx#ct8jDK_4)fzlBBF>1xb*B^H+rOsN2b`<ph1i-kmE?ljAnx*+s4hrYt_~Z7jf&
z!yN@t>?ylNkUS%LqgC-!2#huHa}fUETvnprF-8#ABuTFmkek#&69iC&kDl|!TZkr2
zvq;_{^u#R{%t~Ai3M@YLXp9l!Qrd8bT`py5`h*%ZaY-lox84F#-$XrKuSS9Oc2o9@
z>i8#AOG0FDk;GHQcRmkZF{spNQ%>^9szn@~Vd}*d1^WSuOjKB=LOO<-`guTjax(4m
zD}a$wkklEkxK@k$QIE35+%7Y64io(pAlJfMg72a5{Ll-8d*LFArTXH-@o#u{58`*y
zpRHXINEe*nSPC`%VouA{6<Yj7hYGNb)G>t~@0|o|&%rih4H+4|VbPEcnr*n_BE*xu
zD__MOd;L)%^Nu^wJ$y^z;ZGT-6|h2?yR$Q70RKM#z>$B|;<f?XIJ1UVi5!+?rWF@T
zuvSI?vmi^-^(yviW##BD%K#!X|Gpx6TT%%4bP&YOU#Vwtk6K@uIyektyS_rwRx5E8
zVP$4$Lo*5D2HFHP%|51{0vF|@F&Le<Q8zl>ryrQDm8?%<89c>1gji?=E`j<4`r6dI
zOB}vfbP+VW)k$XV;*O7cjAO#V)^@wP$3Fs;H;j`!XdJM8qBIUdWlnYJOUuL0PBos~
z39HAcKu(pVvCIDOJ7ksgLHs{jlXCsJij&M?o|Hm{|8p>~xOv}>FPJ<be88y6NvO=o
zRJ8`0Lwi1#Df%zd)jh+7&P7;Z6suTwPYWKv&1)y37CnSZ-uj=+Rd@F}mh!G37II-D
zkv@f;4yQ(ejlFx?*j*!Kd+NFtTGQcx`=JgwjXahK741XviX$nSQIrKqndBy3MAUb2
z#vwq`C+4xVrkVli)--@EC==SmmGe5yW<z#bom^FvWE7N~4yF@Cc~v0(1VuPPT_wO_
z+>|Msm9?)!!2}mYrgGK7n{25S*P`aZ&yn?Mp&p?+g6<)cg=~4DHJus(N6)%tXrGMk
z$o@$(zt772)rVHXP5F#m>vE$t&}5D_VA@?nbYr2cOwXoSG5m4(->vC_G5<znrUc?)
zoI6Tk|8KhTPGXX@o%xzy-_;!X554j_amsFsuMbmI^753<s{5&hU}t|f3R(Zmzm)=1
z9M~8hJ8E4Qvc^nl5<_mH)ER_1UO&wrhYSLGrknROwzP+w9A_eZ89q1^1rs@z3z*y9
z;tv3Q0mVwnI$M>7IDWecYqLdeb;gqq?2j7=r0gpL|LuYKpAZl(2vBk7xp_?Q(MrBV
zYW0l~qd*0@J#2Z|ICX=ezY5aPmnN;PU%^5|$T*GGiQ5MbAZus0<BN_2MGBB+Dz0q{
zf<-ro-cuQ;ln@>S-Ek@pc<q}4jf=Kk|NfiWATu26?chytAg={Cg+zho-5bWd{6dI`
z(V6ABaPdchw>esepY}We5E1eDaCba2c+UzbtWi3m9q2)r!K^%izMG3VUgnv84@~!A
zTpFKUh)D1isoOYIpsck4nnV!;gAndXiDw45X7HbXq;$GnN?4FNaO6EhlUJ#Pd%OfY
z%T5NOm^<_9X@~j6`Py4AHXk<UMpS8A!GoSqH<aZVgCt&u3EvUGHWs%3I4T@USXSZm
zevnIVy$nP~pSxY*83xSW^P-hF%oXU|L=1BMHyrNsW#yPCM3@r<uAyd->+WL=-jze~
zfx##nJ$<$*gzEMkQU*its?47ND3rmFx3!-9L|fy<T!lOulbus@yEm=Nkzl_b^;ori
znC{A7c1}=SM94{K1~~{xkF54>S<LTIL~g*6rl+eUR*!XxF#&pQ#%A<b1U`0n_sx8j
z9-4AraDAsg!bLIM7*(+OENc}~B~0MmY<uSNwC1_s3#vBqj?~IpwU{9M84rnLAl?q1
zVFSG9#&q|w0oj=*SM*CU%F|FmdP(MCUNdjybGPfE<#4C@qxM-1s=KY3ns(T87r(mV
zWGfSvP1Y=3qqC*h1oKWH%L$?JLZ=dP(LN4?Zqe#0csQX2jfTPO0Slp#wZij0rH$?x
z)B9TzkBKe_rg2cS`xtBa+||22lSjl0^o}_|XHH9q0m}^2-O{*sfJQ3GJ6Z8ul2ZVE
zA(p~ErZO0HG~p;`+$BwvKpJCc`RLtq;p`O#S9aixOjs*;AGy0d%|!bHs=V*6vsNhI
z8n)wD<5C?-jKN4q=9#h=YGmMM1J0#;cm>!Q%#dfb7_sr5<EA5@8mds5tyRZY7oos5
z9bwXil4T}6$~tduiJl3+Cpt*1rw^6cY}9yEdT8eHF>J+|jtP)Z8>%5o%ezoIw{|Qx
zZmOLwk<Y~XRc<!h6WC*|R#Z!Ju$_pfLUB34EWCJ^gm$`GDv-C=2XmiFkH0W#<ovs3
z5PkqsbS)_f^t(M%F&#~8J{v-{;MEHTFO}KRwzU$jJWerIX7uFiqb!cM4~EYGO9Gp2
z1)yd7MF=Q8m=18FlRU|y%Z>C5hVcNZe?IULTYX4?zEnQEqINo!R$DsWObh=gM;HDr
zU=zzcFIzxW$aY2^inQGerj^zawRZ63%>Px<*FY3uXbQ{lrp-$5;`v!Ti6XPhk;IaU
z=hlrfsUFwZ$Szm#de@J!_eJaS?W<YMs_G9)Pwc#$_%YO;W~6_=zbmqboou0ieB;J#
zVw`h0MIZIu*j&N+On@C&lxvGIT3bZIB~_7{p}k#~hz|@y4&@eBTt2&agiB&Pr<sMw
zlySA1P8Jm`$^_|yJSr@Dfj4vq70Ue(#NGD|AfP>aMXC#Pnovj$y?rf;Jb&m1L8C{p
z4{@?8cv8V@SQ9ci*kYVY`2mD(Rr(%Bm+w=$^Kg|E789<pc+zLQWB1~M?goL1KeK(p
zn~h^P#VL|_ndhD*yBxR|d8JEVgX&T51Z~r3|4_!4<wFGqIN3i%WZ1QM5wUC5gk^Um
zp62L5Op!seJs}aap_}WD&4uM1F@C@zfxv%SXs4{#`Lb63)nV0kjsSSG+_$=1DS>zX
zZ1xI?!`9z87Y#uX4{V?SYj<H^qsE!K&N}2-?S=EKycS?I<Sz}4T&hAOFrndo!Ft%q
zE388#WRfc6rtB9+rSG7l7cx}yNM5dhVy#|4;t5mb%-UTHWo{uk5~7IKoCjStGBA56
z4nyr;gx^o|IW>%1pEUthsx(!wpHFqmzF*vqrZ{Rv*R{DS$<dh-4xtKsl=X-oUu8iT
z5T?uEa+1SJD#R|C-F)UO&W5sNGxwTZs9;U~$3yKvK4ai1@!kW8?^!E)Pi|G@o7k1~
zT?{u`XNn68y9=sJ{I#h`@h7Gzv7|6bngNG^Ou4+9)Zh}0BW`7<?TSb}h_u<ifghrl
z&~NJj+4)Ks5O?bYUGK6)vd@D;$$+A>xmaPsmSLIbNGfNIA!mrJz;G2L?15qw$^Zz}
z@*+`~j7qU8e-t9&a%ozz$0Ysani@6Ww&gyWD-Evho!ud+zxFz>JYN~;U4KYx+k>13
zs1_CTEFN;_&tZSD8b#HnGHi5ilOu31{+eE$siB5}y686UTQ3q%EyC^p7v8GmTEJHs
zD`(odsW#N)djX7-x$109E!WQaxF25&jTMyCYO<`2*ja?skq?{_<?|7-B5?P<?J;eE
z(zbq~&u?`WT<^@QZjp_bGnsLTB2?^cWkq-v(^OM(LouIW58e5Q0WqI<TJuI<YG89g
zyL-7B4R?Ty(yIJ+x>G@nV1oa=f@vqdb7O|!u!~rAeqdjtOu)iaQlk4GYiB3p8uu!|
zU+vq-LYWymj;7Owgs9qpzAKC{*d%Mp*2@Um`X_GMCL-(K7ZhDT9?A&FU|A4i!QgL-
zMW=t^oH{Fsf$;er5jo=xDUfGp?jro1^eB?q&5i^kXMc=1@Q@iK#)yYWCD^|rl6j2g
z8lk^sEO203z>4DGQKOc6;xb!ETjq~$bG|miOHA|TV9j%6MT$B+Uml^RZcT%*4>;{)
z^OZytkvjY_C_YRqOU#r|60?xfq2qXr=qX5>VvH`#4-|v4>~hO~l&O?E|FsC|VZ{DZ
z2igxORdO)@0!f|(u63)H#Y2dsB25%Y^u^g`{v6Shk`&@sb&eGU9rmuC97Nb%shd@D
zO%H-u!XA=5cN%IRX>c`JOQ<jquxC#$JABIZ>xdFXK%k&~Y*o%cMg{!Lw(uj4b>V2c
zF#%@Y6@Zm@ch<KGP<~fjAP5=awXLG3<7ukOqA=^KUOj?~W^#{^W@Wf!Ca(hW1f)7L
zzgX-7ok!ziyzBDu&Ml5jBB_tfK2pKcLro(%BWw2{NZ(lgYwT2WYh}*_AoD3FX>90*
zk%6iTSt{O(CSJ}Y(fGWWOTK><umK2vYyKtGQ0{N8h2^}97tRu5Dw@O%08FH(3sHJO
zM#yptByp@ra!^=Tm_I|NKyrP~BRA-xHVxd@<^RYzvV!AVq6Ex|A*@QnGp))E`zuYT
ztHMNC--py#^A@vO(UE**%4SnFC%))6=~n}%elP7C!6Tp~Wh0>eQ)np3dr;)^+vdl_
zbe6D}_H?iyUV<oz*+Xp;BvTVl?#vs=1Jn_rK0#E9^wu0}eQoe_x6mAbzoo_@V+0Pn
z{&JFhQ8oS_(E1t>CITEXV4K2Gx+r%rd5T0M{0+xh78=^kN&0;)rt2Ojy646>c8&&E
zF2Nd+T!<;9EP%I66lS<<0bkIbF(}j42VC#n<D8t0+@eam6Wy&KU9#*qdu9V=S`TVO
zTt&gYRZE@A8a18&%*8c_a$>Z?8kzMF;L<GRodltRf-8<}xp^c<=K;-E2L>@w^^Q**
zY>LN6<I&R8`OzFON~h>53CgP3Ysy}|DWYTmepCEqkYGGAi<y!2Dw^_pzK|9$+c{b9
zPjhWx%r~z46@1$~bv6+F$!?<XzX{i>Y|qv*oOwTR7Bf4-8h<iIu@f^)BDkCOM%6UX
zFJxX$yjyd0D-um(mt95<3DlS?mX{L4jYwy-pDaX@&azjQH%?^30F-i!f{W6%{luZi
zEW(dI@aZn900VsQsYb{yk<R`x)MB9B3yg(!BLOYs{PyN!AJe@aq4+*#V_19V<XER*
z_+An$JuXk4UQq_mpj1zth_7nL6Wu?OI~L@x+<}biZP|sC#c)6n7mbb<k?ZI8tv@7$
z9FKDy<E|c8MR6TM;WtXgJ{>^c@h{}rg+m+rnOUh=V+MPWz!~})MRc^4n~sj*gc_`!
zeD$N>F0H$!pd6F{Asm16M3{HeG)6Pgwc*%lbEA5;*Qq050Qp|FHCz2MT_F?ZaZG2}
zrM70&5bDfb-Tt`x{QHqU%+(U`Rs#>nH|F`1OqZJ+6Z8ffHpnmxbAk;fGpxZnJhvq^
zS)kaKqQB;sfkXTcggg7wRkQA}+yfnp9zrx?jYXiIY=7piUxk#}is)V9N5hSQdu=$b
z2Li+yb!A%xNIbH(qh=|vO2z@ElhGZ9UMN`<(<gyhU-e52ksx74stT6qsh+A-N3J4_
zl8jed8k~y~Yb2vY7PRSxc^QU?YS;1ixA`94^r0xW9dyzO{;2L+k9O|Vj>BS3p_fmS
zv{4`Lu0Cbzbn?<W`nMCPQHQsY8%*qnLNi8@+1y^kU+3l^_DW~0BM#(X^{+)yFwjTC
zq)xc1hnN4GWpg>4>Rvm`$3vmr1;@mJV?`3EZZ#)QQzrao-Ai)-Uy~XoF~yxzJ})sp
zEnIJ=2(R~XJv8r_cG7{0<W>r!OdMkw<GUaM-+F$;=J%5N_Gw*hr>|D_RP9k=&ZQK1
zMxzsA!=gpA7%#hxZEe{mJ!ZuwvG!u@${k3aY5acw#?Uk-TuN7zmtfa&h804BV+Z@}
zi74~U`_kd@+I^L5QUng9`SSaeVJ&Bp{wpcrSW18VEe$q6+Gc@ZMT9`FYTPBAvUg~8
z&k)O$O(5mbaZX&m#*nteqHe}RJzt>6KuCdGKRljJF%h<XAP=tMh@z^vMA*cppoUKs
z<k%EmqIFd88<X{$0VoQ8g^JPjzn(uJGL2k!*E$zHDDXZ!-Z%{v{i#;}c}WsO!+-Xk
zv<ro1VhkL_KZSWWi0gD#r0I$a9d}V!rkZOX61b)Ef@Rf^wrlSVgmBoafkDq?2wbfc
zobX-Cq8h7h*;%C2xrly{<hxI@7)!tY-1rx9N^?_@zbVRMn)1;sfMN=b_=}RR_iOel
zYcH}6BxZc(^;p@>Lm%J53SrL<ME0>Ur~D1(kZ}V{91<}16mnt2vyxnmG~9_EBeR?2
zg|v=*v6RGmM}H?u_r{H2NgpHm8(rv&_iXTl)Po)a)vJTOXTfdfC`8@BC8B8(X;J*c
zT{Y$s)e;nsiDUVD)gntfJqTLz-XEb5ml-_nASG4pU+e=etH)--8ME%1*_`@4j({U^
zd;6hZi9S3^wT70xnmT}8mfF+LEu4^VvZw~~-65!k#|-msC=*n;%N$izL__0`A{SKq
zDe-c{0^c(W*@F?bvv&_dt=^StV@m;taL9H7q{Xxa`Pf*jYd{}`GQOK=F@Yew!9F%>
z<{}Vl;qjeJ9$Y$h2$#}2U=P+$C&sX7CaMu8S*SHN80r+pa+;m@bNkJuA9h_+JWbSj
zM}Dm}NsI%r9GL6#L)b23ZyaiSvqCrS3II%i2X=ZZT#sIq6(7B_xljjqtEGukG_wC&
zShr^%1`fT4)V3H;*f}XA=XMEzb7Hpg&G3l65rM&q;GO$_B1HBZeDr1aw{sY1^`rj(
zPxkG`Q5dtwEV@TL%%L}F!@%|a6;RA^Z&IyTmE5Ah$r5(8tqOB7Lw!RUs>`lCoIIl*
z5rDDKTl<;Id-So0-3N&)F-!H1o<}{OLZr*C`!F_P?S<?j6|+GH4+E~!H`;5pn1okm
zmv%5(xvU0zaI3~v$=ot&ue0EPWR9^r0mG2oX13NkS}J*qZ$mfu@M5V2fc;Hzi6~Wn
z7tOi3V(y??fe*Th-2xg%V55T8Zvve`t&+u2^t%e`U~^b!5AaNJk68pJTME36*=w<o
zWtd3#{&prqtPZ_6p9<K8_Q{MGD>Yyo*)uek)B0;eLFXk5Vl!Ae_ZaUmjUk@&pfz|v
zQM9S+y!pTTV_ma?l}TiY7MT}3$l}Zw8NHk7kEVC_%?7cO#(A}q^=RmnGp0S&$ivz%
zdWPd;*vH>+3!oYet-gpFrDtgLzddxjBQ<9qb+-V_Sg40LQUn#YB`0R?POGXTw-?MG
zfqUO(9zq7O6i~t%D(3{ajL`*5BlIUD?Z%_>QYrpQC|ZnV!E;J<Mp$yXFd0t3BUL!S
zxv>t(#kYGM)($5%z>*TOL)SVZoPnBn?3jr?seQ!%yVHruJ+pbpi-8-y&<-0k24?#K
z%y@Uo4>v#`xb()f!+a!6+8$=+<k@}MAiVSh3=tM4p^m-QPW~5K#Ug3iQs6DwF0I}<
zOYv)ojG(QTK@m`H#%7}?*_HxvD!Ah2GF-N>W-Ea9Z@p%GL!Gz!`H?k;VG>e~!|`z0
z;#ZBBo=ofHmu{*>!--M0B7D#0+TJPW{lQHZB%eC|ogrSCbv`1P<6y(Uj9=?Yw|qtc
zao*>!xkO-|NIvCgQbb?%C(pinY)~>;E9f~2CT{8{U&gk&XU;q*p;`#YWEW;LxGF%a
zv1bu^j1CGR?aMO5T)dDz#yghJT1>&fCTp0ri~Tt&#)v-nTE!*4R&Wb`1?_J6$3ewl
zji#xT2llorF4!GK*eS`2DZ!72Ham<eTP>17Qh}jcLMac;MbqSyBZ?p6OnSZ|`c%IN
zsdogCqjBV$LS&%vWHFd#Ev5i=S>t_S)|oF48%<EqN6%EgAK}!?O#i=4Vzd2VaiWZz
zl6_zRE`j4q)lgDNfe$N}dormf3GZ}R@7Qc*XgezkG|!`&d1AoWsgEOxl^IQyz{b*J
zg;{rn-Sz=r^+>5UMf;!C%;#5BiSy0~7jVZSk}9Eu{d3$9mcHqgJDb+g7}Pn{#k78=
z0`D<~C44BNK=o)=lr!5Rnh6EMM(=p(%mQC$eEj0Zb2hAA1-UCbO#0uvX?}NcmV}b`
z1;d)Y>oJ8;`m<~I?1T@0<lsS-3|KhRORl6V0Z_|p+7V)(+hN8yqtvU8g^G(KR<rX3
z_oG_V<e`mqegb;MF6dMn%51G4aUV)YELPM9by^TQQO7=!^<3C6d<8Y+X_9nDDpnOr
zIKmy&86WU0Mf-^BxJY4)=o^oXmu`C#9LQSJ(hWqqVpVqqutOd^l}i<)B`g~r&OxvY
zGBVK-+F}f3JKwcOPHS(u35ZxSc$s^1$c;gRd1^@;IYxW+r+I0DZCs;1@b$SL{L$L9
zWe2U$F_gH4QJ7~7F+kynr{cE>1Vnp&4Gyg^O)JXwoI6_W21b>xPPUdUM}ANWRzO$h
zcoh7$CHcSVue>1GsC`BGXYfcY31xK!KD)njdVH`c!4*OwKgmfn#_^Xha&R+K=Z4B^
z&`yg<rjdPjm=|qsVZ-e_>;)XKyFk0oz8Kpo;x$mAGpx;JC#Lp>rHj8kIS1{lQ$fF{
zg{B#UGq0~hmapZr9MfhOFFKlM?Ne3MqV?i7+F|7rm;PYB$M5eKL1GHX+I9nFiY#tt
zvnH2VeC!~CvtHt&`ouwpE!|=Gatu@t@J{@tl|{)tFjcTTlDxp>6;j6N^=G7<ci@El
z3~evw%o^t@jQsA4TiuSSWtUqsgW={L{xM}o4uO{W*)`4$w0Sl)$TxXZu2ZL_W|_d{
zZNCeXR8I9I2=yBR4->eq0EF2=7;@BUXnSEM$b#gzh|OM!x7^!95YDV+(?*7(M!#4@
z*?lvuUF`z)WgLrj$KU`TP)8KDr|;Fq=Inef{<4MxSJXkL1|KrKFNfVN7e5s-ALM6S
zak8lOo^a&?lnNCH#XuQ_s}07f2cbckrrw@yaY-TObzqhN%Na%p^lj`~j$tWRM;+j)
zk3|3_E`5&FJW~@c5hsxGl^gFuZligd#*@CBFz3Wb#jA~oAIDq~h(qFmjs?#<GHzb?
