From d1b72b437e095588f8bf9ba0873f8500834d3214 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Wed, 15 Jul 2026 07:01:09 +0300 Subject: [PATCH] Backup for MikroGig created successfully at Jul 15 07:01:09. --- .../20260715/20260715070105-Binary.backup | Bin 0 -> 194200 bytes MikroGig/20260715/20260715070105-Config.rsc | 3337 ++++++++++++++ .../20260715/20260715070105-Diff-Config.rsc | 4 + .../20260715/20260715064002-Config.rsc | 3821 +++++++++++++++++ 4 files changed, 7162 insertions(+) create mode 100644 MikroGig/20260715/20260715070105-Binary.backup create mode 100644 MikroGig/20260715/20260715070105-Config.rsc create mode 100644 MikroGig/history/20260715/20260715070105-Diff-Config.rsc create mode 100644 MikroMaster/20260715/20260715064002-Config.rsc diff --git a/MikroGig/20260715/20260715070105-Binary.backup b/MikroGig/20260715/20260715070105-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..dff83eab4b7fa313aef591f9e3b56f562f28f172 GIT binary patch literal 194200 zcmV+aKLEh*sF8D+_5uLLzKVXK_V0MT%jII<-BC9H0002|`~QA$1O)(C!s&K>ODI4+ zS{6+J>)MqH-yMtP?xzjn2-}C!<@}XOa$WGCiJ@|UULxMS(3|5lxuc@C+jhc*29%?` zCv@Fqs8}C1V#De)zaGe;vZHFiip!dgWp(|}FK8RD%Ps2=oRb}mRc8;;XH@YmS>TZ7 zj#K`;L zbFQ6-i<2{YYvviZ&%vuuM^T}`DYN+i)&UaSQ2dY)68v3tL>waqsd7G92dr|pk|?E% z4E5@D*OEeoJlcJY(Aw|p5dvBlND8$+!n!evy%!bcYz5F)jkx5F%rf2K+NxZ^&YzIB zxsCiMI1em(=p_Y_8rh}6>b`$K9;{!J*=l7q%F+uG43*7hBm?wJ@;Qt}addh_*E+~PLhM2odtl=s;mmp6U9AhdmvGXJw){8nB}{a#+it|Xw|s)sf0*rPsoO_SUodK zv_E<0<>y_>2oBL37#sa_+pNFYW8wQpY&#U&=%G>W5{i;np5r^Qx<-ENprx_S4*>hh zM)*qc+eZ7jmPS+oc`UDfTgq%K37j2mzYzuN`t@uam8i@rHCg>4XTX}Hm=xm%oRlU+ z>a6ajKCMXKF-0Cher@G4IeFG%A}iyiRUmh7jyK)p^E{HD2ll$*F)NpAUYcH?LDBsq zphn9*77R*2n5&3S?o4JW>wMrQf|(}-xpoIO+Fc&HfFJKQre1SebU-rSCUG`K10G-V zOaRazlLBVf)^D_Q`bdz;LQrKoxey!M;8&OYX6m60o;h1mL;Sp5BI0aV9h3DBMm#-{ ze^3U3n-Ruyq`+nB4j$Ahb$AU^$U{^2C9l& zs<;|Q>KzkrMh7k9)wD472z$h9_}M*c)VOE$5YPSt^tAWl@bb=oA91I-BOf~YW&!`v zwf!mC%su7Q4U8LkGC=%sgBRMv_1>$Zl2POpI|x}ATqp#F<5eSmAE=5?%9N5o-%*Q` zjNYP)RyBz=Ht--bsB=}Q*i|Z3CPx9J8s2_*`v`RH@83?eT`v5R8kk-ii&SSykJj8vU5>@_IH zJG`&W0qvaG7}il1x(mHq?^APQ|3A zKT4|yTMK4yuJyDA>oIC{4jHUiN6Y`Ap?0Mltogrnl_HfNX`YbfFG)>3z9%YXSg*Qz z6p@!u+4+p6GnkHtalPIkE@Mjci6Kl^{JNK$yO~_W$4Irc%H4!cPzB_F+HS>_xHG%o z|F~Vo`~@{Ksq6OU-8SjUpCX#VzOwWfl);dEWX~& z&CGnt=j-bO59g;HeR(zmO+f#ky_3^%!=(?nKk1{GLZ2w+4frjnNRyqdnuc#pA+E49 zsM1{IA{31hbS@k!3ojW_0#1F34171Tz#n7>k4!Z zYAs6ivF7%|_!s$;^Uh3+mV3a?AhEL|OZD4Tc0^{nV`_jD1~L0FG%^Ff0mdRuU-5nV z7fTWe!37O2$QL{R)M&VlP{&$2&u?hsVC&=%Tcl$7t)s9UJiUnoPJ5y8jjb7(Q-cE# z#SkLLZXCJ8_C_{^7oDyBD@!TT=OmQRs2e!-u=|)3uLjfZ=3w{G&M%Zwi>M&w~5#`GJJG5gOo6IK^!W7{BzYHDDgwQj z8DC{S@9&~Mf&?;QV30q4p^=RyoU?s%4bK91_u%$PCvj z>cTF-HuzVbzo$9RF7#p=EYPz_kwN3QpAmrIN>w;|spx*Mww9m=MG*Y1?kCK!E^v z-_}}>&&U;lL+)LB2o`2asC*DN1Eu2?VTs_CN@nfAJJjD9F{$80UG98adE)U7p=?d> zaidjp@dPD&NoD%~%%*oJJU4!)AR-K>gzYTDoh$yIj-kUHjkX+LL3s)7C`= z)8k~iX6HEEU%xm#8dS_EX{tT)+@#Pjt=W$K!=)-0pfvTG>~v;y7L(}i2M+4_-dEJ& zq$x?F+@Z(Ev?R!0@H7S082Xcrh8uhp@#;a|uuz^=J0`PgK!2{EVf|Ba#wvA*a%(m?8O~{sxRti6Fy!!02bZ17KYK>+0Y~d51Q0SO4hs}zK2Lp zrda*UKBHu`zr*^fqJ%hWmC9 zmGhRxHT|<;g>ah-0q{sE^OHwURuG>Z{#?tuKV^4*G(AeCN=fxWF(W3g&p{KHQWy=J z67E&0a+tAduv};Oq^HMC-%@O|_3z=>hvH}eBRiO0wNR~oya0ViC2p34geEVAOe4CI zP93Nkg*Vt}M_mXyhtMr0jA3LK5~+4*xj9A{~GNF~3J#L?J z{~_qqi>WSy4h8HE>Sjv3;o4bZBg$k==zjV8Q9?9>bJxI37`-9c6IpJ@`p0F!6o0W& zpBx_sruwv=+K`NM6<$%H)ta?}p#s+>ZC~5;#wwh1y;b1ggPkh8M4W))%UycDh>d zVVBkIay*=mAq)?otell6c<#Crr`-W#vSi114VV>%|1xgO-^=UjMYy&MbMFM;ru7@& zM<};9wBXvDGu`ix3Cn`CPO{&xWW{d5o6uNjLG!c*+PA1AjuvOf5SLDC#+z-a)`%kJ35(v_i-9u^MZtmqUkfgE5YKO&ozq0oI% zfy=-;&Po`TYRCF2TlD+b09EC%O!pglP>#=%Z;zM<0Kf*1j2wYYc3hndj176Ef_x$D_rZz?LVms2VA-n{bfN%VBS|~V= zU@eA%o4!sA; zK-`qeIBu?`970aX0f;J659G&s`Cx%-wV;Hd^7BDe#hVBzf_PFv-n-7b)*UUi#$ zwznOKKwv06e+g+^hb_a49b5+sz|e;j1P`P7Q-ng`1Je;*TD@ZRKq!Br6aq4jY=3{x z9v;!jYn86(t$NDv<9zyXWC6)~^Z}!kf--uvu>BJ3T$M}WkMk`juL4u6Em?@SU@Empb&CCMDk zL~H51sI-UI77RAcIZ+_xVmi@V(q@&KqH`2=0uyA;-9-W`8m0heUnS3lW-$z2F433% zuoD{E7Y9(n+c*;~9y4L@zSI0PC(h8DsDcKDhZ)G^)~!hg>86#%q8w0FRjk(rd)-#{ z?6_yl;8xttQgpo4`I2eP80d}^fT3zSVf*C!oYrkz>T4V5z&kfxk|PBY=}%W5fvFGTJ>u{xIvtI4!jRD zRl}@>eu;+&jX9BN2|2&LpVe&MPB-hnBD*)j$0^*{dwTQVu1I0l{sI&6MPCJYL;~mp z(k?;qza(79Y`Ogx_CVNjmV94cMGS)N9m!tJmd89!Y9ldbb)Q~lE4(`@o7_BIP+^06 z4V*a)Oy6S9Ue%P1NuQa5a&*bqCfv>~5Q2tA|J$^qzuMF7iSmbe8HSds`tIHyo=6Kb z8P4xsd+*)q&Ym;A!^FSAd6Ce87Onu{Mz8B>0=H=eK7Ac5;`C(hE?GW+>~gfut@w+v zxCn6N(Y>`8O0mXS;ACPP?9KoGitYO&oXSXuM~@)K(ksdx)o!y%UeTj(2Ue&k5rkpQUQ z%4^B}_P;S$=-70>RzG{D>&2w(qNP`G#mMS~QQK#eYP80~Y-)Ues?i^3%{jaol;{Gv zSv)X_)}I+RIN6=(Vqku0Q|+-W^Uec^bV|g#NQ}4>W~FS-4L{7T8(^M-cn*|?ikTDl z`-rt5fY{0owN=^lezr(iqhy>Qr%_I^xnoRHl15~ZWftA2Qr19HAQUr>gy-zso zL0*bI(zZsVgUJ@UUWxQD4fo}$Q!Md#y1>xRe<1ZK#4`uLk{scS%`!9ELs>SLLzvd*>ChCo%Ih3BCw<4tZ>pKm^RU#LXbR9C%of_`&s zHup(WzDv8h5b@m704uC&yRvd-O0hsQ#y~M)skY`3PZjS-l-pK$d3(3D z3qWF?Q$yG~2IKR|itK4j^c#hr!Fh5O*>+F>CaYp9utzC@l$?M4pCORKjhGLeqsrH) z2j>_qg;ZF{D*-&HaXT5iHi=VGn;os;@x_@pMr{m%7Lr?HY!7)Di!c3#KJcHNdgE-` zA?Iub{(fyofWvxNsc3QEc4CeoXy6S1I!NcLonDtJQ6oOPT(d5y7RVEv`5ecbYQ1+M zG)Sn-_Mg|;ee@qNT4e-G0exS+QOK>kFW*!QA19H=!G^I30;D%B)LjqW(r2a$L`~t} z`0J;_18Hk?s`j?cDS9=!!Tj($*=*(-dqh`RmJS>hN{X*1rB{Y!r$+FOnhB z)e%u>eI+zE_9)?hsp@3YOE`SbExKD|1$ITl;KGQM8#CQqg2O0q7L900yg9cWvW(xD zg=TOX;W%Q1XPvBocqR{4gnqW`=RHM~c@h=$6EO1**3xzbLgDA^&)69Ab?iYt?yz-$ zrmzBlx7Dx@qjgrLhlW4JxOO#IZ&3BREML zXdbU(A>Bq8kxwi8DA>1zsyuel2iDoRu2uVZj7e{Jg86}G4a!4)>ym$aK1P`bdvPAQ zZ-=SoF4awoUfC@&OIMvF8QxK8sDSIpJz6^6GA7!Co=T_B$?%Z07;Vmlx@my{W7mV~ z@n{+#5OuwKd>6VZV4(G@=-$prP}Eyux<@P%KY3O8C7yt#$n^fRW^FhJ{&$t*dR1iJ zTR1d;Z0U|~oJ{cxE`7UK&mw^9PTIflKx{kd!5x>e(O12s00#86D~)HrIZ2#LbXh)V!st36Zrv_ZZL&8t2YDIG6)H|tVz#Qni`4OVe{F5ACVUP}aB6(>X zxYX!FcRLa71rJlal*{|P!sYWkZ?{bZ57uxkefr?N#YXqc4dQ3H<&C|O9D zj50}1H>fwFB!_U>vdQ<4nF!>OT5Dce5K2o_^78qHpgZ8R<8SQv?}zBa(hX}KR_uwj%uWe=U!SgU@J*xK9lI0fGRS8|G8AK3)qI>6NZH`x=M}<0AC7^8ihx3E@Z5 z)A2iVx1eK9adkJ4TvS}~oUussfrpm^=g3r?8Z?418#iELAH3xcVooA1sZK>iOCYa? znnnPc(h0CPHdXPfK^Ws^pXwb&6t3Kg)Cr^jFSi==%AttC=@BsD8SeO@DNki|_NSwk z1R@aFQ!m=fAgDqD71bVV6)M#ODb8GCqF?Pk(t+SV+shN4`==t`${;MkUv#^#bbOER zC8*rzL4OZpVgaHvnp|EYx$G_J(*^tL6qBK}-s-WnnzD9Jyb?s4)4g+NzyWwZR>1Sw z#e4~|DO47!@!%xi!j#-W)8jZhVB^wAG7pRkC<-HGRB1Rpb&KwB6totm8|OB2PF$1# zdPiNw)^(}s6v4AKg!;DP9|u;4cV#Pv4ar`k6rh}4jgM=Dz_qd(*z$M^IXw+EL*s|)rH32yv>n?kvoRX|cAST`XmAMza z^fbXlr(l*G?-$6mozqr+Yn+R|0Jg*h-`ao0yfi5(TY@5ikO&hDAvF6f+-cq7%M?Kf5k`cn-t+hM#~h&8Kyo zWrwXHzXtjXHvluPLPpbad{#LgSD8;2m5;Aw_phH-g_}zf?xV2y#O-i#yPL_3UXWu^!d8|+j zVk2=v`J?XK*{wM?+u+01NgRj=>;%~eR7YNdVs#lAO<^Gl)W2H`Tsm3f!{z`D{>Qth z*rC`vIac~MX+3&3Pr@fuD%Yt?!2F(%?05fOY5H_S-5OcARS!_c1g8pJQe~EoiY+|U zQL~o#hjgrgl$Ne!&fflYO%VS*NHKzF*M0376HhABt32&bpV)(z3AT$^$g~P)mxCH- zi}1O+24;i$CE8UPcjq|`SrfV!nFCeX#Obn`nEhuG6PtoWK(lu6(EaVqRFPQSbIYpt zZ0s`JX=V{Bb%hvaZ0lOJscBUg+m5|mm~>y*YhRVWk@`zN2_e|Zu)}hQfwMw|b;Pzb zQXv~h(i@6MJ=}D*5QYs9&cR76@@sMV8XDbrsGm3)u(Vu>03SMPr)zcYnYEMi>v#Y4 z<$Ce^D_}Nt$L~yz7m*1UA4&*lGB<(;ks-Zw!IMi~_(!jFI{E-d)WwNqua;qoO2i6+ zmXB-kDC@gy)^c`+cT; zmdD5N7$AV7PDJQO<2&sh*DnR*^*!-l+FsBdkP!jsgRcV-5ZY2m(JtF3tUbHl{Nx%O zfrMp{X0BYHV)g#O@H=u-1(#NippUhM^o;B;0|6XO>eQuvFM)YY6|0mmzQGvfShd9G zXR=eG{K&`QX%xJRt4zt!zMBLPO~4R15~G0ydFJ9pG)tyxmyGUBCp-rL8Pe8>XUanS zN=($)IM_9?6O{kQ2(c8qQrgf9qtj`dPJB48DX{FpwaLzbVU_W&9>^I-0VQ2=@81i& znDLU-N8021n~8zQ%{RdpTtb({NCw_DI`e{RpWYreDX1yKn5*HBn9Ip3u`{RF79A4b z-~a38NF!a-L~$cCSLDSj$@&1*wfKAItI*`DQ9>LJWk?Q zqzsqHsrL9Chm&TC2rndIc{HUF&8FxYHiQC{(uAh~n{rlL%Wv;tGF-H>r@$@!D5I|X zzB%f5U!rMZT_D_nB$z^sv^5{SGA=zFod|1lTU5^UturHI2Pz*8;hB2x7*4zt5Efn4 z!aG^NmcUJ+i{NGzu^qq57}k*Yyfai%@lQSZ0x5Kdt}fr#Go+=UaBGpON1$CBZr+yl zDjrnhg@Z!`sclC>i(nLY=+BeY(0lk0#oqdYK+6EXqj5TL!KDOCqfv((s=lgSd3_6l;5ufm0}O%q!w=6Ye*63UHGz;btF&3oA-1KC%{JDS z!^6y->PtPRO15x;PmXoyIY1bRL7eg#w zl$2EKHGizM{|`%-$*8QOVzJZFg$^mrQE{^l-zB9i6cVx)iGpSZgTJ_~tER-LpYX&n zN{3IJ5jK^fr7vAXD8g*CN4G+APlgP14N0b}w~zJc)B2%PJhA5E30fR3q4b!aaXO)1 zKXE*crk^}0OtJReQmi~5eN!kf*G5IPC*atKMwo>cKv}^Adeg-sxKuth3afIvEws2B z)7(Ayq1Ja?{-bB?p=Z*7Ay9twgiV+XZ>hdXX^-7Q^J01RxO$hMS`5e#fhJ@LL`Q-j zXtguNLJR9B)9f0#_5CP&M;$6%jk|X&e$g(|UE<;I$f+;qISF@1j7L%7KTuzqVFH5E zJ&>y=nFdM(m}MU2u$I*tIi3N9Wk~~GkX<*hXfc7Zp2CDIRvdJmJ6YmvTjJLG#>@3) ze*q-s?c#f0P2oJW>2ebr!w9DY1h_e-&5HjBE}q|GKu8=Y{j!;>8%2u1D3$z`FWpvG z>+@K*NOGE>#NJ?Q#x>q%ykRv~GL?n?$vvKTO1@#h`jSVU|5{V8!tn-Y-N9W7kxiCd$ld#yOMF_U^(Ie_~5$B2NA zr$6#CLvbJ5T2;ikYKI)Ud^it=(FH^t#=8-$|Ndku4V&W@kEL10p?FAOV>Y611>q|n z4!^Hm&`g5n6Jc~LJzP2jvtOq2w(Tz(B`G(5Wh3%!>;zv{Mt`|q$9Gfu^NC;N zPjt%|5m7Q!-pZ{)UlLu{BNp!7tOp;yt7f+)>%O3u7pD(`wun^(LZ6PDuB__}gC!c- z;;h^qaaPyriq<=bVI91}9xuuL;+25=s2&q#XI78n17!U0e*iFoU+^*(C z-weUvvWTLciEXS<=Y25SeDIrdSLUBoX(=QZgNs|z^u)Hk6=*E4@QBTQF8=x!DSbm z@+EbeHvIx7B^T;xj@1$iH=%ifmR6)xXCzPDvX>0`RydC#} z`2KOlLY`QVYeG5=Yc&~%XEtV^J*T9gYO75}n>0A6OMe)4gyHlR?IvL?E5I~-E|ba* zAn&NeIe6$sw9HThk;Za8y})wE5ncX>AxTjChuZVz?j)L;R-UXVoYj0mVY{`4k6D_eAfTob{|g^ zkZ(6R__PR(lIZRP zx;2T<-#~zu2o6S~;5bwM?|gA<0a!^b22%1O;eaF|jl3uD+e)9biyyH5mjNh_b;%|C z7usyXUfgM9r0x`-C*x|fpfh>2Pj7%?0_o^Us1sYeWdp^0h zD0Gt3N9pI}vv3jTYb5|ZATJP&RUT6`O3m={TIv=ARAdX>ea-&98CO4SQj&<(W<{zL zgd*sVgz|u;$mfOE`BnmJ zTL9?Lz&AMx!0p63)pn-EK^9c5dhTuj!7|ET$*tc6G5%qju0B8?!ImDYo?Tka5;D6XYSa} z%`TOM22U()CzrW~hyV4(>Lo$PA>M&n}HaKsL!rxNT73s{YHMd$wz?lAy<& znVd>ADg&%!Qe9#P{N>oJRTxek2|q1ss-`Hwzo1i>7dxmf8b|l@yTwrca2a23R3_N9g(cGgb|HkVFA-#NV= z;}t@CcJ#Y|ECw(HyrI_x%bk z9+Ba_T%Vl@MO%e)3(Yi0Bxk6L@rN05c;w@ps%Q__FvlJS$V5 zKzmZT0$bB<-wTT$Fo)GjJ_V+AH2okSLa2=BewMHgBoIwPDlDA2vU~aGn`+P7aF~tL22Z@iwj^*w9<~5rgqU$k^ zs(~`6ax;An+OktU&Xiz>L!?%E?dfH;lt-Xj7k@0 z{3iT==P6W|G9fYyX@~Jlnmbr74srtTG#mbb*ZQ;989cQfmKDZ4rf1eKG9)6@vEc%X zX2|0DfB94q9!e7XPTSG5&Or*(slrqmVqtAj1^k$nnJhSsY%FRs9ZFp&>$dV~B&~N1 zRO!I>PX8L{OOh|WZ?>(*&+&@<^JWLK#|I(;P_mY}ICBW-5*Nl&ua2?LdcQ4FL9&%P zlD{V+0nW6*REc;?dRSUw=;|?jEEZbA$*0lZT=hI9EmIb`k;9zHmGbBJ{~e7Wp$0b8 zw#*Zf-KJTkNBtk>Bcc2%FJ%mq@53IRD2FuA@d^Gsm)pcDHJtr%S0_)CT)FIY9Rjw* zEhIye_O)`wBUo;H-o^ld!r{k?hg{N~SN$Zcn3u)LA!DBqFYiL?63Yh~suSMn!gIf4 ze=qSE|AT6vM)UVyw97{;awr;tL+UG7&y6fijQcXpW0QH_g50r?K5EZ$@zV3zN>m4O zNAZ&BP*OBeUL4;kEHGTJnPdwK+!Fqa4xuUy^}x(Ky_HO2byVX>UZ=6rVFxd3Xtapx z5eZ7yIwb&5SkdToiq_`;l(&JUigT|=7Cd;5um!{3l3_qtB&+o7{k6aagnz`cJkE<+ zmbtuosy@|x&HpZ3Oevy9F(BWLRo1-SfH}o^p#{Oy0&ZtqJMbwN7{PfbTwbqR2s7J= z8V_`|JW~Q;{?t}fOoa%*Z%YLHU80DS1&9uTtI|)zb-OaO^Y({}f8G|)$q0cS!BEc7 z-F*=IBtm!_sCQiTLzt~SbF}jU|0J2kDtYje+xnx`SiNZbJSG9zaE{Te%Sg&kQ5tMY z5vRjo$)XTd0Rz4p{Uj7PvIAxh z!$a&>5jYeqUm-S_Q}oQKB5c@BvKx|r;7Y=*$t8)(yxvrOq13fJC=nY#Y^Sy{!yxdY z_FX6)@7ZpFTgp)Xe5#t~YDx`rM4D3M8gIYxuRaW2vdC^!=bsiW$yjRW{jO{kZlye< z4CP{XK|1BCuKCg^jCz`N395c1U}BGVt_x3Z&XIRk$uJN6}|0c%>Y!?;BW5d zsCb~VJV(N&dk$R^YyaG*?@tURB9dq0R}>NpybJ>fbn6Lpr^Vkxa|+w#Xogqrb1*lD z_O4_A_*qcC6b-qg(@5URXW{)o;I*?^9`=!nTD37Kad)=I)E(CHqT|MuRuYr>r*>_? zF*G8zsK?YUE*)1|aFZpfI4ROKr7=7nW!~#k`Zv0_Baqg$Y15C z2{yDR7y`RP4?O(S8t}HKf-YW-ChATp3CEWA`vU~$*@{jz6t4|?VDTuiL79tb#Tx0&3+iwNi%s=(!tNpz1Tso>Xm9 zpg3Ft?;uW|1WFhQW-;r9geog9SRjhIVs|FIpf{;ephZs?N}WQ?8sduvB;|`#Zm4rT z4|*)hx&EL7FrWx%ud(}27oIN~LmEa0&1K^ff z831*QY9gH2{lpBQ1x}ect zv>=rO+to6CpQ{9yLjs+>$-=pL;J;xi^wMWMc)sqi~?-P1D%304BFX-(Kl_Q2fVJl{hr~Mnqg`bjMyelk}-2L&9<;&X$ms z^M($}y(scd6-`+LKDf?PY!B_!`9gLg9ynV8xu}uw!DZ=Ao*cQt#29h5A){4n_GLEn zjQBhcYCZ9Ky2^KD`gfh`jIb=&Fl=NibOKuErZRixLiuIlMSr}g^>UHO4JRV@YN}xFSi=}bmfct?1$pRLzN&mv*ds!pS}DgB$h>_+xP1L?XXFxo zArI;0?vq-}s)y@Sg#{d>7ya)}gPpONQ)Z?g67DM6W5@*B(^BU z0c0rvf%lN(K@^H`D46?fUQ0AgB(?GR8agrn(wjg`9=LDauc1V z8nDxFB?