From a1a7b904dafdbd012c6731ee2c6011dbe50da753 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Wed, 19 Aug 2026 11:00:06 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at Aug 19 11:00:06. --- .../20260819/20260819110002-Binary.backup | Bin 0 -> 105229 bytes .../20260819/20260819110002-Config.rsc | 1211 +++++++++++++++++ .../20260819/20260819110002-Diff-Config.rsc | 4 + 3 files changed, 1215 insertions(+) create mode 100644 MikroMaster/20260819/20260819110002-Binary.backup create mode 100644 MikroMaster/20260819/20260819110002-Config.rsc create mode 100644 MikroMaster/history/20260819/20260819110002-Diff-Config.rsc diff --git a/MikroMaster/20260819/20260819110002-Binary.backup b/MikroMaster/20260819/20260819110002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..5e827484d3fe8b9df169fc2a1d6e401af97ac54f GIT binary patch literal 105229 zcmV+aKLEh*sF8CGn*jjqtQ06Tq{LNIs{uCu+h#-n0002|`~QAG5(NNQ!s&Li;w(Ar z!>#jvHG~V{PppS9p=}ft=edZ>YgKxx{G0knWQJtO)iHG3r*75e>zI#(MVxxW-;7br zg%=h77LTwzH_(H#O69lS=*<6{oq*HronOMjps0m(ccd--)_1tT5Av#D^m8<)7meLi zAQ$NTI7-s}vR#CYTbBChkaqJ>jR&xukGZT&aGoQ&4BOK+`uJA8)UHui(Z~J9p67Kruc5 z%N==aXc;tKej#j`S_V$xXKbfnHGe^zVzyz9&E912=am+;k>yor$IaAMi>Vj? z3f4sO=kZRPcL=EYnu$@H#w-D+t=OA#_yj_ysj>OPr*>HOA${f&>I%VQbDPnZTC0U; z;R0~cH243neKWrh(b$##2{q1j8qJfn!6EPT*Lv=;2Ep+$c+M>Fvl-4d&gV=c!_qjB zIh*s2^GqM)Qm{n}cklXo!4;MQT7;E0nBTesz{mu~_h}@Gvn9j(1cF~w$G&q9W)|op z^6r3fs4MG1o|^vD0yto6P#%*CRUf;$SXN^T^2iCE8i7zG9MZiReSR$bQ<9t7)APx;i1r7N+= zIbAFsS66T-s~FCwLJQpPKeX0vT1EvF!|XIxfKx?ARNOa~a1w#W$yLVanXzZu%`(AK zi38?ye{wp9NoJ=7h7TddG_e&pN`6eb9c;FP&2B@r7UG`6W>AZYIt*>RoDkQ1BGxuY zGz*n0`_k!nVX=1P%|Jr`(4-$Va9_QW@Z!W`?qEgx{-VJYEYTnmx5T=KETUnAG<;7> zex+5znZ)<7FBcCWEVV^n*Ml4bS$JF3`@WW>D|8aZ^!tnRyz@Zi$o>p8c?KgO1mLmH zG?M?+`JQXy$n%0J>eQZkkC-VF`~F{JhB9%GZVl`KEVhIg-rKVw9tyfbe) zq(hDXJz{-`_u5WPMX-R-0gIll6}p%k>G!~|UboB7{3p?mA`pR{htj4?i>Y=9Z7SyK zlt*Js6W#49X7W9?JX#N35G*Ur5IP{#Wrt~|Ird}R@&p`NQ)e7TIapM53I!G1=vwG6 zDP;_VAyA@;+h~Gup{pUNfQwX*20rHgC1lB4x=HH%G)w)~;ioDBtlUIDI0Vig^B89# zHJp{hST15fY8r>TO#v)Cv2vru9O_<4$eC&n_PLp}7O$baU#o&idCYaA{ZY<6JV`R; zQ%3{=XUnrHOA)1F!%kOYLek9yClEL?Err`>xusuY2ZQIuM-&x%_tDK z!TMb_HENX0TwOdBvqDNK>=kX~uM;FW#IzAB$ zkQqj#okndfFM%p>cKI3AO2vyXuuco+6nrdV(;9JhN3l>MMQkzuqthx>ofqp;uG6xu zy!3dZ$1RRf^jUJ44vK?uG$_gHAAl#%mz@~M+MEqqY8e`w>duWUwXtg+ngW_-n;b^8 zW1QnU)c^jxapLa1$wo!OcZ)rxPNYC*rmepKy^MyXxEw?)I$1wL(I$3fbG}cGOF-iv z&ZucJnQ_6YIu5xffijpL*}o?v`Z@h{l+abu;y&(?)n-6G0C zhEB}Y@cw_ep(WRNor^Pgd!0DKa*%<{`e~dML`NaPnJT2o+pdcpdi4^Z6lCO0gSFG8 z1w0VE=xJt2Ao8V)*O5c82Z_N zV3zb=my8X6sW1cSl$!=_GLoAl{69$sa$EK8c9Sg@UvO*|Q1(A*MDaS{1+$S6k?!I_T5weP&Y1aXx~z*Je>hTrt>Nt4c_(Tf-6=;G_7?yAMQz}K+A!w? zJxf0T?+wtNJI;+1g?As~6fAHzixR{q^o|_O@dK6|(4usdIut?U7re_I_=?I(@MPZ-Q5jH1XY#44 z`ECu^?Rqq%3P@o=Kr^3=<~v)?F5!iwc)0`r6{sJ2O`*+<3U99F*p!fE2EgaE70PBR zIiNY`yg61m#|FOq;0{>gZ4wfTWggL_(NmNp>EG?`Phsb&`!Gmf_HwZ5VyZYBeR~jP zPGVZ{_OClL8+(Me#wS7*h&979Wcv)m&64lzWZ>?+{xLHa^m;Q2u%FwsY+GB!6=qlUWO$1JN6!S>sy@tpye(Hki^^2jA1(*Cl@5aAQ@eCqYj%Bx%vQ-I(w zd8^MAGPvmVecIkhP`N_N|nu(dTw%hC@&d zD)LenXuA!UVoie~P0ah1Rni;$FdVzoVL-dH@XUqYFFwNY3#>dQbKSul8Ivt39A&S~ z4>tYj|L@s*n>?TvtPd>P0}bLUbOTetE2D1^hg_ zA$QF?Z813~ z##zA|!bp7+Vgc}UqhxX&135vgeOmnWP-~@r5CdDgrYA7+kU8v-rM@ia(`}bwPfY>8 z^55h|A}JmvV!6-y;z$Ypf0oa3`zxB`Jg0*L!2n~R55jQg9+jefL>{a!Az;jRXNdyd z=#C8u7?_3TM0WskIN}i9nNxgGk10+gd=jc@&37xtI8YrhV=T~l4V=g6`TiQIir~Y? zYH@PtCqBe_ii+rFO0+z}DG-PF`47K_T*FL6_z^gf0yuYVx#S1B~8pFUv(*;AjgCa2zQA zn!w{At|WRG5C)U=UOvg#AKEWTkETv^i1w5IRAu>wCdwedf-C@!97Ek2bi$|1Q*)DS zbp%F5(G-IAHuq52>0YZeu*5*?{IQmF4qq(?S91&7LZBZl^x&#DM#a8NX^%Jh-||vy zRP4zvE7TV~Xg~U8Pm8N50<){AigMj&3u;$!M@jD9kq|n7KmfvH_ATvWdahl!-2Lz} z6^%G_Uzm0poaO#bRt5PXVd6X`t#-b)Da}+Oc*OZPQBIhwPyO#uKbl_3#L);v%@y|D zbLdaUxr&BeZQIvmz$37SCeBW<%P!2Jt0AQ}*s32c#PCa5xr9>>x0I`jUShpMe(Sp% zy+BW+2T2PTc4>n<%SBSKMQ%$iG+Q1Fsj`j8zm1XPCF!=haJ8AHjy4YAAk%{T;G zz#v7_txBt>Arp?Z0x!*{$7|nm%tYiaQ2$9?=GghN7qUK)!~=XwRh;83_Wdzk0X7Bh zHrTmbrI|z!B_P)8mH4GZk^BCxtFgw;s__rbn1nBCy*R(w`29H|1oC_WL2`wkn3N5W z?0wHD@!l3)9akpbDega{HkSKBUy0zXZHEvz9X1}rSZ(=!O*wHwT!OA`IF+X-A7V=# z+S*7GYgS2vkEW#CGxrfRY^M056w^yuiCX*t>^8h09e%xCUacn>) z1`s$H_5%8LspTYF@ZLbJAuzB#Qx$83wK#u`Z5%Vu0L;G*Ba#s%JX7gcU7HjEO}dEu zXT~48_EOcRaHm-UBASry39{pRIN&6^Yqa|osUyt5 z*zS?S4cJINRC^Zr8Cp7a{^-HPa&b@Mi7s; zl1In^ZzzWLh9Q^-`od)f$$HfEe4hjmpxv06nHBu(XK`%YcR<@zj1Wj$sXHJg`2c<_4%0jjQ0Jn<@c|0$%uy!i1ZI2|Xd349Y6 zA<^25Hk^XAo8+G!U3?WdYWfQPjyA9 zq6qD8_oGSP_@enU1(ABhdg2tvJo%4OP96u55VHdpj(=p_eadO2z(rx>~$>jd^MCmoNL zM=}(@jTmo)sIr)J>LD7ZOfNqUqQ98lyyCeC4DjtI>!-g<*rch3ydyHHoM)x`xU)SF zL)WDzXeqW8N7y}BMfGXe+NboiQC+fZSbQVbXX$M{ODQvS3j@K;Q|?-sn?)5Nn0h)zJPEQ(d#+$B|=tD-J#Xr;t`W~iT+j@q?-Lpmy_1~ z%(*PQ&nj6_Q#fR8rjcPD0>nb-ay?LwbIC4*zyfiBtUr>{a%R)PV;Nk8u4fd$in zoV~XJ@P|#igR9sKD@deA<|FQIy#)Hw>lz6xdK*u$`t^6|dx$(l(9^SP;So5DJMy%G z#n-Gd-VLGj>wE}&XCv)bEL^+O_lO|&eDN1(vLV+0ZW)&3r|1lfYyG(UYfa9o^2?lb z=g1a>BcB3sd4DJa>O$uSR-oNIkjGyR6mfdkZpwsjfQ*EW&UmXeFxbk7Ta|m}Iz5|u z>KttIjR$KNFj>NPls*$NnGoO(*{Ltx;IVi>Z0|OQrN*t!5OsPtq&vf;04EAluG#o?kH|41GMC<^N0zcPC=U)#Zyp3 z`U}90#}LOW!=Ni^Yun1sv4rC5e>(Q^i9wWLmt~vZezcb?OdBhGUJ!y}cd(++Na<>L zrYt$1*?8|@)#=!O(gVKXyhOnN*q2YD5P@}HpBV4Vutn^E}CpMDJ84AL;kJ3i^%Gu2pZa} z`6}Cdsvm5tLL>YF)6jeuTa136%38cVwC=5-vi-H~cUC#TI`7c19SxOaYxtbPLKJ3Y zZSNxhNdT#$+!Q*KnGATtMVKMzQ~U2tifOghav5fVFc-Xz{s;Ama~ZY=h7brwDUy6i z*3GEZ8zuCQ)&}?ugBe#fLNs7-7VfDw#RKyvv%(*my3pHS+79^}q9C7O(rPTzSwBl` zs?CzjP*25ocQT;QJu?a^t$LBHc^j69`Y^0p!R@Z zC~N*a>*X;&Io&fyTvDkaAcbT9um;45BT$YaI~MU&NH{71{|Oho}F9*g}K5L zGHVG0NV+(J{Kf1o)F*N)`HpMqq)@|QRg$u3LxJD&z8U$v%?-c&8A~iE*SCwHksK8p0?d>)J(|{4EQ|_$j3?>cLZ|(L~O?!XkhM{ zqDz`8qA^1fGN_@?M!oi)TP!z?18(8^7fowWl72$+t<|~RW>I`sZ(~p=qq3C+M}r!I zoh@kMn7tsJ87ZRc&bBC?1+-AP;5!Diax@dCfA}8o%SPj<{a1}n6!qQ+2igvUKOmF74oY52;Ab2*gpO(rJ5}M47tD>h&W-2?+hW%a z<$DdcRp3N0KblFC7Ne~BM)5Kz&_aK6K~))J)s#<@;+ZOv#(k!|FE4k%HQ+}JUkdaD zt$;G}zKg~FhQ#N76n&LEVX7N&vo+nsIGt?oeDknTwPCTi%fZ#OJazTPS{cnRj;NTl z&q(U6(18sps6kz90Ih$=i5vso71DYj7#C0&HG05saj}PW9P?{~93X|R8*%JP$HCEv zJuH`3G4e<|8`4zAel9?_A4Nls78$M#gszh7BkK9iQ(d=;A;5?GxW`|*v*3Kuncy1f zOqw|S4*ZhrIMU0~sh&KIF=>Ew`+g_$;ag+dineDscXM0d7+t12`Ao9cNb&vgzjUc| zZ%*6|8!E-6uH}`aeuV{aS2tVL0k3lKX#WuSv~NTPLJ&dfqm@ZrKe;RY&{W5sJ`~RL z0y_hBRuVmjQouc#zH%X(FKl`j!Wh%IsysyVjbFzV7$`9Ii}3d9?|O33P^GJ5b=1S! z{5+zoT>w&;HD^a3xVv`Y@`75t#FH*gRDN@AVqny}@7aOaHy z4nq?^JN5WshheI1vYLe#o?eX^@Ec$u3(mJ4CnS&lVw3Cnp0_+r;0@MwO6#ag z#K)|`Rq9y9vW<0W0V6?ztFjAHl02X;GyS3dGDebvPMeLLHV&PSPL-vCaCR&t-0Jr7 zy7u^*LI75?_1=W<$+@M*T)9MbpH;? z@XG+n;PZ z;+F4X?w{oXA7=na(k)32-4>mLd1~}#rx+yxUX6yci+k4RUXonAV1_%(n} zu=5P9D^5fzt`D0g8P2gb%Z4_LTCUQudPH5t;_ApoEHc_w?FOC^fOe?5D)y6&FmsJs znl=P;xC2rqm>HQn%RNYv6UxY=v@F137FB_rB(McN-<=gq~58dTVRy;E3>ave&KzRQfo){X7 z71|28g+-@PO6{`8!$lo%zWL?WBHC#bts(#apC6o@`ogaQaTF5g;LI|w+%E9|{b;vJ zdMc!lYd^R(yy$62HWExkH7TT^d>NCT)B%C%Q7zUvUS>TToBgc5sMFrGx~e_a{jSc| zCY;P@itEG7@qwqF-U+uP${-wIYH|6wbHk+e<62mr@ewipuFTGZYU(o;3}{IoUU4Sk zB6y7ts=bt8qXI_w3RIY)W9ys zR3)SOr|d-z*H7PtkwfyjZZ1RQh-0* zI;MYk4SaG`fBJ%=J^3hk1~p1UAm@?E>ti@y6+*=Oc75uNrDQ4 zS=oY!L4Mc%qYI#a0yNm88HEm^*~oMgrL%C9f6LQ^LMQNr>`viW<2!y__(eI1k(%GA z25h8{yul;^4^Z2kB(F7zmAcl)!~eFGVL#o<8>G&_16@5AksGz&e$nwc)y^vaPGxRk z_{G)|URpPIFF)l=OCEp1eKcfEP1&dq=jbmU`D*x%rnZ+Hbff*4a|6{TaKOJX3FkY^ zbfbQ5An_YEC)##eA6$OJro%zl~R)$nxGY9I3sW3=DW6H!s3%xpi0vK{2eU8=R& zS2+c|tf3R}XFL^Sdj|zxQ{+GIgYjyPmW>l6v{L?A0b3gyl4HK5l`HAaz+*{8vtC^qo zm!KR}VH&(PAvCS?W zclaWoHsj6S@odVl0(oAzRiYUIlO_Rxz3|c;IpUx9A%L$U#6!g+#NDc0mrZJXXPL5A zP=9Mphje}Z7-BL4!G91{`Ek)2&4I{Kq*%p&{K~u0Kz5QfV`WJV;!Fp%&~>(4irEar z`0o6KXe++D>X0IxA%Du?d_Z}2S`04)X?{V~{$~v0MCGO}LUM+pmsc3UpOMKMt#?^V zhsd1RjFsmJczY~_J1CwUyXel^C1Ywqc0CDcjVc=pEb@MY)Wu&^F_oJ_i->73We2Vrd&Sg~bEJ*O+Oven=*3dvw3g{n` z_VV0X`k!u$xu#C$6?*RU=1hwgb&g8&t$nkR03))c$7+?sUz?m_-(**TO8%;|?Lw^q z3?{UBrqak@l9V+^uN4hW#FJ5_#rmWxmMNxOhJ|TG7k+~$Vzzc^plHCR!N%Y zjwiR=-^wSP8@&|xuH62j`Iu#u!=pn;gvR2AnzX4o89qDG*6PT2k6^1NMbl8uBydAP zhpCWjOhU2*v6C$Yh~^_wE|#|uFKZ_fjiVt&#k zugGbf2)$(uFjAvhe*l%am*=|Ep0dRpM&}tO)uU=gvCWYM=}w26FBEBv&%FZY1-!V)3zTvX zAVPn^t;Wsmbbou+prn2^`d-+&LXa1$r$G8U0ni@xPA2c#4I(HxRjV8HemI0>{J)0fPO_3CegkoDlw|1r4>Wbb!d>WecyWjl|99^eH<7nn_ba0L7i(}Ty$^7_$x1d zzjlC9{S%B&Bp#$H7rs3>XTlE6@tR;hgON7FzYGv7Kv}Q?ccnc$jgn4ea2gp`-c*=M z8!ccqQq&)5QAY}(%%@&WO}q{d!tOgr)MRU8t$Tq@Jj}jeCZzIs?8i?ww8N5J;=~AD zz&#m%hj^Z>b>%p=sDosRj*X($aCuEKRMRHx)fqBcBqJtxcawftlma}cKexy=+oLZ?&afec=I7u~PfHKQCci*JvC3JwLrnX#x^=;(p{ktG}Ev{u)=&rLp_z@=}z3}JLG6jGl;W! z(xckn6<}-CyjwQy6r~Jrzzbti%WKLb7`UjA@|?Mv+ZCODt^fJ#J26+?L1fdaFGz*J z0N)E$M)mLbx@>GUN;~V7*xZzT8(lesqHGfCPX|HUVTaBQJc>~hPT71_y7#Vr;$TyB zYFuqG@i1gYJ%k*!UDy}b*({)~@^9>L8yxq+oUtsFcW?-yUOi7ZMn;Y1Ks`cuoQfwT z9xV0Ff<;|Sj3${T!h5nyHZDoU;o<^Z2nzD4^=Rree>V!g>ku-=X;(vH9VL!BRnaI}Lbn?zCnTyirxTISF$T-ub=q8XF;+V1j z3Vy4otv1m;wvw-pw>Yj?9?ZN`97iC>-PUg5h>F+?fw;_OE=V2q5Y~&I>B5rb9_-6q zx)=l_jQo2zS%Jl5N5PIn?2~Oxx|OQLoTuDtB&G9%k+1&mJ}jDBZ51?c!Iiu(I4@=6 z0CEuaEQ!8%V3DAsJ3#YhhhEetYyh%N00wdk{r@}G|6OF~7Ewd{D~S>8*`4qvfic8| z2WOj4i{c5vL46P|MtyCHJRSk0q%}E7ysDVYEA~2~kxYPDvAcpnVYDX(Y4$_Slqz8l ze=G;Z-7n+oA+n(iL6E;;&!IS26XY_N3M6)f3f*T-Kc{65G&Oz#V1$@c*7}mKOAd1U zjOm~jxl0*oEddzzn#3bO$+v(Jvys-DEXnq{^aZ^rGFMYke90jqz+mwV=`P-~i=cC7 z;>(!1WRo%I(=(HFK#C~ziV4a*M*xqrOAF2RvuwMlokQ1QMgQhSS+#DY z)6mxND9q1>XHT~^Jiy+RU3-Ra_=R+Jo*$75C}Pta{Bp-E6MvJjd=&q|zmgf^n~q*H z8DF$w1bGjW?p?tZ`7H-;K+7%5aZTQq;KWqr2I#3oU!PJsZ0vp`nlcEzJ*1p~A)-w$ zi9i?l@R8}lk(!i7r#*G?_qMTt{&R_1t)uj4q|x%ms+bfjMYq6clP11zF_vdw#4WMn zT(;xXLAjnt1^#6wTqR~{PKd4{!E%VDk$|%8f!WW{$Sj48r@q-O#qbd4Xb0Yudyj*x zPf-SYs&QC?_kf{ri&X{P|IotY%fxG6PN5y%1#MG@kTx=~(maHTpL zVItvp<6pT`_$vn$VOoDRNV@z|Gxc<~YG_l8=;QSEm?S7pSO--xX)`0(B!Q_YuIatLu0tq?xa@G9BEbL z+yug4e_0-|CsiN}^1y2yzU=ULhteqT`hIWpOVl)JsmnknQrN=c1MmIA($5rsg*c*x zRYzXulYNp*QSXMvrkmLfDq0DA>|}dc`Tm`QrbaEya`6^YX?jfxInK<3v7FDmnUdN8 zKWY4mZB^p;u*z5yi9e>Ry^q8DPlXH9uB4AgiESq|38B}!h&*n;TYooR{g-}+)j*hO z=^32-Gbh!Am+&EDD1q!yxbsz`vslah^%Brk$c<%Z!AJCY>Yh4&LrLQ$L3M7on$nGR z`HgBg7IYs9Mo$)flI-A?YwA991CR_LGjPBT;;Jm%<@9*y6nE_Y7E2RoDr0Y}h})Q9 zAdN|*Fz8D9o}{Lb>pt{wouSmiGbNs$Z4o_8$}ii^^cnr_ndZS6;Y)~^g;{ex17v0kE#=Y;eOUP(G624?>Rcx zd_wFzbNuD4{Z-gyVoosv)rDN5-VcvinFD#H_MH}7kG5(JrdPV!lfQ`4#uu{Wfq~?! zj#T#AVt_3IdgjOzXuczR#}0?9Egzp*&ufY3e4=$G0|Rrt7Hp%~BUkl;1?c3PVP!S> z!FOXYV0edNV0aa2en$Gwh0m;h;pDfENz}%V!aT%;nyCYS8^4;*IHSJGi-UttG%D{y zpa4@|INJEf$6xA(jsstHX!QuL8#kj!b`5mk3IVfNp>~w;BO+!6)fvkYlkIItKU+ol zo`5$1p!1G0yA*7jnZoJxv|J8crwB9E9YaaVn-z@yqdMy+m z7;6fKLO$mFbrHnLPhatf^TefbP&0g$IQPw1w&mK`Vz~=pGDS%WGM5 zx67GduC{S(?&M)3n=*5)ENtk&6h2vH)W5PJdao9p(0m_f+(}5AuyTDqBX%=dX->&; z;yNko-2v~}@|wwh7d!L-U#5+V`~{KR@3bH0$!wuRo|OVdSTfNBDIqNU3ZRp_0=!QS zqLmxw`e(O^_m3}%>gr7B=q|$H_(<~rzZ=0@el{2-D)A(oXP{g=b#$0}MCcpi59ir9TN6hylB;n~F&^m)a$tA&}VR z0>UtD<}zbhc-Qc6FF%6h^Q71oz#u#EBJ3aYn@rA!G&2E9l3ttCYr|G4z!-`afJ2DP zDKH^V=n@mrd```lPHb2a4^pU;SpX|%6vWL^670y~?xH+)13P~t*h2qnmOMeNT;b2x z^U2JN{_<)fPnL~$)Rs59niCG0nQ*{&SLt75@Qt$62F6F?+xpldVDd>7v0*7E8pg4{ z`qZtSzduQtm`6@8zFL3$U{+>7O!sEmh;U7hPR?W4S9ce9OPGbu1-T~z%9k9X#}D!b zHqgn{m|pah=__Bsj7+ROgcPnoSSjO0yS2Z4)44T`lYq}>yizk-nOoTvZs)2!KzddA9*Tkc#@P zcjXP#T0DK#D2U3SE-xwY-`=I<#^CBU^{nN_-M3CApt3h+%kjiGLtx`hq^ZgeRFj{1 z*kReT-Nj4fou3RQ6U%X#XQg@{J(z0vIXSt!vvv8_27K5Ys?)dXh(a0~4>y|D6F{v+ zrH+eg;#bQQ-&ml|vX{&y!mUvDF{-sj-wIXgE8-e0rR!I9(SfZyA2O=#WFIz|Zo4Wt z;_?Y?e5(eM8kl>f7u_DrO+d~*n&XT!j{MH)vg&u}H#NvPJ_y3DkPj45irz0?8J9BFYJYf6r)8YuMC17K9F-TW)^A$0D-k z-g((G(Nj;2h`uu8?hfhEZ1wJ5cPqPJ4RX@;0XPxZ2dWy_sf2&gzc%D^V00VMUP&dC zJxY_-laJxdxcnVbto`Jh$hea^8{h_RK=L^R#yyMNjFV8&Olaf^cx0F3xR7{bV%pG| zFS+t9i=R7uz*r#(@O=ywPbAkCs75A#$V+XH--HJHL-lL2H&gW6G7}&{6zUwj zwN%EJp`A!euen7emx$tkAtavvx_9pC$=vm>^dgi`K%e-T4*A{R?WbnG3?Z)OQ;u)4 z{-_MZJW8W5+<27ZBZ%-pz#-ofj#4OsP=Dme>q`JaQ`2`D^~UtX^)v>{n8;IVhW@xW}#5yp}xX4 zoZ;L2W5TgiVlYp8^JL!6QD_Rs&k)N?QCxc<3@sl;I$(zX0c+e^kY_p@(OaR#_;J%!Le)t#XoOsIaIkU6n7+UvsX6XzCMXL6%H`CY(@ zqZfA#`8j5Hqfx^j|9!Fid{8^$%1M`+*sw3%ghdEOpM(`D1DS1HuI+oz-fA^=nSsT= znWmi>*U%Wvzi3=YXJ(3DnM+@Ve&YSc4D=2}3JGON(L8iq1u(_Q?z&I*0dwx0d1Ttk zsf7obgZyP9t3@A32+dYv9$6*5G3ImP!)A1pRA~zAgSrzZ<$0b^x3m;`GqPB|3z3Z4 zjk&*@GiKd5ELA9hQaA4dTX=-rJSjl@n*4 zv-%}H#jsLb0V(0%V6e6)t{;2&YO@T>kfA{c53us^O|!S(<7-7`m1Jm+V#`nsdFOhv zlyrQ(C27sXHnqK2><^V2(+%J$y-8R6)evUYV!