zpqG(FT+a7~-X2hP@KoqjQzf<6fv2MlC8nUK7Gg!$+beX;qOMNpq3QAOMUH*K0pALB
zWj-n4z1~K&QejF`i<>nMIMQN1fO9-^BO*le<YRqr+wn6r_Ptl=+2ukJ-~vY2I#!xs
zcye)c%jJ%jmFl0*j+OPShHAltg#@I8Nl{Te*6iN)xMH4oObEP+hhvB%CR*=lR<xP3
zC5s@XmAb)8I*H1t`YpyY`Xz8+g60BThrLXbair{xVRb1PBtFSs4*1KNU#ue!F81Q9
zbB8fjO9b$qym7%<SPh@uXTaY=!q430BJP59H$TS;|7+VeTAW)Cht_RHl=qMud|XeB
zMUu!U16>GDYEW`=gkMJc_{qfHf|aWzwjstHol~`hIH!&4XFN<u|255$F<TU?`TWEQ
z@k$f|rBCBCkx@y&qt*&<XX37|3m_yrzJ@6{a}Ua3Zb*-_owZ9Vq@2H|0=xDij~zg>
zuwV6Ro86;{!yh`QO95r+siZQN=6+@Uzd4m7?B>kK=1-B2nspyJGAZljMCYb?<P(oF
z=?xbxEoZw$3s20gRNg+<%hr2eCTu{s3q0tTLT7j|2O(54s^D>x%%WXsrjoVLguTU^
zxnoAIKu2bSgeHEW$lIYY=SYQg+zHxSK8(XM6CvpkCcf@baM?pVM1EwJ<b?lJD4A4L
z1RUO$<x!93WOzR}86G}?F;T>~<B?nCZJg#&^niwR8pXt+=ICa0l&0uYV>#DX6$*l>
z`qoDEDXf~PM^c1S*o^AeUcZgS(Vd<=Dlrdr6%S7{inQLABk(HL6jU9Zqd4e0;LB*K
z-4-~R7PBy-&l8@KfhC`>|1#i%-tbof=ajOfEoP_utpTRJ@~ahA{8H6vKFVD`(sbwr
z|H?qMkSC<P9=%rX+Ot;5JiaB*{o)|*Vz&=7O6Psv9Q~-Gyb%5JyMEI6lqYPkZ_9HZ
zfV{-ydBGOb?P42F{V0(2HetqiB!hu{U9weo$%C%2I|-g&7#NWL--e*$2uDb;%7qY@
z^S3hOb5(vQk%s(Fb~-byFOkg->7>(Yz5_Q1G+45(cT-V`GvHmWMTCMA+dSwzjwqyD
z_yom4gxsi7mJF7b8Lzo&nX0B6tAE6;saLMY)Psk%G7uW_3T!t$4<pmW(uM)yRTO5M
zJR$?63B>E1P#gEZndEVpRyr>;HP(ucp_d&Z;kID7EW#91eN?E=)}gfp_@)<+<Sc3c
zv_-}P-yi$(2wEXe&HBW^=>z^3y?5>CB>1N(^Q4Sn#1`N=!C>M<Mfmqf>0jYD#SIXc
zMjI^<wX=3k3v4iL-Un+i2aQE}z7AC@9AMk6?h8oVb7cRZoiG@oY|mocVKBO-CGxD1
zqWIQPp$Zxj3DFrSA3#G--aJ*(>mJ92f6-8=UIepST^kE}moAOJfI1pVZ4_VmkQ(dw
z-5n20HgUa!k&$1X4~WLg2Z5LTCbl4+p2lhq2W8btVVSXpbmkJ-m~%~Pr5S-9(MT1a
zeCw%iwU8EoF+9TA<c$D=cqPK$<(upk_-WNOv{8kkTKEot{v)SPX{k8FC-#%Er>Dmg
zVIgMjxHPt(qFbiQ$(b=hMHy0<{2|jJ>vEynK#;Mo>gK+-m+Y;>sv(r}wQh|mi@c@c
z(qs`Jl>^5Mr;>@|cmb#;mF2F_r0F~vrinb=3a1%D0-)4e=^pzBj|!eu)GcWJS5bC+
zcbQPQxN!eOpf-M=tR_nM@e-kC!fMBe!Zz<uS&O7lv7kqhsBeGoWBrF5P!5F|McX(|
zj!3<h(f7YAvbsP(Br+nu0EaWHYr=9OU@yIyekSlV*69$~OghnlPJX{53lOYiNH)LS
zc0C@rts1*6^<gnWA^T(X1}T&!$fBfh&7JQ;0w%3kBy%9jI0%7-MU0M<cK0ljo`Wh8
zsv6XgQs4JsGGf^Ret2Wm<+g4=FCAj{YejH9kO<bTT&t<<_ve@J8?%ezZOhDIf9ej8
zGrD_*2?-!DynRkw5EYa}jX@+wM|psi`Ola|mZ826SB+<6`rWL^&v?`KCgocx$T+_g
z$|?DLacbT>oylHJ3+6lY2G$jFN6WvhP&Dm77`L~04|WFOPr#E*th!BkTx^4dnsO*^
z=8v@Xs{^&wDg!D?JPOc?yvJ?M1+mJttgezjm(#Ix7Ylkz3@))dWf>`w^6GCP_VdjM
z20s#5*>2>9s1QC6o5ee|$q|V!9pcrBlxfDo3beqrFkB#4Sy!@ue1Uc>q^zHjJ-iWd
zV2|hxs7$!*nZZGoD3CVqObxSeKcfqY&&PEqwF)FMvW&?aR2oH?PxvS}z}7}SHKOD~
zl#3>*RT&lFE+SJ9{-Y)2f>Bq(yJ=DdBn~d1Gce}!(7*Ojy9fHecUJ6|&`_K#`QivV
z;QOi)qYn~3t0-%h?khr2iuxU54&J(fSD^(SJZBs!pR2o6^K@&L-i62<KA4F~S_dx<
zDr}RNEh@eQ9H?GFiI8dGTi(ifSeou@cFavOkX2?Tz}t0~%n_&a#tD)%L)*7#e=S|4
zQJ8_UIK2N0AO;H|_>4K)RP?G(Gq7uE_$1#Cebx#Yl5~yCLvmb*Y$)SA&G5PD6Z)m6
zxv2!#4>92@ssr>~a9u-ZrKA^-F>-56R@0p*c+7=ocf@M!w7QCON!SNQx#makFdYcm
z+OpK^FsiTRU`CPFB5JsMJ`auJ-6kB}G`a>(kvWSvDC1HxP=(dK6hMiQP4@;?beN^@
zy98a==H9}}fsvA!7v+8HjODt)LnS!7z>!!Xh_2Lr6P+WP4~Kr68mzdbW=(-${Gcf&
z-@^5`X(SO<NTvQn{|}#$Wzlthe{s8Ln6vMM=Oa~6)k^0itpv3z(5nj3xlH8R8uuA<
z&=gT%s|5Ey`z9+<J@1*`Kh6VUQ5R7x_VQnRY&I};*s-PudzoOdgED8ETSsJY<)A|f
zWaFK`7upn4T2N!<l~9#SQ1kzHnOz7gS|?VSR~#@8p!0}m<&5Fkl1_owpY8Y$jNa&c
z`QZyB7;Al--Rq8Vmu%!iz+7TYhkRte*81?@hVLVU3{@u#KRRLf%`A@jP4ExJH|I$d
z=OT!_ZAkQ5?d(!>F#oEEoZrwKd5#<jmmYD2<|UE5UCAOQhLv=76PKlvObM~Dv6OLL
zg@M*g&OO!nrT0usUi%k>shfA$S_=A2@H<EYQV6xB_MUs>pM+W&Q(3kU{2uxPz&Bkt
z*IEbZxQ_1Kkh}O(kc<EIvH68&bh~QK!V=$^K!;6rre)az_J61~)aT7JV?qV5o$REB
zM?%bGYbpY>jzQ`uB6A#T%WSU2&J_6618>a7rFu)a0>8tcRn2{0WA(peS@HvkU#u$o
zM4o|yXjc1TD`5GHr$?C?7GUF^ql}?KCA<-B-g(WLjFDs4Bn;>rX?><?BI!_O(#JaP
zP1G5c*c-pq;27lRgLo+NFiBxJ?8FxbfqKdhX^WR&p4g2X${Fk30%d(i_oF06HOvZS
zVamCaI06og{Uz$h>mzfWf2p8fukaKFhxJ)gn^Hk$5z8~K4NV-is!cd=2{;SD2$VA~
zzAZM}kn6=L4};iOuN(yKaijMGnnslPu%K2m<(FXGv#*;nu)(bsKSEcL|Iv)E3HQ8Q
zo8}6?er4Z;-h|(WmBXzsev)Hu`50*#9?y%+l>)i@xKyXw0!G6nW)nK`odvJ}n0*5o
zjHX!44FSe)ogxSvvn)Q8xKY*JU&T5m%jvPAxsoVb_@;0G!odq<j~zu`ne1$_T4VzJ
z2%cZGBf4Oak$P$PXJ;6H0JKjp1RY2DRYw?#jFLpkVMw*M+DD^qdG%GLbo6?oBiavJ
zkGqfw6b}E#ob0U4?`Q7mqz0~A-NEU(asZEEx$K$3GVkSFjWVV09755!i~Cu(d<{&-
z1d36(l%}?={bR-I6nRo42~sx5TXwG+AINNy?g*_dkA1?F#%ZSY&+B^2m^^sZK4pDh
z<yck-u-13Emv2d^ZhT0LX41Rrsbwi<7Od^=cSDqHnsy$xvMTj%Ls&f{H}Nb{|7g~e
z3J>}giX8mh)K|jK($ZF9B_zm1o?fE1_H?2L8u}8cQV`Lg)u?EEzjm_1p>K{H*$ZS3
z^-56-L}eI*xM~G%1@ILh`@}W{CP-Bd(io+*8De3IxIG6wE2&M@D6ha$J8wkWZPa(#
zJdtG!H<{iJ<`#k_5DJ!r(F;5YI2}Xiq^+k?E8Z<@!cC5oYZlm7hO;Z8RlGMOD!f-h
zZx)n$5ITNq4;lGDNOE3WlUU}kF(Y=9&BP{>NSxO7Z)W**7cOQ*pFl64=6b{G*wvp{
z=YmFw0R)T?JZfr1Scg%6rvJ1pnv$sZ<wE%8nxglBzBC%>_;aKcTCF;g@yhuJ%oJ9#
z9j;S_Qrt1(#q+fRF|&HAI3gg@aqI`~>ZKd6KShFaNps%Va+(->^<<`p%4dj2q0;2O
z4JLC;y8z@yziyN;HRo14KL45jK#vEe*z8L!U+0D#@%TXJa4e|)nkvJjzRY^RLhj|C
zfxTTcz!IkiabXZDvZEaNc7CV9sV6Hdsp?#vkw<1NGamx*(x>kYH05Ll4TQssUZthp
z2sl4q0y+WCIM%9K3kaznvgP@S=#uZqK0qcXqm2eVA_9#$@8aLSRi7zYnTpZKD1NP#
z8qlfTN|1d?UQ@0XQu3o-D3w*l2(=X%Vzw%z&%q2^&woBl8$D^7iHvn$2qiE@?vwaE
z_wIPdekuXzetuY&pP#GaR)}pw6tT?5#}2nb^IVYFrU844Z~igE^RC@!)aaSco@%E{
zi+?@brQ?OJQvRP!C9|kEbNoR^fl@I$eoXFahcp=w?22G_ZW;?fQEKTF7l#qu8qn5|
zU3ecjmI}8`xzEkI#Lz0cI%bNcDVd1>h32)Qf4__|&^^}d8+QabCupqvfURP^ZhVs^
ziHN|+w#&U@MQBSaX#Q^5?)n82@<FB$9g{~mggk4`cK)7*|IhHdyx2F!_k$(Q3`{Eq
zp0$CL#!dK8`Ab$28n}z4My}%gfmdjYK!dA*lQ^$!ptM`1w9&2U2b|IMn#U$vW};IL
z<kilV-;^?UMsC`@bdeDlfK4hfpFZkfkGEDxF#I&~7i4TPT{0&YUjTShEr<3ZB!jji
z=WgdPpu3rA(L8jfe~H`R?R?X52B#F_hW8!p6LmwUv`f#mcq+WuFnzE^@co+1#bXr~
z9Xt+VJa7lglYQ!+g!*Ak3OB4`@5b32oTeB<i~4QI)(DZ78jCh31S}s=zd(_H<e`JG
zZUl5_z-kk5lhDD=PBFkEi+FD$FW1n<hWOojXk>JouG^=?g`XrtM@5guN+s_J;f*eJ
zpt{M5Ay!JE(+LD>&SS=@92d{3LM(bWPC;g)x-z`rxY0x(oq!0wJNHPIf$gF=MhtPZ
z)XEnWECqzG2Iz6;;ujGA0ZL1E!rRSX(!HShgV|G<Sb?54g7k&8N936~9e4dv<ZG+o
z-*q>^pu-@c$n*FM8+shN9!349-V1j&AL5eC?7UL3=cjPE?FxnZ8nXR?^7`qdHfh!{
zr`syEuTVe{^UDy}BUj@jy1PiV0@ACj+0==T5`Z(y4%s%GO?I+e$}z9eI%q|>nQltk
z&-T!2BRMZzNKh+U7K4RxW&wV8A7@Jg=m^EtrHBB<J)bj>n>QXl!xn^!y=2j&CL?i{
zVA#9X3{S^z6?bAf7$p2!VLF^w$OgqD$rl=@(72xll#SgSyd8&1Uwr*Y*+oQ;+61M>
zR|gGKhhtw=?19wgAqsuidJs3y$SLsiC?m1KVc!VwtZ3fGfllrjeu>}m)21s$8x4R_
z?eFQ`+5#76VXF|^s|)F(U5f=!^~~6+9`*T2YwYdH{%ZxSw~9mPB*f3EO_>sN%B!gB
z8ijL>_xej>hIDJ7wkWOf>fk8B=i35XU^nBWo8Xv+sj7s1TokNi6b|!3h4ifX0d`!u
z{@~Dw%x84toNYp(iZHy|_QNnOa?S{3Z9Ztw^3d#^;H+}id$xu`TzL{u4g*wq;%+>X
zJ|=!jE<=`jp89Bv^0^it2LL=YHvKW1Khyb4RbRG`WOdZ_*;;$Ua(jcKgoe?2Ng`lu
zY6Q1J&GAJ*TY&CFZPWIi;_+iM5t>NpOFj90B*fu>JcLEwo{{r*Y+95G%PnBywQa<?