+uCr4#hy0iK+j-CFVsIUU>KD{djnr>1;bEI4&i+lftX$te7wf=b6FXeIv# zMx$?GO0;k*E$qR26G7j63^+a@96q?o#-LpgadHy+4M@33`(0fJEPXj^3R?!W{OGl# z=LQxivg7bg8&qAg2TF+A>Gs@zI?%i*T+)NVY5Cv%2B?Ey6F@<72Ng)(i$RE*V@E)) z7vi}bvNcTv?5IEU^#~IOsOvc>Oz=v7Sg=ueLpE>5wUAMS(>ZZhkR6dro;|Ljc|g`P zG#N>!6r|K`uko|@Wll1;FJy{O_nVuYgKk!&eznc!c3Xt1oPGAGEfu8X^;Ll=39LT% zD&7B`AGU}tP?f1D&OPxVUxDI)2!eN!c1;s-m({gud0mxd8we`GE8@;Q$QR}Uz+k1S zMTx$oAY`K)4EOZ=cLkeXTGqSge zJL~8xcxjC^wZ+F(yb^2LJr7leUiTk0Hor3xwa!az(ieZoo;;4WMb>L%P$UO1aQShkh zlDGn$P{opL4{S4(PABpTJQB*?$8$P9XN+r%+p4>`Kp@n02qRK@O$?YZm$jViczXsJ zH=t$%`s})RFe6VvP$=^o86UXN(^LJ=grDs^5i6I1%qoKRVO>SVOfL>W;{j(@-%lBB z#~+8iolj)KbZZiZqWEz*eOvLL%Qy8uRP-z8VV5edF^W(HVg8XPwbMN(8u7QV-KpCP z!hxDhP-p0%{8Vcmjo*i+eRsIKXoT=w3x3PYPOQ3F=c5t0&XO>qBYVslJRoV%sz4qa z<7S%k9b(bg+s)LR>f1d8!9vdI9#g>+q~}bQ3bdV-08| zHfDs;eZ4N=D4l|FfqR?;$LFIofnX>E^g*}huU(nveGw;=INjlhrjL^x3TyQjfoO-2 z_Vt{z5XgFgje>BGo5C==NFBGtejY0T`>AbPDMr98(9CS(*fKEb%pcV&c2L2o6aKjMJrT^Sr?# zcobEy3zEfQ1LSSH&Vnk4u{&i^ULf1@ z9N#G3)LYoZuSNZML>VVwws)0m(GC>ol}Vt|QE#1S7Jf3%IBUrb7`j>>u-%|GT8y1AyflS#^8TB)j&rJun`Tsts*y=(=m5f|6|bg$!cHMXuYMd?{aQ| zNlo^F^m_?P{8Z$$*Ng_@w;|m5vy@N!1X12Mo+7oPCni7-=z119X3Ew?(sSvoaF!3b zb2(U7u0h7Ka%|~9?|Ux*_>xcggX0+dPH38y-09C z$B3cw`2JbvTD$`E%55&~X6RLqv+Xs!kfs{*BFOy;o`3T1q7_H^%zR+NK60D7=4|Mg zIz;H|8^OwvjOcVeP6ny@SesXR@XC_Vs^Zwo1JItQD?Ygqvjm1CNEN+h9jer2(q1PP zr^;d(J6=kVLf+AHXs)=YxYRZ~mlK46-NtO1|MmxURVt`Rd8zML3sSyicrlk_S;Zp* z2Co2)K%o;7lMaBQH74dV*LlJ&m>sP~ZG-0;_)SFb3;KN`l0G6ss;zaH@I9e*jA!k4 zO!S95WqkHH-_C63Ze2D*Fw&(MQuVs<*(<(FuVi6Ayo?4)Tv^%M*pnNbkKX~IDofb> z4pNYR$Opokp-AYMHm|zzq&{4!s?am1a;}Yn20-w$M^|bI>WV0da1LJTZQKcFm zE%s{Gjklkl$t7dr=2^AM1Hqk8BZpA-^{P-kC{oj|$uJl(NuUa4i#Sg6B{K zEoGWw!jxFM+Gf(-pvyW-#s+G7LyRB5YK;u>iFRE)F39sPZ_c&t%E2}6_GDeY#lp7c zE4V`sGUGJ`BGPJ{73@M#?K7;E&-K`>L-jzdy6fSIp}zJ7`|KuQ{UKQ58g)?yy*Ue2 z1G2*gXi-49mRt}`4%fBKBm07rJa7d^030bXg+KX|53wy65MkHrRe+}MSUVkH^K4W1m}tWjXwbh2%MSv8imJLdi0`% zci(J;g8YVWLPMAiXWTvWr8kJR;3YbVW=KijxNy19Eoba}ye0|{*xBCTZnArc!a%|N zdo)(xM7sObPbTvIOqs3Tj3l*}pr#bvEa-tw6xeG<9LH>3kA=_GWj9KusX(Az-9#5x z%LHU9GFDL^FQ76=YHrg2H3QQP-n~Yhdm13~B1g05P7?ugo@V+M^0eLg>9>UcLjx!_ zYA%kYy!*Ep*Y>&5{Kz*JNSJP5zmZ_Ivh^1lMs?c#mthuKa$HCbA*uTV zH#vh)JsylZV=>3B%Vc+#mTI%0o9NGe)PH(RL8xV%G%_=xF9vLu!5AT^CM$=gz&F|% zeDP`fvhnRWIH{yqL|WH>Qqq2uA@GrMOfha`ruEpLg*yry|bgQ#r-jK?3xECjwt10E^1S z6<#9u>9@(+=~q)hDPG#uSJx+|A38TR_7@$UU`wtj6qXnBE3V0r=2!F_-iQ1!1Cb)w zL7d88huRl7;`S~2dcjyy1icq_tE}wOhEE)o)Jzp8uUr?q-`T;QHwi0i^VH05!thBR z<|BJebq5lhb3k)fegG4SKR=-}RtyX`)zYGQ)Dai;0#a2XhP~@ODPkzzdA9Nd`RTyO zhJHNijGjMj>KkU~M0Ta=P#7vTvR#5D6>eP8%w+E>sk9jOfTXKpX~ zA)XaKae`ld@%%qrOk*QX;K++)OeKjmwE8}7Z0R_A2o>4ogu2}dV`+6T9>q}%3Up!q z8X`w{xLuhUSKFy8Yn^);lLaEv;r2$Dy2MZuj^X$4*KKVTxen<8px*e)TY>V63*N}z zC(4$34a7{YvkDz0hWgsbWg5-z#fLCPHd4ZPg5K;`DH3e$p{F8|2l&V(I=&=!(^JWZ zYIACR+lAD8@z}^#_V7-S6ZrTFEXT&rWH<-00;Iaf_7Hg`sqGx9T56|AK#32oZK(a{Fsh<7GlN-zTw7=X`F*Rx5@ufDTMV3|< z2wR;bV%^2*;vB&SL+ZV=GNvnIBTr-53^tL1mvB{0(B=vTjy!XWh;PXY?H?UDJ5klS zk#!uNMaOemy_^}Azx^xIiMcfzWzP+}W3NegJpTyi5lst`4KUy=Agdo6cVLG>SSRvS zPV(!;VUMqSl)R51iBJfbrXgU>m5|vo#Jv zSagsbEcZstbvARF+yVhXqa!#GT1nmJPiU!>9gT3Ty8Q}a63*Nouje|Nvt=Vmds|di z-1%|tY3rgn0M?K{Tm`^r&Do7w2t`B1#EQ8qkiO=tl?U0c5uZF?*&Skk`k|_QVv3p_NCPZC;kV#7(j# zaLI}zB&A>#aOzOq+?^&T&UY3$S-G5~9m8 z=D1sR%hI|x#QZd(UJY&1AcT`5*j1-9w5JqyB3esz$Njf(bwm69x_IOi(fqO~A>zTB2v{VmnwPb;%5~wrSHL z?P~4Ze-BPbpSiC_DSBIju0RXTu#qJ^<#T3FWEyp3wsK}Q;w?_LEf zS^U{#5-vOSf&pIxh)a8d%#wdAP?jri-}3ul4yp{Y(3$`TyYw#^{*Yn{iAlk^PyNeT zg82KZ(#E-mhpZ9O5M*q$r0m4wQCy?njx!I+I*2L+({6#qBwS<1_DZU&vq3(a>;5tq zJ#`aocgalz5$Tg}17*r}mu#6DoLBpO8uQ(~jBlTUHpamI`#Hlg6Gy!Kyq8vBWd`cG z(%KJh&Fbjk(@a{I3xqE-1n&b;$d+<_h2FALcJWxuQn%A? z!{0|-RVk|WL4$m-w|yHYo8XBYVd`i}JP)JwUvVKhrU?mL2w@5AMy1Elm^a&=)eSzi zVjtkSO%Gqk@)(sIbso`#|0!_QwsUP2sM}#1E79b%{UR!6mlKUKMux%;?3Rq76QE^4 z4Htr&G?swg2oVLorAX?9q%T;h_qrL8A;^fD-e}PWReC?!u|qS61uD=>9w3yE2b~3M z(`aMd4Y4ND2Dw9Pa$U0_gxFPFcBdTU z-8CSmNd9`CX;TwbhZP0JD=+sloe}N?ixzPfEk+PD^+!}CY2=hqsovdD51fK1?_(co zCe~<_b(O2NFiA^&s|c$})jB!LozhA;H0=g6K*?#Rz?pS|gMjRYxv0K;nu57|uy3PD zUF%$ipa@<{2?Rm{*{3af9$Nr{g>hn*xF%8X8k<<_1Z!tv1bn4g#PPeGq@*M44}=fM z>9tW3NXZ+zo{eaYp`Ch-)%eE+qiCjD|KWv!`G(bK0To>`95{0VU3j+Aqu0w}py(>` z8~X{Q?&aORHMiTT>Nk3j`-w#?6jF{ssNi`RMAlAM{<8Fb#oM+tR=scwNZTn9Yp1=z zbVv?=LODaB{jX$kXi4uY$5-{v28FbAhM=lta{5s-tu5{v6rcn>f!w39^z|Z83Yv5| zm6{shQ1O`r-81-@$QHykH8zcz?1B#5!9TP|`1RKqO(Gf4CF^*>964IBv_#|n@}-b; zs_(DSNJmly8Er~be=`zjdLo3ciYwXA0h$aw5hJKr6400yavJV&f+3&{wRJ`RlD849 z|G3;{s>Z_E7|a^s#~yJOQ#;*ljr_8=#~1En#--d%R?};rqU5-8JMgRb3t)VT_FDRI zA`A;JYFxIPLAoys%R1Y+onE!zlF zZki+NTVY9P)4~z%8$1^TO>VeXc5LPglrljh2#CQ?=IR+1@kvnV4gXI8-2F4(7!)uk z*4~C3^Er1xv^ZdoW8j_+n?QwJNUDrNIBZ)S-9)F6Yhg@NA+-ydaY5z86xEX@SoAU1 z!>0!xwcaIn`MvcXQjW^%M%X9ju|36|zXmP3?<1Pz$d0dE9y^$5V?oYX`E&wtv|WXg zt&n5jYt*bB5N$IV>!UGxDXhAePJ~W>xiMBaOiF;osgzaJl5~RgMw^wyenksU(Tf;4 zrl@a=@A~JE#TDhpF>dwg@ZK*Qd;XW9kwlxuFTc*@IiG;QO|SuEXQU|S{Z{xQgs5w2 zO5N0>y;mzp5SoccLx_9;yF-jkgRxE=o?I2hPP8m8S^G?8_dS_u7_&y--wb26R8<$i@nmu_fMKLJa+oG&$8A2In{=B>y zUio$Ht4q^TEv0=g)iqU1tg%+drowsT!iKzov3BLwv0`T{q+b+^*C{1an4Af}%4s9N zBJQ_pw1@l+Qy-N{{H2qD8F7p66+xFZn7G zFP%O>tU2NTcPrX_pZUdT%(YWnHtLK;X#Y2Hkv{9w~XtQ$q ziuW5l+Z5Cvl>{tuz#-Nh`QWA;OaW6A8~F`oLt@NzmXzr&B`I2dV^S=g?exn03=VFY zfhzqkEbYWpx=B{I1y|W@^Z{?g2kYUr1tH`-s|gYiJfuxnEakXg40@mw7jzci?0Q5 z&ikN9>`yWYqkX3Ao-(Y@rjQSJXC#d9G=ljsB-Zt1uG&96XJ&ta)agIHwk8}(DI$4t z$6{ld$w){0L`Ximw3wHu-Yg$m&7*D+gH9gJqmx3hgT2xF(j<@7TL|oX7t5uOiF;_r zOy}i|XCqL={gmvUk^_QHAvKA0cn7QHnUv62*h%Yc6e6(~p`$-=r+k}?j_!Jw|$ zuS!WSk9!`CfdEKUF^Kpdj&Xd(Ym;cH#i7$(#E^-c1J*hP{lJ1VG+I>qMH5p8&4N>H zD3`)y7+-N?`GooGf%F9Y^%|?(QrUDMdYseJ66#hxFN`7Kz(@?!oeR7>rmM9_#>`_1 zZ`4HSc-Wgy%z1#&!+`Y24+)p_uaCvH9I3eSc(TN=W3tCGF4;WB!**+~bIG2qr&OAp z7pY}035hpG(&p4L#9~p6RD-Gam!+vqG&hFLN!y36U=-+8ziJ2DTv0y4yG-07@+otP z)PG6|sji}t5({knsZfM%hZ(7p_>XT0X9Q%qoiWAg6-JY=po?*kV7lSD+d5mBWfI^S z`?j-9Iem)lA%`bg?N~(K_i}j&FLYx~r}0TbX&aIu95+7n1Qj_Scl4vdT&^@TN`Sk(gu`%!2kL8NOzQJ(AC0x)Q)em{oy7#`{<>x}F(T zs4vqFJfFjmGn{g1&GpncrA0tO<6R&MtTw;;L}+K{U05{gCSmCjKXe(7AhA)TO-dkQ zdS70?yYK4M4T_f}^ci#Rrv@LKIazej1D__iN}M;)zi@JbVC5Gru7uDaecEzcIEN&G>Hzf*55evEV874XdI3){rOYz zm#zQJ08pnC)>31|-RQtrTUim+m(MSaL2K>sRCWhfH4xi=9&ywXkTNKCnbE|3YJuJSKNPeuN_kT;EtqY*b7IGwJU`|fm_1Z<2()L zrME6Q0|-7ktFx^_1VdTszTk;}1M&5x&}c{m$l)0^HL)w*Lw0OF*y%k6SrFJwX=<>A zC+64>!y%?u3tG*iD(0bP&=rV#0q;#R-HRJU3q!Kf8U;?-wE@SrEOc?qSR(`yP`(Wa zg-vP}*YD1$5(d|pzkvr9jmz7XU5;%UVenCAhZcIm3hbdL4{Pp@EIdskku-J z_9T`Gnm7~$^$NL!X;+2K+v0@rAAdyhgQkxCfR~OS3W&w1aH!KIY%xt{SED@3SLoLm-6^SCpz|j$fYEFGf6CC&BKKgcC;GUd zAX295XUstftnPNLY5{FJ`s%!WxxbS!ZsETZ%HuBTlOK=g>s3&Ht$0Wcx9Mue^?3c5 zFDJSp>Wy^Mx=&@^M@=eTwIb>~(~E-sKNrM^gV=*4HUPaH%!@y`ZE-S?V3_PmGZ}`G z4))yzb;ld1XB3MM!zNAH?UT{)(htiUu*p2TebOkZ9(oTO&oH;3q1Lr@q)jxD1 zkPs1xB!F<-(rTsSs>MrJX_?f}0+^yYcfpc^;hwoem1Ix@NmRoRhDg=+aEJ#e9@6oD zvwv)Z-$UFfY&O^@PPjGr*(Ez3{%$a0O>zw2h>(L=QB2l}V{kD%D%#i`0kYqjbx5l* z+MF;)gU&tg!O!ep#mFi)d>MM?Jo<)DTgHsIU%Cj<<5|0_=wAxP@TjBd1Xz)4=Y7K= zwtArhpxnxw4QZLHYEEgJPd*9r!5IUl1{-A5@$i6?zr<-OOca}F_?p=EaAXdcw|F+y zKd#y>eo>@o?-*cQ=9sKw(ID+x3u%3>sxce`)JM;TQm`p)fxCAFn(HV{DVG99hV@L% zLA7hG>=m0bh_pw(Onu+FK$pWlHUpJcnqav*vyFme!5PXf72@48^Oig*dR=Wk7a1K! zXGH+BiYffB;sP8#3f-vZ8tuR*6vY8@hNkFLjdnUo?Iz!Rr&F)4#xF^K@^(ikC2Cph z4gldaef#PO{|`k*EfHF>s6t!zrCGZ=@V}=mx{HB+Ej*sDd|wGT*tA_Ne+od;WZDbA z04}l5ipHFY^N@&Pz${KccY`H`mdoB|zOr1m2-=nDU|kPzJP}1o(o&QYoGsN$J(>nB8xWr>a!m*`3UWVkaN}6yftFOXvI}I%v`RfFl{%Ow`i$5di`$dt z9syCsFJeu<>XC`YUuim8n6=_~lmo_;IE$Ob2dyLA_x({`LJA{+DRs$O>+OobNt#)wvD^CuDvHh7oZDO7SFj;NmP*ftNR;2(I)@&^oz5 zJiRR88UlT>fHL|(RK|@fAV%!WwBHQ0sQh|w()9RZN*E;M^H2`q8;oYp##g(QF7qnm za9ycWXPx^gblC-_z5lpnd>EZK<3$sAojRVrzl&=AyTs{CPRNh%6cH9JIuC%}yuak0 z^748`K2=Omk#QFPZgnFPRxeq~r?@s3j&u#^AKpb0bIDn2>HS?;_t=vzb~86^R$aPy z!$FAOWfR1-J#smRsp>SUmYgvqxYW4~GoT0hv;1_{e09NgJG2kgt;wt}vYU+_*QZ7Fw3)gszwna(Tt! z{`Roe9)s9MSokYgu4C6X81c*?w!;=DQ7+_;G_R()ARn1;4DtIE@hI$RVAa^8Bhrqy ztL+eiBSPYM&JrLxIgE zE5oP1lpPlN4 z+oUwEc2>Z!obd@0{*^{ck$CbgW~Lov%3%G{GE@s*5j1Do`!_qf_t;+hRhJh?F>K?v zmRHJFyuoGDno3=BdK?Uh(PfY2CQlVCAQu3qTz5Pl~q)cs>(8e2+;+4k%lw zm`#M~8obiGGBh|AVQXUYhA8^7VssknzZZz`$?94y5v)(ygdF|Vjd8U}jx0`38A)+I ztTzcLxq6e}C$m9Dp(0hRk7HfxOPRg};of-F4ct;u3M>H%Y8vti(}Pv0RwMLB-mm;5Pqr<4o3l;HT*cOvH#W)Xa6-rNRk!%V1p#L|$7MP5_W?E0uO_t(7cTa69f-p(uFwrW>D%ioQvpB}ZU zYxqCoC44&HGm894_ocU=9{l;t^=e+g)Z!t;dHn3X+PA6hG{AS4t!fV z=H0!-Oy4)5 z-AQ2UI{^Y__MyG0Z9(mBSx@uK>}*oxVd`@OgR=~X8tA09pcX7lP^7jZ$B+X?`fN%Z zb=(h;aXYibeQ=H!)!!d@19hNPo*U9B)?V=n%72=z)jX-C_uSYtn|!^Dgy$)2tY?54 zbZCe0z<{pIJH(zQPtIhic44M3*Hz?>LOa3h7=8KN`I`27vbSqf6Zk*1OYV=}e(=J! zCKm-sf#3)B>kSWImGcjKBe41hiOJF>tbPP2KuJO?a3K=AOdJ-V0>|f}bCq~yH?gOk z_*e+g!-@8OceArb!XZNPOQTAi;LuRCV=bO|>zm$g)o|4)zF3tJ2Mjt)lkB5L>N@KM z?U%?KSwwSles+e+x#lX9Yi_X*VG)=GCu)w&_N zg`mCnC@3{>L&Ze)S#L0l^a@QJ~nbx8&DlJJ}FZz&7XshQaW=tDXF96Cf?l}8jFSeCyLe!Ty1n_O9^CJ z|AHUM(@FkIH?LNVku|%0yl+muU%>YjpLzT9a|hj?VzWmHL{Nf^xmlV&qRmrazz;5L<5uy~Gpx zlnLm9uKBY|e@%UD&??6=tZuE#j99|=sM`~Er83)(g6zhOvxc3AGg`W@efXVc`=>Ld7-A?^rJU#sS0 zTn{A|tyODe?k?y@#6e(h&!Vft+ zR9n^d_l4UI@B9D;1z~NiQBGk+{Ysa9`-{ zi2!nw1vA#udJZ_k{!P7o&I&2S;8b3`{eJz%0C9m1E(^`s&as5$GQr4f?>NJG zz3;x2>HWXa&JEqhlFcZ{KQT#FU4rx@mh6*Vz9GBIhsC`T?IYeb_FibAJXlJ z<%w}d3C)y}n>IS-NLX$Cl3X>aTI==r0=S{Zuk&?r4@?uJjiB-XZ$@b8+f>(Ra>3x@ zt1tJAvD)ku1`h8Z&bue@sKU7me@LM0=#*8|hlw0v*3Oj9 zjhNKi6UWUL-}Oq>=$-%@tAXsY8Wub%I(jFERUb5D52j&ml>N-F}vN-y=Iq)L!8xo!)UR*@7UVng zXd&FBb72+?Rc?Ert*vj^6FkpBN);dk&u>=$dSm4d&x3joFvT$%);`QMhH`A_B-Rer z_u>kh5%N)_)Cz_|hmtrh4j~HHF5P-~#}sOTx&EQ#c&0#o-j#6V0rAlx{E{o_&WX{f zMC7M4aLfGC%=dTpVeu^6m<=Llr6sXQyOF#Pz>Y-Z!Lx9EE@R}z#g47!(Ch9eLoDWcBfmi_bR z5yIF)GbtP%IyBB@hUkh>I>n-G8L7mrPASOzL%#zM3sl1%|KX*z!^tMN0QRTGW%T`a z!#bK`gvP|%TsrGdIiX|Z68T6=tb{%(2n9c;dAI(=8^^yiA26J2a8`4RHyBBw(cE*z z0Vt;kkBN*H*G_w=Sd7EJLLb2e7D&53;l#PuLdY^qQto`?%4|$+DBjxo+T}CU*$ftm zWIq8uVWq7kAgTiB+T&vE8HhG5=pg9X*4xIRp@fiWqSXxt0|FC$>>LsbcKG3ZgWPsy zoB>^Un(uhUCnwGlj-2E4MJ3+HY1H-nLL)5J;CuL-p@mZ~lgd}oW=S=dl3~P$G1n@C zX_qSCW$9K`!AtOYvuW1OW#xsRjz(9*LEzA{p>9+thN(nGzDt#^;r3`UMJDyyN9YV& z4lWHdGExz))4g^W8-qRlPcKq2>#o@Ab3YZzK2gl#nb|&W;g7%{03gp0*y%8(pZp~|G!UXQf=i(&~v<$u&j@R3f)XBK~OkRo}T~xZV`*`mMN=4#hamDPS zc%dsyWK~;zf0ElglCX|qP>mGfot;(hLq;6U@PjRD9U~g0PdpS-I6ZlJ`M;(KE11t` z)P7UjD3|BAgtAy32Ao455#~`e94~7ltHcD-X6{CdAws0&h0U$xE$XTN+W$!D8^u~j z{&+j-Hm`D<$yQ=<2yCcD@N~PkBfr!4A@o3WY=#ew3#^*+UH9N5j7A2afCN)7&%>sU zx9mVfW_?ns74pTKxe!onzlMaCzZ{r5)g!KPYIPABju)UoA5Y-boUD7%Cx^Uqaf_vp%$fq;&^^iZUv~u&iyVw9Iu6) zo+vhse9{Hym(WO0ZO=v(9b+wfD8@@cCTS=<^xyy)^`GoFw?y9S6+Eke>TW-=+b)*- z;#raWe#G#MlX%B<(SjxaPj+KA_SY(sRXJ(CMs;tWnL?>1^83qwcHCiQtL9Z&qV!6VinAe)F>16@Ah z@WjvwQf3%Zi#jC=Y>ASf!d+myMuTo7g&X^4rlT}JJQs3MuqLal!Nc&qA(lza3+?3Jxkm$uA(%&dZzD7AS>7+rKpKg0b zY5to=yr3M^f`GKN)F@OJqX0_;pUUxJ^fiusmBL^b+wcdv+siVK`S#hU{v^+d(*=Dg z>fe=Z1RS4Ru#rQN(8lYZrJ3jq)>wlK36eUfsRbquU&(iFdlYwpL zpVAAB_sm%%5ZZ++e|jzs4J*gjWhUO(>qW|?HCimEVRlnZe_mwqwS;iWCuKg|Yg=%?^_kFEg zOk1}yYBh;P!8obTyJmv{(S0!4PRD8@t)JeI-vq!kF*V$C!y-4*QAG!INH-maZL9Nh zQOcJHZXK%0yI@EHkWjp0{mP!3YJH_O;x#z^o(Hg!5w`fZQ12=F*y&j1p7nb9S2Tq3 zyBu8i%4qd3OB=J4iqY1otqQr3<;s1iDt~R{jY!3;dp>tzONYi{_C0t5kmfr>0mx&X2c!TzqXkS{?xKop|Ec0(kAvD>E=3BQAl9L` zjfk3Vfb`JxBF(~T3PAd!tPvSgllbVea?=8)?xN?fuYBi)8aSozq06SO-v-U2131jH zzMq2N4O6mw04O(_ZUCr#*|Sk^+pB@lwkc*=Ba141YqyrdaM^CQ=cMvp*Qvp)Jn*0W zG9=|a{bxzsSzoa|&Z;a3j3CI8mA6x2D}*^i1N)f`aMqPFZ35$JQCK^xq$lInYOfWB{wy!>>b7$|u!