|Z(1nFidwK@f}HBB%@s*?=iC(s1E z6!B7LVEtE=2demb{pzCLYbw=Py$NQpRqyo!tPgx2^3HT&k?L+bdS&dYL zfJbP_>hn3_FW%Q#xIf858e@J9v(cjb-q+|lcR8c7m+nspry=k`NrSpPu1rV_ z4#irOE@x#e0Dij?GE_58|J>*~arjvkdO|b!>k#fO{xc%OjaMvv+hEJgCftudB2Ck- z?OAi|kS1#$gFSViIDPfcw%g}?=N%C*BoVP3get2*iMp5>{TY;tb&o>Ox5FtvK29wn z<_rDS*CwGNF+gW$t>p-=^O}$#aiZN|4(fk|pp~{zY8(uK3z)$+jAN$S0wh|q2on8W z9`(?p=+d-qDLx#3MK6hL7)?*$N7|1D6Bb~3r zsMlwWzJh>26S~K1V@*3nc)MdSTcsZvG1tSXr9tr9#Ujq;yq1i~nG!)$CUlX_ze0 zmMWBjIsZ#a;QU)y(fHm@_{q2EU-wV~G-q%7jmQR8Q^5)kplB3IFVRH7Bc7pux#As} zAwb$ye)6siq9tr!Z*LB$n%nDR$Ys8?!#srRWmw>wklQk=@zCBGb^@)OealQZo%}UY zoZ6E{3gmsSkgLJugL za0fe~>sFl@$NvxML)+AFq;{vfo>Pbs``C`+S}F|te^^2p$HkTSE#A3|j%nNcDfuew zoUg%xj;HbII9J3rhS_oKbQb;s=**nJH+2Xv7W-v)@iWP21tO0#L*$j)s`suJ-ZH8% z){B~$6p1uPVyiF0xkzO=X$_O9l9(B>Rk!By(<;hgWA*$<%Rm~YkB$lXE5{Zq2XXv$ z1W$*e(%0{+7wO63{3lf2od26>w{8%7;1Z%0Fydn9d2M7GdfdFjQ($wZTH$HaXXYPE zkjmeaaG8Ku)aVwTyw~}7b&2Hi)_bg5n~F=U47tufWgF_L)}+AWqb*gfn5uX>*ug`} z-J<&pO+V@g51PqGqmt5KP0>4n!nonJYeZd)DKHZQD~!cq{Q#M=S$`Gh;)N=KDXD3D z3L3SLro1n@tT$fp^i@goh2LelJRXccs`8ia&~e`>9Bfh5;jSI@Kx$nQXFpWMv5|PdPq;F9l-wh`8^qAX|13=F%bjN*c$(_66`aL{ z7S9UY?Zr83K5G*j5hs+x?}}01s~Hp9CA$^ajxrd4+hcTVqLIzrKDDv}!JJlL*QHvc zd1iFQu61(wu1xM51xiscqabrLK~3;K`x?xwv~OPhKESfw&bd&odZ)>LQF5OwkY4Aw zhqSzp+epS;!nSWA-+kq~J>mH5TxN56LHWu@HP|+gzYAYvAPvdN3wOEs`n1AB6R<0P z(z`=H=$XHp7}q}Tox8OBvnN6)q$PpYPz!>3fV$tCrm+4eR8Lxn=hDd-`4`bShRsN$#Jztb2h_l%s-b;u|rpxw^~J*H5cUU1SlVA|uzWj`Wg z_8BpQT`pzwDN%mu*33t=NFxp;Gl?_SK-T+*oFPje(Xugd6a~RaIw1%h%jMrhOk)#Dm2(5~Cuw@luUloC;^%rL$^j zEK&uTIPYFo+P7?EWZHjm^O@IPMp*fdp)bTx=xd#F zqiCG0)#23k@!_5$?xM$P#WlmLx6FRMS!DE;kW&9x03=yGjDoT0Hln~4l(sH8Q#gN$ z;2R_@q*iKVvu59{dCYUmQ_>FGjLr(__VDCKB&l#m0VS3bjDH&yPA$a4qAwCaQS%kS z2K)5qXxNk0fW8@Ii~Sr5Co<34xSxD1{gy zi%5JRWrAzKp4wys5H2a!P8dRQfpQBR!P(=l+E9LQLfUDLaM3^RE_)R6xSZ9w9C=CN zhF@SNqB+b~J5lFo^J7L|s`tql9_v>jB){oHXB}E%GPjK>M zjFL15?jl=cIxE%?=SJ$ks7LPfRxo6k&Ff`9#duJ5gn@!N!h&TiP{@wuBFm%vPlJ!5D92k1_Hs}KWSzRu>_4W z>Y9t77AJl6)@uGSXRwfnZjM{TjS#J*@Bm`RbFzZ;orP~&VKnB&OE(}=w1+S+Y+rL0 z%;WVHTM@vx|3b}TeB9p$Joi%CDCC~9NIn&& z4x;xfzgW2tEl9ox>43s9dRb^74f)dXCtY9y>U{tkyRxTC3gS3oT5(Gv4<*C}y}B#; zss2;psr3ump7ibQk{`RF%y1W{bBbTd>zjc4$HK>!MrwaI3N*=2g;|AQ6=!s=6(IC9 z<=h@~W@x`|zHe9d282wAF%)9Si%L_TPJi;X0|~`+Ec(y^vd};trr~8Wc0A44Uv3&b z@A`uRx^@^exQLJe1vR2nX>gH>L?gVLP-ib1N2TW`PhWn{YnOn2C2z9x7Cbi#3@!J> z!W&|i*?eQ!hGRz+uN`vNZ?*16&G0qY53d525rr@+d}#RJGtfdozkZVKp>cro9$+K+ zkhefkDW8U^_~|TNuyBz!deDcKYe~i6mnD0?Ee7BS;MLO=&S#j=#E{GzpH0v;g#V|# zZP+Es#nfpvCoUXh@>PB|t020SrGw!Fc1h&hDs**%R(QpgENeQpZuisSm*xH7v}W>S zqsro+!w4S39LXCPq`OfN`QU7I-_C1)_r9y@vhH&Y;aEPg3k7f*LN4x{PrGW?T53j+ z8~+_|6y=OefG61}hI(M;RS6|7HyRXB4{&!HL%MHG5SVS;JGuu;ki=Qu2olBkcf z3hy6(Q-e5E{!zAKE`~giUf8;q&^%@di+f5qfIqQ zcs;=<1X5Vgv+K3-Qsnnj30}yT>G0hO7QJ1MZ`7O}SfeXu%YREz%vNp+6vD)!8M`)9 zPYqlKVG0LkhbrRIpO8xKde_)EUOF?;thlA#f$2z3n3dPYIDH)HYVv z(-kHiOtq#Kj#%&exY9I|oYcfMw~BNQOyEr6>d`vehj99;r8LnAN`V9kM1ZL*S6xY) zrdc<5HTPKLe=zkQ9t7qsygvH0u(0w#xyT|xY`3bC1?5vq^E7l$W^!- z!55ME7Cgjd6Fy)lrlSl!k)auk5cp_!)2r^Frv4;ccSUMp~yz9cu? z>O5kNhU;^3Q>VDCd>ym5}t6=W2K#DI=eS`(-MgeTtqNYJpMMt?V?o%Pa&V zlwZ2W!TSdE%NaFa!)^l{N5pclSk`XhW^F{Qef9<5)+>P8ztG#}r^t}d-ADyG@y$+n zkF7GSp&&koS9Nu;h!3|n_@^1?ivimFa1ZtPu(EIE{4_De`%1-vcaqy0p+urMF!-sg zN~k^;DXXPQiJiw`Mx~ni8~*^9-nolGeE{pMSIi~u+!)zFF7>RD7UDL!OTmG&Xa`s) zo;aj@Z-4Y~admgq_o_R^Kee*b@)_ zb4|L*Vjx&}vN8s!M0%emZ%d}=M0SwUoH>ci}lkw z`yAc(vp#kSkEE|EOpno_GAskI;nMo{tp_O&2I7O88F9A7{xbpyQn^DO}|RF_(Y9bsK_6VV2F>aQ>i z;1s@RFMp7k*#YGf!!mfZH&;YhNX7uDY#11xTxyRO_!D&o8F!K$1-#RnB1H`Zh>%%%d`Zu z@<0Yi8ZM$@jjQ9=Wbb^!8BSG!$%;@aK}4ZrN?LmN7_F`^u(=7zh5!;SJ~a^DLrn{_ z-X0iE^8Ko7|9UH6M-yVVHbkPR0WJ|kj?Fej?S#CAH}31c)v3}CHORg;=PM=4?ins!~gsA5$p1`>IQU$A)!J0zE)liYe};_BOEEq8zs z_s}BBt5~h$gp@Sz1-VSt+e#s*^xbr-l!R6b_qd&FaMeO3nI4Uie~4s5oE#9cOk-b5 zg;x<*aR-W{bPATUpqEOO1+kS1K@E7)O@4cL+IylD$&a4%m~9fo#d}`U3ej!9 z@@(0LARq_9AB|$!=cWItR03BX8Z$i%rxGVIm);jr-#E_2er-Z^g_z{N*lW)^XcrM+ z5HdY9V54}`CPh_&Aa{B=i~e2O;e1i}@gFd_+wKX$tFW@Nes(h8N`!%Zmd?MKBmDl^p?)_<$xPOQ(S#Zm?6_{w=NcsT5WZ(Js@=CrbjD zwn&53sB8ag5q%UVa5;9|kP16<=!!Fc5gnsaRdrJ`0upO5QeZ`+Z}d!M6$$30Ld2pA zKBLY?$&*TPS87U2doT>jkTAvGN|2Qu-MAZgd1_b5JM}Hl@9M1wU)laNhoFaGk!a7ObMu>Xsg^ zU-G$S368wGsyB*XQfj}xVU&K-b)_~+tKGYVvxV_9))w+zZ&Nc-g6YgRtq&h!J+_oy z1FHoske4}d4^lqh9>EP`LZ}f{y|LtwfkE8kawrPDZDZiDd^9Ne;PFjGslZ>mD#vx( z^n=sd|61^*F324&P618YC5vID_vgQ5dUjX04%@ts6LPP}hOt&+&EJyIOCGK@P3n0^ z66vs3!hJyo80iF_I)HDk2~>Y!X3z_6s1opg&$w@k{_5}A;seFqHIcmWd=J8d3VPB! z4|(FzUL^k9Z0eWR7QMXg^@D!4K6bO&4gF0}*bG36H<+wwE%2c~agI=NBDbXoM*UK- zGd%+|oglD%#lVnJ%Tc*lU6qYO;SnRLy@bkpkOb!KlUEfQz-Q&_{d-7x?xbJ1XfTe? z)!$hu>|jqeT9kD=cSnm-loVTy>%k>1#VH8X*cxJ#kVh`AmBwb^?*?STZ)*#>tM}RZ z7wKo2$d^1B{@~7M`Z_6TOY@vIfzYLDedU_1yK#Y|&?kRQQ$$mgvoqhEtQ0ZHK%V*; za7lUWdJye>!0Y0aCSk=A_~Ex*pM+2k!u4X5UV<{_foOIYT+!4MCS-K)OanthNMDzT z9OB@7S4C~O6r?d*78THT!)zuK<4V%FJLpwb0>z;8{B|}o>yA>S2#p`pCrX&H;91>? z_35R0lw(>AoR`2r3(Rkdqd2#1ci<*De@l?1a6jaNx;7Lelp0E)Au+C3%F(C_>Dk2Y z?I#sqG#Ok#1+zTxcHg2LU_Lror#3- znW-YRieGj1wNonaMOfK5=nX+rhOqpy;i3Ko`9*qr z5G%)sro1a7WXUA;Nmo*Js#On7zq6`9FV+j0xel@lsJ5^+VOH@2&LRiGm8GQaRsrttYA}pP6jl(+@LL45>FxHGBo)Ob=pxjk z<+VB=qXm`T3aqU+9PN%{cJ^WLKZm?qYV0M(wZ#0msfzVmZZAz?O$3&iY*k4RnOJ9c z1CLuv4zOTw$w9C}3F^dBMaT_sV2+wIFs0+4SI5)PwZd!B6s%K9!1ThBdJ+#eFhd@! zz-Bk_j)0I}O(KqA4vRGrHEAu_ke9s309i1)|8p?LY7?qUAN0eq%FE9C#;NrnYNMSN zl*2gFeh1$T`gGl0x(RX2?uG?XYU-I~;0~k2kJjODq7KZ~#(K1NRgc~0EXol2x&7zN zn|8bkwqL5*cZTv1oB5iSeb3L8UuxrUl{S1hWYj-T{st1pX!)kj3~MHJf!zD`sdG9% z?edi!7${KwiHzx+WGrd@wLbSzr#>Onm57Y{;WuTnX(Z!G?ah8L{(RTgOuBDr_qN|86-VRCjodfGnO!KEg;froY9V&8?SzJd# z2*5>BxEXWQ`Fy|VdRfbgY5&pdixs&v6AKq#T4VypZC4Mj)(^g2J^!R$D8)hBY^bv^*? zkVqd6bBtH^V%a`cFmst4{5S@psTQ>FDP-))p$K58mJyYG*^xb?v_;RsdT60}UK~11 zw_$I#qgD+dAG_eoHTgx2<$7}F8iBT~cP+s#7AyTqk?K;{)jw&fB4Wux6gzKtP|*^O zA_vH@nmCz&8GWup4+EkIMTG}*z=s6@t;5)ua&0?iEqoF`(kX#9)T@MiufBOYb?iJs zu6{(uzZ5=}nTHWeEtTvjokXZstjkqp{c9N69^7Y96^|}b%j~NapIXcp`)R_VrgrrS zv0{e~aOV}+g4*K(*hU$El2L`MiRYGPrnT)k5AyPn>{Oj*m-MH@uCgbG4yTNc;zzH; zoD0cf1~s)8eq9UxHi}yv(Sdd46j;+$ND@SB@#G;KZ{z9zIfy?S1WCmRG2QUFPO|9@yEU;1s+1FRO6|A>nbs+HfR|!&< zbGgmd^O@amo&dEFa`2}duDbbd8uEkh&g@Ovw8$W5$XtmjlJB1Oa!7n_$j84MdCBNQ zhB##V@c=Ag&&sy-Z%6i{Uw$*RWO*Y0!^3<*E08m!?J~7B|6oFtn16}Kw^Sy)0-+L1 z%45zgVtleZ#HxZ#7*BL}k{-$xKxDsrH59$r8oi+v(B4vh<7b?+atM&4$I%}NBON~2 zs7WNr3uCS6!t`CsjZIX!ZbviY)Qye|FM}hhly*$~vPbWQCUoIU_ef~CvGd+>Nw3PS zsb`OXv@dfp^S-XFwiCWggvU(ppNmu_fQvM(b+*%$I@-wnnsdyae#|UTM%oS`*;L!dECaWO zp7t}4X?FP5zfHb3wyw=q4EV5#hZ{Os%kS(sR#+tlGd0XCWMoD*b#QujSZ8kDQZWQM zPcdyy&mpAfFqfc3?uVcjId0Fry_Y8{BXVn}xqNBgSU7WhA9h?OmI#c|CJXsD5>2jg z8a#;%7s=AFHdcvmZ#b~J_s0}m0;=lIKlsRp1D7=2dC)kY`8#NxrX-7oMH#%$1(n=j zB5RfZ&Vk{$-++pk9%f#V?gx5lWxWs(_`#K)b(?;Q*n&^yDx#6a>;)V0;vvdPYZP#z z13fSmU4^tDpgP;tKW{_H9YRFTlXe)B8? zt0rZNP$dLy0WRy@OwyAx=L@Si^{-_@>X!&~P1jNKJJ+1jwPF0~-N#z&0(PkGru|&U z?*1TxTe(%DMYro1M$Q>?P!=&Lc(>~nj(pVIAS#@Tey@;fEi8{H|Hk@CqclZ0AXpPk z_7)d`b33K4u6Kd$PLUJ^IjOOes_>x8%M`~$(Hn%2+QGp0UG8z#`Sbw0MXy*kbZWkK z-E${fnp04&jE9-<&xJW|@<^H9lIr+DrkZJR^rpx>VbS5u*EJosrd%1wOhc4`{rt`5 z-99u$b4uvh!9aK(uDU1*P7+u&UYM98MTI8BQDoUd6&=HZ4$n+e%o;nx+CJ_RCi zhDq&7qqJi?JK8SfTGd*d5mHN4^i1d}#!w@2@U<9|3(VEbzsW5wzr^lAL~pbK&^T6| z@K?fPN&0Hvrh8P=Vp1S*%v>-7lB|ur))so%E)t6w5kk7U-8up*(02@~P+@$SVvoWh zhXkBV!bJdBcMk_dV@0&CO-aWc>Bs}@Phj#KfsH8HDME{SxyT~nFo{du)Z~K6&Aq5S zlzNw5TZ4xCK0gfukA;i9xbhHw+$;&GyYX!*eg4J7FD^M9g_r#$P7hYHabIjc+^ zOzX9Sa3y@>rd#bkzkeJD&4F%!&HE*T$axo;(KH`-P$ht`x=8}6B)sDA$1)%|OU>W$kAEagoA^y)|AN=KTXsTtAo_?rnGD4)-ZU;= z!2^)k46ywPR(tM1w|q2#D>|XTN2^!`!9|f-g2l=kMKrQu;(G#yJX(>eqZ#D4 zWNR4sm?7s<7w<~Z(RVlw{Hb^}E8d06(L<;E{$pFwi-4zWp4Q6NW^oDaXq0sJ^V$uz zwBAM+$qC0l)osZvh1us05GBhFIJv_0I(zbpPuv+nt#4sM1MA|*M4-)BXv8 z%u+iGuNlhODgSaJ!IqS?*jy-WrNQeSpmwQF8hqI_3OC1!TfOhqNS{8$#pm`W(kMXZ z;;2dzY+Ow#duBhEF63~o++BLI_*R8Cj2a-`0Jwh8Yf=4l1+MdolFMjDX?!CSR#EK05 zGyHCNdHPvP4FU~Ly~IcuI?c=#8A{VHdReCfx^W-G=CY!2TB#_?h_nlW14BbBlUgF} za@h~w+#gb>K|A%y`GO5yi^D=R4w5pUV%6Ir{%8M7!1f9quMuP^434v%Ej=^_Cao{v zr-1T)y{vmsH%D;PxC?C-?)9tuLU zya)A)Oee_!)G2)pHpv3x^~pqScERja)9sy$jzjL6yN&`m>r@INCC_9D@Z8PRq<_YU zj+7?5^B1QAoyaBf%wLIE0|$q{(8gZf4SrVImEfh#AH5vvn-anCf3Owy;a`Hj?0es*<-HK$^?emYr^0 zM_~mOX1#8PrZ|%Z^BzI>i++Cq*y}1KI^h&kv*%PCWUb3$Q&l4BKt-C8JAL()D_CiU zfY@(>rV*Dj{wH(K0~`ppF3^psX$0QN$>!v)j-P^b6keH%JD4xP5LKa2;=hi`LI&}I)m zPMyQCjciNU-UAbnTxh@iQGMo|Gb7O3t2*AH?pf;kq2fo(rv-=(hvS zVJ&hhvEE*AnPJ;+^Du|;K6y2+f&wnop>1VDVu~p9YhmvEp(n}R>fo=6r)5(Go5M#b0WS}B%DF`ofHAzPK8+hP)8 z!+YWi++Y*+pzI0kuw`Vz?K7S8rnKJLHHWYY&Zv}Y;nDdkX8cT-62fuWkQ4x@@d8e0 zeOK3U=i0BUg}(oAn2NYf4$l+vJ2)q6fg8zv8`7YAN!a$79>S-mK#;1M7dxkPf=0HR zPH`GE`;gQQqBDQre$(cxyCt7iT1pb!SM_UN#l>pqs&>J0gQ-TLLRMeCNSf6;(^l(B zD!7*Y8K>-fa&o7fbSAOhH*rzk*WPUb4hQKzA1Bocia7XM}W-Gxk3G6q$`L z;JV1HCiJctlp}_n{bm?gEfJVj5^cv+JTDpoBKc7 zPLAT&(Fz&!aN7>0k*6jlzuWJ)K+Mx(tV|<W7;V#<%b2g{WZ~Isd>L< zaVb|kn9~Md+d% zsSm#%v$~#|@s6c}nU~8n9%f*U1pbGu9S!Mww`sf#-13`Xa$h-Q>R=ih*l|O|nMX~4 zO05qwgC%3+#q8}XK=A@Voj0Vc5O#>RzKGH+)j2g@%yhkK*7GzR2i~L){V;hQsMn)I z0hi5H27_VztSH?4>Afn+e6Kw6w?{LSd$@B_o8J}q8x}WO(#&(f1nQxu7p0w^OH&F2jI+-{1VeTK` zc#3B<5U&nPmt+bjB?F@iNonwwh5hZfK}~TV#cwqtC7+vB1Yq0U*sOKjy^&LuoeDL^jq;i3HkV?~l~O$bj5)LPk2@6IcS)=?UG7!W=i ztPPysq#9dc56TS{loBx9%PsYx81bV)6k9xp5SBP`ZDk=86kuA2LHV$301m4<+E6wX z&c(FrT7j=4sSk8^M#jlicWgYWghOoFrws*q@Bor`Ypfu-D;QTs(oVXmt{~xk@2{;G z5$dK7U!8oohogwWw@Ld{lC~=F4C1$m<^eNq;u9GwE}4`{iy{@RdlEK;YgcX^hkqBZ zh2Y^6HUTh@0ns#d(F_27PX{MZSO^jNPp^}<9GK3-SNw0|>^hwlV;qnkkEGI6DkhyV zPo(DcgAKFv2pS9x^e7^);zpjh;adBbvy5)}wSGK;L!!r1Bm$!o-RAb!Su06K1u~Ew zFEXZ0iYANe1*+B==n%#LB}97qA!sQp+tE>U0i$>@Fm9lz_kih@mxO2%6`jWDXGO|~ z69g-Hbt`De7?wteIaCOdvFI7<`-x*rl-9sB5Q+Cm?IJ_#dVVS$;LW&<9ygb9oTLhE zqk0LvgC^qae_7ADiG}w<`VK|@+7%vJp;-pgOH{@9YsSf?F^*IJEf8rY2*o~bQg8b> z=4ayo+}QnD)_5Fs(9JXQ2K*67Ij}-ck@|N2MZ+&f``A)c3sRIlH=$jdcc~CdnwH2L z&jQUMLN61B4KH5pj|xdK4=r;UvL4s)X;A=<9x?|G&0PY5|JowNnq&=v7R}+7&AzJ7 zR#O4C6k(RYzG7yvzOMHKh-W$$FDAqMlsr){52U$uX7-}%7h4HzD4MQ3CZexA>N`s_ z49v$;nF8Wa1F}{}SQq7If|=b^0DO@r9C}JiG>+T-4yq_m#!*Hn?1k2}zlVV=ggWM% zZjfIV8CAbB-PzUp@-KFK~2Hy z;4N$|lHRWrwTGOlnuYoTCIs^+8F7L(iUStXg%#i0mA@87v5M8YXd1X2mj}^ATo!!Y z>)J|}*8Mr~BOzkT>J~^LUF5s~pKtazb{eEJh;X*v@W7*PcoyF!-<`I`2W0%i)4(6X zOKRii40I>=AqLo`JqIKfzgM-ji=!q9s(v-|ZEyk(`L%sucPgi&r$VZWwZ1sEz0GmI z3V<>b0!1RsRH9}J7YFiZ?|}9tr_`NIdg&Jb%9+cd!F^Gt2{~2gq#7N2nJ>B(C0$R` zwJF9jj>rB}lr_G2qsF)|+oWqel`;SZwXUfgOC^>>@ahb=8{dx0A@LlW2_j&USv+Db zj>4`qMhx9JVg9jYP~K|pyRQP$E*s)_kF$qGMwW70ONByDQ`#a_svs7`WAjsu?Sl8w^Kwx*5)|Mv)Lkzs(L4GLuBiE#)T$7&( zeN0U#pz1pWbb?s4|L0e(joPT2Z6xEAo-DD|> zK0y`Sf!|XoNcScO3><}}JPMd{tV|1x1aC=3K;1;hPXmsE)A3wieoPxK;e7W}x8-AS zTV)7Z94mey3Vnz+|U#JY# zhwR4H4l@(}0BVtOteb8y%7bbN_+U>iuN8gV<#yE2j0%iL%b`^%-S=%4|}|1H+o9!k~5JBSePo_>A0b}R-$ zBva?;kV-Oz%^o_S@lWh<^b$1KC~J~apX2suQ)#<6>=9D`mXs=N2Dz_J^lw*W&1_3M z@3+%c?Eg1y6g95Cj(f>Z9V1|meb`~N@3zzg^t3d^5d;1W#_Ff8Z3PA7mM}$>JA1wx zM`)_+I`O6a_H3OJ%3St;Ga1nd*9uc1P@HA1cfVOl>4Y@FWj7caH)1<-y*entx-?943HgOGQtOkEXNJE^ zMEd4KhA={H3?2EHHE_>ZTirC+M*W)t?AfBPhZU@m5JQtbkPK7(4nE^G8Bs#K6L&Ag zp$OJ{V|lsBOCK}|Yr6BWepqzi1)Xn}YiMPf0KA(4wBH!`2P7tST^MrmTBCZAvVbb7 z9q5PXg`Ai6q)j(Osr)bF)u+lw3SmE z&?=3aX>&5f4DKTA98yiCQE5YnX$+X+ppU~iu0}Fk*>?cix(@B-Jry>H1}PcgefWf;1q2+amf}GeOi-}F{v+Yq%%Y*2sNo3ohu$mO}g~R=jaKP+0UC| zQ+a`|NJR88!@7nSm-iq;-YpScni)H|w$9CXRtFtc)$uD7f$les^a_52`pbVcq)P$iA}FcDUr=WSRP8d2ojocHdDnny0$&+>-&g`)+%4?)OGPq+ zP7Up*J$t*9vzZEfTBLR{S*GEGA`l5+5eORHdD!