z<Pek*^xJ6v?<sG6f@MI>ML&El{tb-a^y_yBc))hPfZE~6F#}OQh(ba!2mb)h6n8!G
zgHFALhdCCzWV_yo&#~q#s6PEPQ|iB{vb$jcuS|C(9m}AA-@}P%>$)`^w4`eZlB)h^
z&DU*A$8pGxP8^RGbMm-cQi7GFLmBR)lP1XpSqQ;Xu;`$T{&95^AJ{orqC1b(wZz+8
zWZ2Ve<~0%M!1QOM(sOQ~OBRUDN-W(w0J7k&+@;a1ua9Kh{S|ba3mzKBLPh4|QEMd$
zi;#4efk2J=zMoXPk!ZU4vKv7<|L}g$L2_1%LGD;oIMv9Ml5<KPhfbO0+!~+rg_yK;
zAIdi2n$x_o9t~uPzL=?k=U*;ma)ZFa%BBN$+nUdWX#{wnX~z+pu01ry4!z>D-uFe+
zIE{5(@K(2+#i`@3;MMq$L_RbgED-gT4c>GfT~uu4|HylYbkuo_^e4c(gNpZs5xP-5
zoG@`5yrY&ghaSLIM{z1s2HxNxj@}ehk_7w++ZNQp#OtiOHA!Mb4K)pm?+617ieKa<
z|Ko^+0YPcu3&3yeVb~PDb{|XSEZZ6&<t8N$@`)UbtZXRq6jc_pMMO>pd3*-VGeyKb
zt-REc^<{!mn3shrW^{}?TsLI+#NBv{9O9Cfj|+n$%N|XCCCcE0#}S4Hfe-)-8?MbN
z!)iLGR`sh8(c#zG{h_D1dO%{{!1|QTgO{mSiKb_rzqI&+fn~~ii{p!#L{eqs&uR%Z
zg@TP`jc^=H-58x58YtuLi0_sox^MM~_0>PST&kz4szgW9dOwh@P*!7{F2Sc~m)K3`
z|5j^vf!Sr05p`8D*01P0!2AD9KnTs5$_LC8>+HB_*z%G(O_m_CUI{%97wgchNwC@&
zAzt2vhtQJL3sC<Cv<So=91DV*Gbf_wPWgI&QL00g*3`hSAzZF51I-U1kA@7}>rZzt
zPMpbO(9RlJ|NYE62R*SYCl^cJ4P-KcmmnBQ`%<{iWhBqQVSX%{6a7<cJf^Z898UJG
z+swJj7gLOGDui#wXLX?3eT6vp*TZ=BXQ59BsdJiidd-p8ZzmO34^*q>wK9*AfIcxH
zHw?*{-W+#Ew_+a}CJ`rG3z}H%aAvV=gZ^C-X%b66@l|F()_jBtri(R>t`~QAL9hFu
z6vTRt&ldqedxKewxtFaa9|ykw+aek1CKv0GZN4n_ZO9$o(d8;wJv=UQtzCXfo+5nU
zEcESPp?kD}Nun!?oq%CqQA9XoL`orNi?;jgmV(3Qb_hZN!~J=RmW54x{dd%igy&eu
zJEH$%Hn`2GXRiN9>_t@dGVA`1A9tDIt76{k(v@Z*O>qRHXqZ0AG8dggt|7%1%X$*b
zM@Ha`5ySnvlmy6~XjXVU9AtC6FssV2L$0FE8=}$3%nT&R1qMv}jYZAT8okemLI3ga
zg69N9ge4gI|0ihBwrF;D@QZT?kFv2%(!|~3d|k#;ua-w8<yGZBDk|ay<(l-8yXifd
z-?M~L@3(F7BH3o`{*&t?;L>yO!iNC<w2}-)C7#<-l|V)+KhY_5VWBS&EZ30_QB;W&
zOYMCwdijl7h-Of!Bj)<|%m=^aVPP|fv6wMO%GcGQ-jEwf`NAuYBlM_o4glR0HA|8_
z2*)VIj<CtE``N;6T7i&%C^ML`_;YkxxlwH;u%d2$Ka8FBz@FC0kVfl^GpH$5Zne_2
z5=HlQ<_jJ(gb@kDKaGDh6lzvrt`YHQ%aC-p>A+VWW)#iuwU4XnH677={|+we=f#RM
zMMf6}wb3hX8!At-7Q2LlqcOFNmNWsV-9f?OP~;(OxC>At>Ii)gru?Qnv<hNp$HAkj
zsY@#Q`mXm#R=*F}z+YwT@lp)4Rsx$O-6})7!DESTW-fVa?_hYL;(4Cjf|BouTmtGj
z<}ustAJf!j(E=5^u$nFygpEJ?ezyShVGqQgs=09+Hq{50aIKKLS&X;L(8o*`s9+G#
zRp!^T`F|(Mc6sP%-HSuWcw+PE-q17BLiTfCML4(5P_|*R<Vzc&*nA*+BaE{Hp__Y!
zypcITN%64W8^QCP;cQR*I**V2yYZg?=uRMDQ5DU1*-5w{tq%4q7=ra|7HSFzioB~B
z>@Qi4Rx6Y(ZVNrL9i2>pbt??R>L^Tc;a>T9TMUZIa|!XNb{FRqR?F;YY@}!902Uw+
zR!;Gw>qe`k+}lu{E-krVkG}CAeicN0)Z%!S@l|Xc+PyGirCOrfBt;>X`O`3;-4t`Z
z+mqwezio+83uyKWarLH%?h|F;t3BQDA97JP@&)+2MkQa3gzb{3)X#!1d=S?X=>#og
z#5**MlUUOQLj-y{*GT=;xzVQ?&nw(y6)4u!s(;RMrNF29Mfr~gp}rhkjAE3DWmt?!
z1CNk!GGRv-_D8YaPXu{quSj|l(N)bmcpAt^)(^XMWrh79kNV)G$veLo3sU=*$ggP-
zpmKZLH2#`f^<HpqK&-70=H5RP>Dj|pghhoRzaUZSO#ej`<#DLjv`}rQ`Lv}h9hq@M
z`oHG1Sw5;>k@Y}RGtJ9MD{1$H8EaFIl=~cob~3ZfPl*50Zm?#DE*AGdbP@4_0N)g5
zRP+UIi6$JbAo?hhI)_Wp#T?!z5O?rLp#hyH@oj_urq~a<6r`D2o85<r)9}q<%(n-N
zw=Ct6JEPknd_G&v3Z?h;`&=+HwQJK7yyl(WyS#o7cesv*6X}zH%!(;K|Gtwi!qqFP
zloweO+HQt566gS)ejQ;Hk_<~NFa$}f?M7mYW*rc@CCf;)@WU=cF1wap0Vl;y%2QDD
zN!-<8Db}SPm!kkkVE_!9#RQEFLGEq1#xqdRJ<PjoI|ZUM06Pr6wcm*3HQI$O6KG(O
z_#7otih0IHK@W2YGX&Z$^6GM==jP?BqdOKAMoicdiT}C>`~`u`@^DdzEsVq|hyFA)
z4g{5fS}%I1)lX3HB}(vej(@G3BN7K#j+u!{+=3+THGj{FGqD5h#EbXIhZj<6iKxNg
z+NLk~P(*@sjVKJ1+8V;*Jssz<qSCL-S4w!u<I&sw3<+ho4v`C~T41Y3d%OA<@N58-
z7gC(x`k#}g5WF8n$$u<F5oBm?#5^|nf1>#F>Ir)2MBAw<Wc-U7xnm_MC4)eVe&snZ
zD58}gAQD5@Lb(tC52bNeVptJ?c~@%a70=88ls2$de&hy2SRq2V1AZn$FGWqv9;=%Z
z*dM`IC6jp-u3f9LQ~rgTRs)+6d}viKg+L_si&KH!{XAuQ0s|I!Kw@q2!1|k`gOk6k
zI_Wk-wDeY5_A$pWi{f9U$8&PQW*X7E{A$2Gk9EYb83FY0ebo49x2ieMK38j;LbY6Y
zI)40s80D8uh5|I{n8^=Ecu-uCx;UGdsLsDb5TOFGcV6wiM}qc##)iCsNMVVpoFKW$
z;qOlnAoi8e_dyC$w=vfDsQq5CJLVU2>wXHJ&}2DfOj`}My&Bv?GBod<pA-~OK3|2^
zIq&~?_yyM?{m_T5#uy%NEe`&#ea);pb2Ta|KJ|DFaRf8#BR7hcS^~DOwZsw}@_F&I
z49V0YUOc+OFSD63+(@;0ZNS)~%W@wz?OU<s^j%rA&=2;FfV9)^@k~++_fH_VLaNG?
zZNw752y*EH2*zy2{+0#_Go*6?9|==selY7=nmn4KxJgkg!p{{vKwco=VMPNOh8aoQ
z53+8q{2z^Q9_u8D1g+U${8fQJt{6ytLVoDTZd0^-00WPbPF`|ngSDxs>1zTk#FErd
z9NXCg-MP?Rrm@J7$*x#(p++}GM)GQs72cRZltG@)0%yMWRLr`Fa*>{r`r(`^b4N=V
zNWaBI;dPO){1JxdsrZPfL0eMm0}(f-p{Vh<>wU5Kr`N@9k386J60?`h1mkx19bY}f
zH?reD#jn!`dDDI}p5;lM#eDF%m9V&oOiaHE>W~xF;adbqzrJ4as^&l8WMy7T7Joc9
zQa0&A|Bk7mH21^pvy@6IPOU+z2Hj}9k^_&;1D99Ba_cJXvnrCk$Js<NT&F>&XDVgX
z{h^3Q1fbCUcF1Dl7q0_R#U`b@r&3)6bfH|zuG|^V``U2u`7GP3NRB_6QGqNyganL@
z5i;Yu@VeUWW?QQ~KUaIYdtJw8W||ZROQ4FRA9y^O?Jx#xck}Scc0&1j!OWIN{l&Xl
zuBdlIt6>2*a0yH*l04i51l`$BRhl{A>2Ag!WkI8_vxk&r=QjRnrrl=5r0`aUVk=kY
z9TS`zy8%SEbbY}mKA`F%B&pZv+X!K#wi>@J?AQR+UQJ_M3j=fdJW^qb!9Bx2y22Lz
zRB}d{Up~dfio)$CulOqloPK;yV9gO{B4hGxhr7{&N~CFMnnQYrJVQGUmtEL;v7k#l
z7)Oy`#546i{mHo?9&`T@m@))%g_Jpa&-fp<O{`L#&Dw|1FYfX`<45QHtpA_eT(5XY
z-}=#I&yyq4yy=BTOZ@$@*|Cp<$nC2}0e1e+?5lw`y@p10p4-S_@8(a9r$Ba&8!XEV
zY6`iolZ`rDHYhgWGTP%L<wiaaaeUfydQG0ce;QwjsHx@Mu?!RDU8_*=dqLbLTnebO
zdUaJ~(Ng{GGWa?)dUJ@_$aZ-DCA-IekPRtIBuVqw5sy8MOvi~INDj3xlFhZ<GLebP
z1UW3EUAd|4HLciQcBYlPIms#3V~WXA^kvGj55j3EhEgqSH#3ssS{(&h4-ZpP0_4<p
z@)z2m)-yPIOQZ+M7o%J#qPiBf<z94~T1c_oce<jzM}&l5n$!i|-7=U(AjRM!xYXS}
z8M_?)(2bRya7v-GN(qWf5B-}2?yZZfAs4%Wa|D2Fkrjd(K2X9lCm{od^n%rGF9A$+
zJcO4iL06LU#=TrnlaC@{s&Undl+l`-^bXeT)+n-*u#P>2Xa)GBXSC`RIj=TQOpWrz
z3w@5AMJU!AJ5i-RyBDZk5Sm>n-eF|&u@GxwAj3wx7B}<~7sXFf<zp+-Kf}nMY0TU{
zz4`si6<VEGo0@j)TfZ(n+|Cx};|@wASKA*_m$t!dc$aOsKtzY8YY9ZbD*`|@c8K3{
zJg%LLyVG?y3FpC24>9DHwPvK-4s6H;>8c4njSj(k&s3nL<ohoZ`f^JOgY+EzCsf%X
zb6at8qrLR=n2aNN%Dd<F&>;dcq|I0h8``*D;&}ZV|C77{*9PvuyE4?=_QR5ZPA4qG
zerKwLmhehjkA+UhB0?jt@*s2`&cjZ8){nj~7~bZj62;of#V*J{T$9k6{9zHMIALGc
zBw%T+<8@sv-IJ5M%?PL+A}rLfKk{p}Bkbs*M!3uFO5a=62Fgq0O89Zrd~|%qN`b4$
zX1FDhDo<%CziMK*ao&w3T~-QrY=^YzIL`{=E0p7$b_s70qKV2NZw~suos7;eFFF-o
z@&u1ByE6|XYG_M*lwTvkX7mG8XZ}PjTl}0gQ9Hlt91j6Umh+bfVp+VG{qGFeaTLFV
zA_xS>%3i@!CNyo*nVSKz;m7G3@uCfCv~4(Y@5@LzyoyKRY8%Hj^aO^Uhx#&T>ArmO
z22>z#<5f2kI8)_sb11=8(h7Ilkme9|2T~y)->Bs(Yu#0*e<JDE!KSi@s=g~a{w1z%
zzXzdEUa-;iWKpC1l@OQ$S`!|SX4Gy@Wh+M9r~y^W?Ae@?R$oAzQ>!k@3_idVH9I4|
zn;xSbbiC9x;R>_dL5gmxr|$M$XL7MxAO!^q&etK&(@hXxqP+@Ba}$oaa`+P<G>>p<
z5v!7nJDvNo%y4|VKq{nmukukr+=%L5kS%-Ezg|Qlb4$8;<Ws6~ku&McFn}+i9%i;P
z-5GqhEnaP}-<Tjye_DANM5w_%2Q~^4w8;kfo^`E#5QS>;s*`nd6WpA^Se2bB&f#hy
z?~9j_BH8Z-6X}fg(hibk!Lpmyskb$}(USp0G#Ea2Z|E;Qz?7I9MC|ruv_e+~tnxXF
zr(X3!pWMzO(C1s8Iy@>|T^isj1Zw%{s+AkTsFn4!9j)_?Z$vGWSvG&G9$#(?v|p->
zN4lzp-qA~fe2}fewQ|FQ4VSI^`(>i%oX_(o5m>%Jwe3D&a7Ta~4&A>+YmM5B1a%>x
zr>>i>^nv=0*=SOiA#_HhX;OjBw-}3SI5R6Jchax;xwtEeH~rIWf!@}kVF+so)PTx^
zQWs8`KoTx><-^cku$;~bS?((ybu*MC2JnXljr4zdI%^_TKJk(wyF!c2NRSlW0|2zH
zA<Malv7LEV9%aNi%UQn8-Do8Ft%nzVwEA#9%WYo;KvZdfn3wC^(2yBio++}!kqJs1
zJ_Pd1iKL1~*Rme;l5dc3LLWyA$IBn~+Ix>|kyL~WOPH2LrUlkW0Dzqj+&nYiRl%eB
zsn1atdFAA1>atc^N1}32{c#m}M@hlmTN=ml^b1o-`)tsdZ;eJ0G2IJ8Q%nV~;&~@#
z40|t}f2zvieyv}CK77ib>_>1P$T$Op>Cp-0G;07AeY=oE%F}n6Z32yeB_Xl#5zN}w
zlvDQq9!wZTt}f%Gm-J~qvM83q)>XFO5xfpxnt(k%Y9h$Z&ZoAEj!Cm@!Kd|xW18Bk
z)*D;2jpWyZ^i|~ij_a0QKsGv3?rM(oIK|Q_tzudfPsT2RdWeexGS?fgCg{3elc~@B
zaH#&VmH4*WlxW0wYkTNrc9?%6s2uS&IwZ|b$ZQx(+`aRZew|@U4(g_6_hWwX$qFC&
zJ%#068Q-QP?Dy&ZCb=H@7@6~sG!bT-&uSfi0e47uo_1E<$PeZ`j<De-({HGU00(QQ
zxu-(!5A4DJSw18eBpwMNsV2<Oo?9}tNLqEf#nD?|nY%@YFDUO>EU`oXVaxP;r1?rY
zNSAEByKH?CnH4Tns4^t%F<gsfX)ZnZc1&GfuDolBx$c380RKM#z%cJ6Qc=HfFH5gm
zW4ey(3|Lr5=#&3ub&zglwR=>k{?&``Q2VbMhAs7p%q9X^CTp?3C^(xHV^$^(r`c&-
z`GMYF9SEhReh7Te<y_DJ-xa^1RzCp&U``l7K%{<Sux%y7e&AsZ(!j4-^tf*>RaQe>
z`i2x_gZJc$>&z8=k@QBJL!TVxCpN1UG50|CZK`An`z>s@<efv~nJLtze)A$U;uz)`
zl7&rZe-($%djZPzV&0OdnfJmkf-6^uxSiVl4^JL_4&(_ml^%*d*uG$`RBpBG0F4WB
zIzz`|HS^MM{`aK|=A@_G;me&T`bVKcAai4Od$LX5Uqe?I>^9_x%00Rv0c8aQR~3t~
zxpwsLu%yIy^dBf4AUolLjm*q>bj-RhMC2O+oIpuoOUFQC3rU<<TRoS*>L0P~;?stN
zAxHxB?AC)&;>{Uo6NJ}P$7h&M$!r6BK$tUN$@GN8NXo%SH_4~X{3JVHO+Q~vUG%%<
z$8FrJne}n_1B-+xtk?1b*S6RVh7-*WJq1A4qLVHeq)l4$r)hu!t0}V}^<g)U8sviO
zdUPA*O=*@@1%ud=oX*UFq)&L~K8hGo2XD2?vvj$BvM{Y<ppH+1JZ9l2TT<;ZgK9s5
zM%?|k&8mWytLK<uSN<v;>z;ijd9R3c9o~%I5a#QFEkWZm3WSzE%9dZ!LW;s{yTU*`
z{))hqy2zGrs!dtg53^myy+B_4?tY)ZR`y3P@rJ*SYWNBK<TDQDHXNJGpI4MUBRZK=
z`ORR4Vhzn{;FU0ZKJTzKJgws6csr<r#aDb%3>MN)4@WijE(kWt+?kQ&NXFD>N3l)@
z5k+Yr{u~=De)v9QXw0(jRrk}TX{<&eH5?w|0+;M`_Be=8&p~WyyIv9Bz+Z%$R5{9?