> z1Rns8UxA=)Pf7X#JKiWPFeYo`KpWXV<&Sw^Faia`Uuq+J%oYng+d+8-MO3xLv=xRX zXhLq$*wluIB(X2lYf2y4lqjJKe(P^%b5+Z{cjSs@p$Vm>&vMCTwN?b>Vg88KWP%$| z>Ym-h1iJLxWBMaC;)+q8kCa(O~wIck5;M{o713NCwW^5yYATFNJx@t2?s|=a46e z3S;@VZj&C*2+s8r_^qCA>f0U5{ayenX{ROtiU^oGDZ-UnJ8N$^stKyQ+8>x*!epzP zt3jc*a5!)Gc==d4E7`WX^0XxdWEWtDvLlJbhPSL;V2#=mkhWv#(YuM=HXK zAB}J=2Z8kLirXR5Cq$FZ2Iw`NenLR2RNiRn2RSRfGm694sn|$G_;k2+{T%$#k!kis z>@)|_e72<92@~vW-Xr|T?CGvjX_-TrGmxeDrS=VemOS?n&MlyYDv~^u28V{$b;uCH zSUMq-cJra9xcA*L2v178(%RR@z@t0uA7o)MRHWqv+2jgqmVb@Je{s(e{gWo)1E1<~NHG1C&Y%kf?JjMwQ=K0Rod>W>KL(H~o6;O%q+eO*5EOAVI; zi=qCoLpn_?zX#>`t(q>)K0v!oaPXoHkr|!*sIFG;ZMs&>N&V6WDKQu_XXx%`W?z!E z-1&yl9hY_SfSN2*K2a;8(%_pr4Ek*-{%0{)YqA#A z4{-@dM=5ttENZ^9_PHdS4OZ|-O>&4UX2}T6nX=+A1A)je`{4_RC1xaCmA#zA2c4^# zIjY_zw{@xe2ct9C107gv_&kKl zx$EjQqd}7^AhVtX9ZXc0pUpE~QigMo5Bu(2{cRo-V1cG6AARGgq@s01 z!0LQu6w7BywKJ3~Qc(yg_)brj(K z4vL;b4+mQmnp9F;x@_IDXB6C*JzAfetN5xq!NON=9kSK&3wR~;i}1O!=>8^LOi-}n zG?$W4ZfcG?B&EUOds6TF384)1IF`o~)7uZm9Ar1tO*jl(SBa{XcVh0ug2W5&YZ2Cw zQQfDr4B){j6?N_X0T9MmYZby;jy25AC02up1i#*96u@)Q2udxN?Cmj{-M>@^;IDMIqRSn2*IN1MjkD6NvT7r0|x zCwXuDCr5MW@4p9luRy~I`_Pyls*_JryG?DE%9CEXAS(__)=aFoAL@fsC}VP_v1Rpx z7Nfr+{BhJF!NP4R^<5440L@#{6Rm}E4HV*Y4+FF(Pf<(7JVD%Oc=|NtDX>0*%ID;q zIvvzk6z(04a#exkGS|4PmEx*^9_6}(7_KFx7?_Zjg^mmY*p02<4`Wo9%eeCe9NO&& z7l~obIlnPOtlBkracM5^>GWKKMio!+vo7!J^$KcxzPetPr1Y=-5p=vth4xSfx0|&>?wr?k4T6NsCJBUo_azZu8 zXoR6vl~*^mzUfKi`D_ezI%o6rSR8x1(ntybQG>WTK|7ui*yP0F+=1@FHNny-?DvG0 zA-@pPg_)SIp!$Y(pX%+_&>p?Lkm8jI`#%=nL1^S;!J47Ys_J|A{*wzGDOrDzy(p(_ z$gelA!`OaKe?9HgqY%8xmo(W6P(Q<0O+5n+SYOb?a|}LS@mstu;nnn1AycpTdfB zWTnlF)HLRMvK-qTQEf-B*aY)uz8&FJgIYP+H(TLX7!LX!WRu6GuDQa2jWZlp>sPm5 zWX1MxglRAYf|lQjrO1)?CC}Df9g^x@ObX1YRZK=~u~)1e$ATRHav7!KqlX1OHUI_| zUGOmAIo6rnBJAm_Iw}p|C0D1Z9GToFkIf#8@ahn0vG6J@2x-ce&Ct^Mxn_w6tNWw{ z6Dc218b(_ZR(l4bsucyp^aCZk^P5iMXeDHswlHqrm5Tuky^esz?>W1y1Nr=bQmiM)xuRlrem*{!-s4HK`&1exbpIRJG|a z!G=P&CeI!cPOy;X>USQHoh zF`r}`usR@l^4IxFS6Oh1E!T)>VbjvD32BDfiwx??cD}~LgNa|lN{i-BTG8N6M?S!# zVv2h*`Ejmf2hD{NQ{kI4;MQg2>;^Gd)XW~9ezJX@erOD1O$Ln6%`=SdJzL;U11Ws) zo9H73mQp@CyjN^ zayK+p7w$b0$(jv-Yrcb7x-97|-#vCT?M(incoQE?@08_(F-7iOAU`d~!jZ@9|5%X` zJ)!{QF|(AKbX$V-(u&qC9kCDRrDa;+ z)^-*7LJoovN5^I_ER}nyy;s|bDpv66fHWx^PB6$^B-zeRJ>$u`SAG#>j>Z%Q24RC+ zn)Ji({L-O}?i5Ba7Ka4u<*Lp@WWs6&F^vX*cp$HRF4L)pF34-%J`LeqCR2rHKjrs9 zccVQs2(Anm>CEB(H0P4Ag)ybH;8+r=eZWuH*7i*?f9!!jrjBz8=Kv&Rp=xxlzsqN} zS=`pWdtuy^1pW(i zYmuwmxArM>&6DbWNgxn;PL(5)A{T@v1Xb&?U!- zJ2U)BkLQhGXRkK^NwvNa3?T}*7d_sv%UrBDZdcF4h3XIE&$;6K@3B7M9S_bd6}qY# z==ddcVSAD*;ik1%bM$FNpEJ@BL2(5o(LZ#*@sr=x6O)^6O+yrp*u>Nf%7I3oQaaGN zg+{eI$ep3_hO>4pwug>MHz!i&e_U)ave3l&L>B3f&$nSYRg+DwB&{|5e{S8Usbpvs zqX+0p%f$Y>idar?AH5?I9b~n?$r%>+N|oD99k+HJ4HQ5+sMxo_%!z(6@ds_=bM~&Q z;sP^rmyQ^Fr{uNFYxbv-Yxs@!yq0V}Kzb}(5focW>UAuhY7g5QlG#mes%EfGQ8 z`y|X{O|a{bKa2}8VSt#R#!1!6r{iEhTVx9k;xiYuf3f%SSG0m8eJKGng%(DW4}r-d zKu{beV8Yr4vbt@K^r>N7kyhW$zh*4*o919a3>oL2x8xz3A45W`X%G~!R(h2g2*}wv zN-`s70@l+1Ys21~GbZuGN#zsJLXYf2T{bX`55z{3OuT>yZ#ZA^<2u+x1NHCH;9xMa z+rPLf6R@3+YJCj;xt!1>2d@j;&Q%;aBvYNHrQzu&kAd@x(}}_ zYEbs6r?^}Rgg*THQ=~kCVvDe!=Fd=4JuheU5Cs<}gW1o038QICDJC5<=d*b- zd>s9JoC&nAR^0#q?Swc8ldn6}4Z0Tnb(+4uc6a4+q#em>Q1ASZQ->by*PpOYi1a0*5KU~&zfdn$dKzTKBBGfc))2V~+@a<@IZnkH z^tq}O`V}$150-uf(}qL_3Jxf$(Timqci_R%9-dHadw9n#`k8aU&Gl)PlY_wWC1L}_ zIivk*Wlivgn2eW)wT%CJ?ujvJU*JK#h81L=o{6)Zlt40-d0%BMq$3)e`A_Dp{prix zzOu}LA)mEHTI%=4Rq@>q{P_J2od7=Nz!E6O9kF{@;Bc|Kb48New+5BD-YXRHiuE&! zrnG9wurtGYeN6-=cO7Z;`GABU;P@Q(8sh`%Y>)uBjE^;gT69hf!gf`U3O=S>qAo(e z@1jvZ=NKtneV2OnK|RG4j5&M}gS7!^@3ipq*H#@^a=|M6qdXAfK{WiIjmtV3>ykKc z2*tddJ9>d(ijUiYaS>LF%3U!Wpr1sCwu9~zK3ykW%I+c|hGpOjUp^fA+$w%XkinlX zqvmFTQe0Nx$F{7$qY}nwQ%{~}j5FOq_Y*2+eHAQqr#@Vv^7NVhuv=<%h_=EhzkuyA zO3OpVHZ9kR>rhs}N-ccgZ%>R^z&zj({^Oc^=8#Iu*0QZ`CG)-?k#EC0qDnZ~41Je- z#lDcvDs%3!Y{{<(X&@8v(a+rAT+U$H^U8SID;t=I#=!$_1fZLrCjt8buB!3K(RuCO zJ1KjVu5yN35X;~h$xZJ)0!}&l8|J9o4=&05B0H9`4;L3lx@sCDlZ0&7dkxaE9ubhyzZ!G%d$--spML!J&`I1=fVTYp#f4Hu$AS^7Ak zUsjU>gEgjf=+MTcS&QB=uzKTUD_9FuziTVLMv_0;f9E~`^gvJ%(^8;?UJ+zn!`NpW zj>-o`@-@Srm91oi823eE5S*U|Zr>t)x!IGMYce22iq6^?AwUbyH=yqeXN_xpYbN__aQ8fQP^NYOHl8pYsPQgF z8L9!gY@@QT_(DK+UgOU4=m9{6Nohz`d|hL0O~u;D_d2p zFSMrAM|i*IAGMp>8HnY@t)zWayk^UKB(!Kdz?X&)<8miX7Rq?EqNJ1|VIf%vr;@Yt zmdOwAzQk{jXqxXLxMHogHfeW@YXmI#$OJ)3#Ga(BFq|mNr+$gRL)#T+sEISy8o8P7 zHk4LASv8jif$3(QJ*^QFoxugH9$2{C-BcaRAB;S!UYx`VeaSTH)o4ZvPPJ zLi_d@VX4#KL7yDhKit^rQC+<9sWFddd{<+}r7z3QAWdOMIZ$+10)-;dKqqEXJ84&t zaO7OA3|=oNxb$|f*CVRD!2s2%B(M6=9GCHP_JtB}Q4;UG@<;}7z7}m^5brtFrT|7V z!}MGS8u#^=`rmT<>!{@E{8+-1?X#6c`a?#cJmay{fSy^CK~_cDZU50+8B10r4)3!V z!9l%NQ25Hwb6`%kaYVfRY6($w0p~6xZLga%sh^;q-#n32Z7txBsP?#P7?KhSy)!aq zr~oeI?+{0Jme)GfB`)Tq-UnT}%_f!M00Kn>+qiy67>?@PB#E46@ouKF+w9Ij!c(|) zHpm=rWjZ58VRi}RJtPkPWD>>Q7Z=)nuZrpCgsEi%6a@$eY)6Y2a#qAM&JdP)3#arH zk14ieoHf!c6ka*ild6?;uK-A&qfo!PiqGxC*+XMjmPtw8Wb285`26T?_MpJqySoKv zH(+F@xnb>g>T8$%)spU+akUc=pvSXeZ69it4y9F{QYKkdw=aP`y7!w#Ub}JVyR>J| zOtb#hl2tTXWyt#to55D_!TglZVmFrH5*b&xjr89d*CY2l{IVN#=nxG;^CT&J?&1y< zRT=VuJF{ejO*^|GO($de>fZ`)N1Ai+kWj^Xy|wBV=wCjamGOWjzUklRv4|EH(_B=x z*TGIlLAhWsJ_4z)(O)j}JakZMY_ilo4XCUa%KKIttyM;nr8q|X{h7R@lK>fVzNtyR z5xLJb`MAFamsyLrf%zNkc4{9PdiB4$m!<26#W5#F1d&Vm+Y%h`*m9cQ` zk>5PLzI9>nY)(C3slNIm46US>z;wtocM6gFY{7(bgO`_uhnQdYelq{6oKp1n^r|*? zOpNDNsJ7OtS{?I8rq~JEOG#h7~=94n*;XIDtJ(kqjxu z#OtNl%4>aV8SWm3j*7$#Z9V1*RRp(j3UyK?$(z80%{_tf13rtsL?vr^r`nzgi*fh) zLHGUZj(-)9XkwTZ>3b2Eq5igv&vGGX-jyW$&f$dYD)GdT>+M?R`T{q>_Dm3v`&S|F zqnEfHbURX&(4cNMCb=flVc|d~aG|r0-khFimzl`xzp|Jzs9BUy-4#oV@lktmeYgamkUvWsIi?eKW(a{&XeO2Az`w z#i(M)WDi@+rSgX>jY0o%J|o~E<Cu6Vt%|6{nKuAim8iNsoLTj#6nOv=Yia}D z^o0K#4&eRx$GWwPd(;Fkd5}0jq54NQ*EjP@r6ASVV8_DAq!mA#5 z1?*$NT`Yb>bJ-;=kT28ixtd9+xf6)5faiqPu+8DkY`7iEeE(ujrwOPOM%Z zx-8gdJ}cgL6OOyB@e=$K?iV z4s5Q#Nv${!zdw3!ffVS=eW0_^|#+LV+W*uXqCcgG_q~8&YPcL zH)4*gfenmpdN|N(@)z1t9F%)fj1TZto+e=rYwyxd0K4$&iE^gcc2o0hN9g*??)5mo zwfnI=;#76f6!lcN8z>!xC~vi}zfSDPKDGyzCf0fWp~em+)u2aXY7tHGlWG!hZ)P#w zv|`2JWqD)GJ=6E(XtK0YkGX5PGE-LsQXE&LNX$tZPqw4l^Bx(UxI6?ti7oyAVgutz zl^?R@FoAzre;hRyzuq98odHNg`cDs4R@{!tN&anr+jiB90tUMYv^p||R52|f859G4D z^x?)I%XSoP9&q zHa~F+kE=tJZI%cCx-nle>kLaT+$ z>b1;wcmDE9y<39SHE&?Qhj7cX3!-E#JY{%eczRN&1Q%2ucUR9|AW1^dN}fX&Ar8O5 z!p~JOmFa^5;*h9`^k8o?bp9osrMq3v-#AQk_^u5jL!I;La$VIT#=?w6Ld0DMgMyas zVA#0#+C%*yK?^eNU9HIhOyH2iHrWshViKrm-0<2r(cNDC!RwlWaIACH%Km-=0fYQq zUrZO8Yfw^l3aW7DBSdJ!^|!MCQ)RW0tUIQaue7%rl=25&V*+yB^Q7%6h}^FMeh#CA zw1S^qVDmBYyun#3MhSRY>QXPuI1GaZ8A&w}iUK2cC<8{kZtecpV z72AaBtf?;n-o!QX;2oPA=tk@F-u|SHm~*ol%?XHoGat?*L2iNL7IDBy0It#EsZLsh z+c6)@SDwVp&mbb=>Ks89UH&f#I)t6nylElC#<`(;I~rt9Hgp1VTi zvgK)iYH|B8iFy583#Du|=#Rus!)lZcY_LW=NRyb!?`)@Y5NYyNc3HCZ+-rmX2S`tN z(X07M^OedKQZk`iKyCVG3b7?p;waadFE@zDyr0P2eZ#_~rY$kNp0rXI%K!n3DDP+&9`|?NDatQzoKvS~#G@?9)oI1nj(c$rFv(3GCf0O`>!b!};HYifB zj~>v!ty@3(37KOqYkan-Y#TEEtU&t6^F9LS^%nr0eOWw)E*yC6r$}=K>{^x^-qt-5 z^r4iqCjl{U!m*v{4y710YLl$&d0-$dL2uoq#aRUrO(2B3F-^QY*#EMW1uVq z!pO$CcjHKc4eDi?a3tim-`kYwG9a@jpX~d8@3O+Y%9sMKSR_eb$-#8R%e!8ezb;3? zIJ^9b%>NMV%=M)FTvoBuz>^wH4jV85DedCJ&=v+7$jMUfy5-FeUDJr*+_jpw#|gf< zDq7=TB%HHo0AM#hAv5O$1yqV`OWQ3$j!a3*=}a|8NwLATCm|-=j9+J&g7fnXG|2cv zg1(fRS8*rtmPDY5Jy>F>`%K;L!?znkqgHsq2`jly%{1LdD$t*F+}}oOTn_N|*)taR zK6;6AdjQ+x!9IHD8QLrWa-?HIbAR68b~rkTj}1jdBe;ubhTzNg=v3xL?X6jdwumTi z;l)5MfLv%`$oOm99}FntVvs(jjJnn-JW~9&B4FD;t9+6%EO<+LGVaRN$uC_Y|I74c zGo$J&nz<)GYwXbF5<6k&;hGv^Ajl3z^o~hTYUjQ1n}rBMx&^@^ZW0%%26hJvC8>;M z1tdzP?Zw(HUWLA}wd7WZI>SMLpwhnjxs^VUZdqY|gMcoL^8H+)itEnyeS>ta zJM(6xEcwOIykJd^)Ju%fH6Ep~Yz&&u0_@>H^6I)crpb!%uLzWQfVY6E49Tc4dI$1| z-$2e!G#cEKG9Kp>?ofLamC8gUH@6QQ$OBsYbLn)V6x>%h)B_1nkeufFUg3CFi0ogEPHhHsy2qSC25ky3VHBnK?wSEZS2Sme9SUt5u zi$E5L`9&UqSy}SYPB^8IU2gyB(e7i`4YGtZ?(Ew$ub0U=7jByLyTR|c#~{v6ZjI1N zu1DjSbQtOlP-KX5^q2CoxS7DO;ek*brwG?Jsyc26U1l3AQ54c^0`aBzx^?|{{9QhyF%NhO)gLru1+(#MxQHcE>Q(5RoLGKWoo}=v)n;j22mDg0&b;4$OmvbKtS{E`c zlEC~YnS{H5KX{-`L4t79+Q?{)6~7A^TB_3qIOedENQxdP_$#=ED0Z!6w-)ajGC5Uh zCA;u>e0fUoM!hx}n2rX&XFLAUc5IYjHE zIIf5@JB8*jY8Rz*r?oNQ67t-j#l;xDJ4YV`0oI~;35vO<6zeAhESzIW5{{0)k5HB0 zn^=0$i|3`?gYp#`?uK7hBvtdmp>26L@VK^<0MhEG7d?T8#om~r$d{WvA3)S*$LM0e zW%TIEER9jsUd>@}A~kYAK+C@bcJ};aC>Yo*#^i6N6MK8Rb(V@B3*~B{Xz81}KB1Lr zU!N4J_VCB1Ov(i7hv4vdq`9~Wv6X}$$7_t^kurgEGAbL5U!bm53c-OiL6u+UpsGzF zM?A;_TJ`bVeKA(YTwtdR+_EV3xM+=(Mon`H>pUhvB&^@VBE+4uB@n|acr4>O*>2E% zd6w`uN`~2%@as+v3b2{+B?t1l2@X08@{5z9UoG$qxZQKC_Wa|gRvC!53#YlnkE%ZfxujHIe4Q7(`6irL9v z6QspK+cF1lNCu^kpUV%($R(jR{v(Y<3agHHxpB4bn1d~)oPId{fBeXN_f)97KP9G_ z*15COS(*GX&H;W{>EK~R(Yq>D8B8oHo31+es=7B50K19!M6+kw@O(-YYA(kS%7+4N zgfJeEs@F}Lq>y9UylWC>NJQXYeo8fQ^@Ky-5Qc%Nyv@WvMQeV~bvA;L^gF}aK4LxI zo#LED?ksn+nY$;~wbmgqRv~q#?fz2GV5nV(rm}Z_PxU9+%D$u(D`U%JHkaCmLx!ft zzON>a5kG64-nn(~!M=K#7;esa3TuC^wS?I)sh6--WUd@z%J1ae@m1GJ#0g*p6aL`MmAVo7QVN9iQes$ zJm2rmZM#fogoueZ;$v*MHO&!P^ap4$t8;i|sH0lf&r7L%ZEeyrWQuqZ&S-25 zi8oDMkz7gY%Po_i=;5O7jD#pj^pTx~M zxpNf|zd^r0Fc>~6=_p-goTHl_()f^-n5Qrd_ePM4H3->pIjBWcFJ z-Fs|JS-F^RgY~-9OtP{K)>OSjhbki!Dl_b(NYQ+9BB;6jH<5+}!`!H9XgN0@Ld!H# zoeesLw+iMRngeT)^CP}jZ|gucNi3W%Z5H|WA*7Uw?u%`z2k8E&3gX0?6OvOl?oS2l zni65dW2?Q8G$%Bgr0_hvC~^m&jj@%_ z)T+qt1#%2e7`y37fG%HgtIsKfpOYp>yDpagZzzNOrRPF1M`v9vc6wPJikH@Q_t@I6 zZ7DVmQDcH5FT1;u7O^Ukxd$7tvxsWhM`f2)i^>$cO4#$ zW$U93qZ>?AouGDwykW*!tFWIgF%VvhDMHn4!G4S|dCi0$qDA=XTaB)t_cc3&tuBwh z2rGD3bZD59FrY~MNx?PI5Hps9rYxTzwo{(xPb9){*hg;#r_kilj9x~&QV4K3x;}0M z8lr=CSf~9$UugtNo+3a~f|~|$oe$q|v~F}>6+h) zr{mjqYEKMW*$C8qW4ZB)BDzsjZcQS1-=!t@5JK|lo#+AU3LQ!Yy}LbCwDxJ0}+e9cK0I4lc9A~s}^d&1Cn z4N!aXU>%`;sjh%z=>q!2grJtq?||Zwyn5yMMh*KpwJgi538EK&JrkUt-t88CbJk#u zIcUO_K66OtB41&i24Z0w^{wSXfpxQ{t;ID{6k#?#emt9tTHP7iz3N-UD|jNT>1f4u zNU}=qTR}Bv)G1a6BDIy^yfG}7a)+K_Kp|PKx+}(`PGpKf(Lg!AQe@H9S;bKXAjK>3 ziGpr=e#v$DblLVftI4x*{JX|(;0q=>9BU~7dsbwux+F7+T(NSSd=@%W z+pQWY(&sm-(wte(Y0?|Mw8Y==Ppvz!H-<+`o^2;s6=;3R^S_JiO4Q2+tz>7Dq~sG( z>Z4$1iCb*RtA}jE^f_Mwp+(R=j_pz!8NX1RISH1@JH|=Ff8DGkqHPlJ0_3%4G%Bw> zc2l?XxCjib^Ql-(v7T5-P9aN?V?L>f*vzQ6qXX9v(jNa?rUg?`%eh!xO&+S^Y^U|{ zWfQ#d4X8SUiwlUd9#7dy+L~MxwlOARGb3AVf*q@Qc$bO@*`fk#4W}?XE+%91bL?o* z$(!}7%^$IMEArp3-GJVrao|qc+j1RW(tlJ5`D?0Z?huwpl~T4s(3B#((KRl`=mkGl zHQIT=NhGoybe*2fGpEox>J>B@mzji_Xd;oM&pFBlOCOP^C#NEL7FV2}}Hnd(prI)HofhIDco!&;E^tYDvN+tg5b0 z+_I*E-{|WChw?8sXU3zH#24H0wXCLNcM=6>YOgRxTaBaSBK!EtpEj3z+kUvborP$I z6-}*$LQi37H+(gC_-}N0o1n5@(nwPw)~XXeQDds#@U1Tg`i|~h*+SpT;7+;(UT?pd zk=AG-q8#qx=*QF~ip>8UQ&PhdCx~BOf&X1egAveq*q`x+#z%@ulUMjVpn2he<+*Ff zw5qU42mp*a3=LmAm!)!&<{4Wu;KVeh6_&a>6vJx&G(AITvns6@%|0(SB9K|a zUQnwX`%uy`wgM@GPjgiyw|v;uZY)9h|0nBv-<1D2 zb-;o^NJ;IC>_x9akmCJ?pWvb56JDh20ki?lf{J}wu%eE}_81=284TuE1ZzHy9OKhn z0WWEJgv6H%5l>oCF9Xu5W2!cVLEdY>`4j2R=N^JW}y(`Binmz1|ZioGS084 z?FcJ#G<$ACzqN~v`_NBP@ax<{CA_Bac>+Xjotz5cnAAIus?86k7LPhvsXx#2rjq%8 z{SCO=^Oo46F;AKW#p&5h96Cc0S!Ntl5wp-lY~p)5&GsuT+*rLaE-x9dO|v?1rZCTj z7L@XOK`E`>4TEuar4M@*`V2s=2&r`^Z36j9la!)e+ma+pe{W{u`A~yKuq4&98LO&@ zx`g+sSv||ya(?=`qQ2SR+iudv(A6LHTIepE3^p= zW@$9&z5pE;u&w>r<{ziC?eSGD$JYWqoah%@d*E;3nou^@e#sY-aU1C+HNcDVh45Lz zc=V*!sHbkGwTrR=j+O9cdd`W|93kA@EBG;VB=HJWbIW!YopV&{*@Q-+kI5=D#vi!- zRk{>9*XnPi6nwjpHXO39O?xcS*Z>+7d~}P5ui>;r7f}FqDBc2Ao-8w^S5SF(@PI*r zQry(&BfRXu-hTz0sMa$@99y!^w-_%LA3rWwhuPr;gW%=o6VgdLc$R~dci;*JawJ^I zp_8fr2U4_5oIdOH2w!1ZG!yqeovY>4VBZq^Epdb9Anh{sZ*HCLg`XpOm0}_vDDfx} z1C~7R34~Oo&@#v1T2{rp3ANUk{BMQo(czMDKf^ zUMJ!