+O_17!J$X11G0)C3J%1`8Pxd?6| zjh3d;ll2|qW`5~JD~C@Zrs6~Jt`}^@bQBUwBb{25yqeO2$ES>+*K0_r^D7GDP=zvv zUZX*RF%;|P=q`JveGi3g%k-U3K7FiGfXe@|OFfXPGD1>q4h!fyPOM^dxi=H;!!JHy zxU*Fb%da|@O*vrE2WV)=|GjS{#SrlbZbrGXA$_wvK4ly*bBhE{C=Cn#b?WHE`oP0Q z!b6+mx-3qLuUw+OP`O1f5_rKuC!3q;SrFFrFa`uu`koaifKzZ#6oC=Wu#O+eU}*(Z z%Sn!)iP0@(iXR~%f$L>vhQ?wF#ddqYh(-IU(>beJ*j7~Gd`?rB@(|gqOY0e#g|9`U zy!6{e9%Ih;$EQ-Id5ij+U$;!Dw#Zb@K@0A&zw8j)U`;al;_!NxnyPZO7#9F26}9g@ zY3IFi6?+zRjlxw?UFWx|@rw9RK)ltune8RrHjJMza$e}<*4B$`wo9!B{lOPOiSlhB8EO= zoq;-%nCTqLi=$|0DNxp@1Uw6~ko0x)aFGIt`AL3Qn|ELs69^=lLE3bMNjr6_^hp2% zUoXB&NPULK%5#y)&}ug*n*v(vL7WChU%O}vpI;~py@R~QkKj|eQSJ_=F~C3&q8#KQ z4<4zoMg|#g3G0#Qpe#msnBEGkeuF-BD@{Q2)r%_rrpEU zrjC%ex6^4UG^OrqC??~v@Of6QXxmh{oi~qN@a#+o_`Uk$vsrNN?mCPEG%=SNO^{TY z_&1Ba-^R*z2S0l+tZl~<5TJh+D)xBgo(|88qb`)%r2*D+lOpk<^^NqPzvM$x=Ee<) zvmt5Q>z)!19){(Lc!)XT)$Yyt)JFqbyeo&&A)-Icxcm+x>@%_X0#Y5)df0?w5cwiD|*Ud^id(Y`Zy{*!f5PbtVTCp@h9Hf za=y&)mDFS|5kAVJ&-!8qok}X{@lxCoJ$Ipm7a?fjK$TR@Dfa}7Q=eFrHhmx;XFee6 z&67(V`H1NHdiBNX-*MYIJPy9R6mX!ZD(55Jo{DF^C7|K~B!Rz!6v-!ZWFsOe2TWtj zRY8-{NP$WojjZ@Mq!hDPmpQdLiKRc`FdFN zCT_p^wxBLO-udcqv`FV6B1>T}?G0+|rOWG#u#mZUmmak!KUTdn{GL749P^ekq3-Ls z@d^GH5%_AfoO;Y6qvc2*mZXR6XJRR@wNd|~BoZi1E+TAcf=V-rDd{`m*TD4h$dp*S z8mwfM<;{VCOwlYjPw-^m2Mrkh#UF&R^PXrANV;G&1Pc;5Z2RoA=6l1hm?{XW5LQTc z#aW(UOdH;>@ynMD46Q{gtglyORk`6d%(0eA=;2bJdmZeOwFp3@PfO{Kd8^$rTP9^h!aE=J+}R6W#< zjeaVoR1@(|0xC-)DEMZpzDNb)?1MslnY1GZiIIu5nv}Cl=s)gQvZ@+@{Go=^N`N@W zC|~AfzZ(&GcEvESQcAKoiS?<7!;Q+~su`A!`v>_Kc)ej=q&8?x4h^q`u~?N>veTFI zvuy3MmGy|QN&%QTaONnodoMTMzJlP$2wk4)&e4H0cn#UU_+ENP-W7s?FVf&xjz1s; zAR;a`W^puTqW6f_7y#FPh(F_HeKKB9LSm>&;3}S-MOnu?kU^SXQ(pY|IjNSTwyGK7 zy<0U3qKH+&oG>ea5AyETucS6wBCXs|16k9SkpR!+Ew-ce@*?L>zWME?`O4HiecW-8 zvvI$*Php|(JD5X9tl&~~b${_XvAo+KQZvA%b*XnOf_RIpPMa$6yY^r(7+v6l^WNKS zXcM10^{0I;N}+4qaJ94eHc;W7&-nkE&vZGd^+1aMrT(%HCTEq;5SV6U{Q1b_r^uf< zf_X~tTy)=%3$HwgDi?+E5GOfj#DeTE)&SUzmO5Hzxi>tV7FI0JH|baIsmx7ZDM?%$AUns)rVLrRaoxvGDW{eTV+jH8jUMQDY+&r;ikrg?g&31*7bS%E*t;tQgOTEd&?5MImu5iJ zObQFF1C`_Qn!6n2Uk1D^aEf&9tniYX1mBW9eWEU5l7gR;3N(ja5W@_5XCq7OLLD z1mnnEAQ|u~s-?;L-#YM!-(dw(K`REw2(34D-fXP^;Mp3>Xeg0=EIPKs11t|r9Q00P z4||U+O*$lb2z~;gd$swTlgr(krJJ4PKe z=@FPvai!N|E+}04k8^JhoCQ{jHAfD3!`y@!V_H!{MGeOu4Xbd~3}@YJnYtYkUog@Q z26!ewfu85VAmLc(?yY{|O|&Cu^ttZ?-l!ZrKv8VXPJQ%)8QUg4GV9$_HvGechYli) zLV@xN|KyYLNm5Jid<nVj0m9>@sih<|F|VL;)i}oz<)cYaPnQf?bR}1!I7qNKgqu{Jx8Vd zK$)IWsZ51>kSrxLA3imXJV5+ioDpYu_sQhH<>C~dbSVx9Y`gl)#~6Eijk2OX7`3k` zbos)`zK-HH%a*XSz94Zo<8@<70CB!5Y=Diaak(oC94TEfT2G&_?l)W9^F3ad0EO*= zdtzixOlNVBgex6W6zEJ-{t8|7q3NiWIf0w{1+9ibRO0DLpl3cQ zav;6B58KwCZj}DeOI&}oVq>wGDFMEga>>vn)h4Gw@Atx#J{d z$2G)feycmOW#o0}(S2PyaIoV^`gQB35x?nMm$*f3jHl$*yh*zi;2w|)_z?b2lGetO zd=e#obHP#3R6T!)%{-4{pts4p+V>g_cH*6vaS=2exq%MLyCmsJ zk&2BS=`yH5Hzz1$Gt3zgLON*Yj@iuFg3^W}%*KX*;DjF=^RP!19BJuK$5wcm1B+|`XhZ<$~l>QNlAbWiv#zDzr!|twY1Y}Z36zX zWhYH`c-@MnD`-wWM&2h!mSn~!vm$rX8z`bx7X9h)XF)_bbM)~}wn3dYiG~reaB3jA zLSy!F}kdAf%^L1FwC9V>5LlrOH(q_ z*uOZ{-El|4sjcIuY`eWCN2q6w@zRe^j*t(H08My{pBNLFruF!<;Lf}V4y$nY1Q*dMPEI*+81R*I2FZjq94wn#lWMVa z359~2m%&UjjhfL4b0@Kil8H)&2`Df?ZScaj4DlZ%kM_`!TZIZ{(|c(OO$TBSB4u`f zs5G5H{O&P;$iVrb0Ks#LD+PXS^CqbR!6a>HnVe{LvoJd(5LL5m16#5~6 z;mzD;U@xs1Cx=On2rTj6Hp{DxTISb>b$503D=3WvWTMyg!QIbXRqNS%0+3JM7HJA7 z_9o(^;=6#*T$M9m!aSO6F}Cl<#Hllj^c{sTF;WAh^o=9$u`i|$RtMU`vW~r&kR36r zeCFakc7(_Dd**x#30Fgh%#iy5V+VoP^Ulm^_HND&KEt7i=?>z~VhEZ;g{I<4s+ zhOpoDflj@u&tvY%NwkAh#dMmj$PsX&JvXzDwtf5P+0nDO+NIh#Lw8N>M%p*#Dga=` z*tT&lxZy^6b}7W9#X8vS6R36uR@(n_)sYLTY^5Zh6so|$Zm)br9{98SV)E?~xbWTE zG+Ly6>MYq~?=An1cXN{Kw0Bj?VU)YBgp{z3r=-6euH`_y1?bT?jrmrKnXU_)FV>~S zW1OGi+$QY{!=2=?LM^pr;`kqGHQkZ5f;94!%YB=lvT;tHoub8FQF^=lL0@F9-K?n& zV77}pkzf#Z#kiB*97g~$;QtiSgo6Lyly~T056myr=uv0v<(DJi^;F3WJ{Rbqb5mI^ z*b%meA`>qkrx9l5mX{dk$<#SXg_q8pPU;EUWP8^=PfMS`e)$C>UrKl_XhJxj>TyjY z*)1D9`&FT3?3w@ef;w@KZ5}@kbSW}E#s;2mwXL(uhQ|W9E)(zKEccfLg~qgrd?Hl}tD<4KBMga4%sk4vtXmHCiQRpW`#S0I`Swf60~RPy7s2Y&)EF?_$AimOH5G zvb7710NV9lc8D%kxqX(;lKC*pp#`VJ=JP6I>6bXN6O-Ug@)MEiW_trvZRd@)DLj{A z#OufVE~?HBZzeAuxB)*osQSqRuZR@N%Y4iHi+s6515JYo>Jx}3Vtu|QkUXX%gEFa50W!e-q_{J;a@O~d-Q`FlZd|=u)?0TgFy+*o0BJ-9L$N?PO(EPOHZ1AX^VgzAz#)Vf zH%5w`Slj!QTSiHAwuIDpJw!9tN6N;S@EZyMKBYiP@|2w<_$@Qn`D_dV&8sSdMqw)F zUj3*zBL&ckhkC!ZzrFp^b9&Nw+ajKsKW*kx{!xDRCI%$K5OuTFGEi=9kOw> zf4XdSYXM`C_>ghUo&lkrpPR5yP25(-pRB38Nd)s%hS4u%m$_wJAh(beF=M4&v#tas z3ItCeOBDgg1NNOje(-oS^+}f?Yyf}0XRz-#I)3_}z>q_H+g*r=klHPON$LEA>GL@rFr@!2FogTWRp zJ+RZh4_qa&Lwmoyg%KI?7^#}$Y^&WXw;v(EY*j59j&vPmJ>|IEj=e?;L+frTzyr{> zi&v<}tA<=nQhafaZvzvN8z4#4`XZJ{Kix`yfPiIZ(>G?-q}3O~C%OBW{KBs93!ZWt zDS{K`?~vcdMYP{$n9JPJKm5NeHG3YXEj^nc{0pWOwSSQ0=|w=X`Pt_6}XSLzj-L?<#?|P)gTdR{y4EPmG1#hN&Ur7O}k@l_M|KqK=>0~r7F|F^ms@U7 z#VO>jl2X}q@^Jr&^4RW4JOCF37R&&HU~~?^5@XIY6<&lsvx7XKDXAUMfJjT_xs%j8}Lh*_|NTLh<{UqCKJ; z*@h!%a9?z3p>&7MY;WXnrEF(dQ|;;$*GE|e0XK4nn;YSl!OGcO)K@Jt)Gfwh=%N*P znu-6p@X-CRNp1YYY?;YEK5RWRP0)oaHw%uO(30rI$xqz9h^chgBQMqWEHp9a{E#v&6wSe1m8>=hO6mg`6g z`&BsQ8}LH}YrOSA9bMO9t>S#GdxVMrop-3nayKRI$JT2zJy0YD1`a1<)uC^O;OEgB zPJY5>@$NF7d|S>Z{@K`^iHh|p_q7nuO!g4?d#=}+x6yjwE{GY!f++>+<5TZZgJ&8? zy*Id$IG@rEjOBWN@JN!qey0TFH7k?|Df50Lk)E3Hk1!{L^#F>~5w7SMn|i0~`MN8ox|+a<1uaw3{aDHNrH6hH8TS4aG^Ji!$G^K zS$tWA}p>_W2K8(r*_Pfv&xIo2(p4xv501)s=?zA%t!`4-+@wh*N&z8HRuBUG|e1Qci9JuJXI7IGE^UA!wQ0_K-WK<)Wk6Ovl6oH9XESZ%p_Zc@D{(?3dMN+BYT$`blC z`ioW;9OMFZB8Ckc6o(x$7{?Vuz@pj_j9SZHD7tCwr3zS*1wO2BAx<(tSRrT}DnfvG z_=ofqHOc=vZ=HCoz(MsQc0p=NSCo0DfT})UZTCx*Q<2GSMW~Xpz1L>#3iBsFrr
m-m$ZdO`ZW|k6Ub@S+J$elj@A{;_7$6a#(x^)RB zE32;&c!(2k4x$MZ4`!Kwlmht7N>67DH>Upu=pl{n;;U^~qXDhx;t{r|o<%e zz8j}(t`ko8@xyW7zl@_tXqyWDRpXw_f8ht+XIz(aPP9hbLyvg)rM)u?NopKBqGadD z4FSes(rq-`nUoGefbnPB8jnCQZNZ_O?}De9J3_tW`PX_a@IjX<1F6Df$iNTeqLB<; z17Klab{b&*AdVtsW6>XBjA(trU%lDL0qzA?djr{;qPQPxyt`wj68c@3&0^iVgy#|j zI>JDzZp<7y``+w^YWSL(Ef!TCCXC4dr{h=~3{VRu`|eY_3!yly$)5>(#g1X==u!eX z2Mx#my!lh6v7}qle#oP}gWK6f5D1@R*+U~r_$1=;N|-8`_UBr%oA~5l73C9?(G$*! zD4FyVD@pSvGu!&xmzQC&Ln1* zzy^Rd-92mQqc&7p@&VGoWSCeW z_v9u!5(SGn!b1T}iYLZkM_V7!C2QdM%IsF!-?Cc-1*XtQ9;d1V=%jiU+v1VrwId?l z2Lq)+qj|l?DSk`)FCiQdr&pnL>R%rnJIAvE+GqC0rPeDL{lO3EuO+e0yGCAP;H)0A zE1DD|AdP;q~PHU0cQvrR|&r=%F-Lu+*SO&onw)QptW9*o6WyUvj%=fJU%)qO))#LpPPz&B?UMNrgV5>bm5+#ZOD#P$Hc!z3bSHe z_y@-Xhp`8pB=k@cp@;2@RwlhMy!3|YtY<3%007T=!oB9gFyyQs|i2r!{}`+d@q zb#KmkQbv2jkO=6#7MCp^`4)2HVF`V#-oyRyqZccqg9q$Ubw4d;ys z@gwMuNCx_ebq#y~eH98k##evR!HwD33ht>oh|-@g3x2q&h0CEx_yMQ`ABqC5#!oM1<6e zj}D*6M94ge4jOfVFBxduW45;B5lmJf_dbj-p8f?in|?h=p>$#o)K2jEyMhq`W*Q9T zJ%bPRe}XX-<&MHr4AES`D5wYQkv?g@W^1N6(6rf2w$e^^hAV-X* zS`qY#ovSVksL(R}u^XxX?8O0A#CcXoTM0E z+vz4On=cT8p#}^NU@f7>Rc+#n=kp(Lup*1=tJ66vvG#+fFp5(;SR*Adl~>XzZN^en zL1Zf-qGvoty@f5nvF-m>yFns%z%Clh2(M0}W00RNGV+16!+hqzZm-(-SUJp~^#eRT z8XlzJmn&2h^BHtTt`wiZ+4ymytBSd$GDWrTX!TUTi zXlU$9!Uh<_7b_1pb8h{SKOYsWJrx`VJ1Lm38gC4Hn#AYq=G1~IYF8dHC0_nLWE4~mCN>6 z)2lh35{opsluJ95c^xuo* z0~y*UP98mT>Gl6=+fAF^>y0I^b;#zBjkt6jc zosj5V*V2Z5sx27_ZJPEuK3hV+3IpUS$^h3o+yoT(T;J>eRG z%e7q5HG5tA%Z&E3`0Thv{TpW>jN<7)@@C%Bq7^x{k-&Rvo@4z0=*G$b@VIT6OacG$ zTX1(3GD%?{^|Y=EUqut z$2QB0!IlaHFAkqhXFJEh#=2BL)_nmLK`Li{UsMIu0-*RNB+d8;--%fIJuFf2A}LIO zAg6?jNvO7;w$=sw&IMy7Wu1IdlbpDjOAPD`FN|0cXMksB~>8|^c0^H*3a>tHlM*~WEo3roqWBa;5KM_3|nR@s$0I2l^c#tt$p62Ijq zh-@rUbsO?TRX;|(Z}5-%Ozt}yScJ%rfMd`EMvQH_i+2gT9;Z_!3gdFy1xxQ*wcr>c z8GO;?#3Z?tWFy5ID8#{Ipks3fC#o7*Rz-W*M^CFC#0Vm?e+(}jBLK0?Wbr*sq0U(E zN--eq=RqjNOc6C-?OIAjzf0}2l&j*DC)H@{Y5)hHTUfNg#m-gK6(aBos$ji4#cyY2 zz4d+K5;G=9^1_<#O|}#=5zNxgaiLmWa?c#Y=Z21U^ zZ)T>l{^T!;2Wa5?t_i%$;dFeEmFy(xIfNF$o}@%JS3*lWs&gO~3i(zP%uMiGcN+6< z+{9!?fc0w_A~G#4g`^>NbvH??Ld4Yp>jb5*!ayu3R_ak$`)KusrWNWpk;2q&&^anX zbDOg6buSVzM7NywMTr#wvAL8?P~&iGYhZZkZcIYbEK{x_d~UF=RE!T5@N!Skr71!I z64{1)OL)=vrph~xRJAT93h$IXq88FuSMu$w)f9)7#`1j)j0m(_4>vgT5QA}H07ry? zCCro=^Qv#an0=1h$WXrXx!}%tv#Qo3`s9={`@$NWA=*MCZ7ee+#X9MIKB#o#YEZY+ zq|#CZycliu6ohNG8)+gGl2l6f`LsbtAl$7_=CgzM`?~25LgHsr2j&)~37?JKnSCI4 zS^GqA%RyCHU7GQftBmpGE#sZ3D@+e$VoFjY$t0k_AF7VT!<+NQpv@Cm9Zd76)Q9zI z;d(QR!VX9>uJ@sMF)$q zu8X2+t&x%;n5x!&yNv8e+;x4JXfT3o$Grz$VJ{;lS5~q+^L2^-_3v+_6P>G+HOF_m34OLlz8XQ4)Xl3`_ z%!~I3 z%mVt4jBl1HfdVdKDz?QKv4>H63aJO*w zYr%=mP>(EVr#{YGa7ppM{4b9F8MSs$(+|p}IG(~5Q=D3uK${pgu6iQ`th!3qnw~nm zhVnc5P82M4T5e4=Gn+9hHWFz91*%(fQyTj~kuh!RF>dPnC8~=hB@$D&x|gt?ilFw( zmbG5U zu`dr4Y={d6d1ZcOa^+A-xy)-xPDe+1uL#QTms?~KYZBjm z&Y=CH{5Map|D;0U%p)ushmAAm&^rL&Vos45sfSvby_Z81f>-^s^NOk{6O8@BxPYzCFba77KLeEad6+? z?pZw&oJZcm3lq4?0SsZn4c-~Wrmm(!aqL zD9hw0i*~cltGP66XzE3#%@GQWCQbvGrxKBt0`wX2*MFj!&k)K)K?$noXk`v6Zf%@w z`7P#K+9$YtW9*qbigO3_s2L2A`*VJt>Wg?qOi)mWZF*6S6Sp}$dgZL9p{kqFKJFh= z2wI{uq-9?tQ$^-AK$A5N$;^0VJ(5WWK=?;wDw@O|Cpbgn2s%n-Xe*1V&0aKo6eu<~ z*+`~r{7q7rnpnUO=^-*F6f6i3qO|CnUnF)_!69WR#Rdm0h<53q?dyF*NN{y7uoAJK zxJecr{SpZdwB6gHCZx1p2TBg zK$g%B=Dl}a575X{J2uyk>Fze7Z*LctgSnDvF8l^nQN5ZeL~|-(0)bdTy)>9{+Wc*v z)Rg5=Zu`fvseHOfV#qUt+mQ+)f0R*0_WveK+Fhc=%?-G``}9icVIvLHPE;mkJW8{6 z`G2ICo6z1jerzjS5mv(gjzKr4!LV6H635CB5Y&MtTnDwT(o9p@#AZrfWb zm}XVE22+3TV<2|{%9ACF3J|sUn_EaN+$yO@Z0PnI^0c~Fn4v$HAnaI}H7n1UILe|6 z|H^J0e0bjDL!8gDhe{aA8H2XO-KT1CJqyZHbeCt_b)$RE5Nja*>NCnY6nNWPW~PPD z;U{V|KIag~Kf(rOi5p}g_Lt#%X-HUqa9wjB;`-z5BU8O%FP}NQz--4V2Ni#E1GF2`Ytm;8Bt48KIMS%#Av8*0gkEs8WN~cXeAgRatrQhpK#l7KcU9VRvPuozi zljJz)%=Ie$E8lH6J~4=%4|p7PvBv zj3JKtniy{K^9I%09L(K00l*x>r9(Wzi+R+Fk8>}K?5eiU5>Uw>jh9sOr-&Q3^gM9i`Xy7za>u4x&Pw~yL!(1gb z|8Z36k7Jj@N%+9!k{iD z?{cMwJkMADb}V6`ZA4|Wxsl3E@(zBU4+oH3dj-BVQIU2|=LVBi}m{GgNe0^M02 ztB(TEhD|4$_bOF;2`^(J1X1G}kmn1iBm+^C0baxnQ2Q&sXd%qhSX>>3px7|PWH89Z zL!43ZEhp+q8vp~wmLLAEJ_$OpSKy)uD6?+FwvadKgBl?pqvD4&RTTRLhiRlvelT$i z0O>WiC3n8_9yuDA? zsg_Esm(m(xUVd=nJU>RJp>MkSq>pG;mdvh3U_Jb5C>j}%H8Ra6WU#2qy-3sl?bl)^ z-VM!8&aAyh$MmPKb2=t8$8DV#In>zK(LDwQ_9$SI)|Q{lvhnXf8+ zL{kbGn(JL0FqrD&HE{BUnW(fKS?x{l)<6ZR(TG3wfX6_c+!ax*);;-&QbTEiTEmg31|= zWkt~LB7ANXK3(35^_PECAk75<4)gd;<&(40a!`pFQnoBuQYeqk%-RSGK(rIgwJgvtZicETMfRc8)NB z`*=Ir@X|Mut#Z4?)9{XZN43H2RonS!qQCIOB~+|seeuL3u&I5%R4t)N>ACWB$`>r+ z{(+miV6^~LBkl6Xl>vq)(^t0?Vrw^vY38G}3r_Rh$zz;8tB<8XQ*Vx$+-USEv8zi- z&s|5;`2ySHY`i9Imc0zG_n_dW+-mny9*3Dc-9;NQ@Q{&h*&)+ph4(m)!DF#R1(j@6 zlL&}`rt^&)(ecl9d*xH*>1E6n)grGlwzjz6jT91T#lG6-(|R=>L`rc2`yqgDMfLgV zi`+}Jl_9vT$SbAI`eB;W$}&e$h3l=o+-g*F@_?)<`Dqo;Kgkt}5Bh~~jM(tAph7F9 zt13*(r4;^ZlU0`vq-LZM)=E!j-mQMSB`zvAQ=S;>-!Fq2)1%y$wm zY*H8%#;T2tbexeMk|IXQoCgVed=kV_z( z`q2C;WWB8dP>t*#KdpN&R{USk&s$>U3N4C(tf`$7=bfMK7P%)pGn}@n|3a5tr1jz6 zdnc4PjXVtd0cI+sfw0m zI0~hP6~n5;cBp!LJKHO$iFN=?sC_S@k->d*o~Es z))Ykrn^{s_6BH{&yuhqp1z-oBTx&3%Zab=bD=NQ0d4dhqW=`eF88z=;NuW?}SzxlD z%X>&%rlFb63W|p>l+_bP-1E*s)&MRPc}g8d%aVRD6F8N;;9T9$q`|wC*8nNLE84Bw zvaP=OvaVUUtehI!Kq=Jm%1VyjSjMYf$8?y7fH#@1R(U+5aH`^1P1ppjYqDZvD-2h4 zC)ukA9g~ej9Oy4uA-q0WFB6&F35M?#VJ=xOmkbw=?1g>H>rlmoB|#`WdmMP$JuUS8 zplMWWNT$5qZz?#KID*2gS(*5_WZTh0F=BK#i|B6N%*@++EMv1SM~?a28`+&YWy5L8 zn*SgOH99y5$uIf_0JjGj$rlHeZ8SWf7vB{Bs~JpTS} z1Y1&|JbAD)Yod5^PstNNrhSJ?ry94V-odI-lMSPQ7UTS6s0*8%T@1XfoOvOdOc}B? zW>hR7W79$v_Dq_Xc0Z|psCp!9Ys-Fy04vI4oIWYoRzJd#qq0~$x$BQ*yv_(UwyXrXO;mMNcB;uzUTwKvu#l0DVFHEgYy)Qahg5;;=clbw*6 z%`83TRAr?;Pt%_2ib%Z#{$^)N?#Rap5?@q0KA1%iX;&`mq+Zmpqys(#YKH*rV*!r039qUVQ!t=pZ4ZD~SR?Z3@~ z<>6F1_!&X2CIcV4w9EP^j(q9cdws%mMmYZ5E&3MLMd%N6ut zX`|BJJ1ny9U6cRUs{oNmQ-k+%BPpxiWw9ZV&2fb*DzvdfaFVedzP0mm^3_xe94MOU zc5?D6nj`-r&u}7sIdp2RD6N23D$)~<_K#3O3?!f1D;}ifw?K6*Bi(FJa=qp}>CEoc z_(X)nraoS~)ZgQB)L5uFB)ud-)J0=n&NP_O?0C&iPf^@eqcJkwKq%2VggVZ%#dY~$ zXs)3q>^KfOrA)OxxCftCi*X@>2!uvmH%_xv39bd@*0>(qTNLPKpDjG4WW>pM?1a%p zB!iJAd8$RejRZP%UoZG#H$F|?7m1Qrj8|keZUS5Vz*xZKgnZzubU?Uq%w@@S&Q}Dg z8!-uv&e5p{Ng%H2K*_et=wmc=}2ZhptC= z!JF2qlHD#bgoOvI(=;%p8<4Y4C2{WYmJ}p11+q2FczYT_Rj81?