zv!M&^Mqmb(C1J+W%dwnbQqrnGD)A#UEF2WC$Mr_wz_<$<5a9^pNH{=Tf93U9m|?A{
z++Vi}QKcOTS*UC$np6Lwz#Pl8cp2=vY=CY1I^V81i<+!&(IaSl8Fo~K6a!{&0YJqV
zawJ*?a<ALIT0NEv9w1{uJn^6*yabDKXVfmkLi5UfpRi5J<iSBvoYhG5tf5U+lUZ+!
z9zj(F#hvkKwKpNC7{nmZC!g%c&pV7jr>CS*ZBjnO>^Fefz&^k<vlI5Hr6WjrFVC|U
za(`%F=Pzqb-pqpRyMI3~TY^KinlQKN2DeO4Q9JUOzI(#5jb;>LXz56xj#Jp%dvcLy
z5+9wwt!C<-ZEhqe8zaeSHal83R62dq`(Ok&H7;yt10fvRd+2oQ-E614f+ThXfW3Ih
zcEFZ41@|%}DYjl{>Ro4>MCf<g_#R5@=;$HGCSo_?9eP@m1j%#Pb`##7%ur@^zJO)b
zrCFnT97V>Fg8xj{?BQOZ0uz~TZ4|SDPL0)Yd}}CpG4uVgATslafb)EU&rKQ2bh&?<
ziZrkISAvKSBMdr9gXgj`Pwb;j*oQl0t>KZ!?DlTOLg&jnHj09MoYC8DkcurEnDbpn
zn@wvJPWBI_mg*43nlg|R_3F8meD=WYJR}rCe(d~Cx3pR@uOXdxtvL<>N{5Z}_Vqwt
zDzWe<TmHk6k+0(?!dMP3D@Efi0w5la>z;Zy>0VBHdu96igyUBGpV_oV^Cc)46RC)>
zSL-hpyXKCLr`_9un%|`1yp^~oEd9Q0wa3V!FlqZ4jzKOg{~!hh7@8d`xy?nk9dFWr
zI-IZIeI|d>mT3CAJ^YxA>f<hRR3%9aX|L`2dny^m8&N*^BrK8}wzrRolO*mvSv>IU
zyba@s65_~xwfS+Nr*r%1cCIT~51|#hfNU5K2E-YghlbB3?>@x%An~Lq0(@6^O|`Em
zc}%Wtxo54%C2ewIn`J(zuER#JcbD9Q0qL93-T!tQEZ~PNqpIt&w>~<)yaM*R-S=AM
zD`ED!!6mI9I3rVV&VV(qp3^*Xmg|D*HMDTTa@X3Jijyl){DFs_H$g+SxsFbd^A+&+
zKGX=8g6%xctNKzBgtu{Ag?fcbX$atQ#sa1SOPm4v69-?eN}n*Z-3`3RttbJ|tAJKV
zySl}C(c_$HYD^^h!jbg2I*1mFlVwQo@v!+5Sld$^pD@kxmdbh6fyg)!E970@hJO;3
zKi2@-Ay`@G7~cYs_kvv<aHvZ1Go%;Lh3^mcSMVh$jwYgh#HgJ&>YK?5zyn;#=2l2^
z8)KdEMd*dtTG@RwgE$qU04Ux2UN!p6t>sdF@^Y5h3QMBi5K`bMYL6}gOA5kXY7r^^
zThMC-<z=)gLPTsZYAC)F@SLSC;e{-9seNR39c=5bxyydmTUo+Y{Z;v{;oT2Tw+dsv
zhb`nT3q`}4wBlr_A{ZSX&IaO6tWiJMHZwOZS6!`@iqj9>(^SV?7J2$nLT*siyT(P@
zw*$?Xje~Y&*_Nq>taj9vZEr!52nIyg&kJz}9{unSjo*XDDNz1}fcrwCs6*De)mhd{
z=R`LGUZR?{7U#CksKPA3^ye@P|Kth4P9bq0#(1y2tOX;PN5j)w>BLYw*NK+WBGwRd
zb_ySxdAWJ=1cEz6>_fo-T$JY?_4db&(KZ+HHZbUx6}#YP^LJ8|xF=ydmpl^WY}|rE
z`B@@uVNOM6vYV)(IEL1}ClTd@0&)3ehD(~rcS(^%3))Z@LUFS&P0F}?raR39Zorha
zt}hGwNbrg5+H8!adnf2WRcO;o9<rVM@bclDvjL#Zg$dKE|GQHM@aZ89<i|2;s8)v}
z0x)KpLD}udrY6=f2M(lX%@KP+;T6kf2j!S^&*_+|cL;1?YswNQAhI*O)>*jj>PeK`
zz|5qT&9vd^tan|J-IQocc25A6Qr`(8b*V{qZ)$!yW%E^T50B42RtJUCRXiv<!=C36
zK9p(Nx8^zhjrmeRN0=c|)ovG($H))CJA-|Vn$+D>A``#-m{{5U%&x+RW+f%($Xwn{
zHO}HEE0y1Opd!fba3Mp&4+jKb(!vMliL`pej1s+Z?5<n5a0cAA<jJk-K?gVoo*v%!
z^z|>NIMivcqhafqVUS*5Eb{9JpdR;ghk>*2Siv1xErnKCiV+mE1K~#)qS2*c@f@;Q
zctisNQ-m6^v6JjiemeZFC@~4iW%dJh%iWR@<|3Tg<)9W2pSAO?6xyGP+129I!^t`y
zqDuaz<EDtHa!~jexH9$8M+<hmfnS}WBz?KPv%B0OHxjtCt6XJl@jx1PSMqw17^bO(
zM^941sXI5a3MkI~U+-?-W0ygndC4@BKz34!m@%s<*pEVwMYyKK&Yxu2?xHU%;5wsB
ztZ4s=jUpQoSstgi?A^I2oMZ6G1;Y<B`*-RcJ$s%r{ztsRhe?L3je{R~O?85PwW4yj
zt)G?_>>Q-!CAz?iw$ImuM?Hb06{<J2?1CA?V(M9u;mucUs1Sbkw>&lF%*<gCP=O_9
zEh59pK^#2#!D1Z7a8CnuIO{eigwE}{#e-L%VyICjEFn#WJ|1*y3htPhp!5%)neoGG
zhBie0rd)W=!oC-YkS_XqT4HHBcA?V@g<D|(kKKCC#76%n2iT7AmLe+&Cl(E=>(uU%
z@?kqJao@l(Dz4auc)MEpm!=ht{Hq@XAsk4h$rONs4S^A?*$MbVeFHD-7uBwEry}pB
zq&cmzJc;!S57s<@c^wmvcxm@a^slb~r#Y%c^70kg-H~dhVP$w0!R%btN~F870coE{
zyl14Ez}mNdT6ts(+fq(5%r#MHkB{D177_Uy`;J9;wW*k2;1|3Ogwv`y5`tf5%T8@O
zb{7~`C4l5Msxg087{Sgmt6!7#V71|?h=|a?cjkZYnQtReSkwI?@7D-cBTEXNNb=yr
zH7UEbLx&oL#)3<w+=E-Na#!);=#3bT5gHDV%X;1GbQ~+;3u4w&-E)y*Z<76%5<oFZ
zk0HB15GR>%hKv$BS`yBk_Z6x|<2$5}2+rs0?SQpo3wJduRpXKJ+kSQ^)Yg>EboK26
z<23Rto_b(U8@zU-sz7uslSb+I%d$>_0|eV0;qf&z9!Q$B-!CcWqQ`j2vdp=1P1YL*
zZ&Wh2E@C(ypT+U{pHzYnfbm-GTauLPFg088>ExpqXu#gq5%s8VXzj*l^=C_HY4BrS
z6ZjXNc<E%e4LNrQ;pokX3_e8_oRY}|3T=)9IUMhmx3eA3<24)lxFDEy?$u!W>U{nF
zXTCqz2~VZ7iGn&33trRZHKeL%u8l#fl`5{h+e^%^=2MJXc+~PieA0dBfT0K{{&P^u
z?8fcWL3O%N^Zh?>8$dIZ4rumLJ+C+1*1I=#qiXA~VO&3LC}R4qIzjB_9(#Gx(?tM!
zV0N-bOiDNJZj$`TmFZjP41@E#g6@Fx>w$dKx?n)$^{jjx{cq;1AaHW^@r^~naZ~E<
z&zf0`qL-S$NIS{G4p&O3*cL8ohlYb3IIe92Fm|rhctEnSJO>X&Q<%?p5cNNZ<b}tE
z(jY&Z0btnwk}G1d52cW|SW?1k#PxWlIJpd?!bje;y!ppXLF|?tpK(6FPbtM7iAcUK
zECia%-%E)RJHyE!Ml1TC>OXCk_)Iu}8IWs!f*Qh9Za17yRF!+M@?l|GzqHL%_WFJf
zlpks29p($ZCtKXRegTJ5ois&iE_pusKaR%&*2NUgvmjN<L#vdzkV3vX;v8o{119__
zJp2Xfpc1DiCKJeMqBDeXQYW`qx<KpLS%4xoo8)1Q*hrjt6yDsKu8>bFlsB~;Vj7CV
z57|Rls$7H0y5uaZV(r@e(V>-<SI@Tn12O*dZyD~{d&hP^*h!rP-tP&`O%;kvK|rO3
zAcp|+qoM;uPtQhbp3$cr8c&D~J;IN!M%yBun21hRMDP<qUQDpaQhZj2<H$+}v%8CE
z#58NNq(MX?RD1At3}MGxGui4|Cr=f(;l$jLxNat%@~QE=M*e(p5o|%DYd#k|J9?Bz
z%tQZjK#JF3a8tzJJgaw_nVD7H<t1Y&%k=h>vpC{7&fGG!MA(4VdR{|5s0E>jQQt4&
z$y{`_Q4bhBT=MhXx%=Hh@wE;hd8AZ10!N2_=4_VsH1cFerKs+_^`AT0@kAieAX_I?
zyT~VzfuWBODa2RS><1qzJu=k6mFFJ|bVr`D)KV<&4zK(r>m)?eKTF0P=LCf!>Z#3>
zZcEP`#(|Yw0IMErdf-oiW8oWZnIMGMKeHj}!~(m#R+Cpy1*p$6Y;T_P2<*pCLT}na
zT*Npvpkh34cFXneu5AvA)axl@bbaY-WuJ~pgVCGll@><VsleSeN_9^-kS~(3GJK^m
zq<Pp@o0xaFxOC5HvEJV2^5ohE+Qv@ub6cx@HhYeWJJx9rYX}R%nuoFffx9p;!FHNa
zJYW^u7Gf>R+ib>P(e~sE?*FOsy4Rda{-q`f!#ti*MuGt6VYg$cHmqMEMn}AcibvT!
zPB!*8>3X1_>=u*B-Bu%7AoyGmZbN<-7$vvf0IV8M2Pz?p1b%)c3Z}_{?)RTjc0>#8
zIqaU8^b?l$l3_y+GmV1}-DE__c0})^1cpr6F`0=q^ys+?!yLPm*7D65F&AuM{u<8r
z_7wlFx<hsWf{Ki<!%wmRLcC!}pJI%9HI<?NB|8Tbjj<&=H!>!otIWTr<x9rt4S9av
z*kt7BJpw{62ks;CmsV6+S6{f?*^Qp|d0)_#q-cNBPt8Tuarp9#NJ}JR$Hu(Qy~l#d
zJ`pnR^h^uh)Eu9}Q|Y@%q3|R&=106|IHU*<=R*LK+2G?f{&KatvggQ%+?q9+xP)uw
zn$vxqr7;RTs9;O=kWY~_!vT%ojpgnzyb~Td0X$lUKj}Xf`OQ`rcJ{ltOwSshlT}&Z
z><*;pewRD-CJtOT@r;UlTg_;ZeZ(I$SPO*%;E&Iwwz1xwt8!7v)XmHDhDot3NcD;@
z3eWFAF%+F^e5O*AA|@B0E<G>Kjpa*p+4m=VsmV+C+Grpy*^wn|mQeBC*cx;H!Fe<j
zM^bb_JV_#JuIf_#hhhOF;ej1s|5{M`fs?V%Kludc44ei1j%$n8y^pWXh6`HnGkK^E
z09)x-clQ*^CTdNWqZou<v<nxd3k)>7osHcKX>BT@r5BnlnY<<rqD-dvvWm4-d@P$V
z!LRnsa85Q<>3111Z)8kj3@^iLZnj56rfw+_{bU2e;QLkx5Q-kX1s7bZ&_9v(c&@JB
zSsKBF8}UMf83)HK<GPgmzwegMxK9|M-7q;k18~E0PdB$iO1N0WlmZ#{2jVJ#OY0~s
zkd^*gcEF(=jtxjIga8@oqt=DG8<aFqAj{sK!GIG4kHQf*<OTi?(~0>>&`~5*D}N7e
z061hqmlV?~&P{CkF#nM8-NB1?;vD^VL;}{?LVS%@l68&LZi<@nZG;$Yr$*mOh$uWS
zRrHTZ9>`rITQaNb-k%+EHhZ#rIUmUpQjn#0L>F_A>;<&`m-fid$r+C(G#p{aSn|!i
z;Bcr6<?(|*^B2zibeY4i7V;p)lQ(ZM8jSy6ZfT;I4R&<aB?Cp@hJ-CK46UM+$X{M6
zfg924J)?TPGq0-~)DI^}&Gr=)0wJX=*X6hUNz6inL}+->I=DPcidbUwhOac3F93zW
zTT+_9tjYh%FHl%G9KV6L;^(p2^B&Mwo!Vv|U6NzLGu$Vbp}MO1gs|}G;F_|dGP=v_
z>g4qK3nP?=YUUV&x&gyYQ<@OI2UzewhPLI&cMkc$jNZEi``Qlrs5d4#Rq4r*95=l<
zk;50EX6?eM)Qnfn9l?j+!>MNtdt+<J;4TXqx!=iS8!xJweJ<fw4@g|POlFSBp<CJ=
zr3B0WL)X}CoqNdv=*;1eYRPaAhwVEzB+pr%szK0shMvC*Up+|u_`LYbT+)bxDSiRz
z#(|?WHHW|C6;EzP9}$jg&B~XD=4cre!ffl|-xs?h?y9$lJFQ}B8v#)qbAzO`hX03g
zt~#gOk?Atf8dILO_^Q*h!>(>Trg1mHM_ke;9W`er$!(BzwTzuC#;9A28$;&(L_(&U
z+(A(4Tybj3U(Ug=Uq?*H#b^#Bh{0aO=xV&gR735q;E)oW4fIH^RWpqt%ZhB#$>%a9
z0^BWZ$+7=roTcXx^v9eOjrzLp2SX<@$zT{NWDLo!Y}aoNXA!*FT}PL>DtbBdR4^<)
zLH3i*nx~#5JTPVzb>T0u*8YxdI~>Q4ggjs)tFf%z;chN9|8~cx8|^{?*H@3PACwqS
zfOoL9V$Wsq$S8YOOV5RPQgF4?lT+7O>K2UlN{+ip`?wF9lib10ih3{37t0=LpdN+j
z#Kw$9{X)}jaW(sKn&DX^TModN!B^nRh%C*hAZ*>-$ooyY!R2t@fY(BX#U9V#drArC
zO4%SLe&7=fTseCtHR^5#=dq7v)kL;J%FpHZ{t#En_MPQeEMuetKopr+f&97R)A>fG
z>%%vJ-X==J!AyN5^QZM`dX3nVW&&tRbtIHvYaM4YJR-YlXe|@BV=10G%LhT4yhg{(
zwT}%yr~<?q^}-nBlK|{M*`Z5UT(ye%)dIO{iZT`N)nzqy>#I4Syb&s(fjkOHo>8z6
zh`yslwsrydj*haZ<6}~FK+{7O%PU6WgVG;WVqh3`l0@t+%oEtYo~c9e5yOTSfQ8f<
z&>+V2%9~Xp)wbEN!?@$o|0F5M5<NjJB<aT-56-*3*UQ2GYc=^H&=}iuEn*1%jP9`w
zOIe1D8@z2RMXgC^2vBz6Oyzqu@;Z$ESLBaBnTePi%gH;;+-SO;R?_)2Dq9?2@I1E&
zs}beM;xH@VA7r2{E@tO@WQ4anP*HrLSP9wb69BZBHAT5_B3d-WXkZ&O{888MC5u=I
z)&;e5To{8Ja&)fLD$KNog3!}PW+boc!o(wr(mdq4QS=dk*9M=gE6>FoGTLaU#j$ob
zEZ}ML-3_Bq@9B;lDR_txj08gdtxa#YMQN;D;{w~sQbU(~6e*aI04*^fr@65X9i36X
zj2^`$d>K|%Ch5&H>qEn$vQiddofV+L(uw9X?<{95af0YnMA#hK(b&8&(aOIBgcKJ)
zrHuG1>`T@lOh0^9PB2X_yeZoTN%*kz8rAf@fD7g;;U~>z**H$!pJg81V+&DprZa`y
zA?(r&55}2VFIN3Sn<CVkM_pN};{|_owKO(zi<o7!K0Y-8vg3HQ0fqza+CE|_X9qwP
zN-ea2O8KHIEgnriQEtx}4)QcZ(CmEHi_#0s?Bb|=s=PFjVO4`ZF+JKXsUm7SgOgj=
zSV+O1evt|*%B2c0Q)awy{hPk@pHjO)qr{y=uCgNnqq4aG9Fkcj8j>JCWv|*zv*5vh
z8%!SBrNa;vD2i&%kY}(2*)R8>+X3gW6>z?uR~jHT%^yMlQ9#1e{5yjT%i0MB)CMGx
zmd^4@SDu9K=6UAHxD>kA^2Eh8D!>Ef59|7B!oW$9$!%pOIHF0^Z;4!DSUFWsaMPpx
zw#msw4p%ejvXW{gh$pnsJ>GXlhEeAYE^146D0x}-b8#J`9iyD26rF%O;R8vWes-T1
z&Z9R<+ThVosq~p#*DKyC3M`fJ8}kkJFN!^qj_b)JSp`aLr;1ej|GK_@uFyi|w=@;i
zDSD2JKOw;U4HClwnGzkc^lln&3Maoe5_?E>9inkkYUdmLAG8by@?o^nL0sh}nsB40
zUk9&1-)S)CSuEEq#E-5Y5=DHkjpDdaZW*oq+D7(20=Ewb1Wb)~@>SEE{)gS{8T%of
zb9IART)&Va3p=>GzS$%zyc5q@;YpL<qwv>~j-0@CdG^d#m65&EuyPCZxY$R#r05VU
z!|b6%GjoMJvAk1V=`0eJOrdnnU>w1qCAIpShE8M^5r&euT8C*6KVpSFGA>~?@QdKu
zFoUn3mRu2AF;c!}=Z^6wy^!3*i0|Ljj+d`;wFMr#yKs7BsZvt)_6v+18*JiI2vg8k
zelmuKyv$$QdRVq;!$zt>OVj=6cVk~)oC0EGwY#f@L2Y{4rxC<v0wgpwl%z{1e51r@
zpHrEVd;&_L05UnOp0~fW;nr+kUVkK&W_{0Tag(A8aGqgnhd=QpyWcul@0n)tl+^#o
zA4abqvv~FjKJ5h}B{Ni$EXnId-I;VMjeifP>C-E9o?&i=Fon6An@MwBjMbJ6jj2|Z
zNg_7+9V2|A-n{B#Ri^$Z<wpBuC(aZvANBXqU=E)FBVx4Rq3G8u+<xw}K;>g$M=@Z2
zR=+DWHrqF%l9ij|mi`}NPIEr1{X}WnhB}PhWtsT*jOscx%XboQqd(kLqHfKmx?PXS
z3zzOO!tFQXKSLIfaW|{ad%_R*NO#Rz>B@Xks!W+^YLyHJv$^POG{=9!5#*s+<q&C>
z_aC;c(MI}^X$Pknjmbfx!|fbQ7XiRGsDs+)Bk#jO@8<@bC{GP)6|6h8tgzK-0;h@;
zhZJ#a#m19GN!1f5F>CqttrpHVLf<Ip9B^KvVvNK>hHdX~^XUyLH6ql8CPgI$JurHs
zST$nrpOkAKE)fE~jHIaXT<U~Z_nyu>$`oyObXTuzlpM12vPM08OUJyn7xRwsW`U0D
znWPOEAP}97MjA#$@^d|$wx~)=lo$E}=e@@pTcXk+)i&B>1P7jcL-%vI))Db+7On3L
zZ8{D>8PmN_H1J#qSE0MiJjZb)TpU)Jp=-`86rO4w3Mo7*Wbox@{?&Y;!gcxyE*-Qr
z+3$NCuV6a&QllTTjrq6z%_s^_BRg6#44H>~uNb;PlMS2XVX2(xU>6I;<<(?^w+;co
z#F-KpVH!$X(NyM55gCt-k$S0^<0Of^ie&UHDK>Yxn+K1r!GCgJ%@{_v*3Q?MTi%op
z*u?a}l%7G)cyz3-O-F$*4waKWL+fosAhJndF|nBU*)P>L6>@VF+%<3~gb1E}l)siN
zFvVL;L3394G%hpP{FBiwohehsgple;W&)jx?@8Q)u>Gl4T1}}O@-D<Z#{?5q7SjKV
z7Ut!zoet?G!c>XrmwA!Q{6Jic|FT(AB)E2`9a8UZbRYuLB!F9@zKU;XoHJI3PQH}t
z#Cr?h_PeL!G~>IfK*vwshcO*~NPK<;3Hg+OI@kp)arhkBAbDB$76>jw2=M|`B^kCC
zn@#OR5Of09qxCDN9Fn@n>U(Zjz{_7`>#1=RiZ8kNjKWl%03GEQ0Y@PUx^wA>tBNHb
zu+qlVjC<or>F0RvLZh2b=&+82YBjZu9eC~N4$sLK%(d&lV!zBeQ5wVp;Hb|8@^e0h
z26kuW@k+m^KVK^-q1i-r`WxkUy^x)B|EAPvJ!clzc=gpt(s$=aHOK^ul=O>WU6~2!
