From b8e068d63bf8af6eec1a0f330cbc0503ffa39a6b Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Mon, 2 Mar 2026 23:20:10 +0300
Subject: [PATCH] Backup for MikroMaster sucessfully creatd at Mar 02 23:20:10.

---
 .../20260302/20260302232004-Binary.backup     |  Bin 0 -> 289700 bytes
 .../20260302/20260302232004-Config.rsc        | 3971 +++++++++++++++++
 .../20260302/20260302232004-Diff-Config.rsc   |    4 +
 3 files changed, 3975 insertions(+)
 create mode 100644 MikroMaster/20260302/20260302232004-Binary.backup
 create mode 100644 MikroMaster/20260302/20260302232004-Config.rsc
 create mode 100644 MikroMaster/history/20260302/20260302232004-Diff-Config.rsc

diff --git a/MikroMaster/20260302/20260302232004-Binary.backup b/MikroMaster/20260302/20260302232004-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..811742c99fd1dce01c8ccad0e793fa5deb0fd40a
GIT binary patch
literal 289700
zcmeFa2Uru`voL;AfFyt*ARxXX%`UK;o`?kz5D`Sch6PhL5GlbVG#i4VSg~P6#g1ab
z-o=8wcSS+5V(*Ft{?BX@#P0iDfA`-1_qh+x?#Z%ecV^DaoS8YZJ6Wq17A}dQBV&Y+
zG9f{wiZw$BQ4m5ckZyxx3lzjQMJS7kSdNY}SdNZ|DX5A`F++%nn5fDbu@G{m%cErp
zG=z{kLF0uGf~L9tCiGfuqgrivtl=7yT5WH#9mHm#DhfP`W?t(Dz4i~I+CPkI|1bee
zWO0&sr9vVjWQr&QW=-@!!LbPnVw<BX3Kbz_f~pV;RUr~L3POzP>gs9|JpeN~Rwj{=
z)TyejuC~$N1CBN*h)qFN3^;Fus`T9uQmf)r@d+xm*6?6l-wBR53S!d{$^-m=@^~6T
zOgRYykS$8BN=(4?1H{$e4M6AV+dy-}Q=kK1fBrN=h^t4Hju6ENMvlajiV!2d$_RQg
zCR3=o;iSNDstJjl_q{$;=<`J1$Fg=Gqhz&GO8{zs)E5t;L8q!}6L^rGX~?H25@Tce
zx(+0l)Ieqg9j?hpK4Q4!*6L#{mB?Ze6JSs@ggP!tJwT78yZ%_4eStbr`t!hrhBow$
z)Sm~=^Vhc-2%$KAn~4xg)wc_&2)UymwlPBa2-pPB)6o!~!L%ds0+fukL~J~v1)2HI
z#XxXoy_$<@3T;A^{z?k6A~^{$SdNZxQ{W^6SHk1S-wb#x3n8YBDMC!+x&|o7Q7H=0
z(F<+>u+Wl|lPysddHk)%0F8e77&^eUhVj*7G@5AgF&a&DWDVYWdD0Pz99I(n_D2X9
z!<|h#k#`2dB4?B2<Yae^CKhgOX#4+^So(1xF#z^9fqUA!d<Cr}K^gbc+ZZ&#uZY2b
z+smB3yuER<GG3}m0igBG)PMD`UsH++kFEa|Rwj}JWeu_PZ5HS)rJ9H(G#XhnsG;A{
zT_6InGPzcjsOtlppI!{$=!b&X@d!}{fdC>>7?2Vn6azXBAtr@Dh`}&HNC7{hV5fpz
z0_+BYYQfnYE(l|yhEN;S*)07NKw#7LZBS=Z^li9)s=n<-MQ9cZVq22J_zyx97<iI!
z#=v5Y5MqpHPL4Fy>l`bDm{fzhW70sMT5D1@S|ZL#PADXav05hp#Tg;oxz4ocM*AZ=
z%-B-zZQ@c{ueR&l6{(G8HhAKfba40KHU%!o2_f84YwPBEXUB!Spz5Zgenxjlb~Td7
z<CO8~HE_ZFqK8d4s3dGUm@GcS1cIxB36TI;ziKIJV(oS)+kMl}2u8DI53N{JeOhj_
z*xsMh`5?cKL<fL#dGVcrX5#cVH%`oKU1z~0kQbvQiCm?b@;v}*5eEQ>uVRt_pymiM
zikdQEme(mW(9=u`IpdJfw0c`?X|k-BINCIHpc`@hEOzU`UAyVihAI}Ccq`qaDs<2!
zeM+3{uxeqr-I$!lW~bB+01ZQ@rU~`b?*a4`ML^M$qXYnr=xRj*L{9ynaF|A)0ZJY5
zdf$qTEj=#`C>Zn@J;TaI?duv+?&UDhV{@@dOYt=dIX>ZI<a3VnJUch^>43z;Rl>Ib
z5Hn60qgF*qB{9I^2D$iMsetQZ33;Set&EBy)HVHJl7J14Occbn0?Wt(W)X=@OT@Zs
z2(4BbA4Ogd8{EfmG}9RYjJgO>O>4m<`+Y+L<}S5L6Q`0BaA%nMa`jJuV=f9}8zGc$
zgltg|+XNxfut5lsstXJp!<>VVIjJqHtE)}Eyp~OB=IZKdW5cx!1+F`%z>N*p>UAYp
zEQ~YngmPeZBML&z?MXQ$C7}^1sU)Y>WqQ>?2uY)4s(6KG6cJCTC8Tu)+dw@Aa2%+c
z6G?3YCJjv7fHYWYKy%PQKs!r>C{_p|3%I{ILX7v-K#nSMdM1C6ldc^?&M*efh@4gQ
z;!m;{&@Wo0)g-92o^cXoykVri9^oShG0kCw4Hs+FNeOC|!f^cxJ@jx~fr8j`5TYa@
zgeD?{CLu%_2M}h%ZZbkl>u6|AhuuuQ-kb$8(2b&lem49^4QF1_&|sMIN5Yv=u*-zq
z7}$*mj7B5mY_5ovXrev!piP6*Q(-p+c4J|e1-n$()uupg<ddV63Gn-OCX3p103s-3
zNj`+_fu0U<e1L-3^+^u`CWc;AgzOQ@qau40t<@%oJw20?lRZfJ)GA{<WU4sN2DSgA
zRwZf)wNxch%gKK_l9qEOLVz<+05#AlTTuNl|4<YNQR*Q?aX^Ua<)kN{Gmy#!cCO^i
zP+eUIA!Z7&48<CDHgL6pX_z{Wu>w-n)zJ$%1OGV#BRcC?$rf6qv7%?C+JuBj#lRI;
z^wfak6}^RQurrMG&W0m^MtW5Mh;IBzuC*umTesQPYTMOn*Q?cbuGMy`)oxU)4Lt8E
zQzgc03AM&a5-)d(RmLf`8YhKH?W9#JC9&kBs4)i&O%cLD@^k{|470QjZF4=^?qm-T
z>9~Ygji*8xt0iF6ewUBH3#`>sCw;%efMDa09hHh&KAx)%R`Teor*>`MPNx-alO{uz
zGwFjW6EuX(6BKE!`?S*E2ac`u_W^A~8WSXC!1X01$xKZQN+dK|cU63BDiA_<L#3RE
z*DAHCze@<~nw|*+p^i*Ys}fWiooWPB!}I{bF|3A-5NTw?Bu^?1($D}qJB0~an5Abg
z0GdTXh-n6MDit&}y*+S5m9v3+;SoBx;px8%GhC<drHWO`Qtc5!;Jb9x16z9>dm)56
zq9C@xY9rk!avT}}P~akfQX#otZ^!FKi-|rv*HzBn^SVJ)zknl>beI7;uqx~8p@Cz4
zJ?VfX)Y=62jEY90j8~}OH*7w&jy|6miUgku;Ew>J3juu6(j@&i&~>EzlJiS#E%AAj
zK}SS>Z6vhTKMjtpbrT?o0!)BFFeW@_1VcZr;0VHKl768x%vX9f1v3{!Wjy7HO1S|O
z7#!H(Xs^4sGyKL`h=wSgvLgm8WC3_&M_H_rh}TA{60}NHyv7Y7^s2hLx~=XG=yi2<
zwNT%FQ(axn*0=K!LTx`&m;rr&@7jRcu)<Ol3b$rHT>^ZA!y`L(59rt&2EbhRD5X3S
zfECv24Ns}*T^CEi@S5I1-ace!hM_aNRzHBq!0pbaZp}J%4GRzU4)WFYh*oK|@sc<K
zc!oq(L#UGowWlUg8c%3}IKVT@^cVpL*VVVTkmn&dg|aAQz`&eru^b&)HBqu|@XN>$
zGmB(7I!ft=U*!L2hCbb3765$#Q>i6FFxMa$0H)p*hY5i}GAab6YR3k?5D120*qJ@M
zh6ehFcI_TgmmJ=j$P|+bx2}zBEFsYlHWb}+U+VD#`FNpke?SPm(YM)DgevrH9u=WV
zeVb4He7%5*&|Cfa)>MRE>)Y*Woeu~16%18`P<JXqpY+#6Qa?Xy5Ea$HGpts7Bo!gB
zDq)*UMd-G^@6=j-7gG_cufN8J_PO1OhR{9z^<8M6`-adED$}12ry=x8-*&MD7=qY!
z5!g%_q{#t3Z<an*I96|Zz`QaJAv8=shQkrkDYOYNhU9b(9x=<&kpPbvLQtgTZK*$!
z1|W>DCAi5bS${eOqHL78k*Q#qto%pU2h2XoR0#5s7M}+EtRQe}g2Dn5KF`syzzeys
zn+rQq{S1ZH5QLnqaWPjY7AnL%iC9R82|_Fp%As$k?1)KE@?ZQ>lw*F5a{X^m9)yZz
zzeKqQIJ!Im_PZ!s;bH|QmJ?zHE*9Zpxfmx%jGvW0pJML#=8s|=_H&Fse1ma$iCp<B
zjLkZPM*6EXT4lT>Rq`*e#>7HQED(qZnV8EF3;870XhiZOpV1Y1tf{0517-IoSlsVx
z?3ok;e=|UVe1m=IBiS#pX9kA^;NC)^u;cHdj&z7RnmS}nto)<H%U0;+^G9OL0NwZv
znpaMmNB?S&nIv1g2ZaUvE}B-jm@5{@#5iBf;fobKF-JfmP9JK^e=Yd4lI;KW$dXE|
zW^iE^_y+4Gt@r;DYkE*Xc#q#j*cun(n3ydWb8#_SCT3$|8Jon|(%rk2)4sQVbg0|>
z9AlX4zQMSAMFaV-#+en~HLO!W2XCj}$J>g;TPT*{Vj(W(iNrjG4sFKX^xl!L|0vp>
zevURw>))WQ9Wv^dQfv~W4AUxQG5>C?IYKe65X;$Oo<fXsbVv&uosG2qvtup$InrRi
ze1r6$#a@bEjrG5mX&sA8aj{$>CPZR6CYJMbXcv}MoW8)I{7H*M^>ehrRQm?)^b5Uy
ziFN~jNvtF#)!mzoxhJS%-3P0ZBw8X?;_e;)Z>BE=A!dttY_XIOa};7+H+@x6LwC2c
z{q#q9zVFZJ0A}hpbZEKj$uC9SqN8tEV0hOMcOEws^Y8fE28%T=mUG2?Is7T)VuB~;
ziby6n9~bxOPQahFSo-}Od9cgBLB4N6^e+XT5lYD8l<wa6zmRwVAr?x-I3bov#ZsYI
zCMB^x-oet!Z~C7##{2&qYw$q6!P+s__LuXSv4)(+e-~#fT+GA7GMQK*6bpG`5nn7J
zQ4Tr&E^`L!&!QaqbCki+`Ud4jW83~x+Ksvf1qZNy7h`K&OmM}xP|TN#c|tLVE0*X+
z`L=ybFK&U+A60OHKSvq-$!}1;{=CgEdD~tRFITISa(AJeU}G4ekPvJ+PDp>7*R60d
zCT0u7I1g+Ykw7fb2{>w6&wJ*I+j{Lr`D2E8(0A-sCbh<V184dhLM&~;{3W{^#U?8g
zep|2U?D7K{H)#Que^!YF{CuDxK=2KI14DmpwJ=DVC74M57wnB=db35y26IiJH&KO+
zGSXkv*R%J3Wn>x7l)RC(0}GLWJS?>{hP+s+v_y!>f{~>|S`vgqRJ!;>B*Ydv8rdL-
zEx0~g`kBj@P!PGK^f|V`2nzEHcj9?q5MyBW@b1_(%ssff4@rfrHP;7-!Xe0Djf;gs
zv4jxI<zhZ2=7_{R?oZ+l-&{+oI^FI52w|9C5k^`=7(YE>m^Flf*pQwuQXq_lo-j|I
z)*_7R7la{~+}&e|c#<%O`y^dHzDG|OnNZA=iUoYJTnPGIs`v?EzPXkpjP7>#{-~uh
z;OBAzL9%b;#G+{HFZF=2G9+3RPyDWw=r1SH>^$XhokpTRukt#7jVhB~qwgR9_zj+u
z+x}s9l^&!F??K||q+W53%P;%mYTfaBYTc*?O^9uNjV2RTf4>MRlAipRQAPB-1F6&K
z&l3ANMh<%Q2hd}<d?mv28WDc07vVZJA`IbLy$H)egp2edyr8yjbE1B&+sL?SZH6rk
zQonRq0CH=rB(1j}iK_nJ<dEt*eY1W*E+fEV3xuEx^s!_(7N8)uZsFP%A&MPB<oa&|
zUG@^WaP6eaWq|Y%axD+m$zi330c&}>bX!=kh7|&R{*JXi7zN>DiangJ57)!0H)LEe
zQA7O&u=GuHAy>V1Yf~&o$8Pm>!C~agij!!xgt}uVpAa%u{54XLq@g4eXkl~IBLzoC
z6vT!!ElAI@v_RzgBBK?BTs>iui5a!lk$@_Yd~!*D12|qHb7mm77}jfGt*0JB`4nV=
zg4nizfkUm-Tv#QpgAlCK!zw?M2HZb2rTsZrF{J7va_^Kd+lif0$%LYT2r>E;?V`p)
zUW!#$GSJS5(Ve74>$;x-q5-MM)G;P3nKNNgj8Rn$bgt56ZPLhPDnc7gsBtHEr|$8D
z))5FuO3EYak{KBTtZSm}u+kEvl*?4{TD2<HQ%)o)WrQAWav4t+t4gd{lk2Ph4;=fV
zAg~vJM=4s}vH}y<6quAO{aCKlA2R^Vh49D~u!Hmu$cb=<ncNwTgk3u9$OMoCXu<kn
zVnTdEoMAB#)|+61qoqF6213C!geWjli3w3^iTraG1FTcQ2FE(OH84oiLQFC*N0(Cv
ztAwx_5|Kd;42zDij%IjvcYPW(kje@n2G#;WLIV>n*6}fny|cM*qFR+ecm}C7GF39H
zSONz?3XiF7<%48hNTq6p5aWE|QY9?V$Eu>-B{Fi=5|YtjgH#dN0G?6$HsES#0~;Hz
z0d~&QU$c=4=gD+!5=$0BkOKf9kjdL1EU@x^pQe*mU~vXy^_c^Q*3l0Zxuy+*ONC4m
zU2X>~!^30AuH>?<B^X<}6rNaBRL!!naU2n+Qm2mkPe4ItBvXC|3c6gWiTRJfK;}S_
z2?;>NpHYHN$f8yMk<lPCA8Efs2V*r6r_vI6UycSSJBm4~0$wJy_rKzYnuH&EJs<#Z
z2HgM)<QP%SSwNOLq`ldm+<T}Kf50wAM4Ut!3p^|%)Nzybd<=318_0vap03>nA#@ew
z1tD}3QcCp6Zm`aq25ENsJgy48qIif9nxnt|DMCo1PYQa55c&uTL%&{Jsc*wtaAVLq
z2%!(;>lC`JSuCt`!+R45XUto^*_Siu;$nHdAoe7L@@R;TeA;vmvp`+jbRo1&HBP?q
zGIeT#))@H&w+Y4BqsSQo@^R8YpkQUwNiM+on2gJov*kFMFQ$x-(nb@cn)Qe$w2;AL
zh7jZ+f@-7~Bg9x&*-UAI5MyoL0_8-67|$Nsu7^nkBp7B?uSA5Hy@w#gFhZ!PG3a2J
z4X7=lm5C4|k5mo%Bs>bt54K$ht;UJa!HWy{T(*eM<KY$vVfpltpUkJnzB0=ne_DxG
z^~}vGt8zUpOLqyhls`RcOmWz~S3)_yHvHx4`YkKE+B9r0%BbjZ(k%PZRFqqI$Z^l=
z<HYk;nYa8bDL$^wSKXgX%ILTDZiht0#b<jwUb+^ay`h>{B)vBK(1?pZW&PjDtfkW|
zPjl;hjFbDB<yLnuI?^C|X6Geaef;@q_Z}C{s@u7rNuN{Ee|h~&+bdk?OU`$;-`##%
zpO}}|)8AG2ICk6d57jm{qPQEoqld%s2yw_Pe$1VRCo1puFInL}T<KKwaLLlM&5c5L
zW7~bEm0s=kq2xx}(7xjEop`Hxm&6Yjr#Osl9`pXpM9uoWPZpgvGV?bVeo{4a>GC$<
zdBnR{&vu9yA3Bu>wp)p5&K}g-ba$LMXqD@>V_6<g&$tGjaS<K%r7UF?bhtFoY@AlM
zz@hDolFAjnP0B3}&VCeTRa~|EvPWk05=EPbqYtK}S0oqkrq(g);kI$ssO{`V3pGs?
zD5q?+*3*5GX~e|o9|v@`SZ5#L>R36a$JA=g+q4eZjyLWPJvViuFUvik!=;J*9OVVG
z{K&P7It#XG7a!;mH=&Gr`_#~p;k4{oOX8;<U8h;w@CYNc^ls)%{*D~k<vA8>HwT;<
z)~f9lhlJ?^dY1B2mrZTZcahau=aqHmTP+K&8d1OdzO9?Od@LK)!EZ1x#%sa(>AmVp
zK3Wf_cN^|{-OSF^k#g?lPKSfn!}~q$HuUn$gLPTcch!4oJv|R&Ua9DlaPX51yVw=m
zpHAPt{?)0B*py~P^x>CwbQWJ<jZ#O)Z7_M8_ByRi(FJC-kKKwo4?FivE)@ypKe#wl
zxpr05*eNem7tS5nL+yXrJV()%_S|o+PhXF{)#bf6^<6V8+97$w_>acp!~0CKH9h>e
zpWjXVK<GHstb~27&oG*~v#Qak=xk-eki@nhZb$B7w{81QvFCY*hnY7Uzh(}aQ7Iwr
zo#;^5Fn(c0M08o^nGl~k1uw7ltXy-i`9}Q8KcabWu8KVS`1{cBUA<klvwm@kg9kly
zOzfc1BNl}1%h3MAvyC`5!^<PkhqXoEn-^bihIdZ#>-2yp?Id}=FZSEF9NjK#jBC3Q
z&CC<7+P>0Uy%6PiWeh&bxFEDmJqsdiE)&mYEv25?-_<Qio3UW%y@fCLb{XvVPuRAm
zS0Ar^o3`P_g*A7V7H`Nrw^Y2&qD>C>h1ZiVA>slzna!=<=R*Rk#?H&V<SM%~cK6N(
z!TW~~ev@r#T2^|s2zMyAYUekOXmrN7<C%sR-JeO%XT@hlnAcq(^OMdQJl=FeBUT>=
zyIuMDs}5AUTIG-6@1MQ+SYX+mttZQ~R<}J<*s0~z`oWRUY|O-QyB1`vw?1@r;3J!8
zr!#4q1tp8)QaHoQhEGe8zUrVYF}cUucv)W3aACpY!>auSVp{O*8w2>IAr7HN5iR^D
z3>>&@d}N`0!*E;Ek*TfXvYTw#<Qv)P($jIv&df<!Xdf}X-+j;dDUDJKBW235r()kT
z%ZJ?9cdo6h+mJ(dqz>0Mzj2+^%4_RhpW*@zZ{f=p3(Qp0KaATi2&X07=@(irV%zjN
zlbRpwRDb@GSoijsodg!n>z*!UT=I(u_I;Wc-*Vg8lGD4^xb2vI#1tXS#R$tVa>O#|
z#(6X<g-W$Dx*nNrp*D9eotHygEL!QEdKWV{X0{mJY4lrj3dPh2VI15PV;a-C(~YgE
z-NSHO%m#k2tj)hr;<y>cg7Y+MS}4xO9PP~6JRD~WF`UiCun0SIHXmcN`54aT@I(<<
zOT0PORCoO^bv%|qaj6Xy#R$<dC>99Ips=VJ6bd>wOR==<#TD1C3*7UT(%iN$+COXO
zoFTJw-W)7rC@+7!JbwAI=##m{2Pd4pL!Uooi+82ZF2T9+!H@fwRZC;tniILNL<?HX
ze$aQ|#@nH>JIvD7wi@&D@rp|~7BK09QkJ7ZLv~DapxE9sc6J%<`Mhj?dHg)eM+S9L
z+s54|=g@Co@Ax9>h~`|*n2fR#mp+%;_UUF5*{}Sq`||1qyE*4(J6WB&UVUyi9vFM_
z$?f{d*Tf3r``V061E=>>zu26VKXDeFxzt<GubTN$v~TkiQN6awVl$g&GlmwAc{}`t
z-O#bKyvs|M@4cT__f@0kK^{X!nhH#~@A-#)N6f!WKSnHnmLE5pN~0jk;tVPq%b<E-
zb&P4<8(L5()pR<IYLtgHgx`(nFm8;N#uOtX6B?zaMa9hE-_~$B6+^m<>(FiKHnvkU
zJI9S}9~Nh`W&X2C_WP`#haAEh!Nsn0d(3u(4cgTFh5IBGet&M4)hTV?U#l=Xa~9(m
z?o6T3n_`VISHo|NI@(U36t2eE9!if`m`y!Y>L^dFCET?x-3@ce_%$<F!^KW?GmM2X
zjE$qx%_vj~<_RYo(VJmSFt<FHJg3o)wVoxb^(-9Yc*xYTSO&$&nAOslLZ@6zrP8VN
z^f&bMm*_c4LiI<VKh$ics%kq;mC_=JGG*mScQtOY=48JFZ}-Ms4xLAcGUsr|`)&x)
zX~-Y*r8=V{LE~1IFggA1mNgIAldy91=9b3qTU3o(O7FQOw589s(^MzdqsG(dM~6-w
zxqi^4**@nc8D~F!-Qmj0a|`RXvro>tdjln-W5T!f#tt2|uw!JOz1Ke+iGMMt_X&TN
z(kOG?F`NB1z3%CsD<q%W3G<^mqdj{jde*<vkb3@U^WCHOGaVYvS9WAgdAOj(y=E<x
z9u?_SXLOR;GG^|0Y{j^y(T9th@2yHGeC2%aLyy)yZZz68OTM(Swp^K#az#P1#N25k
z4i1Q(k#lH2wX*EgIr9eZmzR}~@Y-6~K4^j0l${Kl)gj9o_MvBv*-7sbmK4z8bxLNB
zGTUVftV6O}SsIP8czl|Eqgv%~-6zAyyX)-Sr*+2%MY0(ak5khnlg@Ogm~Q@j>Yk~q
zEnl|WWwb?g_W8)(i4`a5v^UZR`&xL;Ejb?NEZ7@$4xi0&y2Q5eZbF$6+h^8h<3>%g
zXT-k9TiY^G_HO0IRp||bdI^_a-y1p4UU}i}^vUf$wtPByO3qCGv#+zx&hD{pK)vXS
z=KE0Enc{0b;(cXr=k}fL)vKEFRPNEYBIn~^m$UtsM%x#ikhZ)Ua>;g8hb(KFBECNT
z_SR{i#v)`1wj<cISqNEzJqhjfzxwm9{`{*y|LV`b`tzsyGyAVs{MRe~>lOd?ivNG%
z6;D9Oxjje3mdXg3P$nlhLX6KP_%ecr6MVUdkIOKTLLw6hg?y1vD8YnM8LkjY6nue{
zFOYKOd=aKlj6(?juE#VU{_#CeDFq>CH;gBj^Ath_rVy|(IUAP~BDsji=gIjpOd{dp
z0ujL<^gChDtEOMZSY1%pHUaPoXgr~H3L|8RYNa;SDU{F<616Pa$sfKrV*z2;fUr=1
zr%;tj>(mQ}_$#~*se7AUA5n$15ypr|&j^U9R*#+@0}<7N14%1uM^xJ+BE;~cBX|*o
zA^F{)YUA2LRVO8Y8%M~M5-ov8ei38EAqbDLAar4jWl*2!LKk(>J}Y)$!itSk23>3a
zwmh?m*H_LA*7eKCg+AiIvUd6vY4Ccan@Oixo7E-|8P(uo9GruZ8$>k(7zbxVOar1C
z|3{&cUqv^r&T6Jzy?c69>l=>ccLEa&T3Mw%UQS~V=g)j}AJ1NDJ<)WwhvNxKw>Dkw
zG>d0;$5$?O>8F0>Zn7_^y;m8<bz6$ywFANC-W@$?9{uSkMxR|&huII8QP3RC<hblb
zCV8i4p1bNRN$0h(sXR~=Iq;h442N|KZnb!@tHs4xhvp6{XsxyIDp@~ZcSK;YeMLzN
zP2aH+Vt&<QuVu%ARk!C?BEJpQ^@Cc-HcV0+w9ia96hf$4YwvU#X~F2#&)s!i|HW1J
zOVGlzuWr>3dhulNo2K*coXB-w^dc?SZuL`Zf#}S}!>zn8jxMTr<ovF8gS2hpp$qy_
z=1J-Mn(bn(_Bv|$sDUoJk^T-#fBj`_gEIPiu??yr;y|NdRuC2-V;c<2m_n(hQffyy
zz9*JnL^x76_P#r0^PSri%?L);VTWFCD(1#xY{UI26nYcP4RbO4#;Buh^-+fu{L28x
zcViY1{%Y8W?u0pF|KvI3+1Kt}J7n<{SJN`66qKEKnt5tqQYV5vwRBU*!<k91>W!K}
z-IMfi!}IdW_)+;irreww`1a-ll+r0Xaq6wxenT1zXz8>z@1)HgU-N-CLPsxodDX^d
z#fr%1aekGdA$IL6ZaWUUTd!Buit!(xzMe0;p(x*<+`18EOq1!4+go1SGW*f>p6B`w
z@_vFjA^NqPz>sERW>2kJIb!-|V}{MUe?|`1wl8Kxn04)YX4Jd`pGta{K1q#t4a#{j
z_57^n1N%Ot?(OjG-Roev(~$gI_<^EmrvLcM+fwq526x`AbZZeP7}AXvBW@Que#7~*
zt9u1cdvYvNWsV1Q+J2zj0;?lVZR(CP$=vwvh0t}?Ak_X|+C)EY#=ziHH|oeDw=3uP
zGc8@J0y}M)k{Et$n&WNThhe9Nl=6f2yeWKmw{r!@Yoc<|tljx(iwhz*hu;sHv0~NB
zbrHuJ4CYUBn|rcX=!gY8R)6<B+PTsucDYmV=B6*xPVASCk3N+AD$Vr6!QQWFioj(d
zb5B2A`jNVEKoBiZ(zV#hWPGP}`0LHNXO65+w!gOikj3sBevHx^fu-BFZa!qYo3Cs)
zIyz9BZap@nc;H~_s^U&d>kR8Bxqae{A}{ffQUCj6H_7U|?g-g9`O&^aLEFS-4MsL@
zhMa?o&WVrZJ}An58@Z;Nt)Jyus_~Pe%{|YXubOcAQr^ok@%zh<RRo`3IP_CeYY0(*
zGB$)LKtUTq6o2*PUp@In4EV2}{HrJbAJvoDkgr5q_&5hw$OwTz$i;BJP$ZJ@BpAlV
zI1&+|kO?sbE+nK<xq!zLVgg)1$YnT>$KeSv5eE};_=JqK@V{p<kQV;;ECsOeon&mB
z&0%w;0!$*3az(fRm&>@ALO`&EJT{*r1M40Z%v6vP^~Hi3q%BgrhlMe9mOWjcJy8dB
zZPQU1rSu`xTBm?`nKkO#y$yV3N3M)g$_TX<zNF&-rhUy-{;?{lBvxnT`*?q0<s0%Q
z;3JD<x+qxtXm6M=So<RiduwZ3`8UDJFK{KTe5T~vya{Ie(O)D@I2s_(0RUcxkGF?R
zt@TJC;vz8%7#lF`H_)&Q+FC4wI#XxZTQXYT=rOs2U*W>Ufk%2zIn=qf1!QD|Fv*v8
zz1~=7S(_Oi2!z4wV|K8>XliZwHF<C+%u%=YXjjwYOCo`#kMVIF*BSa?>2vT}KmR*G
z_?2H!-uh-;b!q;RbBlYf3|W+InmqZ)qNPu)PR{5<VLBbBOj{m|Z3%npb3loD&MTkj
za(#?(dz8*Rd9uOCJ!L0a5ArL&s5oS_A*rct_K^9GIm4c8>9m+}_2SyWW+G!Et#iLd
zJMG>T?0(Yhk~VE{%Iw~m(eZs<*@1h4i|$9n-AdS#Y`Nzn<xS?5{En8r*eeq4FPvGl
z+rPZ&z*loP?*bSD#-ESeC?2(E;mXckhP6G_H8M7-e_o(q%KU3CcjHdlI7}LNtm?!D
z8@b(~KF#N|_q=%W{+wxt^95VH*;mcZKYf>eVaLQ??KU;IAJA-3!d0Ap{q1_&7hPDv
zCi#y$x9PtrZSmy&Yn$r)0vRUxX124aG5d`$8ii6_YgLn08p7*wrppe+v&H2N8tk9B
zzRj8LU)cQLy`a{LxRHL5>{zZ~WhZMZ*8A%nbGwGFdsViE{yH_4vDnT2V_?fsMef@!
z9IAS?w^6TSTjO#EYwyi!UQl<_t%SUVC%R<Ko;G1hLV1D3Kf9-`sFq#0Z8G58;yv^F
zFrQzTbSv!DB-#6R%S$#Y%A|^mXX3plzHs04Ai48`dA-V8_AYAg`q;f$hHu-{@TpB^
z-5Aj+U-0zV#nb_|rK|4OIT63Aqn*$*;Ob4^wk@{t!%m4qjNf|PKhQHER^n`bfxbG$
ztCe^}%<_k8>)BLX9=ms&Ft&V3?6_+Aw&cb=v7!cUi*H`5DDxk>X`>s%2z%td%XE+L
zo{()TUOt>fv08mN>)<SI<V2R&!HNqxIdP?6fr5fCSfHRZ3>N5Lf!3+#uXM^^f&MGd
z|9b`cv#G@8aD@_#5OKL&nLsF$viUp$;|b+FLMY;LrChm?s}S+|Y^j{hmrL0^fkG(a
za3x$WM<&2<K2DlS-_xU{sr0>nkfstQ<VXpO#}{E-HkU8OCAfgcm&imskqDOwxDqgx
zel%Z08vHlYJlIrUm;`#0D$PV^Qc)0TC;51XXo9?h-F>{>z1iM^j((huJYQe_5A7r-
z1HK7H0ShT@O;uWL3#kGuBwLBjLW=v=Li$c-sof7AUt=Aafpx^dGAPe<))B*^Wm00@
z^+T7`o|Pa^%caJwG5gU?!K@Kr7>?=e8XU|TA%^2ZjDvGALBwy}<5y~I&4eS{C7ne>
z-}c_yYBcwGlTVB_=Xy=ac=9^hb^faxAuIi(du87%TlXp9!J(CBtoBu!=0z8JuwHbq
zS=fGJPf^tMl^HF=<4!TgcwQ+FUt@H&d)9~j4dv~Rhu-dYj<4Ahf3_#vRz61ZVC$|j
zrgHwZ0O78IX9JF}XD*$4wjyTu!mZa&b?M>mo$*Q=nms_WzTNogCG#TYIc}M`^wyP^
zxB8wx^Ju^aOQ)i8t2#Mbg4^wWf7!KR+_uV|3zn>44%u^h(IMm4SDU!?9oJ{VlBi8{
zw>HllbzpDb)0cxvCa0Qn>Y}O2=E>Nn&<1NpFFLtqNz>!LFJr7CGA8%dv_6zd3pl#e
zaqm=>&MxVIwg1)*`O+=lT+1%mI<>pqE33=r`lrTMbPIg-By_~ZhhGga4N~1!S#+h`
zAqs_sv38S7v8oYvV@_TlTF`lTP<Mw}yGm2ghUyawCiLT)-@KU{^!CElZ4DDslAA9d
zmdIGGnOErc&NEIm-_oer(74xqTZV`(WO{xID7?FPWrSnF`WKscoWN_&K1&95Tenua
zYIfSAtJ8Pfj6$QPUp37cQ1W&YHp1C&b@<i}o`U!8r|UJ|s|YJtH+>`DGtXr0x`!Ss
zuy=2bz3ractaEi7axT=5_!K#?(W_Z6eD8R7%=jd`<ohuHgKhSmoE5KJoA?)9X(L;n
z7ZKna5V+~40*lP*a%5WWs~ZWo`mCfS4$10xEWC7IKmRdxnfPFrl9<IQK`CeR-4Yt#
zAMXlg2S}a4?9hJ@jLgmXD=B{^g-lufD=GKKyMCU}*&IwE<Z}6hLdGR<Od=Nwgd(|=
zkMsFlo*ct@T)9k$6Kp<#@z`uGM<&6fd_G4aAvgq&;9%r@{yhZ+^Ete9?re!E*ir#s
zz{7DVTOgBg$+`LmGh2n_zn*?;79-u^HOL=MzYl6pzvjO+{aX5Xhq&WHzm5Vf-<K!E
zxw=<6RxLTS_vG=%jfN@f?53U0tyfw(cmARiOIRECyy+BbJZ`8lQ*=@-zkX|f#Gw2x
zllQMMt>YFEa&=p?>laTpeBG|?{+T2Gsgs&z|8nKVI^_$z1Dedu*p<#YKQll7P2_s7
z)46t@5sR|w2^qApLqx^L>sH^JC|9m`KG|YX@C@;uqos{9PmJ{2-?@DFzBO&nJ@V|@
zX587G3==Lw7ipNn=k1H^Ivcwm4tFf*7JHE%H{<4b>dGxwjwXb*p3_iOu($bT<ILUB
z@>{JaW#jj)T9_f<ozKCHKds#>AY30dvKZEL@NW4F&9$Q$$1_eo4GHesuWrK$p*d@2
zZ4H@}7_6E;{{67VN0!a>SnU0ewfPKLaceW~tVO0$&QiC^mfc^^x-^Apo@o_P5tcYG
zqT9&AwO8x-r4D?sX5_SW`3G1>O(s5E;gr#|^|-#Hj!f~n_D`Zq+ksn3>k#6mkL%o<
z>t26OGV7np#;eDjwb<y?K=H2P?3(2Lj(LGSl-+FIqPBR^SvkTB?H?YtR4sUu@3c9q
zL;RRWTXUvYFWOc<X8PudE%&<(x>hh?Xla^?@o}NeeN&ctVe2gq5{aF1Ka=4dH<%xm
zZsXq`W@`U3dYD6GLh$5!-GpQFN^Z?Cx;n8$U=nx5rDyjI&34ffc2BOirR&NblCJBF
z*GRh#KDFV_8i&-}pv1f>ENoNyT)fMOMUoBM)pg2FCiTtkJF@eYcilEyxC|2?Q_MGM
zi>0hh?7n`5vfCq94`Cl~mk)0{&ztf}J*Q3Y>&0@G@@|vdqn=4y$6Y!Y#dV2pG406A
z+mc1ik1Z{~yWi{n9!<fLXDx3J*M2A-j;_1PE9a!U8FwE1ym8ala|%~!2bY8w#?L(d
zOuoxFyKj>skL6Fe!`LmEx3o;DR#Um_=}6g!T}O*PGz!XY8a~dp;KQ&FL1BEG<!pDi
z*~hkA?LMVZPJi}Y$6gs8d4YEv&%Yn}<gD#-w-d`QF0B(ZVM12lBn{3yccbJ;NU)On
zZcb(LvEa7dRw!o%u0PUbhm*;I0Y^r9d3};rcFq{JPRfcgnj+bEpsTId%~6xGb}d-8
zyqR^v(EZb5KD{hiUD9pV(|Zi-$EoeDKla|;<YMtWXS2R7ycZ1#?IVqEyE-$d^X2eQ
zaT$^m4PQ3N3r_18n6tqPciURdy}jva*qS<RS3VuGJE_}TG<44C20hM3^s!U6o3!Nh
z#PID~cW17d{alo>`uz65eP;h~$_IwtTiZHi{e>0>R+T)E*llm#r^i~&gEl5UFKnzN
znf!w$8&QWYNIR`~_{L=g!yQ@#ymZ-{Te@V-`Q)^2>)U#q9$+-<e3;+hTm9a!GDlwB
zS-*W?)A%kXN6c3)r!}0x@>{%NS1*T*bu!`AyvL1?ILrMU3QgO^^qhRh*}t@TvM|M!
z+qU^THFm{UUPf;yc(vd-8ad*2cHE4RYYU_NmN;fyOg1ezE_l=^EIF_=cEZK<Pd=@x
z-??$wV<Mk6aJ5LEzv4PS`1W<z*L#<=<+lkPz9;8nguL;BxS?0J1dL0`i0(OWKvC(A
zs5cm4e%nd-+{_|!Xse>s?RzZU(<A&YcX&C^qUG)N{V&~elAkb+T-c3x6PjLV*LzI8
zeJ(!d_Q#0>H*bXSX+3Zd>S7s`O1*<HJo1#^vEGu<uk6R)GVXunAT%(9RcU75sLo${
z1}~hAR;ICv{Waqh_ni}_9+<c8iSaw*;R)j&%$D8V=WQQ(uW<VL+vDt8&=N0E8X14!