=7rk3QAfpBh1?zc zhf#`CyNndUM%?RTTefXX&gWaVYe_X6b!I$m-7#tM^bN1kH^=8(gg%Hdo^*e;+PDep zwh`)P+PVvZ9&M{ih1$MYoG_>BM{|LkOnbacLU!Rgtm-ZzJg_}BfT}SGkhYkTQQedU zJmH8Eec+KfD&E3f8T^Z`c)=_t7w)O+-NSz_{)mtS6&f>XcrBj4xw7n;kisb2{M&*w z667U|oOhpx7{5Qrjz|c3$*$}(T27pCh5MfNYU`2*_8v{ZH z;5hxRytoyO+szPa$l4t<;SR6Q4V-ZimO*+sNt1#83%@HAX3|3KOWBtcAbgpPfk(ne zu(N3bfMA9=X+*hC+SEb*(bNAQpV$=UbBFyd*@_%#r>8ABy!QB%j3rWL29df9G%Ye* z^`Z~pOI3tvb*-GGlItd0?WFO{#uXoGnY@K$j{m0F>o0T4ln)Q3cwpvn^%U(N{pW|uHGl(D=Vs6_hvA872gDQ?F|eFdVIcD97w2WD3g zSaHzc!S9z)kIC(F{$aUVqD`P7hkc=BY8d<_X- zCktSy8(xi$EsIwvN%7KVr)vk;CaE7>CBHR^QOhIpW90=MMj3S~$>xE;lCLT&;jqa+ z4u{9NjAHbO>PGoMxZa&Cp#opWDaqieB6z{<8E3l@y{K0URgO0INJ8f^nV&!S#cmMF>FbPo65uP8?7(Hu*Q6T*dT(*MP_$1vb0sj~kdR z8muf(R<=A3$rpHTPf;b4c9dFc%iZLo5V+7a>u5;~Sy<>Tl*3Xq?MyjS>bOXCY5h>s zU+!Asj*j2Oaz%}Sm3lH{m`6warkk&QAEgKR1ue-#R+FM^iG$`xo6uoY(f&DO#dnX` zB$yTEdDN(AQZNY=vB?P%B^fd_ngWxoCd3-@>*%3ZsKB^pTFT>g{Nv{tC|%xydv}l` zzRsbp>!nK8#-Ih|`=ZPn=U=cCA%vP>MfdmK0v2)uel;!`qZoQcwmPWqTM$vfyR(mm}TxQAHuZaE$q1>FI zm8%U^Y|mUl(jm{QMyhd#$Nu<)T|HEPOu0!mY_M22ul;sK zHQ#VO)1>C71Cn+`)_VOtB{g1H*0*b0nY#Sw-FI$?bKwtv411(gu;M)?M%2DktR+h6 z!ox(&5SIi`Vd3iLnUl4No%q(fF&}ogUPQNWWg24o1xwO;n|Wy{8gozvaEca^DMg{TT>k~M!%ZXem_GxejvN1 z31k^ND`v^xMQL&t4X?QcHZ9xi%_QusRR+Tp2BrdyL%bi@7hIFqle%a+16S8RB~$)B zF!&4qY{R&G3^*Tc=?u+d6JoWk(L^Bj6U*>#7XD_U@avRR$T5E>6zv5S8+>C$D3*&F z-IZ|Bs-LFo|GGt(X30-J-q7+GJBXR|M;wx`pf!M1kaiGq5G) z~8OKEjb*qS1EQqGG5A>UlW$%TsH(_hLL;VXSY@>pj^HF08p z{Ot}niqUv$@wJ0-a|3OoyVeQ#ZqE_K$mvc5qoS%7l5xm0>xO0_8*SFpp|25(eg@qE z=NbFR+|Ce6AA-^EwFR4tK`gj^FYA>tKX09B8>7%!@$KRGl`C^D9A|{X&n)ccq$kzh z1m?=gn}%NPwQ}uMNf%2$Enl>cUCeYCaGG z(n|q>KevuUlysi&P`B)?!=qmS0RzE0?$sXVH?+=!io6&dLfHlN$*MpWwQ;`|CU1u)Qpi(Trx7!XITMoOg&G4*JC@$jCZ5zj zNH$_EmSjfh_E6t5a&S{0Jc#c?sHbDS8Y`taV+U$jntQSpyFHB|8XNq*f8U(SzDCNg z#ANjP#4+n_o^5`qzH#T|$9CwU+e*>Ny~}VSzmqF*!=O|SNRUz=*emUQo3|>;vYz)_ zggXqJkQf=nsk(xOZ5nh9DnRm^54nyv&L@H$^}~6+DC$8TZsKa3m1ZzjI`le!CHn_mB?CI`0E|Ws<^NDY(@;9*d*S#W4- znMxGwM^>xl?1mDq6y%?Wfnx;jz`-@aF8SBLP?j{9`FE9?6Eu*ORikzojRo3a{>)3f zo2LXX7{^~>P1dBRC17J<5pwL^cr@XyGy8jz))>81pg>v(63tJl|%k@<|(E6Hc z3mqN6!jNjXR+L_wMa7(YBakr%QYbj@0q1v)q2*F)NDEmg*H{K6v~!pF57g@fT?2HC zgKE}YLq=b?ZA=(B#2;R2f%B*+eiDoz>mo#RDD!??d$nTs1_R4Z%BmMazje@Ep=6UI zV*-8h6%y6-qs}6=U1v9QXhd1VPHS|(j`joRu8AH86A;mlwXOsTOTe{lPXBLsE0jPL zm$YJjIhx+iEHU>?xGcYpAt~laYom~OI`y)LWok=wj)1SRW$_p>rxqu5?!q}Ef{9t4 zCZD8yC4UyO(tiw`)j%np0^Y(3ZGLYX~Nx&Tvg}G8H6mqSMCHl9cJR3C@0M1_ibp zL?lRtpiZ1&Gyk7K>}Sv#4x|l8BlZ1#)?S4{9Dc10FnHe4cy&+xdKMo z4t>U!607}`j;LSP!)L*~F9lZdoF^C08u9SIn0l49lTdnF&PMP49&KPv^~5DV_95|! zgUUv6hFP=YApqmlK#Fr7xMj5Gw2mNBz1J?QD63KyZ$-W2G3;jWY_fBYhiDRKQeD@AT>aPg zk5jo(XK~{gO1d+T1z9yxkF#2d3ze9FZ%{sYY35BM38B*ri+6IU@o?%fZw>GzpK>AR zwzTogp)QZ!Nigz~WGcXSdd=50hn!5OZC0?`Ve1!J8MtD=-7y>EDp)DpTg~^8wrIwC9SpTDc!B*MvDZ>{dv*(E zFS>0vEAm=5TC?O_84yMRvmt<5CTE|Y8H!s{eKjB;g-z@hQJz6?cS?5eoErB;x)l>E zAif503%7h)3hFw&WsD2@ct(tFVY|?!3y&@=s1^@S&aOReeCzhuNpN=qx%PYGIXyC@ zXNqj7u(M%Q_I1f4-R;=QXVTN-`3tbeMZW!#mV0RdyX@KCc$B796`H?3T3Wy-Hf>p- zIC{+QC3UW6OOqo(L=V|I`P~}!6wCR*5%vj<@JKCe#!hft~$WqNT?E( z22qx8hTD|gocJ(8F?85wu8WR?Hu*5R_>R{yJO#Vd)eSnJe>v}y7GI3Z+8OGlChdHL`yBRGtFgr_Bu^Wo#A)87$fAa`IgB8eII zV1Z(HU!ha_0QZED$XWlt(3jdl8y&0Sc(PIeL(|{xiIWG+jYiaIu^Xa6kO(chC(!sm zw4a&nZi}OpjeLyBRTv2PpEj{7jTM-*2`AG+D;!rimH0*ejY~QD6ePS5R>?Ojo zQTxfsB}=bW7mQ?CyMZYSJA|N@R;C-*nEICOD1BEn!<~~)5Q!#yFnC<=ijk%ZWn~D` zYk?Q-Cz`UCTLnUw$k?Qqy2K`zA1;k&Y|+i0I#k~!Q)qR$nU@FXFDj8|S+P@Q5|>PQ z6xFMad)sO?4#V{--K7%`=Ou1!zRVG(z3=2`V`EZ!3WCW3g`uX;Zpw8T7|Uk`HXc57 zPO4ryhMsCxqgL7EuIe}tGCA8}ZAYMqB8AKeuDY1ZBkA(bCUT0+6_WMA(VEGRYL;Rg zz%M_Ar%hQ%X5dY>5uN@g8SL$Uz z`Zo8H$0}(M97S)tkltsQ)zlHVH|LOeN;%`S9lBI?1*XrpAv2^WslK5af6;$aOd7?# zE#*5z$9X2%C2rues$?F}%2cQyUEp6j&$!+RLAeD2BX?Qncszw<=Dk4ldyy959zEMJYP33S z`9~bFB7z}`>CZQF8R#S@_uBE)Y#a`AWxK_~!Oh-`eYWVjwYH@sfPOtr5ZKMWOsA&7 z8l(wDkRBIYIB*W<65^6eM-jLUMSSjB;mQE!AC03_N;K$y7I?sDIQ!G_I7VI|H~s5K z3HzHatkza+szA0#y9xLLTfe;=-T%9qymZs=7Kt-jK^_}7jWxyf2;95p3rIZ~HEoA~ zi(px7OdfH{m*P>_CSINjFp@L-{A%q&Y-ohDVT;Hv3~#dadjv9YWCj=^@}z6&8J+!6 zIrm%OVu$mSu(vl#tP?O~b35?C$h_y5Pgv}k22SNbayIL+ORAWam=C@@R4o+V256q& zH}~Tck-aX%sq& zFq4CC^RRCEHJe7c%B+DEHtuL+bWNNh>DqeA~{WE5kzS!#5W;7+$MgeZAv+3N)Se_00WgsviJdJ#;L<3GQW6aw{q zkSA3i%8(iyO^rD?;RG%pjIZx{fze{}>8kTL<8jy&baU4!2E{AR(M@|#6;qsKGrLOl zj!BUx29msa3dx~j9hfQu@W!~y_NFX`O8?2-pP!AW3kd zgg=>uw+l0UA~Fy#5(_&{uH|LER-nVJb3BO{uz$d|Sszi3?W)?Jz!HHSuQyenXHkZ5 zpf?6+5D$%C&Gj~i+UApksvh@(gQ zGI2;^1T^uDBKDyYwgYfoS|$p#3h@2e_==iM(Um&==b`!y6-eynk*+NeY1RLxAnqH& z22>K-S-8StP%FR`{TXcX+vlzl;(~L8qz7shMxm)U3u4I!V~;3zTCHg(idjx+OlUM9 zK|G%3#b%EkEnLztg zgAKMdl0po{0{<|R8am7*nx#{}^{O!EcF5_~S-sLwb3)kP9d_Map&ECOFGQ0~AUF{} zRW$Rni1uBj{7PI6k^o69?Ii=aE%8oCfo8CXWw&KWA!l^4D5}xniENQ}TXg-8MLyZH zLxWNvLkw=bwVjfCZ}i9Uo+&$-B-QsQwij!9lOX@%);&Rf&53qCS)pAO{*XRFjmOE+ z8;@7M=02|4O`LIkq&}Y>qj5xVSlv?OnH za9$yGd2Yp50w`O5+7u;+cC8N5ZvaHyYuIQYL^)!EpHfJD^(T89(tYFL<168K|&z$sMUY&U+(pb3!nf3K>fdf9wt;2dRMpm&ZGOe!7-GTNzG!V zh{+(zo+AnFFZPWk-|<*z;Wq_2Ze=;8ga;i$&}s==9Ko?Ww}i&tCKcXmTxlGfr7pr_ zdGP6Tq@_XCP^mqkKBa|1L~9*NS6Ji_3puOJ*HW@bhXem|aRAKhPO3<am2N zT4B|^U{2FIj?!3vm7{ux5r7rFI7nT0U}rAD7oflg2cD6YTkb7OzjFtSfWDzz47KES z3Q*i8zIE9zBVp zH<{?M2o<(0Bnivt2Ph&{w$$>)ChTN0BRhp4zV^35QwS|vTXCU>q(*I(EV7xw$)Zth zt*;yDmpiLHT36yX{5I@RnYh#_0*lO)@@}!1vfBIA(#+7V@hT#UbtL*%ak4pVc3ecZj`@Z_j*T!nSeOX;-P{A|8^Rlf#o3ggg&6 z;Uo+0l)lc_$>Ty;+F=Hb(4@OnHIcJaEk4ZnrSgq1EP0DlnKII%0*r@V2k6m5Xag}( z=67BU&If`oL}#-imjO+@%eJ52GdW1d8IV}TC`--`wwzZkS6iJBgHt_A%Lz-xQ8E_m+Y>NH*!@&%B49GbMUHvA65yT0N%+ z1BJmht5Ign(C5529m#)<+nA-sz7uR-4_1;mSSr((CiDA88Xg6^gcKa*MYUdVK%q(i~Q}A8(f3k|Nhl*AqvUC zOnz2IgbA*AhE}SX*K#_5c8wcdGFoxVVphLZJuhLjy4Id@%B>j?q01f=It4)HKp6__ zLrh+KcB41}n!ZzMfL=93=8>5{8Fvt>X!;XCUQLDe4;(yW?XAB2yR&_dzXu{(<~G6I zswTyz!9vBip9E_P!T{Z;T3L@)m_cKURwS9Sx4T=ZGgta)=d|Y|g?lboWLEjzM~*hn zO!OEz%6VS+SAQS_W`czzensry+;ryRqZnaEc^2`R-bwb7L;P_w6Fp&;SC2G0;?t>B z{%ryQN002+#zBJqsf_UR0moKvLqCLr@#orJzI2Z7hS|8sb1HEzM5W!rqd>M#FhufN z!YaKlQKUU0F^p&Ta=+T^&}9#COHs8M$SgHgQuG$KW`>ypvog1J%j(5iiH*a#5l_OM2K)h}0{^dW#cTx-kkGBS?> zU~z&lM);*iHSH}GU(7l67D{EUEu#~MFP0gJ^PL`M{e8l&n&$C$kZFA*pcl@Q zE=HmWZQ9&Ib%n_}?+3fkdC8wWxS(LzWu}%5CQcd6=fmbtwvvBV!bQdZYKgM<@vwFx z%5P1JZAR7Mt}ONSUi*r~iWE^<_ttkee5P2auJ-8cL73T_he|tI5*6k_bI?>KyN|=; z(8>Zd_Px1iLeqI6nso_e>jwPRG^u}l;4q9;BI-IY!G4t{cvwS<9%os>$f@05Ncf=1 z%mJNUUE)`bL}cHHr_upBC-*G9Drcz4rfRiQ3OE*`Z}MzhVn^WE*w@r`jY(qAkn4O- zKBF?OgRpYTKXnWZU7K7^Dmd&DAvgl&`cdFahOVzz%t=H%D`mHXWN(tIu2wTb3l7GI zHP%biRIMp3>qk|7izH0Zl1s&TtQr+E)s)i|eYY1Z<;2Bc<}Xei z8y}+d(3(&y8sF{-4=>{qv4Z;0O9j20eiN9tY0Q=CgA$w|G$Mh~#^4p^6H$jM1HU>t z!e?a)TlqRYMyq%q&@aTJiVlQAbA3GPgTQBV#=|?QCR9@8eRMnVw%ZTTH&_^qzf{p( zB37wFZr#F&ba{Z@gIYc5m-h-du%=}+-$0a3PN{Nkb|-gmoLFrax0;A=w?>B&d4k@fQB+@!=>@K;JbcbVtGxou&W zFz!RllAT!0eydQ3{Tpv z?Is6#supU19w1ZV<0$GkO?DkpWVKO+eHp}C9m@Ocro`C1u;1B*PhW^~`7 zIcE#2R93;kvZ7SRIeR_`aHUja4&h`v+?{bbL3};NErTd_?b^RWAN>}vQIKA#)^Hr1 z=ckGIdZQ{{qXJ#F7Ti@q1wk51mdP}16;kYi=?n~6_L!gp-x@)_<`T;;kY~qcLD;$% zqfhq2L?!>!gDbKqeTN_)m74t;9{`f!Gmb2N)l{U0TmWGqO`PMYAxT zqYUVX5xEP6asO()mT$c7Mwe(=s}^4_Uro=2QHCJ}-dC*L+qUeQ=X;Ov*X9fA-#0h{cQPTJCV z4V9o{WNj_%~U^wofw8LyEpiH^cnUR3Q~2_{OLxEiTj5 z9@)RNBBRx3D;%akDS>6S)MhPW-m-YChEJT!R14JicMoA*LuwfEEzlYkowZ2ES7u%- zAf*?)51BERAX_xMSSg}@5qHYv#%&WW#r>Y6m34fxnMZoAp68<)N>mJ;>+fXCyzNQ2 z$9iBKHS7uGnxAV$l~g(*K$7FI(bg6aVhU-x_joofG5$9>N{zf2tlQu}NW}Qx%-Dx> zI~1#*G;azbh7>(<@*F%yPv}hrgA80rAj)jsUoQHt#~HcMyKT}aTAi742i9^5M>16{ z3cc4TC8`?k9Wp~~=K>?>IQ1>D;Zm3}r@TJBj9%{DxOL!eMP8f0t}av?3F5tjy-H1c zqJ0fp3c(PG2U0KP+@o@z&X;a9zwor`lDnDPe_83H=-~{M2z-= zdHwC(<|5mel=MN%!Xk#U*S-ztt3YsH93;jq_TgRarVn|#-I5^AvUV2l-9ckd0|LtD zssh+DbLY$Z(F#fjITgn|tCCM_GQ3*@UBr)u_qvy317ZIj*d}*fyps*UAptO7X+GoJ zu@`&ezX2khO&G+St8%7IGUsL-h*^KV>`gibic)Pf3v8`&0?PIk%t*Vu0&*6+-GeI{ zp5R)}xj{{NSj)6l6h1%D3IMIgdYBw}ca$V3xRVafGR;!BR?V;p9B|W*G`<|AoN6S{ z=^A#3IwLAU2dzu4-}snFICoUUY$j9VC9Td@&@yJa5enralSX$@lSbSn^(Wc)*UWa= z8NwMWFqf9Oypr=RI+m z_$u}5=*eX*Gww@jyp?}KYDD2tmz}=G2f;1FVQ-VRU;H{6OsmiPh!?Onn0m~JFg5Yg9e74)KDCwxSd*} z8N4qyHERoM*~gje!jf0fvA{om=c{2M|Bp1-GJ%NL}Mx4P3=^Q}{h4O6Si zbJp)#_e&|-g1Nfh8n?Miy1N-~b6jc|hWRLXh02mfFP%IH!u2+%n#*l+vKR8M29Vlh)$%e&k=$DUwU9`g z#g=o&&L>=LvXGa42B?g20KyN*eBcsRVy((fdm~ZSe^$Og-d`M?-cM6*MP4zyKr=J% zgSc>3a8mvV+I}@UmG;c?E)W6nUlf1tD^!(x0p#5EP?&MP?kRlOE*(pBtqIa6!9Z>! zx0($#K@T$GTcp+U89)e0a(aEjNtAsZLzFNk^`1FUuaYpBMm#CrJ&s-vJs>XqseaST6net<+YM&@Tz zj|`y>QpLe6p>=_5QEiz(5s2OmsoIwQ6&K3cYQf^6<?rA=O38Rj=??;Y7mk>yjSb=);ccx8#wO!h^L}+v z0&GVqvhQ>Djl@EPDM^Mw+(T8x|zuYX98C07zLUe&BRU}_*fl(E&$3?Hlje-t*O$MzS3b?wPER#33z9mhT z!lsFffh~_B#{q3XaL`o_Q4b$oVbG}AwQRRUUydGtkP4}?z396)-{-lC|DkD?;PBRc z+u+vkGw&W$jepR-E+SLRuW&)hXR3VK>#|*}VK3^2JeUp!1H!LM)rsAJ8Gz-S|5m#Or8bbR z4Z+ztfodoZYSn&9b}f!c|1n+g+(xl;Rz)6X(k|mqZbt~tX>6=ShtHNwEp8|eR=Z}Y z`h1=T?rhx+;|EeTJ=@BF)lBs^;i#G9?_ATt`YY_$_u1xzVXiBaC}B?Utk2&s-cjzj z_vV(u&y&pdtBUp=R? zmw%V6bB(pbQ_D!c;3BbdCs#W-FPyFk1+E&=jv#Xh%;g@=QfK+2O1YnJR@1ZxGEo+7 zw<(fL_+XDAwO^Wu^|5}zYHqb%HxIIe{yb4rp6`@A^N}xH)_2Nabe;RQo!yrD zvX2H{nR@C01QiKrm~EBf)%fq>&<3Shx~*^)+Byk)R+{-1E)E*nZRUi!+Bh?tD}L7; zO*cOzSu7)aDEdT?bcXv5%YU+^iK4V&9HIfsTRg<<##?Yg%KT|%4uMuTxXe;O!lf}m zl#;<(fHiBD8k9#fR=}P-uf{#KoMFXarZ5((#ROI)u{*5C>h0u{{!PR-wQ?t#pl&F| zHW6mlRzLig9~&BXWl4if3#_(E`?m(cf-Lbwq%6)8Y!zD267$8ifh@FkCTrdGycmyU=fNt;iK1^7t+{#XZFNvxYZ4V+QuHJB7`e^Lz{@ zIP0X6%{N@AQMK!WN+KT(Rs(+p{x??VX-8N$2*30>iYa(kpWK7Q7mlBtGQr;|XCWXN z*VajMxp1Nnud3zc(?cP?Gew8tO2xcKW+BOMg`z)?_5w&Y-xjFBqo}xp9eF`ULh-OB z5Xd9y!4ruZWbiwmX8|zF%pPLVZhZ1)XpRjP3wMwdbrJpIcREq7WiDWJrJl z>jfyiuKaj4y9m26%;&zB%e9K&Dad}Oz(y3p&JKEx1;#Lyd*QaX!wyHDMAnNM06m(! z^#o#5^F12!G8m60RL-+Dnt?;FHCzDsRKx19Tec)57)?)qw_T_Cn+%8AQ>mdo&Y|G5 zi$VYQ3EHq+BF-w@8SNt)=3?wf%gxdnmmRtxX^i`&-fpD9FYb*=|0+3qm#w!o(d0$1 zl#YWraMd-UBHW<{pX*1lZn#~EeK~+@nt>jwxyB@@0z#mRQOu-9Nd(MY;YA@l-)gBt zf&rE00~JWSPy$uZkWJTN(~=*?*cAq#xaG)_rj>?m2+|ly$ELXyc&x+|ygp<4?zq&x8HXTJ6%h?kIOv&WEV_LaKnRvXw86;oYEqLy!TO zu{nDmniC8!T%oyFs|nxds(L~P4VMG1l?zds{!vQ<9eo+@v&pQSTNx8n80;<@uILdj zAYA%bg49JEyNAl>{372mIo8>JIsz0}0UlAL)};?YLLn`SmXGMAM~p=>&GHy_F7IaW z=c?xwBtzu*dZb*vP`EkSOLUBb3BE%f1DMXB8wWTPu;TYs0T84lA@!w1hEwXIF5Y++ z`8FP4@_iiO@Z8@K+RcSr+BEh`n32GzC6;p$&x1Tzu=(wyw0tPQv$`Uu!&{`89&oYY zK1P?H)rD8#qJCAi3_+uMqw-Gm&3v2QK%(*3Y4`^R3U)zQ78LqkG86Uxf8!s+i;%k( z6=7s1@&8!OhDVA^BSxwY2$ko-&)-{G*A*41M zQ9Uo*RdS;o|)@?mwFo8tuWXN_G*yCYwhv5b)%7Kr0JG_uP&b=dj5M7)P>JO z(WP)v9lgAnfxzyiY33b+ zJ8nGM+mLVz9K8Dp?(A2icLr&9OB9?;0%GdsdHKt8Jmw3FkBBJ5Zk&~zgU6}0^9KGp z%{}VdPjG9mEe4=^=-_p@pD}Zw(CSeanOhLaj$JH3luJolC`cyyB~+NGMdzv(1i(Y; ztlf;vlRjUa<-7A*J0*|%J{#h*>2i`j`7d%|N6}*5dF8Vh7RvOjv;L$5V!&KCQs9Y9 zf8lM$uh@1EnHs9AC_$^-(?=1DSrvQq7h9nKnCbMQzd z*fhOHnxcue+f~I&`b{6C(PswLRG@&G*Jk%6S+K5a_BC=|sD7r0NzvrFCzr|>z(QBG zDmoO~0X#FDT>0G5`hN&H$Z4KZN_gGoH`O`B3f=cyAc!E?*AXbWp4-y3s0AGvV$!E}0MkGv4n$(&>hfu) zzY?qPx-Yqf3v-0ZC)G<}kJY_QrTVJWLo_8eiv3I|x(Ae_p)eZSjiF~59Ha~_Vj){t zUV9k(@xZaD6||8VV;7De@a@r>vK8(*q~D}&VWaRyLmmy#1Znvm++ZH6;i&jZ8~h*$ z=S1>wIDF~41z6ptPDLy6|jl<@MLfRSwK`0BVyQ zQI;)61RYtahaQ&p%84Yha{wzJgOS9Ewwpw?;r4$0TI<*80W*(v1 zQ$(!TNrXuZCyfPFuh^R;ay1IfcMt`|Gha}-Mc0ByKF>_?%%fJjuycmGxYsdZD|Fm{iantU|6E3Z1g)32@Z{ZKa%>;qtw(CAx7g z7QPfh$23~;=^I7?B7%*bZcu#y#q^SiUZ3MNEQ|g@!pLe&tVW76KWE-7EJ4@nRKIbr z#ga#_A0wO{T@=m~L;s+jE-Uia*KoWMvGvwj{1b^}xsh|uU%dfaiCzuG7nZ=jn zP-rm8_ukk33Bhu$EWPwYy@IO{39)zGgI_~Hdz~G0qmI-ehn1vrqwbc?UclA<+bB(Uh<2GaSSImKzS}k1 zAYBvPGMi&=_SB|+Uox(bOX%Vajj0tr7aNvL$BGrq&AxW_*g_G|f9$qu7wn!O#Ke1&-V|m ziB`&?9&FO}muzAD94UMZJO>t#GK>d0(iZPWFbbbHZ}K*oOvqhk5~^ln zKPX_J{1FMsYh3`0RBA6?$3~N*tW(Rps=9FDi61AR!D3b=?T;LGBy5O-;1(O!Tof8z z_7Io_Jo5B|ORodJET^#^;AUZ0LA%Nl7R{xMG2hMR4@9aX2k;_am!LbaNf(}NRT@YH ziO+7(RSW^wM1sR-Tl(<}V`nQ}Oq3Nr8Ggyk0E0Q%hvmfU2w?O7 z<&0D?Y|f(SOO$GgeZXy>ye>87&9rfeq&a0<`mS>6!w{(A+k?X41wm^!VZYK_eaAqm zzH;_y=i-jaF$+(`8UoZJ zx3K^hSQq&QlcxiSZJDp(M-m2DSXlFtyq1t926`O;lY5pGSM7;W)USbt5~vEq{mKLSsc_HJcej!Fajn*kXpvz= z?Rjm#7wXQS_`S5)T$M?AFSb%8l}Kz`7MiISQ#|QOH&4dtw@jZhDUMY|)F`fY0fX$~ zwlvR77^C*+V*3rWQT>`x>vbOxUyjF}iiWfWvBayDe8Ba;9UH+@CODDdpdG#6n?TQ3ef z4q|MeW<6gtYA-Ry+eLwqMgu6|2=ZCX;3VQUA6xWcql^QEx(>HRwrSksOB!AD05$;uwRGEGUccr1^&C}b$l2N10a-tc;? z*sQUh9nL?MPlPNlrDtQnB|~`KS4$P%u56z&qi+(`kyw(?jN@Dz`oIiP+09c+C!E9n zfHw_p=2DtHS@l`QDxj}%)pZ2AdUp!R8!DmdLR})+j4seNYJ`^~3Ubs)-swwd0;~Y+ z_=3mYtQ!!P*Sx_H}#jNmCPoo^>jCV>PWLSkU6s5L)ZfY>1#<&yY%uKmC>PV_T({B zO&DmiO0L+@)D`11`}zUqwbss9MnHQqx3@KSnw*a@oJy|Rlps!O2EU7jg&z8?Mnzgt z(QDwl9K3+QR9$H}6BKr+MVDLS8dM#`w*$WUwRu|BXEkwC=Q+iV zk={Xy3#ud4Q1jZ?