zb^n{40dAd7vCc(}wz<zzxG)P4hj_+0Bm!nGBtweC|HPc55GALabZR{1H(Kd$dVeo=
z1&fAN!k=&Mg?+}=xBMAssj~Hl8tDVQlL2fkh?mLE^jaC^m=auzH`_jA=7oAWeEGR9
z7!?~H3*IOn>Bw|{G>VKT%$F_s>`s!TY4@#t2FytVOC=>qv#ZteymVRz!C4)sk^)4?
z@QK9<Q@3ui1>%Yiat$c~hTL1;BjZKk^AA!-Kc3|Amdli*RX0!W*{m)*K*fGhHO^$c
z1f~1IDkr%vhXoVQ9A<bA^ObR=4cU)U_az0MbqXKU9P^FqYRaWFM<GicSwW1nesY5&
zF9JS=$2uj`3slG+8$pecP+GlL+)DY?QSLh%M}N7!z^^|ixadvFL*LuAmpLjHMCgRW
zu|e6=?DPW*WI1;NEHNN@M0FQB(6O&#8E>K}O3#f8kZA5)6q)lPB>h^GLqW;Y@?Vx7
zg6`EIh-7zsoU71eWSsbIpakmMY`^qs{K=o*d1luECbILM8`Ukhv>TOie010)1Ub??
z6hZ?3nQMKoV;)iO8vS02Qsl`NDXh}N2GILSKHsPlv<9iDjN_^MVgt=DQ5c!wD9XYc
z*xs{|`PPeIEtDM+dVXKl!pA1dSq~~&Pq`Fa&hlMPa7FA0v=8)3P**s^FsB;i0K3A-
zt{u(MQ5u;d(=HS-<^qg+pBCu3ec1v-ZKrDaYeU6~qWzw4Tq0yZ9-lD<_QwdTF^Cg%
z)CF7`bY?xz^F9e2wVsrG*;p!EHia_0G*dnC<9A+C%60>MchbwSJ{%GPAA^ad1Bk$O
z(n!h#CGapW;Z0PBy*bV_(a;J^b&pk~)t5-@t`>p0Sa!st$QPnXRUO;VxtN?#7<3w)
z_%nsj-)zB+E3PWa4*QUOd|$_fH36M;8ZIE5y63Uv&_w5->pXJ|Rm2Abm;*l7CC)R7
zDtj#B26DXHP4Xcg#w2uC&qV;6Y~NrCWMbcsMf6~?hPaHh*fnx&OFy}w5!t=lU<@>1
z=gAX91jx<9>6T~B(E7A805un+M(${@Gc3wvpHC^q%tfoct*E$wP)jG55cxd>qWZJ{
z6b{+WyBa$XAOn(N&XCRqWO~ILJcf26rEy3y_$KVPHl8%YmWYqm0Vr+gNN|r2?92(y
zDS8rdhz^NOhdiYiw#1cHMj7L)a1sJ`VIU{3y%ldpSXr>DbunfVMu*Ce@0?<K$%>$8
zML7G=p|oartn|=<HinIQ!0}lUmqsbrXx+Q7cIH%fL%=Cy$yI-rBwZ1~l+wA#KM_lI
zteJ9IoV{rV6W>x}j(c?d6ld7>?M6zY6jy)~jy6FlA|QpPmFjwfXU}A*?^iC`XZ#t3
z0QlaB5-lim?KJLa<Jg`&p9ujMS+$r=+SRQOq%kj{o6~94Z4L;U!Ad1mw*o(;2`<q>
z^@Hak^<TAl(`4m-3$Y7UUUtTr;622WAY6o4m6~0mZ+t7&KT}9qwNFrAX|<LJPL{7f
z00cs0UUuC-^;_<hXO$;zp9d8FP_YHUlSjqW@+?D)iJ<NIm|@@*DWFpGEu6nz=prw&
zPrj0oKGir%$H+;svu*LkHeGG9{!$4FE$=<?bB7EUtLZsfhBTo1utXjl+Iky!cg~Zw
zX7J$VrgRHUz)lQ;+(1U#rk{sAxc(`?v*rR=0_;XMmNA3hSf-`iXD#&QaGSa`Bvqjy
zL7BxWL4_xAzuJm%D%FR}gDKSnf}&Y!{XUtNAOZ$?)HZ+t%trZOw6)&{XZR?AedL^4
z&)cHsD~s|6JtYuhd(J;ys|-}E)*<4Y=HC<|1)16jc*?~*Wcz7sk#09A91T@z%!KgM
zsUSv$vpVLt4ZGccj|FSeRca8#wYvk}WWsmar@fnt5L^kN$0et%^d4J=jJi(wb86ww
z&hV!V#e7V3mo32g#ZIvg#1Lx3l2Ph5h0ab%_M>&z_TGrga5_E2J$@@%J9MCUhDN67
z(PZ~6U1vULe4tB76E-9t{^WZU{5FvmDg)T9gHL?*#X2W^pr>aBmDU#sX&5WunpHxb
z_2pNTUi%z4w|`r4CPG6@xw}N)Z+PJKON!+0h=smfhH*MH04P}$^qARyhyh)~UtqTb
z1k-CJ=S&GE*U5l}4C}o`Fh;cxW1W93lrIiduzJ-wIi?(XbP^AK&BfjGmUpn2C_g9T
z<rx-I$v8{)Fu%S>9}}F&(2ok;at1TALtl`bv{r22RWLXZ2hFvw-_*ur`qFrG2s{yk
zv}xps(IFEEE1m?#zXd59pdF5M!^ClyU3hC<$oy~66(SDln^8=F_(%$ala2u(1O_;x
z6&Ra>0>pw(B_<ke-zqVGoi;UP=JbZe>D#CTxp$D-Q{gP>9DPl>;U~G<gT3JJzwk)Y
zXxbHHT80}U?Ja~MoW(&CoxYPcDQO69kIb-4o6!Uj^RrhRpGtkT3w}YoJIGPK-Rdx_
z0isH>&fy?B3~Z;&;&6CejHP+8_{yqq=uDknxumS$=@ExXeQ(Bq1eC1t5Bta%$Ug_M
zX&G{cha?UiAUZhvu_V9+=(;KpeDn9ok*)~YC!kh7h<x2Wpdm1~(G0(~3CQvuJ#ksh
zAc9aK8wLy_B;M^CrKtrwZ{%~avKuCb##I|0QK}qm*cy9CHwc!dw|Y~<^FExAjvfk<
zhsK%HTPrY_g$uEz!rJ8SR-_wBJj9|ECNzT#1G*ZstcArG;Rg_A78?r=3;KRFY1gsT
zsS!@a7uCGe^z0G}nvq%RswDC88j166dU?=OK5jEcVJganh%*dMdTCmnJ*)Y!q!d1F
z&()7a#uA6v6d8&<F}Pvbh`LMG3y}PI)$i0@{f}GP1rInZf?o1WlUFEoJH3L`+M^tw
zrbfEG>~0%5NOm%Gj@3GS9X=pbzu!;=K&XEQF5nuShl1b)c~Y-(+E^eU{{%3B=RC*u
zD*&EE%6)(r=5cpv*@%dg8RO<+&>_lGtx{e+_EZ)|6#^#;<gWw+NleHZGZJ^%dZY~y
zwAesRgv{ixQPe5>eaLIm|F44&&l@z8PBkwDcQ{hh{_zu-4s)$D^i;Jz;b@KMXDcUo
z{k5*;Bgw)%s^YSTBX(`9>pYK^@Ia7($hUble#9o=gcA!V?2T6uDr~^aJE~jlwDE`z
zsWjUECiVA5(L7bj)<BKi%y^n9lB+wh=mES$p-Wnu_M<}?NLFDamY&FPY0rL#lOM+m
z4n<iPC!PtE*GMbfrvDh%&R37Mb4`m@HF4&^0q&0M%d`SehNzf1M=e$Vh>Az81y5~p
z7$opaE}yBBbyW7Z1KIQIg)t>m2da{EQ7*EUK5u-7OjNRjdSY0c5A^AvDAZQCP=PX)
zrHYb<+L^jzwAiw!65NLU+4HSkm+8F=&T%r^T1nv=8moc}B@_W!{>TUkVGU%R8rgA*
zX{-b2^kIK0aY~^-ZBIdW9h=p2InR&)R{bLsgB7jc5TpAB&;r&@E-R%r4YdbG6TDfl
z*63!vOXhJY{`&e#wioAB1q}50eU2~0oND{Q-*s37X?Z&x8c2i&Eb%@R8sA86tLz|&
zzYDbxPfXxQ`%n$W8-NOh3v$9pKDKQm;j@mVs+A!2y{u8=oqKLYrgsJD8pvL8wS5nn
zGkvr_IJGGtx>51`<b+KdN)qjT>n2^GT;^j3SU31zbX3*0RJd6~qOP)Gm4gxgAM5@W
zq+mJ+fx|Y;mXm^y-n3je>j`e-OhX@@$HN8VQ3j6F8-yzrSt7z>LAWdI0NXD!aJsT~
zvJ2WeYb^*I>JmZBXcU;*TS!P7P%rV%W(uaQ#y{1F5(6zFIrAG15nqMkxHCll?0k&^
zdT48eI^{akwB|@6Y28)0D^M*=Kn~DQb2bN9{m*Uc2L0!xj#&y+Jqk3M0(i6AA%xeq
z&(P!^mg^KIy6Mg){;9bF*m`Vm#lR_+*tUnPC8<76XaQG(#_rnjV9){~;k!GU4&99{
zC_^`PlzDRYtlR{JqZcHjRqM9uxp1w8)`d^a*$6HM&=Sc)fTNC}cJn;q?CZ9mBv4D*
z8=xG6SzG(PR`E9#{-8{`V;<zLV_gB`4*gVE$4-e{P-^)5LW9t*-ls`}Sr=Eq3@wGF
zNT;1}j)lJ8JmP8-LAy60IaBnI`D291iUi0f(ge(2;qe2Tk|(|A(EqXCo4Gkgp!UY<
zK2A(I!<0*;2~!OP%*(!ev{>s_3^8#z%<dGm*oZl^Ur<S`godaHkfPcrVVx*_GP)rR
zX+{BADqbxMcHp>hS!kY9eHM#rVQRQ+)OYz*0o@j8DkibIN}2FF(Nj6Vkp6Dd34Er%
zF+Yp26g+t%Q@C;4p|gR2onjf4eLeLT=?QZaT&h-)n8~@p$AuGzH+&S^!B3PVHX$d(
z2T)lX;|Q1mNGFCDHG{blWkIcW$cKtij^z$yo_EK>N?RG6UNjJQPo4FI)MP8UOVH$P
zyL6=p^NRe*+7i1=`~?>+x(b}L*D(=Ey;?mz(HtVJH^aIEHa!97)NZTftl_vS{$g3`
z#%tD42YaB$n;tk&Melp6GYlK5{ik}RGicXLQrvpF!%vr-VJ~zv#oN{!1$Qk8^b=)5
zVK>qtmpHh1usDPKUj}2V(UY3V)k~yZ#<N@&_HdeJM<5sP$t(6-2iX8&u{m)l=a;wR
z{Fv_ZtpKv>a#jrY!DdXcCeK4@=G(Pi_T{TEUb8E~iuUQzwZprAZ&uL4KGwu#5;XiW
zrJ%#3ECYRCUyp<Y@p0lqN%*^rFJ!Sb>N8Pc3%APUhB5w;nxPNtS{utTCC#>h-%aN8
zoU`24C`Az4`O_hM=lfQ}j>q9#0gZfI%i))KxDq{$>jsWI_63l0U}OQ1$X<AH@nY87
zB$%@KKHB<}4DqK=;f<L1_6r@9u7NPR%TANHznc0KPA0_b6v$rW`Mta~m2~J>&r>pT
zgaO!FP)UK6|9DSZ?Lkp3yUUx^H%klv95hb0B`N#rFF=Uzn6f=UxV1EqIJoRMoWvoq
zPZS@)$@rOZZjQYeu3CsML<ZS{=qX}~O5r#J9s?NJ7_NEd>~u2-v&=)TD^7t~r<%s<
z<!QQe`$?B4l}z<?$Xyk?YkX^VyV##PjdhGImXNx-DVsHf#|&nZaG_0Hzv>!2)2;XC
z@<vbAB|NncXM4YBY9ylX+DylSuS8;;uWcZ>`VbrxJ$|xh^$?&q=L+Ui{){@D*-UOo
znaXxg(C3XtegDlNb`d?AY4VgME4wZv(DEv8o<_rGo<i*Th+422wevB-wwcmb+?s=n
zU?u#`KsX6|v!%e8Kqj*&;AC+0{M{kOVOno}6h}PBKgvSFVFAWgXpkT;H$XCnkBN>G
z+~Ml|(r-JOW$t<`X6YAp)(HOV1DYzA7&*B^(;_9gw_Q~?7ey0LCm)2)Zu|=|W)K@!