zom<mfD?e}SDJ(s{X+`0zk2XY;Zq0A>xx?*W6qv>yNtkx)(ys2KEoq18SuJ`dq;T(N
z-{|*3YE>%TJ-6snud03BX438-9ba@Us`b!;XmZ*0aDV<2&%>r`yboJ1TQ8WO!*{P3
z|MK2aN?^8p>eADTUC$b|zFs)%$j+A2sm9btiT9qj9VtEYe9iu2lSl1+=R3wb_;O5n
zUfqoeVH<}XIkPRnZ$pt)$;9cehR&M1cf^`bG3u5FI=UsSeiPZsHRnlcr(8$R%bPkp
z_w|Y#%xWs}e>z0x8H8dXUpfNxb+sIU;=QR$x?LUUKL2pe#W}q$4Qh}zK=eg`@_Q5U
zS0hc@KOw_Sc3|sA+x2fe(ODzD;*guP-K&|<tz+E2?W;aie!AbGa_PE_)Li4eW7-Wh
z?f>ZDs1v($+O&LO+IocS@oDvrgx;~m>IFS3*0x%0GeEY@dCD{Ohv@#1%n7(e)4_Lq
zx2c;SG&sUua45pk^jufZ*HzOWL|z^uZV>d?D5T$vZrR611=^M^yFf3t>})cp*~sK+
zeJ2mLnQqkeT;Y44b<H+)@Ci3_n%}38zmRcY)~HLZc+3ThD<^A4_gG(eVLmJ9+Kk6J
z&IjZtd)=Jb*6Sa68@A?lt4W2UrAMDjZ;sNIjC~eUINUaK<Hyu>PI+ku`ZU<HU6f>0
z)}JkCXlIhZn$>QtsPnd;c?y3;=C8=qis>6(eEEM}WORw!e{J8tw(not_pj~yzuopF
z(>eqakpklh*m9|WFXi)bo>Y#pC0r?&z&N;+kP|{FpWtx`LMS765{_Ih7qKO{T!OKA
z91d5;C1V@kv$@E%itpK4WV}N_@DwrymoJm@M0}jbhIq#}_V65iQuZH8-S8(rkWrJM
z{r%L9fzknFqP7LDsl71q5F#T!b^c|7wx=OGLbs6V&kpYr78>Rq*2$aA<Fhd~=HrdK
z<KM~XI8Mhh=!dZk+B$tkhuQ00#w~kLUk%<G(#rMtGsRc4?|(d<!e94BI*xJlsoT1Y
z4vfPV8FIIK|5j272g7xlBP|THF|6|Xvz@}bggJ$Vc{}L{<OCFQ^6|!h=@%V;Ybouz
zY==zscyefu;<%<m23z$Q_xx4m#d|licjXkk7~owmp~MQkZ_3)#Q`l$N`fk$(<<uGI
zJ-rXF!TTZacNFh-!>W2bJ@9ha%v(0EZGw(1w|rsypupuB?owBxoZMu4%9WXoZVgiu
zBzDZv99~uZv>$6+Z=aj1){8A(cKUcJMzB|Qt<>*giEq^~*H4r0cQbM9wm9-}fM0l8
ztE}Qz*10q5dC~4K6kSuAvG=aE?b&6ze}|!q4(ATLdp;<9ZHL+Ud+Ga<b1!zfeX{P2
z79(aq^GP_>E-B_rmw*Dd{`<@`KKbPr#7;Xd4egLP_1&EJ{rj(9C%Mz8(Y7?^tov==
zk4*DdF4Xx&8I%kxgEIUVN!!}Y5k-naWrEUEyP6AD(i-l5e8TPv|0vic+{r%Y?ydN{
z7VqD0vwCc7mo56z-}-(&WbJq2lMFfC6bgMH7LB<Xeq)r;_WB%el}wZHMbZ`4zUC_G
zXs-S$nFMmOG+$i!l~_Suls_A!2<xCr32%*wFhL$Kk24xK+(sSC`K^1zVr}3aPINxT
z#Y~Nv14ehEjQ$i$rC=t;M)0ycrPf>XhWF>GH7(j#f=POklb<IXYc^9kbEx)H(fcMt
z!U|TOAU<u+HO?J(DZ*#W<Df1*B3JJ%-elzD(fdqw=ht~HF0ad3eZ-@4>r2busIr=W
z#M-%y+OdDjkZC5Z){cou;ygy(L)Z77e|y{Mmu2@Xs;<8~u+37P&ZI}4nmONtojB>#
zoL*;p;==`$^!19k<_?7lX55+h$*;D(_oUbq_w6C4Tp2bdUl_Jvd_TXqz6YC*N<Tk*
z!i2?hL+>5TdL$Uy;={A<5kj@)Wn_J-i>73yfS2DqU74G-v($db<nu>QJ&mG$qDMH}
z7FIuKS9UGq^}|=ar@ETEwa97Q<><mGch7HGHAcJPdEDaJC6yO;jcUKZWEPohZGl5c
zLh^lZP_l+pm%o~h&HJnA{%ShUznbp<0!{aM%}^%9*gS<uA>;EDa)nI9lX7Gdp-d(a
z@&!_ngeMe8d2E3|B;bg60ue6Y@;M5b5a-A-DWA=gh)BEodvi5uSATDg*5v@n6kx&g
z*-{=KV=K4<iB!nL*fKUpCR1R1@@2?>VR`*114v^0N0X}kIX_Gms!6IY3VPoSEc5of
z50EmX`&8spFw5__d^e+-24A9EsQVHf;~15!hpPKnX+wkQ>8`WO-NAxz_vd_-R_#N@
zGN|pa3`()y2si59W9N(hOL)BfODrxF_^L6MF{8!kPAA*YX|(^m1<rxB1)PIHz7ZSJ
zstw6UJpIrA4iJ(sOJfrfXDY?msAW1GxzMDDetr3s9pko|elSgQKKpF<Zp}+hKZl*%
z2c-w+?mV6I=GpPnrrRZby7>*C@4n#4B$=7rBa?*Jr$%|SADMf<op)U8)#sMj^ya6`
zqxn3sw2oDmuE|=yFlLj_$*60t)wF*Wm$&_$Y#{y1jO4eMHk5Q)Qn|4B@*2MP@wzgl
zwE51!gSAJC7L721ilfy#U&OYv>U_psw4cSCsd<&fpODpb$K9-nA(_i%mGjx9ifI<l
zj~6ntug4a=k4ej;Vj@MKee#K0=Z9R&zYwtK@u6#H0@Ca#TMv)U4xW(JGJnpBam8oQ
zu6N<(bMEvRx}m8Z*gn9r2HOYN*kJqoWiWM(_eZ`$?a%qkVE>lEK2JFuTq5W5xk7~y
z$GA90C=+mm3XX`7a5-!Y=WsY84#AP&LYWL>vqgMDAri>g5}All@C6)Pu1iz-p5)Y|
zsW@Rg9*@VD$`ouK+?L1T$v6@&rjYX_QZ7$GhH<{1V(QQNS1G0+8UO7Q%vYfw-30UO
z=W(AO&oN*5sQ#SrE@8etK4G1_IYREwLO;V`H98f`pjI0~KQ7_+4dXt&SCq?d?H$}{
zXKg+9-=Xs1ON9T?xDSVn`}q3!K-`BT<bIC({9v|8S&^H#Caa%p$?ATiFIxs&TsyV5
z%*QqJRVM;F(V3gGtWMi2Lm8KP8a3-Q-?ZT2zH>9?KlVL4e%wh)pq<Z6&8av|C+;=m
z$K2E-{7B^BL)IpzW9{u?kCq%VZPLSIqRH#1-;AV;bA32J=2E4gUuB%LC~3~Zs8Y-P
zFCr=5lcoRtkreno)qgdTqWi|xe=(9$%evCd*H}ZB@?Pyn9a%MIW~F*P&+oK-(qO5L
zX4ssfDL(lxCmp9e-f~&lQ)cmxb&lkTb^gYdR2<zXnq~IRgnG5ZJNn5|<;obgN4$+s
zgDex1IS2MOc7J;E<B*gE0n-l?tK@4Qv+ky3{VZ1TS2X{MrXfU0qy7&BIse}l&Ciw&
zUnC;re4bP;=g4`4K!gbdd^yhN5fXuf!{$i^5<;Tj;vzm*AY$VZ5nG{P3#C$wFT~^m
zwp2no*WXj$q;vf}wXJuq*=!yc7vgfhTp?FT_<VxR=Mo$lE|74AQu1BoZ=LHOPH#VQ
zt}Fkr?eiPUUSB!aHD7vv^ArF22VZ)xG5@}FuGuy3<4gquXA+h{P0|}UH1YGh%j>Sl
z+tEy3*pT`D&Q~Gy|GbSuu5JC#de-b;u5s-UoZwy?5_4pI^yJl@6RZ8UJF^%QU)K*m
z@*%6_<(e1bu~WPT-z_k9h&i>&{eFL@TgUCvIm0h5&L4gwJkiN$RmhfHnL{jg?P{a?
zg_j&lKV7<UZ2CySnn#U%g0By0b#|A>QqS8fwyqYRpS@&r<BGX4Xu#9~)m@zf?B7OB
zE|3`KX1~~8v9V$*J7&|%p7;ATI5DANK@L49;3dy}#;t(3>&dr11O#qe)!k%8cFu;4
zt~<KK`96EIVto#_@l%)X6PkAJX)`oq-U-drbGDt0%_fAL$#!J!wp)1D`RJ#ScPw{~
zT*^8S)$EPN#-@#5(*7|vW1YD{Yb|`umIW-_z9YA|kTbG*=5N0hR67pvy*Sxd>_x87
z42WtrT~()(>>+;rL6rT4vBSKI$9GPv*j>`nu54YTCb<RMT9h8uVU+6&-zeUrtUd3t
z*GbH{OV&7b8FjGa9q(q+m9k|Wb{y)+7@fw~x<y=#HMi-_+w~&g`sPMQHkkXjXfxY$
zN8cTr&O6<l9U10VuOxczvzOR~ws`r(QS)z&yLxp-Tb}jO$Y+%aAqoE8b$iwiF3MhG
zd?3f#&a*+|1&J>TC(T}{vM%%<RF&1@a92yG?w4NL_};nE@zsMdIqYe5s>1x<x0+Wy
z-ep_h6{hc!(j{Bx^t#?)Sm=UDy?wIMm&|W+LACn2`9Z<3$F!*p?j%PhJ@J}&pkI$Z
zi>@f*H}C{^*qeVArT8na-@c6eS6=_h>;I&@el~?<QjSa}l?wP62Pb$0hI51pp<K=p
zN!T2PNKSAC3WbcrBe)zHj&r#(Lc$ivxqJyvBE@A=p6<ho-&2#df<7FMM1d20i2%nX
zA_*pyvW0xE6vyT8VMl`Z<M)dFq4@3ZzgOJYNEh@m6uL2nk1&RX`m@OTHt>zb-oC$H
zC_tH8qRDrQU3yHaStxi5hD_E!x`l!PU%uJ&;~<U+xiHY%x5jq4PQfxLSFjAq0G;hp
z7cHU2EP5I{)ag8Zcz<Hqv=OzvR?Oqelo)f&6mnl!)^xxMw<Kc$bec8!7^mL8WT=IQ
ziLlR~N94lKn$IKt+xz_>e&S_SU2t=C@xVdrqCYSix+XtcaBYa$*#J@Yoh}chXDhL7
z)<YlLcg)0JKMKBdxYxyXZ=9Vzr0wUdEEXiGp44}{w#%uFP}a)mb+Be&(S^hEiB_9}
zwzTu;6rDPrxARHc5B14t{g<!m8h`sPFIiTBjMgtc+$3Vs!Y-$IvX66J4~y6Ic-gf_
zZ93AT5GJQ$DP7j?ALf4cb$9BjS9aZBMtrEabH-%F>Pfd`CxiD)Z(zX_+qz>f>u0&Q
zU%Y8j|1DdoSpEKY7Y)rU+kNfbe%_*`K^yu%%6L-zI%D=e>fP>JCSm-eltGW16&;Ir
zUOK&LtLIhZSK)wd48eL}B}1_O@6i8WJ@lV7DuHtq3YkRClVTW~C*a^1#+OMXT#f{1
z;}SMoE+j+(3{!9wQjts{<gpbPTOz=O5(!Vv<Ma8XbNM}%{;W|YT#U_^O4x*gFB8bv
zn4F7o1q6@a^CWx`M~Hz&H7Et}5=nib|M&tE1+fuAOcSUzsL@2bD^%)aiCV6VuPH?N
z1WKGCL>`~egV?4BW$E7YHq<br>#KP|0ZkecR#TyDG8HQGQK6I<jfD_a2)8kTN2oOt
zD1JzR8i5oFI^F6_MR`X>w>u*qK4^WFS!SPV)XXcfK?Z(vYpK8gYGO`iuZs^hwQ8x}
z7AIVk9=mnTljjSb72R7hAiC?ekz+KBF_y>7Zxps3*rFfb<JRE1v_<!u)iH`c?R}|U
z^hJl%Y{!{7B~1@?>=AqW{LFK4J6nv)<~JOy-5=06rr~`T&hxhoq%E2pzSeK=jHpVV
z6Z!o{jk$WMY_!|3?gzscU221>R1fc(ZF?8d)OQhYPnVmHy>i>n3C-GAES<5v@M<5Q
zQ!o3U<TTq{FydzaiAUzIh@Yo@`k__K;Dgb-5}(dY@tusNB7U>3Lt2Gx9J-?1<O0*3
zmp0~@FwW~@sqdx%s?vz|!*9)nDrka(gJY5ww<v!mSshlmV|3c2S;oyaF0$COCvf3Q
zt=+=5i?%<`%$`Z1%(U;`*`<^HGux!e`3Vb8t{GZh@2p^4&-=yI5tki|GXi%`ryh$6
zV7ET$@lvh`ZPV9wZc=Gm%?h7#)9%@67qIxv(|5Ri*t~68D}2?YHtR+_o<3{*#-xrK
zJA0OCT)C5`MY|<QBZED5^glj!vb)>K+s{XJZ76?#Tw=-4;15=WEFaPDdDrT8iw2Di
zI#^OvcSFPkyPylpTg6=nq}bHYlzQ_%)!BLMdb@ScL&n*Up0%=Gw_y1u_NPf%AIo0&
zz1)AH|G`T24$5@PqCK%U!|o{KrrA7rx#`xn_a8nqC(C)fr{0RIw>u;wM*YU8@K8_B
z{oNn!nySd-Zk3OkzBv5O<L*nEO}>11X<|`)Bq8Z!b7bz7Wy@pz(e5y{<J#uZN7_@g
zlFW%YlfBxcAG2!ZRJq|w=XH4|0~*&~(cGCHeT=ql_leb#f!9BcD%o!mV0OEBs|ek?
znQ<`P`EA?HH)og)^dy0}&|Es^z}Bk$_a;noHZPsZ46WP$Xz}(T#SQbKnik}@Ts3XB
z{af#Vs{tCH>*Kf;3F;ZHTgJJ$FO6x}<H3#)MX!M#QT7X@TaF$H^|A=sG`r~0W4GJ&
zh90?dc*LO<jt5WeseALq+fUY=_Ls^<A9x-6>^`#A?>=`W8urYM8}W)}S_S1gN5pT~
zyxD(+cJvM(UNB!=+0enZ!>g(0#ct|P$v(aXKB#qzRd#FZJ@>sb+V_mCIdyUWvkw2T
z*hl*hb)4{N)wm5+_wPyi&6%@X?AU{u&~k*;AnPcXe>$5KXYTGe?y>8gt#{@&r3}mK
z+B;pj?dTcSrOdt7x2IFz-f&&JH}mxH1CP!601PeICt9r?)AU`(=*i{7J4a=#x|)`p
zRq6k-=jld$b~zu~kQ<wuv8+pztn7Qt;aP`_t{my(bznG7bL-zI|9Fb9MefQ4)D9&P
zuI{w0xwh}v!#-B@8|=M%Yr6EJ>AFJSI;x~cXC3z5G)gFRVui+^Ycwe><4nr-CBA4y
z+QRNz-M0JI2N>w@?V6r@vuX7p%O0+eGd>)AkkF*xl1Il^ZCF)pfr~R{yDsz}zBWJW
zg`|GP+f?7B&yHPwao?jbt68hfd)1YP2hN)RzM$vpbxroYF1}YUJLkw`=HXd3tKW8C
zJ)FLs<K8?>b#v8)VfL*a?irqzYU$;3@|y9*6UPINEWVc;z4=XNH+DCuRjP@T8cM15
z)agO;*b@b@jYvfZH5f_N25J<MALwRMSqL%x7zjBVMI{m%D9P(=(nlMYpwRTAK_y_a
zrYczjnF_T?dv*;C^bhUYJp>9pswHw|q6QucbzE)q4~3%*S<A7C0q2cS6`9Opfe=bo
zs)<-aqe)P!6v|k_0Pib(S2#k^Xj>BA>gwuhP`p54sQPP;swj<h#bKeqs_uP$1{6dl
z^*P|ggleozL>5<tviD>`WGFuj^)zWv!;vg0OSRX3wXgwPV<?PVtJ*Ks4gLYOM`^B5
zDAxsc&ai_LzYLNn;mVl0aHbCI%wY$_gAWrrBdDaz5@B2(PA(SHzx)Z5G?5buNn)&)
ztmz6BF*WgV2{i?P*Xs!a$Mq<PZI4hsm8^kG)^mnp$k0f&CJ9AFJ6R574NMjaVp~GF
zV@F38kgkEQ-Hohe46~fBeDUXk(X6lP<^p<7LJY$=5}^#^!dL3~QURN<;L7>9fFt1Y
zc>*Z#>`V>rLNY{q?>HzG9oz+QG)_pA#wuk{92C%Tm#O07662LxB|&ltY_WRG;24X7
z*bPXytxymf%H*;f9bp)OU&!GGE(3ODp(+^TFaA%~c&@3F3M40IbNvVyeFldlF)%)q
zI)=)_U=tXs5`$%6Xm=vpx&qcFsET|l9d1jO(}uFf3@F4(b^FmZRJevL97{r;tWA(9
zYOIqKJ?3ys(czm%K{m+nwTs%{kTN054I3jgixk-`3Msr4vM%;eT@h&DHnJ`=)E_3r
z0r>v`0QdlS(B^yhg;K3jwNf5MB&gKdno`J1^`HS^^7U;XjG+zc#n1+k)>nl^%cuw~
z)m31I;h@04Ls?m<CJP14?RC;iG1TmCfDlL<N!W%+_jL{@gecBrdFd)B01hS^lR-+c
zseVM62F^uH78FZ{a^L!j$wp9&+Y!#Wz&TglKM<1zWEcVROD9J^|9=oj3IIv{DUe10
zB&~~Y@c$&7RDhHAQ#g%DID@<U{7=G3GfXHy1=WNccW@d2EmC|2B`Rex8bS+V4xGM8
z=NphkykU-j4TS2xUIL)Hyg_Ke>G0NHQ(FSY8^L{`aB+1O6uGa?qLY$itS_iMnu3tB
zMm19qV!&qo%^4e1okc<Ys8CwCni4}Lp`tJmqWpsp1=Jsu)o?;ExgeO1C~_)7%@9Hg
zDwLY8W>i(1AWKxur1YjDCL@B1n5aJ$F}0CY#286MNJ2$SniT#=P!W?F1s6n95n}{Y
zK?Vr|ks<4T_qmjEl2m(8#hm5n*li$mP*M@ok)_kkMW%WkE!ST`=zl9f0LkD}G~CTh
z_wO0zy5r$-00Swc#;BS}GeOmiI;aXwryyrE4R(_$Uzi*%0bLt}aN{?-=VgYywuj$#
zu!9=dNJjl)mW`z%XVjO9oQ=qO*eq17Z&{;iL&153P<1uS(J`bIC5R0~r;<d^q#|-q
z5Q?XgwV+ATCs7efq3TqYqpnsorPdITYRoVU;8{*hX@AB*Gd-o=87TENDM%s>fk8-z
zG0A`yjGRf$$Y~;}h?ziAi=^8m7|jVl!7qnvYD)Wag8}tqDsr|YQRhW9)j0WsJ*WAK
zMwwLPY@)yBGpT+-=ldv#4J=C~?F$1FgRKGWoP>k~pc*K4<L^)jm>8%BObiVBe?%#g
zNF;qeQ>BJsfdYR5PneZKSig@agF&Z*FoI12xWFX%9sVaJ=CcTZNRnm&^()@CL)Eyk
z*UUQc%lY1vAof3~I**D>QL-{#s!DO^cyKXiq?IMO$7!OP=}tBmlLOZt$2>UX9}oLh
zk^Ec!)sG0XM%cfg>aVz%#EwL^0jM5>uBn-aDK(5~{6lusN$YPj<9CFa4Qd{Q!VK&i
zRZ>E{r-o1`5o&{fA=PViI7(3v`z%7}Fhb}#LX@KjF|HXQbR1OI3D}*~E3?xGF}=>f
znR8&)orm2KgcvL72tjRkGkB7_?n(G5&{9<yOH(F|f_X!pC?`BMgci!q*Vw)gJb(?3
z&2=CnQ&dGt#BJq=Q(#w{s1xJkmGMzvT+`t$fJ0)uQWonOr;;b?d?uKPU_O8ij*U<d
zn@YL@Fzo<yk`^lfNmFPOKHowXt0dyV$@?vj4JJK!3(-?1iBxJdiA0TmVlV*V2*iij
z83phrFV_-r39%AwjeGaqtHD+zuhz(jgvif;!S>w_;0NfTF^ubXuLB;4Wor|@;(;vk
z&g6@DC<_I#ujzT<975;<LNMASFRU~|=opN$jweVL7TAJ%65u+85YrJDgK`#r0#BgJ
zuq%Pxbsgtam%@)S*j<5n>I|6UpS?j5#^rN(7?&*q0;^Stz$BguWvo`mvA^R?0|g8{
z)q1Y@oqn~Sm=LSfXn)&%2U^DyT2F~wuGSd5C@(!x!9g&z!DRA6L2O_{(Df`w$7<3)
z0i&K_aHU8!N!9%ux|1#+X|sLNmx0K>sn9nS`oiSLU@;Jt?8_ispwE3-dLV%`ga-UN
z;F>XdC?No1XahQ#`t#E$a6X9bL7HWjD2N@U_o-;$La-`n2z{U-^pS?pCmKRkG=!=F
zWxCE^q0$ke(GjB45i+9d1n?OR{eSFz349yX@&BykL+jYNZy=H5KoW=@+p!%dgd^l~
zLhK|YAsp=wWNB@S$dZucIHAyl`znP{D1;IU6dLZcrG*|)Zs@-SN;!H_deN36q!bD*
zVE;egw{KVPtyim+VkZ!yPqG^Cu4djb^Jd<>dGo-rs+YN%F(4|Kuugziq68HwMnxXE
z1xBM#fdMT>flV=ddNB&+Vw`KX#t_|o#M^zsgp~zsoB@<avnW!tC^qF$F^)6Uj`<(s
zxNtmG84aY);b!~S(DKCEjjrS{zBY0A%O0W#hfnqpZR2pzL)6V-46kQ#IP4)hox?E?
z(P9pt>LEIo!=h+CH;L$L-saj68%u)h+RCo`Q_uB8KO98#;2@%h1`+*e5YdkZ5zJMl
zaK`C_40C6}Ucw~!mwXU^jvM$;PA?E)Y*Ah!QeGxfULnFTgW-gJON7yeFn~QzM6VHH
ztby%JTNF}WC!#+Q!K!8x?t_WwuS9gULbO#Ox<(=TmO^x`!Uj4hKKiyoa7NJc#Y8tM
zL@yQ-eMcd>Ng=vfffT|2(nH@>h_)+COz2ic=k(hYqB|6#I~Ah46r#HoqI(pgdljPl
z6jJV2h`y%~-L4Qlpb-5~A$m|DdPpJqkwWxih3E$g(XWb$9#)7RQHXw~5Iw38J)w~D
zm_qbIG10G!3Hq6^B=eL)^t3|sj+bbMm*`zD(Pkog&r7ttfP6!VJhfn?nYh&9Qjbdm
z<Zu>|TG$9^HZF$}`G!s*I*dr&bU5BR0%w@4ROm<|wU!N7^N7?@M-ee!;(UlTCZXW8
z1wgS7`e8AC+JwszT$bW;G?DLng_u_MsKv{epcA#=$#Ps);Ifk6UX4H2;Bp*RsS1d`
zj6Y5$QhURIo>54pXBAR=PsN`JT)J`DfHG_ZbQ&&S!R2&Z&d`UJ-hX&WrA@f=Pe5<t
z@*Xa4c`^17odXQ#;stgR%LQl(2;xRqgI+jdim*_oJ7VBHREDDwr=nR7AyPxj3P{BX
zkj&HDj6Yfm$Ty70GYuN>d?GXB@`?f~hqtH(hO|DJEvII@^;KL<FDr7kmeUmY@sf#P
zG{9V?!#e}XQ@gZ8Af)*h=pNK7xh#6n#q2+1GW}N$vPsW!SF;P*WJbfwL~vTUkxgZb
zLL|s0e6xAUrXZJ!jXWw@<dN=IND<``viC!U6st@^9x)DBWzvwxClpyGF+O0N;4-O*
zGRfGZR@e65oT-05ots$tPF_t+GSBf+S~5MhlBs$JNGw&WOy(hpzUJe6UPBn!ANKMH
z^TaBT%>T?Bqr)=E<7g(2R#8+jEUK7!xDdwUG50un$%0iGr4okPu;T;KkhY;}LCY%t
zqCjUjvXRMZD4B`|Qk%S((n1}k)udG<vna}a!YC-n{uD;W2?HUFURz;gDq*je$Bg<>
zmq$rIwm=k_lI%};)K#S}evusPQ^7W6b}4kAOZ}INZ3_LTz%GT}gKheAuK!?v+S#VC
z^<cMJZBs%2?TS6B81^XFe|>CHJCTDO3jGHg6#CE5c~17IF%)x&gGtKf#JQ=zzE&wS
zKkX$B)0hF0IA)j*luas{qZ!rTMz`juWQMXq?*uH~x5SPOCBxBxXp`ESqp~Ghw01FO
zq0oGuwTlI_bepN_WV<s+bQ$4#J-cpZ*Q?p}7IwV{&PdqWx{4Ikp@Mm%D3=3hmtxMy
z=8Ie|mHv`TK4(;NoG-#YHRp@4OEG7(+NO5%McAsMZJJ@8s0i~!6>6}bCW$`y8tlap
zo`(Sv#~kN}ur%x6!o}T85%a=~g2?R9jCyZOdS1u`(HI7ed7)q|LZ%K{wEUR)3;i%A
zS1<Q3TRwl@GJo@uqmNm>ddbo3?y7~y9J}xsHYY@oiY}eZKxM%>f&`0#-R*6z4H85x
z$U+!`ETkgHyalFc>S8L`r@H03PdNKHa|T*CMJG<b3MWL+RybAVvmu%8<dMx3U1>?@
zNunT}R=H%tY7tJ|6_bP5on`7oU5Iqe2yY+$_tAIEPr94*9rMEoc4)upJByxk<A*Wz
z9CTbRei)Z_D10yu`i?D}*Xw}`FXrbO^}&;FD_B1G)j#X91w*{t^u^$hH@)Nok3z`s
zok;_-C_iTnD9ro}Q#9=(wMf{=01Kn6Vk`Vri7upXO=ePdrO~dS`DO;ice*qK^uX23
z{yTX?_c960wlX0pv(K*tLeA_Z5Gz=pO9@n0z(!p$P_ic)h=TYqJCa$H^30EUJN*^`
z^)HGg{PVR$sx_AKH?3a1LJ;W1-sW0S?;-IW{_A?rewA>a?73fs$fW&*l?PMnF<)Ch
z&hp?|v6nVz!rdTk`K&nDX*qQzWNc;s$e3Y7GCjv!ErK{;dgqPCJ2R;>Q3gfPJk~TK
zb@NeHVV{2^5)MWzw(p`tvyU3HTg-!TX<f{-6C=ZsX<5iK#mQJZ=r5-URFthash-^+
zOBq+x|KZh5!+-K`%)4}*ly$A0S(5`GRq&f2tO3#_N>{E@W!;(ux0M)alL&NoVCxVO
zJ%l|VeACz+9L83q+c}H{{JS`eIIDX(j5sT74Z#O-R>p4;opnFI50ZCt7{P3}aTq~_
zw{jT4YQ}x+9=nI%N9dq|6WdK5;P;0M_(vc#UM~XMk!F+=0g}f1h+?~s{}!9fjCZhI
z<;VO!Rze=-@C4x<#DN>XokT>B@OLVR=ot=Uv)ZpYe2{<#(L^XWJ`<Lqoij%hWr!k@
zJi_qYB8mu}Ta*h?L0DBmXd_lp5Z-7PselL~L=Ro2q-VugnZc^dRZ4nQ29ZLD4ze4p
zjL0C%?ANrtvC4vh4pBiEfDnCvNFGEW2sXFr;YBo%5pe(yE<CzeX@S?a|J1l@AJL;8
zn8%<a1@RmUj$ez5C3wd<T89l9EFxzYMvf9@>#z~p-MS(hIxwD$T9Amv{Y|l`wlNNK
zHV|B=C6WjO7-G2zwO$fWXgv1x4v(?SpSE`mJ9js6uDO1Zfpe8ioa>fj!L2^(G2_^<
zZOD#uAql&QdkgGUW??^b@Be|1Pr@a=;OBymGqJE4)tPzGpeW74n2i<2)>S3Cz@a*1
z;l2~a<vhmB!fcL(nTh7)?R$Qd&6`(q9c96@#yXlEukI#3Ewty;;(q4SJ;0qJV_5?l
z87G2$%fiuQD$t$?bXEmponT{iiE+n<mD3OJ@`w%uV?fm%2m6NA0W%7U?Af)TpV@Vf
z535D%*BK1SK^tx~<0P^UtoMG7jeuPlSTh*{yJ>JOw&zyg-o&lY@WrdU!>N>JH9aw$
z8jmp8s;Ta9XFK>hE5m+wAHzz!Fm@Be`s^82{Q@zpZq;sZ#igI;xz*=*SXJ%0wB(D%
zrGrxXu<MFf@836~?uik##GY3N?RC6*e5`AASF2_*Q<(|CAHf6|v@zC|>T1<ovFzRZ
zSawga>>zuVE&T$qEHeTIx5r}b5iJl8Ctb1YZTr}DPq1sLJ-e2D(b!dOZ;yARTyg5H
z`#5z^aB7)7rw;z2ajK6Q0adM9RyV-DA$5;1>R@|D9r8tERCQy@t;6b`eM9P=7*dDW
zbL!A98mA7?ZPoSRkQQ@g0_<~L?Gb(*YR|93zG(b9s6Ckqq{2a0y!ybtv2{<3t;6hj
zb@&&JS4Zh%YgbZB1Y^;Z7Iint+UIcHBV0S&o@+;Z(YSVav?CDgjL*!);o3$<tl+f@
zDMscD#H+GUN#qhMLbA0HNZ376itV!T`>F}u)tl&Ii@)YyU!c$#Gr}uVAi{2pNE~S|
z7^C(k!LZ@NqR#YU1Ne~t?G%P6F*b~kzLB$gWuVt*iCah6bL-f>oLfu6!APttWSYg`
zSmB;)uD#DRne|Or*q&wNvf0bR6F*B_JJz0S$L&pA%SOkxKu~Lq#nw3m*@Aa{ZLPsj
zRaDdWKw&l5{HbNEhE*UYb<sIi=iYrBJ758|<Lo(h{NBW|7ES{frX#>h4OYgOn{|9O
zUjFeutH9h3wi|8O@%G%h|6b0mWx-fyyfUIiQ-P{PS9<e;bUQ2W8d>!o{T%PI$#F;6
zuG$7lKkjGT-=23T>`lBY&788?21Apbsd!aqARMU@=4cq5`#iCX;QKrXdt~&TV9&w+
zy@`V@oCa<zYLBfKhh6@+>+u$IvA(mgz1xETn_v&_YV_N4>ZE?=)IG4PF{crBNMcrF
zRa-I{uM$`oENy*Y;rd6ufOD~2Io3$S($85BCfRdt#ei{cI>E|r+c$3EHZWvaARev?
zwN{4XlIu&p?Rvz0X5WZw&dxIJ92+41t+3_ad=D6Km$+jOuy9Vp@K7*!N{eW0pLs0N
z&Sr4T(6v6Xh{mtYfw->$@i}vfnaNhI>1KHH4s)vZ85xKVv}I)VpuK4z&WVf1Xd6<A
zK(eY`OT`22S~9L_>2(S)bEX$8JPr4QZv5`!>D@dyA7szdMPFE+9vlfryEasXy4Gn`
zT1fY-ft4-yEgU?I9SqyU&K*T0gn}$+ICxWQO;zT0NGNiO;+M(pa4OhQ83;xywP-34
z)?6R@iA-w@L%1^@(N68sy4?TPNGcc7*5ja2BwIuNx;mct3}?d`a0e09@iS~$>bVPu
z%J^|&3iYtOckD3Rwewogg2f@NEf|ZoIsFFs*>9G~zd@opc8+O0ioA2kb9VwS624EM
z=Grpq!6~w=<#Bp7PA^4LI~5u1aGG<Es^D}yoI$E03tkOQ>nq18l;ucfSMCc(Q(7Xb
zrBDDAHqaGGA%h(VhvTUR-jO4DqP<J`F_Xv@cRMc(Zr#D*0wUVMVI<%y=O@u40pDBv
zKI(NBhmnBqZVn>>-{Txc0zMoif)Ba}XCUK)hPac%NWk|LhrxOVjN%(G*utQNM0Q4*
zk$~?V{#zvAyNAOgksOf2NWk|bhrysY_7Wd4Dc+w)5M3%I(Uo)HSdU7v9I+`S$IEiW
zX2#@rNTP=Xc}Sus9I?sL$N!m#{=$zjGE&Kl3G=K+Y~lz`;~1kG6jGcL=^<I(Ej(Es
zj?m5JI6oZUX+6#eSw5i&exeZllqc7NRfHopkt7fa_8#X+_K+;lFx`;^@DHRX-ead|
z?$QC87|A^8V={O3gv@lBz2hK)mRx%llRb%7Qn+;CvK|-9xtY>wnJgLKnMA%Kh3G82
zeKwJLWTv!c?2Jt3Oz?%4vrvp&o-9`%v)5~hWuufnbvF01oWam1=@~}LN<Lc7@dtuI
zEuQjg$yA^<5>9q#q3H<?Cv}IWcSTbPr2Pv)9TkS7@vamz;93Krlfv=!4Y!-odpN1y
zoAXKaK1ykc&Tupkfe8))LQXvh0|Ng_&cvCb7+5{*AbGHh*Y2eEbm>sDQD)6TNMIO_
zt`9`Qp*#Ams2HD6Tom;RUQ~9pIy(||j#<=#>_r`I7L|9xlKIUm);H|vx3cOvlCL?7
zsOKzp+D+EOr;sPuT0<N%j1FP7EWk-y!^~P1X0PQ0Yc1C-Sm6g_v4oLYxnfx7yUIj*
zZ6|q%{daTJmQmXq6;h!0#C}DsF~*g!3Y+yWG^<{ez3SE0sxN4ozhZqu<@`uki>CbX
zgw__`;16M<9!P~_(JF|14;*~L=dFHahXQ(EA@=`@VZ{FD(ooh0GMlAHW{cwNZ8O5!
zHcO6Pcvrtw)yl(WL5oq)nPw;YvKMr$wV>g6QVaU$HQhb%rS+k-wPtD6?4=!NU)qJM
zRy^Ks#l;ES1}B&etD3q{G0R($y}W%CQ6LiWr#b>De`g>S?9h_Dx#O`&IJoiIeyhW;
ziqmy?Xb{&pP&Os3^u~!~P&$LM*P_O3b*6N*^;%+Msv{h2_iK@)=8wiw{$Q*Vf43!K
zo&II>TAuE=nxH4Fy3;gOP@_R+f0SmbNpV{&(H%&HayJd`9MF2CZGcj<5@l{GVQ&RI
z)o+DG`fM~jQdh$gfEY0LDKpDC*iAX7$cz(*xs^)#yThpte`_G*PbPwXm|DoYY}#G@
zR}EwUNAbVMCEBdUV6z%S`lA}5WQtXT9kywhkNsB-jP^g_J%L_<T?PwZVHQ5d&^cz!
zhL|-Q>ZWGpW(OtOf_06vt91$Qh{Y=-;m&aCu$tYVw1%=Om<1o^rr;Tj%l@<3Gpg8O
zDDA~&X@|QhZ69l(X~~Lr`b}D484i%)GaQvo+ruOBs_c@Z7v9rvmCe{MBT&?|=`+$z
zQ8OAp_YQn{N20uG<7bqc@@6)Fp6s^*3+7MS03Kyy{)~20;@k|N=lZP{84aM(OmYPS
zh^?i%sY>ovP)5f#b1SDd#<k=I?vUNer$q3F-pFD2Lk$@I(3|;v_(N~t@c(*yd$)7=
z<KEuhTRHqmZ*T7{9R9Sox7YAR!slq<j201X<<8$N3aN#cE985#kVqr)T|I~B1BF!j
zk3wqghk!m($OnHL^9GNCH~7D}{Xblu0W*KBkXrJILaa$Y<=;IDshfLoIo?BRZKXo$
z+$!Llfw!v_Qb*P(<ok!0o&Rk5j&IDfV4i_0*ibFi!93hxX?VBuEuj}BEEs^M8`>RC
zXb~-$G)j1Lo^4ow5_$)qgd>t0qrr|uEE?-F3wcAHg)AJXW*pKHOC{qmv!A!SFQ6ib
zh!3KPG8PU%Lk^DzPp#~VM`D4H(b>1UFQ!K<CPs~cD&|NOGZgENiUqyJeL=+`$A=*e
z1uY(c_8bw5MmAP<1QMa{Ktiiz<1=gktc&G1H2N^yqMStoP|p23yCSKuUcSnH8j#q!