^Gnp7_<066^(}5}#dVt~ydmF@r^ptcV$bd?wzk|1r!rB7Jza6@T2*X>2K3zx48(ag3{Hw=oLLgKKK|*({Rk~$=Wx!Xlu9qj(p!jpbDpL^j$b~^+w6MBD2{E z!258$QsQ|;-mW2h{aWCr;UAo4O_(>)c@KFsQMrKwj}h!Aa%(6vXQkirkXTQis#A?I z)UkfAmcL*0cgBBMu|8mg4@%*TuYw>N^2&1_m;Ms4P6(;vo|;D-ZpT+anj1xIk+GnM zI_PO$Mhw6zQTMmspyA7z)wQ5+!6G@oY#hb}Nx|dVOu%LV4mst&1oh>Ca*we>lanS+ zZE}jj92vAunRg=EXw7=#y0@AySMT0_qq?Z@6Oo)%J8PDUgC4IpO_>)e{9V<(R-t+8 zdL{Dk#tW1?#3>9o)ldM{2+~*L`BrV9STvt_9qV&pipxnBKJAN^bF0o)^7OEVm)_2W zORTL_Wt5TH!o(9jvU!WaghIAryv%A0HPOA~!>zMN(b2E9d_)VP;-LHqBwb#S&`wNK)A)kKElo+XMyB8_?T#*J6#5` zx~(||cyO$5>Myn3YV5?qbORHTMu-;bKep~oeE4k84`^H!MM!khN?p{n^@Lv80vL%$ zAYUKSn-dG2tgTpd-L-A!tPmtU>{qI$E!GhaY6jFd(bHVcOPN+9avB-?6EnVmqcjfV zvFw6qKS#s7g-+6rdLAnbHo%R*uc7H=7U@n07C5`ZE;La7kLXs-E$;?D^-p#-$mL}MbN?UaTv=P=XkWY0V$Z_TP_3{f@3Xm+_rK}(ART~Tz*sQ zatq~B3*%}^ymenPbAV-EPC?pBY}Z0{j3eb`{!$(@da+4oD(nB^(B@L0 z)DccfjaLIl(Ft1|&9yvg#r-^h*Xd%43{htjI4EVCU6p*49X3K&;M&pW#h`o#0Yp$u zUf)Q|Q2yo_Qzg`iH*A6YvkO{~5uj}jQem>d8W(_WEc@+7$)1)CXwCW9Fr&ZLY&_5f z6~16C!)U>FF`A6cUIN*M&&isI`4}FSMiXQ_m_lz_L(FcgsJvWrBXG`wCLv-SvogIT zUG}A!R!!(Oy^c`p_M8CKhb698CV@u-8yz1kJi{b^CiX6YQWuJ#xQ#=+Q&HbdU<|Sx zcrZ%9l7hFy{nHBqcm6nPX5-RohT^n?YkS6;#yj++o=V)R{~tB8(v_!&>Qtei%mfL; ztPHzbz3!;?)&T~iz`(&6)}2YVxn58dhyK9a7KMU`SX577qfg+mcWDB?bMh znPtCXly8Jvi5E6hbHe9i9{=fg%R$Rk%Ia%Sc?XRxv&=6=07(q@1EVKBZeq_aBB>#) z&avyoFAes2@H+#>$XBPgSXip^l^E_+Og1N?=h$JmohBQH)nh)1S9L?j)ixZCe6UrJabQ}2A-wajGYRJ>$Q;y_$s#`*zT9(9?6Z2UIX))*I-drE5vA4166SW|^si@zq!7R$oP1gg@+LOk5 z**a;TpP1hbh3*#13KTf1{1VlEvlv4=K8x;VmdNkUtSlgEy>~wFV_bo-oer-i&X7A& z(k8F)-B5OP$egT#4cjJC|FxNUvg0>AAWJuHFs|xr3)hGUn!7Lt&OEdp^7G~rlx?|u z4$cY|I)p1S8y#oH!BC_z`vw29*Djw14{+?f;J+I>+0%C13u%Iv>w+l@3|Q&P|4!it z0{IqBT8C>vXyF=?sTS#0cJ`j68?K7!I zT}5M=z*mUJAp|_&r|65$ezFRI70f}ks>9eVYHuFB-_*h)y7bIr6F~yudflvW{-QkX zx=_TPJD4Xjmaae!{)%)R%pzu27E3~ZV+C}l@-(XKgI31X`NGBu%i7{oHb@;yOOoig zwtGYCf4KM}IO0W2x(IdKXqW;)#-{vpm@qz6EBch_>=2OjPef6TP6@j)!FR^$ZI+NR zK1eR>XJm3-)USV0YdZ6n#AkQz*``G@`=Tl0_EfF_mYKm9CeCSUaXpH{X^Ir>8-$7y z?{H(l2gL=~%m&L6If^ezAfsYqPK37D-l7o8T2#{kugChR>v!E=88#GzWV7AOr0 zQmM_@!vz0?d=E2ETdr&gvo!4q&A$OvMnN4HvK?!|jX}jF__*^sC?lNod+s3QReEbq zJhC8XITio@rsFWwc`hEl_`&aUu6!!7M}W_&x(xhL?5`Q+$9TZ5cGKnbCockfTCu-w z{b0ZppT50h{{qcK#%hUeTUO@sO&7&@WSXMP-#$F9JQUPMqNWBugK~LOssMA;XgV*z zj9LrVv)L6$~Ko;Ypk5FmPpA2$XR z*C}CZ!7!qN_%9C@Nz=~6I7>LdIbdyw?)J-eUd?6U*peDzE5TAqx2$-FnGsfH-trw# z%|rwX2W*VEsx$6I6ii6H_#_5zKA@kYUL5O}TY%=7_61WQSaelk%cI1L-gIh`If@h4 z*f^g>#I?riPrMmkb|O>(15R1x|90 z^9{}27;;bbT$HNFVn23VBsEA>rm1FdOfi&$1rDA`fh}9GQ)xo>MQVeewV%C0_g6JP zDJEAwazTWIDI7iI8!xyffXgj*|%HLO##jl|?te1-n&rczRD z3(DjEWJZra1V*+aF1f#&$J@Zj-1ydv-pKeQO#E3zufz za$%Ju36LB>g3ks*|7!o?>Ee*suf70WQesk=pudAc@(KXdeA#KAQ(r?ADd#Z$eO<9~ zQK-Iwj4h07--bmWEpj0x-~$K$n@r!@qs;2;A|57Tgs@%pDtV^>0}>n!$q}a<*xybv zR#~wvJ<3i^4@3C{C3AKs|Mi{|X&d_zd44snWhmD_Sc;UK;UEfv-td8Jsiy*GHkEJGV=7y{PO4Dc(aJHrurOP3Pl_G=qk`KsRg{_ofC0Fud|bdK)KH2Fz&i6UJyzY84+=+m0cNP&vXK3<;N=yFARf3AG$WZCkj7Tq();$m%mBrgD$ukMuZ=ALZtjHDJYbdN? ziFODz5;G1Z9+v0Pw1Hp|VO%mkf)#yaKin9Pgv+lXVs==_qPbmN5q1y zt_oOjCj&jdRUcmA^m#8ql0<27lyy`BR%0%&8q__Zis7P1iSl~jfs&PlA45qfH#8sh z(*n7KK_*~vh6}kS)vyQ!*6crep3k&Y4S8eoYZ|h?AB&Zl@+P?bVI^)V_3&TrUlPmq z9@f4(V24(SP!moR!)^ieM&zhwY2Vs7pL;%dfYS&s{xmGqF;wP>E7DRq-Ohh6wjchR ze0Fn?|J6s5KJy0hGfRC$u@)#V^%BObU-eHY+!Q^)t!D$#8L@AE0L8rckDFp1cD_Cd zHd*LXT&bF=fX-XdH9j;p@u{`dEfpyim(SWM$Ajd}%Vsbe1wOl7`5H`EtMG$-m{5X% zC&F1J>7f}KFW_`+xc&WcYvjq;a{{2X+|O)gS2CPC<0%dZ#khT|KWGG%!1(p=zi(C5|7lyE|<~*R5@~^dZ3fL?R`yijjeWsB;wTU7l zPB82;dUo?WpS_0={Z5m5H}7T5Sv2`cnB+44SDReNV#zeMl_BCl=d#P-E_$VnUIN(C z_$7EC$Ms0M6vYTfwI^pn%1cx(XoOsyT_LOdu+7FJ*H0fG3tv2NeSAOy z{r&4MxR%KaOFhJSB&4ZwyyvP*5ot&`U56vfs1snFjF&Ppi@kjENnhxo_}}llTf45E z?^r%nRu$iM`WJ|kmA%d~Ma8kwS2asqg?2YR!|1be(<&SG`$>q~o}nyuX~y_ZDOaSa z=8spug9{pN8nhImTHsju2{P&Dy&hpNoB^nQ^N`P)!s4RIAW|(&K(_@y!2^7n= z?GQno>;<~XbOXTQ2JcyPAqg$&VAFr;%{%JpkQ`>ED=zD-a5g%fUHVwPnt3gygQ=`e zfdPjvm-iR9bnsFD5NjtP49eKZp1O+Kq4uJOm@i^*pcRS@nr3zzVq8JOJ2mu@PM#G{ z)j{e*dxT9V(T*7!U*y42St^j8Eno9|6q=|WF1&}v5P7XdvLea3$?EtNLj~7>u**)) z+}QJYkG8B?S~7~?gzj4BEmdA*$#8voP*6Ur_`%1A(2;jJ_l4S^IIt-5wFSnG8t+0{ zMW?Iw;46?u)yW)&j^8p^&XS0&)7JA!$4sM}({o!R+kW;nfb_h{Z?4M<6H;A7svh3; zY)($d92GFrtxH_3?`9bS#pU9M?>;Oh3<=bHG?CBNk`v?Tm=UjAitC5{W{<{8j_ zC@#w}=Ig%i9fzy4FJVBda`qS+s-Kx~`gYKYAAHtUI#+w{ymm0@WOdMy14g2napaf3 zajCqVD$fSuC$n%f#G0YDcTFYnOf`qipkf9vW0F{(>T(5EjoMtqTfKf=DH4IgI}yNK z5)tSBsp7R2(L>r=xF+Dkafp@_#uL(Cmf6>@Z`{ zCrDX(+}yli6X|;a_S?eaUygK}V3IS5l@I5FhI4k2A&8e{N)X|qCfLtf#;Tj{cX$d4 z%QgeS=}t;8MtpLRx)GXh0X3Y zDm)y)iLl@_yVICX|=!{9=FKXeJU;&cv&Lr&mnGB5N5Q1=s}{=+NrW z6q&k}2>E9=Gf~sn9i4K>Q2wXFrX@l#5x56u?YbmLgIyBPzvNBPCdd4VF-+5_Ek3HW zhlN;6tT?(FkV65}+*Cv&)(wqO+>pj2PAN$8!wVCvDM;^9@Lde=0{WbTe%y@^A>{U7 zUhybyv^m$l^s+89l2*Clnk~X6RdY#sx2-9KieE+&% zpcglMCpjp)y|TphuB7iUUtYj2hfQtELcl3;IN}PYP1nUBaXXQw*n}vou@`I~wxRVH zXFbwj??{bq&flM}^6MF~zii`zF4myRpb?;@Yi!kX$;bza$y*Q3Ev2FZOB?**R|HDi zf?PGEK+@n&_;|Id3gPY(TQ-~**IYMZqc&7ELu&65_m!)>UzSR_#v~5tBj>?05(pn*>JN5QhueZX(rSUNS5nnP70=C$~c|!&OECD)6Z! zJ~rs1#iPd+11_2ub-*MQEIxSvi!6&DHQ!0SQe#o(rU%L}zb>X^{te_0y;s8%s8~== zL1Mkj>-l6SPmhBX`c*s7z9{c%>9))qYBICdm5Gk04yo>*!NI~9RYRNA*RJxPh55$_ zs{DLM)w@-n>K7EEmG;N>`Wko#PQc@qM+;V;BzQ{lO9%QrF?Luh-+~~ox@9nLwH?t2 zEl2DOlVjsr@XF;&v<6zenKca?`-B2(qiYwiS)V$Galcrs&Bne-4%NeY6ilPknak7A z=kegVYS}QQDRT!-o)dObis+b`s%nxuGWVx0^ItQ<3Z1{$KH1UNfMeMpCd^NgC}>&~ z^ak3-W35lsZusiU*zU@A6=TX5$_4$XH|;X@%(CAWxUnQ}E%d|6P4|a1pSZ91(}F)} zoHc!&?&}TG288E9SdN0ZAS32bp^dK4=F$d_k4i`chxZ#3B(Ia$lAt!zKU?Aq`N!8N?jshuf;dh)5XU=v z|3hDke~qL5cFH=`@jWQ>;*pBF0sc2qsc$)<6a3-+B=fZrb7inm~#Y1g$Xg*Av5Vc0ebgueyJ8dkeOo& zPd_7@a^8Q4GZ68ZC2bhxE~+%~cI3gkSQMN7i)@y+S&D_rxG?193>-3V^rcQ6);Uc_ z4+ebq5Cb!Cv`qBu0rQo#jWIO7gR?dS!kcd~4YY;Jz1?lec1QHC9U^{r_!Keog8|4S zEn?V3+#U~TJ$&u74+R>e<{|U`3ZgbIOf1Ajrb}W*?;s886s**5FV?5e4VA&<`9gq> zXJdF|G0E4lWT`DQ|Vm~v%Rh!gaziWE>48-YalO7&~Jg`x}4;$Wv zMcveNb;vE4e-#ZBrfL(JwY4}yc|$2_ofJ<7zBQ{J+j&Rzq}`|UMFg5bcc`&A(y^py%0Zc3_pLKHQ@*Qw|9wv&r3xsOFF0*A5g_ ziI#Z`9@t=o5aUxk59>cleLn*gNH+)-Jz5)=YaNRm=m>p*yirY_&-E-du(mtuF_U#{ zH=|QH(qpz$!ue<{qF~?a@FfgD1+57Y_@qReMr77LS1@BREU^ASsXmLR8as8dHP%CP zs> zHJ0^HtajXzfw|gh=!9rFZ$(FE=QASVx2m=P!`VTmDe`glAt)*Vi0B$iJgWPW)V04K zfUTay2AR?%4*aF2yRxY-D^jnRpAo$OYu&NaBf0dinYw77Ux^lN9a8BR5Eq>rg%gWE zwU(z6I!>EU6Ig4aR-^}CpnceeOE!doC3yX{!Ll*RU!CH}`i+F#2$ifE86h*i41P30 zSKF}oNg}K@S$Vo*P_Zj@saz&E##3Y7Ak#x}_{Z?UmS2O7J6RE2<7VfkJ73581a4t$s&R$SvrU$266+OgR*#uM?ltBicsa+`l9$& zV;w?K_7)a@e6Xn>ni}ohr;@JV(Mu8Y3H-+Cf(fZHPK;12Vg=+q1S6GBi+7_BGdJ5p z7&6j-U&++Ea~u9JHvdmkWf||K&8Y+J+!8qt<)Wk&<}r+d=gST0C4S@_qausI?uiCk z+bJee+gom1FL%T*N1zo?qRXoMd6c{mU}zRwGUxxd1Q<{&&Yw>4MDa;y(PoYd>_9}t z2ya&A8Bd90I$^Dd+3CjgaHZytJVbVS7~>3^rvkf!zsdVEX89PbthlKHmufgAhJeo1 zzZhDQYR>hvnR@cPOHxuSER&THEgGJC{4WcsHKtRQKDIrDyc9SDmv`=Cg@q*IDLx~x z(~u#B#E4IoWwyBS!g}`ylR`Gr%cZtu(iJBTI+?sdC5T!xk(-a^^~r?~*@60JqDWMt zn1OWVa~BDYli&2RW6r7Bv&jeph?QcO%WrW|7q%jx#W6n6OP-jnHqn6}4<3}i_Z}KB zzH`WAHKUZE9Lm$Np?moCQJ9P?&nr zoL12NHVyal_40tT8Ju@7{fFgo%Ou}e!ELuTXMOf|DeTF^8{^rBLx#*2#Jo7pZNPYP z9Tl||3-#^9ntui}?HQ#4vJ=^4%RIdjwEio<(-=xz?p1xTKAugCRXB^-v z8ulD|ga@gGo$xStSk1+x|7XrgHJ z@(Uu}1Kun#u4CDeo>o!F6KZvETD{4ATLCDrmlEelMxg=3I_XsbcMh!Dno266`qmA(0&u%k+1iC{gq!s@@`3R$gKSZ@UAJI)wGmLg6DOX)q9pbA+VUEFozTWU-WW zD!VVBV8j~_AZBeAy!m6a=pcJS+*LQ54tQMN1hn&Ka&E|mCTqXQ4(GEj`ItM3dCIdd zGmVotC?11luWAeA3id8XCu74Xjw(*RYN_d*mzkslS;p&Do#&#tNd0a6HaGbod)wS@z7|)Llcw-o$?w^dFiI=x)s({!6sc{)H0F9#$EQ z+!aOU5)C!RD?XipGc1gT!E`ZxMXtWm*~|hNeIl5MfZ++K{IZq*0LsbS_K~f1Wls7RbRnktb z6*l3UK$8HATa<&<0;dsBkO<;~SXnASF|F|32F_c;u#lXYsor*>BQA0I5xh(R^~|{M z04oPHODt`!8w2_m{l%b8Lw8N07k?Tnggg{BVW=}7S-P_4xh2lLv1)!xN$$FEy{89a z&w*!mXO-#x#bu5?HPBDa_jr{&FCU)ctLr7kK))xnRr$q6 zP?>J(V2-fZZ1k*<;N+*R@&iYtta-6}6E%&F2C9Tk3<&cvbO@(OZp^y+G9PW(?#o*O=-5o;i`xlpi0auLIj9(>^ z$OkkWIxelVQ;qYT9cXGq<=dqEr~8gr%%1v*XnSDG61Eu9N_=RGVj&OssD0BqdJmI; zc&g|u8efOpe#DFT_1pU(Arya)i1uJ$iQH-Qx9$?R(!+9fPj${^g%1cg+9nd_ykGog zRQh-2ype=6#!zuHhx+T?8Us;Kvmv0W~i?jgj%hm*S{ z4dHgi*4&9gE+h9U|tFrNypYyrKfVUZvOrNFLX&C0vMFKDDq{sXf{R#j0HHT!@ z<$|s+CyH}Cbv2d}YCv`|g3ayvo2F(B_gky*KzHC`sQu{N8mT~k`igASgAbVt_A@TT zMdpO_lMUcTc>wyt3H91P05Id->B7I96A7679g_JAK`Dg~!^iGv826@^79*gCteJ|w zDMAf#BY&5U6ErgdOQ>IwLm}h*F&S&dz;#H zKOv1u0#UsFL^ym9)o@jEjjTQ4-X zG$iSc=h5)&j#z(6DBqfg?+!ggd%S0#%)C}n;NBg#1?e}VZq;9TT?0|>*8N}%s_Do{Tb z-xqB4T(#nFy9Gm4oPs(fzd(UP*USMfT4NK)5OGc+0; zkCI0W?w-Gm_CJX4oXMBo-DKKW9Q4+^aKLtpc^OXtP6i3>wO&)H%%q!>bZfXeN4`fN z(M(e3YT%G;fvH={z)SeXxTtWM`^z`oot3*At}cbK6GHIb@}%b8I{5-G;Q&}-ym-Ze z-w3j^1qAR({fzGp(VRS+ST*~XdN`Be86tWdhY|35YV#Ph^UAPA>=yX__^;hzX_?&WgV6}GGR2%>3C7Dg=pgU7oQ*~Pz zV#dah^qbKG=+gtp%ny1de(a7o7V0$A`eQ2-&qpCTG(1W6$1@_}iE2XC>_fRzK71S# zbMm*083^q7_TaG+J^bpBqb)Bi#0QX22<(w=co6aJ#YV(XG;%77Rqxj$#-W9fZSP!~ zMz2h9G}!-JvnHl_8zB8?!^V6xh`@4nUZ5w?NS@^lU<3ZJdT4~5G(i{gNW|z8+J3Ip zfq4T*kQv$9y?U={8pSEeIg%oNc@f+-R|*nu&9Ppe?CqZN)(LQAV0>d{q>Hm*+x|c& z5b~_tjdy(nNU*1JET{ruC5$B1aMfDcFC&F~z2tWBK|JBa>NCeVREP~hylrp0)Mf*bglF|EC*}bb~W7M}-I4!U?+EaF|_vYcW++8q{uCf9sVHM;e z@ZJhbLF=havsB&7Xg$xK9+i2a6Q)zEh!=sS-w@NDx4GkC^ zeB(>|+3Yf3>^qtH+J2*bZb9qlH#5SSq7CBJcm;+@E9V2u+=_r*5HKHNG$;k9L}%D2 zJ)f=C9&a%R74vT&D+%;#xom)_SS=eWGHVb)?9>H<^ro4net)tMI$LZW+1b0^{t5XE z9Zh+W)0ky-Bg=9Rm7pt;=#m|G(r&kvOHR|;Y3)G|*p!7b@(VT*Bm}l^>=j!Q7Sf5M zOO7@=RJNTX4GqEUlG2djFj25?GFC-+>illMeF*!pyNj-K>!n{zb^YPHyVHn_X=DA| zc1Z2(Y;H(JoAlq;^6Y*};2y+3y3;4s_a&PBv9k8`GP1g1sZ!phhKdeRw#K}On#c&H zS1Gp#$;S;d_sgDNKBiWm6^Af zJ_M}}JHStI$sE$anC##zPU!fOW;*l7Jlb~nf<;yXOr{5BrHOUg%|pcEHYv6+I+dpa zMkCIzq_z_AMhCo$@SLIDH0vtmTG`&oyd-+ixq^8Mpx%YDOYIzOK)YM_RcUEkNd4J> z-8yl1yBFsUX@D1fF`$paeluQp^YRl; ztQ1r?gGf~)GGV8t41JbVv=)))#5-W+8Sv~($n0-3c6Da4C) zNFh^%X$69=cd72Y5R~yjKO_EvSEoE*p`B!xz`9Uu%_k@8Aji!aK4-_t$vO1Qz+YC zB@%D1lD=GFNW!ObDX48k_WcGaCZIb`j%K=sWyBNXMJrqOE~Nb>w-{aUCId4`V}lS_ zW_qt4S&apF@9ybIdnWP5`yAy;2hl4jmK1AH6wE&6C}oz9e>ZF|J#5k_w~L0TI7MoW z4bD%>j6;7YeC6?0+d^{e@GHa+ahKN+4S5$S6tSQ-ZC{$4411HbgF&9 za!@LWe!>c5x!Baz_PxM!zU>dwz7}BQZ$}}K-JU|;LHS5I`h z(WUCfd)Q)PLg0mo#~@C?S&Z{;qEY=>y}f%;Epov}nk|B117TtwT}62`gTT4Ol)=Wv z4zEiM$3cMbC5{ae{JZAb=r(T!j#a~0>EgyPpGG#W`#C$1+N*v7>iYJqUaE-=97gx3 zmfi@?5M-`QAo^ncWkGtSg@}?8Iu@>KGG$XSYU1hg3qB>rKs@b);^^9F>DhtML zb_x=^g07jecLy6sV`APMc6aMii4{u`uU3%dc={%bbs}i?H*u+s{@&{#mwTi+!eXF;;liXPa`|H)Mw1? zmRy6ugObkb=(`H}JV(c1U4Y@1h^=GECn(=3k=S!epw5~!=3A5S&xoDOPtkYuz+CjB0TuI<#7RwlogGtt+W! zgfO6vFbnL1esXB>xDRR4>XR=%C8+P?OOb}hA`*^{+VYwvPh1ciNDRv9@BGi0+Bb0Q zbYcIQHy<=<1+BurAbl&s#$L0)DGR~ZjSb}LZ+^Z!b&;IW-1VcdKAr5Ac>(}pUZeh^ z(H@1C>58QbCVb`LZ}oYv$tdp01P4^wkl@=!4T)S;i;Vxn3_|?7fZ1xj3(37)X}5qU zfHS}0!T52fRaF!o4-8;ZhOMEw-VZ=_E}#Ka@Pd*-0$~y87yUO;f0C#S<%sJ?X9h$xYjIN7R!ZiJLKUvFf zvUdoQhPrB`wZoo4`Pza&cV)I<*M^f_f$zR}C??8?eG`H#F0p#$XA?h%o{I_WlQK>_XBIVUBGBcV)r>d>uBa7pEtt^uUv-u#rCxUb zHXoCuN3(l_@XEx!?)SK6<{f-E_TVQ+|Enw~f{UcxB$>@5RnD1Nw|Gmnyn&WoqP1?v z3~tJ!oxjjkmE?sxv*kJ)N22#15W8js7Id>?*Y?9KB~z{|(|-b=+~<2eA=q|yV?)!% zTJm3=L6o~qeAHvH+KBU7>|#nU@*dpAn_e)z^*db!fX~_PYoX3$b9*@-hV`gjA}hNP zRSW^`Z!333Y(yn1eM&oF9t6GY>hGpC?%tNMbE_qDiDGBzIA_E?7@pliN){*>ow>wT zTw^V7Y9|wNw5VvG&|p(!b6pr5fDTv#x&uB0B48zpu4)P*GQC{}qN?7x1rcpZDSkfS zxH{mXpz|c2?Qxj=)Uf7D;I`WA+O#;Fi8G!ni3T&6xdM}k`o3o(aS zEJVEGr8O3iXuQ)QPPCA$?)fsxzQoFtGCyXl5-J0(^dAdOosr1WOUjf@`2HM;qk}i8 z@1@Knij(2{S^7pS>GLQ2yXyeT^48Fl&NIS3dT1|Bxf1It`*u3@N>F}BZlYnxz-r`J zqri?|huuk1V_1IwBhWdvQOa3)9D(>TbQGW?lQ=s5A(W-WZ0D{TqbTuiP^!%+qTG8` zetd&CCBmaI!`Dh-H=#_Dgk()d>b`Hygm!ue%4nj{nDuG~dug}pnTg}i2)p55zhIRdc5<>y( z({mU~u}k>fu3-;z&Rt$5R+7>d&_O!