zUMQOQH9$RHX!1axAAvK2mub36`CS=BE_ee#pAZb~I?_lnGQu`?EMIUiW%w5(?8Cng
zOr957WKtJ!^<mnq)pD!;kEP9mO3H{7_zE=F^tCDgu%eps8H{kEkhN=4%SAl$f7~7Y
zk&*U>s3>-0YgJpP5E*Q8uR&a4*XS?g)`G{#(#pD`8=7&TJ+Hv@QscFvk;JEV6J-X9
zhr${?G-<yX{0)iMhn!-W!LdapihYgd7$~n}VNQBLC_3*vwh48v9xa%WbC#MakmQNP
zPyme)8l`>deBI(~S@V178VTkVUGRT>%|Jzu>T+l6dD7OyrR!}Ww-2g7kXy!a64wz$
zeWNCbW}_*~-Zo1T*YG?U*VXYT3xjH6e9uK0WOzC_is8q137NrAK4ncYYLhI^ecn(j
z{CXEnwmjk<e8GN9aJoexZ7(S09RYGIB(~cbxs<AYYq^H3VkCF72jlnATkXI$U(Jo0
zk)BotklE?S3tNz7Qhxm9;sN&@qWwUgg-`aMDOb#F6x=uOmb8(TTWFfU5dFW<&wU5T
zT1z()5_qLs*#O=)Cx;YozCRJ3%=E+eQBmyEcHKi~t{+=h0*2o^>wnFO{}>tBrxVu9
z@?C~Xsv-8N2pULZx(&BG6WeB-?6V(tKCbF-HZ*~!A#V=zKd$9^oaaGh1~cmm`RQrj
z`ODjx%+t8<WvjL5m_I!@*kU9v0tuCSo3jHC!?522%#h<|{u~KZLHzcQ`EJk<0(@m?
zvdnB)s?(T`fUdq~R4Y~%wPTX%>qU@H4w3o>x|``_GD`8q>E?|lzt-Y?(3ya|wX*bO
zJZjQ`&C&x;5<tr+GYInvG(2udX*aAx*c#=<op}a65XzKmXVTQGkD)+cFg1IZTKl)M
zQZrX70lbpp;5i9=d2ex^0vidhy4|Pu<No=WrBSLBuRyuzoRHC)1KZV+W=o+8ey)U#
zPB>k??SR2-GGrN$89|s(u4zOweVyg0&4So)2UDnuX}$AQ!-1HcP*A5QbWKE{QcmYP
zSuUXf6<esvNC%(1bPc@fc9KA+pz|{WLCVC5M&3%#H$nx90foqSARU^n8UgO~kv9N|
zVgFg5w(&zLEn#D7YIb>raN1w$RIZAYB*l=~xlOs}F330Pwp?E9T{x*z-Zrzf>FMe_
zjxAZHO3dq+Mu>B!saFI3K2nbBYTetQ@A18eaQ2u*hYWWb4a*ji4UGW#=WXk5jV?bu
zIMIRp+70Q6y8?z_OSx&FZ*putv=5`XX#Py=u&D${jix1;&CE`$@3X~)F<{+XX2nc!
z08xt<Qgc`X9IZY!mHV&hcO^X7VTJ{x&?58`MZeo$J{3(<`XT#sq;TtTpoCgMiLf2_
z1GzF=s3Fhn(U-bZ++XQ(69w3a>@Jq_+QRTeGelIIEQD~LiiXeVv1e27GeZBBbY6vz
z7O*ZJ;s(^qPmtI#UHi@^wO|nNkB^$UQ9=pIZ}eRY7+*QBOL9Y3fRri%@_wYlinb0W
zv@Zbw;@CdyXze8^5XWkgt49NS%j?_n;hfX=UC};HzS=fFKZaHegH#lig@3#`|7ZVq
z_;X=vcGell|LB_928{@`U_GCxXah;McbMsDTXTrQheFq{jnp=5mI`8Jq~nAT0i(K6
zL%%%zULmB=S`)H4DHrYVg`h@8oXu`@1UO~!=g`oNH=zHnj@)6_(~M>u&!1)Uf3;#q
zu>n^)7V>&#l{Q((EnEr+5@Kz*TQ3(%_gxUwYL%TC3uBZatil45)ql%c?FkZ!;R{`r
zD>SIo=vS7{iz}w9X7YJ$m}tU?<Aw2?Qzy_3>7&cGzN+LV%oixdz1J?*7iSV`P{Mi-
zl|a+)7Ecw9boI?W8#y&20qena`j7s398zUC_!m<cMf4wdAeMKX4IdXL5HdS>+9^-|
z1A$-d!JG)NCw**nar=VQ*cV5NML*d?U0!G}n}tychs*hgHLlZU>rr{Y(2qydc{ti1
z^}&0X<<2{tLpQS-b|?FFt)8NULsJnpwNvmUE>McQqf^(5yD2f42Y}s8z8!GX-}&O2
zc<3zX#k8G?1O$3Oupfcd&r^7ZZbXL6VH3W*>jV9Ns~%(_L_C}e5?ng-Z3Oc~lE^!7
zJWBTp$_KNC<5W$8VK^0a8G;W>F9-qL$|FIpHeJ0xUhRmYEl6|O5n^ijA$G=b$oqUT
zT`HWL9Vi8vF_>i!<dn4>&G6DlmxP#c@so-?M-+CPm4kli*oYURHTqHHB$gWHuDUI=
zRNqj~b!NSZk(GG__TQcNT>;Q(NqMybPy&0$cQ)b)#%j#ex#NY-4d-RSLi!~~0VJXt
z!54!>RUS5NEj1PiE9llBD50Wo6RH*w8q@gwQo)n4gqPkz!E-5{Dl^nv1Jvi|7ZDQ<
zXb_q1(3(oEPpEu`!Z)9ENkk^Fv1jTaVF}XLE1i=3BM(Uu&q>sVO5u?K0Q>aZamNO>
zE|D8p=DaF`Kg8Aaw)b&aoT1S-#2P*{cl*ZA!G#IAx6Uv3=W|DVBF}ei_M`(QdIYhC
zAMxq7n;FZn!%$TRGT^LxjR~$9w*tK#VRrf@$U|(a5kM=i8$L$ULU)Q+xC5TPTam)U
zWpjxp8mn@o%+%n%wPe4qs})lw)5?wEqh8`JtA}_+5T9)B94P<F?+lqsNh}tFFVdY{
z@TSSZ+;rYyWwcDJ5C#x61VK=(jT$4df>1h#;wHA&dI5z()cX-W9yrkmoko=wgOOFk
zOlITUx_Hubq?z~5A{Z6o0@g8&z0Z+_xvtJ;3ZljV?^|KF0=KWBhHVdbw^<nJgLotd
z__2yk2P|&|DlA}zy5Mv7xQ1frhagA0z{2+>GDeHione$bOj~;uVrMU!ks@AVe~n9-
z4=wN|iadq%93pfhyHs~4kaNkC=_|{;1l>DFs)zn#J;i>q-9V4VyE#8Rer0Z?=?9@l
z8Eu)Y#SN%%s*N>GdT2?=ydz}TJ}2?vYTqS<{5l1g5{Wn5v}Wgd@IYq{lG?4W<_0H2
zvf^*;blK#D2K_%;U3WcqDK0u1DfiP)^e$k8DCu3e8$1B?!kpYvuO}z<q>_)l(XkFh
zd?@AH2DdD?;XL-K8vl%gJ&nAscAvk=h4{WlWH(a0@+;MY)p^MB^VLjw&f|HYNljm&
zzL$;M3iR*AxgK0YBud)Ei2yWMOnp;zM<OyZS-Tb<IDcm>dzf)JG2JG18#Ns^nytnq
zvOOm%*JB&g9T2b0fd5@1e}6GzQzBHKtNhcE`I@JPxBWnhDN*%)yFPqo!*H#ITfv5i
zuVhv@w#Wgf=n71J9jTP^siS55y;!OiZwl4H3)o{}lf_e(yPNmbM!ol*^c*4Lqa}iu
z2}hJ=-3$SL64)y8egPI=c<b%Z@Un%Lq@yiTW#+M|l3OR+^!cGMwkp3px?2zN#cgyk
zvnSjqUgtxZTL0Yxr+^w@GuOM7c8YI#g7Mf*-g8si*l~1uD{zb_#_e0vdo{K`&Qkw!
znn%iB(F`adL}T(VO3Pr?^FQEbnE9I>38@n#JP}Ndly|2E&Yo}XnCl!oQ76@01}=Vu
zsn~d3q#CA|gm;;?RA$|1EutOKqPMmSwO9KUZbJQHnM(hk74N)ur9+4l58mku==9>;
zG?cc_cAX)Jo0gF^M5k$fcv(PdbjeuC5hpXegm?pIx&33!2f?W?xy!dS6(qL()b9H1
z+kB^J)_xynH0FtnAk;0gyeo2wYjPAIN(#GNY`DZm)_}KdECCwdmgXK-onSjqj5`B^
z*DrakVL0OWPG7xYIkC>|5Ga7r0AC|?w`n*2ioB7+HN8psV-XUjSGNs6Sn{@_Ghhm*
zyO<1BZDQ;))T!T0^LE8SV8**Q({X{AVD7^jBKOjtL`d=ht&WBHhc~T11*VIkmAWib
zRs0%mp-1#nbuwGnsMnbD9VJ`^LEqf$ga_^V7#U&;@i;)EJoJWb7Am7Y!kC$#{F-MG
zMM&Qmaq?gdQ~<HwIFX?Mdb4*h^u}QefVn~Pu1~`;AOb;fbSj>&2;8ACZeGoO5cv<2
zwGrhe9SQK8yov%<X1gSk;mv`e;5yz=t(=^4u^JB=_d`;H5zJ=3?&Y^sAW;o4S)$&_
zcM@aa*2A!`Ch$C8UlMA1AQ6=G1cu3tFh#vIqltT>i-XJ3Vs`Q6j{FJS(_T>^%*5Z8
z>i4Xp@ySbe6V<a^Vw}=M<)fn3)Ql8Ji56DyHSZ1dmFpa|`t>}&@%*Hn@rZ|Rr@`iz
z17^R0YLqgf>VgM!n5HTw`hmv2uXEkLxy6E~AW@<*rPO@~9d53y`1%%F9}xt6N?a$P
zti_h8nBoC7*ut?sK^^5_j>MtA7}WO$0c%EP-Zs0a4j`>AYaq`R`#{T;7Pt64sU?^<
zw6+5x69!W2GjC7jwHIQ&ymfmT?>hI4Eo~)}0`x}tD(S*B$aK&S=F%l_2u|}q+Xv+T
zu2%2<`Po6y8c?@xfZ+^45^~X;;_|vrR4FM@z#<2Gxm@)HUbc^{cyfabMqVl(i6GM@
zC`jjVh6?{jwkT0Nk8A++zu|?l%OB5Ba%ioifiiqNIRJLfeHb(mhz}>o|GiM1Gih+O
zGdFnC6tl(mrhTA=$*`r?5!WMJ-^`QCX&S$Qv&|hG>U<Et@dk_PH=1*ax!-dUlU#%6
zps}!yxVSC|p;ys9iDh>11Z!5CdD5K~(iVJ5e);`LBMfvR#hoi(;Ryt8J}jvpNYnK!
zM4=Kbn9(@;TK9H2Bd?X64eLZTeaEZpk3J8HpE7)l)H+WVllq7Yt)}9)ng1C#r1vYR
zQBa^oM33Wvk-W=AA_~~TF+_`>?3-BjZrMAG4ggSYe#mX_bs8D}Y?`PEgW|g-s;$0b
zodA1&G?aYU!uL_7#LnYFOideg)Lm#c0lCRJr#?+>j2+R7F+9{Uw>TQp<Z4C55Id`~
zm3uBU$DH6*>^XC%;qLWu``<rGV+*0|V6=M?uNACpBSUWdPj~<=I~Eoz$}^!YpuH-O
z?>l!3*rk<@K`Y$cQM8<Dhk*bDK>p+`F8X@c&#>E#iOis$&KHAivWpad!zwN1=fr#R
zy?SNP30B=)6Bq+wY4cGnn=g3DyAK=O)%%_~w#40uTNfQ_uf$sO+P;h_=m|yaWH@`~
z8;uL628U?{FATXMl@MIncPu8aUQtf+b3ax=%ek76VUHvs;7A(q(<1=t&UDwP)~YC@
zwB1R|wVbV_;-QKh1l=wQR*PMBAL3zH4Yzn!6V|;N01%06XC(2C|DBp{re@s<2Tv0>
zH2rfVMuNxQ#!D9`i;_V(S*eJ#Fl(LA**hv24^^*`!pdQHTHo;+zrl(wLGXlwSCdjn
zgJ9*)SW7r^CRemu8je%z3Vd5C!6<k(&<=C+>dXP4&?w0tfv&1U6$B9UR^EN$)Ayjz
zp>_V%=O8ooFwy-~3L`f>NbW6b(6@Jl>`S;6CUXALr$>KO-6F>r!MR;W$Dfx$_(=a5
z%F<l$5t49*QaC2|$|7bsv41qw@LvVyg?_%h<BV2<m+1iaFEgBkvbbS}Zd-8{;{<)G
z;mm<fy5N{Bh4QMlDa{Vd!S~aY-ud#!9Z`^Zx{`tH`k0O^Rv3S#$Ux5ySJw}Ij6iwd
zb?YgO_=peOja;Rc1zXXXJIUEZ1sEmF;RvzUABY#4MxEfJgp*k{^c%{j2t-3N3DYDV
z`&@(Gkdn+l(~dv;?K6%b`QHl^@RI`bVlZL<l|nr=kx|0`5rOnv#2o<1lkNx)vb0<Q
znz~sskFewPLPng1veQa`h@H+@307=P=Btxa5P0xSH?eqy{WMQH^A2f>lW&|i8|vzf
z@fM>{0l~uoy=Ylbdx9YHiRsyNZVdX<Tzp4!hZ&J8c(Zou>mxJ(c@Slr0ox@c+W0*K
z#$nnin`k$IvH1@0&|<0S64xkdtvyDITx;vk-mhLIX1oT%%oCXIuD-4jrrQg@xm)?r
zR{TW3%dd(>%u7M@7sE=y!C7x(HHY0baAHBUV}Q&xF<9yU0~VqAif?7`$MR=+?ptOr
zsNsCmkkS{Z2FjNTmA#|Pt!a(}GdEH@da)gH%f(Yq7xbfS-Zj+uGJiQxh|P#1V&#4s
za}`}n*!^48c^s)bkJlwTg$UA_zS?{zkq=&8x{)M9Vd*+LONskDroRW&i7@j$@2zdc
za9uP<X3O?r@&hI|ayI~t{T%Ca(n4}NtiE5$CFlK+bS3u$>b9i$Lco_K;pfNQJWgJT
zK=okVuO|ec2NW;#5Z4FYaw#ZIW@yvKqTBYA<rx%jlBnD#>YU&-xI4c4LV({IHnj+Y
z_arf9N@e8M;8ura8u|;Kl5OV8`bQ}TvQMpeFm)vVsp)qfOIIBS7^Gm%VmF=As}^w>
zl!ItOe9dvpse#@P<#iQ@c}kcAM5lqd8=BE((bjuaSuA6(BSF>Ad-P%D5Kd)Y9u`dM
z$|M{=n;>_^Cbd_<-&qn^Dp8QyRM8c@Kh6=F>=W$@^ft2~GZH5^YTP;%SM@z{Y2z_b
z`ZFG)pON9ZE5VO=YZhi(m+6{}+m_2hU}J17m9Wrww3O)Y<s2vZ0PymsA!APOwCWrF
z`JQpQ;IU0HerF=;K+FFuQcf?Nt@VKFDA@zg*EhDwQ{Sz@z_`GR3^7`*MSX$^2*|1d
zIN7B!cW-*Zy%Jx^B);yc+!>9e1q%c5R%4*GDW9j%3fi_XEg;hJIA^5ddH21$;@~9n
zynHH-AD;ZmX%J`&vhzw`QjiY=%fQp=wBr`4Kv1xI|J`m6fggF{*tyf-B}JL2&RPPU
z!iP0*;BG+bX;~ubh%IB~zYcDXDv6MoiV6(aqc9(!$5hcS$av_G24yQNVVAH>dfO3-
zGy{tF<T7)iVUT*JkPvlq@_YC5>j?jCGgxvo0t%^?kf``4z0OxkXK8AH4I`uuX0YuX
z4-*~*>_rj^!H{nsAcWAtd@gyc>4rm1D06s>k7_O8XTLp)DMOU0S;!e>s(J*=Qu(-#
zhg|h5jM3bUWoC6*Q$l0i_v@W&=h=&Gg@a+=@S&o>8_rU>S;X<X`d+sD4)x81xOJGN
z|8{uZocGAfnH9{}PZCK?f=a=SJppv`;bf1MUpBL4P&K_K=JbY5Veo;)fWPyntd(~~
z#Ps>HR)=cJ`-ybZ8=ZkcK=P^7eAnEV%}1uEO%i5{)z@uXBBoZ_S(cn2g2eKKJJ}a2
z3EvGVtBFHB%ad7jgQvZnOnQ+lpjMVP?NzIY#W~mBF!o{~H=Uks;bjzrK;_xRN;u(Y
zK2|U;hf?Q!>N5!WN+M&cNCsjkKryukh*gMW675Thv6MSU-0V5g;A=psSiF~`sRBvL
zp{wcgSDn2v<zN%Oa}|=Kb;L_I5()<6eyjJq2~W;5RFrccZqiOef9j3~5oe`&UnF29
zI~C+zE3lw)G7Sog+@Lf1V|?WFAXEDq!_6UZ98;+l;xPkpgEIY7R+-M{LcbswCUaHl
zNJKHQtgio5LbspdS6e7r@dhS=hY@R_gy9k-i4Vl##b>YerA5tO!xfksq90YM+f-)-
zO)($94<)mF)v(~q#xnwm2KrJu{Owz3b>`IUq=*E_pL|)^*g73e1I{E}n^Oz25-V)5
z=hciDctd7^DRaJ+N1prV7>3VNleZvk44U5(;J#O#=>w+IVaev~M0xobL-(RY#6s!W
zDsdCt5&3h*>VdV=u>G|dxJJ=<-uv<yu_Mv9)vbnic1@^&BCQ$f)Un$Y#DgFyLhk8X