zD++8G&P)1ZI4|RaWo5E65Q$*b&0G*n1iJAzG!j<J@WHqBw65OXUUOj;3&PPr%I(jL
zb>wh7RoNMcwnsFmTd2~r`0^uE=~W!Y(&EJ&#?s<9IE<ym?{OH*i6?Rx%Zb-<n4Q(d
zVJrh~;;^{HH`x!mnPZoQB|dgKw9OKqf^)iXK3Bd=e81yMd|2uemiX8yE!HJIECXg*
z;=}n{ID1Q2;$v>+?<l0)q!8V#5PerMUC!2hCT8%`oeI%imP6MuTfa}yPjf+V6XKq+
z-~Wd~ls?WW#u6Wv{;+&#oS%gyKAgEFF7d%+!IB`B0I@8IB|t3u;jAqz`N1LmFE5!V
zI@S_92@mdZ93$CV$N$E$(fB*RW25`?1fv!#S1iXx3g}ynJ8N*UEEd`wzme;qnrw-1
zr<Z(?AFN&J>xAaKfX>6c3y9QB2o!K}^3mkJON6R^mRGi&E*X!kEm^H4Q~qQ)r6u8u
zDZrnWV3VuNBR11n2s~_A9y3clgsPt<Q4vm}Q+`84za`pJlBi_b@s&jqmE9<bigC8;
z07+toGn(=V+uGYD(IPw$s`QynaHpsLVvG8@F4n{GThJ0)yZGYWrx-<Xq<!L;RWT~Y
z3AoUH{jC)<96*)Nd1-s6EE;1WJ0>u1#b_KG1OYZ+i)@>s_zg)E)4EaDmwKr2UaTRl
zwyI+|nqaH$Rt-6jBAMZot$Z@R?VTdYMA4AT{6&%<<H1DI{<IHMB)=z#q>*@NmqbxP
z6e?2D{fdZQz_HExvB}Vm$}2>K2%$Zt9dj{K`BafD@)|~}H6qlQE@G-^Jrf?&Lvgz3
zG*!f6GFD)Xh*3UuRGJG&ML^>~Xvhp_h~;xSQ?BBe-jAD(Fa1o-8x0{$pP>tBGBb0y
zm(8Kau4p-_C3e!HKr*!&QK8I`g-Kg{?24AkKqLZVcjU1PRxODJ{B5y>e_kY_Pc$>B
z(Gzz~X4#SKIk<Xqky%A>^(ctu=B^&)YK3U4LQ*t$23HS#M<EhjJsD(Hv71;L?j0P7
zz8hqg#j+T(%6O$8^N{3!B9&H%eF!~j@iM}a8M%{B4?Am}1%apK(^)Ft@{%u9NOH{g
zSKy^F0>9mOb2ehZx~LRCE5l_NLQsZdfdkPee&)?F1d<Ji%P=Z3OU1n)>N7}lL#Nuj
zYL!10^{-tFF*D-0uCwvs<lwu>MYQ&*Lx%~Xk<nIAhswXaWQtf{b?77Ajq0O(-Kh4b
zY2~{idT-K*8Dvk=h!$l9r8el;6)pZ2E!7=MtTPo}i<ZjUm2=PTQGCivl#_JYZez-0
zjl-?tv-PO%3B@N!C)PPk=~VSiPIVZ|cV(wjhBHI*IYT@*ab!yoX&tzWHfr`Y4Hw&<
zCOT=sx4qQY(1Zw9H3t&w{E)+7EE?5<*esFsr(%9>Lom`6()6%u(>ApTaX!j*5GYo{
zv|Y4%le=w){jnzbnQ*;kFjSr7b$3lJB|~)}eLN%VcdqAil6r13s|o_^Y_u}_wC^s(
z0bPPLR4AJxnBEtQyg_2k#HGwqWh&N4Wtywrv<3+dF?XQrd)VW#L@L=t#KHmR@<0j1
zFdWWd#4s2zVi*h<F$@NbD8ohk{nHepxzt=cg5|J=4TrFcBB%isml8G`>Fph^Z~E?0
zy=*}j8@mhE&TFYTJeS`Vn7=Jz;VQK`{kqWd>zO(I8k<>FR&JekT~5C)w*0z&Q4aM+
z%m~{s&&UtbyRxP-81KU7ah6{|?_KQa54R(r1s}}Ijqg8GbM4q7tf&{T>!Kp#2nl?X
zGO38DqKK3sMWhTZBITwcqMM6|<`t1Lzli9EMWoV$xIBsrf;K5x#G+Z0F8<xkzc=#l
z)A8mRxSWT}`M6ww3)-UiB0wwwz=eQVj(|TDl1dAT$TwXfT3AG?@?AXJj>{dm+=<Iw
zxZI5kOAo-CLrM>z$LHh|*`sHOSfDT-rXTRg8*sl7<%8b1gx^PUfEzfBXr8k<EJpKS
zQ~xRaKHJpKVaSOAV^jYcet!&M^S<77NcwOFhsP1o0~|)=&J`SnOXWfi!^LwYhbIWp
zNE3<Z34R}L+VePEF5sU;L}7maK%tIPh_D5meWnu8W&E8(i0J<~Je`P|IV?sg%{U%y
zxJyw=xy-Lgh>dXNZhoDM$rXy8kO1zhOi@a(?$OqkD5X9YJY2dM2lKEDOcxd+lrp)U
z5y51QQhHQRK%f||XSk)UkxGb8LX?#lu>?03bFB2E3u_N9!m>OD{T82;w&CCNl9~=q
zQqsXmL#bC!W#S@22?C?a^Xjyx8My*z8ZKE4aM%aToX`W8zKTD~aWTEjWU~Qb1q_Xe
z<_0aki9Q^awv38yF$5RtYeMPJrU7z`?KNVXtH?rJu|o#=Lvj&W!?Ns0sm-uXtLBk?
zDpwocl6@pEL*7PKm2=@zPRlB@z?i||=z7-0lnsi^@0^xVQ92+^eycRay0CK-8{YLD
z*vy<yTkuR$n<1$<d;?LwHL$RW`lcOWBf%vO5{U3Z7z8i`pp=ZY9VmJzc!Z{2rs$!#
zP;Qx&nxM=av+7usnPbT9eF`b}E4nhvBoW3sjTmYRC1xnFClo!T_DO{l(dA?pDuQej
z$jT%tw_oziNC-{FdNkIhp}>Dl%+=>O;uxXKFb-f480%Y5poUU4)_xHNY^>MzmkTVz
z8f`wAymJ#p<^r=wV?X%82D2PMvJTBXz;|joz}Fc5GK=PLQ#9KG$rQ`Xvx~xbgM%>I
zF(m{Pj0qtHa}IQ@J(x95D>fIwcZ^@M`lIu)V#NU<7nNxExB5#6RePUSK1s@R6GEPi
zt3R#SbRw=@6+%HdN<zqnK&yVNGKJ6~Z<gOooVAMrdiG~{nh6auKmwXm2>zZFP&Qci
zqrsXXQX-!NkoUNNs!G48$P#IWnKohB*ywI@$;?x`DJ2YE`$RDidp+SDA}RW&4R#k;
zXf<S^GYw<bjbR6amj@k6#@%I#zE*1lA3{eO`_?iU#fAZxr*Z6BN9Ji9D~54w7{(Su
zRmo(i!rRl|deT0EVz<Qi_P?d-gBWghRFdB8Ge{dTG!j-aJ-LgLXjQY8v`EMa#u8_(
zo!7#WX)Rc_x@F#KEp*Cf+=Ar^VZ{(a+LaK(41U;bQ&%(9y)i`{sGXvQ^bUknW;kbk
z;%@Nf?8Xp^v^Ph|6iArK>B^L2T600WjkKDp$S`U#O5J&H5VMrYb&ABDo}9D4eimk!
zV#4MeBb{=YVdgBK1HGHOzcprtXo-=#K{oqyQmJ~F&1$!08>=FE9^#yQuEva#DM==v
zY|fCDQk!LsT1c)Q;fn|heQ_l1a@{Adx(jokypl?Jrdk+j?+F_9d6U<Iy+&TwIOtbF
zQz}0iM0R;k2HY3B3z`xO3w^YuVaXx~N{$OLeXLn0Z7D9s!1pTpVvU6lr@SZqttm&@
zOWu^vo8;|saua<<nRe(H2?q_0nO2c$b(pIX#CajQ(VBMQco53X{_8OSf^cOD;2kL8
zvIgAeGfnIxSp6YT+=-(+s1QA*P=D?YWr9DD)5J0M0ycIx2-ug2e2?5h{X1P`{u^79
z6ozQpbu%o}bkTayh#_Ex{{~??Lz-eyZDTx^@;4y^bs}rP4l_b65jv35;jNKaaGk%y
zK)0Y}Ra%hG*e8x|kMA*~=7ckicZ)c(0l6QSG{)MC<G9@<j&#YCJtK}8w}I;7Xb2&j
z7aEetY>j>uM`5D*fGK?G*ta4xtyj=b?EhUpV*ho0+0VK$m(4A^OE<b%*udr%({;K#
zbz^@E<2ZX^9KTN(+4k7J!kE@wP;LiUlv^^{;ZKC({_b$JHMW7dRpGEHUVY4(RjU^+
z$kkf4ll&`eq}D@^k0ADcpOoIKP@f2Z&%4STZ!e|$@9k2W#e&VOGG!?pW0BH8GNmQL
zNo%m2J2$GGOkOC31bDCykNwY({%d!;Z2CiUB2{glO&}IGjT_Cm$IMv6o6wJz?0)uQ
zS-u;@ayPC&`pj5>jN)h$Fvm0}Ghg$bIZovPbuFt`_=D_xyd?6PL}I}}#2-j#0e@6a
z!H|~rD{YmdA&yy<qmoA)>z*)Sku%y&A|a>!*?UY74gaY%)5)%7RM_8M7Wdl?vIr;7
z=BtYOS0)GC$&(fuJ1<Sk>imKN?6hM#eKZ8HfWA7C*#Au<iTw`|P9Y5uUC*wY+4X96
zy@g%xF|zmJ)F$fhIj9s!X9Un0!E*zc^j#8QWAVeHQF9IxfPWUDJfe>l^Hb|q%3K#d
z?EJI7O+*SZzT+Di-|>x%@A%Gh8FGTX81Ife)4NfnrbBviR;gyNKvAqK74O=GrI05~
zUAa#zZ%|AFcbCs%u!f&w^7(le%Zc`4Ibk<w*Uy<)>M`O_sWYsRcBvS*T_dqryfqM9
z=bwtKnDghYNH))FnU+@&-g%}Fr+v6gXMX<mq?>ijd}o|YAVnQ%>~s`^19mmbZGZ0t
z@!JdG=PIl1nI!DfvWu$ADVC0T!zC{en_T22NwPiM=L|+InF_Q<!pROTG(Dk30x2yt
z-Q3iLWz4kvdFbw$#Qy6OPIp^F25|f2XUYGwyH-y6<eWC9o&B|SvfN%8581m^qKjw(
z!TH0SK88G+mTFoh4&@%5wc&)exGRv*cSB-@qy%~OR%wa#S|Zm)lCb1_HKvMtT<H4a
ze6Rsgflje;yE;uYlD!YaZjVX!0yk(k2wcBLl<T`7cR}~bJFko-N>yJQ&fD9XdE29r
zLK>Mm(pt{2GIvSPGM%U}P(B&uT7~Sgv%3+roP9BwHa_mEt%+<QHff~$UBew{FL1jz
z;bp&N=GX;+)01)-dW{JjvpkuGOB<W+)(>H48WM$RV!4^4mYtChjYW}TR?KRPpt?SX
zEhNojzmW|N?0|E1O88+L$Sz-k^o3IjsYjh^r8#v`IFiy5{$si#8m6WC`skvg{DDv?
zp(T_4WlL7A_RsN8ld^PP*8lQP8BSCgDEX%h^6zGK)2;lQC#npvqGdkgfk<sP)mH9z
zSGxFq)wTT;lP-xqllonoXNvM)X)BAzFJH5I%~1<&1=2YA=>JULk3P@D>WGI$X5;K0
zT~qgSyk0JHxw~eaZsl^1#Ow9<tn(0C*;J?R1|xVkI%3na&Wu5`j$5AdHi88&P&3zd
zX^GNTA3q~L9qaTmpPeH8sr5wZQtXlm?5fpkSiA!<wVZA*RR``?soKSikh@^tI?57k
z$6a1)v?gpHgH+Q<>CF$c$LCTH`(odhdYWs$M5Kg>6pe`5h!o^_A5Nr<AX1Q38rh_g
ze{L-4XS^r)8RZj*l!-|8O+*I~Dbt9QgNc+%o-DGCh-MSf93ncDkk_5)FrN4Q2qHR?
zNSViTzb__ImJ-p?L{yDLn>9r01gvonBl0xxtnags>AMk|Z(08L6Nr4(U4&Q&_T7Oe
zVHoKO(J9EivJQU~5JiwHx0A^C4=+)a$oKm~q8O3yuLlyviPR&(6cdtsTaWL3g{8D-
z-vz+&^4Ul!&VF9Rzl-^|kAJKD8!75RW)P8Y#Uh-drT<+<<U9FIqQStoLP5e#^*EeU
zg%sT?GW)3$p21~5%qjLK@{Ju!bO7G=6EaY$$32G^pT`{{j~~tSERj0*=eXlxshC-9
z%lU7RzX@JKm5w1oud>fd0bVG;3j}yR(a?V%KYX4-L`M+~y>0lv0Al84;#nrZO9Z${
zfTt1-J?qJpEW7^{qM^UqiuC0~lZAIG1Q<`jts!lFB%DlDc50oiS^{ay!LtXk-=aQ*
zU$M^;cE7n6aUCVp!&1q6jO|&zp+p|c{k&`EwNzN%Qt=jI?ih>VEtY4UlMe^A<ReIw
zkIbJq(SVoX_Z&uc^0}-{h#h!v5QlN#K^2FQj@5u6hsHbTzJvKYs7t$!o~3**=l2)z
zB>niH`8xSK8<FOn!>1vIJBLq4N_JkhGl=MA4&O5Y<!`R-AVtAERZ&P$D?Ft5Vuu${
zDJiP=P*PMXBBi{rI}(W2RFhIZtgdlRW80kiz?_EaIf0rv)orTnT^}h^+X|X%@A1(E
zjjSX%LI733H~I|UXe)f9-uOnH@r@Ms_(pnrd?Ud=zRURcVE&C<{J0O+!?*Dt+yWSB
z@bQho3f~y8@QpzW-$;RvZ}1Vm5qyYmBniVeGT!1FS#R-u0RKkHd;E>WVfZdn>3R<p
zQLrNrj#l&Uno<?B0en#JLALLdNbgMW(JcxUQ*$j_g!`!2K!DF^6-&xvd_+5nNqM)J
zl#hL+6sklXAJO-G`aZT|j5<Cvl|n;ReD^4-kCaDzghN8r(q9#mN-q_YTJmzSzQy8|
zVp4~_T1@JY-xQOo{I;0X-roWGZ!!5^DJJ?Ke)2KyoQ%^p0=Tr|62zszhhr6dI<64z
zyy+!XDe;jS8ssCjw$w-JH^=f9#`{Pu+0RF6a)12p09-D|kG_G+6}Vi9OCui4@##l2
z9Eu;!^^xj147U%*Wgae9`^Yz>muRbxd`JTFE!?~omu)`sZ7wCc4u5<bm+Nu414!=l
zk<Y)AZK_hecjNZGxct&bs`4D5=Y6CWzo3_xe&r*z_eI?PwU1QqOSrs@7hb{TRXq4D
zF2BR&_qhB4m)Csy`20uy{U_Y~Gf4c!N9v{!DNNUBr1*|3BKj*Hx0B*~&qwq({P7PI
z^`E%Bi9g@+kvidRKs#`G7ne71`8zH<arqZ6@8R-qT;9j!16=-t%ZIppgv)<%`P4_g
zyKjh55B|U@DvAf~?!~1*)qAr@g=jX=FgzZPCnInfsghbd2GBT_RPT89lLD$KYP$4<
zlW!Q}Q>nbVGZ36py`g$W^@i%{{&>em{4w1hsOR6c`nRUV6R}Rfqf{!VcYIV%*Z8Qs
zw63vnQT@Dz>UlNQi|)hS7mKN!9`%{2tpDjX>0yK}sI977{Ci<I^JE*&YVC%znrge@
ztfm^nS=YYdEXUz&h)NeIZ15Yb(gj{N++)bc|J^mzm0+k-q@ix$2e?5P;8J^RfKyxz
zaK3#590oY`f9B|>xES4r_V4IcQ=MgW8;a4*Q@?nwk~Y=67~2$Ps!b|_spk8nx3|}{
z*2>tKRW<%f|C*?l8cIsJx7uINhP#@^Ic=div+CwFXmjct=hW1(;jYhJA1Tv*)LdIy
zfOC`#0|urHBp3E0jM?|Sq~H%2*Z=mC@(~U%`7bX2!{uXKKJk)TT#OTSeYjMi+@j_?
zyohvbVKg3(Eg-dUOaZCNxB^}AV>U<o;WkubPX)2e(w+%;`vWhj9;SB2ewvCNH<D?D
z|NL~@xvM@vo0T9hrQQSw32j&4+;;rDFWzW%wvASA+i3Nl$3`2)8jZEzs4AhA3f;8Q
zOx{W}ZCk0qwv`$_kF7L1-AbduTHa*~Tg28Xa?@IMytQ<@!zyyKY+GyA=drcMq+4qY
zYps?w^F;|PcGFt*ytVX6r?s^jZCk7H^VnKr)2%i3U_k<XXr)q&@iWd+*mRuC0lws@
zL^#y0RW6&?f-1jfBvkTpUtI^062@t8+&vH@=F4Ksl^CrtH-w7-?trfnF^4YP9RT3e
z!l`&TCvS+4NF5m>Qa$ZBMSUpd2_tZC9b8QCoiU#oVoKpAQxbR;zA{e=ezh(l-(?!n
zdLrMoL85LV-><8QHgLz+Mj~H*Dc1lvIn#raGZjRr_V)Jnw&CC!Hl-Le6gd}JOX+{N
zQ(7CUXsL3vROyj$6(~YW`69Kccx5<RgLXQox%L@7)vx7)HTyyuR9?6~5Q-(ivqgF!
zT)EI8B_K1&iOl+V6l7k@MCK3rIWNjzNDmX}A)?<B;k*}>{)U>r0q7sNyoJlNM84Y!
z*?}`YbjT;T`5Pi1j=uXH+UxhY^BP=zf5h)UC7L$6x%Qymp7J5<<I$>QDv*e1$z)Zc
z>z`=BKNFRYoLya4UsE@;erEmb>bi!R_0@H?vtK4E_r<m3x<I17{uLxzXHD@s(hyk?
zp?Q3(IATR;pal*Mq_Tck7+bOeEp%U&7GjC*&?$Xdh#Xo7EyY^sRU+R#^*_H|Y^e!0
zEmhK7>+kJhubQoc<yE_uK&?j@wf5Kgo5Sl8u~jQtI|W8uga%mVf!xYm=!wKo?IW9O
zA$_oa;1Xh95@zkBjUU7AVP=iarHt!!@E(EKMi5(MM{Mn45Ifr#6hM+$V2o}d(OX{f
zAw2p`FO^R}t?QWN@<T$)W}MOx=nfpU_JkQN?a`)V4r!g=vgVXy*0u(k7R5uSt!s&P
z*B$mx{9xhohU1$8wcV?_8xM&kY7Pk}7cH+%%}*{_y5^L|b@N&RT6O5uNN00w(UQX+
z5XyTR%DY&%S*=o9xL!+jFcCewx%MqDd|*SUx%R-`9(62w=#F9JdB@8vP1AbJz4dl@
zX_}|G_HF&^O)nV?aK|uG-i13sZ{;ThFT&|4b#|wyRX@$P)lakGMbP$n5pwh*^pB@N
z$?6nU9Gs#<OrJrod#7kYp^sFbE01WgOOL3M%_FLa9#MEkU3)~;_+9X9%I?tK{&I&Z
z8Qr0t&!;<-;112`Fc9XY<NCv4P}8_*!K}K5h4qa!vrUJAuA{9!Q8t+y_p&gEosn%2
zv!9X#YzMIb2C?<~2C*Cmv4MAmx*Xs#xIzbJSo68`gXT7@Dg8LC?V=NOZyDBfC#dT&
zZG1nEY4gl6t(eU_>f3Ecwehgfx+B40Tl-}0gv4q%K6ru^e|)f_Zoml5UO>&Y1)E7J
z+)Rq+WKxTjp`?1e45A*jaQIMC<I2h8^S59rxu@J0Y-_KqZSOd(V5l(@T4KTBGjaHU
zqo@y#LBLVp-f>!GAP6)@#jJ=5O+>{&RP2N(Dk8!fx!x9uu83C6+v5b@2565ja~SP$
zGKa-O)2Av#Cs1?k@D*5C9=rmJHCQPxWq)JdP_lwl@1PX~e_)SVI0SzpoV{q+3M!|e
zxRkA+@&dFKtuQTUOqS@&7R+!N+h8tY&1YgRmN6Ie7PKNi*@7H?X&dBvlN!jGQ^6L0
z)QaC4Emep}gK#W0qdgvu%?LyTkytx|640DzGJNnok}ci$unBr0=@jwPkd}&Ssmi35
zN`<5CN&FNaaIx_{85~A>WQxMSjTjU!{~M^f!wC&@`eZcR)}|#4R7jwWkDf@I1rV@S
zL1+b7r2w%*#kjE5UK~vfpN~4Sh^X9KTi1@*i%6`!65NzTL>7V;W^k<V{Tnda+JLbZ
zV8H0$mHhoO1^1h4JuF>}LdH5Eq7e{A2<AeGSX7SUg>S<8I>^|*j@Ib=I!b8!y4Ut~
z6x{l{2dr4YUSBDd-NRZC?NLTOEDRFP36#Hp$weVi`M84-DXxW14|W8i?ON#cgw`2b
zuZ8>vGlYm(i3CHbSXZ#4G9GBx7!SB%ACwea=a${jkKK`AQo}HbAE9Lsafc7S>%bj;
z!YWda>hbtVRlI&u^^q^B1-laA)W!lom6xPFMF_;{js!#TK&m6yW`rfNX2BTL5r_(R
z!3Y6^IzAYjjPGilH__+l1SXU4HF}HS&w|4d1!lL4(a&J{&UhlWVPhZZF<2kprFw_4
zh%K~OL<=Pm)q@YBc<@078qr~gv-=Q}9u=%s4yxt8uB4WzjA$W*gyE6Sns_uc*&R*=
zJE|)KkqF*MqL!^mEwLWtff~U>_~3gSuce1bLG412U}Q6ZC?>-38HsRwowgA_b;AQ_
zgoKuiMb>MH8Oc;26%MXYbgCzEs_5kqhtakM4Eg^OzYo@E<}eCk!025=a#5tU{2eqP
zVlVMQt&Zm~!lPDj7>#S(N0^jxAE8of_&W%fGVtKg@a6n|IT6mpWFN$e8ZbJ^z=I*u
zxR0|J4V;GvbY~H<@Hc!AY=%%cd=O*W#$m*o8ZbsTLs5zf@k=T~Mh(XqN?`;Kf>SrI
zRKVIunzoYh2BI?+sKY@Af`KOEqF^UAa}FMB_>z6gkS?!9ONFwc#)nCziF%v`btsyw
zYLCU*BN~+Ku*D3l3`LXvB`em~`D@(JC}5+O*QDXejYjR4?COEx&}^a;ANdIzOnoK|
zMW!(*nyjhnifXB<ZsuC`VWqlqLCdOUJKWahKM8H5nz&2MmRFCRw_y3I%9b_rnF-<w
zSu2p0n8+qrku6);!jM5F=sRs47-J2P4Kk6ba;<%gF`C0chH$MLgvSD5sezCUi!#nZ
z4CnD$BogapXqUP{TMo2i4YcZHv(iO@PNZgKn2vXYX#y~fGcipvF%9VqM<QCHiW&4(
z3AS!f)VyTbvW3U2aD$i?alDDR!bDu!8Eu!ax+^Hdx1Wix+{8CTud;-)XkPQG)wvXO
ze-rTmCgRd~A|+v^HLfdufQj#5xxY&jnx*!xI(#I$X@ZHg)GTCCdms^LXQK%%cT+sp
z;eHcSqg=cqz1JE4w75aXx~1GiH`XjziQWaKFuTIW3OC8b=1*hOInR`4_bgapV%y)u
zR@&Jv^NYLEvARw+@r^g}mFO&3nb6u<%Sn8~@~Ciw*&Ja@Cg|7>HnANdcSLC-mXw)K
z5@$!GhnPs`%1DQHV%aNYLA)_*KP&i9k2=dlJX=P*pJ8`a1tYPpP+KIBU|Ovz80$of
zjGB+zi}c&E4zBE65GG=T8%@Hq`hjq5n_Z114XCPEm+nz#n}p}cgv+4GPwfhXW>-Zu
zmaS~)eEcQoa$72rF1#`xkAun_lZr1_Dz)$cWYueobLW~=yfT$xu?^u+_%tmfGn{o2
zy`N;p24m5-Fq@#@a|<`q@O=w4*N$Nm#}cAjJTzQ4rkQnw<v@JW_X-O1dj*)eDZ_|Z
zKfvyV;e9DK<-l^oCLHV&z@{4*;@EUEbPC&aqlU2KX5?^O5Zw?ON#wg=1lum4Vy^(E
zsXBQ~O?<wB0v3+|bGo%HG$Y&=2x`VGK;P`3+o6rrTx*?VVzS7my=J1Vr@ch#(@gR)
z8)vq8JRYBs)Pe~uWng}oHxa%crsi5ib(}(^tkc5@SatDx-y^roRj>!?kz3|^*kr#1
zBykkck*M{DqoxJeE-8d_=vzNPzmU-%LR3DuW>!O0{miP`>e{NB*>xqtHXK!e2cxJy
zTn6boD5OsT9$@06p2njMPJnH!uUTNifeOYGv9@qTGbU=sVH(A!L|^9c_dP_%Db2N`
z7(<L;*GVi<?fJz1pbLrUA|kq&h`vTdm#}#{DX{i2Q(cFxLqwD!qAtv1`3wOOFz6j@
zXRJ+6Iav~9W@xcygLq+|2)i?ue~;te*pQ`QLl(kSCg6{W{0~3>uE1uq$#A<I$nPA4
z&X~f3IFKa*=X9%>+wje6EZH}DME9ei)rvz}Tc9hFszamB#Dz8fAwq9V7vN!dgR$sn
zK<r4UsWyG|<=xS)D*TUq8<n}pgmzVt`J1(4=0@$G#vINYvr>x&6C2~Ha4fnD?b?7A
zwrgCB4&ZSu9t(CrhVj8o<6EWXTHGpSK7slf>$OBO9E)PY3*I+g#bn-q;d3xxOuT^t
zqlnTMFt&HDPqZ20WeiQ?lox(-3{zf0)I|yRLBeYU)mcnENNA!9f#J`DhrFOO5RO{M
zcedRsQ9mOQ>w=eaMptWld<J(yp+>8D<?+3m4~@V+0wM-EQ^xzJmzTD-$18bSc{Vp>
zjwwR|4xpZCWAss#{S1XMo?&;FKt7g?x24BsH*OYeBNGsy9$J&$9h>1Zz{f*rco5NM
zV*#R6fCm$8Hhd^U1o$omdtLP?pflm_DppAKvT?Uip=l#|$jiju9#w%-!?|^33Qa3+
zuAS7|qn7mfZGqEo3#H#;5yWilG;xJ`e5eM<lyWkl50C$}Awmoe%3_ZL-UJ`2?*d05
zoAqLYCCXB&kUC*G6mtRg>h-AUf<Z6&(2j!?=CbZ7XH8V9mx%nmJ*rr}jhIYZ(Sjij
zoIr=JK#O}APL!5MfL*@f$QMvw2|H_AE}GEt!M1h?5*XQV+k>YJam3zcxbRW0Ru6N#
zc~10@`t+A@`Lf4Qu#i;vj1=g=L?E=@Vm|~qpW!=5&9y_AZDjb&2NB^2dIcLH;ZlbF
zg5%{lk8bWTFRDJ^GFPgh{(Zh;rXNJhgBcwdU81SDF+Lewi*Gb(DbutiOwkq)DMf5h
zU>i0Sl}H)FO)h5CVE^(uYzl@o0c#3NA}TgrG6Ra|+y<#+xbr0IT8QDL#rJ;tI0P=h
z-a>e0+ro*??m$ArmQ6uM+gKW<8A+^K0J9r0$9ve!8;++MDx(2rV7d7n8XdpG3QRk4
zCxRb<YzDVgfCSq?@i`JJAWC!XPA^PYBb?0-u`cnE2mWfrx9ObhE5PV0--GM1h;Og>
z$V)y1*J8`VkOFLeD8%JmFR2^f^YTPfrT_MlZ{)>KD(`#Aw|Pg5{=<JI4%~uo@?Qw&
z3%1TXD%Ew|%GuG?^|Lm#ENEPG$}!6~u35bD*tPSPM;6X*YVBM+f5GwbWh+-6_F+0?
z?)a!S4Dobafbb_3U;`g;Hq;$oTfcD42`g8o8W%3n<}E#bLF1`wQ-`Fq##7fXUZ};R
z$?nim?VYDZjz8>EJsOV*n^m8bLfu7T?cpdI8V+tWHa_t18?fF9&9$(+PJj05Fj^7t
z<o&)IMvrx~#RJQ9<6Vvj-|zCZ9uM<5BXQ4uOc`PuE)yd3E-=Bpjh)5VRZN&sD7biV
z@#0c|OCc^rxL~LuA1*2`CAeVZLFpM&GpU8a4(VkJa>FoLdEbjVsRiR9W<D03tq+WP
zDy6gWYfGw$^KlO*q1vsrR<a7KuuDeU7=0LbqN#W#mM*jeTj@h{9>rS(ZEnC=L^fd9
z69x<(Ka#)Sq~JbVx@5|n8GBIX1+Zg_Fvyg!-c^XEjn!k5hgDZ4x~k%_SfnbNidV%F
z?Y0;S9Wd0m!cgRZq1F|KVh0Q}tr(6>w*%}ieXt#7gTaW=PK7%)?#_p&1I!ib2x8)g
zzL^nY#;L*lhSq^~#_}fc2!FnC%o?2~I4H%mOJB}wiX~Gmflh4^FBv+<he5R)?~JJ4
zP(5?X+U3U_z4(~rYgSCD-cVi5`U+On@K6j!US(1XB!V54$hv@S^L@*QksQ-@Q8PkV
zr*IB|iZK#2fYY$*gAX{(SdIgy88A4_fKk^f{ysFVfd_iofWgoQ@^>&O7{7(cPUZKZ
zE2kN-N7vN)sx(T<Y)`Y|#Z4<}>Z|LcQ*`6{0>yks&jo?TDM2WBYFW5Vt2wC8Yq~{;
z*HqoFw?JE8-sdgdcEei*&EeI@>MM>SHGM*k7r0Zk?<+-Sp}F6_?<>XWS9DKrm01!r
zE@KGum0@z9C$&`H+NtK-e6?lS!j`^o=`zpSz+96#(4=fM`XCdRzBJOZW`5rql$tLU
zb+U8gruM;8X1*dWhfM49-eB{+(!(arX9rsOmn@isi9<&$m5j$yGr9wjh!(1B4<tew
z6Fso?^_+D?1%EHQ-(36CL5QBYq?G8J=_4%YX`WRAImP{@MCGMKlS+vyN_Ep0+I?Cn
z(K)3==av$kS4wn#DJgbmqXjXPJT}O1);u|gRC)pzL$R}3JwAxa>1Vh+g3H6WST!oM
z8@WP6BIu;+C<H;1hQbLg=-Oz4L>ekM5bSVmq(R4oVyT)9GdkA=pwi$d0y6Xm7NGIL
z_juOJJ=hORY6&>bm=9t)2YZdD)MP{0f)PYByy^I`Y5}ehU`&XO7_ylHT<6tO5#duW
z+;0%zSpwWBz_SH-jsPF(O%LdEh5LsI@Zkb{ga98Y!1Dz7C;^@?zzYO;p#U!u;Kc&m
zB*04qc&Pv%Ex^kJxLJT(1bDdsuMpss0(^`BuM*(Z0=!0mj}_px0(_hRA1}Zs2=Ivl
z{3QYYvH<^|0G}klZ35gbz#Re{7T{9^c%1-81h`XxqXHZg;J5&vD!>T=P6}{JfV%{E
zy#RL$@CE_iD8Q!)@K*%*bOAm?fWIohn*?~X0G}zqX9@7x0(_1DpDV!U3Gn#>e1QO8
zD8Ls9@WlfBH37avfWI!lmwJijG07*oOc)2Y2=L_s{0#xVLV&Ln;BN}>RRVmq0B;rG
zZwc_V0=!LtuM^;J3-I*<e1ibrD8Szl;F|>aW&!@L0B;xITLk!40lrOuZx`S@1o%z?
zzDt1b7T|jX_+A0NPk`?i;O`0W_XYR?0sesi|4@J*6yS#h_(uZ#V*&n&0RL2g9~R(8
z1o&qH{HOpwCcuvi@Dl?3qyRr9z;NauO&&ha2=KE4{Br^Re**jq0sf@`KPSM?3-Aj9
z{3`)|QGkCfz%L2#%L4q00KY20zY*Zy3h?g)`1b<*2LXOffd44KuM6;>1o+Pa{1*ZK
zs{sE^fZq_{zY8#O`x)*3PXT^YfZr0}w*?s68;#%Y5a4$Oc&7mWOMu@K;C~D7`vUxd
z0RKmTKNR4Pgt6|w!u|hw(;<5wdkHxM*++dR9V$5Nopd<iXyN|;@1#Qu=e(1)sSbOG
zkPnc3Jdb&h=8=8IKjuOHK=wK6F^}nTSSq}8<zpV?A!MIRU-y{pcE#&yJlFmyjptW?