-+8^lphgI-c#3b1d_r~m{H}Z--k#=wm%WgR~ z1BfEs#EQwFWcK1lJ_}iEb%3i#KpQr5MJy&U(1x|!4Zy`tyoHeP8(i69&x32#Pdz|>0BLwW}zZ3FQ$7^OTd z2~(Ei;#k8$TEH9STe)4pan@^Kj1SIEo_6&>D(sHf*rWh15i(LZe0`eLSutchTu7G@tDtdG?M`?o4-S4Z3bt zps7zB8TNi@#T(UaOR@K%G{gj8S7?bXl{@5O;{_yT{(12G>CA~ps0g}`jy<<_A7J9y zV;sAnC9c9lm_C1U=m~CP=U(vd_KX*A!IndB#c19ifBW~JxMR5iQt~GCm_Sl8-#q$l zqkVtPCz@z|(E<@VQxfMTPV;bDgjcCm9>GYy_aOVs90I-qeyweFi4h1PbMer|V&!m5i#(vd5e*;C`l8 zJgR$ouvRA0Y(ew50(4rPs=%4VN$L$mM^VhC}#QWr9mvaGP+=5 zPQhJI=LDXibsFy~KTy@{s-q0p$g(I#Lb;iEJDaljGMMVIlsLjJ*X64hEotcop%Kew z*JfTS+v+KUca3V|Exio2mPb;Nj~*|OFDN@1K9Y1;Vbs%!7l-r-_;?L@x|2_Oar$si z3y4~B?~baFG9XPj=T(txisz3$>wl%4G;t+rk**(dYEeA?*ZfxJ-ocXFKCiiCK-PZp z7R^Ocd5;Pu>k~OY=l)zyn(C?-RPHhFr#4av&BI$%awhkEr}E-m()FfPP#KJYwl2;; zT(%n~k=sx?|$y4hY_x(7g!D zsYHf-cXC+G{wx$0pTKRaaRSI$w(+l<4aK<6{xG(HqY53$dQW6$Q>HDVaXJKXcQ zyet5(`-UFN$es8-a>7n~j~;gT8vRFhEIXYK-o}<k6(*HO_T4%#Pd&@euTPuA~9c_2dJh6~WD4+P&PVcd$Ui z|4J3N+}#A%m@ue8ROh!cDy)bQ*bu+)lXN#LwKqcwR(`=2zY_}Rj><`V>pi(Mvm1$; z-Gk;1e(3=p>OWcDVj@x}fC&Gf;Rk}nGm_5hR2p35V)uvUwo6im?|o7Yx0Wt^_kVkN z{Y(ng1?0MIdznEcoGPhwvFFSTSx&)NnyKjPD(&Siu?{ivZLOmlbgUwvBw(Ln%`KK| zjUd<;WLh9Ch93q+dUwi6pycse;d-_}0DgjUMNO6r8DpPdhN`?9~({s2>zjST}@MFn3 zMwbhjrweZE-Y}^iD|4L_{hE?$cDVFlc;j%%5_!okFgY$oS4N%?qRbXlQWx5dQnZ1Q z_qSTvH<0mQ!tZDQk}BIRefRvPN9iYDZG3$rt`0(qQ4Bw>k>i!t`_fcb zl=*T2-=|GITCy#t&J94Oi5W|F;FiwPflp1+NQ3_uKg!W5Pso7j=O}cEqCz&8is#>+ zX04N{cTUNZihhWU^5`XtGhlWMkT7#MoYHXw+23|7MvsmP%1qBevCc z~2gbJ7`TxUp&F{a~?b~`E!3;V; zZERj66E}KV&uL`uB{TQ@cuD2z=)O73wwD z{hKs=wyo*eVfXs#L#qG05d*Y8BeavhXAP7ODxNdv>oW?41A1L&mj-px zfU0~8^hh=f<1V{`Kq&dk$n)lTN!ckFeBJ!b*t;_YE-;&`Xi0WB`wUaSE8^J{kLS0+ z4%5j0hDK~6ly)C*E`x#7((BADENl{EAH0>w7XpBJY>XZ@|APnRhT$@?vLC*TAnshO}$^fgj3dw#4TBGt4n<`^`rkJXoFQa-xY1Q z$Gu)eJKyNPC&;uzk0AbpD^ zIf|f?4!a;8QiY!6+5Pymosg>R3g*Wtib#q#j1L`tN=LzZ1*_+j!7=01xdp_!`8Cgp z{1a}rU>M@`5S|7l3@+B>${~ghEPY>!MQa_@HUVB25rz$6`Wmp>GL+z_89A}F z!VQpyq~La;wnQ*7t+9&XyfA9hwhr&spu` zqO>VYp2Y1)OH?p~e&*fu`v9tvWZ@wK+P{Xx!3{u@;e>CYcfEi({B==!HVOjOSztrm ztr#z@%K3td3gOH*2IqpoN|v;CTW~%uge97CSgzK7q`Ri`7R0Z9ZXaRU={4>+%Qj>n z;i3Q5_JO)r`o5J#vm#A6wwiEQ#W>sxoChcnS{F*TBzrg7lc+5U5Y8IlTtx~fqzZ@v z-vR!f`$1vvJbe>lG|8pKWPp89s(G7U@3&YU%GsBZRlX&fvziy2oH9)+S$1ObeR)~vwlN0w11WfKZRLb* zwzLk+B;RA=H!G?#Pu({;J_ELal=VX1(>xvb$k+gz*E!LtgwZlntil1+`S{i+pLor` z7-53BwjkT1U{vlHbVAPK(Tzl;lfw~iaurF3H9hkNkcM*VQ!j(F@F$ZK?Za`!DXfxE z;mKE{E{;`^YsfVM64t{nWoX!RL)bOIPaO2~XwvxTO^FHh64LSh@u_7RZ||f?cJyyd#dnHmTW<;qI&YR#@PN!x4oONV3@$s%YhJf(k0ByAsI&(`fp<5^yOAT zXEhs(K+vW`846AGevo{p*Fs+0UO*S7K8l6XoPdoGs-%%eK=lC6(2lt+M@}ISCS`ma zjrk!j3($_kL$2K7Puz7O085tUk^Me!xqoR|BCA`5n#uIg#Rt`)H+5q&&vpzkjdYEL zxF?!_NJOdr?~Oa|X%CXz^oNKrv1vSwG!RljowPyoF^Z7mblC*C3-1a}FJ;D&|X7#-}+FnicY-bdBG zGi>w>)ZBkDKhthsnN$pXA(41GVrwG3Ff)!<$v07AoEsScevcCO`+54afY*i96#O6J zP_m^imHzt$8+3NKf4JV<`~ScBSG;)?wk!oVBK*B1l0Cbc7hh;uh>Xh6solvjfo&Tf)^lNKbgFFDcz)@9=VFbUX1)g%LRUphlXJ_d*YRE?!k^? zyT+CqS0$McXhf#Xh^{Q1R13kDqvZalnEJ(li~I2Mi=wkyxOVy#kG5B#k$RYG75<7< zi@9rcU75U z=U?tT<5(s2V`DLC|M^5GSKs&=7q0oM`6HPlVyU^1Z&in?3z*G_NqvP zWIl^>E2~Ky2`?#rEn2*61(3Aj;&wP7XKh#?>&iyl7To#Vd0HvbJ2DPG`-N4kW z%xN(*(}Z$aS1{<~9M!HD-5TIk7nZCNsWC0G_q7i!yv(R4$NjOwTLc6~;}y;~putZJ z+D0q^@2B9(1Bo`aa5PHX;vy-xSUW=ZvE6g(B&ucsk?#|`Q}y`MGh)yADxv(+ za3}%9x^(+gl8sPMWOme09}qd0E9V&o77$cw1#Z++`@_iYat{ZPM?y(l%KjhJ#KDR{o9xoP^Di(UT2O&D zVHlh*IQ7ih!f??C=f{94dgEW@LINaE?k7&58da=(tdxjnx`)E9R8~+dfLZXRU#|*} zd67@S*OaB#?_dYLGW!*Eg03dRvTu$GD)>XX!3JElIm0D_3KbQ4u%ecJ77@ zW4P2n^?lkv;080~cot+t6-yH_QY%|`9-3f&Bs+Fu}?g&|Y&eR;FPWHo*(eL_nMY%xYw zd3h7v>RO80*Gb@!tBm$c4H9#|_haT(XJd4wphJl)NHwsK~Nuk{x z#1S`@a--hM*zn}?ox1^4UtJ&0(%P#9o%#svq?(V=#14vhHQ765Z0a0qnlGT>L2r&_ z=!+u|VV%M5vkfnSq$Z;H2CUyh)ED|TYCBTRMjT`mEoey{r>Sp^AlPhEe4$<{DCB{0 z5u?h%jHLlCFsj$~VDPF0rbwV~0?o<5_#;XL_0-o#5nyd2i58=VxEjHr*@<+RA^tWL z&OOH!s$)|B_?|$z5us@TMf*hv69a~&ijYFbCv}npv$NBD)QyOm(Ey&X*1EXsde12d)HH9)yPobwV>5UI~{RS^oYoG5$MGl=KObg3{vrKCB zS@wMP_O&g-$H%Fm5R%mEn9sO>V(EyPiP+G-izjyFg%iA_6&O%`8E244K^Ga3v(W0< zgOA-l+XMhEf}i`phf7iE8rXw4mHMm`2*=QXMO;-v_3vr*6=~4um$e0h&G+jKq&`~y zx7P9F{!6Uk4=UF2YY>mzgXpOt#NC4F>gzI`C9A1eF|jl76xH|9rNZbaSB2eRLJFASC@vyT^!3W} zu`=9td&HMqrx~>NB#s;8=|~wAz;eGXuExS9O|ga<$u<6*9Bz0lpI1wJ2gAeZZv%+D zFjwH{68^?oRLOj%d4Xrc$vZl5)wXmPp2gCl_!MT8X3zX*MJyn@d2aW zb4O;7QR<2neLNE%-|13wb&EU~nzUE%-^Gw2$7(U{`H%K&1#nNwTsv7Y7^!x=qcl4?so^yWny`C zU3B;^BZV#(MT5LG5@Ba{KnU;=_*OC*g;`JEItK*(`FMHWBSE@=n1#PKr5xo3-k~YW zPI@0s?2Om;g;Ty&mSwWo@_GAFJ*Ce&(lhJo)`QrUTuZNr&u9jkLK z)`4r{c{EEDs5~BowCC;36vALGhzJde8WdS5@xd8s&PUX zPJ{Y_A^7L2@d=dDMj_b$swOuHi2xP()ns6Moo$#YvL<8Z%*Pl*iD0dVG+t~p;U@DJ zm+GZpp^ds53;mf;UFOtHI_TgECciLyA32u3th&?3aAu}-G!LCO`sWz>L`MTgq@lWX z+q?A1+aT3Y8^$A`6cft|@@A=9={{R;iZ2O~Nl~Ilf!arUGtT`DEB2~$r!ThCWI5m9 zrYYK>K}msiAj!{UR@8tTLmf*NpY|y7D+KZuA`a;>gZamW$t%*>Df@z?O{j~B7l%aC zqgzfPg3{1RfsZ6oSW{$h6kHxIscJKmA%^0OaEuqLN!UdViZ#DqefVMqBzwYV_tQz> zIN+NfFJuJ)$jnEgL{`*J%StF0jBXNZOnq7V1aA{H)Mj@9ju8}w-f&TuBZfEgQ$BoE zHrBSJ^2_iQsApyRc_9B=3oDGwbdDMC-P91~D9i1{r?=}>p^Z-(g~>w9$Puc0s~%`6 zW=2BRH0c-y{GPbt$wMA$)jkK5g@~RfVUA{PjXRS z3A3UkxIT~=|MaQ32VUX^Yx!>dJ^EMXJWIn#J!|N`Yx9iaX07vmio#i_!Mt4!p z#|C;5!CRBoaVK=9(Lv}y4@$%AXmlTKdwt2HuRtPvZFG{AvdNhMGrC@BE9hbTDS5( z^(s-VE{kweSGX8nSY~($YUOXVgeX}~_j}4^GseaWp58$hgw4Ypk^a++A#~i>(+?=k<-cYMU`F-?763aKQyNzR`%9U%^L!-k!7dnT*$dcUx*Vab ztHDj5BioCsy%WnDEV)NC4hBV|YO&y}xbE?im>SJ@lJtb(#xDUgp!0p(MF+|?!C|yB zh!^5sJ@;q$6VYl~8^b!9Gz9x9h}h`y#IL;DK>&SMNY_5Ix08`E`jQ9YQ8~W?bxoeq zBhvAQK<=xCrk|}4yS})uY^lg)W=)1JiYU=hX+EAmGzqSI=Z6mXD+9QkREdMe?p9Er zO2nUGs6eK}G^35G`;zd9*T-a|okPKS`4cP;-Q%T4C%x)ws#kPi7uC*idNvf2) ztvyBG@keS(ZtRuX&-vw^hucn<$qu6Bh9$-~pwx-3WxGv1rabbi~1)c(KWOX?b8jMtwj=gbP0?6&YkpG8)t9W(BZZq>Y zcpaDNF_P{RTF%_Re|f?)DD&%3*{ioX)X0#9=-3MNNQTs-qzwNWU{_9 zuV_=bq(aun#{`#;hpGN{98NXnH?v5rJc9w(!Wz^6?+`nxk6o1tN8TL4^uzE0ERIT- zDBz!iT+rwk(J{*P4p5R~1qPWqr4T=;U`M)p5|d4D?9G zB}Q4pELxz%1V0KYhASlIc(89^UU7((_Br~-h9}}XjsiUy{vNcxS=I_sUPCC z{D_(iy?`u~tDpoZ0FFm0m9YV>E03$TJg44RQ-{cY{=&33UeqKHDJ8k!9=v!oB8qcS z!?n+d;a>>EKEvRVJ6zKi67d>pgDcJd2Qkg~Zk*}81zJ;y6sa&hkP)>&WcpC>_Q4d# z8>OWF6)r0I`P}yGW^28FeMaQ2gt@-|za6!ZefA#iJv3fD?{qq}a}3j2-p$h!zmu(* z-wg6{S;G5BBRA1{c z-iiHvSbFhA#4tG{38!G3R2#Ldwn-BMZUzPyK)@ZsSF^&_giQ-5$jh4Q{5m7Ygw}tf zSuSds(hQ#nw)e#hRxuz!&d8PIWExa&W1b8ajt{li@Xs&JyLG8J#PVqm9E(BbR-D|G zN5#+^;vQZ6z>f&3U9#HVXM{JTVIYa~JPd&5Qhm)+FP3bpvqJW{U<-YOVlF&|@MdXL zSbee4ENO%Km00J))1)4xTu;`{=S+aWA-hXXzqfg&c{J!g)(SjtuJWMXP2ggLfL~eQ zKhX!Qxe~+#{($fmxHNI_-6PizR*+4q7gD9=i>a+xOh~>xQvny0A|}BPZKF)c#uJR) zESAUi+mCYIS#@+}>a;#D|He6aaT}inpbQf_Wfzwlal(sK>u>N6Mrz=aeR%0Xy>WV{ z14QrHh%y6Beia;yOtoD`MnVJmGQovU0P{cb4(s?u`eR*HL=c>Y6q+UelHTzT2u7GgafH)9)G@72 z?*jc?n?m`FuYor60Hx8te(pvCwn)HQ8%1EuZ{mg5uPW@di|CPOkCr2*_)73z&82~p z+}Pb~%qF#PPC9FSiAz3+ZF1x-Dt`u(GEYx|L9ij&BQKUw#4JdJ4aL^Z8Bx#RVbV}x zO;o_v2)paHT@UthKU@Re8Y2}7AVlzC9kZtFJ~B)-7r?K8?BMv?5V3aY0dPb!>pPav zfm{Kt+8Z1AjJ9&-hQ3V*5J<;SzvgtFO*{>hK(p7VY7+b568RPDk!)fD66$91c%F!pF@Bc{sT(l8=v9OmxdbY#LgRG z(|*&7X?hpNrv3V<@fbF%YB{4{JZEvrDBc-t*;KjZ3G0Pip1moQW({g{ZvZr%Qtdn% zCInz~7{P!r)Ha3_$VhfAxEM`(*!MmXONvD-kfTu*!iHrG;X|Nyb~; zD{&#-&zJ;w@f|U!tK8`YW}0$=aI7RTD|hCal6PFwS$NF&@oB1B*nwWk zT5H2@CTUvK^?)4yPzm0*YLq{&sMd$$B(EOiU+^(~E*L;C5a*?w`whH8M@* z@9<@vSj@Ljy!$Rg?2)jl^LX!7E5f|`%HbkQ(QWKX*eQD(-|MFV3WKgUqTD6N$Y3mw z9ms67+M7z#0=aUSg@q9okx~s&swKh~_d<7trUZZ!OfT^x`!x~-sp$7c3wDD|GRL5Z zfiD@r$4Un=SWQU<0)#MkE5C=tCC{;8C9byDk(Ut_n^A(@KKnuavY#qusa8eD>7=vp z><;UXRC-^bnfyBu!&!o&P+@oqk;g?D5apBDHMHF(ko>1hZW&EU57Fha=eQmdHv-1{ z`{%utvdlP_hGQw@flb%lR{eN{&nOSJg4QJCc!c5%4x0qtD+{`=W=EkMpHg9?OIt?p4T-Ni$> zj_obzQTN3}vTAD#2T?L0;Co@6Y5#6SuGmYS0VP?BM{KghmmgoPshj;M zKH2{saX&9n1P>DvO9eiu4aia^MhFqar9tU^vsS=BPI2mb9|48n1ws&t@D<*GL32a+ z7zbjvc5PU;#NOg2w-9cC9_G6b7AKj}w&KbPY^Yk$2RD)^}KU zyV($};uVr+1NVyfEEK`!toD^~K|hIgPD@J!T4BO8U|i)06qr{fj$+y ziS$J^D9^`?{m3O?lH-$gNY&O{yTrM8ty>dtOLiNH|=@5?&Z(#guIMJq-9J?v}koOz+&${Dw%}6`~y5OHekAud! z_sFYkj5-q{l5ZYA=Tc@K`216Fdei+9-h!F^1S#L$gKXphuW6O&)>w#%HvxFwJe{oekr!=S4}gBkw0z7Vl|3R=Fao=S& zyS>$JnILmIcUvsf`#fr%H5`B_bMGM?b(w^Xsld=KN`3L+OaE_IONd~S*O5}_yZvky zp5n*?pwbof&nd%8;M&>9y0G?pp_Pt|R>gCf{HOAAj+*m`c0O@@wZ8D;R>Oh3<<{e+ zx9yq#{j=(9FsuF#*E zm#twAWy*({{lH)~x=}`F;}6L{@4zO2n_pkl)yHcjYLlSCu-p@}<*_>}kvt~=UG&XQ zxvJ$BTIh9hX<{7>x-*5Y1r+b zv~N#4pqUZ`;$1B*bCh18`FI85OXE0kTH}Kvbt2h?)$R-Y+}*8-D|;s~&jMG<=m8T0 z(v6@B1hi$fls8U#sIIdRSp@QeE6u583=wZlUwF+v;B(E21-)><{FA(Fn}M^wbE1$) ztB7`1C)9;M4LISTA#n=zs}I)Dz9i7tKMhE9#j-1-3Bm7g=wP((1+T@pOQUmVrDNln z144!$m(`mU_?`3uI$NWoxf#vlFXo4sT!vTzo)n5t7q?k$H*uH!wYcZ^?p^)_y{dN% z(?fv&_abf45`q%j=uOftE+dV3JWDF72mFhU_i5MC_Xhxy!#6{!-8on<=l&M;NeUd{ zj^QF#F*^SM%NrB^mMzANMYUa`ZFMqtc5H4R^Ds)aBM)9U#{pR|}1a*DoNodw%p=p6O0i&b5BPs$; zQt+t!!9g_dC#S4q?}a6`4~O16&nHZf8R2BTr>n%Qx8Vf^~n^z+b za|b_0*vKFx1`n%r-AWSNWGQ$&KGyN9I6^QOq6x(W6&|&SZ?R0?q zf7e!kEE=u8+a)dAH_7X@?)8zB%~v?L@8sSD^VkHXk- zXT7~>{i8FHjuidf%Z*Ft!4D_VUP>cSReR$$iifStzrT$oP`2xk*6^Le)$?PCKZ8P1 zIpSZMn)K}!?asIpc%u^@>qa~%5F3=zR_*8rRg32jB@my_oSsJ5>f7dlq#0grtjRH0 z7;mFaLo!1tADn%@%rhwG47o5?iii!p44A?1ENjBI0;A@?76sWhWtxFWCONmFN{I^- zF!3bWTeYGFNB5#8^cr`mb2;(&YLD~?Eb;D=U5=`&9F7i z?x4_1a7=DJ#~4emPWTKN4;EUhqvMN3wC62G!_I*-;HKh6d!Li#ZAxpUu?2624;1DE z({s!i$l(m#;Be2UCzR(EL}y4za-&ss+n&?v%Bm62Ehk?i1S@617MnleUO;1n0RScR>(Bi`1>$@7{{9z`lr z=?~O3^f#PQ-b`#VhvP@+*15LNbH7;mn5c6-k>Pd>4;7uIhV5@eBTGIhfJZ7U=eJ}@4OKQw;E5TXF}u4CwV%?DXp(1|l?cn& zg?}r38S9$gd2TI%e{_w*^*fY)XFG7H@5FaymspY25#T2(zB}Ug#GNtWH3^f?GvU6C z9F`k%NMKQlqv}a6M(;jgImWVsEql#GiCjEjhI==D z`X;Y%aE~Rn6mgyESXdwiN^C!#Zk`^jFt%%VkCak1##j!Qvv}N+)TvwJZ!$L6WB0=B zr(kt}&?!oE7DD_p>R_&tqW_gSaY&rA9c7mUFvywsOyhY*S2rCIV1|n$!`xU+Ally2 zx#XA47a0v=!#DiI*i&t1u;n$Sg)7Qoc4y-KAFP|%REagy6aqj(RERAiwY)6Dvy;G{ z+C}M1$#*F)l_x7Kh+Hxd1#mK9dRei)@hb*@CKYp0CLC=WvsU6v)bB=eG8Qu49;w>w znWuJJeIsJz_+K6a8qs@?Byhz|Ey9%#q>^%7rM>rHb7P%iMC1SFpKcMKa_OJ{n+U|_ zoG8 zrfIYe+CdPJa(#}^DGEO&>Q?Q6?>~_Hx$ho~#4OGgTvoEsiV(G?dtw`_9^7zMr$N9B zUpmDtdJI?+4W=WxcDM}dRGcQAPW5oFk_w-5(mZLkdN|Q03`gQDz~J)b2_Cr6k!V7H|bi#sQ6 zvwTWdRqyqxKcShGj}YYw{P&8LF-)W@o!LT#3xQ^LV#R?j*TsHUz(j+t6Y-~9;-b? zbE@k45rU#!{4q|@XxAOi1Mb;z09IY?#n;TvrF&xk*mmP=D0AluXftytu!qc;*UvM7At(CYY66! zO+&M+BeYk}E?GD>ZJIy9gS)`oqu7e{Z={69>?-3PH6v-BaSw7W9lm}L$HSI}8?Bg$ zU0Yk;Soe&sqXa-X5Dtt9L-RF({|VcvrOBMd7eV+=te;a$Eqb|zBK;_vtEzfwp! zvmpiwSGWE-Y5M!|o_A26dIfL-R>fmp3I5gTdQ;B3NMw!D=^)CHn#E!;YAN1N(M=Cu zP)Ci>7+g?Krq=QS>`0XKOXr`s_3FEeB;vT`qL=l&Rr^w^7F6>|SpVN@(<5f;Dgj?? z2ccqzlvBk%d33swzA!v(FGsWRo6GL&&`bAx31_>wo(=K_Qf5;q%>0 zI7OF@BP|EUK;UP3*@HYYt(o0f0YOX}vd!99OKCYd-4rPi=Le0e5t_%e6$=KT?0ua^ z+t&#(AoOrgznjDB2||3&bIR1u=3$lIQJF`%7xz4Inm=Zmj8@m-ZuDWE(#2)|G(;tZ zhDGe@HT>kyJ&~U*S-yUCXD7Ss1osdnnVdWXk{wi9ve&PZozIEe>u(MBup_$dJFQV; zGdiL#a_s5N>H=c)p^f)vMLf4bqHvF|gu}~R68Twt4 zd$@Q+KJ#(;z!|}@J?_m#4$ZdlLvCN@V!Q-~ROWeG`g|^sw99WcZP3GtDC?=gcKq&( zk}QE3R!)C`a)PpWG)=Iu-DUn3(r7Cd9csJm=u66dW}+!l*Ylhdxg+6y-02-;G^%00 z^>*?kuO_Hb(!?~(%5tC;hj&P%YDGXpBI?J@g{}=a&1`Ivc{8|2z*kS?{~d7~ZEkn_ z<@bJ3@8Y7vMn8i*?eHAwkgL<6L*M5(P$S$zq6hATRv!iG_;jc=PM?QG4>Hh>*T7$o zi>Q`Hvf5n4{hdIfmr+29a#kerAsLBGo0+wEqG$R+wa}!Y9?%uK?K@jyk1UFwL^W0W zQ-efVJ%LPM_h*+vB&;opXCw1MIP3%Xs_|1u*Ro~b^f#A69FW4>fulkaz=Qpx!4q`? z93_+R4WnuQ$lnDJzoM&zo~gH^i;U1TNBWzIp~62CVn&c+&>e}6$qNk@rJC9{lZT;= z4e;LD``|$4wdX{JS_3RV$}81E!QZzRvvD|}ay@0~>+R&*2yPtiu3Zcgz+S_c$P}6a zvlwNY=H?108Xvet<++e~l>qNFu1a|G$HYx-F)C<+OClW`vQ>x|9{Tyn7I**(R;0H# zg&Z8GoR&+EKLVI~U^w1X7U-6J%&QNj3k2aW2HX^KQ!uh-}cd0u?o3prZN<0h_00%jNC$cW#NaJwc*N3WRy%C@i7PzT)z zqYzXHPVCfueugg!aO6p^tx;!ERp{5&Nx~QD{vQMM+plE|+P@FiOwh^ujCodAnOR<4 zDw(qU{?D=7(G^zx|3?&~>lP_~#ifeCjNU$(pJ?