ztC0*O8D1C9uJdPo*PMd1CV8&OJr4+WYaF3VaTXHA*qLm<hccDOYS}M-ZPjc&V~&Q`
z@b<fO1&<nXxFOG@E+QLK+mks}r+g__r}5x1)ZnseQSzM77=g>s%HTAl(0^jFOyTTz
z{igs3sbf)x=dj@pCeBX22&)c6`-@jZ6G)Xco@Zo=8Y`&J6ol|7n{))sA_<Oi4M%@$
zw;<oB5A-{A9FxzH0t0*C!a?=Xn$i>2pZ$Yg1&uPPWu%%;hbW65V$EG>eETvPYTJ)W
z5cv5l)3=kYFH2Ii%rXvl_<WT2J<J3!NIom^8<oeys>0q*Obe<OkNvZL6`dsI7>_`M
zLZOCN`_YZE@|!z))q!cMAV1FL>7r)_HbF9g`c58OR;<x9xd!aWUjG4F78s`wnwID<
zs-ee%hM2Zs!^n>>+3JX0!g$QFT2rbSI&d@2|4Z0zEKlL1JD|CoW%KebPP;l!(AM%x
zxN34>?lzY}s0w45x224=vIl=WYEFa6tRP2)U&l2>OAfU<{*=c&L-G??%BEQnFspK~
z9bi({x5cnCiicDkrYrnWhZ)=)pGo%6VYVt5<}&YuSG@}%#uMyQGAB#vO-Ez0%A#q6
z@Uf(HV=sVn3<(>y`d%Lx@33SBO)zexq@Vg?j)aK<DV<aP%1PC?jkjYWfGm+;uLryP
zXHq{PUo{&V6&i*%EFreOAR{wu4ekk%wO{L^rHa9aarIl?WQ3$zK)Vu^*X9@{ixd*T
zXFg)C3?Rr+f`@VQg@~f25%K30H3`#x8#vgbP9OD1Gx^mIP%owEPJ;5?m=0UFIKj%@
zvw?hc<Reml<kP7;E<bBc+rU%}CDzxEyK64|ZQj5G8;%YM&WR_*_>&eMCwlOTZA5Y(
z*ZP^W<8xUt=?G|=DzDM^8LP`wC;a&ZikF+tUe3yw@&wLu3c>*q3K(R#PPYOs7|~Ra
zt1&-yKWCK*ZB-9c(8A>FcRnY_)KvKD7I^wuHxMn)^s}39mJcJds4nYEI=vb5)@zEG
z>|z1kdH%E`ckJ0dnD<}+!GQR;kh#L{vg4S;A0!~kd?1J93xOA5$6A4Ch^#LL47L|G
zmpR48_Yf7!TNv}1c;J_4UH0x*ftZfc{Q;lY+v|x>E15lglSnal33E=uS>VOhEqMrM
z8_YLBTg{J0gQ;<S1GM`3Dt3;<ViBclWl(a8!PNvwCvSp*V@|lK`p^EUhrj-82`?~L
zC+LyOQst}3*NB(SEcQi76aqg6sgXeBeXT>z6?ZLH3lBuvf3b5UJ<KZbH0`qj&DLUd
z$n_I$d_qb%<M9-Y%bFW1YLg59>`+%B!Y_3L`VHQ7LESpvLSa<j`G`Ud7($3a#$?}y
z;+Fc+WA6uK*Mz>hl_LYU1C^*oZ(*0J+*SPrIK4|1rQl_?N!Z+#R}fr%FDf_t^f2PP
zO>qBhADXwQbUF+;S=8A+^~i-F`HUuTF`*2SCPmfwyh6n1FUlvmm9AbR@(VuzB71;q
zv#y@WbBnQii0f1Um`dW}x@)j6V6F~e%?YIn`BEzmodt|Xws;p`(nZF6a?U1)9BtP<
zD|GxVV>?Fbi42yB3CDFwcNdc0t;tiSNqgj!-7p_^yUQKXGTZw6O>(4f^4<?*#0f!f
z>BIa9+`K~A*n;~m0jE(F3i)o*j6#uE#GJ8;lDM|v9XP)}v>Kkk&ywP=Z%15?wdBlv
z*hp{k6TNgZZ4Or;yV@oju5jhmChwWqKHCamF)}ao?UTS`szBXt*d@kTN&XoE6u55E
z3@ad*H8HsLl1g@U<=7i#mWn8~O2gsCeISPuSC$nit2BR-T11FR%FK!304EWvLCs7+
z>ZO5HI*XAK$%U$2>x1Y~C^)`phUl{ob8qb|?9$Vx2~T&Hm_OF>Il^g@z&z0?f_{Y3
zN7_$5SDLUdC3R>H@ma(r%CZp<+s<|~F+=l9-A?9Z2)VfvbWCTlS&uX6y=XuXE3vR;
z!jP!%Q+W(EIz%MZvH2;Y76&q_(w~<^xMMjjwjs#3A!DYJ<CnWCQ-Rqv{DS5Frb(}f
zO7Ra$N0bQ6eiw!?kVQ^?tDY>LnN+jP5t(Y*$DL4%)`v9OIrr(eg<R;0Ai>f2US6jM
z>Xi1-1f@o<nyyU?_aU=-hTD-N=un7f<yzqG-D4^#M`}d5ixJibR|tZx2LFe$QLXzL
zmNgL&PBq*xPF&$Fmq{n|HQmKS_5^63Y%vJbe;c%FcXCXqGgn%|6&^u}vuXKM0DU3y
zw{m~1ncKzb1|Zoo7Y}41Mic+TRF-je2&U~?1rH$@=+!@LYvT@>kdY&4X;0VE>Lps7
zK`^J0`HTfNPEzB)xwwSbnsTQ+`h>)5zaiWl#bB4HmtVySARZO9#l0vwmt~l&5Ln6g
zklmB$dQ%b)q5VBW+E1FAHTD+Th;y-NKxX@HtoxlTwd0HkTLxNEl_Fn7WIbRUJ27wu
zLs%FSgOU0M+Ma$BY}!%{N6;MA*gK^e2v%?XOP8T{b8pcnpCouE_2kkcUECQL{p~ZS
zO=YwX3aPse_Kc{wwh7NE0!Xqi3p?Xyu~HTrfs;kvAcRiXNI$5))B1P#Jo$m>N2Rmk
zZESo)@ZF&kNr8o(bPbqi&7ijh0+z!+-bIUG(<+>4C>!w+D~;EZGgc>Hk)nbwxF=5U
z|MuF(+aV$)4OI6^Hry-1W1RJzD4J5Jz&~P1DQYO0M=gm|n^`bggSOgrUFjr#^Jg?b
zeN!jPS)fEHV5UV@v}nP}UjxbFNe3v1FgVe;w9JB6oDb6SZR<=1K<iPyGDvp_^pCCs
zl*4gVLQ4Ko@VJJIPEA5cJS5$v;}rP08&uIsPO<{fyl)$Z1bw&Ni_oPoUA_4KV~-6a
z(#}UZ@)Li~oG4rryg7ibKWPlf&%>{t*WKfjS1)34_*PY+U{*5Y{1`4AKNv3QK~xFp
z3}53u$M7$E2YBOrkwvns4C5~8kG(j^PT+o%GQb-Bx$bydUELVfW)MN&+T$djxswuv
zS#&Qx+eh#1Q?hlS!P?Sp&C5FhHM1`rD1~<*v<I2hJw@00kX})sd_2o1q!%jCo&QDC
zRo{|pNl`iz#b-vxwMZ{4bdAZWhjoposfa@&fyKD1=*5k0A9r#m#pj=HC&c{!wQ~DT
z;<YQjtZK1r-fB&E9k&A!tXaTTTom$dGoz$xcA#lBG71Y=s$u$l6uYaJ6U_fcUSk`{
zd#)TvLw~OA3y&?(Hfu%hc}Snq=W%Zl)LV-yK@6yC;2w0p(Ip>ICuy7b1J;@+-QwsQ
z)bq+hE;(R2*I?J=>N$3tGk1mpuG2Qmsu2-O8&Pbs+yGGkMa)SkLN>Sd%OAH!XSD^-
zwt=lpf@qRm00(U~sy7{^C>7f|wU;%b4_kP6%FWsEM_7OO0)!tY3vxREG^`eTmj$gs
z&r&*8r+CQ1K3{vAbfH-7M&`plIN}Ejb~Z@P&1j1G{8ok)?{+bPUzBEwL<W=8t~Tc0
zQGCP2<h!D^K}x)tkJk*<P;iw5QA%y4&=&e^5gJ1p_Ucg8hQ*-$Z)hIxU^bE~ZES(4
zKG>CuAe7bAZ`B$clhWys_66bGplHqz(bWF{rcX36|DUv(xO>bMb)UlHxr&wa@}B%j
z*QV~<??sWx5F0RB0oKqu&*{J*%^K|+Krgf7KNI72qv2LU=jSo}LKK7KeEdy?d{}Vl
zpWLxn?Q_tU+*94HPod)b&!ijP5fOWx&eV5z58AGRXsr}?zjpuad`TRU#_%*esi-8;
zk{1{H@n(pxYis1S_f$s2L=*lJMBxLF#EXa`iy>gT4<ysLQaTp1gwZ5B2L9-05A}P!
zu?d&i&#FL#Uf4!AYD2UJbL4a8%!G}c1b&{yS^bDc0f^)4{-gpuhs;70MyM~Ye&3s=
zxMC-0&QIDVT?41rVq;6Op{x}h#cPt5kW#U!Yx|Ujb6K=OSO{7o%hP2Qbqxj{!iCV~
z1sYzLfM`b70cQvVj#5Eh(1R0GWZ(>rxCuU%p<2Brso~U(D4#5hMt@^Tzj`~BASC8I
zQ<L#<Y4DBks8{#1wxWoPXn)nSab7!ER8av_pe#9xHM7)nv*Kd~A<r;yr?viiEP|O|
zp>d)iEFH_kR75xrsmjVZ6}Vo#&k2K)w)ph1+{ghX`UHO;ummj;={5!c#BTHOHBXgj
zuq)wrbKW>Ae&e1BYKpDnIsIOH@d?%R3s`0R@N;$3Da8e=HAL^5{1em7lc5ULoXkz{
zpzi&iQ@9cNHuII83hxmN73@B|vYg05K?rWxJ~h6&@F<U_qm`{*ndEGOtY(nbeJM9o
z1fXaLfWKb+WYDd&q9ou;y6BsKS`41383KJ**=o(GhO9vY+w(CASqN1fr;XU*5gr}*
z#|$|o<CJhLFn)>hi$>~>FXt5#hVL+~kQ0x{*!AB2OT<&AZa+T>5gvTq(g?G)T#U?R
zS`%^UQ8X#jiG<00@rEGiB2b9K&$+XlOEF8z(+Gb|{92jvx~o&r53S{N&^<V#W?bf|
zrAFu!WPvEQ$mSO^REFHqNpLs-HIB@%Rk#|kTc*0Vzvqk@q5Z$$A+az=z>3G%9~oXf
z@LAA$q^=qL0>foJ-f@xbW^(<_IfUaOP|jEcs3dzhw`)w|KAbI|L_({D-nuStl9o{z
z-b?TY@FT4A5x9E%X|jHHS>nXtjs?LrWe*HI4KXQxdcM_!Gz?wl?%n-o?wYt%HPmVm
z#quTj2C20AKo5`_K4tn^L8LRJ{@kA`!C1Z*$B%;2&nSb(2W$r2n#pPAQiIpqfhv}+
z2kOWGeyPIZ3r-_5-^}th-juV2v@$sl&wYm0A-cZHO|?#`5>spVU{d7D;Zi-wqhMdH
zMsT|t<N!G)1*gRzd^?yuWz27g-@MdRTJNkQSM#&z_5%ghL{rY*<wZl-?1hb*aeEh5
zN=HGP;%w4o)Fz0Y0uR3VEipbK;Uy@B`<1f1QmY-aR!uIGRjnff)GRCf*w&Kzp`Sfk
zSb$6b=H~^}v~}SsetKnTITc4&IkH-77XHYEtW77l%JxJyCSq!i**U8<BT*M4itJ~=
zgatRUQP>fStU@^GZaHD5KXP!|GnniIqD>s6AumU{)i799Rx&|7=Lp<DS(xr6M0DLA
zWE<hiATEbOLBH;`JE$rE3v5@N7XI_8ndfHy7{?G8gB}^T%}r4Ah_mRax<ZE`(LWBg
zzAAS=95ka?_QvyU><;~Z38hP!e*1#M3vL0CWf&=aL_XD4pdz)|qODM!T`O<o?EYv~
z5(fr(zi(nYIr#0u!Z{6t%hAMs#{0#DKP+Ntcqg*~YvXGm_wJBaG6)0K0e}78=5ah&
zg*3PFLyWJ!qdq`&NFFaFT3Ab9C4vK<&oH+u4*gy~WYcs+2cr;`dpL~mk_t`(?P6I)
z#_U{k(}<1b%pehyWcV94G5_RHN}sla1>PTJi{xbMhLZKGTxRnq9gXdFvDIrJSMM2F
z0^~|&LVGT(X5nnw5Rl(mV^#{6(<~=?;d|$K#4jm5@QzK?Ez47lgm5n{;|JZ$fI}dq
zeA1$wq7Z#ri}V~$Jgi3f47mh@_E;1&1bwo0&=Jze8@%o=i$j!JfL~4tLz!VpD#OU*
zzTbmR@5b2E5dNL(n~<`FM<5z_#XzWnJSVvN+VuLv^-Nj+G|xGRHZwdlE5mGlx6aqk
z>scgjxemB)=<0N1P<ofF&7txO9Y0o5-&Plu8?hZM1qEG6WtKYXf#8_4wXom~mMgzm
z+7G7!Uheq&%6Y>BuL250)*6nJ<czKs(_6XcI$=mK9FWr{nW3vt>{)CLI2jdIcA|}H
z2N9E>DuSo8pGPP=ptBJk?6T%;VjyBrBGJ51|KDg6elPh5*?}#FAr+>QhV-8{BUUqc
zSLW|tr*(=nYX*=N^d5ag%|gKCit>)7^b4Qd_kNx#AqyP+=j{fu0N0_`PoyX&0nvyr
zy)F}b4MLSTO7IiX44f#Yw%6U;V-uZV&sQCi)V;IX9Si82Aw$%wT>a{*Z3k12>{R;o
z_fzZd=N6v~C;mxoOFa^C;u%@mTnPRsd^nOemaa<sQ6^Tsr12W2zMuC?AXUd1Gx`6q
z_tq5Zt}=u?=WZN8TyO1;9`{x`+SZVp0vnoEKxLeEJ3Q+EEXlcTavA!MvbCkKw_=$N
z(kL^-G4=0<Y;7&m!IS_zIMmGh35uJUftyx?F2kg8IbaNvZoL$LaD14olC!dp3mj)K
zNDvPYWEU_V(|z&?YEUMrD#fI_e^^l@8#`*aQ)FsTWsvh(2fs@)qjZj?+FWK)SgV_9
z)1n4ZQMv#rB=I8yb0?J%E!&wvQ5DIe%grHDWJfy1oJ6(yO@Q!gK+|t7IJ-x)CnZp&
zwOJMK^}ET{dXi+0@P&V+3~LoKK-r~bx>`CTqxS4Cf7U~)kFNg7t5IM>X<C$USq@p}
zb`_%RhpRf`X<Ghw_?Kvmy3Dc1F{sURVFQMKW8(}k@dY|&iGZ;np%Y*^xuiV@!rFra
z9*P~EHC=~~)VLG}?9|Jgi(gdny0(2a3fdA&Rd45k6;v3DpCUMYRgUEwma>%h2rC3I
zo=M*N=|ck7>j5{XI>XDa^DN4?qZ>|t6m9T(WQ0ujYMO{C%Mj{=`dlV-fSjw+$^_qy
z>`E)&n9?c&11FuHPS$=oe9+|W?joaYh$*>0rqYM6@+J7Ti1f{l++#PEi{V9DxIarA
zM+!?MS)`^aULQub6k`CA*@HoSzXNeRywZhC=i|k62lj79lN@v(agL@tegO9zX3b=u
zOAphm<R_!UoOH{3^)Tobq2sN}7cL5CAcaD#O??xrsaV+M<h#_TJGPW8H#@?tpbOL*
zl8`m@cxjSk<B3MX9c<NzeUiZM=BR5c2{ghO>!_Gvwa?tJh#wRPNRRG=G2FAw19Gpl
zJ4;3~7QW;|s&zNVlcVosW^0_BI3i+}D}k{4&DIjlZZn-MT!a4NPuo^~Kn36A@xao?
z74H#p@_W?eBFrIEMLg54rq=<WB#?mLhlV)*O9R3)#)ZN|wQR=@kru-3VUz~QPygV3
z7?=!6=??Yq(0~S^UrcGRa@111x>Z%>zh+ADLp;16x6(1|>$bhaGx8zFD!b1D7AqDf
zT?3yUI$a~!&Q;cQ5fX8^vh9*Ix?p+o|BXY3W2%r;r|wAgQ(}dRt0yURehTh<l;Yc}
z{Gq>>Ar|>^xLE&Z!^OZ{lKkBdaq)ndXZVGn0a15~W2zQqY+WT{e+u6vZ7U%sR!XWg
zJiZG9u$jDJR;m#oaz>xTGibhWKp7j76fomylZVp><%MYk-q_OJvPhuUA`u{4h(z-K
zg}b_t%I6d$>j&<S^3faHZ_yz5!3|<4;j1&nO1;dZT3OEH=waw{q@gIh!Fo-3!ZZBz
zK;6K1`&UeDs>Idk<ctFiEf1PS9iNiqX<_sG825cw8$P=Z9P47xiccK#A_U=e{40Kd
zZnnpc9LQx^cr($O39+DDs!bBwG(o!xLrg^LzD??D@br6XePUNzp7!pWYc>5Yofe73
zcK|^2VuBZtkE<9a+3o#V7Kx!-jOX=4Q!k$BAPjj=WLp2<Tn%<WAd>tWXLg{~08^@y
z{=?EO7cDvUo_bk*OHjW;h~I<EV8{ub!<Rp<be!hBN98h@)IwIO?rY0GWp`@ymaR1t
zx@XG(uw+q*E$hxDbUliJE5DV7hn2})C>Gm4G>iQJu=&F=^;@*tYTm)>%L9;nv_MDn
z^vx$?8jf>&h$ep7&rYK~eHe&78`}6<vMcI+7cj=^q;elVvh;izmnZQmlWM8m?G#$!