z^<Yap`@Hy94}F8fzy7O-F6Hn`fA!FL9KPdk9=4E(&z*nsnBjzX{mnzy@OSS1Tl%-7
z-|)~@et*mx9=e~yW8d(w?0fi(d&9#PDe)QqMw-@sZ=~_;|3;eb0dIKdO7=F<gf~3&
zO%6|d!^0Ll@$tXmp&R-AmUq+TJnmf&eT(1k_?HLM6ZU!RKk0YW4?VPv-!J*lL*M7{
zmXADiD~B)t$U`@A_!}R2*o+6CD?aj=>-D9omo2#BQ>J?9K?V^GR=u>H!=XW5vkkRD
zUO2DV=cYkkGqf{0H2uzhMtbQd{GAU+dg)FMe>Bo-w#nqt>GuyB?KRtf%4jcL$KRhi
zI$efoqrG%9zkl%PbeSthd+Az!ziPA>$Dp#$j|Keqj7ihFcZ`=UG~;vaSTEh6zfRl6
zdU0SX`^+Afet*t5FI~a!A3Dx!^1uoH^gC}Kl!il7y!37UzBVOY-xUX^-|3y6hN;qP
z_KQ-PuJ4w{^gB1qPQx(zH*x$WN2l*UyCMw_TJ2>AHse#e+H1<i;cL_Hc>gaAuRl2r
zSGIdi8L4Xbn({THJ>6E-?Ou~_YudfEg_mbcM;gzza2mcYoW}WFIL%|1uS>r(Jd%bR
z1vn_c|LRP?^I+6Vt2o_<qFypW+J6-FQh?w8Nz_XxarmQX`nMBeY4{KUzFdHR5Kq7J
zngBn1YWn``0(@N}eg9zrE>EWKuN2_(1^6cd{Jm8A{TBuJ*sk>ba|HN00e(b)|DOPl
zTc7^z0s-DAz@G^4hVJzH2W(8k4+`+AucYrketH_NKO+q<-js$T0{rIY^!?H^)9}Kx
z((uUw92MZ}1$gk;>G#JA@QDJvMS#`w)9)XCVH*CA0588JeSg%YY54B~{Ef@f_kEYA
z;hziehXQ=_H`DK2cU2nxM1cQrZTkLk+tcu$ZcW4QKAVOw_+=VC?S(Y_#*1lq?8|9*
z*c)m1{=cW;*xPCN-hZdz@$aYMw*~n957PIWKTN~tf1Dm0FZkHYf_w0J`_uG01-)J~
zhTx_{3QV1{{qQvW_^LD<+f-oUd2v&LIrct1z0e$EpP620>brwy6q-0MoS%k&J)_v9
z+gP23Z=R%@`l#|k)g05RE>!6|eB79Mp=yqYqn=jHvATS8iK!Rfc%j66=gyDH%=-^~
zRA%0P>7z1JC%*aSV7i^-fA7t~X8GUl8A4a_`v=Y)VfwG;d})NKXV1NQggNegaP<h&
z*81tz^!rZ=@KXZ(^1~xc-Rl1iY`NxIIN!xh5+}a0;g<-tLqHVP+~I3O-s}1)bKw$U
z&zX;I^)YK!tzNi*xh^e;*oyXpix;(sh~TIb5#hNjM92gqB7&DsM1<#V5#1&tf{W0C
z=r)&#o_$nA1plIp=-Eg6AUfL8*dhWrB@F}!$QxQyT{V;atEsN8tgWvHwt}OVELdgN
z+*p)BP$NPa%zlG!(?E%S^Z5#xH{Uq<!~u~{LIlUCj0j<vJuVPU`lEyhUR4Rvq~~2C
zs(4O91edIYsNxZKh{n8qgoFtGToKWjx2s(u`uN)tA~=I3L?3VNiwH}2R%x50umBXZ
z*WgJO5UG<~we%#9j0HYu0gG>v2QeKkx@?kHk?I8pwuH#*8j)8*1n;+u$m_O5GF!uS
zE+cZu)|0$Lq!PjJE+cZu)|0#wB}8!A%ZP@$t(we@@c7G!{B99#l1hZ-0vXYfE)f;W
ze1x?I2~mOD?jIr}!a{|F$mbT(L>UoQIV40w-6A?dMua6236b9|qD?X)tglFjj&zIY
zVHpt?XCy?MT_UQmAi~Oyh^XR+ZV^2umk7&35~4@kB6>nbgf%4z(c^9rJt-r?f|P{l
zNw<iel0^ioSrVeBTqAl|k~J)a$%t%5ev5g;^mWB^a@DYoCLwy-ZHfLUBf=t_gy?y<
zh~AYEVFgb@^txL_AIgZZ{3jvW=@QZGugQq8b|@m6{WX`0|HvV7_haEvM0DhkxVsVZ
z$bZV+k5x+v(Lb+uhv=x$f0OtKOP(U4qelPLC89Q2uVKAZLe%E6v5)%iNm7Zh*eW6V
zuS+em$S)g5Sg92eE%Lh*k*2|N_hXq?MAS6cW%n;VLq>!(ViD2OGhDV&$G2oeSYQ?r
zbzI{X(Ni)atWHaa+>VeP@5l^^rELk(J1!Y=-F6uf*2P6c>$bZ^be~)`EUHV0?sM5|
zkwayM#56`k6ghN-I}wT8CYK1y`4Xbr+?MEGc^E+~fQ0B?m)(EXi*kt&NFX9Q>qVD{
zE*O2cB(#V^5D{H4+GVd@F!~1)B7`u=i0*OM*cXg`P(p<G2N}^1-6DEOLWJN68PP-T
z5Pkh)xv>#>AtL(v|6Dfq<yXkvkFX69(dAdTM0EAM7p1Bp=0iku^*om|<E!VrA|XP+
zh>YlEcWrd_yx&QP5N#qO`mI|;@}wW3Dl($i+#-^D4RJ0qqSxIax^aVy2thI;q8m53
zR7W?ydX>~hh_I0my?TYq61^tN8p3lVM6bD&wL79yq!J;vM?`c-)a4BFj^D^_guoyP
z(QjOG_8p(fh!9mIA^OxMqB|dz5g{Z=M0Dq)ZV~m$LW_7N2~n?0)9;b%<as}Wp+rQF
zT(`fw?tkQdxoU`{k`UeJvT8qjNcN2&3`<1xvxi*zMxL7dEs2j1!zChmYVtMis`k|6
zYb8Vo0Fx12>k`o;NeL06$0S6Lxa_s3{`jth2%%>ZqCft_U5TFiqpWEWw<aQb?vE}t
z?ep{G#zxSai0JuwSGz0G^9y29)etc!AzBb|iD;#4`XSs-LbUS7E)jLfoQ+sL2~n5J
zG5duzG9m=}iHKfU<8sV?b&jl#5G5!gdUcLV)9=+KvN4JfLkZCmm&WL;@5)|3#3xFK
z-nALC=UH6GqN5){jRpd&9Te4u<5h_+wqmeaOR~%qeHI_EVz6!Jhj)pH5D{r0!ioW&
z1B<#OnoI@S69JaU!xmLl{eA01R0yaPQQ^5uRQJz)Oez)PF-25(?h@6uoxhM!A)Hf0
zh376&O)QfKe?)_ds3w+;Wg_CDttOVq3JJlaGAezZ?E+Qhk%vel0Af)^RFy|gbz7>V
zelJhj5y~o}I_meAxka_`2zfX`B&>*P;Ssud<D!BKZ<ogb1ky^VZr2AC7pRtYFPGX1
zakwI?rQOTiR<OMwD4{|auZXI>;AFR`&OA@9AfkXpRA-*2+X5~sxNWD53PHpos%_ls
z<^t87pU5nV7-SLEou9a7(fj8<Cbbnpm_=0g&(#ND7o~b|t~^IU1hk0i!MU%xZT9~+
zWQ<fQ1W=2p{@;+1Zc%O9`ScOu(1-YI5fz@h9AqAx`#T90!nZ|Kc<vI_ndeO`6-$Na
zZ=h=6tN3{C64g;Fe}0aL3c=$dDm-_I>cQiGE0qed=OQXRcZq6Z*-=tkA#`0th376&
ztsXM(MzMm3d>2vSxl2?Fj(UB65fuXGMO1k164kbypGp-(+`Whj&t0Ngb=RQR#Zn<`
zUqprHE>UgUsn&_85cMyj!gJTCK9RIDHVw$AK5?s^x9xmPYAftHkWoG6wyh?XEtV>X
zEej$lJa<{a*_TBh5!(to9z;}l?h@6uou3R7QDMV`hzieLqFO!VsDOwH`z=INc<vI_
zZ*D0n7g1rmhKLH!U80&;wn}Pt?Dh~*;kipx+jjm-Vg_s$5mDi}OH^l`H$fV&u-8OH
zh376&J$U@@Bvja{BBH``m#DVw`~)e$&6pAFbP-YExocF<NNt6UGBT=X+_u$GD}Vlk
zSSswZ5mDi}%TnDx_c4hXuuVrqh376&9kuf3#bT+j%SS|o=PpsbI(5=C5fwHGiKy`0
zC8}*ZpOu;&dyGU>c<vh2-y~Gnq9mjGn|oBBNT{&GNk;XFTT~Ovn(D>2!Uic36`s4S
z;OUW}lJdg-DiIZ)yF|5Z=P#rRVtbZ|3eR1l`cl<_CyN!t?k*7(p1VY~ZRdwlsjxXr
zM1|+BQN1al!rn3&)tl~7y(OW-)-)N_TW(RU{or{?<6vi-hzieLR?zCs!NxcdmEq2D
zF`KZun6R%-L}j>`T%dX~EYG~KEl))CWO%3B*@V^Yja_{rD#PvVqEuF&J~jo4s0^RJ
z3slw>H0&u9Q5h>}E>KyQP_ZRZL}e_Yx<Iw|gD1Ww${=<$im341C0|(s1h64eL}dgB
zxG0r1LInFMMN~$FhznHPcCs8@rlQAoOc52HyR6{0ojW9P#%@j-)eg7fylv+W$!^DH
zPzx&eb~{O>!d_At6}d0f>k=w#MU_##o&zeWg4oGwLFK-JA5Rup6dPe>R3A@v-GiS>
z1|;^;%BVhdZ$N%pA(jf;a4o1RT$gG`nTQIzcx6;O%G{%B6j5Olumx44dsKIesIZ6F
zg6eLUsAgXlzeGfZEyyA&Ja>s|+s=>Yim0%ISww~B?on+PQDFnL1=VKPsCE>JsIY%p
zMzy2RHL6b~X2AAq8P%umnc-8ZRM@?3LFK+wJCH=#97VDDTSm3R<GO-74ir&g@3;lk
zfv!<~EL9L&&t+5}yRYEKlf+VC=eh+I+eY9*<IKJ+j;xSoTVdn7hzieLS8zvzhzk4W
zMO52%?r3m{>df=Te?>%vZTBK7Ja>s|+s;qCA}ak*;<R5B&t0OLShl)AM1@WNVyW=l
zC8}*ZUzf&q<O~o|;kj#6JET$}<$#Q8hx<~IB+kfKAfqC;;_NNI*e|vf5*~=C@Z5C;
zNm5?Omms3rwv%#DUW3I_A>D$EYR6#LrP?8l?a0<(LFIOApM6<;i&!codk|6Kx$9DW
zEVUJKMTn@j?flrTt?a_puhLe3TPzh)O^B%Q9HlB=-5pLD=g&B8c|(2*0|Az;%i^uc
zs#JHlvmJ>P`=G+fCf3bUNLnhE32812lvu#Va~)B7t76fy3sx<O29B{oSK=dSQ3#nb
zM06#_rWFC5x^}T&$B1ORVgbd1A<qUdO&Pw7)wMLdt}9s;*OEcLQ15Gr9UDr9qXF#7
zlb+%Pq)cd$vIA%j7@?yrj>Oh$b{LHZPGv;S4<Kvi$V%H|$*yFit37OoQF@All`@qP
z=|h0_B92x?GWArz4rlt2l>x=JL=F-lJa(L3>5}!V;S8pcT9TR^N`?d`K%{X*Do3P;
zPRMu`JK#a`6X1D#`IlMe`ZmV8BDNKzWe#YNHw9=8TdkuhTh|p2#}lzoz_tTe%GOMc
zj=U?tRo$xND(>896BFW8DP(H_hT%b8sdg<Ej#mX^kSDoq<~vjhiC%!_l`b7k;Rd6h
zT#pmT4+9h*6s^-`2WNG(#$xLXOg`fV+tKP&DWsPHs<vVsm9MQe7{cK#tWpvhr=CJ)
z8lZXS6dg@jFxDBbjA&7Nwx$kC1F>_~*0e1Wxf&U6fb$2bb!_OubCha$cQ_h~btk*x
zp+HJYB8MxgIa2?-sxur+#FDYL6dL0j7CIt+WX&<~W3=7ByQ{JlN&2f&i9lOhIM^A8
z2HLd*TBFK=a8)oB2}P=;Qh|0=NQ;EmYl)3=kuG&85|a0zNIy*J%{U`B)J~-wlL6Iv
z4#h$KAh9^p5?Uyns4^Nlskd>C&1Kt9Uvnr0G8dr~KYKuLl!|sOR)tZZDio^<CF42L
z_gjD78J9Z<2QZ1F2zaw>>BR?#yn_r%Mwy^i@!Ww$4h$p`fsGB-^-{U5gs-s>76~Fv
zlR*&7I%D1X#_AeJbX8iYU0bJZ%*MZyvZHe1StN}TOEy-ksjZtit146#SQqFFgi(rY
zMX1VN1hF<-9U2OGt5BSSpVGOdCKOJ_BY};<Knmv@S0>_BouNKWkFw(Isw|>DQAXAW
z&HWAqLlP~qU~>}j%3v&-?CR7KNCg|Jl#y4qYq8EiuH0R1L6Wt)r#loGxxU0Ak4r|9
zru2)$tkb|VJ{d^{(}RZivx^*PBe$4Hds=&>wF>lg$qxondC30QOcih%1(DedB{_t1
z)Py!|rZBc!Mh~Z^nAoPx3??%F)=A8eQ%x)dYmZ>}uC>Pjj#Y6Ql#$j=Do&eLEA(=H
zs$sm0L}ZmK9asfv<;1eohGN~(NGuR?t&^QPZG2{I-*hMx^4p1pf_2fBhjmetnY_SA
zVpCn{P%32F6H7HVm2A^;RG?GE-y}N%@o==A$)Z&hZgeOJ()^(y)45R1VQM0jtPIYo
zsj03^SExM_YYjxI*ujF`I2R>U84M+>f~Vr_L}q3==-r94s{&nBnOo3K)z@A3mor4o
zizI|7X-{p0sd_wjAgQbR#+q73-TW<wra`7d5L9MHn5wULtU?ARaB7tU91&jNP&6c7
zMA3e5xL&j|fmsc+(D&U9^<3R&Q=wBc_Xbn($*ypU*$cLPbJd*V#J)lDN0evssl0El
znsc0szNvQXn{5safDDr$c*bdZ1I#fscqAOuqRDWyy)v*aSsPfF+yygZyos!jOnu*>
za7cNH!foP(n`xra?TfZVESd_%Vu}1ri`jYC^;U;MBR3}sJ@RXMiyoRx1rk+lRiTK$
z*;XBEKeKY;`2#zXY=m(}e3L^#kvJ3u9mNY;9t_1XqDQ*&7}e+GU(0(P%7}!fDB~Dj
z#v>S+)~ZybtG^p`8gJ0-$Z_(iIG+*)7+F_Q;Bj)Jrt)gk!*{K=mpGIY8DUY*2ZnXB
zF?n(_6-#K~sJ2kmhE^?w!)?MrE$MP1;TL}&N^a;Q=MOp*1}SM#m>=@OEXamToI7!a
zs?X%z&3dNif`7Y1!I3`~1^*E*_<mYVLqlCdRVW#3=jy}FY;k@r<;hTAJMA)c;j*8I
z%!w4gDDKQjolNuNc~<SxQ0qJ^KgXeckVhB<=T6eOZ2#7F!8L)&U|S%Wie#P9Pn_v&
z_TbcUQ6kydU1H6V#25vcGL6+-WuaOb{BG=|YzsEu)P+Y&VbI8g41`ynV>IQ_EDSmW
zPVO(Mndzvge`2YISOcV62EqS5t~ce8Y-~uj4a87brw@hNh7>G-STyN|&Ycd0M}BA&
zzK0k7KwZ@&laV|}MqLl&Uwfz77ZO;bu*ws9OOFoJR?nOXnKnE?*-XL)y>GH>lI#Xz
z+0u*N6WIV6wNbcBUefsv&$EkgwX^Z=<bFchZV<fsCA~H3`q_@z-wEG!4m^b%;wad+
zc)=#Yg_5`ZGSjIT8O$>$&48@tDBZVt=?<+44TPjt)GWw~_GX7hM8b6x^E*-_w&p37
zbMmjGldXbG@F?VVUdYjbn%Y{XV`sXYqh)O)SrD&vXfdRsM`7;cg{f}WV(Ybp<G3!F
zD-P0%g@A0hE^{awQsbj+5Ad>$)oQ9|&Z^GIb3MaF8N~Y7*&TKNcwm$`Xdz8M%Js{#
zsP1w2#{;7rnn72V^)=3RhaKUmi<(ao3FAxv5MKE;oiLueAUxZ#H!pVR0USI4g2Asv
znOQwLP}9(ulkS-AG!Rt=Wk$Whp(r@_07bcdhhCJq=4>|@i$t^_PE=2_xxE(Hl_iAz
z1$2F^{;M4dh{G6Az@PF0jt<l`*1`GWTF=hz4o5=4Kq6G-!VH2T?&ymtTl)1Pk$G@H
z1j=_^V~j6}eZ43v^E6b?a%7$>92x|tP=MgAjWNbN(;eMfa)q3Rm5H^^*0a;91x~|2
zneOCe8qFPKLDysNAvx5-PNwUw{mN>wTW}@^O7!+ydbi+t)^2I6X>{xsJHk^Jw)BXE
zaR3Mi-@Q4`XHP9XSqV2}@y&hPfgf<n2ne2dRh;p|tUBj@%wVQCvPKq^PIfX5K0)zL
z=EWNwj8wKqf~~WwXU(pyuWAp5qE*3|6ZM8H)H77buCwa4Z;y$cg_BrNxbC<0&cgGo
zomHQuv+M{@UAX8FkuZ*Z0pTG{r*bY?bVydh4Yke_Lnjv*&Xxhe*-fW1E;-WeYDR|E
zb?PwJD<w{*F%G~%fe+^eo|sDNo?I;&%5ml9h+V9!eTN?Xk=UU)qX)&^aBhNk=+Pf#
z@6eitJjR=)(m;m;fk60)TMWWWvk!C)HO?U!n;ga)oH_)8C;lP9IB85Wl+3Y1CL&I$
zJCM*S%~g@~%2zO!p~07~5E~o^9-$b|9h2k@zI26)2G8AEth@WY2Sma+T?vHmP*aRB
zo@XW8SY7AX(_e9Da2(+Tf}<9uScC5$iUcc@9pPLfkVe}#wo?oMPK*NS132mZw3^z6
zSv8{d<;HV4$)0ky3Bt%9&60LA;LIwN=A!TFEsy6eT0VE3UblVw-^DJ+0a+k?$;vLh
z%eQa;dsf2rS=@Mbqe|WO*Q7XmoW=#hk3<Z@udz6LNB?1c7AwXn-U>&4f#C92x)`s`
zShv2R|KhE(p>hfY!2x6_*>SvNh_{+q-<Z>^wJNvTIL(`I1{#Xf%8S!D0BcSDY&e}F
z4RA0U3b>9J&~SX^x5hLpTTwEY30oY-H5?a*5_TCq8mMWk$ErvU%j(tH%4MAk+e_U|
zpNQg)v+Gc>6U*0galh%4?BZUXyDl$VdZDy23J2wZ@LiAUgz-Ep;cP<XB<?tk4+MYk
z=z2rk>-$gKv!QZY?8DiBDA}U-^^(;K{)2v5)<1L?93A#dbp4$o6X8HZRN(mcx;YbF
ze`nUdtgm)<D%la9x~TaIkuXkA1mUjzH!#9@o}F+WmT2Afr@tx^#!-zReCfeDVLZ=H
zIEyF5uEurSw;w7J#<`Fn{L3Q@!rKpZK{$82VCuqUcZh^>2qg%=8Rt#CaM>MM2{+U_
z$KkB944H_-KIYjQe<%{hiI*U}=?0xJo`Y~fOKk08><W-KBD7mjil}g4CQxm@VS{d6
zCOcE{s?I<-Qq`%)^IKNSO&UY3Zw4%6Q1W53za{OH#hIKScleEZ$?;q&`F>Wc0{xRL
z1jKsafKMPEb(3C?KBWT{X}e0FH|%(A>Y`=R=3JZ|3NqjSKJW5H%h=}JEEbuw^>0VG
zZ0SSYV*PMXDG2}KS)DMRXXmvnrl1|+x_j?=NF<C?Q9<~n7j(jSo|SNY7AChNJay5s
z{Y1hzf)#{oKQ)_rzwCsw%xvul*KNOEa?aqqR}jA8q>aYVo!vQ8U+wIiu_N4cO>tDL
zF%Fjn;d?uE!g!vw#*H=3zGOSXWlO*A6A9xaTM$;hrxV8Wtb`l#;_8beZz+z=1>s?j
z8iX%$;VsRhsq40Hm$EeBj9w5<j6RL`@phJ_$ytuG*hY3uJ$2!-SEQ!qgwL9+6UOuG
zO<n7}G;c?^Z0V&>i-d9dFlu~Xi%uBNvlGt4s%^TaSaP!BsACX*^h-KnJkLrvA6I<S
zHN|nU#yD3QgnxC4NjUC;aPB5p+0qN89A`Mh8H7ilX*BhPEXSE6b2a2)kThLW+$z=>
zCq{$tPoFVs+?u_{S@vhyF;~+y#gaJTcxn*-<trxP?Bdjzha5LuQ`{le_}DI;@Q|Tj
zVRDS;*=wAK8?fn`VofBBgSS!Ri4#o1T6V(u^>I)nj8ncrc*b;-aL@(e+-Ijv*Az>8
z>T#qv2tRh1Nto@acjW5EEI~yXm`lnMhx5xpICYdsm}QB}LO6GutLd8JcCo2(SULzl
z)n*cI&)(E|EDtqZQ#@28jFZ_x_`cIj!b7tY&PO{fYQ9$_jAP(Ic=F{sVLZ=DxIPaH
zq;C67(lQ3loCo2*+@ur6a~FhjSBp*86o<tc<A8e*R(@tSbvP^GZ2Md?aJ6(W!T}p~
z!XGa`-59yp!3fS=orld;_m3Nn5o`P)C%o*NI$=D|TI2fs<TxS{UiB5d#wACbVbnO1
zm2hKT2K@~uii96OT_+s-u}-*d`wb^%C0w7MT5J;u*Po#ie&%(v#%);%H|F64YPzPl
zQzX22lTLWktgjkP%_hKEm@6+Oaf(Pd!U_Lnu}S!p>^06~sibL3MVCnU&CR^2-{ge1
zRIr0j9BZ79UEQ>$LXzXsGj+nh`N$-kU5*>_8M(GpNaD2cES>PjBRA=Nyrm+$IAsei
zw;j2*R7gYS$(-<@3X^d5Av0TuO9sNHihUgAgd@{U!l!0su6%qTO<O8bBH`;f;mRXS
z!Yorr7Us%*vAJnWg=EkVK3nhO@u!=Fvm5mJ%#WM4R3yY2kLQFd&Nc}rTr_p=bEl>)
z71C_+L{9j|TTH^)XN&m+QZ#L;kgUutoN)8gCgJQ>X11953|uV@nd<p^AJ_hIvmwXX
zhs=h2rZ8J7BzM!{7wUvxz2r=TaCUc7w$PCbHI{st|KWtsDLTs_?828>n}<QaweWnA
ztCwG**Z7(P&(;ZVEj&LfSJ&rZb2V)(l$dMOr8?mU_dCZRoSnJyaw%@9kY<a2=Y;RN
zfD_(Qk$tw<kk8y{YvEyHQ-9+!y~h5cbB!7wmc6O-BYd_<7{`RcpnvPfCgHQQ6V7MS
zwzW_?4d>^a@bOLO88v37;W#RZeB#%ewp2*Ymk&AN@>WiGOGS3)OSWa>400?vUvB=U
z-qgqKcfMZZEfv|FFAe#aw_6J@68reNt8~J*-OmYcExgD@ALs5UZ`xWYC3F0Q6D~aa
z0;7*vGDqh=&SPTUw6*YJvBrP6R<H2~(=Rj#U+kjBxvz0HZK+r<5<YIbPI%etobZ;4
z^;rpLi&V8`u4{@VWA9J5>V$7R_9DH;*A!<r_8Rk8cWT;FA$fh?eO4!Y!)=!sT%FzP
zlc)DKBsTR0ztjnzbH~?>8i%qrbz>e2=uKM-&lCxt_JU6MnQJdKnCr}}gzNM1Wo|7z
zPbB=ti#p+_dM`5wpO>9*KC{KGg@=oT$G*&)`q?c8;lr~N&c`FLweUib@US;@!mplj
zxk32C?1b}~m~W|&{MGmWT_=3vmT%~Uw^U^JSLe0-v$astPO-Oj!t4HWrBUPT+9@x0
z)7HYX#HPOY-#X#VH(zBCJ}Y}u=cAprR7mSi<KNc_5BWPMyrm-hx>G|w+G$ILG=RL#
z2|t^<+UVo#14y>?e70ltmWrg<)bD?w*Z33fR)cUdYg1<ngs~;OweSLwaPx;c;m7{U
z32!aDAS>Z)F#=9IozDMQCs-T1mW9hqjdvx29f72_3wdwGrEyp?zMSt6@Nxk!Nh2@G
zIIX6py0&I^RUn6)5(j1^oh>-KX=|Z$<jUKh>J8KVn{9@)u_ITUEu$<BgVmP$BciBj
zYoT-uLqV@jxaz{|48rUfh75#l^ENbXEtHN7x#^GsHi!6r`F9MQ?8uM|IQdr8eAd{u
z7D}f#Y(HEl+;-bd24Qx3Ll(k$7`9s~Bv19@t8~IkKfP5ayrm+$r#jm<Mkn@-ZPE$O
z{^%!6kjhzhlVoUJK6zyhFn?^9RK`i3U*yF&j2B}p&&`rcVwP!+)I~vZ+Q;|w^g_mS
zT}S+qHOQ<in`AOXTsv*d%C_&uDPh$!ym)8w;vH=6>4+ziNqPScAAnBNSW0E55;f#k
zNn6#hr9xT)Ie3QNp2bU_H#j=`5=cHVO-)-1&lPpjh4Xd7f9?L2A;ago&`HiqnRX-L
zOW%`EwEy*tV#YyNKlEot_@(dZ2P#WZk0r+kq9JX=f^c%39nQ7?`(LeCnZ{}zXYIo}
zPCQ3tGU0UE3VQP-m6h+OKX{LExFrv4Yp^X;xqen<pe@%8e%bQVI_;CFyihOH?H7K)
z3RP=p#7eCz5sPcPw(Wh2fh~)9@Ewby6T6^_m+&rL!f8>hGH@DeJOg`WXRZlzYs{az
zt)|mHf|<OCukj*Q=9H?+K{zI3dvG>nPWxU*J*{`|LHGWTb+4Wh$VDQ6+;i<2so}CC
zciP@xKDvYn$@C{aVFex?sF^*R<qC6~SEyddci@yJLQW0f)V*)KpqJ?fzwm@v7Vcm?
zTd;|!^_)6*Qg&2Mt##)|WvsP+`|^IQWR*yloC+kXYmqdWZ4{|8lO|iOYo~HeFp=11
zes*fD2Y8tRztPJyBN)%-Y|WvyvY~Ry4)zi++2q&slJV?dE;3N%E)6!>!Lrl2-C-Df
z^UcAmtIz%0MAp@Fjnrn2Jf3^O58@dflg>FaoouD|cu_CsMHLd6<(D^8&kmZUL>cOO
zl|!4p-7|!>Y5hY}SeqV_>a2{1+d}#dtM=ANWw#b?@5uFNh>Cb%W2Y8Pg`>$-q6<*p
zoG;dcT`;vPnJ__0pLgKg5v+JuA2d6R;|A~?%EH`&;%!+o-zKXcUX;$op7SLg(J!=i
z0}(qH+eGAR4zEkZTGq_B+kIm_T<F}Zb!<0o|2o5F94=&HD=RNA$5B8n^UBN1%dH29
zpr%%oA8?do+b@$)mK?jHrE-;)Sg$46nI?9vwqnius%S6#bgN#xi>F-9aN#*xO+2i~
z77;!oq9-|`$y0Si__#z=Ae}t+6i3uxA}U}fk4YtR%HsC&!+MpLlzp4=DNZ*C_LmBp
z>;_o@5vAHv@lqn{>Fw<uN%{xhBdNJop&lRZ7g7&9GOvt?y1Tn)BxAvK$r*uQ#O)7<
zNI&dKYKf%VpCTJ&R7=e`HI|%_+HmU0M5GYWLA<CQ0rm<os%E@XD8NMmTueme9FI?c
z4^r^k=2}#@m`H`;$_y@58APNirT9~!9#!FQDR>J93kq*}%(pz^TR5swc*|?P<rUw;
z8Gia(9#BlbRUp0vb`;(!`2Xy^3w$I;buZl7hrPRI{lLaN0;bffu#&AA%}A?Vt=3vw
z-j`*scGuFbZP=AfYo<nOYo>eL-J=KV^|c8Jgc}mz1_*?YH%<tb5cm>fa6*8DJb-*a
zfRG2|0o*tbasz~fkP!R+{->VZ(<5mYLi~Nduk9VpbXA=?b?VfqQ>RXy(y%t$xp30U
z%C%YNx~N;Uk+4VjC()>jx8WP*vNPbCd68j@$p8v2Ee#gVgB6~NB7Vf{JdOuYwi&hR
zyhnEH5!oH+%IoEKaNrg4`_DQKU4it}4>>REqK>`zL(a=KIxlt{=Rx^zoAbDH#fO}&
z8>ove|B$nF<7VgatsAfWkkh?+@JQiDCrIjC?@SJ&@CK?36{>=pP;jFvNSse)hjrO2
z(t~4b*QJi*RQ-6NT8JC71u*zCWQz(Cb1>?#{66bAPJxL3c-O_w<EXgnt(Q4ngfJoZ
zmdl)O3e>uJuEpbISY&pr%*22jbmlEh9xr&&FdfO*yy#WK7=zB>6wiAR$DqULnUaX$
zFRqIF^-G+WInJZ>x!pqQgO@nYhb|Fy5n|h`yyms)2_tZiT;g<Z8>rR2cz&SSA|I}e
z&DJa`j(8l_7kM<`RdK1)dPn;<$xs!qS*gvT6dpx4`~@kx9!9s_=Qz$e$8k13?EGSv
zv(1?tWKTR!v*bk&JI>aJsYAOqJnU?BFp`ZBX?Ov82hTO~FNpGV`5m=f<4g`-NyK_w
zjs=<{Wb2=9r3z_)R0jo8tR3@8r8cKH;U)<moN%lB{tCyTo6f*`TbQ%8tBW~XpGthN
z5kEIGXUpZ6V&pyE?QCLB_qM&IUBl&FL&HO&r(<3joWnhY7cr*`Pypa^UADi=A-Eg1
zGH2^%z!fah0o3r3w&7V-9RU&zNVM^Hz?mepFMgDSrx<O{qt4bXge)j>$#Psc=q26>
zFPX;(P7$Xv?*%tYetfe<8uc9`@&WlC(j3DZ52U$z4{5IQ-?b6nCkLGuI={HddA2h-
zc$M?S%etJ4Ug&Ju^g?IL^;bF0X8E^0^@L2t-}cn1OvT^!)Mc59zvzMuFLZ<q5n~yY
zfb1B*^T~tWM#Bmky#o(O>TS$vBituIJ^XE_0Q^{xiofltZ<49_tLXD$Ah1z$%BI01
zg<}u?5bJ*l>ffa6$Gk9p=MR$r4+4SB8UYaC$diXZXf$7>u_N|9c6r+nuFa_tYzwz>
zIZ`o#$K-d6U^Tg81Rs{~F@lwNe{q)(hF3{Z_H^cSU2-`TuFIXRn>O62w63S(9pSd=
zaz{>f#KqK!;~4pQ5H@NE8#+NCHXO?VumLD^X#j$8GquwY$Nh|U?GVQf8bJ^?Xb77+
zp+H~`9PR{$Xt7y?+1v>X@e}4s3^-l?MY^Eq+ng30+p4DEhBX5-*<JX{oXNqBkBHfI
z^CQqLA91#BzT^>S>qVO$ak?F7?9e-4%&qx)`ujJ`dyYdr{-FGRcC+LB+lI-(XFHF-
zrOWAd8euC)nxP*g>~zv-*5VnKcndsWvnz~#zrb;vUv(Vk*Br+gbQ}lEfuADP&FQK*
zjsramGtKKAr|S)l<NUniIB#^EF0k7t90(^dOG3$ck>fZg<Z=M|<BvIxGvqj14qoA4
zUM9Wodc>n}q-HiQ6OTB~mS2C0<4nlJw>r+&t8bMrZ<8-i%fBDS<Q+<I&y;_kBmZ9G
zI9s3(Fl6e+hbvQd$iF@E@3Q=R4w=r%AH68P$$=(B*j|Ukk2nqnDm}kxeg7~PI~O}n
z_r|#Dy%s-S=Q!OLOFI7?Uc3Y!EBFYg;9Cet)dKR6qXyhNknQdGcpKh%)rKFu#c{f~
zmIwC~OT|*Ld>0aDkVrc08T_2Zho|37;pb7u>3)uXZ%`a8l}d%uAYBC2faxOf7e-t0
zZ24wnyAdBZ;A6kzNZZCqe_;%7_5wt(8i)~O+k=nY_!!2=PJCR8k3M|-sMXG=J5KjR
zu{coWbQ8!xv+gCeFlu1wJ22waMn+1dVk@2<81YJYiq)mc(7^J1#V^cPs>M>#YbD_T
za33fa%Fl3|?oIe{wfaKR>p{u+j&p%*O;S{{HO;KsoyVOu*m~<>o2M`Of%5d$i>?6&
z{!qEu(X8x%hZR3}X60Y{rC%cH^Pk1a*K}lMl3?rN<!d_fGQqe2W_G}X4)|{~fglEi
zq{Onwt5zc(#|5m^cGsm&j=y+7tkd#4W^{;IJebj|@;hd9^&K;MO}>YHKz)aW<!<>N
zbIe`x``L|-Q_q-lVNbDLNVayt`F+o(57#bo(313nxqr*7SH0VBF78Ido?YcNOg^Km
z6~s+m@oPS>GTF-0Yt^-3mAbmx>bgYNRSzpUply@w){Qpk$3L=0Gp^L2V?W`AdRX!5
z)toA9&%~{p>?%wJPdtI|ZP;I>tMHqPy9y1j+2qwV>)4!Mhj`YggW)!5FRA6U<3`I)
zyY(Ww4y--xr>%~wbvt19^r9*YgZc`~tA*LMz}Thvigj&&WWBY771{#u5K2B9!3o^^
zY`Yd%%&c0>{EVlqEtl!G9G^OH^Tffsa!6$#tlzrT27kljb`x^IU#h|Ho(%&I9*Kqr
zqOg_t!JPVANW9rPnTs&a`y@#G?Q<pvH%Kk&N?1o=Bt|B*<D!#c;r0{9NVs6^$AMp~
z@krTmz9`|~?-!lP!7n(@FFMZW==0C%^Uvt>PwDdy==00;`6c@NJbnHNeg3fntIySB
zh$A5d%g-P-RGxU^i6=fqc|J*>pP<h#(&r!1=kL?!X9&W@0>aiUkYT|2vyMZSoU0tC
z>uEyHZTTC(#ngsgedQ}1=hOJ{hxoYKakgHy(Q&p`H$cKd$}M?GWxg6}^VM$IZ2a9V
z5#H=LU67R6Hz~Co=czC!lZh3U*XuU`G<KzdQa8!VxH8YHtvZjO^Fk>9qy!704E+@k
z8nG<DqcQK2-+|WW<@e_}j`Q2{JM3TYk>8(deZOWi;EUBmvCG-&40JhLocZrgmAjlR
z{qNY|4C42n*Zl@8-(*a<*KxLdW1-8L!yH2fNU*`v?hqHevr}}#JBurk-%JW!PWPpE
zoGN(LY9R?}-l;iG_tkftD##2`D=4TIzgQsBRqS%MJT~MATrORh2QCkcZY5kEd)2EA
zE*tZ4x#A|Tve0U>L%7JD-NE?+@VHF89S^DkMIa*IQAXrjHl)~c=cL5o4SzdB7~Iz7
zfC^-g-JD<ZWe3BX*#WOI&)MO6E1su%4<4Jon||F*DOB&lW7Bp%?8jmOhn9n_%jgPC
z@{3W~M>aYclCuL5_Y%$;3spa2wN^m)U9d1<*j!FpP1N2u5U<1uZ^#Z|Q7d2-Dt9-P
zyIYmp2fXr=?hb>yCCJZPh;F(~66mjceY=ZZ@}ZwLU9=^iP=nKo%ULaq6w@5wQR3J9
zikI-19l&L=hwEO%*=;Sax)-gvPPS%1a1T36?GgQ1uuJb_=g^)W$&GeW8{ps0VY>(X
zpH8*uu`j-k+C-iIocuQJOt)#g5hpw<2(Bv#L=GV|AsSN7ZAix=vN_M}m;pDF<uVW<
zd`&*WJ<~jCHQ5omt(P4N7X2s;u;ER8B1jwq+tGY%CkvwJ0b2j>qrT8D54VDfMEkPw
z$-*>GMCL=mVh*xfQlsm+`S`kGKp*s0*nxRoSzw0^>r9ipA#4Xn#r?zb-9!*4UcD|l
zU?1xdIn!^!D^~+cf|5$Zmcnf0SLb+vFDF&LD5WTwKV(89PJHzmn*-)`0hb*`ewC|a
zOp!8qvF-)2dJlm<oA5YMFCfWhlX==iRqwFgmxY^QlvIKwQrbINM65KvtRZ2qMW)oM
z*pi~hdfPB>QEP=q$w0+Gex`aCS9tU8ig$Msc|q)n+jSH;kckS$Jb{8i`@VQE+o-?K
zHM2M^D=-;u*z8~<1A^7SKt*BFltqbX0yq*PPrU~{%zIqt$u+Go=~m`zVUVIjr4d26
zRBCey1~#!OVWZ&%Rd9I_Cc3Y%Y|=?hUa5z3exS;Me%1L(bHJ<fNY{bxrMH#3&x1s1
z1hms`y}vtb(%nQloos1<7V)~bqF?Ju=(VaEEJm3{iw9=?py~&@McHIgmxhV$FT1oz
zzB}dy+bjf8kA{G~BOAgZ52~RiJgpJ^ctNuU(IiaD%aSOn8Pqs>4`x<xQJh0eDrNG&
z$rSv>)eaXs&X!v@K$8+ILtE|LS5|n?EX>!J8inS3G+U@v7Vm{#btP#iu^-;(SJds}
z8y%<nx#Tl*JN8en&&jg?QpahJv5H=*`Ev~~7^sASW(DhYlN%0117vP;0#z-v-qTV~
zy$Act{1I<hd<c5W1o5YUt#nmP)L!R>hKC79y%x39c_9v4QHAT?0M+NbxEX~t-vB`s
zbCK7a$Jzi(>Vbx5cpdzZPMr;x4M@0=q?0SnR)aSbD(&g>+^Z+^ozwlAXQA9){@xaE
znfjr<>-ve*83a<T6B(+W=D3{V>H2drq!ECuNjC|7IUgo*GfV_9)mDfbl|b^uSN0T2
zqKXUHKb>oNkxqgn^5+`OW)v>349xL>N1o;zfHa8&LDdE{Oj4t!Y&x`N@SDvrtm{z?