*8IccS0rMW$OH_NVEEcr^X?*CPWkpG$a8aD)5XWjSo?5-dlhuV zdjo=1B~2j$P>dtpKBGivNw=E_ya$b;tc^Nr8G3GoBr+Y&dElzsXV8|W?D2iA(B1JM zOdZtV0X_8_;hS;U0 z$7?Itf$z1B{4(``INIfKPGglX~j2 zmfztO<%dH)@d_$m+bC75&~-M7{(=K{lVs*bglUINht#Rc7*L*Aq^>fFh;s@(bpEhAXW$ZsAIo8v3pr)GUXVjMjnWg<}Js6)UPI6R2YlMX-? zL}Kxnf9OKb!|Ro3H6xt((MXCMY$Bb>k6XUlVNH&E||yH7F-FG*qqq zB6tFX;?B*9@oAs2S;A;hv_~xQ&m!4i9?@mvD}&YjGlGUNHHU?Y9=nu z^oIIx@Fsp6I{|~LT)3sYqi)CF53tk{Rs4)Z*F7)~E!dx+fyv}Ivn8CAz6 zE!N%KX)@U>my61$yOm>bV}<$}AQ2h*U*!QZ=+i9n%YuMWX_ouy2%UX`X?;@vi@P^z zC-9|r6=F}&3O$@HeL;l22Xo}FdxK(iY1jaMm;NCS1iJ(SX^v-f+~f)Dq)|L(?MVDM zk-bJ}(0B-<8A@$MuIz-UZ|<0$NPNXt0?3@H zc3Tfb7SMaNgYVIv0oN`Szh)_i39U&=T7G3QkGGFv)sjGBz3h?Wo@~)#t zwm;Ki?7D=*1SF=|*@63++OO`ynMQT*4LrN;l~9vE zz1wUUoMgthU|G0wDWl_sn+~(J?7}T-JQKAQcjAsk-;zT|8c>`WNVSI;6S=UUR#E?wS+pJt0@L6F`yrejI1~f zU&DBXk+hXblx?smlPn}e*?fWEhJw{sF=|;<0Lcf!U`5ogH$qirQ=K(XUX1<1JxR~4 zUW25OyrxgS2^W^Fn?XY}SxWW;A!)eY#AFNe5L^NDL_3#Y6CImN=~j>&K%?`)$=g{! ze4!Z6(`-i7SJrOnll=UtZJ*kN)wu`GY-@`f#-iwBuOKNugv{GOBD%%IwO0TzL1DWA zE1&_;i;Yrv{d|2ue-4_bO?jgCjSeXaq|GwW=BSMngu7tslR1&QY+rO%@#M7(p~nN0 zyp|an1Yd<%DPAY6T&ZB7t`xy~2s+*hxB-(NTzZB?yjt=d0!+GN%J$!QRE@-eUgS=j zrjk+oSd$pq-|T$kO=VAFh(R!O;;`ciA_cP78wC*fXi~mP3nLs-m;}SR`l~IyZ0wdp zo{;khUUU}+Sl5h92YvR;>yMDw)ISWw@>oWHH{)=kxdMfG@}#B?drfWOuRV1djqqoc z>%0mEbQ5_4m}N6tZ|jYoR_9x)bkaArnW#eUChTBE@<4&al2sfoVGj3(Os8-yiX(~v zf2jhczq>Lj@F`aCMpw(q$83TQS#d?&!K$Z*oY%eO)i!<6P}m4-3__K1unkqLyB+~$ z$>J^MxB_Xc{2wO5J3O!0EUDZS^k>>eKZWQkEIx7wA|6?eixpyA$cBA$kLSAlwO1wkj$ zgG%`fe74!dBc6dhK?jK%D}9CYD|iU0Ft`VQvCDr19(;g z=9KcQ^NM(++}UHUnnlg*iYV$;HVT_r#Wtn}%{vuI#ai)Y3dEZc^^8f)26eRt+wdm- zAh@)9axwNIh|ts{slm1GVw(tCK9)OlJAb#M0V6!#^-PwdkG{PtVuuTY^gMJ~swv*T-8o>!puPj`w14&ic>gs=d#MsIJ5wXoM zRVo35UhL{$o8s&VwwIy}&%#Md-IOMXucEy#b)iwPD*Nt#A_RAa(fm2WOE6nC@)xYX5N&8{cKtJ z1)T=!y@Mj6c0}C_FrT5krtn$cOrXubMJY*s6PFLU^(Nfet_x#sve}cw&l1y&TgNK? zMjTtu&RDqR-@sXQqOP5!{?;q!>0nwnIZ-({DDO0MvdVm4$(>@6&Fz8i~zLykFTA1L1yv-q9nIIG z6``D0b#Vth=|bl>D0cw#<|gB;3qIU73d z%iRtsS==_^gccOueyCBFdhaDexE1vOtB;Yn^JUmiN?40mpTnWEtgCVb)pi=|u>x!3 z>gGxtc<(|#E~rrv2u)M%z~FuI|N4AN(l#8C^p-BP0^WibzN|@ht2v$*;v}80N}uLr zqc+O=!-uEy95e{R85R5V$e?6b6luT6N#Tv+On7lfTn{K`y zgA8!s{DUAO^*;e`@P3J|&QQu6I&>Y!EV?StOzQ+|podQE zkA?hEB2k!q$T&j@a|>8g^F{mjaYs_3qykpxFxdYuQJbI{n=yD5I}@!80a56}^haCd z(S0o1kL2iT8cGts8Zenc^i~%>B7sXZvzA;m(P&P_`q@H-FD<;JIS?}ooYw^ zIn3KURFjq}GAEUk&tKt-z?Cbx@lmPs7JX3aa1EyWoA8d>%Klo%Wyj2bVoSqR>=DUW zGglT1<>$i}Kokcbet%trXU#}CyY1=^cwZzwJebFk0h)u5S>}~rwxw>np3P?7LG(y9 zMhg8?0+kM)u;0FMkdTbDe!_DC^wcelxap7H)Jh2$BP?gc-0qkjmG~$Xl7^qc)3$we zQ47Rz+58gZoC0T*r!XiaR!%WeQu{cpHNl|6XziqgB5|r4T_ow?Y^0!^y@@i#4IM3f zKc|!^#+Us`V+-Fsvz|^SW>*2h*qKC}m+2RNUoCIe5-l~u7*PUb(p4N*Et2WGRAjJ{ z;EJctQb0L!Rl_1uwyQRaz|umF5(L$d%=fbL7y?8cx#V&L$*m3!G>_1_3!ytIXXVtB zrQb?lMGthgq>o2Et}D^(uE})J@tFS>c@+E!;H_z&JPFT<2A;)(13Y?(2>MA5+nk%M z7>JYu{@X7Hq)EZNl~>bC8Ds<(vD#B{q2m73>bI4FC$!^1-jlx!ArlMM>v}E^FZ7)E*Kg7htl z0yznn1r$PkR*~M7mCr$dApzE1DL5T>s)28N3{iRL(%(0~oIS{i5`WImx#D*VF%KT5 z(Fdz-doHw(eGEQ0k`nA3_ zuRhu&V)Pg(ZI}f7sG}cm#I~o-psw^H#NP6xyVkFrL>Xy7LffpGJWfbE^9=OQn_a`o zBqKe7@u$ubR40nZdf}&aV05WR#3k|@;7X2=b0s^qjEe0^TPbLMpCT}eQHQQjo4}$5__2!-SAQcz z>g{aLfaTg=X+LVT-FP)k9DhjKb5tg{>P-9^t zy=t@DRkoUP2)QC0Wsh1@iL9MhZ4$AoXPEx>A0Bca5vdBj9VwPFA!Be{X6-2uOwc|5 zXC(m~@SR}f_`fi?OI&EeJvA^m!h&xnmY{^Xt+Dp}2q%TI>YZ=-t~w%$iD6ZQ3zZ$n zA3v2iJ~^7eUQ10zej?>mbjK8sL>4$w#uadL<&c;n^|&qQhM^Xx06E}*6S?Wsd)U+q zno`4XH{|tNMolL0-CYh$814Pa(myzn43AsibjX$X3!Sy51$(<-q%m{G5^I&;=XDj+ z)(TjK5;ag4Jo^Ee?#UFC2w@-1ZgO2EGk3sb1+sm!MfLc#5UR|g6$#XiVdZxsCB4PI zS5aN6&M4k)caqA^*bl(BhneeH`^6h{MQQjl6M&E|-(=L|*=Om^Ri~WhNOSHq*QMHj z>8v8<6^Zr|F&~-c&3tgFrQ*NwGY}Ky@%&B$_O>dL(MI;Abwl%dsKz8QBGt4{_*v3Fj%?vOV`Djm_><^(GRq3IyA2Fmm zK*NPp%+tPFd9!3-RkQ&Eg}5e$5BB(@lN%z{8U+R4+RDg1>G zrB#&$r~!g6Xhid15ARy#-aIzs?742s+sN#tE_r=MEb1~N#~wN3*eKcx<*L5nk(J^- zVJm2mi7Zr&#)WS&&7g;YoQdP9nVle4FEATLNQDJ%)1@-*ytMjZQp`MHrw1@^UIsT%}vq2Z&j-!!=f z1QzIV3S5N6%gM;@U<~T%#Pse0fFlg8bCMC*nTp2_VY) zFpYR(@6i#!C-0DNX0}8XMbK;&QLSaZ>bsfFwsmsIF+B*8SJ)#MmjY8it*Z{=*B2n*t{#3N>Z6u_~kAk5>y&)KT40L)yNdXM#&DvaFXKV`O)xx4L!R~ z4ArCvuUT4F{Zv{$jO!H?c-4Oqt%gPmO|UQN2%-!996Tij?~?7epYIoo)9+1Bj?p!5 z7S3*Yt6YNK*&q(nU^1az4kKSFlP2j-o~q7

rZTdh<|hHCsk+1bFs^W04HT+BzM5lcQ$b2h#$mj#qcZ#T+=Q1I~$-uh5LQ7*3UcRjy)ap&bZXa)j zp~g+V#!mxAO*Z?P&K|xuwdTlx^L^MA@A?Sme&ZsYMf`<3f(`{l2~>4Sl#&)mEUmd>!g^_OdIr z@Dj$N9r4-&j2v;(!B_FJsDRG{dy%s;T;c$Sj%#{Z|4;kIq0hOGJd=>R}w zVaYEm9^yO3lY358yNOpSR;B$8m@JE!vg3EJAS{-;fba<{{w!KfrSFES|9J)CS?81+P-a^#%pO;+V`t6ICx%4+V|= zgkp35H;k;Z-mVWHigjN=!fOzcVvIKAd4GQSkq|yWO(m4LW^ggQzW%&lZtmgT8L&{n z$a+-%LL-Ba5?FR83L`ybd-|NYP#JA4SJcXvBWD3x3gGB#yq5-S{|t!d zPg#Y!{CHRwSoEc8_{oL2HwvR?Q3HRc%WZvXzb)5A_NSZ+F%yh!T#qp3dwS`$9^Vp6xCTq-h6SMc{1>oZpYH5otIrs9-P zqhaQ;CDfz=Y-Nx-p;S!w$69CSK*i_Nh5T%wAIqcsa+Qa6uZ_wu4%rsZmESeDjki}s zBbf25)g_Mk*FOZG2$1N7bMZzJ_tyjacq38Vy1c$+_IZ={Y1QJ|pM0L?Na))^74AaH{0_bm*j8VnhK<%`I1(3+#pubk@2!0ju`OJO{&PJyKfCmxWn1;4dLY7n1x(5mZ_t zYz^M|oxezCcm>*aH+4-zTXXSDD^_DfoDE(0P(=~&ofAfKX-LZa*5qHAb)#a%@Hh-u z4eUSz>*T0p@IJqo9Oxx_DuDgjHUf%w;F`x9c`^w4k%rOQoR&KIT9cdgvT8h3BewSI zRBGABUX??FlND{;b050KZ-6Z#SeJkRXR8!FsTvzbcO63KS{h7hQTTZj-HW=VSi8-R z8HDE6T4MKsnUqoG#gmJ`o&3I69C0Pl(l`g4w(Bmom4pWt+W`MR0KmAy9UYCYJs~_S z?{iu85p{3jL-0(n=VK`OEFo@N3?_HDjGTliDZyd(H5lEoqxy zWJXLK`svA!pBPIfdPw7;_x#ColXBLfw`qQ0D@WGKc=C{G#NJm^i4+|=bwGA8v4 zhtN-6We)2()8?rcU1N0bHah;jfvUP^XlpUNHW81khIE`J;DQdmlZW?}&Hb{uoh zM~>?9L)b#&f2qt2rx!mN+TNn@98zjTCTu(eCrP|^IFg%)Sxc$Sj+AUfK{Z{K zeBLuq!5d*jdwaU2#>4T&qd5F(-LWOCYaKk7e=R@JrlxT{IbBlw%SZDPj{WmbGXSE$ zK;j!k)MJvZ5GOCv%UqD+<5FlPyfRW9y{%Q4t+MUfx{_)dzFomN<4i}ta1=$&5umjq zSLCp!s?YU_53rn$2jdq(F8LTKeIpK+<77MZ?7(hL;ZqU^w{qFFX!Ij+1$o6`GJirl zJ@>-sw?O(EpL=wT$;9}!xN$q`A3TPdiz%uY(_EqCpl$8)?ItUL4{*6}_RwdSjc?t=(8(MQpuyvJsoa5x{3-c#C zGa=5K{AI55;=y*FCy%;y4$g@?NBD(hqox5ufF){uiuQh1){bv2qq_{bYpY;d>ktL= z;d?EWsYtnb8Q$J_SpU+mUY384r&#<2)a^ZT{EeJo-YOj^;4^CLoldQd{Ee!5oH|+k+-$dtdja}8bp5u+_UKC(uUv0ke6Zz!K4SHync?!jf3`*Q0rmvGW+b2s=|MR6i?uk@+IF-8co|oCFa9 zlQG(&$m`YBo{5T6zWk#grXenDb@qXVKWdeeUKXVPY4I5^BzRX!fb+6$wX#KpN8#K9;uwK@Di` z_6SqKs$Y62cuSSqu_yF2mxJ{q*FGlsJAnyK+_(d)X7|Kb$<^sO_rDH{>B#F9(fVn+ za*G{*vM8qH7R~7_ikIV65#_&Trm27X84I+4ZIi@sCDoQ=p3+@q+IVH0yG{f$kp`VH zV;Xmfb%c&(rjj6cGV4TC%vV{f3 ziRK<0Cf)0XxAt(^67G7#&3I|_9A8+>fZ+3g0Yj&TT*!7=fvl_TIu7e?TO{a-x*k_` z(MAspR*PQl9&qPk|B**}Nza&zNr{oQ)MfcfRVbkQv*`9b1r5GeOOf&VDZ=C*{p;%E zA>H^HO;&mwToa(l%y!I2g+>TiARg@2}a}1c@*FJ|zUyi&s%>BERP8S&D0yz zsZ!zsJjvm{x^wXIY;a|WsG73>5}tIHwO6qiU*1S~k~9F<2BT5+ZjrDC00h~2Dt_HD z%eVHglJR|~R_Y+iuaF6A#{W1G%+xhg^ATUR#TX_tBBXnIimK{LL^wRA;gbJMxhe9| z^5KQ0D1>*rlwo^)+7LE}cCzD!?VS6c_<)Z7*pPV zWqdOD<_vUVDrr=;h_w##7R8R?@IU5;{fylwSJWsopQ;s>I!;-y(@_ieT^+-`5k2Wd zOw9qnh}j>y zJ6B1@s}pPA{lo_2;_{x;)?pX?g`YSSJWIC0syEw-4oNtY3tl5xyFJ4Q$nHvmDFy2= za0#g@MgF%H?01fqC<^q@B4~6yGGzW?3@H)vY(F%Dj(f7HYQ)OI@Q)Y*jKi#<%zgWn zslbpYOnDIqUY(1Pdfqn(#IAJ_#3kPZb}H-Z)Mo~J|8g#M6phLSZ4{&EvkG1A)#&{$Pnvio2+dB( zFy>4y-k+~we-Cv|AEV?YChaHg zT*{nKFqawc7n;t{h0pZgLRSaOd-}yoz?b8S6*7B5UZHM6S#RvWh}tME{5;l7+=xam z;KiFn{W*6U_IniVT)MJDINST;nP!c?(dh3u`w|jGo4$L3Okt&ifdx_gkJ?%w(cA>) zHeidY^+Kx;QQz9tbF51woR+|%H!rGG;0PPlmKY6Nx<#A~pBF~Kt$yas{m-6}CYE}U zH31YLY)}5co9oDGQ$x6G0~Fevva%2a`+SY&7&ZHiTEva;1UG&h@U zDeEWajrp1=O9>H$bYC_2dbCy^AojP+Bkh5~QG>&`(e-V_`H5DnAOGqo=+_3RVAB0F zqc_0`1bqvevCHBe#Ja(^GfgAXZu_Z zfM#LOhhG3P{)8}}!L5PPLvACpc4f3s~k*JF=&MW6oknl!?`Q0NTvZ=Y@L6ucLL@-ml0Ev*JwSD#jX7>(nQVh zBhdzcejtuW>dG}F8W9&L>1<_wq2xgQ9y814eb$QFX$p1A-8RI_A(Sny&}CvqN}(zP z>ouIsfN`q+2F^lJrKl}14Izcgd)!O8G}`UJ?(Xfd)*Cn;$ya8-z?pcB1H<^XRL^Adv@OA8SFSoG2*DAP909k zU|Rt8gt`A-`i`^MMo5DLENC0uDt?*!AkG-uyeT7=*@SrvLMzd5K@HpnI5=^w@wB3o zruw65*vb%U!e2SoqqdFdOWFz}o>WViT5WZ?Z@Mt#&1h#See=TtN_(2?@leyez6Z*5 zzh5%p3$4WLWJi$NJ$qSmmskS5&4FH1yE20jvc0FrW8)+u$upTt{Ws?N^=p}i15@d# zG4OT}!$fRio=iqF?~0@o2re`J~In&c#n-qrHT8P zgv_8%P{x+8sv&#;0@e&vK@^gEyVgrzIUwkz3=i-|)8A3W995W7cj`|MhlbF8>!2oz zdMS(Okd?n~I1zcoUhX<)2(_ctF)cud=PJ1M&~fi;0Hk~J>Bjl?_Nl!bqhlTndrQ+{ z$k&Q-zq=6l`I+&<}D zQ>P`=;wu*N6v{Tl^n1zmq3|Y1< zP?EDT^F?D($G9n*wfqej!dsowR9=!3mnJD7U&(Xb)QE-2pM4#X^{iN**~bGtW>V*n zj#tqt9=8YiG^M=(HzlqIu&|vPzgl(BLdJV!z#fCRI#*L;>7?YZrl_K_Z#hYSDw9ZDZKu3T$dd;;`{RD?88`amv>XqJk8Q#u-3F9 z>ju5YAq81oP}%v0%iQQJ*%=$-yzCcD_lJS?P&+fayb5hu`&<5`l)nMZCHc6GTs)HJ zz-)vgfBpqdfds4LTdt8etzT?vm_uxLie*WKI%hOar#g-e_B_w4mRi_>-sr<;-0oX{H{!Kjw-tZ3#v@oz#3`U*Q}-FnAi><3%XyasS;&c|Gstncb2l7u1ocAcriC6W7M=$Gq}(S zL4D8Kuf;!hk$wa~R>x*Y95kMj*!#q{RxYLcxOjd6-~-a@KB$lnDP^%9cNlw`L6lrb zMyt0tnh|#kjTBo5J-2tr=w?1OOI2!FBo=(>8KoWHhb;xFwbX4H<5<%f^Yj~ggly8d zyj>91sZnxu$b&b6iEzE?|5weS?>c&^T==YLR>3TXCKr+u>2+~lGttu?f()?=2l|wo zrn*beg?#*~gp+Y_vaph6O&PMBL!fcH2y`F)3zfl?4y^;HBhd-h>U@voaFxzW*~RLZ z=3=P6zK%U3+NGN1C zK?R=C%W~m19X(XE8)XX&0BOo4QHO*m6mC^s+FmAmtn%w}m{W@zCYX!_33D_muPrL4 z$?D)#Vn&6Ys_=2fVHF{9mD!Eo#*R|E(2x?UNCIqmqF_L6hrPivjHOod6G9Es%zpCP zwhw3Qk4lU^7w0s&#|*;5N97QaYUeiTB@P5zdQ`vX)#Y4+nIDIKvBRy~s`eYMLIXF> zq*5URLE%MNnf~%2-3}6pKzSZ)++xr=7g7+{_n?50?UpWYpUH=Xx^4Q*DowYC{L};KJ2t91dxs4cs%n+L^-q zWZDvXHvX9?F+q`#ZGR=bxA4TlJzyZn*fHb{I6u^|#ps3sL~AqA$BsUgL$z?r*TLMT z{{L%~m+<8GE-ilm+qB-H^FX;t@@+5ZzNy6wbe$VS+4X(aTY`GXwyOh$b=N=@+jt)r zMfD^N`o1MT!*P;$oJ_){FpUC8Y)FeJnYP*tV%AM^pjiVn{8-P z;)%#zWe}OR49b=2LLTZLl@^KlLQ74fgJ@N5Ae%7M2RWy*nFoh;5{M9yB+MLpXCmp8 zF2LN&G9&g|%pCA9xfey~7mq;jf5srI>3=-FUSE* za4SN#Hv{9HpR*Fc>F;-dT{iy0oZ#KX>N)Sau0#|Qn>=)v?%M+iSj}fsXb2`ThecbW zeJtLEE|%wft7fqWiN@xqarK~>EJFwb#5Afw3oN8R&xgkf;utKz7c@I3+_BOWO{S1_z`*4t zc%ykyRC0SHdaSy-7=V&CuWRPD_MImU6gY(;gf}}=fXmBcnjU2=f5ulEPUHN1iY?K{ zSqi7*T`wB@;nAvi6om#%C4VMaVhdK*pDa}X4ak|4FRgvme-#!E?7kBbhAxVGB`m8o zb6D>y47+uU@88|j*alb}^Up$d@}22gLg*a7L9rI(Q6{RB#|2t-cs#A0dX(X(vwJPt z11}6FBmU+Fa*L)sU^NigSw_Au`QFb7-CF#8R=13Iu8ErX$EKr4LCx7eblCd2&CEZ6 zH94}X$giHUhP13>&Z+uq)`C^FRbn@^wkjUv{bg6#b|CAL=GwB%iwiz!!_vBN(V8@C zp2?!0mrD~R9C#_MqpnfOsB-HONE~KJWF)ZWZXIq6aW@USyu4&wQ6^~_e=HIfd08pj@{+yeIq zq6J+VNsP(7eF#6JKqb8XN7X>hWG84;TvMJ8iUl?=!xrN@U2Ij10$MikdZth`Y>j0& zI@f-&#sCM>>-a_7C?o8?&$F*%QmJX!mTGost&dNz_9OLq5)5xFqsdr{y+$1I`rlLJ zXDpjJF?xF=Pn|V|cy!`)RTho^?#Bx4K+J6HXe_KGzlbe>o`>oho9&J4{mkM1z}Pyu z;vD33u~F@TD37GiEzMgR6YLr}9@j~M+CB@h&}T)7^_Bbk)pGv`Lj0gVt;=|%&(z23 zG2sn>Z^U#owXJ)fGMN~G#{xg(6M*CiwOEM6*{&@I8cn^GqCVbZxIpO^(Xe`w{KtPk zntJCEdOR92|G3|lUc3Y+#@>f(WIasK%_q?AV$hGJ5t_Y&_JejiV&_^Q<06p@2zY){Ugf0nHAk>XB%ETUT6O^mWaQ_|~5}HF#DMApD zL9^2imgW8|+&_M2yS~$Dm__!Ync(EB%M*b(AAIQ&5#Id{Cd3!(bd*aHVitvTc^Rsg!)z}ggEmh5M3gRbt=z81A zR)ZHuL|YP}Z1%r~B3pv-RM%w;Ab*Kn)xV*Oo?snLl z?)9jPVR1n9JL`*w^Dx-#4+C?h<)j~`nkj}VCU$2*bc+Cbmb^Jkoky2ciklLBx<0Du zS|7-4j_4wxcG@}Xp*75nb;$!L#g-y9g4rYcs-CToIOd?An7x)&cHKWif+PysDZzoNXZ1v{=wL!r&oK+oH}3&ObYH^{vQS zf%x*cCBXW$NEVfO`#xa8enGYnC9UXti~&NajdL8gZ(JclYz)6b$jcEuYF5$PYQS6O1y016xom8(grNs%QkNI;qQ!TiT)A`}g-b)>+{EA}FE~Wc($(VB;c_7U%kiAk3uRk|c0l zXJs@i#w&|%8GL*bx`zYLn1tmEqWSY_HmrKkd9NjUcLjdn78AmPzM))$#e?%&K99Q(!{ zWbyfZTgo$ixW8KPD%+1o3p~xc7L$=`qTueg73OXz$}JjlHiP=nO6E`%9idOuUclIS zNh=kjNeSt3cTHby@;xB)D1^3E2CZsWR}qV)9^yrBM{&n19KMJo4WSDj-YB{96-CX} z*xBt960Pwv&;L5%j$Ae)3a3_X&D#Eo*ey;qJfyVm$j$9SV=?r6B6xE{yx9C*E9H<% zb5Ewx->uR4d~1?Hj2l#4>=lCY5%P~n-H+Q@jp-j^FFLVRV#q!Ee=sQjQ|EoIbrgw0 zMvI7B(2;y`Ne(p&Y421%H@Q?{L_{i0vbpHr+X+KZo?`s3n+*Nd!LvXI{n2&XOD2(4 zNNE5>vi}qEv7bR4qQ935)^8HbCTL5+FwX zNmM^3zTve@AJ>J^Q^El;Az#C{ZQo7-9uWEHb_#os_uVW16lWcvX2rs>V^sHBpK#Z6oH9KN%>9zM#Q*A43h!h#I6fnZs z!IYViLozZb*6k$i$d6&mY%cHAF@-%X^@2pimjPiTOI_Sbo_721+S0BWi&Pnb1fxPb zFis}C90M5Z$v!