ztjIfQ6KkbjShOTp|B&>soLc*lWcv}CeV95Z(uR3t)VD(%S-t5OlUx)jhua6-X$l9A
zIFZCM7HiDU9~ON;LzXzOQK%7+8-5yji1W>auc!?k+mA~5KZP&L4*8^y*FuMacZ+N<
z6w_J?9|vx)wyR^IC;$ar>BTf?X{LeQM2=N}!LuM%UF(n&l-rrp7uNPPKRz%*w-%xH
z!!5qIyq%K{S4Bmlc_4xm$`Q8C$F`?E=0R!4B&a40N$S|cjIyo`5aT)Q{iFdxzv?+6
zU^OKd2xqs=AR8@k^T8~_XBMIoS8gKdJbalU)n>r`FZhq7)BKl9y~c3=NBZ{k>H%}P
z$Ma+=(R+%{8n@QfBKY<5u319CFsF)F*M{MHSoVQ$xZ@WER>%@x>cc0Z>aTZDzw%$d
zX4hz2^o4{tgi1yQ>;!~-p&}q-{V3(X7C%I9{iLN|AFJ?zPfon|k^M^;LsMTFNESwX
zGN+PV-ir?z^A%F)Vwu$hy2ATYI*jx-bZ_`<j3C)9bIz+r+%&Jv1>VyBfqFNMC~0N|
z<TFHxMt1P?h@6x!uYg;|Rj<JLbhJs3XLecff7icFQ|z9^+m`qN`m!FFyio2(fu8t7
z*@M2fUq%)f@^mB-G@C&W3(E`0q7|dCZ%#N3;=<S0>^Jp{yglTH-sL(*BJdNd5{@$C
z&5q9-#GOYXrMM?@yZ_;@xuGa!^aS@naZxL{oqnCVBNw?}$l?oCXtMR$Qk16vXD=z)
z%VlFACd}rqxHWk$ep<@$A~ZOo!o(q1Q|+GDvoOh<=4u`D2)IrKYtKw6JQ>jo4+G3?
ztVx?-S{Lj;2Y_KdIYXIf+YowCxo#HMSin|0(@ZFMdb`_=V9=^16DC$AOyNXJ7S6-5
z^dkr1$nDc|eo@#0yQE8eRbC=rg{@=|D0qkL>ADG`=m5`pO2zwo5Ky^)iPWX(Xn-8M
z8dEk`J6AuZ@|)(~nj@GcVlnOXT)c@ej^D2lXa+1B(sfs~lVQqI1xtcUaDN?ik5+X9
z1}wCvSt)?j$y!tNi=#km>$6~<+?SQaVo*X)PK@y=n`-bK#}IT_=IPPuD5xYNjk4uT
zdZ7g9z-7^`4!^$x%*Rxk<VF9>XAtT>DjIJDEo1)&H%C4~2%W?^@iTFgl6=15GHVbj
zdmPgvT?2u$D6;x9?&k;znpC^vnX^KC4jaT|#t<JoNQzqGukN`Dmn(EVb99aex^>lD
z1eA*lSX+idG6`=ZcIGxTj$|eYP&)D2?*`MQkoT8kZtX@vNslFQ1Fcb|Fv;f!Zanl4
zd#C+7<jCi&xP(y}e}dV?sLfDOKUP?&#H9FGq!fzd1p3iNA<RH{pe;t#E1EUdyW@2O
zXp+!jToj%<$LR^*H&|gkN<YTpf+y+uz&R|!_Gx;DaWTgM^yyx*fzO_WWZ`C^vv)(j
zR&|HWMRy3T`F}0T(je8M9SUSo;-htobk;ceGFV2O&hLaAm_c}Q9#!%9p<jmN;<toV
za1J56;WAbDiOKM`%6q8I$j7qT1@c?|PI-9=jPuvs74wQtIf#C~ohC)96H`sZ04qrc
z$nDw@2BVSz{6{&e4|!xj*7d!!W(KZ;X_ZZ|rr|evt>GY^c0)k(>*cu{Zri+=-uG{t
zwObClggfl5(Ra$Mr|r^#cU8*{CRBMP17VuiTWJJ_WTHyK=I+g7Bt$3N6MFU*frgWU
zH*6lG)u$NJkzUhnVYO+l^e>&9kiDDSbrU1C4_+x3TR5XA$2|Z+VjoTack*GF%J+ub
z+NJ{QJ}OXBJO_?f`0aGPTL;rhmeR-`P=GhX>W`ZvACQGTrn|Umjk+E>f&VP%n~{UO
z2(H<O2;wgH<b`W$XmjJuud~FTPBE$jb`2XN6k*hQ<#?j|`jmP8%3s2an}?vMywib2
zuC%xNH+_G|R<>*y^3}Vb*v;h;h3<M{<?KmchqWd?ip<%v2i<)F0|l&q&J?(T(aY@y
z0=(4h2Kls1zn6RhJAOOp6#+~R#ZsWM@K2}AvI8moZX78Ak7>+EN72@KCQp2*F9&<%
zW%b-3YLJ17+c)^L)c}P~NmbOextpeoi(fCF$_684dm{IvUksnfwR-tDh{z#ntg6-D
z*v#%*%j-p_DK3iuthQ4Fj#qhH8$?Bn&pzb<@H`RAUutw0zxCtI?-}!B*LDhurfX98
zT%~BshWeGRObI*Z>C|A*oSo_XRhzi<BgV$6vHC57OWt*6LuOIRu>umW?Qd7Kb%Xu>
z#DgPsPx>wA$JBMyp?ya5O=+^f<#MN#&-?)-yGK&m*gJ$h{(6i2#^c&^`Yf3_GIT&3
z(>QKTK4)$laju9_!oFLfasoqTz(46h8d6SmNvSMD{Z7_47{`1$7VYmq^v`g<56KDa
zPP%LcM(`6unXD;Vp_j}Dv}_)scdAYs{7KM-E^*;uA2KWk7mL25m0oWPY<6q?1>|=!
zO=>X+>l=X9Rbrd}jP2S{>9nA{^l5AFsXF;K1Bt;wyDOf$);(VDn^iiP#nHMRFF*9#
z9Q@Z8rU{0gzL=qhuYN9sHlnuxdvADYq%Y*6+@%)k>32E)b0SSmO%~>YTj-&o{4c(l
zwaC&fkfuhrG8lGcd;kz=1L;-E(20#r1%gdeAo)I^rD3h9al@)IubgTp?M|u?xk9=l
z{-HU5;HbuhM*7HiU5N<o2XTl9@?^|0jHaie;-fHZW@(P~&B)wLB`56jCFP^GJ1?4Z
zIiC{y&6qB&c9iIn!7+>0zUr+lR{I!szx?Ml#k9}q%@c0hdOq-V-Q66OkN$2vzRAh!
z+X42B(y^d%Q+`dzF9ePb5>x{9US9AtFF9!pd3|_f9ZhNx37`K*k=Fs-ouH|CrC;UJ
zokYNvhj`L`L`sXEBCP9fOxGR*S}+)2TA*aHJ`h?Zr$)b91#c3QYAp<jDv)$rsKnzc
zb!h$JP`Pf(_E=6qZu(oGmK4RmJqo;T3GEmItJKQ8BbJQO;J}FZz1T$DsKpjVY<r#0
zmoTcK>$zCKNxGW_oJ|5xPa*tR5$U8K`{$<x(1`i^q=6W;BN~2sI5x&`d%Eby<CT4>
TCH1w1Jzjthc7okY3rF6fRxRT=

literal 0
HcmV?d00001

diff --git a/MikroGig/20260703/20260703162040-Config.rsc b/MikroGig/20260703/20260703162040-Config.rsc
new file mode 100644
index 0000000..5c61cd4
--- /dev/null
+++ b/MikroGig/20260703/20260703162040-Config.rsc
@@ -0,0 +1,3287 @@
+# 2026-07-03 16:20:41 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+/interface wireless
+# managed by CAPsMAN
+set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \
+    wps-mode=disabled
+# managed by CAPsMAN
+set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \
+    wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
+/interface list
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroTik
+/routing table
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/728/bebacfc7\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 11:00:05 30.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add comment=Generator dont-require-permissions=no name=AWG-VDSina owner=vados \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="# ============================================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-06-30 22:08:12\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\
+    yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\
+    QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":44044\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=8.8.8.8\r\
+    \n#/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina dista\
+    nce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container config
+set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+    amsternl
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+add bridge=Bridge-LAN interface=ether1
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=Bridge-LAN network=10.30.30.0
+/ip dns
+set allow-remote-requests=yes servers=8.8.8.8
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \
+    to-addresses=10.9.9.2 to-ports=55055
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\
+    tcp to-addresses=10.9.9.2 to-ports=443
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    10.30.30.81 routing-table=main scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=*A type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=Generator name=awg-VDSina on-event="# ============================\
+    ================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-07-01 00:03:43\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+    kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+    AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=109.107.177.79\r\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-07-01 start-time=02:03:59
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
diff --git a/MikroGig/history/20260703/20260703162040-Diff-Config.rsc b/MikroGig/history/20260703/20260703162040-Diff-Config.rsc
new file mode 100644
index 0000000..48edd71
--- /dev/null
+++ b/MikroGig/history/20260703/20260703162040-Diff-Config.rsc
@@ -0,0 +1,122 @@
+11,12c11,12
+< set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \
+<     wps-mode=disabled
+---
+> set [ find default-name=wlan2 ] country=belarus mode=ap-bridge name=wlan1 \
+>     ssid=vados wps-mode=disabled
+14,15c14,15
+< set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \
+<     wps-mode=disabled
+---
+> set [ find default-name=wlan1 ] country=belarus mode=ap-bridge name=wlan2 \
+>     ssid=vados5g wps-mode=disabled
+17a18,23
+> /interface veth
+> add address=172.19.75.210/30 container-mac-address=26:CC:65:F9:9A:4B dhcp=no \
+>     gateway=172.19.75.209 gateway6="" mac-address=26:CC:65:F9:9A:4A name=\
+>     veth-awg-VDSina
+> /interface wireguard
+> add listen-port=14710 mtu=1420 name=wg-awg-VDSina
+2887a2894,2947
+> add comment=awg-VDSina dont-require-permissions=no name=awg-VDSina-uninstall \
+>     owner=vados policy=\
+>     ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+>     \r\
+>     \n  :put \"Uninstallimg AmneziaWG...\"\r\
+>     \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+>     \n  :local prevDNS \"\"\r\
+>     \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+>     env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+>     \n  :local storageDisk \"disk1\"\r\
+>     \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+>     ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+>     \n  :local prevTmpdir \"\"\r\
+>     \n  :if (\$storageDisk != \"disk1\") do={\r\
+>     \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+>     Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+>     \n  }\r\
+>     \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+>     \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+>     \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+>     \n  :delay 7s\r\
+>     \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+>     \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+>     \n  :if (\$prevDNS != \"\") do={\r\
+>     \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+>     \n    :put (\"DNS restored to: \$prevDNS\")\r\
+>     \n  }\r\
+>     \n  :if (\$storageDisk != \"disk1\") do={\r\
+>     \n    /container/config set tmpdir=\$prevTmpdir\r\
+>     \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+>     \n  }\r\
+>     \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+>     \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+>     \r\
+>     \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+>     \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+>     \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+>     a\"]\r\
+>     \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+>     \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+>     \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+>     \r\
+>     \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+>     \_} on-error={}\r\
+>     \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+>     out.rsc\")] } on-error={}\r\
+>     \n  :if (\$storageDisk != \"disk1\") do={\r\
+>     \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+>     n-error={}\r\
+>     \n  }\r\
+>     \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+>     \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+>     \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+>     \n"
+2890a2951,2955
+> /container
+> add comment=awg-VDSina envlists=awg-VDSina-env file=\
+>     usb1/pull/awg-proxy-arm.tar.gz hostname=awg-VDSina interface=\
+>     veth-awg-VDSina layer-dir=/usb1/docker name=awg-proxy-arm root-dir=\
+>     /usb1/awg-VDSina shm-size=4096.0KiB start-on-boot=yes
+2894a2960,2986
+> /container envs
+> add key=AWG_CLIENT_PUB list=awg-VDSina-env value=\
+>     "NAonhRSuFIrFpNKTs5X32ItcvFuO1kiJUigQZb95YlE="
+> add key=AWG_H1 list=awg-VDSina-env value=472437748-472438637
+> add key=AWG_H2 list=awg-VDSina-env value=707808381-707809250
+> add key=AWG_H3 list=awg-VDSina-env value=1609078552-1609079495
+> add key=AWG_H4 list=awg-VDSina-env value=1012329484-1012329741
+> add key=AWG_I1 list=awg-VDSina-env value=\
+>     "<b 0x000100142112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>"
+> add key=AWG_I2 list=awg-VDSina-env value="<r 32><t>"
+> add key=AWG_I3 list=awg-VDSina-env value="<rd 16><r 24>"
+> add key=AWG_I4 list=awg-VDSina-env value="<t><rc 20>"
+> add key=AWG_I5 list=awg-VDSina-env value="<r 38>"
+> add key=AWG_JC list=awg-VDSina-env value=9
+> add key=AWG_JMAX list=awg-VDSina-env value=920
+> add key=AWG_JMIN list=awg-VDSina-env value=105
+> add key=AWG_LISTEN list=awg-VDSina-env value=:44044
+> add key=AWG_PREV_DNS list=awg-VDSina-env value=8.8.8.8
+> add key=AWG_PREV_TMPDIR list=awg-VDSina-env value=/usb1/pull
+> add key=AWG_REMOTE list=awg-VDSina-env value=109.107.177.79:55055
+> add key=AWG_S1 list=awg-VDSina-env value=90
+> add key=AWG_S2 list=awg-VDSina-env value=136
+> add key=AWG_S3 list=awg-VDSina-env value=45
+> add key=AWG_S4 list=awg-VDSina-env value=27
+> add key=AWG_SERVER_PUB list=awg-VDSina-env value=\
+>     "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+> add key=AWG_STORAGE list=awg-VDSina-env value=usb1
+2921a3014,3017
+> /interface wireguard peers
+> add allowed-address=0.0.0.0/0 endpoint-address=172.19.75.210 endpoint-port=\
+>     51820 interface=wg-awg-VDSina name=peer8 persistent-keepalive=10s \
+>     public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+2929a3026,3027
+> add address=172.19.75.209/30 interface=veth-awg-VDSina network=172.19.75.208
+> add address=10.9.0.3 interface=wg-awg-VDSina network=10.9.0.3
+2939a3038
+> add action=masquerade chain=srcnat src-address=172.19.75.208/30
+2987c3086
+< set time-zone-name=Europe/Moscow
+---
+> set time-zone-name=Europe/Amsterdam
diff --git a/MikroMaster/20260703/20260703152002-Config.rsc b/MikroMaster/20260703/20260703152002-Config.rsc
new file mode 100644
index 0000000..19f1807
--- /dev/null
+++ b/MikroMaster/20260703/20260703152002-Config.rsc
@@ -0,0 +1,3700 @@
+# 2026-07-03 15:20:06 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \
+    wireless-protocol=802.11
+# managed by CAPsMAN
+set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \
+    wireless-protocol=802.11
+/interface wireguard
+add disabled=yes listen-port=33033 mtu=1360 name=NUC
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=10.10.0.1/24 client-address=10.10.0.2/32 \
+    client-allowed-address=0.0.0.0/0 client-dns=8.8.8.8 client-endpoint=\
+    10.30.30.81 client-keepalive=10s client-listen-port=22022 disabled=yes \
+    endpoint-address=10.30.30.10 endpoint-port=22022 interface=NUC name=\
+    MicroNuc persistent-keepalive=10s public-key=\
+    "oieVxNCDa4G5LU2QVH+s4AXwapSmdiDvVVhBS/FPdTA=" responder=yes
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+add address=10.10.0.1/30 disabled=yes interface=NUC network=10.10.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:1 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.4.4,8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\
+    !NoWG
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260703/20260703160002-Config.rsc b/MikroMaster/20260703/20260703160002-Config.rsc
new file mode 100644
index 0000000..be0fd25
--- /dev/null
+++ b/MikroMaster/20260703/20260703160002-Config.rsc
@@ -0,0 +1,3687 @@
+# 2026-07-03 16:00:05 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \
+    wireless-protocol=802.11
+# managed by CAPsMAN
+set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \
+    wireless-protocol=802.11
+/interface wireguard
+add disabled=yes listen-port=33033 mtu=1360 name=NUC
+add comment=WG disabled=yes listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/729/f42d43ae\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 00:05:03 01.07.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface="ether1 - Unet" list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \
+    endpoint-address=109.107.177.79 endpoint-port=29185 interface=WG name=\
+    VDSina persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+add allowed-address=10.10.0.1/24 client-address=10.10.0.2/32 \
+    client-allowed-address=0.0.0.0/0 client-dns=8.8.8.8 client-endpoint=\
+    10.30.30.81 client-keepalive=10s client-listen-port=22022 disabled=yes \
+    endpoint-address=10.30.30.10 endpoint-port=22022 interface=NUC name=\
+    MicroNuc persistent-keepalive=10s public-key=\
+    "oieVxNCDa4G5LU2QVH+s4AXwapSmdiDvVVhBS/FPdTA=" responder=yes
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 disabled=yes interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:2 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.4.4,8.8.8.8 verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new
+add action=accept chain=input dst-port=29185 in-interface="ether1 - Unet" \
+    protocol=tcp
+add action=accept chain=input dst-port=29185 in-interface="ether1 - Unet" \
+    protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established
+add action=accept chain=input connection-state=related
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    disabled=yes new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" disabled=yes dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    disabled=yes dst-address-list=!NoVdsina new-routing-mark=To-VPN \
+    routing-mark=!main src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=change-mss chain=forward comment="MSS on WG" disabled=yes new-mss=\
+    1380 out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn \
+    tcp-mss=1381-65535
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" disabled=yes \
+    new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN
+add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \
+    dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=yes distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
-- 
2.52.0