zTaDk0d1YXMYf*zWhacUm;GwDozgh`{Bns=Pxe5GM=T$BLRS~df9d|7Um1w0&4gz@2
zVVujq=Qd9c#*XurF6Tz4JXEe#_?|r@yGrHVBYXFH!(OR0SQ_&7@>*r2R4b40+1cuz
z;o*_ep7I`Et(1p{hlWQ=dxuIRL%Vq;a^Nt6-Kcx8zItq<vlT0rt(6e#tH5!}FnD!4
z3y#x$<Ivv0*$S_WRH}Svq_le%-(BIuWxl(*cXzo`+FSD~dq+lg?;RQON+YwCa&5$`
z?cOuHd(Z5y>h8UzTFrNy%isIIUP^QSyyKL9aZ~BVo8GaZ%h~Yat}f^8<sX0L*QQ?e
z=E>jqSkK1lo}Od-{^!%ay3aZFj2GW_?ZXpq`@mCv^X>0{_u;v>e|hkCKJfa#9P53>
zdp`Q%cYouKi;nf)cFCXK_|pAb&TZNJlCPKk>Z*a?`Kb>+<!Q5z9lzzkM~;4__%pjp
z&pXxn)R_nV{{0`15550}qx|T@jZYjeZkc$;w|?c<Ui1^kAMn2Q&;0%04F2`TYhU@g
zXFTikn}72oUl{ryU-<g(|LV{GXz^QjY<lX825$e$2fq>bKL5*I|M<OI9(~uQGq;uw
zT>Y}WkM8`+r{4JEZ#(@@*FEjyzxzh-ukZNEV_RPOn&XQ<^?2{UK636a_B6ip$yZ<0
z{l34u<<>`^xpdpFytDiF-r9QlUEg`_@O8y^Jbc$1PHwsCpa15MKV5#;-~P(W?tSLK
zhK*fL7g6G+-&lV2%A1cB-#Pt1-|@NP+(%w}&zpYvjek1P|N3*^e$!uk@H<y*ntap$
z^Di^u(q~@&=(%5Oo_g^8KXxno{nuanwJ$t;!>9h@qc42yl6U{efpZVv)OG!3uY6kH
z<vTxeHn^?$rjOQt;Y&RiFFiK0a^N-Wqc0zM^fgbsqw*WSwYU6=1OI);AN<&vfzPm4
zz5cn6zxeBk_xTTf_tPIMTzaPKCtvr$ZC~(i{m@76d*br<J>?C5_u_|t@$&co*yj%Q
zPChj1{^iep{pCYfp8EF>gwMTx={;w^{i+Xt;uBx|_n&{~KYee<dtWj8%B^1>y42<8
zUi^FC`m5>Q+b`Y!2L9S#pZ}LP|H@xH(0}9c@n3!5761Jw|K-#>`86Ng^w}SM=eOVe
zxqJ3^ee$aZfBnE8UE8(c!3UjB|HGe@@BZ`ueTV<XxmT7x{OYNT7T^5g#gG2%smpGA
z?3=&zq764(^6^)_?eI^$@;U$d+y}n;%zyjt!88By@J9#Uf9R&;Px;2?Z{G07@guig
zx#zKe{nEEL{lduqb^UcOni+cipTGIu<4<|PhNt|(--i$V+~x23V(%Sad+7d$@3`u8
z^OJx1fm^@3|GKxos3&nQdH!pE^v$QX9|8`)_w~*1^<EJD(`83Lu<^Ghi~n}w!L1)X
zw)h49kDq?zqm^&{^t=E0T|fSl7rp;;N%!<Of4AuV{nIACSsZye``P{f5nT4jO;>*A
zdyjta$jy&TA9?KW-u>NM+54{gF|YYg7w<j&fxU;`a@{AkUp%yLDtYO99(wHuKK7yI
z=ls=Gf4cSeAGqhKSN+;+pYhbUmfYWY-G6-cs~aAC;OYPO?sv>T{i)yig<sv){n*ia
ze|*P3wOW6;C%Ws450&ota`m;p_wB!Y`Exg3^w^6k8-M$TYaaNw&%fe(|7-GdpZ>-b
zoBrUThoAS};Ml8Y9`&|=^Rs{O6R*DUtB)4D?tl3+`+obcKj44WdC8}K_mcjvesAiA
zSN;3j9zOmv&$;4{zIE3<k9_bC`?|jUg7FWA&;8QnHxyoZ_1+B+KG1dcOCSEq7yA2m
zp85ED#+uH3pZTrI(4~iNsa-ogTDx-et1tMIkG|o<U%KrNKK|X`-}3b<f8lvElV7?2
z8DIO<ji0*c*5`cU4X>X1+9&?^o3`vsPCfC)<;&kae%CANqu+V_f1JJQUv9hiUrJwk
zeb1KV&%O8Zx5n>z@X+6V<t@WsKK0XI`_>hIw0!3;f9L9-atHt7r(XBz3G~D-AAax8
zf9T+sd#}0Tcg}rfWaew{tXy8{`qwW!=UE?l##gR*_7%VP>relyUpw*E*1MiDGxN}g
zzxnhlZoTVgK393)$A03Xc*FQ7zx$i7|Hj1Ie)gsR@sF?h!Ye*@_9F-1`N=2V`@Wxl
z;L!cwy6jh;vU_>yA7<Xr^~~!1x4-0%>JM#v^Plbh<)1kEj<5au-Q%C=-}F0|-ue6u
z*JGK{P38oe2^wCdX(^DH2^u_}hgzoPIIK*8moytqJ+DKRP}>Sdm8Fc>Y=~0&J6=_i
zMhMf^NxAi~L(BnW<$`A*9?UrEJ+>a6CEsJd7?R&H->UbhPL=&<Dob|Dmvzy!y+wN6
z!E)8rg-y{~((KV$4mq&*3CBD#ZXwGixXSL(c`kVt<q=L-aAqMeepGpuGdU;=(<*xt
z6`mg&92$~^H#on2rQ>}3N@`V?stBe)_<8}@W&#%bO$!)dauES*Hf?OL-H^uQV#*UG
zaTD`A2+U`bLdC0dy+Tq6u*IbkuyjI+y0^lkJ<TXgLfzG>5GgrH#I-ts=^up_m+M|I
zu$b_sE(4wkctR%8LG<s0<2Y}U{dJ2&)?a$y5qFP#f7EfXJx9-^+~vn}%yFETi`UL^
zD8KUiXEy@o<lvYCH%53<UZxCk6CB@u1Z@2*d^{5$+Z?BFn{XHG>gpm_lDn$md_Sv(
z^MzJaADd5-W;{AD5c5ha@{^S!tr2Q4Iu)uxj2-HMY7iIhZSiQOp9Nv!*YMYC@G)bb
zDpbRHHgRHc7b|~GV+W^Xjp3l<Y<aXxboniWDQu=M1sXN4UZ3?U3m1$OfM5|kcF>>m
zVdzo@ovAQP*n#o2(YDFtI9)_KA|jFV9^E9}9B}Tfx*6AkLZ%rhA{`0CxjHYv+zA3%
zHQ~wB^iY0HN7v}uE#$EOcz11ea-u)y2pzjiHT901oE8+DDrYFB+Hm}4YQqcjv7B53
z%dL2v$GcfIh%*%&AoHezj|1O141R14_^)X;n}C1I+Elm~^%XIYZQdrHPGN#wwH!>2
zuYt+wkNgHXpFVFDz6j!Su@&&7xD><W6eP{U0$<V61VX*p^ePKxJqrPY3F+>7SXq$r
zK;~->c%GJckWtNMbD%z$G~t*ValO!k(@?Y740!<t4c}T}0*7YOOc^2w2fQ<OD6C~5
zlBGdJVS&|IG(6B~*5iRFUTh9Dz4YSN+II`%W^KTWjD*hY%TYRx9(h4U%iX*@0nRqf
z8nX))so8oWFPPInu!^=av}Wg;DJ#a0q|<ADJ>k&+>|d?GPxOiq_B;!W%*L0KLR(gx
zxoFQ?_o6x8o;ib_gli0>Fk7_)tJ#(im?^9*XkgS_(3aT@75&(c+b9iNrv*ahNq7W<
zgzE1MshfTyZV)7uAp=Ebs8tF{qp6qexlm@~NUzZ|6cJD=MytwAk4-v8g4LEv*wmc}
zgNT(>^Mb^Sbt>3A8XlNyGz<5H#tH<rz$#=67a6)M3$UU_29H&GEb^NvI%fKuk~37y
z)Qv1&%Z$Dp2-$%n(WB8jJJ(!n)-~pm!jx363f$~*DJeqfDZ5Lypx|ahO4;`sut*PE
znuBbSLN(j`mrYDr5wnTZT-6n_-*vrdJ0nauN{-p)Kf4skw-h$eBvmO&O<LMAO0@N=
zehVY55;m+w236)&7pnu!h}V3znJs8a@8uy3g*z4iQP>DIa0qC*N%cy(aKM#rc#wop
z#CY)Mwc;yr_7N;w9I>hJHJRtxa8$r*Lmm}T)~Rb9$N4j`nDkygAstknj~#w=vLk%@
z{^4)Lclb|z0t9g!XZxux=l-qmd41w7Sd0i%N7K9ESQDUy3y!npzFQXN>yESK+wsCY
zEi|wJd{_Hc7&faio9f(g*xzp1A$Po362b|JC6KfUTjI0iSQIm%hA9Ur9y31>S>YAN
z;1#xg+YWY;#|f{pB|n*GWF=4h1-84mYZ-~tE4<2X@#ekYMV>#)2AJnn;6ifae3;O^
zYn8Bpd`JB_Aw7Bfwo&3wc64I;<gxL|L(E+gt^zIc6o^r+iz0VOJgHdBmgfD+JX`YX
zbvDa^Gp{l~P{>PcCG3;qQ%4S+EHhWYOb2vvH3}lzATw9`rceRy*~~*$=F~OM*^Ij~
z?aBi-%-kT6x(BqI)gkU??oumGyhLG{2XYT{ktGwuCX3t%bF=XSvRU>rcWDhM<q~t_
zdVWj+>!Q0X<Z_w0i(!=T<zm%Kyww|B9#okNOMbAP0z=HL@xk0c2dg2qOA>B<Wf>T>
z949RC8yp+m0gw7wg?6F+T8b%|A7c$9T`8)p8SzCwY{m5z<^|-P$as)MJ`F$Si_LZo
zx)pnK7&Cs2^|I3gev{Swh%b5dx~hb{Xjsh;s%&YVN1R5&SdSWBGi;2xZXc_LV`qu+
z=h%`L1%5Ec++!pc^kAoL{vI`UYGEs=GU)<>>=Ijim8bj!<||Y#jWH`0iwqLM-40sG
zVR_h(;$*y9jo4`kL031kZ~M0G+d8)o@=H2$j`bKg5EiDb@G*qH!kB8rzU|x2F<y^(
zd)rUQZV-|QPA8gVy6KH@5v{F-(Gpw>K>+Gvy!2}%K2_IMydWi(`~)O$w{JT~1lS=x
z6d-X`5ds(1>%5Y%23*Gg7R#=9`?k?q7;&#M&wS<wW7O}}AZ8VEC8EAY#{1n~)zbUq
zmqGPqNPXF*z6`4`yVaLH>dT1wvR8d6m-IIcyR3niHT3eXK9@c3d8{W{X>xWybMNXM
zzwZF#df%BIm(57Nqw#WtCv4&b0|Q`wsYPLfCG$$YgB<f=y$aI#0ZVwJ8Ae{T!e(3W
zCDcrG6a5rp!O#Q~TaV8mP{2x6Y@0LsEMSO^l}n8{)f0Y=I${OG)2m0^tFF*6<;#AY
z#Qi`lV8?ImXJInWqa{D)%%2Owh_h;|S%*)O9|q?)Fg5>*CZtCuQRpyFD)Yo7#0SKd
zppax4O#}D^SA!UtIuHU$Gi;x1@`(sXYbd)Pu%pM1Ffq|df#3(VkoCG^PDNcSqpZiS
zLt^aqDS+eED!Nj(h{x1>Ae8FOBqYRT201&gb9l=h?liV7#4x_MZ#xG&hkIz*Yc%Vm
z8L&G}G2x>S0}(JB^p9DseO;lnukmViaIqTufoE%8zqztZn%C&tmPzxv7@F5`zUH;f
zfPmKZnIDSQwU$POn{%N<{h-t+_-+^KJV?A^)XL81gUk&Va^4RycX2`LC_7S$8Rpu|
z#k{~an<q~hOJ`bBfl6oZq(P-~byT6!+46O$be?=ADxGKjT2!Xo8fsJ~_d4{bOo??X
zQkio9zb5scrAcY|Zxo;(o+9<6P^BQygs<m+g(kHwRVO{ClApAmQ!AaPRkZBCUO^hI
zhjU6DD34n6K7)F$X#Zr>ozf&9%;5c`)2#f?TtK)!`IM`jK<VZ%PK3=!D5putpl3)O
zkJPo-I?BFvwbHOMryXoH>z67*&ARjDLe1JrCmizCtn8@?4qr~_lV%A}!wCzhf|t?h
z3X%|X!s5s_h1IhaR=GzWY}}Ua|2(OFmjEXR9%COd2V7urds;3CsDPi{x`W*j`AH(q
zub-Ir>vg}$rjsaa%<>51iw%~_doi94`f(EZvn?3dT0xaZq%}`YoMd&s!h@J2llqs;
z`>`}5#LP1%JStwj&a1444sal|URg<RWmfkC&Q`*fF`v!WIXdv37Hk+;y1Ak_i^B#V
z2>8-KEv#30M3y*O`Pb`&n|K|wWZp|yz<Cv5X1O+RNCO?v@M~5Hy~v^k7O(cxIxm)s
zsw%{b5k4**Wx;y*j6_QvOA(9e?c0=3zc}n7j2nzGwuAMQS;T8xsQy?y`9ZUluthKO
zMXTpIL!c(s^x|095R;I#usURnNgXucONXibtOrH}k+y>^@tyTLN{hZQFhdq`>_##k
zMPbAmJcivyQmNssFfa1anN}5)b26T@z)OM&>{<!)Sd17;IKm@VfmId?ng)DH_5=;a
zeg@0^B4>W0Q1y$v$Xx1893vQT*(|Sw4IW!BVVpsmm*)LCXT80rN1J|Sf%TZy_nscD
z^T2vD!wRh2H`52J(ttKA0Scbcn1d-4?b_j$IzkkvoHMlUL<}z>V$AY6KOi&Kd6Hy6
z(_|ea$!P&C+b^K$W!6T^Y@^A_cN)7t+!%SrOn1z%ZrhkAi7u$F*onD2O@W>1Q5P3o
zEa2rs!>!6^TXW2%VKmBm6qHoHh$pScW&#Ps>MXD)nHOYdz<R@|9Z4ufgXA?~{6{(^
zi<<Ao@4NA$m@Fr#T;$%tXi$}4q-h0pe}UImq`V26JiynRPo6x%B7QHzrNzZ!F;z{?
zTi~arjxraHJ);8yI!484X&{~tTlH!o2$KSdq;$;^&swWqKgk<SM6zPNhOn#%_Gd-b
zqgn#fh(ekKwT~?e7(_rDAvFah{4ikiIB*?EnX`kv(2EO;UcJR%NakV07{#Hzq!k-c
zLPEU>LyjNJshXA|uL)N@+6iGV9Ib}zY_V88$HJgMeQ5!t-yPs7vZ1_yjb|VU!#b;x
zQK}jz1^6+Hxji;fTn4`>w?|UiWz|+hrm?Y7u~aI@Otnn$jK*y2Y>IzCF3(Sl%?pGT
z20$EVOhOjVhfA#0WHFhRBF_9c*a;ySc@@qSMJi!X^@+xU`k3`FLCTo|QyH1|l888|
z8q$oHknwev!|X~OrohRLgORY3w7hzKMa^^~hvbtA0@$#UY@`yXZ9~~L9OP!qe`-*|
z(BC7#?H^;qC1tr+8Sw02UM=Af8!oYHS*ci#g{3pboVqh+vz!NPn8h5li2LQvnc#O!
z)%7r#V>}33bMvOJ@sRjdB7nKa%p_C6SRwnUHPw5GH8I!{gJ5ALAy}?mx@4*q*|hL6
zsW6_)XH=MU(OO%EVZssAQdGN+mB~!Wm=RF9B8=ECt8?(GRyCCF;cnjst<w3LHXlAq
zsgXG+O>HIe-T(e7A3L~D>wdM59o(ltne53|aIegP1#R-?tvjp}s@u2Gm>dvevJqCf
z@L8l$sJs^|9{m5}V%4AX@eMY(0p$%SPF=zm@W6Pn5+%hZZ|vK?Z2%eNS=#|0BM*B@
zbzXo}*RF(lg-MTU&PQI%$6RoMz)*^f3rF$D;K`%YQ`6(qH;)ev?;b1-mJW=U3*`&M
zc@1c7jo2X$8LQUh(wk-#xQniX;75i|9-TgP;K20F<3l66+FIkDUk|JSjkPrg)>U~5
zcDy0a#-57m`?hb}A$%Z>`4ujs$FQ;B9yvK(0HYM9%HR_8?T%I0ueZkrjTw^IP)w5w
zDu(8c)tOD_ZEM928tw{|jo_{)JA!vUNf7kmycTdcc4UY-F+FueboZT4((bk}9DI_H
zGeg7a#EWV^uU7>j!KqTF7RFo2d<dWN!jUHl@)(GI6F$Fi(PLh{9xfGx2UtNV)MG0=
zCZFhrw~V-cl~xq-ARz~MpT}e6Qb{L^9XI3(xHt?xHdw-97XI)uRnJlD@~~%%Jo0NR
zR35Sf*pU2CXd@0!MXh~LTRsqKtF>ID|F9)&8Y@cK9tAQREn&u1K}|atxaord(%WB1
zNQoRN@CLgM=uyPHwb7$&-zR#5u;nO|Sq>2fcb9gL?%Go-iI358xx9`lVLTceA0Hn-
zPvE7}`2z>9GVrS0+#Pevf-?PVq&QOCRorFwKsu+p4@%r~ts!Yg{^%FeJ^SJ&Wh%T>
z>3G6VuWajeA9&|0NS}MQG7e?};J`k3u`CB2?nRr#w5blnAn=-DrPUquSK&t6U0<JD
zP<q~ZpZZ{Bm(7Q9q6UN3<T_&gUwA}?4Qga*XsnH_bs{Bw4gr+2&;G1&E+m(}M+P%T
zIOG`-a}Y?P3pO1ojy&1XRn(QE>IaN&?s=2d8TiOhhQQ)vN*jIm7U{nyKf;Q_<z0J=
z<?^8VM@FPog+<$GA?xUjWU{^GVtMaiu{^T3I7m{DPSgv(<BV9N1B=Sxc<+JN&~o*m
z`fEtMT?6s<$N9@uDc%Ml-kz~}2W($zfiXd`7n9pP*a`KrV=8PVJi00LqAI<HrHQmB
zD}kLp%|@GE6m#aP5JT{S=g}<64b1VxWivAw8<MGl%h(o~3e@Xd@G`LjY^woceV&0W
zU*<uEL$5c-2ZRgq+VD>-%$;ghr-jwe#b!{=4|tVkG-+iLwXxHRHtkiACIM?lw4yeD
z#sryD;Cp2ttipcs7H-9E-#KAJ8XGK?8Zm2l%VWc~sg4*Eco_H5(><oAS&!9?0tswj
zteOS1&0w0}FyVArsD)8M`iPS=df0+Rat_u{Wn@&17+SRvav|(R(LoCHJ3;PmXV1~v
zRFXQI=*B{)bw|&-3w*^Lb=`f;C7UgMKeta7hkDZ6lPX@=?^@Jx`|`LYhs}wLGX&}Y
zUb106=yom<gNO`jW5c<mvaEN#?jh`HxqaY)9qjaI5_(bOtuRBAF+mfUe-usd{Tw?-
zjj+nNF5YyYF;Q^)whnEq@<r3kvo5ZY2zVVe#uT*D-A4!-!P1-U1XDam&UB)ZGNg~C
zXd-Ntedo4sOAUfljr*kC@XxMPI^|_bryQRw#E7+KE0wSRZ?7il``!nHvG7_*-;464
z?-m6B;y1Z+hZLg6r<n-hCM-Ooh`vVks2$`3VRI$I9cZk#(#Hl%rQyP0X>d2AxJOI`
zKDv>@9~Gn4e&IlfvRDrK5s!5}{aBjCei)4HDT<wJokfJsF2L~DFN}bg9Cqx0TLT&9
zy}A-j@u>7sMBp}gbO*1*J{Y5|$J0y+1(9LETIG>#QU-7%lhq82>LsRZ<~x*mUeJTG
zoMxl<gtN3)C74r*17X`VwlT431oK`L#zjSx0g}gAoS@IQArmeIJW8P_rl+yq(_&{u
zS{2EqoYuF}R)A%00mp41;VMy`_4c$OS5$%Ps8L1c7NfZ0_OY;)G+W6SZ6PbE$Yu)r
zU3f;5|L%@+=uuD{u^)x20FN4e;MGC<j!jd%B-<ro_|bL@;z^x<qqOxjMP5}4HD^7o
z$w8S`hyttAY%~cgQN6}a3m0*V6GRp^!)9z+8u4Uh%`lCYU{kc~esbQAMP^p>>M=kV
zZK$p1^4krz+P;nU-lTLi)zf~5e4DLNq{$gATbEsMyk0*T1}Rur3m*s@jW7`QUJ4NK
z{6j!RJ3=7OVZY8zj>7W~DdSrvS1`vT+Mr}EFYl_=DqeMXwp1D%-ZNA#m3CJ=Z`Y7l
z9xQu<gVhnfcTcHQ+f|$0Td9o<57tV9-k#Ek=M7hfckkXU$dQ6SEdvQcBG{W1>Ub$M
zEE>{G?4x)0_V$t~SrshocV}CEJ@JD=61C!_;02ZWFv6@k#$0;Et1i3mK6b`zJ2AEf
z5DFjW_TlIQZ4z8CfHCHJ^}5@K(-bxWMh@DomMyWRA)I}}Ky27h!>zsrlkaDxJ|!7x
zhYlK=J3)IrP@*jG@UjsD!Kiz^?wR0ByC524v<;qRJ+%dA?-%5XvFs*+VzxfB<4lcF
z@3mATE@f(8Q11$+sMNNRl?DY5AbaPEsDcgHe41M`Pt7p9f@!!P#O@wrWt-TH$z4u&
zI&8@8W^8#!*o&p3l`CN@vil(J76Xwn=rx3z*aDSJ6>mi+PVvCQVOkSzRm5QJCs$26
z(IUIl45=`v9j{kuT=%*<OsgnYK%bhKw}Kc8G`^|`Fg(*Ck<P*)QBFpLc4qd5Y!)-6
zjlgO9{2C=^F>=+=RtKY`!1aT%v#c%iKI;_%&${fK<s&8;U&Mh0)#R+8NyM^POYf?7
zG-XMNTwA%UUXa!aE?6Icxhi)sDRgufuystKg271U|6q6@f~Jk!nnf)!gX?|Z@?l9X
zs}IzyW|?fktv9V4I3@=Kjb^DdsU-38uo;e&7lVabNHP!JtU5TeH8SM*q7o*j5N%9F
zC66?Ua!NiP9D>J=F<A&jRR*KZjI8{q$muCp9AaeddcrZwlIe~UA-)GR#<t|rqsxxK
zjDvclI@|r$4o0&x23)$lK6$CI$GQn*8S7E>Ay;^D8c#+K7hPj<UVD|8)H~KD<gBW4
zb=)C%IszI~FfJG))m({^Z1aVnq#$X+Svci0s5A>niKu&BvIZKiy1-RqO5{xiw%*6i
zNb!+=ZGlmJyN<xy-v?i|$K1|g&vs5pGiM%<HXd!~NJK#3(V|x$E8{AW3=6BCAdYSC
zi=&}Or=!LFXVMRjJkFH&vMp;uc2;_snYQ4Lg!7Rbgb>q`GN;uY0-U1-(%(xi3|JDi
zgid9fS99{IB@O`)-kfA0nvCbzdPpFg!nAT@Tbd;Qkxo)%JsNCLDo;wOR1RY*Lr%X8
z3okJej6JG}W7J4GuAE&*$uu)yjr`X$1s%tgssOoo3PEq?gY-}n3^G)T_hou`O?83@
zFtbnUw!<j^@-mRlFwVGli^kFPaR!Q0-VnAk;f_5cH|%DT^+>f-fHB;vP%$IV2I`*Q
zcpECk9R^&==$zpZ_e?OcbCI)Z7;wgMzXy48_S2{f!X-Abv%wNS;#CABz>hljaHzk?
z`uffUC&@uq#}o;q!{RKjhf6pDj`InK-VimsdQqHyhEpNN9k~Ra=u)P=rz+DPEdmd;
z;v{U?*1dnc`sc{H_vp*T-pVkndpY-&VC(o23kJ@)d~N%-9Z?u2#YWJo6cHS-)uaRQ
z9hUv8m>BHkSjIIkSD|!^v);l0UCMX&thaD?6ni(8OT{7jf23S&wq|h%K>G%-krftX
zaXVfLB)||ocVDIGsm~8(^e3C9C$A9uRd3uSX!?B6v|w9IanpoQ-^98G)Xlzw3H9w)
z?&yx<3iMGjg~F&LO!mj8CHIpt)rN&ULf|S!A62TNs7$6JUz^=^&-(1HcZf(GqwHW9
zAdF9|GB3Ci2YR}*MkZ7{MS%>IjNZW*J2L=DEzcoVaX^G@W>Tv?71hZWC~gu_Mp(F8
z6B7dYMi?h>`;{9~a5b0rj!Xo8BJaq^;vy&mAH!9+Q8BQ|Jl(3*{AEUdq$-updrr3+
z@$KXdq$Vm;qbM$|`v<0u9#&a21ffyK6M?KrWkB-|(g_G*Hyt%VDP)33qnVNIP(;lZ
zB6%sVo2w{p(c2gX&T)D5M`6ENuhQbQuN|FwI7du)95EH(dhUlo%zAN;LO-MH5X6z6
zgfp1VTTM9Z_Ngc&Eu3reVz$KV^&-%nfS)^p&_p-`)ZjstwPLJ%d1XFi1v=3rPJ#$J
zFhm^WUX}GKpW-O46!}sZHHuYE!N3L%9=hq&k>Y&PsPCYn1yQsQ6{<O+9?oHZj%J7?
zZ2FaWOw5`6qBha6u?BC1(Mrl}ssc@&YR*Mom8bZqCEn?~Ldm~bY@mgtc&dIs7$R&L
zbMH7lb?cF-<EKtQ0GTeP+jowL;Q1#*>|9ktv;E=jV|r)V&Uv6B*b{WkQ<x!F2Po*N
z3=&dEc%9EhUc=OUQocDEF7RNY%G{Bmy`_=eBSV9`M#smG4BcHV&)06B8l2qSJTg9a
z@YdZgSe!r3cipmgPp}d;m(UE=Mg{7?yq5q{p<F5r?H(!*mG+i)51|q6uHjv~N<+JL
z4U_z3r_}K^oT&gS*vQh*_Y6BzuVKi~MPaLnzRgyAavs4`Q1wtrRRGpft;U7#2_3_j
z_ZI2Up%5fsdI~H?>3%h4z2H!)2S2;}K;bYF$KkMSjf?CEut30;dbkAqsVte#<c+N?
z_8YBw;su;SEEPKuDn2P|Cl%Ks5j5T`5yiXV^5CvrBZDKQJ>o^VG_q&!?var}@;ZY~
zumeSh2lwvUGrVVL7f~a>e%TDS*Q?k2h-g`=qC4$e_sxe5eqUIt`4vtj4B%skLM(X=
z@<hlA(Jm4d0$tS~s7@ezGMt;kF;J*ENr)R1>40Rs(wGhF2nLtt42za_mGK>ZGCwWL
z$VG%{jo4T^5Z1%!IBiX-EC&CBJmHmOqKPmq2YJnF)e|#k;Cf0k(8I-f+9^@+?V^We
z;AB(QYx+gM>DN|@VKgUqSa$4C%VoKNTx2K0IQDTKmUi>wQOuRIb>2_sWD3|D>t{GZ
z=?8QDU^8A1n}{-HS|Gd<4u~CTvmXsvqjiMLZF8i3^|NNSZlT@vqo9C#Jg9J1P)LXP
z<;BbmaWj!$TX9L#MJf9oR6Ev7QItdn&|aTdpG=F1auQig75i9^owBd5$mra0D8up@
z6cFBQ(evxXD-^?uu8)f)>NtJ`8|{ENq9kfyy&`r}%wAXvqY4+qcp;7O^fS$qbRKXf
zxC(#0`jWSzjzFvW`l0s+$|FQpNRy|c5i8__%>{?UwzQA{$xIg?<cn|<nFuQNR+Uej
zP;9I?G1I+7UDHYStYZ-%AIJ$Wj+ery%G?t?Uhtw}lH0^ehfki6HL=^}d1eHKlIsA0
z!;}|P!^S}hfQ18T>C{urdgxVYI*n^|CeovO>C6Uqi*lrfnE)({;^=hGM3o1LpJ2|;
zgO4UKw|&h5*^@0X&4cPqet<|{8R;RaMf#y-I*`;c-PX%H=gLw3#7Y@g_<D75URALz
z$b@OkudyH$>%w+YH;z(4i5I#^ybzefT_Q}_K|kV^B#c%N2rt!Dl$r9lbUCvi&klA-
z+>Il_WJ{@3tJY~A#D3!A0C<4w%IO3q1h_;b3j+D=^3<t<$l0uvWL0%k#3hiq#hi`k
zc?WKu>K7~N*hi$O`U;B|{AOPko+@u^)6>&8vs?K}JDTx4Ufb1Mn*kjVMvjg})Y!^m
zMTID_YP35vy)fwo-W-oQRE8{*UXW_d$$8EWwyK@*qa?faL}6@i(k#r0)%$5p=@nw$
z^l(F6l_5?<Fb91|cwdDz`HDoH1p^mk3RNEw0bs?Hk`nAW9<1Ovt>j0X=Y=nw2&pP8
zTUFLOzzX}>-F+x2j)Tz1K=ET?(2RIYS3(lPs4UgrO@wktb2)IM@UO1dN-&><t)v+F
zwSMboSg+!h8UPr4#%M~jj2Eo13Yk^ZA{7YbJZ9UngTs(3#vl%=)ciTRk+JTrxNN2$
z`|cM6^M3cPT%c#p6srS8m(7Spch2S|e1Y_K4a~nedo|+X(33|*6}Nj)Ovs*hNwE_;
zqimcz7#j@(arX956hUJYjn5ziHzB#u5jrlmq~-peqLyvN?O+5ZPa{Ed(WBZZp5APh
zy+#2Yg~TT1Uu-P1n&;PfbyPSV9E!*!yn~E#<kv)aP&h;POi<;EG!Kul9{Cmg)s|<f
zCE`ekZ1NX!=5*I;G#CCv_q%tcZAsG7GIi?MndpWyffW<8jr^eOs>GM<uBb16riee)
z3giGG8nq$Zfv!t_HJN7(FIwOcJL6hN=hIx+L4}4J`*U#WTjC@RD3qo&f0%h$*rn72
zE(4B8uMuOn>J}Dy!J*QCP7bQd;(C=dTcs>)|L`};YIv2h!fLx8c;2=d-uJ$Dk{$MA
z3&Ljj0@w`4Y@6ZsR9RRI({Ereto}{9k1=v`?S*2<0tsZ1>@4@8w7F0ZgmpSx4weCI
z6^F}yW6amCYKNBn<oK<6;%Rd-%lf$K6)CwVPPKwt!dccc4H1Ry2^vVEb*$zu!|Fz_
zD13o@f$kI)YLTOdRLx(O)bN9~h2Z_}wXPCenE`@5mrl-prV`uNPrrpDWIMv{(Ze#X
zO?E7PKUE3m<a1_j6pRecNSkcYwa_3`Y@t{VstWfpn+xw<Y+G2%aWl+r7hbunJcKhw
zrZ%Ooo3jJH)Zj@Vz`8<?*|JAf_UU=V0Z>73)LT|!<q>2z@T+{0j&{(_l|G+fAFg0@
zgoC`(?3$E})@3aBVL}Z{*-U{0t!O-|%$qW)dc3GI@57?dibV8+_R@+<y3!N?>DeqA
zxWg>8QU>t!z5={e4KYr(TRp6GQkyZ_O0(@5(iGAmRarZ%WU<tiRtW38u!34IY-{F8
zxT&jd7psNwplVD6%820yFcoP@1y!H?lUX2c2hb^PY<VbH6ss(&qDepS4|)kd={NXv
z;x*t20>+oiYbMw*W|sAwltAmZvZfpCkA`z(Y?rXCvmLNf$n61>eIllf1^M1W?hemS
zIwT$8$%)qNgg{qO?FdiC?V}_aP}wwtf#iL=uc}-rAkbX0Lu_hxiZA+bySM5<k=bb;
z`Ck243jyY`X}9xe90r>dG=!}8gE`49azI!m)9LLArbMbeH?{nF6}@WD4^zjnb)#@l
zWU~(>S@7ivbI~n^nN2NX+DQAT*rLevd+PP^dbN$DCvep4R=#pOLN84xVPx~DWk<2l
zJHiu@&_?S+am8!$!(lYV=MF7fMKJS{r-JqFK%IL5)_e#om3=SgS4F4;^Iqgt5*|(Q
zX5FjUIO?RyRz2~XbsN(|KK71|+qE7h)4)-m+`tuh-J-z~z>R~8ER2ps9PF-gPt;D%
z^Wc#1a#t@W$M3YVOisW*Po>@5YIp&rIM@pXXp=Y*A8ys_D+ff#0FIM^s@z0;@Ypnt
z?$xnfpGqL9u@Y2rUsA-!G$56KipM-TmZV27Mtg^vkkk=BBr3obB9jXTeVgP{jqGpq
zx>W!_k8oSep9=it!GobaC{9K7LqSDI1VtdiE{rnZ#OOF0R_vJpCN#BAWL0fj@u7&&
z#(|ZNVs@TYl5lWUAtv?$4u?^vvb0xl)5@v9N0Tz#e!Exq;blC%5+t5Ij56E6R)t3W
zfxMWbGnxt+lQ!wkiO6JDNh!rnhH0Lk633mYN~O0-P=x-YxJU<tx2Z)buyu^j@gSK_
zY%Z{@RwM>77A&Av^1*N^fb}Ck6||E6ud0E0BEa;8IiYC*G%u%8j7Q>7xULA%357R3
zO=`DZxqk3tIy{L(fwPDe*F&)^j7OR^C!3d9Ma86K<^;xi6acwB-BZFjgdSO~JbNI1
z^&v*Fac>uaO5_A$ErZ+7`Kg^C<zY@sm`wTZG1ikpTdioY1kWDQR4bHpRTPdwZaR&n
zft_RWFlOg-tEeZJ7}zion8gY@OTy6%y2f{jVP8j+Nlde=lLv~hE}#f%ogh{xF@<+t
zE|RhuSy)<c6eu{W%fdEl;w1Emg}KaO=nixs@c;`cjM0)H@XQlfWxI%2yT??~tCs@l
zP8$%1^VV_n7-#H6$VQx{76*9918~(&&85~E3o*&!8dKRE;!*t)xe%;Ru3RWuq1vKT
zYguZsJ-&o7hN=5;axw@bwFtu30nrpdiL3q2Mpq8n?lA!v2dz?h+gva^^z@l*DLR1E
zUaLF@CZn#Vj^?)cx+`g#%EjcFa2n%cizu7E&ST+#AY&QskoOUF0C)~(it~gD^<VqJ
z^3<v5^ElQlSo8c2e*-NM@oEh`&H}Bp1a<eZj7%kq$OVCvv$ng>mO^w#D&k-l<S20a
zF1!XQnoLDnJmgynV4gg`rli(4?ml)pJtNFqFi3;5C8Fyd92nXtqsBhTcNOK=9!Scu
zT7=4kIsmORwW8G;fgVFS>tT#VY4bhJda@bl=m`m%)T}BU>;)3!c1z1VV9^Fa2LM+C
zS?LX=$e?;@*|H5)qSLGtED*8Qm2;#{N{{;UkAOhqMh84;A3TB?&NF-iPA4ER1I5uz
zw=iWV$R=e>1=(adY!5HBQD<saI^&5nB9lctxpC4~Oj_&G?}bS~*436IhhL{;%b1Wt
zBCWq#4NDs{<OoUEn$D7&mRk<|WZ68dN-bNF<|i?Us4Z|URAj7w*gJ)?rPON`y2fO+
z<&VmX5n<!OdV5qsdFHuF$F7u;MFr9gmTgOyG=fx+8TF)#vC};k(OFMARRMK-UFP<=
zOs)-5^{YJV1H>qNh$g3wR!#blGE>__oR!#+h?;)j<|!Au=d0&h9@(7<YA^fD3g9BB
zfu7bw+DgrvgmZ$s*oSO%lw;MCB!|!!CT3D$zY9yaQsk+6+3#kww-v!1hcFkao(Iyp
zlr0F_O2%YRECggxw2F)QpKOj=QnVFTQ6g)8)L8N&&3IaWpz>Opw3U|*zIo+^<}1_-
z+5{M5Zo_ZJvz!jzXHvYVk?BrrfErt?wf@Q5e$c0T>9HqG^|XsYGh(w4<rtaSC%Zij
zPj!!AffO%GzN4|I^I4s*d`f_n0+Y53>nyZwZ}OO)R4_6bOjoH4s6_LEDX%1el9f7(
zfzXpS2dA)=JMmgDcBGvkf}o&1l*D_pSdo#%VKpEVEPSGrsS5!?gt53=Gq}=%tY%`*
zPU=Q-``YLs#@4Jg5XA~@iW1?xgY_W6l%uz*j4ipc3HCH<<u@ve_0pb-?br79fzfXA
zHV{ne34gZkSA=&ikD-i##tN!2uc;olQ`LrH`lW3_Hjq-bX=?(+)f1xpdM8gMv1Md8
z!%gjTr_4GXG@2v>f<}`z9aAQc_1j3O?U1ii;>HXpyQW>t#SKc>Y8`cr2c__9fnP{b
zh5b0qdJK_tFpAzDpjp`Of(|g%x_vUJhbqU~Duja}vW~hPiWlK0Lx9#>dnF7Kuac~z
z@&h8LUAJ90r)tLBo4u%tDPuHC5u1*X8MNIzN=tux*yNKlTNpEkE~~baDRRYH)zWxF
z|EbM8DyHML<aZr1o59!KYpyV1q;jEi1&K`8uvOuw=5rD5#UR$k8la&lp$U<hEL8mh
z69p>2g}psesV(exgF1ZV*TEn_K^6m(xKxfvkq6EYM1E7&`8HO`9XtlVA1rzjS{6IW
z5g7rXCOEmkarJzuY@v$grq44FKr^}b$-(~CB0t9hk`FIKA4G5taqEZ>bdWF^bAbqI
z;07TbuBH2)HODh%%C%!ahV#yFHI%HRL^JhHNvf4OxaCNa43}m!X-gk>twZ4&8<q-Z
zS=isM&{Dh7>Uq1;Y5?Xn@32yi+tlB7^;!3$_;yArfsE-vAdg|j>A^q(BP;yifZ``E
zXe7Sg6#2YH5kPVUPPV+9>0M^I@2O?n3=F<PKawFyBzN`Ln}JFLizQ=`N3&GaY5vU5
z409~BG0d=eyVh+wn6(8ic4=^p)oC^w1=To-Se*xR$^6)9)}t~aF$sfK1GmV{u)z|W
zA-~lzcl@RU2M--Sa`VJ3w;r85cKpO`Q`09;-G0ZN&wqh8TdDHe+`NC!LcI}$&3mIb
zX)P`-ue_*K9vs>=ynD~cUJ<=W&_x=eEVnvr&7n=!E7KIA^+;biLJz0|y_8mE?fVKf
zM37&4&|*JWea~9klyXZdFKN`;Ne?c6xPCtC2zO67Yr826k6jZBiIArj0YGkP@<K(b
zv|(80LB%n>NH6Snn;vc)AkH6Su8;Vsu=cGDKNYR1=vT*bAkL_@H_=OF0MCl3aP@G`
zhkisgTB`u~^JNwbOff#X(rmGso>abdIy|!2ePtrlgdM5SiYYpUd+ouCAe32nq=1+z
z1hY)gg@<%;p;n}iVoqkgC3c;~<AY+n8YNtBCL321lW3-m6z8Q-u{HIHpvr?ps>0ep
zt90%Y5ywgIc8=CL$SVgDY%~!(KWMl`t_7%3R)dC24oPj@BFjStlZ)z1NanUY3<_Cq
zj{tuy8<g^wqN4Rk#EZ-=>=$|)Au4vd#P|`|om^@1;|M&dIJ!r4Olom)lm|dZ2As>w
zAqj{X%_gW|Qr07Dk;qEev^^+O5LXcKdQ*lFJ;ZP2EB%7delRAhH+>}y2|a2(qrSAy
z6ExGL5k#0|)^jUg(WJ!HTzV=qDvlsPmgxmnsu!-KUJyi<dubWNNv6$l5~W&vK22#S
zcAaCsLuV;MD^%1jqweL?Y?J~8N@Di9XMl)^ujK}<c7v1@7!)ttVn#UxGjLoL2oH}E
zUef-#3JPM4M_0~$Unl?$28R;c8V89=suyrsrP3Mgot^XOiZ-qn5x42Rwj*E=i)%{d
z0Au^vNXb&aX!RrSHWgV)Y|kFSiR2@oh&<EQz0@u-s?`RW7z|1r?_k~C-Q=;YTwq1W
z7{presw+q}?l|NlbaRq4$!kW9Gbt}7y^0WJxf8tQBcv7Mv>c8ny$YQutgnn$8-C!&
z36IDX&d6|UTTIK@RBQ#DnQnNMMIKbcD5l5?I0~a#tfx~otOxjm!(b&#&zNMgz}1PK
zg_kP~pvH)=xY&;Br<+QbeTnmwQ@dOpYZdj8;*#bsV*p$d5mbcZkaDhqn}|F<QBB1o
z6sL=n(+D0JYRa+)YE~Cg{&u1iSkR8G1By}XSP&PXG$r?eMkO|avkW3!#%ht8seZ+E
zq8{psc7td392ZrdLP+?rSg{v#f=r)^>Kd&80hLq$X{r^Ep{t1BL55YFR%mz?CU{11
z|3VNh(GgSxo}Tq$Zm24bFIm7+ophK^c)>VJQE3fi`_Px}1W6vZ6^IH25`twBsmb0l
zCf98}>dc_X_qr$QOD)3AVR_!$SyCfQI5O!GMinExL5hzg1A#+&><WzIKV0J5-OIe$
zin`~ZOcyl_T6@7FY}s5WZ=!b3NmjImS*LD{RxmCQ2!aAKux1OEUp8?<#)_%R*bKOQ
z$**wP9fHAy7}b1|?{8(ukQprqGE+cQ+^{<4(j^~jvny4+#u!q5SoA25mz>)z3|ou+
z0z2F{>s1_ip_FlzOAl?Ch#D>cCK_CHm8VIL5U~5z+V_y->B6zsy-JEo8@pmW;NXbP
zW~gZkiM6<^rowmpznZ=BZ%;84xiJ1(gEpGM6mtkI%nY~OIg)zQ<bkGE5F=k)Is<l1
ztJqR+GiCI&W?q$8c~~ijX|+k`QJNDWU>TP(>JSzVVr3+kf7;|BCte)dkc&UknAGx6
zri;ah(5T3wqZWrUeY)vY$bnmnX}QXw;A3WXXj>f;qpO)gS&qa@vGm8X7aFQcgLX;p
z%DdG9O*BEEfUIqmke02=S*tpw>4G}a#t*uQ-qg!9q!yVwDmjDrAzQLnK`*dD85f@L
z*FfYKz1GvcEzvF+{1C0vUIi;3N6@1kUOONQ7lo!QHX{~{5_+1WM3xjg+1@A_ewt3C
zc`vPA%brL)I_O9%x6|+pj@S%&dI{E=kzF8i9}231uP8CYSI1fnkw{FpOLd+osZmzi
zu2{DmYc(vFR3aO|xFuJ#SQL(UYz|`r!(O-mN6B?4-^V1Z=_Hz&v5kPD3gDcrL(*8e
z!~i5fkz;g}%&2bE+nUsFxw<7}098`P>S_g#vXrb$)>e96=P4Dct>+Mr$4^!)nrCDI
z9Xm}+i;Ogw<Z<lHrR0U~H>u>ANPVdhZeFV+hpA*W$i++1Q6g-hEdhFSPA(Sq_W<uc
z`&46^Tc~Q?dd<%g-~3~ykkY~w(tZjREAsZ$Sx=dmOvy!x)y2+=$$M<??tK(bVQlZ7
zeM(Os+dH&R%w%JG%WBe5ns~2!rhL<B+Lt9rh5bEc$dCrTqOZtMYLL%`&E7}DIWos7
ziZUV(bFY`W{eFZ_fK(G!H`${?JrPaTq`IH=x_9-8a3S}R7IGiWy!RnAMBkYnH+>NX
z(MuN|V=fg@W?$TSCN-I(;hdmVw!$&yQU!Jyse`Rn2I#o*x*`+0f;1?qM~y&A)2pPT
z;oLqU@HNh^OqB8>-5}UuM2pDhUT|lM6JUFSB{a=&h9r4(Ppz)<tP_S|#i+n$le}ui
z*mN@k`BaP(l%0mMvgw*@mDP%Vl_4n$DdCdJNz+C40H{=RBr5hO?vd}T+xgUh1;x!y
zhwW*?Y7ys!`D(QgL*rmG?0PmbG%~WgG?KpRWwm>4Dp9>ql}E$0k>&h~(?vB@))fI~
zQZ_lGqG~pS(-f{YVj?@6_hN>yi)at4)xCJ0i5AV`9vR!5>-xCU0nv3@5wFtHL*Z^&
zAlQMaqZIN;z*kOKLL>-!imA(D9BT#>CYBC(9}8`EoAVcWpx_(ZzcK3AVhG%&t_)hW
zPb{tM2XWKTy6+iMT$sM7Xr0CLZyAzGSB3-Eykp1=Xm!7k9`lCE(rHfG&FqfNRA*hU
zg9s_+Dx-8YW9i#P3<FTuAL3d|K#1U=7Koj4YSOZ($lRS2FiRhqGL|Zdt!<H15=U&F
zOL>+tL#nyZY^k;}^@X*4fBI6Pyta#w=7`HB8cKJ3wSolgw8gZzLvu~a6xsBA*s50%
z06JW-C}VAgl1R-Cq1!z=b!m-v+Vo9r%C6GQLQKmuBZ9YY_v(fHuD3v2z?jp>5hXv(
zej8JX6l+@2rE^E1+?WkWR-JQIidLQ`;<&}51INT{+7@0Qg_loxu{TuM?;bd&eNb&X
zPCidp<`LEy2Oaad8DZ;#O4w-DdBXcy!;dK<ugI)X1ml|yRSS|1%&tqV$?C>HjwJ#3
zZ#}HA3b8HrN;91??pgz0k58>GuSffkN`i1_6}}XRU7k`FvWX&Ac`A#AhjmojvLztw
z15#3@@=lJMGP#P&lnNtY@}=Ve2n%$cfKUX2u@`|+#2sn)WsTMKiA}{lv_KSO#;JH(
zjnT%sYHmhY;>2&0ixq%8Mj>W%dkbZ46EK;L=ebwqQK9DZdUdS#EcCTDdSX_XVdtzJ
zK^1z;bTyCy0pbCYo4OrE<>q9vijKFgJuta5J0|4pErT>Lol7vZWwc*am67&ar9oXl
zM`^z{cc+NL7x88o`v^(e&7@&gn;4UjH5Nb!1Wh&vs8ijfWd-SHoh7I(-`$DnsUu<o
z@6K}0g+Agj3@cYpP(oEWh7^O+y&Os2q>V>O3ZvrTp*afA4~@^5iAHUxIxt5u=Mz5Q
z3LeH58Llc7hi?2AA=vTQJ#iSY-m|Hpa}L%p-JQ%_yrFq3%Yke)9>gQ(!U4qd6mD6X
z^<!Ytrg7ux5%MR)(&EY4G1ZiBXL@_GORYS<f3|mb8kIkvBZwbp7GZ1M8>xwsx-&9O
z?evM&JQ|UpT$l1;51sS^sI5a%I##Ef3h(cA@5%}`_wLiB!rqzdU=NY2nU39I&1~zN
z8(5qmu52sNYPIQ&_R%S{M|HO&DwB?f)|_N75O9iO?Ivj*fTgq=H8p1?7da(T-4^vF
zVFZHf&_6WrjQ%m{B?wuko!PYELm4&HT$xf0(v!c`WI!Dl8#>UY*TR0RN7Nfe=_^b1
zTM$xaB1N=h+0&FMo+@l(J0q%7<Mvp{8fa>Eo~nhd!1An6q%;CrP&h|fOSN;gK1yYT
z@+mN<CPJ@O6i$g$xzgy^vnu$O@*m9h>#Exd>Ae7Ll7<8zL%Uwfs`}lO!C%_v)rJ%l
z{t4laT*eGRAi!p}@!j&#gF%1oEfb;Fq~fU&&>W`{**j7bg19Gs76GXZM~gl@#+R_{
z7JFfG505cJ1j+ZfLx^rF%bY9|mB^FvGQ6l!b}!)E8Ms*96{@|8Qe&+>z*M$AqXMQ1
zu47@KY}%=EZF*`dRR&%&I2ebwRKB!`kW_77dZx-KjY=J%NhM~(ej&D(!J<=iFO#D!