-)IeW7Td#ofT1%Z~Iy{~yEqkoqQD=LwFf=d)3S$W=bNs?F(ocY?h z?pblL7vVnF{BtOdBxcZ#+mZhu87bE)>An={NqK)oz79(XHNu_|efdIB_K%aqnu;Ia zUfd&7iEmV{e1wreqc zV>|r*^1}+lrG>!#flE!17eDDF3|;xeZCjUw;sI98PB2Dn(S^gkbD*II@_TW?X8_FUPy{i+|8Qu^E>QtPGx-FLVCL!W+}5`R{oA`(B0&RvUhaD8IIN{o_X;s)HB^kDKFi4O*>GC_n4z7E3f^FxlHZ!17?({rAa_u?8>?E6XefgOIsw`fJ zkSu{yzPiyFTH2we>u@VMW=b7^UACh|FC8LbKv7t{TfM_5a()0Wf3xJWr^X4tnEJzTH5>BwO*w(5ULV0U))wM9lU?%4eFJ8CS=aJNznLvBmarH zRh}$`Rm{%9%#Nq9frhGOcx+WM^Pw+a6A2I_QJnZ;rIL2L-@0sa1H_2-)Y}|4wM%>o zM9ada=v#h5aMhG{-YMEPaZo{Ig?LFaT^-qAE+sK(Ud9?f=blCdtj(lLbmra1XeQ|N zkIHhzy+Lu+Rfi<1z^DvucwHiw6`Zh`NzhuhTQZOshQJul{vp}~A6DLEVZhW*hwRzrJM zY9g5^N!!GSlhrN@29dbk7DLSlU^C16vJQWV?ZEdDyspAS9lKKr`xr@n-{|wdmsUgU z_j4`g_(~EZGG74PQscv85V~34;J1mAW}H*IG#%B$!h@O zE}%`Zc)R*3L0_7pq+G38|LR};H>iKO^b7jH)gHvsP(ri7#$v_~6Hmwbiy!AJiQ5}W z76BiFG2Nb<$j4976{>1vDkL5kUwWN=0tUk&iO2RnZCe96&AIXXYF)h=`fv#{8U&b~ zY1^4ULJ2uQ|A47T-D!q+#B)Ujxh!yw66X}|T@jzxGv@9{gp5FPFUWXiPP^d@+1n%M zwTKD@0u$?ZHoLG9?(hnMP`-^OuUKXT3l;5?no^H@eO7>Dd1#u|^` zk%BW_kM!$4*r;%A$D0Y(kifLpq~&oV@@j7iWNSAtP8>ay)fupjA!Xk4)Vi}YpLR@C zYW8TUaO?GPN|_|Z<&WpA(tdrVMC6U?njYNaCS+w--)G$mbw}4{53viMU2jMH_ITdo zs8)k-Uz?i378cTdo!-<$yT|;Ys4`fBk3ByZev0Ir+wu?kFwT?dt`xwoHVyNCL=coS zHfSdCYrUT4wy-Ce1pV)zR=)L%w=3nYre*wciR4C->`b5+LQY>E_K*|-=*P$7OPKzv zh9EaVLd2ICk#y)T8P2%ZVq-^6 z=ijENrZh zfi_~a{ZOm-ba1sDzz}JURub&kGv}62b_+!$uwuJRuar6qophCAj?$!;duHJ>Thh8a ztXE9Y?z~#W=~z+Q`|J|!fc;CgtRBB(WAZF(zUE|OZeCD$pIa}AF3Y6MTud@H)<1%j zr=(n=aWXQ4%uYy##)zff+e20?AN1IN&wM24P;l+19UC9rP*RPeutOpUWoxOjGK=Y6 z60Sa7!dmVsZE2swu_!+q>_qf_h;)ZE^BEXi56Ir1aDMKgNs>dtxaofc;v$WnUn;1I{Xp$nLWUL2`T!pC za3GaftM>|}IlytbAzAR%JGi%OB5T9$-Th<>N|8!o_q3Fmsl!VFzZu+p*oYq>AML(X zaV4?QT&+#Bw8J>2mzbaX#<>FgCkURs1=4HOUhr{6E`Nk~yY(2Q8V^K+ zArQ48y_-HJS(L_7s@e;TrW4gj!*Nqx1v=(>G0N7Vene}h$xP? z+GvB%nAQjztTj>VsKQv$X9J`wP;an+A6CBb53+}(41+8#_@o^qNLXpfQ#UHxE_|ug zqitkiV#&tHB~;bKS`@He_mKh0GjHatxU6~U>mf>w90}r!f8emK;LT0&i713>_DK74 z#Qi6o!nAq&QTfno+r)@tu4GHi)`E}5DF6z(QptCmksm+=S^bUgmlm&q2u)FCV0j8L z6M0b*1O*7N_>_KX!wI`dvMq1e$)QAZ7ip$7s#I6K`j_jc@Uf(O<(HgK$_if!uY6IZ zS;?sX$WP&s$^EAgTg7XA5OYW^K9dyZ(%fu=H}6Mql1c$At=h-330E%Yv_51HA5_xq z5Bw_LN)O8i#3Sp2sZt!kcjmUc+C5&Wh_EzoU0X_t(n6+me3jZb(H<^L!znb;EmT`E zD_>OcRO`zgfKKfB=`+r)`SG$`Zvz#zrJ{Wr;J~Y?Fd45;ypP=9ELovL988w4nMI(k zfwOoBRSEL#X@FOWfqBo*W|guhj*=ZmIrOwx(e318D&PtGtdC0fWf?n5=A0nRgvQCK z19xuOtoZ|?K_%?m5sYBT#={>b_`ZyrWus`>0|aojC+qxpdP|ESNLE>946$@LdIa^V40vpX!d4I-LV{=p$A@rQOuxW=o@hVTx1W8 zJi&xR59%Wx${eg!?$30;KHDw-)etRLda+w|GE8QPl0*2gI_?-i4)M`Nq3RFr1nt<< zmb+H|V%yxW2))~s|4GiT9g+xnAUqw#ig(C!0pSF#kp_UFu@;OfyvMq^h^`Obd{Nvb z+B5ykm7?7yr2R3bc-&l<5Ef#*w5_?A>Jc~7h;^PS)7n>?B)B&ub}qC(pA!!&>HdC7(@+*cy{&B{CH($xnuB`ArF94l{G z%eFT!M=!j!Il^4$%MSM%)WR@kwt?-cXfP{o7HV>n&Gvhn|B(=|*F-@FRL3QEr*5<|2tym*LEEpNE|&~D3&LRX8)04wbMoxr)d7Fp#{^TetS@Yc9GV3-1AYm#sQ zxIh)>hWW85!%fn~FB$?u^@wF0Y-KuVxwRg?1#=gv) zqySBQ^Qq1m^)3rmQ!3v*p{DN1TJSk>l1reXNN9QFkBz?QSljml%Bbr5oMhv>s*>G4 za|5~ID`kqIb6*WETky;s553J4p z6xpy@A>g|qTlPBS4w%KyD@bArf+F0P?O?D=Eub1Da+babrmcuF2|gU|GldnBGhJ7G zNU0%fEZdM5v#ds?<=^o@Y;Fxg{L2ES;Gwj^CV0@sTxcV=!h;cHML;y_iQ1`?{PM4E z#3c~7#=L(?hvZR_h(ekKgVt39;QjCK*+0)8!~5+lxXka?o;>5&gih%!nOyYAJW{N2 zmVobkcx|f&9|(hkGes^?yRvj`&LA1C%^L#?i7qX~+|?>KV|=oT=k?qCSO(m5#8H8= zg3`P?bzI@lVM>9gA^L`-Jd!7b_`JTJxj>-%^GTpjB>ozzaEhQcwF+I%3`Jev-D_9x z_=8^MZ@%=1g`D#zz}uMXO|0aimfB64nbTBNM9%fJVFk+ZMjSvy2yu=jW`f1S|1i>7 zkS9&{SG!x?c>XE%0<{v7@~z8RvA=crb`xWdv`6NbB4&Md{gOIt%FytGkcyx)u1cr3 zQtkkv#ySRIAsiV^jq;qCBDsHFO=T0bG#*h<4Y+Zn>0Po0HrzL}4=y$0_vUK;32c=< zjkPR&NfQL?A?dWhQ|S-Npy^k#nixWw=@kpQ(6gZ1e*o$Bu4#(mol`0eL4v}r7qI`P*fCVN?H zGP9vIvfQSqjh|NL`{Xbs!+JrO_VvP*B?i!}Dz4}u0K(n9wWs?3CU11RSBAuAaiuX! z`z;%8AtjbH)C1w8u5$n~7+!)5U}^1g9#bd1M^Pl)T=ye*{iOA?jIcQ>HJt>CmzEEL z+ip0VXIphRTC=28Dg5KDevr>Y#@_MW-d!*~5rC_ihv z6M8b3<{U?@=)tmGBLCp)bua5}@-Nzd%@FW0Gp9xY66j>GxB=WwxDl9p&M>TJfvmw^ z+|tH3rN$rkS$vuI-bPs8Xu{2Z+?C#fI0xdb+!M+sQKSb(ucfX72yVVzRE50HNwI&v$zEuCP64y}I~o=}&sq>~nHG{x~BbxRPM5&WL^0$x>n zr*^x08~n;$xtqxM(IYvlnxS7kWgk$5z>He$`~tTBst%|c&l2-d4o5RiBVZ zVd{F`qgMmsur(S=-;&uAM#Y#sY$}Lk7}};l#6cn&>EvB@v| zT$t@oDm~b!fy3gU4C)cWl=G>j74lJ2O|}FQk=< z_Sr9QQ&p_zZ2lB-(}%&QAl(h=*k9&= zj1)_4AA5I$#$L?niB%V66m5&uJK*X^7$B%&%SZ(QCwc+Mie-UxAl4J(zL(mV{sP=( zH0oTmM#=CKTQw4Ig%5e%b}8&s^9>Ob9?^T4ynv>oSx%x&vU_G>^&<|#p!B4a4JaD< zz}uOtPg*YBq`qI}hepcbbStB)k)opgzBn$hZHn;Tn9$X2`!?CdtuzTJX9F z)RSrjotPy2goyL9Rz(D-b`acV@B0CXW8E9Np!wF(6VV1~&-mC0rnS$(SKJdYQg&qQ zy&|^+Y~dRA$6GSq_H}!Y2f&3K=x1eT(v7Pk{A*bcifQ&c=jj1!LteQA8ECHJaZ`v8 z{zJAm%q13;ojo8CwoMR6i5+51a+l-eU~W8D8cZ1x7{peTo}qo~*?wXnIrP6XKvGz7!>Xp3v^~8SlpHOF zE|QK*D}mH1(O~f4c|nXt1&y0H_yU(oK|TdhwA-+fCl^Knr)(3`ce;^n!L?W10}jbP zgbU10Xh^t$w`b9YS+`iA&212;OBFD1t4Qb^AF)tG#j|?Iz5^Vg-GqrDjDmnQ^Y`mm zM5s0k(S1@SqtChYJ~Vls4Ky~ZR(r|u+=dCKDy|aa(k?3iz}9j@!JpWZW8UdR^zd~P z0W8Pvn@rX04=b*Vpj$Un?$Yki)9gC{ld3lE01+(*1|$9BcuZX|EOtd=R+a`sA+3{v zf9gT9L52*}_(2zQ?Qct@6~4|tTFw)z`iLmR?KX>~_jwI(iAuwL?yF_2$3kc(2@IQD zS$cw$>OJN=%5ZRKKZ&Gu8J&11XxDbYgQ5;h3wg)sQeWJp)I)YkynuiVW!570Tc_nk zzmBiTJGKM1du3b(Uq4vNyPz)`*gew68kq>qM&x}o3h~{xEi9tP(0FQ2XD#^?S}b~d z$mB^=6wxaE2l~I%t{FhqER3uTvvn**cReM#phN?wX}&-T5* zjFKm7P=nd#OI$H;;ZnnPSRu02RCS)mFdTR2ztWliiY2po&}O)SsVPzzDrh68j*=A3 zt)xzHMt3^YI6ri;nP5z%>sbfej?DHQ_@hJvQyAWMb>ASXYydzZc=7djb@`Qcga)h3 zyl_Ony!xbdIK(JXv3TUHCd{D@mfRg2n7O^*R`4liM0tYCKTEiX!ik9Gln-G!0>!*48WT2(r{utd|&6fOiS$nVNi*jT}~-K)>^@oyG_$NMD{+~Z=1>x46Cgi$poh+ zb#M1;=oD*RijC{F|1wj!du)r8?j%J3T4~=4sh8GI zW_&`sKf)Je3Ft9R3^sor zL^BfuK!OwR*+=?yAQ{jUqmd=<@2zvnJfmG|Dwuv#5=OQSmg>w)(IKvc^htQ{_;u?>3*r?W zA>RP|V0KVq8i^xz_@5K3$A&;(SPKE6se%I2X&LZ>b0xMN?jg-mj0fG_@Sh%ChQ-%{{wC3}sDg0uPa`Zlb zFVc+NhK~Djt0UYfSXwp?f@mI^`HA1NUFP(I#;gT)g8N~d{gxeHda8Don-!VWsKm*y+gHA60R`MS?1t=y{Lq?zEz|3H*C)hVP7N&bMBcg)z=K; zlAakVq<84l6W}v#Ra!zD4z0*xZAPMm3dE-3&|5{&1S^SN_8v;=Xex;FDf;Hbz%Ip8> z4QY3D<2uQXS2e!gC2FKa(ZbZH*Bk9PKmY8Q$+a4qeL*BC&ODDDL1;8iaUn%kRoJB9 z&0jC0tpv&vm$rd#IO{2L<1`=mIa1el`L zUQ&+c5L<&H207sM8}SeElruyh<{*YB>p4j5 zzip39#nI4iH8gB_gldJ{kav(lHx9GmH}5WVooy;hbY|Ot?LC?tSxm4z5RrgUA=JB4 z%mxW4#dNrfLdwv|<@DKg&@ar=n1je07+w|FQhn`SE%rC1O8qh&LlwTv-n3uSnVLwl7*je=I7M>-L}NLL6T^# zS5LzHX*T_+zQJ3o(m=t(9l6ByrG=^AWnutcj4P9~N~glsP7 zsERndAKti%!RPn}Iw$6Oc3|jq_oOegAe<7+nY+dOw>agU4o4_WYu6>{g#a4#)TJ_I zW5GX5T~tD)^8A2T*Qa+J0NvNI+C_thT$pNUc zf?@g{`T|C^J)p9M;bYRP&$^&7QwvyNq|zR=Nz;L)dgqtfph-)TDyFw=FQQqniwJ|S zQ35j$@VGM)Iat773)3h+(`x9feXrgOhkb> zoD~EZl*g@-AyP%U&OxUSJE4kIJM>M=9ljK@cxQ0*Vn^j}v@gz3I$u8I=+SSbb#KlE z*-*>7YFoVWo>H0)Ug%@P_a~!}yyPeep!8!+CMM!*fd}YE03!6A$BL1M*_eQ`#Ma&V z&o+U=XRgQc;QK`?k7>*h)oGm$cA$_{1jydbqcuT?0%po*fG#u(ZG(+T`okhjYCBvO zZ@{eWD*!gOc6rzl6^Y(T4_n($NHo#b{H_HmyEZ^4jgGTR%Cn5WvlTSPvtnltEP}DGo=m``ls~7fm7-aqBL4I%F;dP=n zPtf2nnwgCW8*)~sc!N<-Z>d7xhRIP4h(H!dmtme9$wdm$MPKBDLlIS15j2{I)= zD~6Ubp@mfw>-f(Jce5MoN7sn*KtXG7xfuVVj7o+Zt{xla{l5LCuN`U!4$k+!-z&+- z`pjwv{)P*)p*`TwW}2O0JC2{ve`{>!4Se0PzLU&!Cgw=36kf*in4z2*n>T-Whvp=X z7P7_z)JuQjw7ta6a)8To#wF2259_;a3!Yb(e)UESQ!i_RvRhXfe z5Q4fRxxslmS2mW*=;@)XFhibRM`~8dAXZdZWA4rdAyN^fkhf_b6D!t(!Nl}KnRjJq zSGa(eI;1?X19R(-m#z z48#oHdw5y${%GP#C8`ciuJM;VRilMiS_?Lj%b}>lSuBEJgeysg+IQRHku~m@3_cCE z_d8peB|eEnuN1vSd|epoVk>ixQp%|e!mXxQPLJ}PST24K^2wby=&>88*~?{?cNOwz zQN7CDB%~iW2@Kvz+x?d|XG;`@e`5`NOHr=^Os|2JkeE|ZHS;@f&0W$Ru-A2Tr4`yo z?`qGmT-^IUmf&t9^}aNSfQdygE<#ScI=$rQO#I(=F1hJ(L~AIJg~xHkE@$&&`OliBpu;0G zR$OdEPtYF-XiD!VU&X#s&v~s<2)-q+8UP-)S$Df~H{Nwbx45kcSNnq&=jL3MG4!Ac zia?Zto|Jxsz*yJqd&K$~H>h|LlUItoV`?KM(Mn`H;xHu6;u}S>wf<6d)HK?92XI!k zn@eNAsGpR1rQOj%E+}>;Xce(Gx`O?6<<&4~`9G+BaBV~^_*&DW7JkWu(t_ue?anl4 zCV$0#j5@$rYuIi8Eds(yxni|?v2ZJ3KqqRMCcPO^sfAwgdnXk$s9k6ckHo_{K~1oK znt^B4KhB!$&4y3a7i%~e50th6h~R4$=#T=HYSagg=`j4l@0l>o9{@9~LX_{M zbI#=)|E#S1Q4cAc(KC<8a=OQwMPm*7NKT16c@sZQ5vG_QT-u(haGb2!Imz0VU_%(q zlU!by>Fu$NP)=>bY&DqR-`ROb8ZWx7l(Cofc>69D;3s838mm)slv^|~?3p=(kT>&Nc?MnW4CKR0pfBX&-x?7`@;D`&g&ZQ==`#hXnT7ZN7^P||_rYW|}> zAAmL+$I%S*D!O+@d{G-1rIGT{IYz7iJ}FMaYS&N!0E3INs)ll5a0gEVpO@k)Pzca4+XBoywui~%2tHR%aq*$5Pb!!gzNJMr8CK427O5(M(3b_ck$OUt z_wtuKx3KbcJ>Bj8N|CCOOuJDz)EEFlb-+R{Ro4cYwnIW5i#SDE0UoaQR$My z#4~(v-+kAm&ARHxXorONVyUX}zg`q$fP+u586%AR@O^42wh5OIYWb<3y;>(8nOJdC ztOcHX@Ox1e8;&s`-C{)$?bfeMPH-<>|FI)TP4}M7%^y~!+80|tsv@iUS(O20yS z`O*0Ix66oub@&l(>57C7fA#h#doAMN^W)gn@ua(6%Ekk>e26+epAJvIt42$Se_K)H z445@$5j0^rSSwl)-Vd*UT9i(GHz6Y{R~#DH-W?@hC42+Ar=(!go^tiD{hr_A6u$Ls zC^a^2L192uNdruURKN2#;7f1zn8jr?!WfvfIvF z)YIO^6#DqdZxsbg`(qXT@kp(f3_%N05$xcLB;0XfB-+#=OH$q--43o>5m{?6n)3z~ zmRq<73B{V=utPK4`#GgRtSZ%I#OK}cqBvV6-ulZ2eg6e*{2)SwudtMc+Uri zy1dn>v(?3ymR_ySiU4&BTENFihD+tV*!{<9Px=@z7<%~hWM*MG#-t9QTMQ~Rm_Tf_ zLMN(40tW+AThwE~-2rfxGF!+7PJVm?#yHl?@TpWC#zm-jw*gmM$Kwl_TSmifm~x1>lMa(6i@R53|EO17TX zwC3*>IRZ0-@1CPzcxlQt!27%M?V&}ZhF(XTPn1;s-elHHStnytsE$>yc5;H2Rcy@r zT`7O(@4|ydkA*&oDbQ|M<1mcr2SseG!GO?KJRT;&_ES`XYxwzHL-Y!6Ib!FXY#KtY zu~9QCN-=;VjfSLhJY5@`T`S3N-#%qbXv5DFmpFTZtMF4v3h}^_G=^C->FplGl(NTy z*7zUHE>#~oC9+;>_^JIPy4%U)8kAQ5UrMfQ+Ah)dRXK>BszaEl=a{`sefsdfB~w1| zZKJe007bbu;qf%k^Hf1TUgu8q6^~UPOMlvo1uExHkmU`#xU$=?ELh zr^1arLtu>6?`2PeDH~Ky%!3nL5a#dcU_ve%N0$I_dJOC# zyXiMi?h&+~92@SGpvVO%vGdLnIMCUcP-IwW3t*Z9+*<&3xgm8fMwZNYlb~R@Ia{gHk8_p^d;#lUt!nSTG@ukEg3R( zlshz;XrGr5355{BB&>jtp7nZ%^Gj`mjjiD70`vU1+FZm0LjuQ;M~CCks74jYM3E+k z{GKz$(J+)P7dcEoCguX}1-jieNQ=x8ap%Wo(URMtT-c251puyZL*51dw8RKnEAnJ! zsE5YW2TY0YhmH->6*Q_FGOYOnbzJuBo2%jch9_8U9(aECj(;)^>;`CG^X08=RUa&@ zA_C?PAw79N4JtS5>-V*d&s|M+6KT{91jxLXUupxrdL&^S)Td~*^Zknwgx!4tC}7>- zjFBXKv})4?^vYuN1_g8E#4zLyt(6(ds@_X#iT2U_S8WRkvccx-O$lUtqstT^ICDM= z?mh$Qg^!ijU2>u{Lp-l)+-4?mlN?js9I;je z$iN%Ju(w_S@C30_h;PAW+!^L97@fSRzyE2fYw|6`s7{Xyq++LoG&nA32xrHo4=DFZ1C?5(X%RrTc%C zHc*X*qN7R#JbDSXsH;hkknk{mxabL4ppRV(>lqY2T~4*^N@jVlPZ}*@{FBfL{B7vL zeG%7Cv5h=wVrk%QuyKAjn0P1=>E8v_qpkpe>s~mtD2@^W@n_;b0W18$)20~&fbQ7A zeYmNCkM?SR$)79AwM{Ftj7Ckm#!nO9uq+A*Ux2+!rhUT;Li2i2)MPZT=8tg9>11b` zBn?4mEFcHs5uZgxeb*;ZD4T?YOfPtgY%{^N0tcQ4*HS1q-G&p^=GfY;^hLMqvV0T zetMr>;N^}bY77?vDu<1GZOO@d!;MMXh7@mT{s5i($PK6*U=dX z15*xlQoCA&9vdMyPX2UMdP!VQ%$f?@hLeW^6MQI3 z`%oM3w5c7PkBL};!X|(RUB}#v+JH@|IA^(g(&A~KplCH8sFLKl48B*265HeYiA5hI@W3AXZh95hj&%X zqY|L~Cl?(vKOp`jH(lI%;B$c?UDC3Cr(#_P5{P>MMM$(CkSKP)-gmwwe*YN3O9KXu zr$~~5!W4AYfkag_L$)XL;OLO;&$U4nD7McXj_@+UNZD{UZ~E=sN%Oc>C%nFryH0n+ zi1MeV+;TG}oN%=#n-4eeoplxFt0hd4GhgT;l_aFS6YM#A6D@#zHY{kIYLUpNQ757)B-~=oJgOEWG%13D&w0;J37E7tVp*yT zU`v&iNmp#L<&|J9UVrW_AHX&*j^y5J7td0xSobVAT=R|<@{yxCZ<#_1pL6@fxbfp% z>#C&L9aWa3v-3L$l^3CC;!$mNGe9)9R!PnANdlW?{ThMt)uIHe7 zf_1W{V4h{sPi8djl(o_8Tn8kQNadi1caLHQfhwG~4&aH9PLu$Y6MSBjJ z?{S#+36qyz#dqZ&uzH}hZMXXJurQ2Yj^4ui4`(mpioc=KBD}~Te?*9UL9w}J`&u(O zhhLR{zWi455;!&e%Ny@jd8Jn(3+#TovJon*MNSams&za4tZ0_DoI`_5=X4zbNy^ExJ$Oi897P(S5 zlkzD$yg>WAfAqJYs%s>x5D z>Y$+WaSeVrVMRxzX`)9%?({|B{J(r!dy}la>0*N>o5W32NTU2-0egy}N@kxQVV4s< zfwkG@`PAcHhR&%0;s@?8>wGp8|lUT+$ZV-wQ z)~mG6D6$zlntxM-tYU^@avS{ms?3DWl+q) z$Vl0AEYu28R?E6lt>_DRr=SC)ABzZof%IamqE4q6x8bL!aFk#&9T0|Y^wm}!P2#nk zX6MtQSU@*_CnaZ%%BfO14lgc!t-2V9n9iYcR!FLoA=oAWJ5&SJ>1*|{;{mKJX(?+x z(MXD_duK@99v&X*@vLHzB>tQ8;LzbK;Xr|5obu;|1mLxGrVFRme+-0XR)i;6gUIx- zT<4AjWEgXgr^r(ls-q=MWEsAq*l$@XKdHDoEWg-JZ(vtJhCn-&Z2687f^z0{gw@F z1~)GoGi~)NdJ!z08=R3o3uV80#1%rzr_#Dt;}rg!+%PKwZ?6-8^JR1!a2dhGV+(;L z@k8-@bT7FWa5$eG&X5vzmfaLIJ@?5rG789Q1^$y?uxZ5BZoVvzT;o@2JcFhW$4O}n zj0vXTKc7REbAY_CZWj)c>FsQS1UBbbavKh8M++L57NL)eWCs!J)`j9`MDZZlH@v`{ zgDQPS_@E*g`&allXBA$@#wj!g7IJ8Hl{rJ=ajQf`&vxdJv-Qt9wBogX^B0#sW6Ycs zycP=ZjQ>13yY6yz%Y&XUR#I^Sn<(1-d{6p==>eg$q_Xb|ew<=@}IhM@HHtAe>Gu7mD6%ypA}8%z zoN&W&woumJA}s#$Cje)`5OgX86kZ(s^fXmd^fR9{a->`XAE-!*G=cQ`3iU8p5)#km z6O>eb1B8$mX0*zqo~St*Qyc2q57@^P0+44kKL>L9!OAMd}(nx31+9DXMSNj->f2kg|Yyd-L z4Ny&u=pJ8HRYdh=_naQo6#IOYT*881tS`q1G~+4qXb#AMhPq6cmv&QsE@y+$dl-6^ z<4%p(>1c$~ziie*YG93PGVZqi3HVf!**JV0bf;aKiI^_A0Z}-O#n{N^@^o3W`vO>Y zH{4|MLyW?F2V^WiYwafkn!j5lHM-R@#gh}#d&1rBOCJ1W%40kIFh;V(6#daK>dPhg zKz#t1q*O}@a|zrnjdhl*5)e2L=F-QQ{pzso-#f4#!eBE1G#F~_phL{6GLdqO`3SLc zSx=a@=`sIe0lTWC%GRGCS~lsrUOKyBbCTJH1=c6TpW-8Z&GS}-^R`2eMIm}T57E4M zlbD>IzpuA=hQ+rXr@i7A1tVQkce5!OPQof{2at5}YnWNb1Ze^oY@)j{*w7ssirV?