(@#TUqwbAmiv{hQb+u#=GEU=91l zDtL#vcR7BklfX_JgexWPWomUFl#>Gj=S2+-+VIAl@pb6^;6-5Xcjf*kwJ!)I`^zns z!`BdQj?!&%;FYTH*zi_~l)PNtPaWkMH;_kq#FQc0a%0HF7>WJ1BjuM`J(L2{>0r<( z@27+J%LHyl0W@|aXDtqQ8feXo1?-RYpDV78T{*b03Hu~-1%bp_D}3NwL+4*ki5KcL zA16Znu-wP+F8EULw7P-Fc`Mp$VNcT*%8vKp5+$nV?#gHS_HVvzlBMPwq_3j65LsCA z+s>izizN666jN+7APp|dHdt1^#v_#C?g%gTE^LG1h3)pc?yM}MA; zvp*o0Y!R_Cnv0P&)R+6urGBS@P+~EZ)5+{JdQDnux<=8kmJ5 z9kk05EJqQ9^^U;2$>+!9S9a%CQbh+|+aUG#02@K3t5jwzV=HjsOFCkAmT`r_vs{i- z*tYM0e8YSe>c8XsU|}2WxG_#`CJEK_3Ni^~Ahw$on{PNZ{XbD0Z)h+SIw5J04Bkf8 z7AQ-+a7|gF8z6g5Pi632K^@0YY0IQEhD4N<6Nhq8mU8<0qW7%*Kl`x8aixFAP9cZ5 zPo^ALc|60PCl(Z~sV?%7>2-h$Ov^Z5Par*3OR?G~e#*vku0M`fa<+$}r(sMD$wV_4Jg{|$*9Qz_=*qf+x8bo}nYpt^plPcO z+o0`*3!+K}7n!N)MRoh*HW!bSi!Hi-F7D+V^^90l;0!WD@S_1iEdWvk`Zn!yM1@2H zy~Gdc%u<8~4-0^{a%r6owkSi^JJk5jN8{e=D?){u!$gB5{L`TZ+JL$YP18(mO;k$b z5en0s^@FAxl9!b?g}jpMsfD+2_a%mzXe5m!T;IlMz5xJ|EEpgZxx12+5mivcX^a4Y z8{yNeUF|r7s(ZRCR15Uw()!u*gWZK znfRLXYC7f}ZGEd(fU>*?&Ne3eQU?qVP{jw7v*b%}QgClD=&Z1+9{M^>2CH?tuD4Qb zTRQGAJXq6W?h(1$Bq3&I;W}15j}-)y|LTDu^z>T6-Za!+;8MkBnn?cDz|a%ZGHP?D zV|nBxHw1<3066p{Ywio{7OLylz0UpgL42;04tn}ti=LvUZa18NP5n=M8j_TNBu%%K zie#W?DP#g*Is0X_Y+XQQ&+4EE2mHPJ$PTDQhs1t?xa^6SAaQ`LgKiq;oJ%*sM`iYM9 z2g7s`KA$X`u^mdlpZ#z@uE4Y{z+=E&=vd(BwILc5nJ34kxtyef52*HY?q<+!FHxMW zJjQJ40&kL|(Vk(=W7MFgekB$7k^y9)juv&3q3b{QGRZG<)s;*|b7S{$p8~~!MdR=B zx}(EC&l=QgDu-kbG&c4|y#e!Eo@1xeM~2}r=+>{Yb0jk{jsLp0MC zG3;pmK2OyMrv(Twz&GZbiAWSFAj@f(3K4)Eqtwlmk-JkOS#fAn)b`CDM}{5@aFGunpWB|?rgXz@9hdLj@ zFHl(8x|J@n`vN;m8VJOo)u;0i=($e){x@o?wqj#J;bZVXQNL3VN!@x0dUmvkH@%(W z-ET0?+J4W?jPM|rJv%C+7f-ZY_q_>I_mb?2xv$Mg?NXKEmO|ePYDHys6moS#UamK2 zp&Co6cc>E42>%EnE_0N!JRqx-P;!<)DNcJz`&V3W#YE&Bgq(JA%;b&w`l5x&1!Q4c zwDz;vS_lK!g6~V5eRgs^gBE44d4>e5hUduQx)mXhI!l3q&MKYiG*CH|T+)Ies*gJ- zG zFkQ&9ByAJhxTgy#*>sazlIP$jfLU#hZaYx%f!;_8TsL}l;jVM~qQw+P9IW0C8%sp4Z260)ND&euAAw5fPo$g;^71&{Dk2`lBboCe+>kw4o?J)Yu#tGi2vM^7I6D` zt@B#!%9>VI@||EuiUrfudlVoq<w7E_(iP7#1>+MMZ)oi} zbYF780;n_W;9vM4Pm9=2DmrlW7fR9c4K2Mle)7%n(u79V!1}Q<_p!;Mpyl-w&~qc{ zp`GAABZD>?RvpOYIH+tbkNy4>wNJyFAMJv{!$9$tTnN;X%l;Q{lgYTar2LE0ejCZ7 zFjwuJV6SSZenFFO3Ocoady+Bc+ts(n6alY1P`7YZq#6hOW9f|1Z1Gx9vuQS5He?!> zt+8~wcL>9RePHEzAb$IS8}{~g{%Hlr=ZrBZZfK(@;aK>9Qi4BJDHe&{4XElV;D^Wn z7hidq?mK93-H>}|zSj#z3<*a~B$_5wzhqm~`ZmTedQVT>f4Y*gVK0J8Roo_#st*$; zad2cVoo8v+h9uOVdPr*^=SQ}s$^k+AZZaYX+H(t~?l&Q&T%ghB&X%V2mb|pi1%Ita z5EzWk>$CE-Y2qvd;9m8Ek60dqp?bCT1%-k|%c&NUv7+>ls>^6c3Qk|k1G7$3(8jE~ zc|8622Isq4mIu(cYGtm}0S2>UmSN&WiAf|{d)Os<$>G5{@AV1mE7taXjwSP0I=^Rr zEoN_@$eGqcL}AimMF+-lM-dH`gsjS{YnhP0xR=N}{-SBVEVt5c+IhBGZOn*}XJx^DAGM5569Y@9d#MT_wf zgGQ_eR%p%>3PVTcK-DU$8SJ^K^1>)4aUM7pT$I>H!CLQ`-gqdFB0+k_gj9v}qmU~= z>_G71`RxpW+505V_DZ?~%iO#+$;3-DiED+53mdN2<6{rZ4_8VU{|v7R^QE^i%l6C< z>NUGg<7@}j3q`b&Q>b}2TDt2zGY9|D?0jj%y&N&`R}-{RZ0p8*i1XU*b@M8NHXFE@ z*fO8Ozr#sGdi!*J%yJ?MzWDFADftDs?iH{05ch^$E2z93|0!tmdET&gn5g3JT(pie zz#t2A&Xdv1bc?vA*j)U?u4aWM8!o+XdB76mZbs|S2>(R6>8t>m`ak7v$_Dc50a)O1 z!HGQ~;l9^M^x(okF<$@`5q#IpUy6I#KfzON%lYJ8oZqkwrftFeV9@;s4rXYBpQ9Px z@%yM)3XxeM2DgWcCLc}~^gT2gXKNs_6sS8i`eciyhvgq6e%KZnXVQ46{mVr8pYs6u+MByHr1 zraTx5V5qO!$0nIMgJ&Hmu=Uad^;q<#k3M85XQO1^QKDVIy-iHSRIXcqX; zO;`5{QX)E+Tj3TV1_3Zlzt(VIS;6jqX6hv!D~x6tU3DK}MZzzt+<)n{Y6YgKJHLiX zsJ4k#B>(qfj{0-~X$qWy9l|p~7G?9Slzj4-#50)yB}D~k!f9%@4egEuRdgdnoDQ$* zLUv$GVjUxaB75(ED3vkP0XOQ7gAz3D)>5O?4>=|Da*B1~$eq@#3Z68{F!)?BO&I}M z7u6CkZH*b`0lcGlA;MIG%xSk^cW>Et1|_k*5lanQ4X{%;r9O@Ih+Q3NPfSj*55yKt zbzqR)(Q)BChd}}fDI1H=s?busKtCbhCXSjvzo@|h2+72V+CLfmoz--AqRcv0YJ2XzdP1UDI z97WjOnWmM|c+VUBK(&bxV@>?aVz_oAq^l>cdP=&hS>C;BT5hMN(dBut)0EtaAQN(@QMQ)A$+W9+qZ0@lq5aTowB_|HLRw^L}HSwdhLSHN%sM!G8*Xx1t;T;a!if ztdJa0q-!Ts{?N1hMOcpRD;y&0<8-cDm-JIJ{A}Vbpd1fzYNIK<`5RTuPV^QWF=)p= z6gXMJLDoTT*(@YdlW*bhDHijMHxXOmVfc!UL`(aIQ~G{Mf#>P?cn*CnqF9BYr9^_b z#(R7N|7Ztu>tZA8DJO1;G?^bynUDAFUrJ9>iawMjI;f70v?|PFc)~2wqmcpK zrAZE65u!uoYJ^aT~M=dnvtu4DXQr5j9^)nIHV{xR|Q{A@iX9VNJ!*^Mp2(T zVUS^Hru^t?B?&lADS}U#FQX;#Z7`QE^{V#*MY@e$p0s~QEOzFQ8h8zET#RrdULLg894La*-+re5&nXughQW;$=3RVpbmoBeouFY=n z(#`qiYRG2Lq#2NWumvuEANWpMItHok137CMbt8>0A*X;A^UQ`wOb%YMQb%kRIDlsH zW&dW&3KZb!PM6nUG-f->-yqpF54rE(Rs*fik=7_X@xh>4FIV|)0_7EE5a^09+Sru1 zN>oZQvq6=xbC9*-E;?kSo}&>N??DwCm8OyUBe0^n5X&^C z!H?PYE(1aHBHH8B=N_!S0r5C;-pJO744zp7D;J9t5Go;f)97#HGtq%YFiP90kvv*r zKM%m4@tmd5jV_doqTyD-l(HvQ)a*aSs>dLu+kj0whFo&aH^sH>Z>jOwa$Lrh*-i(< z149pms~aJ9!F8#fTM~t51Ws2YQw0!<)}88xzi1ISy-Ffa$rq|D$q(G53)0k_*Jk8- zhifh<#iSJMFQf4!`z$N^Kq>A)iq#Fl5j$kjK+!P9N?ab)pAZBQV-T)FSaGX z{=?ZNk}CaBAo43+a*yQI@e*uLNqnv3q|<$fYs*aHftmHvvOUB)XNujxQhlgu;)7*4oX0BR4amjSeE2{boaPhyI&7NaDC9>S>c#g1Qa|+M?={oxA*a& z{Cl3>l5DmFQr_>05GOYseWMmSg}_=#gkqZ2gHOC+dua1L$c8Cd5KztP-#vvu+L&}J z$a2WB=)qfnRffm$<5%}egv-D1;&nv=gpY|-Rg@ic2+WVYGF4Z=vt83_6x;;a zbF9Secc?2Zdwy9reE*trfY@R3`>ODe+?I@|<1btO9gZt@$)=G`tdU?h3=1R4e14C{ z(o&TH4GSh+&r^PD(r7*~c!}pFw>^ZTHNA7j9+81=9BUV(-{I5sn@qtw;eMYNh?roTRNs@D zZ^TDBG0o4KN2kaUn~oeTSho=Nu=5&$y3N0ni)|!xfUYuLegXWLny_}>AGVg$yT+jv98+#mc6#i!Qm5hSNXI+P z*Hu*GfvEfk7yOV&3x&$-VDvSlapDxUiCj)Q|2tGppps-%;bx;_#5$l#3&_CisP*Qd z+goLvkpZQuCc_bRpJK zM>D*Dy6%ym(I0~i|TFTBJR zF_>mQ4$lx#Ul_S>!86d|iyq2Np4QJ~7AIBuj>9O1cIdZUveV*@CIR69L`Ch3b91AN zXZ%(OxD`w}G@sJQ-BMJFU?4VyEdf5a1<}>F;BuSC;T|1R%WzYx8FYD{-@s#fI8nZ7 zR`_OY#7$mRrtx|I7GQRp44S`rk(;s(Xt{s=M2AWv`ocTD@a_ejgx)gQ(u%ej8XXvDi z)$(avDfNM*`FtrkMjzus@8`NaZ6C1vnN|Qa!I>^*2$(;O_m+;K(H*&Y7l;{{)l=PKUm>rRPV~fEr9i?8BZZi5uGesn0rSv@*Q4`1z_CP6jF3n z?jFA5m^aO!WvD&M?lsQ3o|J*G7&nhK_~m;L_h)Ob%^>LDGQky73O=6(UNn77kP2Ri@TY*j*OuH z5op7Y6?y*xeusUnmepEQjiG{j%B=wN@Cqk?irLrD0zn81)Cu3wUHg-|kMEDi#Av9l zZhZ{_%i5$=tBI4NvQwfIlC{`~D1&G+#a*ojJdgQTX4C`QoAF=W1iwT$5NCO+!wlI{ zHOc(B@(Wp4cjuI+jQTWY5=>WMg@B2bjQ{pR5dcFU^tr?IeI2Z%BSI2wnqos|4$-gr zQt(T z0x={3_d6(NUoiBEBq|`Z;M!zR%auv0dl&fefSWz>F`%MX8$)8;fZ9H*yP9;8{#KlL zel0+G$By38=cLG$_h9tRYcR`RV8e-Pf}W3V)w?QoCZFzCT-nTs-kJPouCBmTz3!2( zAQ$RDEYBQoPOLCC{@mQ7^^Rs+3kXQZ&Og`CR9??WZg$1aY`|&O5d9czY@`=Rj76;+ zbnKNQI5a|+)gcKA@a{`OF;B--Ly>XEYwZNd(Rg$gRfDp=)$DBz;0EKpR!sKHgOgwL zG4)PLccdDZTJw#PC&>~t0b;%LXOE{4v~&|u)vu7_<4$*14W*?D*;lQ1@B@29ytE9# zHGrctczo^f(zeL%cd>@&@;|TI39kTp`ZTpYQnC}+ooI>RizTcn^F&OJFzU>p01FW1 ze965PwYtyEgLrr3bMd z0Uy*JRO%rO5c@11r?k_`fwA56eS4v^0nbx;*`9gW9YJ}eSX_~bBQeel1F*QS4BNgs zemGN_Z5*PE8XxsUUe+LhI09q27AxnmGF9>j@?-S@VNW14Jg*YjR z$RV@$D*un+@ZZcBCu6s?ABa@@MRy=kcO*)G1d2`TvK7civkG$o%Bw46d-V)zy)td) zCgFv669soJb42-8fsoaR>}%B~^gac3tzHrJF6ip3eIhWhdv+zsL*al_K^@^9&iRy| z1iAh~#s4niW+(P}%Fqrp${hfE-3OOkDD)qgY$F|eW-?>TbTnPk;w^}egDIk|EIA2H zq%Dc0+pSj%PDK#J8dC+OfUJ?btS*|$A_CbsB4P0M$}2+8dplV3;XXKXndo0A=ptg= z4B2qNf^%Y+q~_E@Kz-^UDIUD2Z!fBRv>|(jFC?J#^;5?f(a3a-I zl{A^_a7f`mZMiu9p;WSL%=t3tT`fm)>E_G#(Nn@F^m5LEE^J6w2n;?hvm*IJ2*IV0 z@&oqd=BrP-|JKi~2p1EeLqpWEGP@OeYo(}KVk`Y1jD^DV)PJvVz|F+oZ`5TfZ_^h; zR~^OAE0(cfHrICyTxYIE2Cq@MHI5Ua1&LVW>sqi;RU50*V1r6^CvRHoYL9D4{p18D?+^bsKP<6HgUHy z>(|LSMYKw3oJdv0FKOBlms6a{$h3Zm(+8Z>-V3D+xA(D&Cr%)@Sfe6&vNyCz`f>?Y z_d%(ljHiN6cx~$baa}ect-Vi7p@Vt%7RX0M6yFalC?~mu^A0GXf@?7eHz4H)-RpJ~ z%T|eRvS9RVCwoB`%`TYNFvf<5D?P}$SgMd?Fc3Y~RoJFLcjmSGAM`sLHZ`E%Aua9B zf9_G)C$24M(ewhX{N>l+49Aa6aW7$H_Vau8jx!bXpqvEt|2Bf9W=w=1GPw-j#=+86 zODqjPdz=;j`hEGpmI{cWs(9f8?x+i>S75B}J9po))*<-s-Lqbn_h}xVn~Awfwa@@_Wi2^pbUN| z+^$4qg=c_ouL+;W6)2Nsc;;>YjJ^vOd6Td`vxWz*CMjJyHkXcWR^gQ^b*9A??9K)p z7-9%3qu17RIHQdgAcrEiBOGEJ7u>P-@9YAHI#6pJ^99V6mVd&I8cMoYHMV9aii(D@ zvoC7ayl{Jt8+67)4%8L1W~4nvnw4Sx4V#wrgu9+^^Q|uJej_?0D-~mo9$;UN#d3Jc z8-c2~Z9KJ^jjyB7XYWW@)yTQj&B4I)Ojf{49EL9`-u5dRz3KYVE0MedEj#(UZe;KlMNuyu=MAhrXm=qn|i!>OJ0}}`b zN^X!vn`ks72?Ym=#Lo&6`-}9C*lSycOOadnv_eka35}}HH)S||09#Q<^+;p_KK*(B z^iUPNq+i}z{hRfpC`nBo1(yv?VBF{M0;%ru%zbuaWE(@Q3pZ7Z`+k1@P8~ehlr3a| zz}=s^4f_9EHyYJX%1AbAIG9JHqzlPRfGY-8vqxd*kiLekd6U5v_937X6(&dboybe# z4IdE(PFHHtrt=eF`o{#afW;WwyQ^+ds}6XMTsWE7tLP;l)J}!DWDT3azus6lMqH4> zlKs&o;r>g@q%5S0j4D{KOS!n#ppGZ>V1b*UL^Nk5Qzq2ROB@+;Cz4J=B$gD{Kg_mthW@u6W>I+2QO>%E5$` zx0_*Et;o^h4EZvya=_}^?CS_V@1H|&jc zT#`0tecs}LK~!1)yb-dHgsaIEd_kOGmk;j%p*m%2{vPW+R6!1t&B$j(pnwvVsh`d> z6dlO`El*V}<}M#%foJy1Jv>Sc&DR6{+{8D0$KIGlp2oWZaZ1J{%gG4YC};F(m*>=C6G-p+O)s6$ARB6grnJb9^_-B`GPh78qX%X9Z;hKj@_=&fLYS)*yi& zkICyW<(9BAVFZYJ;wHZr3|{e@{a&fg1a`SbZnl(Zq1vX#vS_U0|2UUW%$=MoREzP- z*%w#0mX=2zH!joWWI6P0*x)8sm8G&OMvMy`5v)^SO$8bp14R!~T=UG-YdcV)Rk)H6 zI2>e)cO;bL>!L9ghPp1)pXE0to3ON6eD2^hWoFPJ_&$PHM;y9jur{etlDjQ6IDu$7 zC0_Pn=ig3MoQ@m&)6}Flw!wQ2Af0}lDHgEs$c0@X&bsXn*nFBQxT71QNc>OvdqhSgXnq|og>U&SkN?ZPhb-J*@|*-8u?bxzc9{jv85q|BmYezGtB38{`Is($ z7d>;PPO}t}(uxHuj5?c|x4G3c^Belgit}%1!*RSY9TRjZZJNR(pW#tyff8lkrARKk zjxA`6)g{;%p_X<^(6+UFaQ`g;zL9sX)8{mb9e_@w9iEjfzNbIJKrmH**852^&spVE zi(~Cvz#dJ#IY5({#RciBl#=MKXK8B-AIw{rx)xfgfyP?z)>&U-~)6msTvU09RY-JUXk-t)@cE@`GVHso$Nu=cP zCNK)V^YU_H`x5pu;+OiehzAj}u>^r9$u6Njj zKa-*qu6)quf2?W$b-d4#j6M83WT1Xe}3`tYbJu+^omm>{V73csw_F@aueKvxm!J zlb>*%EC>L%@2l<0jmEWp`y1UQ4WLuR8{bI^!5gQPphPD(C|LKL^ol;EGGaXbC={2Mu!^IiK_dd;03)!5c{UOKaU0c3MhR6&pE&+#Ft>k3P{ zI*P7&1LA@keDaD7AF&??PoHi`--ihsY~P-P1{_k>32>uk{KS`JTGISGLw^(|!5%bd z)Skf+L6LSkr2TVL)bb42AYefMgj5q#k(dJ0-$LBal~8|(xu92&;(94R|=gpmMOd` zw$4CtEEPkO5z3$FA|84Pl82{1H0;{8!HZ9FpZe2DLKd(sJ`u(#;f&{pgLuP^3$-F9 zp&wkL_)Tc>%z;@p zVNBx?7oXDsxF)xeCMc1CMq&N{zF%2C`BS($>&vNUq?evgGcb-MF^@MoODMIY)sHqB z1|%{oFB_^7=}c6ada7jVhd}zlg`e2n4mRW16;yd2@SLt2)G~Tu+Sbj*qa)gEvpg|q zm#Ss-3Pe!ThW$P?oa=tPP}Yo>H0FW$aR<%EVM2l)(r}=C`L@-|n;T(-^A;*LcEcBv zl~(}w^|Hh7JtWp>4N;AuT@nspzc20>cTYW}s1*ODY*O)W%jgxv za-NDkTUNqSdE;m$C3@Jkw)Nn5m_ixg3-XGnX5IzQ`lQK2s@OnT-$lkZ0hFFoS(x0B z)rF3UfLhy7ZnjH4V399nt2`}yAT)aQetY1Jo8om|^9;of-m(nDA$^%rSzUO&zUqmh z{|8%Sj%Xk-^8`^ELsG*T+rV0t2Z9 zvkZw|QgF_>*-@kr0yTZ}ZejtQzHy|eerUPogdy&7E#qdTuoK35>gKI)QP%nfarGIS zkx^v>dh^8_t%HQ9y3EOya7TCoK~G$+g%J0aNtStCr)6i*gsltqDMe>f9P2k>FLWKNkicQSW{j2r%U$c8r(6^0R}lMe zRr<^+WJ=NnGGk=e;O1FmG!60jE<}`PDs)%zY|-2hZL8Ci z@p_cedib3GtF{c%F-3n_r}q=}BH;-#7zmdH(KD5tvS$1rH?X~-wLVTmKCX(9fG`o_ zJ6}4DwUj1JBimGEwu|426dyL%ecF2oxmd%-cdkDZJ)J7L5Mt&DY50LSGEaN37;!z6 z%pSo@&nN|cHh-f{eV2?Rbg@1_n_^nDQh=hogs6DlYv+k6$0J4!Cr|07@*fEn)EKdlpL~8Q4w@IbG+xB`FD|wLu#f$~ zjRATXO7Gpkd2F6r?3HMq_UMm;y51@ZQSq10>hOWWo+Xz0n+!q#3pTJ9OFESY}z(jSVp@Lz>AlOoK20#cb=`!=&hABOKoLy>(DisX^YUnCM`Ico{jP}%> zIPDvFT&p&<0V)s;AoI=tH%rik`S$Zu1-NKR9y4gy4p?3+IDirkCrs*Fb_@Qb(k%&cTq| ziIb`o20&`)eCt9R`}*6q#R(#}U;y>^>W)Rt~A1%YrfO{9^3BK`uBP70yA#ST`PkK8?D%uuVq{vdU2zU zZ0h^|vOiYd?Q8ZT@2%ecBUVY)@{&sLV2^llkgP%JYP_h@wH2A!JVF_(87DI zKI$@tb%bvqGiwd=kLsu^_!WIk=27buOR-&M8DbQSQzv=xAt(RS*;J)cpGv~;*W?ka zyJw@P`nbsAFW^NAa8mBTDG;MU3mdxJ;${eBlr{>m*uHXOVHt39RS{)%aEq!Q_aZ#? zmtqc>jx(E1Re`RO?-Wz!5hsEkEzIt)oa?nN(G=4j6{yojd% zNBr`$>^5iCCk94psxONgUJ{=V5jL0roY`DaoGZ9j-Nwsh4OCzwi7Ssry$OpU+&>jg zI~eK_k*uMFtY(K`(CR~_&P{Q>xjBX?h~z8kC=ig=I00@=>8&qCAYwhMv-0qReHVyE zx1Lz!LYHf1AHu$evC%D3bbj;X#sPh{l35%8Wl;MSD1e9s>FdKG+bbrG40k*pJc{ly zL9V$`MTJ&@Fo-42B!6u$SQFC8?-e1(ASrRV|G;naGr$U?ibmn(CY!&$BI{HF%`LLK z2v-JTWDOU;?k~+^lC>dlm7f671fV=DNT!4seyO%(LyJL8b9g6r*HX69&!PvBmSU-P-=yo^ldM`sf?cg2h{%avnz6N?yJ0==TH ze~~lAX*KZ<(Tb_qsH(VvrZ?r@KJouEp_vlYBovFd0tifxs*0Efrn90Tvwt9R;EY401Xo@d<&05DviTW1v^JCaPCwV-0mvl)7TdAk2ah5B4_=5oOw>GUTez#h+{4<5t# zD_6`%1yNqTs6yiZJ|Fb>10aN%-cSYJ9osVkqBcOg8qHfKXFi{kzngEWhg;;aaUYNt zkJ|xh5FHxP0G%Pt{9`I)wUG;S8~Tvf4s@?gT(?wBZ^uc1$ipNp(agG1xBr&Csue35|IJ2%2V0$&BX~Nn8|bsB(EAyV1nJ=);#Lw+PHH-UokZ; z7BdgO`-lX2kV}e`V@)*VoG(q|i?1LpDv$f8>VdVEms zN|Ci6_@QvWZ=ySK<_=ZTA%eDR4dvM)tNKN~qp~}ksTzpR1RE)iF+t_Ykk=<&TQcFB zX1t3!SQ9qYJW~n#;H$m>d<)svfYIMpyEL}HlkuU_?TXMcND=<{ADK#}5dT+Faq^cHVd6D$4S^FJX2m_(SA^Zyt z3uwu|Y-O8De3@h0TY>QDU`wsK3Iuu2s21g-useqsr21VeEo*)DMmcU}!0hBBYTi{= zr^*5-t=zW}>_H8<8Km^PRAZ$b$DKj7jnuTIT0x%n5Zr_&UB_sP-}NXb({*E|Ei{6r zF@2H^g6Ph=QW63d_q=ueRT6{HqP_xw&!bmMrb+&YzNj~U+FN#ZEuN1cVGlT_QAS2? zZKC=xdMz>I?xB>HVAoCzv5M{ILhXIf%pYn-v(Zi1IHx7#CBrV{Y9c}{W3>bew(9QPs3n;r3oj@ z*2C+LhJ@E@jHM=Bwj5RGo%_L%40w&R{_TQ1OAdEo56b5eHJm2SLi$mzjtEXU{euiY z4%h1QGQ6T0Ur`b=Ml{C0J>CUU!Wsj{sv7O>oP3;_myLTIYunq-n)cVsH2ptC5;&A) zw24B|HC$j?YZCf=FMf~}mPzah`48$l4EQhY&nVZVCvKp|yAp(rJ-`3Hitlb2QK63R z)RwH>ogI>TsfsrhfXovzD?@iPE@I3IUZ5z7Mtj|Z7i?*rEs#@<6_ca@({L&qQ+6kc zy~7o=KvO1Fhx^fxmqq+<=B>b;jBl&bs!j&zUUxW-O$YJw3fr601#)y+vnzuxV)>%) z8sT12&lS>?)EP`SI8MB>drQw_m-6Q4cEFJj4#=dg!UB!?X=tNMtlJK4-?l;aT#>5+ zChmLhJ%;xUmN!;$BL&m4X3joG{I?uFxbA*Iy$ zaz%LhvsYAt3L{wi5_0DNI^-4w`k#nY-(~v^cVH!>#5Ohff`0}u0{JGjJ`HAu{af)u zE{i}@HlflwV+(iHhWcXczIHp01*(}V`SC=OG-`6Ujh1@<1b>I?tU1zy8#g~rwd z8D4n0wQ`3hzD|FRU1dyv@it{*0&z+Gs;}WiRdObkjTH@Zo>Lni~>688M+n+jY5YZD+J`E|UullK5xSc6?