zf|p5>3}G%}Qk^d5MBC1y`v_+o!UXq{ukQ8LK_1!59ZO(JSFe7S2*(5&&Qh&tq*9<~
zB+>KaBdfSy$#<<nDP?%|aNa7Wb*>e`w81R=$E&3C2YgB0EhQ{F0uSSzk*QZ-%BLy}
zmjWK?UovE_n~r0Q({GqP=-yT{fQbR55=UY>6{x9gEZ#&HfT(p7LN%ujhYIm9#S!LA
zl(l97nJNy*;;<biX-U!SX<#9`wNBNO8NjJ64za|N&~-*T!cWRYN@j$!ONXW6Jg+Ro
ztwvmgo=%!oz8EkaWI9*wCSh$uGJxhv1yC%}T9FEq1+P5W0di-;pnn=Vr&%>1#JXHJ
zq}>tMUQ1hxit}Gqug4clE132gz@kY?i9k4d8BK~}yeqEjJS+{Dv`78#5SZPL#I6l^
zVpK_sReB`bk<$h1WlD)qcua)ENbM@=Yb%8fQw}jp>z4dB9k!whKgJP!MRKgtiOnsf
znG-qc7Ea52t}d><zt=r;W|o*!w+ja}y#~iiO2mrNh%&215^k0hsyayx`BM`_O2brr
z&9LrQR>YY(-3&nqnPeMh@tC2KVv7?1<nx$S{aTHSi%LazOWS5{D|ZSrR}!13=sLS;
zq)nI9!qF^VWsm5nBbmmc`wRPBanq4HSJ=5_mJpbj3qrcxV;zm@$MsKeUZ%LqYQ7SW
zTzcyr7d#Sc)h}9h$jcP%ZD7$pJQ+C&vo*vME@3R}Pj@acQ=gGg>FH4Am9&8$aG@26
z!@*;$gdI$|%E;twMfE~Vmq8MT%Dk48qUSUlt%SiM7DP$p1u^cv8EaIBp&ie2dAg_$
zZQJGyArA;HRyDe9*}k&*(CRHBMcitT0e&4lCe}kd?q|drxO~>K^%J>;u`AVYR?nro
zFrQwQYC{d%pWY>-T2@oC6oq6*rNOy$7bxUqt|uX$4kPx$v@h}KX6rBcZtj|0Z}MWg
zDAL}t&$P>8z_$6?l3^O;sYqQ(x(d(~ueO1eSDLCB15Zl3P*@k$0ZkzpwU9<^c@p6o
z7kjXEpu1KpZ2nZVuqx=IU7%G}4vp><k8w5M_n}#^AFOVnwIU_l1coLMCv=D!4#LcH
zb!^ngIH^qODOapzNmyt&Fw9~&Sv4t#dUFSkWY>;eA<i?<5Q3s-_ee@C=^o!{pL8$?
z3$p=KBW!+B56e}Iu*iw%qik1cSKEA=dyWN<9$JcoIdT$IOfM61;CJ9diu{jOS6hw7
zN)cxwL)<GRBLz@!k{dG8Fr#)!i>AcPqR09hr6;ddC%qr)%tfY?I?fX+<k~H4>ghn+
z@oE*$HS=7tRKp8eIA(PNn_lpnDhRG%j-5g+8N(d26H$<)4w{{cEQYYYcCzU!=9E*5
zXpk9EZ8k$ZrZv`_dMuRawoR%Xg;pB#H8B*cPJtWU5lyD6N>r~g8)MC1Vzg=NlyaSf
z#?qUM69#4GS`hNLTRSttA*4ML@dyMAF~>5Hv=)Onx>mb7<y)tABLsj@kTW$3RZq+q
zqIOpG>H1)bJUz#Y<RKi^=z8*)0$wK}+`JB_JB#5~MMW3O#MfE9un)<1>M`-;ve)@F
zN<@!lxEfivB?(!3E7lqzmVA{fSKYD32VO1taCBmq42ZFYxHWA|Esu_d;X=&n{sOnG
zMS7`&o13heUv#6~MO{SDeb%cSMdEor>jelay|YJt-`U61D#h&MP-}$lYV7!UvaO{Z
zEFM^fzYYrzr5Z^?A+D-`<^@}*VsZq!?sd-$4k@FYlw_kUGgGIfk_|CeE_D)3INlg@
z+$uyjB5O08AgtnIi?T|m3L}LY3d(7JHmt7nE3(s`2;BOiSLKtp^DL*GgOw1b$Ckut
z+_cewS`Vp_SxJZ{SlPPAkfrG(c8E<rFt0e`ZohR$-5GIAU+)_UOCmaPM%~_(Lbk(X
zaA+BqnZhAO?jL}Zw%U|#m@St4IImlDn~3SNvIr!`Zc!SlDf0uQfu3FDV+OK47xE?D
z@?MP7PKXu3@$07z{C8(L510qVAw7yoo#pkIkFBeRWY3;Q<(Y{hqw=l7<(3R3B-PQ{
zw2)CY<$GIx#H&-sr#m^|brdH0Iz6=~(ogaP&UrEpu32`;LDrMqMuDG^y-qY4j!!eU
zR4ic$O_H+nQrfUYO16^}A{m~?;Pwz`Ye?ERTRbVuip=e2OY=S?TuiR84W6*s6}A$#
z5HT}Oyt+`;iyfp?r%6Cmmg${?lOR(24%IsP#@Yc;-J^$;tYuO-J06@&+4jv&&SCE1
zW;iS8iR#6JlPN=}nLl)ZG_xyF*xw@o!G1c%T-<&l{ZaFCb+nw2?6I)!(ck;w%0}24
z*0Y9#);?^RZ%W(81C7-E!Le7>k8zDnHIKaz|KG3h0^LJj6K#lvFf$$yx}D;9N#FT0
zmui$6jp=<yTU|g8(Xh+vz#XU|?j90ak+@2G{Zdwhkm$akfudW4BS*9Y*ehbg8@qup
z4WwrTGy2<AqR!I?cuG~6S#o1G6x)Tl70IbFlV~Q)l$BO26ySeh_OCVmY26=d(>~R2
zv_`X*KQnC>0P6RY!GZ{Z(U`XmOJSveS!!FV94*N*CoG_@*ya&Yn>cEwD?~xu`g~s_
zto98QbCz`=Zff&0W%iYWI<-kg@90A`IaRvdfNz-EY$A&yU?b@uppNGV_J$vDP2B)y
zCg*&6tMV~0YvW$e2&gnGv9q{6T2n_{+q(}ju+2-5OkZ~)VuP3_q})KUW4yjL=wV2f
zQ|uvTiP&k^dcU&ZTKm?v*f6NI&Ch9?s>^t)yb^IQ=2c;31wxt?J7R&u8c8UyZ^P7v
z;1*3dQ04_JtXFxY>Q<ID$y9=S+Q7-}`s;JBu^X<s-IPbrQgPcF#zuR(ed8MC5L%ij
zb~KzjATG3{B(XQ4EMkBwGvrNUGIyKAPeCTBFGPyHznOpQws@fF<IDz~$G1_?N`|uf
zuEqs~JtVl83eb;HE3j<3vOCNQ?tGxdbT6JYH+7rv4?>)$XlZ&&_eL&7F~LdSGUf1K
z4FJg^6u%9QX9lVY{Fx!K=xI}>4O71@>^I85gbGC{p428Q9@QunPE-St7L)dHZ{jhe
zwN_ZBFfJgZ$zAlC7;qCb{8o1`C!F$3A9!>JQ!csfmQ_y-5*^hOJf;CDd1Fei(gewX
zc`RdbG$Cm<C564I-b^Or&1Riq1vS)_iuojzEU!^bSDHV$h{p^>T{yJ~v&Jwqh1Moc
z=h2Bu%q2UfQzd=WXcMe%N32z`25@|qcbFBzK=K*_gCMp6B)%W0sUkH?Fn6`7!0lIe
z=4PsDcq=U6yoxKdh2x_i2B^lGfS7xtj>(DPrVzeFihwkK3PqtHCbdGi$fLTq(vSUy
zfJMB3DLj?Ms0}$hlM4TvI=OF#HtmKO$s%W$TxkUzDwpDU^?<Zzf-`{xIBMA*{&U2h
zs3;}#WZkPtybEYkrZ4G1@DjRUHFE(gbDOPrzUc=pbFYORqNrv$dsyalohzF|niPpf
zIj+TfQ(BD+JNV0achWJw6cZN;fgICG)*y4xN1K<4Xl*PbWm_gu3k6C>^a7f+l-hD=
z*-wrK;+|&KWBr0r2O4B5-a(t|uATsul7qYGas$pt1>CHL2p?I@Tw0+O=~OHMp@}GO
z@m?4A%@*jw*-<v>FGOMDFNgzd3Q}RezQ>7V40WTG2*b9Y@Cu9~1+k>j@<HB9Alp)8
z?ts{J?uCnBJUTGoH4tO6xad{GxEQqt_OXWN2LnU9%6kWfI4|$rGg9iK@kU)HdIYw7
zr7p;3i=dojST@0)#JH8CRc1WlB?%WnyfZ<8GYWz>Q47#Ls-TL)>ca;KSSVVa7NMXm
z#Y0vp_aHLiLo@K{-Utz-8KbZhG6bs)7abE;;X?V;`~tZk8ler*;-@jgi{BClQqq(O
zUZg0*&cVu8=VQu;NGHQvNU)(i2XPvVX8J69iFbbgkv6A-r`uc&7Z-U}fRgn=2ssvV
zz2ox-h>X7ME=(RddE$@^O)93~6X6moi)ukLsx)Pdr8ni$U?wKhO+JFcr_B?Tb&N9i
zG1qrZ++FHgNx177WlS@YNTc4fr<W2GXVopT6}IOk;fyBq_Tckc37Xm?8A{eVAd*n~
ziEznYqREX66IxsB-N@h2u_ZXY&vvrWEK~F?M1Z-Ll}jan2iTmPgRHlQ3Jf5lm4kM3
zPd1u^Y(HpLN)v<%4Pw5Lh!k1RO@3gOL5k^gMz@$&QiQjJXbd5s=ty<W&`2Qdff8p}
zA)7%5p4KaGJQ;jsi>c>Q!rmMl$`xB?5u?v^35M)^e218!Z4?&L(H$fdoIpYyqWNM#
zTV2^EYG`Nf`@XM$BGR=>OJy)5F{!F1(#yuu=A!I>v8KQhTm>e?qe_YP$YPon8VnJG
zOzQ<Dscm>-ybx{Nf@>@4G>}AsdrrhbV=73MD5dIDl?hEK>JwNhZj`AhIjC=)I7av4
z8GgtWWJ;FOg%c2b<ex7EfeCY!5}Rz-;ND$(ckdb8I}GaELU_sxs$t_GuX}BW&`$ad
zY@b+nR}eEx4muV1iN&SslD?Ui3UIQOljC=a-(uXO?zV$$WNsHiP~78+cmR{*cd{~V
zk!8SB|0iJ(a~T3V0npwaf{pOWhFU$;8W-OC*m{`}!U&J}iBMy4M&&pZSG*=a97a=o
z?$EO7H8D)ZkjfdwwoOV+q-_md^~9d20L+NpkGqPeXU_EW_T6{wbvK+ncjk;zZ7kc%
ze}Z6;JN1Nv9My7sVwR+Vf@1=t7vh(a%aq({s8Iil?v-4g8ZK1!(6XP1OZPHj6A8y}
z&7-)W7sZcQC9<agYL(AM^2@3Yl5f)|<%oGDD)1Ba>an^kT}U~z77~I-grfr=8~DVy
zLXr{IC5F2?#+XZIs;$|^g_WCbZDZ0KNvy$K>7PTTDHIW3_7g5$I;rB!T$ri9yBCX-
zFk<&J_paXiAZ_mxdtD;TU9VcMQLa9kTjk{isY!0q5B!5(!ZGBg6R%-(bf%Xgm3pY-
z{K~#sta=G&r*Rqt-;{!(QfVAhD!ye?t6{BXU8n4p`gipY_wVT+=`WYmO|J^n<Rm5!
z6<ShM+uK7R3i}89%=e+bOf^)Hsv+fba#E)g3kXp6QwZyUBK|KH+Z<epq1*7?(_b$4
zm-~nMclGbq_|hDQp(X0=l>sx|<z+A6vtHDUyp>kas<-BNvyz01yfS|5&`sl0C#J@q
zf9lw&qo<A>I&t9S@!Jm_aM#&fRwzRZ4k`_XFrc<g?k^8ogME_q_Do`C9aMwdAZwGi
z7kc1ztY@;1mD!LY7Y%paA1f;>E1mEwS=~|2c1N|^xgU2~1&6Z*Z@$?sNSsw-Y*3*m
zS+3D&%QeK9j!7(Y#W=mJnTcTSW^6>ml0vQbbPw8zrRZre4*jiG#owE67JnNJ@i&gG
z+poX?Rz#kx2-M*u^t97<ej26CyiO>#P2HrK0@evH5jSirS(m${(i1nZvrrI6;}ske
z)kB#Zgjg1uhnmMzbF#*D5caxq2|?Dul6wV9+KcLlC(#PiieygQ5t>_wF=a1U8>A}m
zeUCt<;VqAqOJXu=v(>8TVREr>TGnNqlY_a#3Y`LNB6DuW!knEyuI<)isSFA9Wkabq
zBynZCu4O}JK&Pfz674CS6y0_N;x`n&Te7#T?p3A|y*!cgp~atsid1;=gBGz8x-{iS
zq58+t^#rG&Zk!ub$l6zBt2EUebdFFXD+gdsXDT&AmQRsjs&UY_lyS+fengY19${_m
z2dE=F9T7C8BNz?9+B`Bx8vKY?5JYJdyRbd7KFRSK2XTIq&_*w*Y-(tcm_F!JwiI!5
z>n;|H(ow4#a^b4Qm;IQ$`1QiYEVyjwh5hozD2fKFP?r;(sZ6RmIGTJ=Ws)k2A}DDo
zYIlrjP_X}N90W@Ut_lMI6em~Cit(<_bV!h^Zu&Puae!nsY{W*FwZ)o`Nm`y5^OlTe
zbp9jg`{W?RToTNq20)5?B&$Qz%8J@WGx3kg_=991=)fuHnt>2aSapVoC@kww=ZF_l
zT2wBJp`he0d^Jk2W-pK^hqDN~6k`dUJ<VPUrko(qzqx4WA&uH{@mZ6>2%%2=HMx)@
zpD<;wBAhx;?Pyh2Y>@;M!>yBW&s_uwF*UhxveB%?dH`rGB0EE<$>n6Dd6<IZR{eOv
zo>Aj^n2aR^3_JDmtCZ@*PL}EJu$WQGLPHfDs4@x2G&zXMw7VfDA&9tCDSMyXY*b_W
zRUqTz%((DZ>}NdiX6xBwxS~Qz;!M;@^u$BG+esr4cpJVl)gOqsN3MII5{{C9BmyC8
zvs6r8F5xNc*_~We1d0gkkxym<QD}I}1w?LxeNj1MrS_1LF!Abz25*EB?vNN@LuTQS
zn)}l@2_Y?e$!c%PEn$@==Zql*Obr~PFKC*pB&`FAkp=};4xp^^O0NaS3He1Y5H8l{
zn0&aV7p)0@(p!MjnU;BSngQ69xW<d@Y@dsaa5@Atkkg?CoI)@c6*K>Pb#c8MP5%}<
z<+n?XJYlIIq)H41#xd2&DcWFCfw@kKg^b#_X0M4Z>L{JTz$6^3mP=I}m`SckaiU4E
zxzLa(#e>=Yk^-GtO}b0FFc(cyv@>idTGCOhkKaimQ?OYXu7hf|t+Z9TT0#FpBqeo$
z@#Ms@RN?E_Sy<i`3`?C?N%;SF<C5tXs*5l)>e+NcAv1E+doiiWVuzzp-p7)6Ns!ER
zho72@wLMWmqKl(d7&cP5Z0JU|=$;nH3HFgetbwSwX<hFf%O<3NVG#-y-Rw|H<`lS`
z2r=(Uqi$|_#mo?q?dDs(ktEBOu-k`uxTw(pG1QDeP-NC@QEXJk;yz)y1Jta06+!Ts
zK4hoYvb5fVMspOM>@66P4;355Jf#F>8Gr_KPWMYiC(A!X7u6X;8r;v^fdMJ{sHNhy
zeIJuzK9Pd#%pGvqj9l9YNtu?bBvn&j6{eQ>Eo=Hv;>;=#waO%Onw_z=Dk*g+o7w0B
z+!Wa@`?el*vZa=L2Ih{a#c2sZ-GDPN;<9R6LsNa-GnlD%C{?F2SeY7SKN@624=O~&
zSi+(nn6x`lWbEWUWelrQA4<TECipNP7>sR-Eu<uGhqj-UVjJ2Hmf*6Cr7&8E$sZEr
z;9dY%-4>$1)cu4<UY&)33cfF{HlOG5|EcXuz~iWngx^>`BpV-G;Rp$>u`m)=YYyGE
zWvt8C*s{U00~?QVdS-fN8qIW%yL(2GjUkYWECFYeO-O(Q!v@0duuC8;Bm_46VOb!A
z4dGbG!a`to6W~w6xg_KVX}_v>^y{7(TNpAQXvXiXSFc{ZdiCm6>5jZA0(}Ynm5h9*
zsbYiiVY150Dlv<ciO@I4B0{*2h*_Sv$k^i-4Sddz1a4}0A>)m4o>ZyU*~?wY1tx+)
zL0O?3zM3*5d^7D|`*c1z!^Ri2&3pDT0gXG+;!e4!53Ln0cU>vE<A@UH5XNam#c&^9
zJbLBCnFwO82^J~J!)<5PHUv^c12mvrWfMRE^b$|Bict71eMFwGWk4&9oz_PeE0yyQ
zi?lz~7SSz+ANVn&&vzpxRiLUJQ3JLaVB>&sbv1y|!lJdYjmR@|uTqu<jq`w@v&f|<
z+A1Y(tjwS4@i&@c9@xY)OEvj!P$)e)Y0xL467h)pa9ZLV&Bl=IQVAgs)L=<fkJc=a
z8OU$7HkAq<18W47F-YLzE|EwtPbAvltGQXr7jxPLN!`^huu~T#5^XJzenCatDo_5E
zw04^;_L^Vdh&@DM#}?kL*x?zngF-J|kWDi9AR#cAf&FX`<a)==qLv!dvU-GC65}bJ
zy&~1qDt{LfcoI%Y6_L+37Wqt4^Tde}ir|X0l55iKmeB-60O*68ZVdhv=C7T?N|-*Y
zrPs0YjV(Jjc-D`nD$Sa!fW5S<I7K}LM%Cikl$JN#$(9<gZ#~38=mUk>TvPOT53$*z
zsx>2QqS#58pCfz|#Mu%f<(ifal+w|qu@aq#q4@;8MiI*dMP8Q1NV&R11q^_9ga!n7
zED>@O%>s+AaI1)x#rg4iV8nZr@NV6<!Yh?9Qa=0u;)icL74{wZX4YHNdZih9YlC0#
zx><OJp!|h*PdT7rqA8Zx44A1$tKWkfLyX^}Gi`uxZ<K^7R{JPk{Upp56+Z`{|K@=7
z!ue_qQ>EofbRv_Hjqg}N+G{iGJ;HjgV8K%J-qrvM4rhQu%jpmmUj9;aepoTak&#e@
zAP)exBY+2K250wBt#lr$6+3mvHo60CuocD^8s%{Zn~qw8WSc6OX(HxZTEut}EeDwn
zN`l@N2l$h=IQqhLqm>#9u4d-M#@m-r_@#Ra-?|KUL}P9btKS$4!>f1{mUDkzY)gl+
zw|TH`w$nP(KL?N+D8uO8a={lGn?FjFh__&AA;M9t`P=4?e*swtfV!G>#~$U^?B-xK
z16@+go@pfqF^U%FutI8Mvr>5u^-j4$famI1y5mI7w~{{HIl6Zc9-6rvM@LS<*lMK4
zboVeIVUrs`FJlj^aoQ|p`I5r~+9z_!;ABep_VD6~&ishRT3~t&-_+xz(~iMO5X311
zTV1w5*_T)>SO9^Rk+R-dYuJv<dhq~Z!#damQLLf|Hfdc6iO{<Usew4YksKzDIA*vH
zQpytfa4RKqPld#5`f&=*$#_m<^+sjsJ%HYz1W1w7pH3e>X8Y0DM_L?Q);=U=nbHh!
zK(WGiE(R9UgMo(WU}VX+X0}V#E~>5uZB~oY)SsroL~-|{rmL}N!Mh7W9(3q-`mm*%
z6N;#pi5RaS^~1+Bt$#R}<}|!M-Fg^gEF$y;R)}B?>guNT=@!5T1<^m7Gntq5;;d3@
zP8cCqAQjbzr6L`cbiK)m=wPhj;2e`9?JzLr-^2KF^)F;U-Beq%^w?bs=`F!sEYK<3
z>w=&_g-;_dVh}^KJTvN00%dh!sd+~{wuMy~Q!$j%XI4J(x9VxNpZoO!Q>-*Qaj`b=
zuEuZY;+>V)V}KyfqOdlJ?V7g*13fe}n=B3v4V5SZVmR=M-!x3g|J}iXptM0ZHQv+?
zcp<aB8i4Y;sEVo)%hnYa1pr5JbDGKFVK6h#XS^rCUMu*P(_OfOmM}MC((w#`C4r?{
zfT^J5Qn5vkOtOUn?zeQ8zGRRjP^F7;YGA*tC?7}@uN;(g*PE_xmo<pcz)3cu#Q8%u
zx_dze8d35hv=PR&FcGs?Q(xrb_>WfJKDnX-9Hc3vKcAnN?R-fGCw^6pd6y?%tUm-w
zf={Ib;6vsIJ8n)0!{m7q^4V&b$v|ME^~IB}IgXjouWvW2z#KvdA-O<3?y+Z9j^)Zy
zkT;~6wCt@O=@OqU<;r#KxS9?2_61yCu&gXIh2aqxF$DBV9?h&0MAf2%@y#+ExzdVN
za+Pt7dN72i9bhz19}uGU2dv9+KzxLphjEQgF#ZmTv{l?Ch%HJt)ABoO8n36RA{l}S
zTDFlj%)X}RO2sK9&(~9KUsG(QQqUbo%j$hi@s;4ab*!(ceWl_Ud5i<op`aR_-n{cp
zhiCR&8VR}*5-y~(RVqU-ZY9_TEa&kz6jT}$n=nrX^Rd<;!%1m&8qO;|X8^pAEC%@9
z1&9*h+>O1~fF@f|YgiQyb#)?)Y9_fn%yI&(O?-7Y4U1XENBRSk+e`zTRG{fw5G@*i
z)rD8rLX*uf!*9$eF|kCS{VGqSeL2GuuC3A1lsmF?rI|_BVJ)epN=~>hoLC!8^sY_x
zcPIMUBU=TubDCXH@ev3V8IC7<)+Pp`+-M2zX{>P!Q_r&d2NONrf$UOI%Ip%EDJ`#?
zY0dWf?rl%>bV~VlS_ShwHEB&qg}M_x?OvgrX1gkLxCHtIF%W31H&Bjw+o&kl<CV)>
zr8EP#w<pmP^Kxv<0aGiRW1@E`(K9Hrb<K8jUhh4FiJl>mnK5kL%j@k(^n1h1<gH?H
zQU!xCsYpCA;LSo-r&t<}Cwlu6z22yD&?|?wS8g?DWOHiS%DY-tR~;kE=cl(n(eI53
zLq;2BR@Ke2p0|oJknM?n4=rHfW*5+N80)U5BQf9slGp64u39#@P*PKdoyyBitxfcM
zBtwhZdb+Y)M`EBu;0&0OgpiIzuSZwFUsZ_Tr5fg#TGSCJO254wiJrBh5iog^8fj1T
zdXrMHl0aO=oMp<uwkHNW1aSu%KC1F2-ANgaW7)WTU~&c%J#o>uld`RR-dD9(s#-Ae
z`lMRaY!@8ss2MFKLDAot81RUkm4z?4DD>Eq80hzUq-~BHCYY~blN3v?WoAoK^SwPj
zP>Py8me-|GNHgygbv>0+lUhD+Su&pEiGFD`uAtEVp+v7Y+ssTWNP<!Ua76(joy(Id
zjaelxu|Z%6pa<C7%AK50p2qf5%G5@*tbwmc@%qO*u^`{VyC{6JwnOQFx2Qh-=_p+4
zXnFoRMJ9AL+Mz~c(){%&1_lJKt5AHfLeEg5$D5pL6=G4fUFxA{SY~a(g;J&Y-gub3
zbC!>6&CDGP>}qs3JIGncXGaI8A>5?AAj>Gvz)_6}Qn*9GNkckbFwHizmZC>UmIhKa
z-?acRif)J~#2RYC$!mdEU~F%apoVRAcx_^!2i7!9xqmAS`nwUEX%#`j0UIaQgKzt!
zX}(?AmtV~o#kbANErSluQ($o<1msC>CKcx<9jN6K#%eHXa6}vin<JooM&-=1i`%4e
zeFTLcgdbE$dyzR29Vm@evk7C^_Klk-Dm$n;mcuWudMISlJZv+KiTIF3B`jVX;lMBp
zJ{38R2I1Le=Z8)7(<Nq%E@XbGD4D&`xsVhR{IbqF-t&In$Ghx=nXr|{M0jbU>6B%s
zHn*I%ymiIOReh^ZU$Z@t*m2&c_FS;{LN2p2!KsvVls!uLlxRQPQl1hW!moIge#Pil
zoPM>_uMYavNx!=2m)OPd6Fw#0L(_Zd7i~R0K>sy}U+pxpohG)kL<&IrFfAhXJl1Rn
z1+0_S>7;c!X`N15r;8TprbW7Gk#1U~dsuLmztCHCidKGUEDT=Yipt@y)^YMHZx?ta
zs>||x>42I8>H{w+C4rH!lKgg|#%iFC;IT6w^QwH{9`NWFAYbrq>8E)gC-DpFRg9&<
z5D1-7HisE{cz@Uvgz5yx70?ShINR%8atlyos|o2a{0S}3{TgF%BKhGIyNqKTo1aaY
zJw8tct|l$~_0G_yQSd31r%$!`OGGdhTLEtm@?~8KYel2Y)$@AR)(UNwo%MU|kUR9@
zy`rzRrF?#J&@xRu1qXN08{_kSV0<`V?|@!qbka=GWT7ANfe(a)<F2NK4OHaq&7=|=
zVa0ev8<ivBS%VrxDy%V<EuiDu<U#;tZo%aZl-8_jkO_cLOjA7Y+ey<cMpAi0H(ivL
z=#!W<ju5K&^i>C~$pTX0!gMChRL-_cV|PU;E?kEd5HmDU4i>;2BqHQuJKR>p>uyil
z^SyW}(cD@b#Os@*lEUo2s-z2pU0779(nMjvS@6IE1hE`Y;#H})N@-`22l*(G_`LCD
zg;*ADiYoA?$#jbfogq+5bGO5Kx>ZS*ToGykP~OHx)BuvjK>bixApu~cj0E~ji;a%y
z9pm1`*dc08>ih=HH%M%*8V%-+lx{lIbZm#ZI-J+bdLCcPWNe+991C4-tyzb9NelD_
z)U92g5}xSk^4lDMn_kKo0k@kh8MQKAZJl~NwM=Ep)<G152iI*;02qbAiW<O)o-PmN
z{sqrjC|fcHEHbN<#x+JQ!BnJSSS~fz8NX5AuK24LOUb;EQnhs2)*UeB$0cVJePgYl
zT*ew^y3k|>EzMg625}H9Jd}sRMkaTn`)*rH=^5bSpbW*fc<T%pd;zdjfhSI2B<(uz
zdQMaD5QL93*((@yN4OEx4e%(^Q|)mv4J|6D8cj%%Y#XK$2S(+CD9<9F`IBJzXc_>K
z<GljRABNljjZ@8g=&0;rM0aym+G~TkqhM{|DA+TJaLG*T8N<}mh!|w)Y-2-pIShtk
zjHOn1qV(lfyKM0l2p(uytA6Q(CE_zyU+v0gr}QbcuMk{LthH>IAs+6X%4T|sq1NwF
zhepIhq)UEz!lo5g!jrm#N(`&yswq3q4GNcHi#VAqX1LEsPm`AePiv6BhFipRG>0Kh
zMIXvjqGSuVzmeN!(^#!>npM4djHq3}5`9czO#7jgxW0G?B^;b{N}l}5eKUQEiJm>-
zbqZXZAX&3J6a3A*`Y;C5L?0dVC-%q^B&mk(X5LkaWI@aVR)Q;H_Ij21IjB73V}m%^
zl!;TQ`Lk=KS@aIRLjk{j;K3%h4g9y!oNC0%N3}HKT2?-SXsZ&=T%s8aMxJ(DwWzr{
z$-Bq<2x~6!jUCF~7DaPZe8hnxU5YG^Yf8YNI0FoXk`K5!Y~Hh7Y04lS?$|3LBUcmg
z8B3Pee{)zKC?H1cbAGbhE|U<o9^iD{JR^cr!YzP((R{cvNIb3xj|IYkzhvk8nq?Y>
zu_FP)C79G)b!e@$9)z{Z+QXg#;C%?wM-O%IshC1K1^A$l#hsTXMXCpGGPlclT&7$~
zv*gM1c*(&D7EwwIZ?p3)9_=;@2L>%4#_%bq^5KxP3W-BY9ws`O8=p#XL{XZU%M1Y_
zE)5~}dVEDXbuzw^w#H2!$O9ZAQjf&Auo*2WDoum19jsmUN}lr*mdd4uARD40R;^)G
z_^}D{LJ4M&w$UjBhguHf;Rl*WICFB=xKb+eTVBr$Gzg`~EJuyqpem^13rT^O{C*{M
zK=Vgi`GjU;Bg|l*+c)rJFa`v!3}t-hH`s_P6@uV707e}_0nEx|9Np~`jiquWbBwwe
zXpeVy^&o;IM$5S+3g9$?GM`55j{|b(5i|bCN5NI43}C+WaJmI_tE-O`To9q>Omt2q
zQ!DOV)#!^;mrwDtaQ;%}a9kNS%Z6>45Z6*k<#o+&Q?@za&xJX$A2!R(DsL;OOTukT
zXr=zjy<BnZr&F1>wiJfV@<CKbv;n$FIooV%@xf{bQ>)5zcqrxlfXD&>`VR}<3Z{}l
zH~@7RqZ=3wH<$v4ExHcNBY~|Y!gxr+1Atw?C=1}pN9XZ}bP0K7%{CyEnBxf;0{Q5O
zn(}N42%ZpV5J2u}o~~a?T;BM3I2$j8%{r%qPVsN9Juhnz?yhe;Kg=?-CmGhFZJ4eg
zajI57NO3mk=BBb{tE<CpMp{H`sRV<~Rd9N_kSC_vr`F?wNVN$XvP|iDQEi<1I1@X2
zf$1)Wg)%1ioH?L`D&=*1;e6cfAOf{w*%4lh0`3)Kr#nWOo6X@eES0byUCJJRG^pAk
zqLjUGBx0@c2$bPb-7OV)*Yc7CO*NfBbgRNPg$gr9HlzwmMu;Ics=I>h;e8k!t0gN!