+ z*$0)pdq3++4n2@y3$N9gP#v@}?~!v7DlI(;*XkqOgA5WF=U&DgUC-IKj*n4!=`#YB z?Z}3tL}2v!hk|d@MO4*T`l@b8Zfvh2)yAY3_YBPxpx%K7#tgty>xW0el;vz3!GIy= zZz-=xqjFnmrdA(*o+=_O5ux1pt0faQuk*YnM2M8ox~wKli^^@EkW*j&Yb`%gTt=SV zptStwoXK~Ykw_E-ZYOgei!knUy+;L^bvuJU{3O-j`)O{{<$;Scqj~+~nf1TNV`5;! zqG~*zv(X73;_%|Fh=jGk&!BDng!k{)$w_~A4$37$vF@zQKihTi^G!<;?Mh{-3?ChR zX7Dhce$2_k@BQ!x#NjKZW2GuQE_<@V#AK2Xxg)~GM1L8|M7i@G!`fzyf;qzf*mx4c zlg+gXWJfkYQrtT49M7lBKpZR!%3RzJIq3+K>kmEs1S8X<`lCOXpQ*qTn0<`H2k)ZG z3!{A^xPk){?V)~BF)D1a;wihgnp$r3%M$OhXjci&)P^`pyY)iOAJk^x1_f)VY5jX#zuI?%~>F2x1GSMU2qllZ)fJ5@J`_=sGt*(Z& zRr;D%y7=~SaB*tv<=SM`&=OVeALCn}w?_DOq%wGoOTke=7X@}!)z%4&U!t~$#~3@l zeyniOSZn*!o5Bycua3P@_z{eM(|rp(#vnElMwEFtsKBF2wl+sU4xOkmlJ9Gkb(X*& z_GsC(qvdiFQ*ud^b|>>xM32}s^A&KKtpZ1`U&u4_PHJl;Cjr{OLWblbknGIXEe|n>1dwI$IR8 zBQY(kG4_}{tte7`-K!LQ$`0l-s7wvE)19S!_-vJY^E?I+l8C5n30n`n6ooo*Wvn;? zfr`3*+@x8pb{`>OP2~tJ&Z1fRC7d4~CKR%-!lx^ME|7Wr22`Bm)iFA5)+wr;(Xyr+ z{;fY__)7(&GcqWBHc{_lb`D5|^ip(g%S&lFYXQki4?Hl+y6@A6m}S;IF2461;1BF0 z`!4E}NL}=%G`GM+lafT;g)QpK6x(Whv zZ?^BwzD0*v&?U2kovZKZ)t2BsZE}i`KWFEzBzFPgAGDiu&E80)28lt<1c?d!s<{X~ zw$i205^K|?Sdn6qY($|V<-0l#m_uXm@{#S}s}qiufjIN(J@@aePiDnCsp_uUi-qC# zavBblL?RZ8Yqf!$rB$5N2{}h=vaj#o)F>gvH?S)cSsJCvXf$^pG@{l&iPx z^x!CbRk3>Trwp7;akfeEfe~g)UHsewYV!;g2dz2DKvGOSs8o&4UNb#@7`A< z0QGBSO6(L)4~F|KC1Fv9$YH~+s}7tu4e;XL*8F?lW#of8#K+m$&O1`aq5LA5*<+*& zDMwQB8}?*@KvX868+Bisio;@s z^vJ8;7WjAYl>Ri{*DWSR!))zD&#qwvwj11vBE=y1(h!=x}9bkIB|ScD<{fjco1y!waIyfhYu zx2d{}ybcGu^I02*|G+v{E);W_USX)?yy|Z<2}?w&h>;~Cv8@$Fm)jgNRaeOUHc0Q{ z0*z{c+U+f`g__F(e`r{F1+M4HNJ5=K?Xl~>#Pai(OlWxdrndX+Tl!XJz%0#OGJ^2tS+~zrR3YBUb=^JA+dxsO(dS4`t2<_f_7^EL7n9|xHB-h9*!Opl z$b6LnGAfgeH~buOpJn@^s(tTFjESr!uB@K(xWE^LOF}V7Uw9-|8(;Ty=1zK7e z-yli*r+2LSsHib1V=Nn5yxuy=`BH)_>pA4XQp5;~OQ^23lXjK)8^^Igozuo!6O0@J z+Z~p4b3DdL*P0!kvFn--{+H1+#uM0q+ zl5b1~G67=zLj#KfA+d?bO0Gxc4neQpnphG!w-t3K=Inc(u0fc^x39`hL)CmlP!OJL z1F8rX>NrV?za4d)9*|?X28Tc)CL3Z|8odY78LaCc6~=lkFp%A_+6$DiAMXHbdXKZ} zTfba!?^s;YR`2ylwVvZcLF&mc<{5M(?;sybp^KHOW0Ke0*|R&#w&t(5R{b=;loNe& z7(}ZnvEj(srT}L_7VL8d`(~43J|6AwA^UyWUCZhW_8(8ALvLWae^m`V!p8{NiVs=j zl;m+sa?zG{Y^$fI|Npj2m(KJOkWnEC-ZCwDb}Yc z&hTS5j69rdKT)&I3>nuHLjM&S&a9zxN(H#V-+v|f9SD{SWgw*;57c!6`$ig(Ni;;Z zd^_n`%h%z>cufxBDc@(;W+^Mn&`WSU+ zQ>ZqQFKD}1AFMfNFjzru8RkpJI8NJ9(NY8PUAIbIBDNC3H!|O^>sW1OH5F>z75Ak_wt&<+*8tg&A1sn<# zk6>K{+<=4!I;W3Elyo3#_h;+7<+791I)dI?3S$QH3oJ${d#GF;3Brv$b!g+kG{8DsL zJ4YUZN9VJdz5eBs5T(M+96?HkyFMxPI?!b-kfGrpG{z!C86->gr^R7hFSz;h-4-Wa$FKY?z0>)L_2Lk(v+am zUW2QbY711bm2Qjmyh%Bojo}fEX>ehW0+*YwH&IUXv z)6G=ev5<1shZ>9B8SDekQEQ^XxHZkn~U$Miy+^TB;w; z&_no-MVN>386^=Cdqyef$V!=pn4A2}wXGXbBLwA`Q(IzgOs6rwlYF;e#M4?+PJD05 zxY6f-@Sg0O`B5JdnvkO30|LB^Kk=!;`T8mN52biPQ6A0fb|^t5KY#`Ct!iPqq6$Wg zkaab#k=6gpD-f9RgBmxpvbpRPdfhwUJoU@V=GX|JMC&RaOCG#heEEp4`g6udlwaQL_f=T zKc0IpGjKzNj!FX$@*6a?e*$Qr=b79 z$w%9pzXfAP#Kq!ziwyRjlVvSbcXTiYD$gehVvEyO1xHUurC{N zEGcIhlbczGwcqFIN;J{*wT<7uAR=c4M_=sV!ib8Sj9vQLo%@aAVWex@wcsYVW)9Sf zZxgK_j(~%6u4yXMfnAz^RKGp)28i0)y$WtbqWU2n-}QvDNBA1}2w$%)v$ZD-eOnXQ zC2x@xqnk%MzI;myyOdaglTt%PWGO8|@(#S!Lwtd{!5SP4XHp)V|3_B^W#O~cXx&sCA? z*k@xZ*1t!EVIkmSIP5)_^Ul9*CtuXeFY!C*KG7r4hgIG?nbaZmXqSSZ375m7Qa68d z?tgU!SDs8+M;RLgo3r5~E2mhIzWo#|0J97F-`DIm)Xjn1Orn$M1AuJ~5+UDKOu);Wn;p?g=i=n@U$j#1IyPrh-L(faD(i2*Qe zh@~RT`o}%Xo~u@XTSfuC3N%h#b5tz1~A?FfS}nQ7UiY{Y91M=)qrNKadLtcnZqBOp}Kr+HQP;1U;dA)4&za zc6nILEr^t3ZLVt((J4&8dP?(>zyST6pB#Be1mufVTl|2zVU+NwWM_5u(p1b8jb+Cg z-NRh;YK!(6%02Q-2Xnn)>+)-BzXZ16T)U zG@f5h&CfLR0~x#naXSRtotr=K`nvk+#)jZ9_6dy74p?q6eQHT+kDD6QTADipVfzz< zREuWced@-DL`AWa2TT^P$=`ZBTqFQ5;rOQ_?CXl$?MagvT&7R26;k9}+ z!I5S99{(<;h7EUEKUoR@aoF6~2=3%^!+TYnd-SBeyQ_r`Cy`MzlmXtBs5rRBHD?U8 zwr0S5Q~=-TA^fED18KTk*+pGbI(^%U;Qy}El&XU!-;VCSEGMm!Thb>%mFA)1oHS$3 zDXAXQI8z}%xpLU~;!G}iB)*&K(s+-p;)iHL$F+Tmh8`~Pv2+dIHi`p;^hCAzv32C| zWIzY)fcWh{tAHAxVgp_45D_xFH_a%qMGgK=3(ABgu@b#GkN_SP(UIp(K?)}~cIO*9 zkk%r+>gfh3ON+!3R?_{z5F+{=p#Aci#=|I-zR)EDBszqrafd8I>kNKoen)7!*Kdsa zB%`bCJ<UsrHRM5iR>YGE(W=@DI_=B+lE9BCp9O2(l^RnwMTo0F9$A=c5+(8f|MvNeiy^46Tro9)DNk>gof*#YY^Wv0II)vEIdY z-QB}cT)5oI0W%&(ddNw2?M-iO@Q~9uUrFzszY~mB2BIX}qEc2bH@vN@R^U*^aF^gu zA|R_!@u#B9bn?c;qV0cm(6U=kXQArp+$z8l)%nh=CazbFV0Q4DOzGVI+JmIev)s2n zx7rBrdyvKY9}_dZGRB#B?!^0CWK?+xcZI$+ZsIB0=aY5%wSjjxwpG_h@Xn)T52@V4 zhu2Hi={w6DmB`*87}M6fNMGCA8Q2-5>(OLKFs=QML2e(V~8R644^E58k^Ov~3R%4u>yv zNFUlxVILNX?2o!FA394hG3`9u*q7~cF0rFe(p0Yk03%9BD6cxza)pLitbdCffF?lk z+7Z00!9!Ps0PF$DflMg6bsUWVv)}60P{l;0co3{wbnWJh1A&Eu=}T0SpUJSt%$^rO z7|zgZ#SIy{B3u5l`W1BK0rTW)VzN(_yGL3t%kfM50`*phfM!KeB|7_I~8)jE4k?h4(TNku?gC$-&pe zaD_cEbBLJ;i5!L|ql2oZk;u0w`XlW5npJo+mUMq&ZcyCw0)UVsmYCRr9biLUV`(bp zm*BH}x3LLaDzV7emF6#Nk&PW5*FbxBu|C~Hu{-( z$a$DYeB;4|2m6t-713d5_6ECHs{S;jbq5(C>?;YR11d^PvOrRu_q1=_3sI*c5RGR5 zqkfaEhydsYvT6)9jFQqK&sM@av;e-hqiM{nS(Z^&?LAW(F|iY6tbU1!XfA+5o5S&a z8^;pNz3Ne(NYN*=sNu--|LA~G>;FiLV&;S<^kjy2zDNXIMQLO;{mW{T5$YwHtzIJc z0@P{0gGK^gAyBFaVQ_nToPf080@HT`$T8ejxN|lxh&`fWo)z;~vuKY85BuekXLWfk zYS;T;+bN**)EMMbFTEfMFN4irPrYIE&UCy|ezMCHVE`9NneK{P3qI-yQKl!TN>%$% z)P)>aw*enpN145i_`fuMiM1VOmh;tjyhbQD%gaB7{ zC!wkl8MhMZ%Yq1)e8OuzL8ei2@Ysatc%Kp)YCa*``8B_@^i~kY7W-MHWGM)k&Byj5 zv5qH2BVG#&wTpVQ?Y6Z%f${mm^T3I%Pz~B`dhP+0f_WZhSKOJTZT(*%1`Vwxm26mn zBUbZf9p!rWH5uz;+z>v3_pU9)AOI)^e19`*??8B9xwVMOidc>-h~YC7#U zLPh7vbEIzN6u)&WP5VNTh)gA8^^h7jcPR z)v6|2z^$WK9o#5H%;hQ7{aqL^0idRi7|We>>em2u(&|cD&%q)9@FNgvN)dYwGwhh1 zL}ywlp5v>Iuka2JCmL+Zb71wYl055B;gY(81X?OLO*SYSs6sOz&>=gy1MWrZ+W=DJ zi9l}X;u%db3odg@NzIfIHXQv1#qKxJjGj#o)NU<&?ly&=bt7V#&v)aRS~FN%bH%=| zkh@@@H-9*HqO7C{&<>}(`4+8Z^1=|QyQK0&%-~dfIxRd-n#N7uLm7s~p{~Ob+BSpw zkxR#@Q=o2)mOM9oX$RUHtDx=bAzz;uvX^xVG*{V48Hq}q6IUAllD1srh*vOIGp@d! zy3O;}xN6HWd1xW`h9!$(9ZI*HOnFqT60&<7NJ$ih0yLtBWKlhl%3`Gx7(%YPU=%Lz zJ4Md-b*>Sv8Rr*c%8aIeHD-rp8r?WzPui7-2aG3^CVDK4(OPpAy^?BR8k!NEA1a>l zF1CbbvaCvpJFrm(a2k)B%Mc&w%HqI+(>Yk!kwV>Z0JM#^*uK?O<5wGMSL^U+UMy%l zvQ3QnCtBK_WXeB~t^JymH?xWn2Qv-zd)m=CFJ>%sGn+EjQhpp6i{k=25elXq+B&&* zHFAUzJb1IkK6G}@x|O7jsMi2)J|ntRqr_^F@yZO}XdA=h=cVTOp%Ns%0ViH)HeB%$ z855ysH@%Da9~}+gHTxwf5D6Kf|CCd~0N$QC;fV6@f^|oL?*N)4|6>$zQ~|@RJMH$c zKxJ@B!$eUUQCGr?i(5Rl8>Xzr>H{KKcG~EK9DgD$HSPgBo?1U3= z(ba8KFeXdZrJWGWH{4zz0x6?VZVqEG-yOzlC{Oh9Mr|mij$=a*cyUY>61;Sb|FW=H z@+PCU-Iu}de%yY>jOlE`BUY!zx}T~GV|0$^Vd}*JY*hzi9XbH_1n0I6n#G#+JN$N| zXDF3X0Sz1SB4>g^fv&#+1iDL)1_l$TNmEM48;kH&0C`j_nBUl~+5^ zrs=teP0uyqESph0nHt!+$Y#s-P)OXPxNTd+n}Ht2kY&0j4nJjwGs^z#ANV&u-A4GiyvOfcbIoXOMU!Z46T_rIo2V$%(f3K9OYZ z!mx|m%pygauy@iT`ff(Ie=hI(z1ZX7fd!33D}V zt=gJCcal}n`% z_N90O(g5MM8d2Zu?n7oC?tng9yph`OVqodrP3f>_;V^2_Wd6qcd1h?(fRz4O<(f0L z2}NnpJL~pdrz4cYUmdC4)7rp>&We}|gP`|B`9dN?^U61`^)8-` zk?y!yHzdHQ{G)bnt<`(GS zMOKkPyI3T-pQHiAeAS%+;-W0oA?PZ_lKf5L=HTFmL~3aQK%o**S_vx_nXKR1*N#?6 zj0OOxRfV40a(N2Ajhc-Eny=S0FcdqL0YCY+)Lro!et5(lju-Ay?vA=eJeNADr5IGclAcXt$T>LIza(#iLC zMF#`7rJoY`UXmTWF`CcbgX51we?!7Pr|objZEqfEOF_<2c`rsg!bH$Kp$?%KHeKi4 zsP?%A)+$vxv9gG=0{Sz0&W%4Dh;mU*Gv@}!HUwMqtJ?=(9zf@Nfl{xnB%PTVoRRRx zB=j2@%ollrY5!+yhfhhC`NtfJ?8%#40KD$gP{WH7=&u1AvS5M^o$3MN-e@38VNHjK z@t9c-0D)T$QN8aab-!$6NgKqEpqPnX2zZz3->~iEK~e&G^+Lm#G5n0vvKj#03 zem)%RS3`~b5>=ekrVd$dxQ0Yt;{SzfBVcw#_!q8L$nIi87>(sMqnSf-H*~t#P!PXT z5$ZemWE@%x(SMYySx+he@v7Z%A8g|V)q6kTq5FwU#DtAzS}+apn5 z9F3%ox?!LD^vA-MlgqZ<>$b+t;G*Wh#@@#0*X|Ql)tASbWQrYOTGz(?iHi9^%+lUJ zuTh1g$X)>jMN}S_gZy=1nfLVDEVW!+mW-dN zRuWveL)+ScPE`*1%J7oDimFX{FBy(-aWyynl+|b8wE}P1w*csu_RiI$vr%RU6u0|Dj2$`fDJ*avtfav_=o!^rJg=$NBM7p*$Dvoku&y6zn zjUt6dpIh*Zy<6wWW4`6RhqW{>`af--y?4H7{}?!d%5peCopTJK6K|q9#S(dwf1*6E z^zE3EJ_IJUWJs_3u7dq`T&5^NK6>k6L|0SW#-3R&c-wHDA4B_Rx^`t?@C~+C6$z_S zdQFl)wdx7m0ac2gsu-m(nu zdAa=<-pdE#sQ!Ov+1(|tg|CqvF&2&CpU1M}X+#HVu$2u6!3d(^57c;?dUtW};*JmqJ*gRAB6L@h#frw)G zM0S7Vi@g;%VdIs&(mNR7wchM#?h}3mG|_5)(6MH;+HAT!Fx{z9%YU z8z2L?h!*42?(WwY(+QU*Q#494F?(m8xPP0-Ab*G)NTR$6k>(Q*JBDfoUXCXt6`h3j zv0r@sKZuQz90)m*SE@nHT|N32(lR4LzdPd2oA-_jk_2(xrSK@WFG*RNK&GOoEAu@{dJ~)oT491$YBbq zk=hRa@SG9y2=(%taNSG_kVtV6Jn_Hj?#A|RIPB)4*~nvku2e2@m!tA%1`eD1u1o|6?lx~d#wL8=hYW%|^k*$M=M`s_$Hz6E&!st9 zXTsQ*1i;|sui*+2f{-D^Quz!+~*uEeuFcB-c^_1i6GXm+I)a z(xIdlL|fk;Bp52K3`#cQjB9%F?nw%Bwlk!NY5=zWTN~vx){M+0sg}zglmwiWrgi^11~Q-L)(a#K6tH`EuhG>G+2; zb^D-;RX-Fgp@KAFyfd-CFoK{9(tExdQVxD3yYEIwL<5qkRp_^WMH%P~9jm>!)M3n3 zy_afA%qYfK%Cwp-Q!5fc6L%Fut)9ccO`Q6wTTyq@)5m|#()(hvh3{;;l;Y#Vfuig@ zA9wlhxFT6eJe=n=vMZZAlS!Ta80t(BtrQ!H8+oaR|Jqt-l4LRAdahAJN~3OSF6Lc*bMpMVMwl)U=0$!={wP-uv!2sMYW7MFErpu*jM_yxbm6v7V>wvWoA8>B0-+TF05vR zkK$_$M8<;>5P|*Np}nm8lN0m1Zb4XznMUi)b)d6vDunv8$)loC&^$pPMnrVBa>>n! z`+zjy)_y?n4=(mq~rgOSf%>c8>H=RI#Apu|SnL(|2RVf^jtHzOum@}~@H9v5Y zi6e=+38p}1r)D-Y4N&?_O@+BMaI;-N@-geo57wVJvRTCfo$Co|i|4++eM-Ho*Nxb6 znzIYN2PK#Q55130@?-VKw8swX0;=ll#8-+oA}Ok6Jl=T1g}^#&sihUei{-Fm@lhFdR6RliG8| zYF?yP+ffBw+r>A-cp$RAw1oM`?F^E$|H+w2=G>ln&u0Eqe7$C!uqZNJ|$DGYl zbiFvCc5D1X%u2_A90T(Su?5*K)?&bPaG^TR9A^|@$0QlQ78LFt~_bR-W7tyo^Tj;re^8G91g~trPto@ zeiU=b!%&rpwW`@zQ<(|TtXi9rjLvwmVbTG?A6sdxt@b;|UB5%Km72Qw@xyr7&Yt)g zNWf4M?CJr|q1@L@PqmS(OZDYCtV^f>cBO{Bz;1Xq zldlrjG9GPFCmn|}IKE4k2+IGZv^^Ap(TLi739^KN`s8i)Q;F1t^KLA7+#gYdWuoWk zec2FYYRq`P?n+Kgy}Q#e*6?Ly1VH$2Hv}i{ z;Da$)Ah?z;0QMcVRpvN&7A-4KCc?pF7&LKCq5qwMPjIyluh zox!061kBgQ38~yLJ9xZ&XW8uf*$pcrMPg4f2c+aP+<@y+ z#2i4U%BEe8 zhozW_PPaY2iu#xrJ9Beequm}2IdCC` zIcR{&J9U5WJTKW?2AK;@(Dce7ah2Kc|7gRzrBE06*Bo|4&G9c)QTUn6V_rJ+xB8Tx z7p$(m5txdcREG4)Hh0Wz8t03ilAotMkm}J#o^nr{?K_K;EI#6^x^jAEDYu0O3ntzA zEl_!$w2=m674bV5j&GxUvMLm{w9=)_=@d}eiAaF5;l_`c1M|Zw?XC~F_`Z5Knhm#- z7+rKk)%XYl6@RTGf5D2U?U_@s(@=+HK0-C}{Rxu`KjiZ%Jn5M@Ps#m#CMh3X4h`JP zHu!1MZg@UnI@y&+vQ@xoL(bcfVw#~1-iK#^l>ctfqY?G4n2FKAZsu7>%Sx)LlnG4k ztHDXfZ9y3}Ck)Pj6>gSVY5sT9lKpU2`KfMn01i90co0=n=(q!8Sk43bh#MJcadT`o zIE&$rp#QWIE^Ul#L91XwZ=!gHh0cwynI&(T(RTFK7ao=k0S-EOBGHb@?dbqqBvc@% zpPko)K;*0ES*YT>6tsO8GS>e-~Gyb+%h?|axjb`c&xH}+EfC=cg;;uDC z`Qj1An%+s~d&4t};#hPXA=zH%*IAI-!{L_IX|%O7Mmud&G%d-Rr7rU|-A7l*&LeU^ zvDOmXGX{89B{})Ugf31&+IZ-#YfPfjjBE(NY5Yoz_^=4nwK-`5~i?SMIy|Ri{u=NpfhT93c zi;SeN`w3*^OSU6s2S07X1!G3ug8-*vXPMbN4_qXJ9GmOK*6xL&Sjnw4HJf=$gN`{~ zq8=lFF5_Wg>fCp8oVhKnhbbLR&%a74)6{aW&@dFBHuCWDp+~Uw!RbIr)bxPMID+F0 zG%g=bm$)cGMHDo9GNTWa?bfI{-&{?4#WCkM^N#QP(h8qQ;_4-H>f8$(Anf0Loe}4z zUC4#s6OEq0Jh{QY@t&WR7lU5}WE~(AqF(oHUV6ZXemJJohqvYKr1=EWh=XG<+xxkP5XLiGCA6FvSW7ApmDHIoK`*OJ$k@PKe1?Mt&ya>`- zF$?xj|FyPinSk0=3Glnw+&j;tQPrWoUtv}9+V_SNR*5~~kCop=|vcsBl7WOk4&^r|0x zD)CsP24N}sA!VZ6(b;5#QiL8t2yA;WJSS$h2{^UEU2cO+q(0xTX!%%a;P7}r$$`c$ zkDe5v%-v3~ZcH6dfLpu;Ayn4&U5gBaVo)?P!`OqBn^ZR|o3{6jjG}_9#CMwnFr% zWlty{>OojL0RwxNW^W>ge=BTNdbIR6gaT2PoHe@D6{4D~D!i#jGdrjwvO>3WjiGDa zHGHvFNqNlPJBve_@%;e96k>pJ_TeiuWG75GaVa84gXC0)9+=kRX zKhl}#S`dASN=nL_Nfyb7{WeGDfe0>}yQ)bG#9$JMuh=%VNyF)9NU-R0=b}Evx_Rwuty4||J**6m9C=Z8Ff=#Se;9^aR9646N?s^8`=3M z{hON?ZT3%GnO*h2FXahM*rTAsk0t+V1K{%15zd~uIzHB}dFC&XYs3}%-3TP+NvJO) zVWS=DJsCBAU8cmtHTim>ypI0IIWxN@glU6=F7us75G+Pq;5s}Dx#!WXCMrODO@D5n?_MC-zZq@j+GYu-RqS-;Si!}Q3 z$E_1T0DC!ogF!BDA4?_(F-J@7mP)&$JV6fGn62(?j$Vfv=J}W;;N2}=GZRUwfM4zY zY~;^PYHUPka4io;*Yj6stN(l8OXWc-E9G52GTOJ|b7;`-E#E0X7jq<%%8ikqQ!D;K z4>^@9CJ(1rS&g!1)+AC4du|O&*J$15$gF692*d&fA} z0|L-L24K1a(riTIOAVx4Zja8FuZI}>Zp>7ElZnUU-wn~hgLF%qM6rv?lG04)!SD1Q*wu};F$Xqv%z}xn3ti7Hz!nWB4jNGG8_!T V_i?