7*hnj6CSS$WkaN4hh)bkwY*@t7jf>8aBFk_?o1St zcm%1C#H9IXI7_kx1pgojxtk|;y}-*`*fViw=yER>^dXA?{ zjT&y3mZI!x=lS@RpK!DI(DM2@B!Y$QaxsP`7$j|OF55*(3-~uVTLrDe2x$UeJV#To z*r`+5K|l0cFbnABhySjTOotA{1#)$p=Xn3DhkK>feO;eiET zeop0jIog>ct@d3l@i}g!ej(Y;#3k^?-`Flqw7M*@Sq?4HY{JT{6NHYAUibHlM}83h z_{OWa^YK33OjOQ34dk?Xhg^w6fglX#aX%-xiY-Qy{U5rPUV0}WK+LWCET*48OHtOj~|K?Z9WVKU@jr5)di_= z9wXNAo!W-u5*Llk01X_I60Pm7RStFtWr~gY2!uJx4$xS9ATGSL&5>*dy~)i1dhh}F z1hZR+BEBtSTuPPJsXzK$;`r5zM%jK-scF{CU!KHL8$As5g9MPT=A5v36lnvYlY_jh z*0zbG%(UF$Srt|bce$6`leOQl1;I}lo20r%aiAs^CQ0-8U)Gwm7W8pbY1Ng;X=Ri% ziZvO8s?`_ItL6(lE|RXtF(l<+v*&qcf%J)6 zCdlR3EIK5RVEZqKp50|UY1ME?o`@G|WYovaeyqm%)89rL@)N4JB(*FqPOU-kz8^O& zG!yGL)5+h0cvW(!+e@tXtk;XBa8*K(K{}Cku^gtLZ(f@o9H`~nO+u|nTtao$Qr!OA zJW_6y(~;?}_$+K8w71Iy$PbIsbqI(s|5{I~k-LUT=Mf9yIIP$5{P>~B-Ny^so%HQS z2?)cpmd1W+mJzH98(jF$dM`F1&*QO%lj8-3LZ;V@sQFv;#=$|8NkC2Jb&^E$s=Z zkZ1d`$@Vcs>Rx%E+Kqd%{iTi=#@^_md`H|RfXFX58Q|T5{xP8M_5ZJxKVX%+Kcw26 zy_q2tUsC#5Lm2x}yoSapJ9LAx@`#v7-*DzJj=?K`pw{iT$^Mq=iP4+jydicVSzJ_& z8CJsCD~;~j778wAM9My7N9>EUkt%4Nui{4Cg?}pEXozo>AXHq}6*p1pnpK0_a+4BOA$d6j+X#2D!((BIyY2F6*CNn&YN ztH-V8D)egYC$J+CM=md!ra#QT;o#=UD#wQ#p^O;(7z{NAj|)N6+j@v`V7CMO8~&=ph$jo5)23NhMd1;U{GgS&&{QSf4 zE%I%EZ;90;i;mxtyHM$3%xTw`9AnoH1cmmX5Rh=hF`wmD zYwSe%*Zgt3QTVklX5rzacUQ}xhX__^;`&9pV>H4P_rzQXa zHwM?X9yHt&grQ)+8?=Xbm5Euxb5DUI1K;qZ=88B`P9$k;`Pv`K9aS zZn;e8Tjd|N^o>=TGdobY_#ilLc!Am@6VQEyunT2tC0yxA%|;i2DS}9}4q7m!_7TuhE=~M~}=LZ&UrtV)*B*mGP zlH5O1QpN>7u3bqQ-28MxFH9tA!Ige*rKJJmm$R4UN10g|zIoLAxO|BiO+z7BVe*o6 zSm44oj9|EeeQ`eQE|wl=!Iuu>CE48MJi@3DrK!rNcIFm`0gKbw_jiIHDs87>IZ&-i zosyD6aV6}Zi?@%)fI~h@%$GemTmbWoI`84QAPP1|Sw9f}$) zS6p zcQxP-r!^YWZW8RhP)8B7PVU%5QfXNj>-#c+2mtZ|*q!C@jofh#q;1HW$7gnxDI_{= zGH?vh$-9U9w)sv4yvE9_ixY6NwJgv1?ESWo_*3!TR z7_H~w9QPEgNWWM!8l;)>yYR`plu8|_C?TY!9&9b^kvsZ72(v&AFyW;7tW z8~={i7Y;n$6c`q(np?B^aT@_o2MG;ERPCE#|6Txg*7nxAnLpC`ksDe3QTMp9nqdFcSnF7@HM4O@8QA661*20Vr32o(4gQO1v^jL9Zm7 z2>lJ-(NnDM?Tklc6a^qI!6EZg^Cv&D^9RON(mw(l>K& zv&}+v28pCcYgsi+&Zx{_31&OAWRTqh+e$75Q$8iF-sGN6zBffilP&Kc ziY~$zVHA=I>B~;kSm^pm62#ATXwoP}M7+&MwB3bKPZt{>fSo!Qq9c%xEjs8a(z`W{ zZ0OPdT9hD{9&2;cxVQf(ufcLWWKB&oW65 zsBN<__lIj3b6xT{TapobSW+!oS45lU{pN)GZYPovqy)Vx-L@i18CX4PH=a3%AQ0ds zRT^hrCjZbUcBW-UWx7=?8Er&8nayvxVtw`m%>Rc0pZD10AzMH&xFApJ;?WXQrGK0& z^$T)kA#Hi5ac+`L_i5`aahcRljcJUT>1+jB>LK1j{&+l2V8|+{a|IOPMFnvfheR7- z9Xw#(Uq}1u;GB;K<^c;zPJ9y1!I7;Kgk7lB>*a0x16c#sHq5MDg+(`ufdl|n`Y`39 znA%5^tcCw87&OvZ5{(0zKZiZNwWxyP%tQ%ibXB=W;`U%N`{n5>FIiQ1SXBwUZ8u<= z8Cj6aR>JVJ7Szc+_lg16CbO~9PlPKZOWBKUG=I_FhGf!1#M%%_DTC=4taMs_LGK!T zptxJv4(X5Xx3`w(A?7#ZJMV`XA)<|7!gG5@d&2npLjv;Ua)2W>rL>Q?cU%ye53ktP zAF4+c^Ve%Vgwz*6(^TBTto3L&zWQ~{5L!OQ8iiNOz13nQyWA8g?QC$Bs8TLKLQveJ zKyZ3~2L7|*EMq6!g8bvQiSzl?tKODke!}Vm^<`lc)h&?|mLk#zZF9Bc1cZ}iHbaLX z$&ywXvW(C=K&Kdj^Du1dHWckQ^Tl-U_o|uKpuqGGlLTTDo@^kI?jM&vKG@=)O9oTk zyPF*dEQB3(2E{god15R2HA`qyh*};exTxg21iwY~4AGii7^yMTxd^=L`emOM1C zo&{SwUa7o;a=OT?WqSdOJ_3{~gu~}jMFp@Bq)y3C5z+n%vQSpKC*+ZutS?O_ue^Gw z-vPec`9X2(mTqiAy8*~s<6*kK!NyUi5BsB=zQ4>lVe$0;23$}a?^nouAsoW+MBAvV zkBTFtJv>{Iw1Ye7^>AlhnMip(aq@mk!2*)1FOVI-+)^BQt)nt+CJ%5%iQ0*}AS;6$ zFK6bf@!B?a&xk$U$!rkgk??@2)kgE{zLGMm-5JY( zg#a~MenC({&;JCQH>^;`I%vsI18 z$_y|L>4n4+3?-Xv?h8(6IDirg0caDxeU%=2aM`0q*psGY-GMG*vl}U)`#j^bSFsPA zKJ?qzE)zZ`7ja=jTjP%an|m|@hK0^1M0_+9tT|@dz9ul8opM%#NQ#69an*q|;r{p| z$f77qI>U&EW>dd;Ub&zt3!XU)v+4PmLwNKI*zs&=zyGA%meG8VKw}GT4@BeMDDRI? zD6;hpSm+^*lj3e4cPPq;Is$ZIuYE1#_gI<5mUwe@$YE811^%;FBC`aQE zJ;rq{*lm}@iVNIaOyI1#b_d)oB&`?*U++z~M>l?8>cLOhs}yq+SeRr+5zT+)uCNV? z?D{evGLZc`_(E6VVqpjO_=8YE)xt)XQKaK@VZZllg|1b4jjyUXPs2cMBEdk_eK9oxsgTNw3cFfZkMluyE|Ar)1_7d?z~`yapo+%U_iAhj%PeeEt<-NWb@uIdJLrw1`{$S{ME~9m;mznv9~Be)^8rsCkYsJGTYg8YbXkT z#Y`WOCuyBAE^^Ph?3tBZFf8k3t7f+r1W8m9#_?AAkE3C5b^W&?bRO4T_>j=5 z8J+(gF@kFA62}rQj5R|i9C6u*EV}eZlb_U6K0&%BEZeYaDA5c^n`BQE?Cc0GdDL96 zzS>Gpj=lIuRzD9^k?FU}Tk@(+hP&2m?JqWgnkdbJ9$cu;i8U+s(Ak(x8+%NDM9FZS zwBwQzP==RID_&xTQD2X4UnBrsU}E*CeI7*N&HLB6@mp#J*i^wnZUctJBdPq;c0pV7 zuf&J4D2#HS(K1(@siE1nNNrnc7*_@m4jI6w`>~VznD0f%VWVFYmRB8iu)+^%lgFfj zNz>{iG81+}Vx6_~u1* z7=)=VGllx4XKOfsvOdF@;uGKZo*#2CZvua%<{<$KvQL&Dn5@z7W46J8a@*Pc z(IDJ3m9@6GEP@q|8zBJhM@GDS_xGKeM4=O^?=}kSw1{FiKGeo0*kJ;GKWS4E*uzxqSgM619}yF;)9>(?6MmB};tBxgA8B*!lC#T=x*)@J$T^{tHK9?j*) zWp`V<_Q*j#3r$$etTZkgKOt@KpBWjxh-32SpBL1cJNp|1R%o{lvNEE;e*8Te4kL^{ zIb!N|?qjvO(G+Ix@kb%uOvDt7FO;qIjUSgdUr!wp%cWNeeULgc!WHU3k2dOfWQIcE|3&BU*AsO}Y4(-Tr zoc_sGCS*ZjlQ@I+{VG+n9DaW=j?#mLKt0h-H1jfNO!n3|)Nj@JKqR~u5Bf#N`Aua7 zsIU;OqYNHz22)27zj6fNo}^nsfB)6tToFzMWJ%Xq#hW=x#URc#tL4QFqLe*AN8SSC zd+nk(#9zwgIjgY|Q|3rxKnm;@6N7Z%8+3t{%hoGAuQuk>&149L0p$62Njvhf9Rl!h z2qhc2?AAcUy5G73xKSHayHBfb%oJ{z%GAviu+Ry2hB!nHStlW&0%|wW0#*@^(hIQR zO*0dW1%^lGJU=jULFT{?pove-Rs<{cL5y=Pr=PFkDs5HV_Fml5-zC}B%@&>>3K}WA zCbOAr*H4FBfFF+fm+p1vM-8JT93S!1a=rEfK(NpRE#|wg@3z6%HhhwlTz6D~ z-m@cBTWZJC&kDtWCF18gBOjS^UsUB^-eui~A%*G;w6nXo`kaDr=*BtdI|#c?BH}U- zM259Yy=<|`l&bzE>YFJW@NZ9wnsoPL;1x8FNR*mmYLa7PGvT@Y^u=`KB#Vp4r;!>r;1u3~QG zxCdhl8UxJpe|H=NIpw#)jcNDp2J=L0rGI-nbZ%j64?)pkyjrbkHT@3ibSK{-yTgUf zMfpNs9^L@J2pW{Rt5v2blwC*tk??as{{G}!gHSm+#bMn!}>Zh z32+3iW+fa8RM<}JN?pXG*xb^_FN(A`+06{(?>nBOsFe)~`UduV*9FV)Ip9}_(kr(1Z8owrUB@wloM`=Ml*glr=Eq!IIl8RWhH(dL z|FKZQRZW4y0RAUy=%!|$9x$avw@b?A2g(!mdUWwPH=vFpn{3X0g>*2+z7KBf`9G|C zs4@{M`=&V{2Rgaw^KT8L#Juk9N@73yx#(<3z;+TkPbgH{cb%TmRs2H8!E809HE7eF zI+|^(d@}?I@hi7rYZknfWxxnX`Vns3y^F$-=RZHM8?)~7JOBNp0Ag(od5{hnnI2v% z!5y*;nQ^)-(y`7kkj{Pv`$r}CSDJX}!4i6dRF=iz-cjL6vdo=UNB4@ynD03j&pD_Q zy$=ur7K*A<;`a58^N<#^3=mr&?4g+OglCgO!2!yhj)Qb?AdsV($j3MFFLdAsyYkd_4=bf02gs7p-;Q?x31T?u5AXI~ zI<;7k!*52&4XENQ!ZqlR8FDoPBs0DJ(jaqpQbpM2>7KIfZpMWi3|zN;rnrx|Ia(_4dOyGgpi{`^v0eYMX38vPfCCZV(`7`&Gql?m#>y)?^{*B~ zxSh1rummY=kI8MQ^iWpWg}-tg+jv~b6I#& z=!B8xJK$Yc&M;+KzNN*NTyMSwq&}NgnKQ%9khVHWpj&L^s2*$N;;!M|iJ?-FRg&j@ zc5&ip=G{i&diR-wHk<;QgQhv;yT`Z%F)#UM*(sHap$eoqP}8OCUb$+lv3#AZhtP7g zGkWPh#rYPEazVsmT2!#6Yima)&}uNke%Tz}BHQUYN$vs_~n_^yZe^GljsCz*)#cX(*^0h-4yEi{xPp`&EgRD*iXY+$1^n! z+bB@_2>QZ%%=)sj??R1AVqt$D=|VsHNQci`mY}3!*H?;d z9Lx^?-mLjIrzG5E+phZVsu;LkmhZ2jRDx^A%Ucq43)Oy?Zw3@rW8b;7OLeYpAIM}m z9?xb@U;^Q|8E1%dA~3T3j9WZm)fA%2Dds%(jbVWv)1LJ~8OOg9f{dLylKx|D(?HPG ze}@)<_iParfnuxjCEjSTSaT$s&IzefCXnp=bJ47Php&Tnz(#=0a(-mvqMo?BQPU<2 zLw5aa{|qjmbZy7MC{YlOXi8KT*`uEvY+TOFOqi|a@3I9F0Alx`qB>+iUFjV;Qlp>7 zhU-ruve?Jx54_sdoFCI3{`-blPo(E{^8)kv zzqWH)(0!lyt#0DQ@~-xl-Y)la^tCUpUlO_MvO~;ibaNMr?y43r**gEUz|lngFD5yO zK@D9%<1=)~wd#nkvR)QRQM;~_3G`XYuEPbDP?Ou|m-UCEO|Ojx(YuToX(&MiLCURs$I`P0G!mP_Ru&$daI z^MSM=`SD9D0ID(U-6U$$5ci7;p@t!hAW3PCADAR-$wQogY#ThECx!lPK~V7M^le80 zxj?fKa~xsL*2z~4&ZI=h?b|x#(fRW71 znw~wLXvfMnu8KDCL%#{1MGb}AvgTT3yV_LUP06fm9hG_#Pel(TZ@6o4TC^AilioNy zwg9>y*bYZbyNxnlr%RoiaJrqoBN=(P-Ee4ZJRohCwL@{JMr{bOByjAuM` zY$EPG>N<t zxwuVv+zoysIeSH4&$5B4m*BETx2*Y0I-A`{S@9;|As`9MUw9tBDy;}m2U@N$u{`@k z>083!DWLruLZ<%3lA_Iav(SdfGVy(zRoMS9f1eWca9>t{E_-a4VL;Aljp=7)vqvY= zw5S9|f<*sMgKo9}-<`)I+E^RTtuk24L`XHklS6`r+ID&(KJaZXKeYlE-);JXGhu4L zVCz|3O6gf=Gab_Wjw1@T=PhQ_d;7y4Hti*IJv-+J?JE3zsJbw0Rn~Ts; z+^Qe$M|Nq(0v5soheIg4bvzErjYcPYIUONWl{HERuE&1&l~lJ`Aqd_k!{BV%>139etQaJ>i7H(`=_nA6_^ z(q%7Z^DBr`xWZ|Lyn5yA2JDw4o62tMk03ssxVX($QRZ2kt0(A-Zt_cCbZJth2P&YL zXuE@3clBA5ttz9{H2-jjpTJJCYhEXgT4zV)K&ZC8y?Z?EPdYNP27Na0_2~bcH2vmvJp{lj(dJzA4anq$BfqDP=aK2F$v$e5R$(QRe0odsGB)hZ4xla0tNK9Kds0 z?6f~Xq82RmF~E*4;>fMK;=|J*_e>_tjzWkHdVB^5*sfNwUreS7&f}zC(NaPbdva_3 zceVhNPfM*@^%V)FEFTHwtDrC-$X|yBOHE+mu#XHIyn$bWfK&OP+rId8!91MiwP?>~ z+gO|P-9*3`d+0^Da_bly_5^Hu4apR?8yPLK;Y~>^8@pi}nTp_3>j3RN8ZZ4@e7Yq3 zTCytZsh__5nao7SO9RKrV2P{!%^zNYEGs@>f!ob+%h~k~^|%^Wl!X{y9aIqm8gY%G zy-D^GbNAPbU^E3zR*RN*1Wc1(w8hNtwS3PQBqd2bhyUHH<3Kj*RC{c_4W5B>4h>WO z6ZnLaXf#;53}2w)MKsxOF>%KwL?5DR=^edMcu^l#E=X}J+I8}zF(hLo3EgSHeT@so zaRe?O!%q$%OC1z346ypUH9k_cDm~v{IV0OJH6~-`MrO>L;b5Li#}_9B?z-r~P#J76 z3Q9p=*Fu@9wdm6(anG51t>1(9GoS_Vyq!4oFYi_AZdSy$Aav{1trjo!vKhk|khXD3 zIV!z^`1f<0oYb!G(GN+L6-e;mu8G|YZ4T%YiS5qa1f`b$(-*&wDC*JyHJzGb?Q3;^ z5OUS+>7grXOd^|~xm`s^I%u3ix|^b<$Tf-0DEGoZ>2v<{m!Bi_{hAN6 z&wT*Uh))iVsIn|9u;)> z_cbe;(SM^uVs%wwbSw49oXINN4|Tb{!Xtm-A3cwwfRYZ+>uLO%!3kF&pY$)GfSbO2 z!)FYaT#)QMZyY2RKjxX3n9O=5?3<;i@cIl?T!y~-;wWt!i^VxbfPcT1!gNmavxDQc zhKJ;7Zb!z*U#`uv$-p=Hlf2p1svH0Tlwunf_ z!ytqRbycjzw%Iq)1{VVbOr=-DsghO_>rfIlDnrX4e`du?OR}9daV)yOfE66RLJHQy zW7L4-ugnzabVf@Wxyxxe|E`CG*YaailH!mRz~O(*QJo(wo7UvL^^IMN1KtpYcoyV6 zpDpJzWSKv;qgKDR(L>nx#DR=h7|&xI+!6vG>EwFiBsXW19FoHOH+`d&Aj%>bz+8#} z-nZWn=2I38lP#=y+4KU$=5(ouT`{q(kKy#8M{)4>YUn6kU_LzAi*psP34D9@IG`_l z?O^#qUGWmXMUMAZdFrN625y*KeTBf$K_%S?A8!G^utOg6!{uE7vWK9N1-Etb@f12( zAc3Rkh9=#OQ#|c~j2>T6hANeVSIj2qN#7Z60o{QT9hMtGci)IK*X@D!c{=Oz`a0Wh zbBSA(QrUZtx*Oz8n#2d2UqzKqHlKtDKADZ!fb7#EK}&Z7eJ>4!by>^=}J zfU~s4nSJ)1iJ-X%A5Gz*AO@JIqrl9|1|yZdrf_c7)VOK_XIvG0wZH!@8N~EAE@Kwt zUeF1+)^-Q7O+Fg(3HTz(=~H6TQ=%3L$vNhiD*!MeB(k+U9Q$2+q~n>TLs+dF>e$^k zgN%UUO%K^5`tcztqA1!6XkGrPOW19?B;>Fo)cIpY&M(?rU7UbEYR!qg$|yJ_H_$Fng;}n`=I^I(~oa`kv|@McNGh1hyI&kh|^ZGFb4cF*CUW z9I0J@JF7W_Ie)-hM77z#ZeBEm1`d*bliOf6{jYh1PdD5~#~^yNd(|)Yz38(a%SaL3 zfQ~YCV}EvaCoWWVZ*;WmR@b?SW=}G*OMM6scD-b`c}Llc#AiQ|MVh^W&<4FHgXx2- zUwa*rKCT^%VwfrNtk?%rz+byR-k%v&dy*PN^kkrT%7L!&%Yp=Qb$%8BAFLx!f=XN* z(S@L@`*bsZdS5`@*T|94FtmvAvpL>BPC?$t)};;}KFzDikVTna`xPsOzrTW=l&d?l z8Sru?__oeorfkM_!np1R^LiXbRbu(n8K>% z+>%R{uwHmju(?-RcGr%C)Q}%epwwLgbW1?Aha7RM&7rJtG)gNoLgR#DOB2F`RLl7| zIm5AiS5Dkdm@TcQKzu^m%5oNE=_^YbE;A>t8w^IuQsPIplu6d^kY{Lzdja>afKZ(M zE9!fe>dz!!I^O zSf}n%>cG`AbS%fOkkFt3bFIiCH4Jr?`qHe1C_VzC;ir(%f-Rpw3H+YJ3Us6KpAcq` zh=NqXa0{F{4WKANbr}*Jj6pK+byq{cR2P7%JQ*jI_;xno-+@EeG!@F>8xCvWtp$S_W-Fh}}Lvr#P-%u?Y|t%Wb7 zJzWYJgHsi(_$eLRwK{XSxOB94_U9N|4LPyzb4O|S z%ef)^8Jvz1zs)64e5+*49pkf6(t(ec~<5A?;VqjBgCz^B9C8cyJPnXP% zN*at6#bK3&D)hXh;c2-c*|9mxZ2-`U!Y%t`$z#Gy^0J-?onLxPCGLP66Yluw{ z{UYKodX@q{!yA+CE9aghOd6qw^U-cX_SLWh9$ep9>J7{i*eMK)YB$|_b524;kYW^_ zM_Ms5Jsz!H#EfCDGBMu3OTCVH48e(PprtXr&FTedsCw z7%C_K0EygLo8pR+%cK$6Ko2GB%K)g)ywhe6eyDRRXZe|>EYG_E(lE-f5gTsmY}aag zO2v`r*?kyp%0Y@bli92OMaX(q564vAjn{qzXQ~Bj>3uFgxHFn1H2(v0P{2aC_PpoB573Db; zN(~f2r-WA;OVfs5YJ1XJIqBwnxoq05w(N6BvDZQL!0i@W$4$Q95}#ae93T#&WTRq7 z>B~qqu7Vf}NSy7lHvYpJe3Lh|zzPLtd^Y+YOA0zG#)uR5pIL5HSMwvrI^}WD$8%ZV z799*tSN1+YFH-zz~` zv?h!x?3`J;%nXZmju;R5d1LeJT|nn$^a1*bqH(80$uDn^`3~x=;5pfs{Ybi9^V)8f zkCkfHqBowfN+g1?&UUI$IswWsfcBlAKgF4b0?=&mZ19~nzv96c?P0z5%b2sxHoZ1O zKiCZcPzM~$-bsf)QHJ5wB@eYmo+dj zd5ZECq-=XaqRI1*O%$CQ_UKY}xfk2R*2zi8-o*kL?Tn-T-auL|3qj_I5AGNt07#w3 z(OsY=*t*cnwwP1yJLzLI9RviVM5CB9D>~tRM32@a23_3!