zZy>x8aBYE3<tl6QplLj2DmsS)g!DCW%%CX}DgpZNX9-k#aLL6~2F|48>V=4y22>r?
z?1`F`^6osYU)c<70yUcv03Q}C-~kV39i=`#()SMxZ$}`DLbDXfltz)`*1Q5eHK?>k
zX{0T{1fPvCUyqc5tfyfxY3-Ftf*lh4$)XWKp2KC`o>YdkNvcXv)>^h7g2N|HRBrhC
zub|P&x%N|NwI(VEwUR6qgPC6T#nQE=X5oA|D5bRgjAB~QLlwGC;<oj8riCNNMoWWz
zg-6VhVpqu8JtzrAAl|!IJiSPz*~3#vrsjJ6Qs@gP9i}qd!ugeFHBJkZ9RQEoqHAgD
z!4c#HaB0Z|kw6jHUp;jmHyLhb?3!uFs4GA8=mRh)dsl*-4)RJLb*2f9E@8g{@dFHa
zw7fE|V{8<x<dZDG77d}}+B78VVd`|5DcAxBAbdninI+$C5d8tvr}gpxC{+2>BuxIu
znB5?y_3~iJ<}tzWT1rN;uM}j^B0L5X%jW+Cq49kh9j>ICS7j}9e$3*!P<P4P_49UR
z#rakeZ5np)I4?^T&}zC6_`8%!>5h{r<rO%ypc5}h#)Z?WST@Amqk@T%Q4E*)76Rf&
zrp>59ObJ)+f~hUf6x75sIeTm%Q;kd5rpn(dJ3m`85<iJd?+=mV2nAyW>{L!}gFfl3
zFBC1?ttV5&C4`I-Qa^j!*NhOEYS>;Nq=D=rr2e(B5XlnKxFlFDQ!P;^L|MATACDf0
zkWV~A#R>@L=mP=@QU1a?$_j;or#Mbd8Pg}Jmkg@AhJPzs34%+xMhZ>Kpn*ZFIB6T%
zoU1gaT9kM++Ns8)@h;^P5O79Wg>h%r@aQwE7tUV_l_~-txAG_Oecf%bUM$5}6I&Eq
z{+ao@4=@BVzbI19j3I#4c#u3iW+Buva5|{TH7wgB42+Ugm4(oQJhBkqBX2rAxR~Wt
zfNX{{ywTBh9$|s_#e`H}x=`&dRScv+1*|IbI?ifQb0GMo<|qz&Y+}61*8m%3#Vt6S
zCUC7$?L0*H7l?r*<?<(H9MWo9MLJDY&qge9Cc17(Z9*HQavF7e1Tdq#2=mNOt_W&C
zij?o@xiF9ZS6O^yMYFRdIAk_EEv-tChHC?)(lukIm6D^|-q8uDuVkBosQvd&T>gbR
z6*4b}Z>A99aHvT={;cw1XQpZp>b?YxpVGRc+lH10%?F|}t>=vbIM3;WfK(VnBkhzG
zs|fz|9r)c=%xi`T3J3oD1E!*}nR!J~S4Tmu=Quf4PsckuW4+XGDeY9swH?hLvDZ5W
z`=(}ebRA-!`*fr@@R~zJFdwE)sR&G2PtOz;YYj82+h@T+b7ZI!XeVWvWw?XFp(iy*
z@9I!oTQeQ7!|f}iJ0Z4EPM=V`0moW`S|f;j0f8Qpg>)y?>;^i5?K+X<hE5VKZ&xU}
z0RDh)%X9;D#OOw_ETwr&pHwk`^o30{<c0+Y>x{+zNh5UxTy57tHE7^q!;tog=8>V!
z6)4?Rj6lE;ZUOvrFNs=NGxDHfz*8Z>93<OAPYy*0yH;WMF&rZ*WqTlh`)o&onnfQG
zNxm}K1&eYjy6_A(dn%JE4!y=HL-g)ns)HGU=>hy5<TVyhLtC-L$$_c^#o<AyeL;S8
zb<=hFko2Hdt5So&s1mTcR+jS53jVJIDUWS0?7|zy0eVUa9*-WeNtwBNj#;T3qNghe
z3yF#^W4Ox+x6)$-Pm6kK9;wwP$8gIG2+rpLHaPcq3+z+c*H|Y^yG{`Vx9np&7pN=s
z=+)_h_T}k`xLAZch<9(mw@4J84i+&H<#(n|ViQNjKG6DW@;$y!7y$A;gg_uD+-Flt
ziAWL(;Nz7D3I^N~nO0-_KD0axF4g^Z!By|WD;=%*n(_^b=15G{TS9+fDFLr9@O<-r
zWd#J0A|n7UQU*V!RM$tM2!m5eH%BpLA52I<@0YHX&(yd*;QUCq&k)L8x`df&bWp}{
z-iMGO6!yaUY|t`Y!z}62is6=c9^;s~03vlD%w3y&)Ff^6$dUX^Dh4?AC&gP7F5Few
zpbj>JXdvomD>L9};wF%(<pqYA{sDUA7H+U8nnVEx9=fvdA#bVwf`Y31nd~pUD%cLL
zI&DX%bxZoF3lBT}f|0s94EqE;(W4SMu1@%%szku@et=~nzSj}PBMZnl@^<8t1wNoa
ziKrAIZ9(eb{A|Wd`h)6BKv|)_uLJ%Ogb*s}t9dJHn1p@i(sVaf<S7l1Qb;;E&DI^B
zSWgpSBK>JhN^K&9ga{$ugg=CkS%i>l;140Bju3J^OMhw(lo^R1MWz};a|x-3mgf=D
zFsp%(h7c%ELh}h}Y#&|MAMfm1F`4VymfX;L=K4*$hI-Fgr}eJg7(KJM`;3i4h0Mmd
zo1568_l`x|M~b8UeX~KOVmlg2DxkTD#$vHLLK^3w(jr7i4B(0$2e8Zo$Zbah_(A}B
zC`7K?a!phCwXG`}+g$Bq_x$pS8zw%cE=rC6^Jo9&*^~eAvXkaC?)%Dj&il-tuDJK5
z|C6}>%(I_A>cV9U2fp^!;-?$;WDk74^^?oKwRPpKmt2{d8~XK~uOInR<f3o<?Y50K
z?!5KP@fV7*2kNhW^|1&3?))$O;Q2dxzVgJmch{f$<8OTTZ|=LhU_5_X_qYFNjq>T1
zYu7#U_?4F*{nN|GTR->5JNE6Z>v{TrzI04`_}?FB9hp0&m>X`je}ACk__J?`cQxPg
zjdV*_$MWxOkLHY@Ja@&z4{qG_;<1-yzNu}Tb;0ZV2O2KjN0wdo$-jT+=CQXv^@AJs
zo_*!*U1JZvbJ4w}ZTtVV>7G|t3~QHeI_iz%uDJN0KJvG}yK!Ia+`TtkGfSSBC3Iry
z#Kg>!C+6JIiJ{W2UPI69O06C2*qEO@XUpWKt=rBnl#|Q1CCjmMcE>iHb#}41{_H9f
z6OVSl#MCFX)L5yg+uqy&%~Z_ItPpwqy#wY~?^=HUd+V=gdh)CFzx_gZ@8%yJJ^bhE
zPA$It!_Vz_^xE)|r|$Xf(l_?4Du3_QBThW_m0Qm$EW7_(H+O&jt?Pb%>Hg5^4F^7w
zQ|G<%{dKpU`ELK_Z;gEXnon*r-?{0{8=bdq`y6?B){BqdF#GG}{qGfCcxdTk$CDSD
z{`z(6;upVpW6$kFu{{_4>fP6GTyydd-@ar2wokSH>hk}4{(t}Uz^|?TKkxX%b4zYa
z-~A86-}uubYmU5n_bbo;HqtcrSGOF$`?l+DTe#`vEnol2J6-V;>yq&c%J*LP;@@A`
zIQQ;5c4yChW5H>+t^Bv!OZWX_|MrW1a`|Ilyy}j(Z{1p2`R1?he(b5Xhd=ga?9uv5
zdKb)j?XG?K)BgQsV^`hE>%X+&iSrwci{D!I>=S!V>b~#WjbEEww)V4A$?-G)?3^)v
z@gFXI?%q=FlA+tv<^#{wh2FjJ-E~*bTXK@~`fX2ihf;f=pE&Bhn@@P?;j?c$`R2>M
z*zl8g_Wfq^j0YBOSpMX@zdrX150S;!UYuSu>$vai|J`w)`Op2IoVDk@+(Wa!zxOlg
z?f1XAQrS1K_rYh%_lLIFKfLM}TVLIM#g1!JPyXobr+!1;xcT^pH?%%<$~}wzy0`U_
zRP>`ytFP_;>9K1j><6CttB3A9df$KCy!FeY2QL5T=X=IB8wd7(bKs5h*8Sq-o2+N^
zO()u?Idi5a8^8GYUtPTS?Il-VX|(HKzUiFLf9jagOya2<$+9=@-2HdQ-ty^llxME5
z#x!ON+N_glvn$`9>KYx*bnfbz$Sgl&`9N~hcx3tVA#>#1!LvRwUY<zx_h&MbXK7jo
z(&n)R2<E*rsg13PMcdl(zaHcq4I;;*&|2K%nlHZiV)^NNcC;*7ysIhOynpEnpKm?>
zyw|_4t^V%^fBD@v{$<Zq7yqFBxwpITT=gYm(Thh#MoyeF`{@&YF?QlbkAM2nKmPIA
zeGLP<e{;<D2EOzAum0)0C%4>s*=JUD$EL1ako#QQ)vw=GxN5NOm%sVmm&bqp+B4?-
z+wY2AN*3IF&V%<Jm{a`S9qZd4KktgGf3E(=lXZ)}aLera8y|~*_YcMYf74mxdZPE-
zXUkXJKTtkTRqGykd*yGx{Y>*+%kH0i)>^u4{J!(&m5+Yv<$pT;+B-Kief-f|=A3px
zxN+=-mwqzqJNNAT&o%$G=e14yZ|d!SZ^OzTwWQzs@k3|-_>$|t{?79k<wjyB-0~0V
zz%}bG`0Rnl8vb<pOS2ZAyacugC#M!|qpZ0)Dlg~;K*$2jbBhs2x68WClNS;~+>Be?
z$^52>@{1wE)-svAHLg;-W?l!n5m_!+BfFy7@jTB+saf6BZOygpK>cvlGT=m2cU4y}
z6!V(v?R(3rmbSI=nl(5KJ`fz&*0q9w^SG+5g5pXP5g0I1D!W+c7=W$3<RmMQ275GY
z&=F13pbUIs(szuE#ODxlDcz}o(awfFw+`+q<`NQHvPA7#Fz3BZ`y)ra__ck;f>%U?
zsf<8BR4W%)t0*gs=Tn-dNkw2*#|>N0gP)7MkrlFroZ*<3B}5MBXgr@X#-&zZp2x?>
zBaW3Cb0U5k01;(;Jg({mslriGw-Ly7T-_rzq`*=(t2?O2<O6_SlCGU`RHu|ITlrGK
zn|r{aRW6#0XdU=BEdE<qW%#~@jKm)!guF~ZmYE{+$yDh75z?^ccYxYI5K_Nn5h1Su
zrckzdgOG+L4-ry-U^XE?Bc%S>IfVQivLAsz|4K;x^z<}&l#qs1zl4;>32CT%0{%P+
z|NJ-jvxH1F9s!W4bUDR993-z2(nww*NPxc2F9?avox0?Pi7P&PG$DjN5wjy1%O2Oj
zm81hS3nLp~^`@q$r;lX6M=^aQUPs7HAu^wg#Fgo(`cNnonnlQdq#+nJ9o`%=1@KP;
zg!7Vlr`V>s2;7lmBpxDD_0aMhCgc%QcO#~5WOH2{UZ8qNb;b=hl~W5^$~RL|RynVk
zB5x6^Rwy|}Dgx_>HwXiUS~O>u<)~TPDha~-NJVzqNfp(CCQA65E@je5-n2ibP&3D_
znFC|st)1Y51aee83lB_GR}+ixq{>2u$x4BSnm6{*%5uChxfo2lhaBv)prusMd8c_(
zehgt5%hcnRsq+#iR<=^KE!Xn50}IXT%gJd)Z*BVFfay~W$I9cyB=5x!2bRg}8aTe@
zCHy@Ut-O(%<awN~C>gkR$sFTZK<6G{Sj~g1O0R(u{&{1WDiB%~BHCpIIT;5Ga*DPE
z>LU&qa4Y}}vZS{7Fj+D#1YU)cB+oMh8Ox0oGbvsHI5H02O6!H4T4{o3%*XSd6WBX}
z?`kF2+L^KSU3`lH<_#bCuE%9gLKVEYlC`r90y(v&!8r^+$1v7jDCJ#4g`2lx&ej}(
z6#$`BG>Zj2ZHP+Hok*<M7h#Y|H-}nvJk|2PV337k-YIBsf67y#hoo(!v%0jo0RCvA
zTF83~64(n*cI;wspATlIt%7EF%aonHQ<j)Om|QRk(#$j%ih*ibENU1=(E^t|maE$m
zY;e9VIf5?%s4$;9lO@;nnugB&DKPx;q7x_w!*?c~xSCGdf(zgVJ?>9~g_F*uiV+)3
zXS!^wB*{%6;fN`=wX|VXj0cD{r4<4DshnmydY;b!#e(T-hN;^Tqo8GV+@j`zBnkTz
zA-*l@q!6TorN-2L0$uMX(8i^8xT%4}0w@9^IhMfwNg8&;W;|~JAq|U<A*6nDh!DPY
zErM-yA^iCW{8>y$V<-Zri#pdCnFrsRU6>16g}h;wChDOOXda-C#&Ft7jp=rqVMQjb
zl5LGeT+6oUF1-Q;OZP}Z8c!%W$r#8qbcjyGb<`2fwT*L+C#10{o$82XI=VYmy+@0x
z9kI@|nv6%|YDar_tgEB5yS*#g4m<3TTP@ojMTweKue#UHLrn9|z`)jtvJHPFLpk8+
zboLu?wTAtkO$cdczkg2%SxL9?2H5BuW`SYLf{0agBd!z4TUoGaS+I3<=f=%v>^!S~
z>pFlDu!c~b&Z^FWs&!Cx5wA*xJE(oc*3q4Vn>VektiFa-uY>Bd(WHh~2Nc7t81H`T
z<}F)x4z1tf>%N`UpUvkPnwZ@a?TtdUd0R(!p0#<)R$moA85Y1_vOwGh32_`*fVhn;
zU6!C;B7|)4A?{(&R0YBR86l0wMvyWXO8LM5s@d=lL?p)qMI<yO&jGZu#MesR%Hpu{
zRu=1TlrV|H8Z;4@3uxtNUn_Kuu%T228-kgw5bOLnqm}qZF~o2K-$P_1-X0>Mc!)HT
z82pLCpGb%_)*}ksLa{AG8W+P$Bxgk=lFg-HS*anM7W^<y<?01BH_jE1XE6Q%6upl9
zhKUKY-?!Egaz<z*KA({NA+nexOAd@P5{<^-e~{r91CN+1)R7CQOg_C3k^zHjV`@}s
zPL+`A@{>w259f-sGO=!Oy|T`7T-0fU2P)leRf@J%HqyGI1bS)#Tz*JRH4xG`H#!lG
zM&rPb=0+!C>8>O&t2s)%EgGEzY^$Ru3VdquL@s5hxm3C>+6H?$u&raNfj$c|HUf`R
zI@`M1+7(_g1g*u?=(?(Cj8{kFtV%S-KOh>hCyK@orzsDO?G<QjXK0+=8I69Jc#Nyj
za8*14ImQJ!!hTg(fx^`>HCBxh2kp{s-B#9WDc!9}fpJ9L2W*0&th2Mbi=iyq-4o-K
z7xPixF&%@Q?XhSy))kF*#A2~%PiJQo$nOXlULd=9qnbHnIG}U`N&{6K(TYNth5amJ
zWDA-J90oj-FwTOq56iJjo=68AC{?gidDD$RY#d%3#F|vWu1G_jgOTwaAMDNuh&YCs
zjp*f~kl3JUkf6<U(Y7Wg#Yq<ASgA@WnJxOdfs+MFRK+4nbdGClMHQ?jIB+1anVMTH
zh;f5BnYFbdM01EZaMcz8KZCqNm2A*w@oX5Zsk`Hvo67MtfD&amDxySeYUb4iqk40C
zdYa1w@C_UILNXPajdvwe^^hMTq+v76*utjf!Hw&OH*MWH(m&XO`wZ~6`P6a7&VrT#
zZfz7DJryZB;_yY~%5mH%_%?AL0}j6L!@X+yQn*l>zH~Nn^|_3bUrY!A+uT`X0U0;U
zq&1<ow{^5P5*JSJPPUmQwydCrt3tEe+XD@7sSqTbIfNj#LB0ft08|i;L6V+BrbF|{
zbp0YSMHZ0h`l;y#@=-F~5L!Z}8)nTV(+#taCev_&WuNKk`5*syaz2@6*G~TnO#PDd

literal 0
HcmV?d00001

diff --git a/MikroMaster/20260302/20260302232004-Config.rsc b/MikroMaster/20260302/20260302232004-Config.rsc
new file mode 100644
index 0000000..9d8df5f
--- /dev/null
+++ b/MikroMaster/20260302/20260302232004-Config.rsc
@@ -0,0 +1,3971 @@
+# 2026-03-02 23:20:04 by RouterOS 7.21.2
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=48:8F:5A:60:A1:0B auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\
+    F6:BE:9D:85:53:F5 name="ether1 - Unet"
+set [ find default-name=ether3 ] comment=LEN
+set [ find default-name=ether4 ] comment=NUC
+/interface l2tp-server
+add comment=Server disabled=yes name=l2tp-in1 user=vados
+/interface l2tp-client
+add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \
+    user=vados
+add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\
+    vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \
+    user=vados
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\
+    2ghz-b/g/n basic-rates-a/g=\
+    6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\
+    1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \
+    disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \
+    rate-set=configured skip-dfs-channels=10min-cac ssid=vados \
+    station-roaming=enabled wds-default-bridge=Bridge-LAN wds-mode=\
+    dynamic-mesh wireless-protocol=802.11 wmm-support=enabled wps-mode=\
+    disabled
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\
+    5ghz-a/n/ac basic-rates-a/g=\
+    6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\
+    20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \
+    hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \
+    skip-dfs-channels=10min-cac ssid=vados5g station-roaming=enabled \
+    wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\
+    802.11 wmm-support=enabled wps-mode=disabled
+/interface wireguard
+add listen-port=13231 mtu=1280 name=WG
+/interface wireless nstreme
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set wlan1 enable-nstreme=yes
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set wlan2 enable-nstreme=yes
+/caps-man security
+add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm \
+    group-encryption=aes-ccm name=security
+/caps-man configuration
+add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\
+    XX country=belarus datapath.client-to-client-forwarding=yes \
+    .local-forwarding=yes name=cfg-2ghz security=security ssid=vados
+add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\
+    XXXX country=belarus datapath.client-to-client-forwarding=yes \
+    .local-forwarding=yes name=cfg-5ghz-ac security=security ssid=vados5g
+add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \
+    country=belarus datapath.client-to-client-forwarding=yes \
+    .local-forwarding=yes name=cfg-5ghz-an security=security ssid=vados5g
+/disk
+add media-interface=lo slot=tmpfs tmpfs-max-size=44739242 type=tmpfs
+# mountpoint [tmpfs] taken by tmpfs
+set usb1 mount-point-template="[tmpfs]"
+/interface list
+add comment=defconf name=WAN
+add comment=defconf name=LAN
+/interface lte apn
+set [ find default=yes ] ip-type=ipv4 use-network-apn=no
+/interface wifi channel
+add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX
+add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC
+add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N
+add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX
+add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G
+add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN
+/interface wifi datapath
+add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath
+/interface wifi security
+add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \
+    group-key-update=1h management-protection=allowed name=sec2g
+add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \
+    group-encryption=ccmp group-key-update=5m management-encryption=cmac \
+    management-protection=required name=sec5G
+/interface wifi configuration
+add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \
+    security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados
+add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\
+    sec2g security.ft=yes .ft-over-ds=yes ssid=vados
+add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\
+    yes .ft-over-ds=yes ssid=vados
+add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \
+    security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \
+    ssid=vados
+add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\
+    sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados
+add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+/ip dns forwarders
+add dns-servers=1.1.1.1 name=blsp.at verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.150-10.30.30.200
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81 use-reconfigure=yes
+/ip hotspot user profile
+set [ find default=yes ] address-pool=dhcp
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/snmp community
+set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\
+    private
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/caps-man manager
+set enabled=yes
+/caps-man provisioning
+add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
+    cfg-2ghz name-format=prefix-identity name-prefix=2ghz
+add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\
+    cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac
+add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\
+    cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an
+/certificate settings
+set builtin-trust-store=fetch crl-store=system
+/disk settings
+set auto-media-interface=lo default-mount-point-template="[tmpfs]"
+/ip smb
+set comment=MikroVados domain=WORKGROUP enabled=yes interfaces=Bridge-LAN
+/interface bridge port
+add bridge=Bridge-LAN ingress-filtering=no interface=ether2 \
+    internal-path-cost=10 path-cost=10
+add bridge=Bridge-LAN comment=LEN ingress-filtering=no interface=ether3 \
+    internal-path-cost=10 path-cost=10
+add bridge=Bridge-LAN comment=NUC ingress-filtering=no interface=ether4 \
+    internal-path-cost=10 path-cost=10
+add bridge=Bridge-LAN ingress-filtering=no interface=ether5 \
+    internal-path-cost=10 path-cost=10
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN
+/ip settings
+set max-neighbor-entries=8192 secure-redirects=no
+/ipv6 settings
+set disable-ipv6=yes max-neighbor-entries=8192
+/interface detect-internet
+set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\
+    LAN wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add comment=WAN interface="ether1 - Unet" list=WAN
+add interface=Bridge-LAN list=LAN
+/interface ovpn-server server
+add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1
+/interface wifi cap
+set caps-man-addresses=10.30.30.10 certificate=request discovery-interfaces=\
+    wlan1,wlan2 lock-to-caps-man=no slaves-static=no
+/interface wifi capsman
+set package-path="" require-peer-certificate=no upgrade-policy=none
+/interface wifi provisioning
+add action=create-dynamic-enabled disabled=no master-configuration=2G-N \
+    name-format=2G-%I slave-configurations=2G-G supported-bands=\
+    2ghz-n,2ghz-g,2ghz-g
+add action=create-dynamic-enabled disabled=no master-configuration=5G-AC \
+    name-format=5G-%I supported-bands=5ghz-ac,5ghz-ac
+/interface wireguard peers
+add allowed-address=10.8.0.2/32,0.0.0.0/0 client-allowed-address=0.0.0.0/0 \
+    endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\
+    MikroVados persistent-keepalive=10s public-key=\
+    "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-certificate-common-names=CAPsMAN-A2A7DF3D5EE6 \
+    certificate=CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes \
+    interfaces=wlan1,wlan2 lock-to-caps-man=yes
+/interface wireless sniffer
+set file-name=24g
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main interface="ether1 - Unet" use-peer-dns=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\
+    masterDHCP
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.81,10.30.30.10 domain=WORKGROUP gateway=10.30.30.81 netmask=24 \
+    ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes
+/ip dns static
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=AMSTER-NUC type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 name=reg.vados.ru type=A
+add address=10.30.30.33 match-subdomain=yes name=ros.vados.ru type=A
+add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A
+add address=10.30.30.33 name=oxidized.vados.ru type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \
+    type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.85 name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=10.30.30.20 name=garage type=A
+add address=10.30.30.86 name=MikroYellow type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=10.30.30.100-255 list=KIDS
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test
+add address=157.240.247.174 list=Instagram
+add address=46.53.178.107 list=Instagram
+add address=179.60.195.174 list=Instagram
+add address=157.240.205.174 list=Instagram
+add address=31.13.24.0/21 list=Instagram
+add address=31.13.64.0/18 list=Instagram
+add address=45.64.40.0/22 list=Instagram
+add address=66.220.144.0/20 list=Instagram
+add address=69.63.176.0/20 list=Instagram
+add address=69.171.224.0/19 list=Instagram
+add address=74.119.76.0/22 list=Instagram
+add address=103.4.96.0/22 list=Instagram
+add address=129.134.0.0/16 list=Instagram
+add address=157.240.0.0/16 list=Instagram
+add address=173.252.64.0/18 list=Instagram
+add address=179.60.192.0/22 list=Instagram
+add address=185.60.216.0/22 list=Instagram
+add address=204.15.20.0/22 list=Instagram
+add address=157.240.200.63 list=Instagram
+add address=185.60.219.63 list=Instagram
+add address=129.134.31.12 list=Instagram
+add address=66.81.203.132 list=Instagram
+add address=185.89.218.12 list=Instagram
+add address=31.13.66.63 list=Instagram
+add address=84.15.65.162 list=Instagram
+add address=68.66.224.28 list=Instagram
+add address=157.240.253.63 list=Instagram
+add address=83.174.11.224 list=Instagram
+add address=157.240.9.52 list=Instagram
+add address=157.240.252.174 list=Instagram
+add address=157.240.195.63 list=Instagram
+add address=31.13.71.52 list=Instagram
+add address=57.144.110.192 list=Instagram
+add address=157.240.252.17 list=Instagram
+add address=84.15.66.97 list=Instagram
+add address=217.168.6.33 list=Instagram
+add address=31.13.83.52 list=Instagram
+add address=157.240.241.63 list=Instagram
+add address=129.134.30.12 list=Instagram
+add address=185.89.219.12 list=Instagram
+add address=157.240.252.10 list=Instagram
+add address=157.240.201.63 list=Instagram
+add address=66.81.203.197 list=Instagram
+add address=179.60.195.52 list=Instagram
+add address=66.81.203.7 list=Instagram
+add address=216.40.34.41 list=Instagram
+add address=157.240.202.63 list=Instagram
+add address=157.240.229.63 list=Instagram
+add address=157.240.252.63 list=Instagram
+add address=31.13.72.53 list=Instagram
+add address=124.108.16.224 list=Instagram
+add address=157.240.205.63 list=Instagram
+add address=92.46.37.96 list=Instagram
+add address=157.240.247.63 list=Instagram
+add address=157.240.234.63 list=Instagram
+add address=157.240.235.63 list=Instagram
+add address=87.245.208.97 list=Instagram
+add address=216.58.192.0/19 list=Instagram
+add address=209.85.128.0/17 list=Instagram
+add address=198.105.240.0/20 list=Instagram
+add address=173.194.0.0/16 list=Instagram
+add address=172.217.0.0/16 list=Instagram
+add address=142.250.0.0/15 list=Instagram
+add address=108.177.0.0/17 list=Instagram
+add address=87.245.197.140 list=Instagram
+add address=74.125.0.0/16 list=Instagram
+add address=64.233.160.0/19 list=Instagram
+add address=157.240.0.1 list=Instagram
+add address=157.240.238.63 list=Instagram
+add address=157.240.238.174 list=Instagram
+add address=157.240.0.63 list=Instagram
+add address=157.240.224.63 list=Instagram
+add address=157.240.224.174 list=Instagram
+add address=157.240.251.36 list=Instagram
+add address=157.240.253.12 list=Instagram
+add address=157.240.253.35 list=Instagram
+add address=157.240.238.13 list=Instagram
+add address=157.240.238.56 list=Instagram
+add address=157.240.238.175 list=Instagram
+add address=57.144.112.141 list=Instagram
+add address=157.240.251.60 list=Instagram
+add address=157.240.251.128 list=Instagram
+add address=157.240.238.5 list=Instagram
+add address=157.240.253.13 list=Instagram
+add address=157.240.253.5 list=Instagram
+add address=157.240.238.2 list=Instagram
+add address=157.240.238.37 list=Instagram
+add address=157.240.251.5 list=Instagram
+add address=157.240.251.34 list=Instagram
+add address=57.144.112.1 list=Instagram
+add address=157.240.238.54 list=Instagram
+add address=129.134.26.123 list=Instagram
+add address=157.240.252.3 list=Instagram
+add address=31.13.84.4 list=Instagram
+add address=157.240.224.12 list=Instagram
+add address=157.240.238.4 list=Instagram
+add address=157.240.0.13 list=Instagram
+add address=3.33.139.32 list=Instagram
+add address=157.240.0.35 list=Instagram
+add address=157.240.238.14 list=Instagram
+add address=157.240.238.60 list=Instagram
+add address=57.144.112.145 list=Instagram
+add address=157.240.251.35 list=Instagram
+add address=151.101.84.159 list=Twitter
+add address=pbs.twimg.com list=Twitter
+add address=89.110.101.17 comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test
+add address=geoip.co list=NoVdsina
+add address=x.com list=Twitter
+add address=facebook.com list=facebook
+add address=fbcd.net list=facebook
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=82.202.162.184 comment=comp-lenta.ru list=NoWG
+add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG
+add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=NUC list=NoWG
+add address=10.30.30.10 comment=MikroNUC list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG
+add address=89.110.101.17 list=VPN-Server
+add address=80.85.244.9 list=TRUSTED
+add address=8.8.8.8 list=TRUSTED
+add address=8.8.4.4 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new disabled=yes dst-port=53 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=\
+    22,8291,2222 in-interface="ether1 - Unet" protocol=tcp src-address-list=\
+    !TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=5d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp src-address=!10.30.30.0/24
+add action=accept chain=input comment=\
+    "accept NTP clients on local area network" dst-port=123 in-interface=\
+    Bridge-LAN in-interface-list=LAN protocol=udp
+add action=accept chain=input comment="accept WireGuard" dst-port=13231 \
+    in-interface="ether1 - Unet" protocol=udp src-address-list=VPN-Server
+add action=accept chain=input disabled=yes dst-port=443 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \
+    protocol=icmp
+add action=accept chain=input comment=\
+    "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \
+    dst-address=127.0.0.1
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet"
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+add action=drop chain=input disabled=yes in-interface-list=!LAN
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+/ip firewall mangle
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" in-interface=WG \
+    log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack
+add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \
+    passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=Instagram dst-address=\
+    !10.30.30.0/24 dst-address-list=Instagram new-routing-mark=To-VPN \
+    src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment=Twitter dst-address=\
+    !10.30.30.0/24 dst-address-list=Twitter new-routing-mark=To-VPN \
+    src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment=YouTube dst-address=\
+    !10.30.30.0/24 dst-address-list=YouTube new-routing-mark=To-VPN \
+    src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment=facebook dst-address=\
+    !10.30.30.0/24 dst-address-list=facebook new-routing-mark=To-VPN \
+    src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina log-prefix=VPN-all \
+    new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp tcp-flags=syn tcp-mss=1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 dst-address-list=!NoVdsina log=yes log-prefix=VPN-Net \
+    new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG
+/ip firewall nat
+add action=redirect chain=dstnat comment=\
+    "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 in-interface-list=\
+    LAN protocol=tcp to-ports=53
+add action=redirect chain=dstnat dst-port=53 in-interface-list=LAN protocol=\
+    udp
+add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\
+    out,none out-interface="ether1 - Unet" routing-mark=!To-VPN
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    in-interface=Bridge-LAN log-prefix=WG-nat out-interface=WG routing-mark=\
+    To-VPN
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 to-ports=81
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps disabled=yes \
+    dst-port=443 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat dst-port=80 in-interface="ether1 - Unet" \
+    protocol=tcp to-addresses=10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=vk.com \
+    content=vk.com
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\
+    ok.ru
+add action=add-dst-to-address-list address-list=Instagram \
+    address-list-timeout=none-dynamic chain=prerouting comment=Instagram \
+    content=instagram.com
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\
+    none-dynamic chain=prerouting comment=Twitter content=twimg.com
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\
+    none-dynamic chain=prerouting content=x.com
+add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\
+    none-dynamic chain=prerouting content=twitter.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting comment=YouTube content=youtube.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=googleapis.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=ggpht.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=youtu.be
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=ytimg.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=googlevideo.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=gstatic.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=googleusercontent.com
+add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\
+    none-dynamic chain=prerouting content=nhacmp3youtube.com
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=me.com \
+    content=me.com
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \
+    content=icloud.com
+add action=add-dst-to-address-list address-list=facebook \
+    address-list-timeout=none-dynamic chain=prerouting comment=facebook \
+    content=fbcd.net
+add action=add-dst-to-address-list address-list=facebook \
+    address-list-timeout=none-dynamic chain=prerouting content=facebook.com
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \
+    content=comp-lenta.ru
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    smtp.mail.me.com content=smtp.mail.me.com log=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \
+    content=gov.ru
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    r78.fssp.gov.ru content=r78.fssp.gov.ru
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \
+    content=api.db-ip.com
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    api.telegram.org content=api.telegram.org
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn
+add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn
+add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn
+add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn
+add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\
+    To-VPN scope=30 target-scope=10
+add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \
+    routing-table=main scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-plain=no rest-secure=no scep-plain=no \
+    webfig-plain=no webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add interface="ether1 - Unet" type=external
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=add-src-to-address-list address-list=bad_ipv6 \
+    address-list-timeout=none-dynamic chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked in-interface=WG in-interface-list=WAN \
+    src-address-list=""
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/ppp secret
+add local-address=192.168.60.1 name=vados remote-address=192.168.60.2 \
+    service=l2tp
+/routing bfd configuration
+add disabled=no
+/snmp
+set contact=@AmsterNL enabled=yes engine-id-suffix=MikroMaster location=NL \
+    src-address=10.30.30.81 trap-interfaces=Bridge-LAN,WG trap-target=\
+    10.30.30.10
+/system clock
+set time-zone-autodetect=no time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Windows Update script" interval=2d5m name=WU-script-run-schedule \
+    on-event=WU-add-to-list policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2014-02-11 start-time=00:00:00
+add comment="Backup Every Week" disabled=yes interval=1w name=BackupEveryWeek \
+    on-event=BackupAndUpdate policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2025-07-07 start-time=03:41:27
+add comment="DoH Cache Flush" interval=1d name="DNS Cache Flush" on-event=\
+    DNS_Flush_Cache policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2019-12-06 start-time=05:30:00
+add comment="Create mkdir function on startup" name=\
+    create_mkdir_function_on_startup on-event=\
+    "/system script run create_mkdir_function;" policy=read,write,policy,test \
+    start-time=startup
+add comment="Scheduler for Update Certificates CloudFlare Quad9" interval=1w \
+    name="Update Certificates CloudFlare Quad9" on-event=\
+    "/system/script { run Update-Certificates; }" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2025-11-28 start-time=05:45:40
+add comment="Scheduler for Amster-Backup-UpdateEmail" disabled=yes interval=\
+    1w name=Amster-Backup-UpdateEmail on-event=\
+    "/system/script { run Amster-Backup-UpdateEmail; }" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-02-13 start-time=03:41:27
+add comment="Setup Global Environment for scripts" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system script
+add comment="Example add WU servers to AddrList" dont-require-permissions=no \
+    name=WU-add-to-list owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \_Script to add target web sites DNS IP addresses into address list\r\
+    \n# Tested with Mikrotik 6.4x\r\
+    \n# Syed Jahanzaib / aacable@hotmail.com\r\
+    \n# List name\r\
+    \n:local LISTNAME \"windowsupdateslist\"\r\
+    \n# Web site names which will be added in address list\r\
+    \n:local TARGET1 \"update.microsoft.com\"\r\
+    \n:local TARGET2 \"download.windowsupdate.com\"\r\
+    \n:local TARGET3 \"download.microsoft.com\"\r\
+    \n:local TARGET4 \"windowsupdate.com\"\r\
+    \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\
+    \n:local TARGET6 \"wustat.windows.com\"\r\
+    \n:local TARGET7 \"stats.microsoft.com\"\r\
+    \n:local TARGET8 \"mp.microsoft.com\"\r\
+    \n:local TARGET9 \"ws.microsoft.com\"\r\
+    \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\
+    \n:local TARGET11 \"vortex.data.microsoft.com\"\r\
+    \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\
+    \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\
+    \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\
+    \n \r\
+    \n# 1st time runner, check if address list is not created previously and a\
+    dd entries in it for 1st time usage\r\
+    \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\
+    {\r\
+    \n:log warning \"No address list for \$TARGET1 found ! creating and adding\
+    \_resolved entry for 1st time usage ... zaib\"\r\
+    \n \r\
+    \n:local FirstAddr [resolve \$TARGET1];\r\
+    \n\r\
+    \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\
+    t=\$TARGET1;\r\
+    \n} else={\r\
+    \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\
+    hecking if DNS entries can be added in it ...\"\r\
+    \n}\r\
+    \n \r\
+    \n# Check DNS entries and collect matching names\r\
+    \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\
+    \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\
+    ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\
+    \_] do={\r\
+    \n \r\
+    \n# Get IP Address from the names and hold it in temporary buffer\r\
+    \n:local Buffer [/ip dns cache get \$i data];\r\
+    \ndelay delay-time=10ms\r\
+    \n \r\
+    \n# Check if entry is already not exists, then OK, otherwise ignore duplic\
+    ation\r\
+    \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\
+    ={\r\
+    \n \r\
+    \n# Fetch DNS names for the entries\r\
+    \n:local sitednsname [/ip dns cache get \$i name] ;\r\
+    \n \r\
+    \n# Print name in LOG window\r\
+    \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\
+    \n \r\
+    \n# Add IP addresses and there names to the address list\r\
+    \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\
+    \$sitednsname;\r\
+    \n}\r\
+    \n}"
+add comment="Add Hosts DNS names to NoWG addres list" \
+    dont-require-permissions=no name=Add2vdsina owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \_Script to add target web sites DNS IP addresses into address list\r\
+    \n# Tested with Mikrotik 6.4x\r\
+    \n# \r\
+    \n# List name\r\
+    \n:local LISTNAME \"NoWG\"\r\
+    \n#\r\
+    \n# Web site names which will be added in address list\r\
+    \n:local TARGET1 \"comp-lenta.ru\"\r\
+    \n:local TARGET2 \"ok.ru\"\r\
+    \n:local TARGET3 \"vk.com\"\r\
+    \n#:local TARGET4 \"smtp.mail.me.com\"\r\
+    \n#:local TARGET4 \"windowsupdate.com\"\r\
+    \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\
+    \n#:local TARGET6 \"wustat.windows.com\"\r\
+    \n#:local TARGET7 \"stats.microsoft.com\"\r\
+    \n#:local TARGET8 \"mp.microsoft.com\"\r\
+    \n#:local TARGET9 \"ws.microsoft.com\"\r\
+    \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\
+    \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\
+    \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\
+    \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\
+    \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\
+    \n \r\
+    \n# 1st time runner, check if address list is not created previously and a\
+    dd entries in it for 1st time usage\r\
+    \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\
+    {\r\
+    \n:log warning \"No address list for \$TARGET1 found ! creating and adding\
+    \_resolved entry for 1st time usage ... zaib\"\r\
+    \n\r\
+    \n:local FirstAddr [resolve \$TARGET1];\r\
+    \n\r\
+    \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\
+    t=\$TARGET1;\r\
+    \n\r\
+    \n} else={\r\
+    \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\
+    hecking if DNS entries can be added in it ...\"\r\
+    \n}\r\
+    \n\r\
+    \n# Check DNS entries and collect matching names\r\
+    \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\
+    \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\
+    \n\r\
+    \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\
+    \n\r\
+    \n# Get IP Address from the names and hold it in temporary buffer\r\
+    \n:local Buffer [/ip dns cache get \$i data];\r\
+    \ndelay delay-time=10ms\r\
+    \n:log info (\"1: \$Buffer\"); \r\
+    \n\r\
+    \n# Check if entry is already not exists, then OK, otherwise ignore duplic\
+    ation\r\
+    \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\
+    ={\r\
+    \n\r\
+    \n:log info (\"2: \$Buffer\"); \r\
+    \n \r\
+    \n# Fetch DNS names for the entries\r\
+    \n:local sitednsname [/ip dns cache get \$i name] ;\r\
+    \n \r\
+    \n# Print name in LOG window\r\
+    \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\
+    \n \r\
+    \n# Add IP addresses and there names to the address list\r\
+    \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\
+    \$sitednsname;\r\
+    \n}\r\
+    \n}"
+add comment="Flush DNS Cache" dont-require-permissions=no name=\
+    DNS_Flush_Cache owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\
+    "/ip dns cache flush"
+add dont-require-permissions=no name=create_mkdir_function owner=vados \
+    policy=read,write source="# Written by Phillip Stromberg in 2019\r\
+    \n# Distributed under the MIT license\r\
+    \n# \r\
+    \n# \r\
+    \n# this creates a function called \$mkdir\r\
+    \n# from the command line you will be able to just type \"\$mkdir some/new\
+    /folder\"\r\
+    \n# and all the folders that need to be created will be\r\
+    \n# if the folder already existed, it is ignored\r\
+    \n\r\
+    \n:log info \"Creating \\\$mkdir function...\"\r\
+    \n\r\
+    \n:global mkdir do={\r\
+    \n    # \$1 refers to the input variable the user passed in to us\r\
+    \n    :local newFolder \$1;\r\
+    \n\r\
+    \n    # we'll use this variable to report error messages that may arise\r\
+    \n    :local errorMsg;\r\
+    \n\r\
+    \n    # if the user put a slash on the end of the new folder name, remove \
+    it\r\
+    \n    # i.e. \"some/test/\" becomes \"some/test\"\r\
+    \n    :while (([:pick \$newFolder ([:len \$newFolder] - 1)]) = \"/\") do={\
+    \r\
+    \n        :set newFolder [:pick \$newFolder 0 ([:len \$newFolder] - 1)]\r\