$wo)>bE>}mmlAn!9{DTOz!v|j)K literal 0 HcmV?d00001 diff --git a/MikroMaster/20260819/20260819110002-Config.rsc b/MikroMaster/20260819/20260819110002-Config.rsc new file mode 100644 index 0000000..5c29ef5 --- /dev/null +++ b/MikroMaster/20260819/20260819110002-Config.rsc @@ -0,0 +1,1211 @@ +# 2026-08-19 11:00:02 by RouterOS 7.23.3 +# software id = 2961-C4ZZ +# +# model = RBD52G-5HacD2HnD +# serial number = HCX084RAVFA +/interface bridge +add name=Bridge-Lan +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=vados \ + wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] disabled=no mode=ap-bridge ssid=vados5g \ + wireless-protocol=802.11 +/interface ethernet +set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC name=\ + "ether1 - Unet" +/interface list +add comment=defconf name=WAN +add comment=defconf name=LAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/ip dhcp-server +add address-pool=dhcp bootp-support=dynamic dhcp-option-set=domain-search-set \ + interface=Bridge-Lan name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/routing table +add disabled=yes fib name=To-VPN +/system script +add dont-require-permissions=no name=fetchCustom owner=admin policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\ + \n\ + \n#\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n\ + \n:global MkDir;\ + \n\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add dont-require-permissions=no name=AM-Fetch-Generator owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n:local srcFile \"AM-Awg-Generator.rsc\";\ + \n:local dstFile \$srcFile;\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"/\$srcFile\") dst-pat\ + h=\"/\$dstFile\";\ + \n\ + \nexit 0\ + \n#\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n\ + \n:global MkDir;\ + \n\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add comment=awg2vds dont-require-permissions=no name=awg2vds-uninstall owner=\ + vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg2vds-env\ + \" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg2vds-\ + env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n /ip/route/remove [find where comment=awg2vds-tunnel]\ + \n /ip/route/remove [find where comment=awg2vds-dns]\ + \n /container/stop [find where interface=veth-awg2vds]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg2vds]\ + \n /container/envs/remove [find where list=\"awg2vds-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2vds\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.20.200.68/30\"]\ + \n /ip/address/remove [find where address=\"172.20.200.69/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg2vds\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2vds\"\ + ]\ + \n /ip/address/remove [find where interface=\"wg-awg2vds\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg2vds\"]\ + \n :do { /file/remove [find where name~\"awg2vds.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=\"usb1/awg2vds\"] } on-error={}\ + \n :do { /file/remove [find where name=\"usb1/ru_ranges_timeout.rsc\"] } \ + on-error={}\ + \n :do { /file/remove [find where name~\"usb1/pull\"] } on-error={}\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg2vds-uninstall]\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/certificate settings +set builtin-trust-store=all crl-use=yes +/container config +set memory-high=200.0MiB tmpdir=/usb1/pull +/disk settings +set auto-media-interface=Bridge-Lan +/ip smb +set domain=WORKGROUP enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-Lan interface=ether2 +add bridge=Bridge-Lan interface=ether3 +add bridge=Bridge-Lan interface=ether4 +add bridge=Bridge-Lan interface=ether5 +add bridge=Bridge-Lan interface=wlan1 +add bridge=Bridge-Lan interface=wlan2 +/interface bridge settings +set allow-fast-path=no use-ip-firewall=yes +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set accept-redirects=yes allow-fast-path=no +/ipv6 settings +set accept-router-advertisements-on=none allow-fast-path=no disable-ipv6=yes \ + disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=static internet-interface-list=WAN \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface="ether1 - Unet" list=Internet +add interface=Bridge-Lan list=LAN +/interface wireless cap +# +set bridge=Bridge-Lan caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-2C900E832E04 certificate=\ + CAP-18FD746E5814 discovery-interfaces=Bridge-Lan enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-Lan network=10.30.30.0 +/ip cloud +set ddns-enabled=yes +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes servers=10.30.30.33,8.8.4.4 +/ip dns static +add address=10.30.30.81 comment=defconf name=router.lan type=A +add address=10.30.30.81 comment=defconf name=master type=A +add address=10.30.30.33 comment=amster name=amster.vados.ru type=A +add address=8.8.8.8 name=dns.google type=A +add address=8.8.4.4 name=dns.google type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.4 disabled=yes list=to_vpn +add address=10.30.30.98 comment=vados-len list=Local2Vpn +add address=89.110.101.17 list=VDS +add address=109.107.177.79 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=2ip.ru list=Test +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com comment=vdsina.com list=NoVdsina +add address=vdsina.ru comment=vdsina.ru list=NoVdsina +add address=youla.ru comment=youla.ru list=NoVdsina +add address=kupiprodai.ru comment=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co comment=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru comment=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=vdsina.vados.ru comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=8.47.69.6 comment=dou.ua list=FuckRKN +add address=8.6.112.6 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=myip.ru comment="!!! Check IP (MYIP.RU) !!!" disabled=yes list=\ + NoVdsina +add address=ipinfo.io comment="!!! Check IP (IPINFO.IO) !!!" list=NoVdsina +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS UDP" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!VDS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot DNS TCP" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + tcp src-address-list=!VDS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 in-interface=lo src-address=127.0.0.1 +add action=drop chain=input comment="defconf: drop all not coming from LAN" \ + in-interface-list=!LAN +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + in-interface-list=WAN +/ip firewall mangle +add action=accept chain=prerouting dst-address-list=RFC1918 \ + in-interface-list=!WAN +add action=mark-connection chain=prerouting comment="NO VPN" disabled=yes \ + dst-address-list=NoVdsina in-interface-list=!WAN new-connection-mark=\ + To-ISP +add action=mark-routing chain=prerouting comment=All2vpn connection-mark=\ + !To-ISP disabled=yes dst-address=!89.110.101.17 dst-address-list=\ + !NoVdsina new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" connection-mark=\ + !To-ISP disabled=yes in-interface-list=!WAN new-mss=1380 protocol=tcp \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting connection-mark=to-vpn-conn \ + disabled=yes new-routing-mark=To-VPN routing-mark=To-VPN src-address=\ + 10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=*B log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack +add action=accept chain=prerouting comment="SSH To ME" disabled=yes \ + dst-address=10.30.30.81 dst-port=2222 in-interface-list=!WAN protocol=tcp \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=masquerade chain=srcnat comment="Default NAT" dst-address=\ + !10.30.30.0/24 ipsec-policy=out,none out-interface="ether1 - Unet" \ + routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=masquerade chain=srcnat comment="NAT for VPN" disabled=yes \ + out-interface=lo routing-mark=To-VPN +add action=dst-nat chain=dstnat comment="dst-nat for acme" dst-port=80 \ + in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=80 +add action=dst-nat chain=dstnat comment="dst-nat for amster HTTPS" dst-port=\ + 443 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=443 +add action=dst-nat chain=dstnat comment="dst-nat for amster ssh" disabled=yes \ + dst-port=22 protocol=tcp src-address-list=VDS to-addresses=10.30.30.33 \ + to-ports=22 +add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (TCP)" \ + dst-port=53 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + VDS to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment="dst-nat for amster DNS (UDP)" \ + dst-port=53 in-interface="ether1 - Unet" protocol=udp src-address-list=\ + VDS to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat src-address=172.20.200.68/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip route +add check-gateway=ping disabled=yes distance=1 dst-address=10.10.10.0/24 \ + gateway=10.30.30.33 routing-table=main scope=30 target-scope=10 +add comment=awg2all-dns disabled=yes distance=1 dst-address=10.9.0.1/32 \ + gateway="" +add comment=awg2all-dns disabled=yes distance=1 dst-address=8.8.4.4/32 \ + gateway="" +add comment=awg2vds-dns distance=1 dst-address=10.10.10.1/32 gateway="" +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes port=188 +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4433 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface="ether1 - Unet" type=external +add interface=Bridge-Lan type=internal +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid disabled=yes +add action=accept chain=input comment="defconf: accept ICMPv6" disabled=yes \ + protocol=icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + disabled=yes dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." disabled=yes dst-port=\ + 546 protocol=udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" disabled=yes \ + dst-port=500,4500 protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" disabled=yes \ + protocol=ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" disabled=\ + yes protocol=ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" disabled=yes \ + ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" disabled=yes \ + in-interface-list=!LAN +add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \ + connection-state=established,related +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroMaster +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=time.google.com +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add comment="doh-fallback, doh-url=https://security.cloudflare-dns.com/dns-que\ + ry, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 1" \ + disabled=yes host=1.1.1.1 type=simple +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, doh-c\ + ert=DigiCert Global Root CA, notify, name=CloudFlare-doh IPv4 2" \ + disabled=yes host=1.0.0.1 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\ + \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 1" \ + disabled=yes host=8.8.8.8 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.google/dns-query,\ + \_doh-cert=DigiCert Global Root G2, notify, name=Google-doh IPv4 2" \ + disabled=yes host=8.8.4.4 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\ + ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 1" \ + disabled=yes host=9.9.9.9 type=simple +add comment="doh-fallback, dns-fallback, doh-url=https://dns.quad9.net/dns-que\ + ry, doh-cert=DigiCert Global Root G3, notify, name=Cuad9-doh IPv4 2" \ + disabled=yes host=149.112.112.112 type=simple +add comment="dns, notify, name=ns1.unet.ws" disabled=yes host=91.192.189.2 \ + type=simple +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260819/20260819110002-Diff-Config.rsc b/MikroMaster/history/20260819/20260819110002-Diff-Config.rsc new file mode 100644 index 0000000..75e9260 --- /dev/null +++ b/MikroMaster/history/20260819/20260819110002-Diff-Config.rsc @@ -0,0 +1,4 @@ +10c10 +< # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +--- +> # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding -- 2.52.0