+    \n    }\r\
+    \n\r\
+    \n    # if the user put a slash at the beginning of the new folder name, r\
+    emove it\r\
+    \n    # i.e. \"/some/test\" becomes \"some/test\"\r\
+    \n    :while ([:pick \$newFolder 0] = \"/\") do={\r\
+    \n        :set newFolder [:pick \$newFolder 1 [:len \$newFolder]]\r\
+    \n    }\r\
+    \n\r\
+    \n    :if ([/file find name=\$newFolder] != \"\") do={\r\
+    \n        :set errorMsg \"'\$newFolder' already exists.\";\r\
+    \n        :log debug \"mkdir: \$errorMsg\";\r\
+    \n        :return \$newFolder;\r\
+    \n    }\r\
+    \n\r\
+    \n    # the name of the temp file to create\r\
+    \n    :local tempfile \"mkdir_temp_file.txt\";\r\
+    \n\r\
+    \n    # port 0 is unlikely to be open to HTTP requests...\r\
+    \n    :local fakeURL \"http://127.0.0.1:0/should-not-exist.txt\";\r\
+    \n\r\
+    \n    :local fullTempPath (\$newFolder . \"/\" . \$tempfile);\r\
+    \n\r\
+    \n    # this is where the folder creation happens\r\
+    \n    # `as-value` prevents status messages from printing\r\
+    \n    # wrapping in a `:do {...} on-error` prevents error messages from pr\
+    inting.\r\
+    \n    :do {\r\
+    \n        /tool fetch dst-path=\"\$fullTempPath\" url=\"\$fakeURL\" durati\
+    on=0.001s as-value;\r\
+    \n    } on-error={}\r\
+    \n\r\
+    \n    # this waits for the temporary dir to show up so there isn't a race \
+    \r\
+    \n    # condition where you call mkdir and then try to do something before\
+    \_the \r\
+    \n    # folder is actually created\r\
+    \n    :local count 0;\r\
+    \n    :while ([/file find name=\"\$newFolder\"] = \"\") do={\r\
+    \n        :if (\$count >= 50) do={\r\
+    \n            # after 50 * 0.1s delays, it's been 5 seconds, which should \
+    be long enough\r\
+    \n            :set errorMsg \"New folder could not be created at \$newFold\
+    er\";\r\
+    \n            :log error \"mkdir: \$errorMsg\"\r\
+    \n            :error \$errorMsg\r\
+    \n        }\r\
+    \n        :delay 0.1s;\r\
+    \n        :set count (\$count + 1);\r\
+    \n    }\r\
+    \n\r\
+    \n    :return \$newFolder;\r\
+    \n}\r\
+    \n\r\
+    \n:log info \"Created function \\\$mkdir\"\r\
+    \n"
+add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \
+    name=Update-Certificates owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \_CloudFlare\r\
+    \n/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRo\
+    otCA.crt.pem;\r\
+    \n/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\"\
+    \";\r\
+    \n/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG\
+    2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.\
+    pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGlobal\
+    G3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.\
+    pem  passphrase=\"\";\r\
+    \n\r\
+    \n#:global AmScriptsUrl;\r\
+    \n#google\r\
+    \n#:local CertName \"GTS-Root-R1.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-R4.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=script1 owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
+    tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\
+    are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\
+    dFlare-doh IPv4 1\" host=1.1.1.1;\r\
+    \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\
+    s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\
+    -doh IPv4 2\" host=1.0.0.1;\r\
+    \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\
+    /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\
+    le-doh IPv4 1\" host=8.8.8.8;\r\
+    \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\
+    /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\
+    le-doh IPv4 2\" host=8.8.4.4;\r\
+    \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\
+    /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\
+    uad9-doh IPv4 1\" host=9.9.9.9;\r\
+    \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\
+    /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\
+    uad9-doh IPv4 2\" host=149.112.112.112;\r\
+    \n\r\
+    \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\
+    .189.2;"
+add dont-require-permissions=no name=script2 owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n#:global RouterBoard;\r\
+    \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\
+    r={}\r\
+    \n#:global Resources;\r\
+    \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\
+    \r\
+    \n\r\
+    \n#:global Updates;\r\
+    \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\
+    ={}\r\
+    \n\r\
+    \n#:global PkgUpdStatus \"undefined\";\r\
+    \n#:local Update [/system/package/update/get];\r\
+    \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\
+    ax=5 on-error={};\r\
+    \n\r\
+    \n#:log warning [\$InspectVar \$RouterBoard];\r\
+    \n#:put [\$InspectVar \$RouterBoard];\r\
+    \n\r\
+    \n#:retry command={/system/package/update check-for-updates without-paging\
+    \_as-value} delay=300ms max=5 on-error={};\r\
+    \n\r\
+    \n#:global arrDeviceInfo ({});\r\
+    \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\
+    \r\
+    \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\
+    /get\" ]];\r\
+    \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\
+    /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\
+    \")};\r\
+    \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\
+    \n# [:toarray \"\"];\r\
+    \n:local arrDeviceInfo ({});\r\
+    \n\r\
+    \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\
+    \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\
+    te/get\" ]]} on-error={:log error (\$error)}\r\
+    \n\$InspectVar \$arrDeviceInfo;\r\
+    \n"
+add dont-require-permissions=no name=AM-setup owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    \_RouterOS Setup Script: AM-setup\r\
+    \n# \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n\r\
+    \n## Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:if ([ :len [ /system/script/find where name=\$ScriptName ]] = 0 ) do={\
+    \r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# :global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n# /system/script/add name=\$ScriptName owner=\$ScriptName source=([ /too\
+    l/fetch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptNa\
+    me . \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#}\r\
+    \n# For run from terminal:\r\
+    \n# /system/script/add name=AM-setup owner=AM-Setup source=([ /tool/fetch \
+    check-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" ou\
+    tput=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n# /system/script/set source=[ :tocrlf [ get \$ScriptName source ] ] \$Sc\
+    riptName;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:local RemoveThisScript false;\r\
+    \n\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n{\r\
+    \n  :local ScriptName;\r\
+    \n  :local RemoveThisScript;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :local AllDone;\r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \
+    \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n    :put \"Importing certificate...\";\r\
+    \n:log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n    /tool/fetch (\$GlobalScriptsUrl . \"certs/\" . \$CertFileName) dst-p\
+    ath=\$CertFileName as-value;\r\
+    \n    :delay 1s;\r\
+    \n    /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n    :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint \
+    ] ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n    };\r\
+    \n    :delay 1s;\r\
+    \n  };\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n  };\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :put \"Add Schedulers...\";\r\
+    \n  :delay 1;\r\
+    \n  :put \"Add Global scheduler...\";\r\
+    \n  :local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFu\
+    nc; }\";\r\
+    \n  :local Comment \"Setup Global Environment for scripts\";\r\
+    \n  :if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] \
+    ] = 0) do={\r\
+    \n    /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-\
+    event=\$OnEvent start-time=startup;\r\
+    \n  }\r\
+    \n  :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Commen\
+    t) do={\r\
+    \n    /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n  }\r\
+    \n  :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEve\
+    nt) do={\r\
+    \n    /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n  }\r\
+    \n  :delay 1;\r\
+    \n  :put \"Add Update Script scheduler\";\r\
+    \n  :set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\"\
+    ;\r\
+    \n  :set Comment \"Every Day Check For Update Scripts\";\r\
+    \n  :if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpda\
+    te\" ] ] = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Commen\
+    t start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n  }\r\
+    \n\r\
+    \n  :delay 1;\r\
+    \n  :put \"Loading configuration and functions...\";\r\
+    \n  :do { \r\
+    \n    /system/script { run AM-GlobalConfig; run AM-GlobalFunc; };\r\
+    \n    :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n    :set AllDone true;\r\
+    \n  } on-error={\r\
+    \n    :set AllDone false;\r\
+    \n    :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n    :log error (\$ScriptName . \$ErrorMsg . :error);\r\
+    \n    :error \$ErrorMsg;\r\
+    \n  }\r\
+    \n\r\
+    \n  :delay 5s;\r\
+    \n  :if (\$AllDone = true && \$RemoveThisScript = true) do={\r\
+    \n  :put \"Add Scheduler for remove this script...\";\r\
+    \n  :set OnEvent \":delay 30s; /system/script/remove [ find where name=\$S\
+    criptName ]; :delay5s; /system/scheduler/remove [ find where name=\\\"_Rem\
+    oveSetup\\\" ];\";\r\
+    \n  :set Comment \"_RemoveSetup tmp scheduler for remove setup script.\";\
+    \r\
+    \n  /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-ti\
+    me=startup interval=30s on-event=\$OnEvent;\r\
+    \n  :log warning (\$ScriptName . \"\\nI've done everything, and now I'm ti\
+    red... I'm leaving. ))\\nThere will be an error below, this is normal.\");\
+    \r\
+    \n  }\r\
+    \n};\r\
+    \n"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n#root.mnuc.backuper\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n#/usb1/mikro_bak_rsa.pub"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global GlobalConfReady false;\r\
+    \n#   \\/    start edit\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in Amster-Init-Script\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix \"\";\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\"; #:global EmailGeneralCc \"\";\
+    \r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.21\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 138;\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global GlobalEnvRemove;\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n#:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global ExitError;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global WaitDNSResolving;\r\
+    \n:global WaitFullyConnected;\r\
+    \n:global WaitTimeSync;\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global FetchLargeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global LogPrint;\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  \$LogPrint debug \$0 (\"\\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if (\$CurrentChannel != \$updateChannel) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    \$LogPrint debug \$0 (\"Set updates channel to: \$updateChannel\");\
+    \r\
+    \n  }\r\
+    \n   \r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel (\$Update->\"channel\");\r\
+    \n  \$LogPrint debug \$0 (\"Update Channel: \" . \$Channel . \".\");\r\
+    \n   \r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  \$LogPrint debug \$0 (\"Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  \$LogPrint debug \$0 (\"\\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([:len \$arrDeviceInfo] = 0) do={\r\
+    \n    :global arrDeviceInfo ({});\r\
+    \n    :local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};}\
+    );\r\
+    \n    }\r\
+    \n    # else={:local arrDeviceInfo ({})}\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [[ :parse \"/\
+    system/package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"\
+    Error\")};\r\
+    \n    #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannel\"; \$Cu\
+    rrentChannel;};\r\
+    \n    #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentVersion\"; (\$U\
+    pdate->\"installed-version\");};\r\
+    \n    #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannelVersion\
+    \"; [/system/resource/get version];};\r\
+    \n    #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateChannel\"; [\$up\
+    dateChannel];};\r\
+    \n    #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateVersion\"; (\$Up\
+    date->\"latest-version\");};\r\
+    \n  } else={\r\
+    \n  :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   \r\
+    \n   :global arrDeviceInfo [:toarray {\"section\"={\"key\"=\"\"; \"value\"\
+    =\"\";} }];\r\
+    \n   #:do {:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system/package\
+    /update/get\" ]]} on-error={}\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devRbCurrentFw;\r\
+    \n   :global devRbUpgradeFw;\r\
+    \n \r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global ROsVerCurrent;\r\
+    \n   :global ROsChannelCurrent;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :global ParseCustom;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global GetPubIp;\r\
+    \n   \r\
+    \n   :local License [/system/license/get];\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :set devBuildTime (\$Resource->\"build-time\");\r\
+    \n   :set runningChannelVersion (\$Resource->\"version\");\r\
+    \n   :set runningChannel [\$ParseCustom \$runningChannelVersion \"(\" \")\
+    \" 1];\r\
+    \n   :set runningVersion [\$ParseCustom \$runningChannelVersion \" \"];\r\
+    \n   \r\
+    \n   :do {\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n      :local RouterBoard;\r\
+    \n      :do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on\
+    -error={}\r\
+    \n      :set devModel (\$RouterBoard->\"model\");\r\
+    \n      :set devRbRevision (\$RouterBoard->\"revision\");\r\
+    \n      :set devRbSerialNumber (\$RouterBoard->\"serial-number\");\r\
+    \n      #:set devRbCurrentFw (\$RouterBoard->\"current-firmware\");\r\
+    \n      #:set devRbUpgradeFw (\$RouterBoard->\"upgrade-firmware\");\r\
+    \n      :if (\$devCurArch = \"mipsbe\" || \$devCurArch = \"arm\") do={\r\
+    \n         :global devRunning [ /system/device-mode/get mode ];\r\
+    \n         } else={\r\
+    \n          :global devRunning [/system/device-mode/get running];}\r\
+    \n    } else={\r\
+    \n    :set devModel \$devBoardName;\r\
+    \n    \r\
+    \n    :set devRbRevision false;\r\
+    \n    :set devRbSerialNumber false;\r\
+    \n#    :set devRbCurrentFw false;\r\
+    \n#    :set devRbUpgradeFw false;\r\
+    \n    #:set devCurrentFw \$runningVersion;#:set devUpgradeFw \$ROsVerAvail\
+    ;\r\
+    \n    :set devRunning [/system/device-mode/get running];\r\
+    \n    }\r\
+    \n   } on-error={\r\
+    \n    \$LogPrint error \$0 (\"Error in Function getDevice!\");\r\
+    \n    :return false;\r\
+    \n   }\r\
+    \n:return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global WaitArrDeviceInfo;\r\
+    \n  # \$WaitDeviceInfo;\r\
+    \n  :global devBoardName;\r\
+    \n  :global devCurArch;\r\
+    \n  :global devModel;\r\
+    \n  :global devRunning;\r\
+    \n  :global devRbRevision;\r\
+    \n  :global devRbSerialNumber;\r\
+    \n  :global PiblicIpAddress;\r\
+    \n\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :local Return;\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Resource [/system/resource/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  \r\
+    \n  :set Return ([ \$FormatLine \"Hostname:\" \$Identity ] . \"\\n\" . \\\
+    \r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location:\" (\$Snmp->\"location\") ] . \"\\n\") \
+    ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact:\" (\$Snmp->\"contact\") ] . \"\\n\") ] \
+    . \\\r\
+    \n      \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board:\" . \$devBoardName ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Arch:\" . \$devCurArch ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Model:\" \$devModel ] . \\\r\
+    \n      [ \$IfThenElse ([ :len \$devRbRevision ] > 0) \\\r\
+    \n      (\" \" . \$devRbRevision) ] . \"\\n\" . \\\r\
+    \n      [ \$IfThenElse ([ :len \$devRbSerialNumber ] > 0) \\\r\
+    \n       ([ \$FormatLine \"    Serial:\" . \$devRbSerialNumber ] . \"\\n\"\
+    ) ] .  \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License:\" (\"level \" . (\$License->\"nleve\
+    l\")) ] . \"\\n\") ] . \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License:\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"Running Channel\" \$runningChannel ] . \"\\n\" . \\\
+    \r\
+    \n    [ \$FormatLine \"    Installed:\" (\$Update->\"installed-version\") \
+    ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :typeof (\$Update->\"latest-version\") ] != \"noth\
+    ing\" && \\\r\
+    \n        \$Update->\"installed-version\" != \$Update->\"latest-version\")\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Update->\"latest-version\") ]\
+    \_. \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse (\$RouterBoard->\"routerboard\" = true && \\\r\
+    \n        \$RouterBoard->\"current-firmware\" != \$RouterBoard->\"upgrade-\
+    firmware\") \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" (\$RouterBoard->\"current-firmwar\
+    e\") ] . \"\\n\") ] . \\ \r\
+    \n      \"RouterOS-Scripts:\\n\" . \\\r\
+    \n      [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n      [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n# !!! The function is not ready !!!\r\
+    \n:global FetchHttpInfo do={\r\
+    \n  :local Mac [ :tostr \$1 ];\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global IsMacLocallyAdministered;\r\
+    \n  :global LogPrint;\r\
+    \n  :local Url \"https://api.macvendors.com/\";\r\
+    \n  :if ([ \$IsMacLocallyAdministered \$Mac ] = true) do={:return \"locall\
+    y administered\";}\r\
+    \n  :do {\r\
+    \n    :if ([ \$CertificateAvailable \"GTS Root R4\" \"fetch\" ] = false) d\
+    o={\r\
+    \n      \$LogPrint warning \$0 (\"Downloading required certificate failed.\
+    \");\r\
+    \n      :error false;\r\
+    \n    }\r\
+    \n    :local Vendor ([ /tool/fetch \r\
+    \n     (\$Url . [ :pick \$Mac 0 8 ]) output=user as-value ]->\"data\");\r\
+    \n    :return \$Vendor;\r\
+    \n  } on-error={\r\
+    \n    :onerror Err {\r\
+    \n      /tool/fetch check-certificate=yes-without-crl (\$Url) output=none \
+    as-value;\r\
+    \n      \$LogPrint debug \$0 (\"The mac vendor is not known in database.\"\
+    );\r\
+    \n    } do={ \$LogPrint warning \$0 (\"Failed getting mac vendor: \" . \$E\
+    rr); }\r\
+    \n    :return \"unknown vendor\";\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n    :global LogPrint;\r\
+    \n    \r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n\r\
+    \n#   :retry command={abc} delay=1 max=2 on-error={:put \"got error\"} \r\
+    \n    :do {\r\
+    \n      \$LogPrint debug \$0 (\"Trying to detect public IP using default s\
+    ervice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fail\
+    ed to detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n       #:error \"Failed to detect public IP using default service: \$Url\
+    .\"};\r\
+    \n     } on-error={\r\
+    \n      \$LogPrint error \$0 (\"Failed to detect public IP using default s\
+    ervice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      \$LogPrint debug \$0 (\"Trying to detect public IP using fallback \
+    service: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fai\
+    led to detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :if (\$PubIpAddr = false) do={\r\
+    \n      :set PubIpAddr \"not-detected\";\r\
+    \n    } else={\r\
+    \n      :set PubIpAddr [ :pick \$PubIpAddr 0 15];\r\
+    \n    }\r\
+    \n  :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global EitherOr;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :set UseFor [ \$EitherOr \$UseFor \"undefined\" ];\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    \$LogPrint warning \$0 (\"This system has low free flash space but \
+    \" . \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    \$LogPrint info \$0 (\"Certificate with CommonName '\" . \$CommonNam\
+    e . \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={:return fal\
+    se}\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    \$LogPrint info \$0 (\"There are \" . \$CertCount . \" Certificates \
+    with CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      \$LogPrint info \$0 (\"Certificate chain for '\" . \$CommonName . \
+    \"' is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={:return fal\
+    se}\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global LogPrint;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n  \r\
+    \n  \$LogPrint info \$0 (\"Downloading and importing certificate with Comm\
+    onName '\" . \$CommonName . \"'.\");\r\
+    \n  \r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl http-header-field=({ [\
+    \_\$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$GlobalScriptsUrl . \"certs/\" . \$FileName . \$GlobalScriptsUrl\
+    Suffix) dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    \$LogPrint warning \$0 (\"Failed downloading certificate with Common\
+    Name '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0) do={\r\
+    \n        \$LogPrint error \$0 (\"Required certificate is not available.\"\
+    );\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl http-header-field=({\
+    \_[ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n        \"https://mkcert.org/generate/\" http-data=[ :serialize to=json \
+    ({ \$CommonName }) ] \\\r\
+    \n        dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      \$LogPrint warning \$0 (\"Failed downloading certificate with Comm\
+    onName '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    \$LogPrint warning \$0 (\"Certificate with CommonName '\" . \$Common\
+    Name . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :global LogPrint;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n    \r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n  \r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \"checksums.json\" . \$GlobalScrip\
+    tsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\
+    ws and changes are not available.\")}\r\
+    \n\r\
+    \n    :set GlobalConfChanges;\r\
+    \n    :set GlobalConfMigration;\r\
+    \n  }\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (https://amster.vados.ru/; main/3419/3ee\
+    19780)\");\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandomNumber do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndnum from=0 to=[ \$EitherOr [ :tonum \$1 ] 4294967295 ] ]\
+    \r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    \$LogPrint error \$Name ([ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\
+    \$\") \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={:return false}\r\
+    \n  :local FileVal false;\r\
+    \n  :do {:set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :global LogPrint;\r\
+    \n  \$LogPrint debug \$0 (\"Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\$LogPrint debug \$0 (\"... which does not \
+    exist.\"); :return true};\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\$LogPrint error \$0 (\"\
+    Directory '\" . \$DirName . \"' is not a directory.\"); :return false};\r\
+    \n  :onerror Err {/file/remove \$DirName} do={\$LogPrint error \$0 (\"Remo\
+    ving directory '\" . \$DirName . \"' failed: \" . \$Err); :return false};\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :global LogPrint;\r\
+    \n  \$LogPrint debug \$0 (\"Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\$LogPrint debug \$0 (\"... which does not\
+    \_exist.\"); :return true}\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    \$LogPrint error \$0 (\"File '\" . \$FileName . \"' is not a file.\"\
+    ); :return false}\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\$LogPrint error \$0 (\"Removing file '\" . \$FileName . \"' fai\
+    led: \" . \$Err); :return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n  :global LogPrint;\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       \$LogPrint info \$0 (\"The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    \$LogPrint info \$0 (\"Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      \$LogPrint warning \$0 (\"Creating disk of type tmpfs failed: \" .\
+    \_\$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$LogPrint debug \$0 (\"Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    \$LogPrint debug \$0 (\"... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    \$LogPrint warning \$0 (\"Making directory '\" . \$Path . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={:set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]};\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={:set Path [ :pick \$Path 1 [ :len\
+    \_\$Path ] ]};\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={:set Path [ :\
+    pick \$Path 0 ([ :len \$Path ] - 1) ]};\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    \$LogPrint error \$0 (\"No valid RouterOS version: \" . \$Required);\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      \$LogPrint warning \$0 (\"This \" . [ \$IfThenElse ([ :pick \$Call\
+    er 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"A script named '\" . \$Script . \"' does not\
+    \_exist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    \$LogPrint error \$0 (\"More tickets than running scripts '\" . \$Sc\
+    ript . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global LogPrint;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"No symbol available for name '\" . \$Name \
+    . \"'!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n# read parts of a large file\r\
+    \n:set FetchLargeFiles do={\r\
+    \n  :local ScriptName [:tostr \$1];\r\
+    \n  :local fetchUrl [:tostr \$2];\r\
+    \n  :local CheckCert [:tostr \$3];\r\
+    \n  :local fetchMode [:tostr \$4];\r\
+    \n  :local fetchMethod [:tostr \$5];\r\
+    \n  :local FetchString \"undefined\";\r\
+    \n \r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n  #:set fetchMode [ \$IfThenElse (\$fetchMode != \"false\") [:tostr (\"m\
+    ode=\" . \$fetchMode)] ];\r\
+    \n  #:set fetchMethod [\$IfThenElse (\$fetchMethod != \"false\") [:tostr (\
+    \"http-method=\\\"\" . \$fetchMethod . \"\\\"\") ]];\r\
+    \n  \r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  #/tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName h\
+    ttp-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-value;\r\
+    \n  #:log warning (\"\\\$fUrl =\" . \$2 . ({[ \$fMode ]}));\r\
+    \n    :onerror Err {\r\
+    \n      :set FetchString (\"/tool/fetch \" . \\\r\
+    \n      [\$IfThenElse ([\$fetchMethod] != \"false\") (\"http-method=\\\"\"\
+    \_. \$fetchMethod . \"\\\" \")] . \\\r\
+    \n      \"check-certificate=\" . \$CheckCert . \" url=(\\\"\" . \$fetchUrl\
+    \_. \"\\\") \" . \\\r\
+    \n      [\$IfThenElse ([\$fetchMode] != \"false\") (\"mode=\" . \$fetchMod\
+    e . \" \")] . \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue);\r\
+    \n      :log warning (\"\\\$FetchSring = \" . \$FetchString);\r\
+    \n      :put [\$FetchString];\r\
+    \n    #:put [/tool/fetch \$fetchMode check-certificate=\$CheckCert url=(\$\
+    fetchUrl) dst-path=(\$FileName) http-header-field=({ [ \$FetchUserAgentStr\
+    \_\$ScriptName ] }) as-value];\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$fetchUrl . \"\
+    \_- \" . \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$fetchUrl . \
+    \" did not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n# Global Environment clear. Use: \"\$GlobalEnvRemove True;\".\r\
+    \n:set GlobalEnvRemove do={\r\
+    \n  :local doRmEnv [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :local ScriptsUrl;\r\
+    \n  :global LogPrint;\r\
+    \n  :if (\$doRmEnv != \"True\") do={\r\
+    \n     \$LogPrint error \"GlobalEnvRemove\" (\"This script is needed \\\"T\
+    rue\\\" for confirm to remove global environment variables!\");\r\
+    \n     :return [];\r\
+    \n     :error true;  \r\
+    \n  } else={\r\
+    \n     :set ScriptsUrl \$GlobalScriptsUrl;\r\
+    \n     :delay 5;\r\
+    \n     :foreach var in=[/system/script/environment print as-value] do={/sy\
+    stem/script/environment remove (\$var->\".id\")}\r\
+    \n     :delay 5;\r\
+    \n     :global GlobalScriptsUrl \$ScriptsUrl;\r\
+    \n     \$LogPrint warning \"GlobalEnvRemove\" (\"Done!\");\r\
+    \n     :return [];\r\
+    \n     :error false;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Setup Global Environment for scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n#:local Resource [ /system/resource/get ];\r\
+    \n#:log info (\$ScriptName . \" Loaded on \" . \$Resource->\"board-name\" \
+    . \" with RouterOS \" . \$Resource->\"version\" . \" and Architecture \" .\
+    \".\");\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n:log warning (\"This script \$ScriptName Loaded on \" . \$devBoardName .\
+    \_\"\\nRouterOS: \" . \$devCurVersion . \"\\nArchitecture: \" . \$devCurAr\
+    ch . \"\\nIdentity: \" . \$Identity);\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err;}\r\
+    \n\r\
+    \n#} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\
+    \n# log the successful load of the script, or an error if it failed\r\
+    \n#:if ([\$GlobalFuncReady] = true && [\$GlobalConfReady] = true) do={\r\
+    \n"
+add comment="Import ssh keys for public key authentication" \
+    dont-require-permissions=no name=AM-SshKeysImport owner=AM-SshKeysImport \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-SshKeysImport\r\
+    \n# Script comment: Import ssh keys for public key authentication\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n#\r\
+    \n:local ExitOK false;\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady; :global GlobalFuncReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \
+    \\\r\
+    \n      do={ :error (\"Global configs or functions not ready.\"); }; } del\
+    ay=500ms max=50;\r\
+    \n  :local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global SSHKeysImport;\r\
+    \n:global SSHKeysImportFile;\r\
+    \n\r\
+    \n# import single key passed as string\r\
+    \n:set SSHKeysImport do={ :onerror Err {\r\
+    \n  :local Key  [ :tostr \$1 ];\r\
+    \n  :local User [ :tostr \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ :len \$Key ] = 0 || [ :len \$User ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"Missing argument(s), please pass key and u\
+    ser!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /user/find where name=\$User ] ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"User '\" . \$User . \"' does not exist.\")\
+    ;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local KeyVal ([ :deserialize \$Key delimiter=\" \" from=dsv options=d\
+    sv.plain ]->0);\r\
+    \n  :if (!(\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\")) do\
+    ={\r\
+    \n    \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' is\
+    \_not supported.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex (\$K\
+    eyVal->1) ];\r\
+    \n  :local RegEx (\"\\\\bmd5=\" . \$FingerPrintMD5 . \"\\\\b\");\r\
+    \n  :if ([ :len [ /user/ssh-keys/find where user=\$User \\\r\
+    \n       (key-owner~\$RegEx or info~\$RegEx) ] ] > 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"The ssh public key (MD5:\" . \$FingerPrint\
+    MD5 . \\\r\
+    \n      \") is already available for user '\" . \$User . \"'.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$MkDir \"tmpfs/ssh-keys-import\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Creating directory 'tmpfs/ssh-keys-import'\
+    \_failed!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileName (\"tmpfs/ssh-keys-import/key-\" . [ \$GetRandom20CharA\
+    lNum 6 ] . \".pub\");\r\
+    \n  /file/add name=\$FileName contents=(\$Key . \", md5=\" . \$FingerPrint\
+    MD5);\r\
+    \n  \$WaitForFile \$FileName;\r\
+    \n  :onerror Err {\r\
+    \n    /user/ssh-keys/import public-key-file=\$FileName user=\$User;\r\
+    \n    \$LogPrint info \$0 (\"Imported ssh public key (\" . \$KeyVal->2 . \
+    \", \" . \$KeyVal->0 . \", \" . \\\r\
+    \n      \"MD5:\" . \$FingerPrintMD5 . \") for user '\" . \$User . \"'.\");\
+    \r\
+    \n    \$RmDir \"tmpfs/ssh-keys-import\";\r\
+    \n  } do={\r\
+    \n    \$LogPrint warning \$0 (\"Failed importing key: \" . \$Err);\r\
+    \n    \$RmDir \"tmpfs/ssh-keys-import\";\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# import keys from a file\r\
+    \n:set SSHKeysImportFile do={ :onerror Err {\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local User     [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global FileExists;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global SSHKeysImport;\r\
+    \n  :if ([ :len \$FileName ] = 0 || [ :len \$User ] = 0) do={\r\
+    \n    \$LogPrint warning \$0 (\"Missing argument(s), please pass file name\
+    \_and user!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$FileExists \$FileName ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"File '\" . \$FileName . \"' does not exist\
+    .\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local Keys [ :tolf [ /file/get \$FileName contents ] ];\r\
+    \n  :foreach KeyVal in=[ :deserialize \$Keys delimiter=\" \" from=dsv opti\
+    ons=dsv.plain ] do={\r\
+    \n    :local Continue false;\r\
+    \n    :if (\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\") do=\
+    {\r\
+    \n      :if ([ \$SSHKeysImport (\$KeyVal->0 . \" \" . \$KeyVal->1 . \" \" \
+    . \$KeyVal->2) \$User ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed importing key for user '\" . \$\
+    User . \"'.\");\r\
+    \n      }\r\
+    \n      :set Continue true;\r\
+    \n    }\r\
+    \n    :if (\$Continue = false && \$KeyVal->0 = \"#\") do={\r\
+    \n      :set User [ \$EitherOr ([ \$ParseKeyValueStore (\$KeyVal->1) ]->\"\
+    user\") \$User ];\r\
+    \n      :set Continue true;\r\
+    \n    }\r\
+    \n    :if (\$Continue = false && [ :len (\$KeyVal->0) ] > 0) do={\r\
+    \n      \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' \
+    is not supported.\");\r\
+    \n    }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\
+    \n"
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\
+    y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \
+    http-codes="" test-script="" type=simple up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    port=443 test-script="" type=simple up-script=""
+add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \
+    down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \
+    up-script=""
+add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \
+    Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\
+    8.8.4.4 http-codes="" test-script="" type=simple up-script=""
+add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \
+    host=9.9.9.9 http-codes="" test-script="" type=simple up-script=""
+add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\
+    -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \
+    test-script="" type=simple up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \
+    up-script=""
+/tool sniffer
+set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32
+/user aaa
+set accounting=no
diff --git a/MikroMaster/history/20260302/20260302232004-Diff-Config.rsc b/MikroMaster/history/20260302/20260302232004-Diff-Config.rsc
new file mode 100644
index 0000000..de79a82
--- /dev/null
+++ b/MikroMaster/history/20260302/20260302232004-Diff-Config.rsc
@@ -0,0 +1,4 @@
+1c1
+< # 2026-03-02 23:20:04 by RouterOS 7.21.2
+---
+> # 2026-03-02 23:00:03 by RouterOS 7.21.2
-- 
2.52.0