*btXj?8qc*FjV@l%d_1TPm!Y z$C&Z)Kf~&Vij(mM{(j28p-V5F)1&qRj|PKg&Mu|WC0!Sh{dtY}OSlv;3D3Q-t5&0O zl~XJlg2w2gW1EG$i<;92m%p1W9EzLCB%$JX22Ejgw3qmQjaQZ_ZqUV&>g;zV=$hx<-3w-VTDcADYNsYQ;n*VoxDqs z;GJNOqfdK0*Nj|y9;(vKKyTVTTa^q zBb#50s-2Qf>Ylq8yYXy8p3S`k3cee=2&wXgz;k+_sB#TmH?GfHb%W_f6yb?-E>!!9 z=&|KXGH$fCLNXBM>l`_7LTMIxpDdLWOvS!8C1_0)RklB&b9}EvcPaEVg0viF^JM<> zh;jm0h3m_mUy)!=@1#c@md;aueht!_Cl7kvVo8!a3B_0|hg6%mWjTa`eBl{DrA!wU zB3d<=o8KuU#uOQARbqQ4%Y}Kw-R0t%A)wtVSmSmg> z@~evl6LGBo2RTJ@ikloNk_Nz-9x&CSztM=_%ZE-Wx3(@0Bph&B^|4`45H(T16k1{Z z-A{p2(rh$l*C$H{fZS$&o!)m)Go4Cs32n41Xm=m?lm;I>m?E|qiE z=}s_g)Ua^kp#Ft41G=wb0g;~_)uo>99>Pw`%#O*2G01?mMg~4>G#xD{6(R$t&YXba zM5+80Z`++Z=flvrSjB=G)Nu9TJ>aDsmQ53K2pP>GmR?js^~K$5V@j35cb<`IH=mP( zKF$p-?h*AUs}~@})^(tb7jV$Pe?@uIEW)VTGFX=KfBDoO8YP5gZMFQw%!gRv@{4se z6O@Fj_AN8a@$9T@%VMRVQ0ABz;y;oQ;fLPgl+7BzHT z1m1^POXI5qOj1ihtN`1l4k!s;1?s)cQpGA*X6MU*6K0D-xaiJT)J`KCmA)=LpNre@ zdzCJ?0f;3I!mJ1W{-253ot7>n?qhTMd8&B%!#sfUZUGXV}$`!W~V8hxzR9Xl_atBrj^E`D;wBVW{QH+Ih|(cCidnAmETct4rpMhbqJNsYzVe5!iE?I|lNHc%u#JQ`m5m2L`DxtXcyf1HEd2h~hX z*3ULgPa67+_Q1t6T9vJFt?iaeo!1Z6vKY3rm=lEMBJam@%g%zfw?Ztw-j9iGglpVa?rbJG&w}PwfJ)d*h(?uZYb%AC#zuMhcEt^N#c8j}ZgX8!y5#Alidn(6z*4!!B z|By4UM_4;d6hiCn-`FWu7jeOS5wrG*HN&nN8@=(0YRqznDQ%rhDP39MJl*&go*`0N zZX^qUxp*^cnf8r!EV--g9g_aKHfpyxAzzmIDqwU@ZJC`!FgSx>k%F{4hd*fUqo?sG zCIoohcI;35##B4V(rfkvJpie8aI;=!ADf`HgSm{u=}#)_sa0NlK8i`QB_d####)E~ z)g>`;TKfq1#3E&g)B;-HC$Sks1%?)vpV|Dh&|FvDq+~%>@PSLZQ`Y4?!U;?7q(j46 z!dutd7b`2E6sH7K9|k0-z0d0V8z|HML6T5~q{zejCHaNn{l02+8lO=Gq97>g34qG=X@V)GyrjVW{bsf>;yH!Y5;WtnuLqkeI;QSD6 zzd7z~wG`h13$pJ1CSNS@kqp^{Tyw|UBf_)nu3Maj5U@U=zivMv~4mRH)csqJqcjUpzf7M(F4XZRNG#pp4F# z8Dn-^-scM#rTq{AJ4QWKg$D`>GUw>hpB?%SYKk<(L!=cGlq)owPWu1raD?7z7HQ+5 zdLZ(xnx)T4fekd?LLm+5TAD~suA+b?QP&iyRC`$-nbzfZhcB#ds}cHxLGuqkap<>+ zzBQeWOSDN-%vcdGJ&{99I4!AC#-2`}07-UiNiWE@-ON=1jr_+r7HsOhT#(~I$Rj?r(iUW9FM{P^c^scd*fz`!#Qi4P@ACVpJ!H@MGTD=QD>lK~7d^SNN7OgrV zuFyv=malT$57H$r;Ece{9Z*Rzj|xV|POs)bs%s}O zE{I>zixwHGvV5<@&6hmP;-(c7dR;;nV#uzTgAnts3&`BC2#$A7=4Lpmvjgf68yL-7 z^VXCuu|O~vy~hK-xLS!n)>kniz3gyOz?;=c4dr&cX7ylyoWJxo|EJ6^$zD3;)L!G~-UXsaq>36{}l!qNxdO z>c;HsVo$f4=#ynRr-ZMnubj<7k^Wd^-MRean=Vgs^!M4S z9xVbulY?q$SLtJ1{e{OqO)R{8>h;IWiQ_YO3)T&CA)Q~@GE8hY z^wdcIGk7a^LH;?EL#6n33^s768@0!5EQerQPw7Q!{*|KAEHP+P63hj8r+9DOK=4AD zw9xR~;{T%|18WNDhmJ&Zw9KNpL{EK!=d7;#-GxSJUhP$r1}9%>Zo@dLnU4LR4uP|b zii7)g0V|#~rpJ1#rCK>1HQgsE2?{R~(^smZvBJE%co=LGOMh2p(I)-v$@NBTSAI`F z9bd9@=Z&}QyB*gyb4jfSgN?SGCEET}&=6zBWpe%3@f%#5Z`-h%BQauLpDGlSU|1Cs zuox+HzcI_!vS4N{Gw+mee@7;?ifn?xF)bPjR?FtC9)?D+3spG{cnm8Bly4Qy|B9t3 zp_Pu4Jc9wB)Op7lgt>Bk^$(*CX@n>@7pc0t|6q6IdxixZ= zRmpw$#fqZi@88^aoCxRJy&|n%p87fm@v|eb3U7?l&uy5W%iCWwnVUe+QE@z{*H}JD z8>XqG2PLKfIHWk1kpDvbKXC+kq=*R$Hj7kfoa*#xYCmgXJ4!Sqfje!e{=cXhpiEhpWD7dpmLLEj$tF z6wj-~ERzy`poTYa6mjq9T66M$IGFPy4y`t)2^o;TAOD8kh;LB|9gC9hc{YcoxpKc+ z)lbE;2=Ef#Q=>HL9G7A%u@oSDDzW>)fvq#_%r?zq(4)nvRx2+0k75>U)OWlP-s1s& zDBv*co(i7UJl@<*W$BjZrq=o=+qrH7loZ}+lMn0saT5_q54#ZCDbben!d$MFqJqTK z#e?(DsHVUg`lV^Yz$;BY#0DA8+_<#Uz;pafXNH!}y56ps=-`FMF0g@#Vvc%Z2attl zv((LIgX#AMOkE9Wm_-E}nbe2^Xb{#u^7o?okypLk^g^{um_l%E#C&N@pXR_0k|8xS z11^I)0?R0OIzyI!^x&E=OlkKJk~OR6Th$1A%wSFK=p9!-*HA(ckhBFEGhK6mv?z%f zxdR@d-oa{T_%b+oGGsu^0#FYi?{CKct_ir0r$XVxox0;<8=dBxC?P)k1%qRaZC;~h zJZs0%OCp&Vb{pULL(91#H16UQMlok&S?65NsROq{C)!a8ko+7np5h94_fn|JAxkiedydq?9xcJ%YeBR32~dzE285kxQNA zWzKaFDE|#^)Y@4=DtP>lr`7KmO9*oaUIP3oo6O4QZ4FSAy?fRkKJI%Nj7aN|ic%_N ziS_`rFSSXfqD#@Ijr*6;a23(nC5LgyWy<>Vx(ocaI;2eN+*=;#_ZuwKb8qBG8XbK~ zK=9xz2kr#Nw3`50PuNP5J^hcaeJZck`~!`FZ@&LcX|}W&;CrX)Z9WmOv=i>hR5;hr z2r}PTFjMt8c1#7UG57)nQX)sO6oIM48oz1?Em|vyQU3Lg0@3)|KwcL|XIZ;rgSl%3 zgF7xI7bd9cec#f#F41YRCNIxPSbWBYHAloalS7R*(^a%OV@&~VS$RDz{ko2! zkE&*`f8>NFaK1^+@Gaibh6|;Fx6wnO-%iXO1Ny>G>D6~Q6f&-C{ir#xzCICfXmZfS z5~-(?NZtcXvIefW_0t#fd+%Do!`2R#{ixavqE{L#ZBHmg^C4E7KzIm_Tr_&E(u-nl zx8cM126bHw>8Mtb1sOsnTlW;eB24x(B;U}Nr)gZrGVml?-VuhKWp^KbivsWoM|bHt zB2jl8-Mzk?c6xhXs?K3KE)g}Mer8Vqc)ZulyL1Yn3!w$!lh+Ok&foo+W^wsw7JyfA z*MJ7|?PGt`L3Su^1SdmJYHh9r=%VTnM;=nkmDGL3X#{SaY-3$1 zNE!Ve{n>()Wo`w5A}^UcdGrO+` zj>w;FpJyG1)inSX0^PEFnH+za$*O2v?gL6dWcW^1E0U=XXkUXqi#^stSH5go)Ykm2 zmUy^L)d(sbN1s|(IUXER0QIl(@BKg-bN#JXIF>UrY8K=`z)r)9;%Eu>f|80vDcp`$ z+u7Q~zgGqVk>!;XbR>#3M@goMmxqxyw&&9+=i%bv#$0fN6+0rKBz<|R*8;47iDI;w zIDGHjMC-RANu}UZ0%g2;}?>Dd*~;s)sB#0?@Za~-hU1h_vb?ez>T`oGxj zJ!6+sQ+TnC9h79sBAX)PBtkn= zSp7^Wu?V7rgBx~vV#5RR_J!}G&DF+vfwn-F*h=#CoT^=OnHr4QyrAG=iv{Bc2K92{ zTfv-%^27Rq$n~YRGC(Yxhr{Pm_WygbHq;v^>a@E5X;Mr{lud)FKbY1pA{*QBHH-=$)S4q4=5Jykya-1z>L43`z%ZG zqLGwkRaNaJr|K$X6UCA&_=4q?^cEhuHw;dUdVVM0!39J);G8aQn;}A|L|o0y4>BH9 zwnjzgeCuFs3O6S6zJKAf*4VJykd+dGv2j7N;nDm5D&y0BrD!NvDli!^j z7H83Ye8bnWWECM!=dJX3@*4rFRa9w#f976yuy4|IHPb8JzvBm>q*?nDd87CLE)011 z`7(1RG;ZB0Zw&o9742EfA8M2Xv^lxJm-?Hse-4vLN2s#atRpXhsQ=AF^h&OlzsSD@ zThb(Vz^y964qFmROs9|F&%n?{H=J%olRw;4^6hF->0pKFFLD>`s5XGfYNmxhHC1JzN=ly$Iy{fbEK=xY+O_{Z0ORK zJn9pPVgz$!o^jHT@SM$sj86wU{;x9$w?K+5U+Ar-|Hs~(F1DC6vsI5-tQW76t~5)V zY>rqRuhY=nlws~!=)YTvj|d#?rf2z_B8HCnh;5-L+$FsQ>uZVR9bm%%SQJZ)X6kwi=PWMW>mrvyCzIRsAQo%3P7xHT62#UR*UI#K)E`**$v=vHzxFF`kw z5?ZxXtXe793kXa5e4wn90KBSt zS`eg#l&2UtCY6symV?pePs&&#FT=T420OfiG(V!y!U+JDnjNGIPfpy*;HvVdRXyQN zQMTk3a@!Za03p;DUQ#omQj?1~1EHtjcb44iNg#FhAo+u=+Dj9zM+{7c)6qk{`=dlp z4$d-7);XAmtr-lZ>_Z{{S`}4h;I6awDcjOv8D2;R(8+zLY!cJVuPcV2ft~{xt}5L%i#|rB#>1 z)~Af4jp0Jz!&SPjBr$o^Oor$t(i|mL2129>qp55{mbu3@ zugO3x{s63~I?CXcxl!9<#=Wi|EjG`Rh6t|k;59WtrN)m%na8y(g;$f31QcXtdLDSmU@S{9%WaBpq610rv;2KT+9OU5zDhqX-9+PyBvnS)S9E? z*3_@#5({-`HO5M{kCy!prKe0m<@4H(D=7t_r>WsqW^RqjiBf7eb8}dzu;*f#Q!sSj zQ$OPonL_{=ff$179THdnM=&{SU>%bzm5w6VN5GkIT~dq^8%4BS>bhcxfc0C>^|U)+ zbrTQsn)&&dTarlI7~CH1yE>p^`GYNjx@IZOkPfu3F2yOOdFS1zVS`O9axAdrfs_uR zPNOOem;YlBy6jmRArZ0Y0?pKTixB`a*&(gc>GrQTb_pht))hg%;@1Xf4u(NX@LOnq z&wS@dNZ9ZTDeqF@vy`imfIjgyh5L@>pI`vqayHAE%7O3|csL=D+c=MP(0Y^o$ zfr9@2{{va6l9tu*){^Qh692S)RaW2yzN~xpq(wC%2t0$mgmeEarXNoblx)_zzSF+TtW?Y(M*3gq- ze>_y_r`Yw=8~S%$zW9MGjz$y)ok2XwQn0nvWQ5F6{Otpq-oJN5+>n>*$=N9tn2LB* zKN2a?jD#J4t3fSvg**xUfJ#h~e!1H6sWUE(1LMJ%yv|#+NbXG(pFONnNw$#|v=A4$ z!rp$ltjkIPC#Y7eMyR-@`N~Y1<;zTHCX3=L}Mm0nPQ88WvQUxZxJm7Mg z;XDv7mTM$zTF{y_bqrcfFbh7X@1nL!Q%n6yRsCbsy*ee+>3-#F;LDPqkckfh?=O7* zsIXu1&&$AE@BGgsvsqwUo1HKX6vt547euSX5G;qzRy933>5{?@v7(s^na=pNa&ik5sPT16Q52e z^?A=^9>{ulC`xD`sj5Upo(ZP{Absk6BV z@mT!}<_on4IOs9StD1f=SZec`%(eDvO#Xdf6xYRe1beo+WbB>^f0?k0gMgW7zQQFj zqEt@~C0saDX34sQwng2xrRJ<;i!ytG`KF<4acc?-=zp$l`n5@qiOIlxbAheAzkikW zzQY4FgfM0`VenvqdlT~+gfOOB{mjksj>Vr3Ldo`{?krG-WV-E5jRRNnt?2IY#bJGb zGqFr21S1(LtE1+z`n^VITJTv8!m1nNLu(tCee8SL#(rW2hs1cwxQl0N$!vt}$^!lr zc;SSYC#d_DG&}H^Bi44Ou=q;+=G40MK9nhR4^wXngX|&leOn`-Jz7)8LhtgN9`*Vg zrx*n-PXRFKSqxL$%Z|fKvtUalD6-xa1W|u<>%=aWY_hejAniv^<{ukTQfPw(e>IDN zOA?t%XqEgqp{oq^Ap;SN-h198IwIg^uo@f%Ha{%t)b8}^-cm>^?&+p4S8 z@1;T9wI-p;n=X>Sz`9MmQ&+u5XCplTFGoCV+0t$GTSLxHtGl<7)x|4xCho z%+fyFahU&uT8OC7u;K#!9N&KT0TaQev{~vH%jmz^|4OYuU}ZwS4voGRfBwcSQ++#Q zM(wY@c2EQp^(KpAGnZq^PPGkY2Y#_D*2}y1Rw8NZagM96vasqs3 zF{#m_nKn)f{H zEM)H@Osnt_A`OOC3tFriMr*auHc^IQZi$+2xps`6qlJM?Z15+@fGYh_Jvw_P^la9o z5RdJ#@auAto6|B--HjYUY9~ti4pHUpalP8JJDmFV*js;@4)fP_l|;DA$(<`XB_4}{ zdt2QDEVZGe1k<)biw1_KI0-L88(AL8a<{+8&;F``07xBQoq9UvPNGcR zRbHsO356qfOd{c7IqA1#+ck*v(KsIR89jh?JA&_u@P2vPxbV}DX z_%4FzU?UZPZlkf41RR%*lTKRSM;6Z zh!t;;0VTsE02?I?O#v6iK_(52sHIoYt~H5SX8!lN{F0g*1D&20l-BkEs2H=%$FQZ} zf>~Ry0F;XEEW&A9@OJT0SV}R~8NIw-TE+*}29tQ)TuX;>0lxQ15S*JW2~mzP!~cvF zUiTVTn~Zm-BxeYB0UC)wHHUmj{HJLs%3p_1;|ylW%ggd!mBKeV5MZ=)89#-lXH<)F zNgSsO4$q2?|5dLd^#@KM{pDfyKIka=s_I!`=1$Q85SAvMY5=PQ?yTivy&mZSY+97w zV3($ZWIqkT%;JCQNr0K>I9eD+2)`WD;SX!%a~7hoA8zpPw!s($h0|n#{;tWMh5R?n zXbnZeh=ZKuDE~sbo0-@ny&?C$;&F@RkP9q<2%fjCz?CI8PH}3DiZBm6yT>rmo z4n@Rf@297<7julS7J&jQI>jj~uvm$MQ;WWSX5@_&cGRJ2&vvDo z`GcLd2aP89dr3%@rm-JU+&e1wi&Y(c=QhWl0U)|0f|}fTuf~zdqZ((IQ;j-~nm5RB zf;aP6wMi6<%Pe30{D6(F(&;^cnipo zuCYw`RClDG^XB325}hXAaUhDmDGzClBU>hVG8D6x2CzoeJSj_8(t%CkXVICdFGbQT zF5edBrxfFp_ffCOjX`OFP0`IkW<=B08lQpqmEpa-5lIxsc+kE zJ5k{hV+zXQ=!4svC; z15FW)d?>o+H1MsP16P&YAMpB)__CdDfwPNh(}<{=9_;rk&m}O27bVP$U#$3;`#d0- z_57H5sznzpQU z0Cr^PCq#rz^1kV!^)oMf$;sknkD|)>6Jji;Jvz|^l`!D>L)EM{tdKR0!W2DpC?QwF|17t6t!IF#ElmZc`N=4=H-7-}+rp`@24Y{1p-b z9kIa3BUNA~;cq0WArgPBbdQ4c|+lgAlg2!3%~o zuZU2#J-wLuG=K%+loxLy82(lvouZ7MDzsj)N)0magY|+dKPsdQvK~M$y_bYvfYC!f z|NRA2Stk;)WN#z~LzqT(#kjiO)q~>M7V1g2mvtx%t|eItbuXpVG)ni4V*+rIW+>~) zg>(zoHS-5rD3SR(Xc|4Bbonwu*k*z5rdQGvAc8v=z_NgW z#8514hUuiZQpSlJ#i7LKn8{J>z5pLC`M0D}1HY*UOXdQ#QS_V_a*Bg#9j)83CG|I` zuSs8NB*a9H>{2Line2qu&@L>!s}tD_p2jk=bBJ~8TW1c@EYcLbTXvj54%<-;%5-y{np+?V!{XWwm%r80d(GVJ5{QIS9t~m}L%)dPbSumx zk6HYzMvLhm1^U-cwg_fPxkqtia2F^5GMU76GRuQm?iP#*WgiULpJA#oJcg+7*)#m( z_F7elVJY7Rez}On)lcpTKCB3$I?h7)4jL-6y8|k@;C6>QORf$fyn5Reqi|kfn0I1}FNvYW|4 z#4kaoWq90@XqQ(Qd%phS45|io&Fqa6Do9KxiixIrB8Uvj=CA)BrY442;UKjl+T$?r zkozeZUN^YhuAR@xQ_8?Zqn9?`1@^eX37ZgO&6kgV+B174xM@^Snrd&u4=TCn#ipAw z(V9*`Rn;%Rb}8)0N$-&xk%0d7jT8O6#G=*KS#HF0)5(=U7daOh*|~S;V>bOuM}NK6 zL5JTC*j!ZInQN~GxyhQC>$Ltv9q%+2Ch|P1?g8x1;EAjFP!MrS1wHtTZw%cQzERiw z%G6&mHHCHgsKjBr&_8nip^ksjVwmbN&?`!pz=^wld0i;0>w!GP39Q*_`v#lGYCVHJ=WONZ`~HZ-`tz+xyHT&=P4;DZnE_Dw)qLep+b$e)Z2#) zFjlv7(+$5hDmUJkfM1GO{3NmF`?DNxV%*HY-yb>+?;DuPuWt zIIA8MPSI#fe^pX2sf&pddg_8^7AhKkV`O31qv)MtXhKs7Egbb!q|4Q0DDloa+8z3v6G1 z`t!L}!?cRB8wGA-?jkA;Oc|FImyg$XJQ*!{Po4y*WO~a~cbTMbfuFXbWOJ8hmK4vs@4^4ZlMURURt6qUkw4cX08+eDQE2 zdYk=hc!Oh@%mwWDk+Ix!HlM^63-jADc{uoM0387Wd|3Cq2knoPndMreAGLcqb4yo+ z;VFdSVU*fP0NF0V2+HKaizljppm{|j6+>BX24nv?Umj}+QKvLl`dC00L9uV5mf67@ z2lQ2b@j;(z_k|23m$ROMpcBnkz>#GtZztYN$;gQ<-t&US6w#q~UZ2BFRGVLpZ#3*< zHq=7@w%^19PBOUC1t&$yQjfPt(pcVweXkD>e#0U{ zYHh|~2_>$0FxSN}Qb=M6BYnXmc+8$29Y2HM&w4P7mRY6%3QUVhx%5+bmi`K`Qmaoj zo4v8VKA6dyA}Bhp&!Y97B9kv5wC6FVNZ;o?)?*i3hsnu(6^giZ(TIO%d_UWj!q%k3 zul~)EpYLai8zWgsR|dvyGe>%UmoB`BpKt)h1T){?rPNf%W>#FT>u-p~o?Axsp$MSJ zL!Rl@as7i@weDa)z-U;xoU6cF!)sn@-kf1o&8)JKtHt&}wYUd_0fYl-0`;&~aMb;P z+`%{z-3u%bQSb?feb!vp-Vkm-GcLU`*WB~`J4wE=P`+|eiD~(7YyisjM&XZdo9F_` zlLN-$Hk+o(!taoA(I6l)*)e_t@8#gY^crKe_QSFpt|!IICyhn?MXE@Q5jvDnt!jCE zLIa)KTBaFWi)wmN%vAZ>{nYi zK!u&5-FS;h^@vwSSS7z8RMQx0I0{>?KlWbz=!UUR7p|@mm>{ zzzjfZgRTY&0I5|-D~8@fnTiVUQ@yF%qC0<~(yPiN=6)DUFXWcLj^P(OAGLMH^;2O{ zR~JRR#%A0og~MU_fxW_`SiDqz_gy*?j?uqVVsvs8+$TeiMX7}Z#V;NC>d<+o!T8jV zJTE_brQqkD62Q~7U1yz5^sEPA!|dQpf`p4zFE2KnD1hi`OYBnLAkVZo+KK)C!;9hyVIc zJ9DV#2aA=j-8@}*LZk%#KcQB|CyDZPlj~4#=ixvh0wrsP;eGjHNypU3NfJ|q>A<8W zu+tsX72kvWpt9>?yC}Qu8Nh#*up|dekOBVa7WGsaW-u$OKhPEm;fu?nO0EfLOySqT zA6^ux-M~aGqO$I7!$s5-7y@#nw!dd)r34ZY7hLc2JzH8VLb&Z5AZ51%4ov_X<&Anc zOhJK>*N8f}|0}DxVx8u2Nnvdof0;$>u;rli6-oq(5+ueA2Uir~;x`1K^?M#vHCH& zNcXCY3PXIg643=&Q$XiuSMrWQwml?_*0$SsCH~+;xL%#?obIdcvzE@@4sYQph#GX= z%FFA{hyjpcm@m5}l;Wyl?39+OLLv=$!21E~Qk4W-(KjGW(hI7$lC!yzPs>jePWKp@ zo!fqi_oc1d?Wk#uX@pfdlnqwH=VM6&IplSObLA*gfLp)^>P6=0U7Gs%7B&Sn=Ng?R zgppuU>;x>h1gNq0M#UCuI3@t79k=*d0!iocZEyqUX$nfzy9+M} z81|u1dr%*}KSZ@Hc0z#zt62<%RMp-sdAdWjas|Bg;kFf~agXl~3`V)_khcPz4UP>g zujNmf^^^R*a5f`+^0rxD>a6gTY2Ym2-JcG9RtVB2_6!8 zCIZWj>()qtg}uHikhU8}{TW_kOIFagVF5Dp28nrvY3#=ZoBG0}x|?_e4i}1p(n(^M zkBFchfb^-j>Tk5CY?)3}KkH!bcAj-e>f1#mc+Vkn{PKHz?8!$AS>|dlaBe^krPV=y zcFjW*jZ(STd4{)dpfDGCPap}du8@CE${aU%W z^em%3rRr2^pR*ew$*#5(4V;ws(qFd`<$Urao(bR|b?D4jMx`=+^gABhgw}%j7|fCT zsSMU5_qM>=FAhC4jU)gUjDK*$r_(Go3&J`gyMjP3{~ch`Q7h=rn$Y2T-qDyeu%FuR zE;}TdAe*x|(|`o_nsYkgZy=}H*#!CcNp7O}8mG`QcPgQ$*5CZ}IJLq< z42+v*?#FqS0~0c-ww)gV{*(YX{$90%D!rcU^P-^SbYx`2RT8B{sODFb1MLog_H1Y$ zC&FtpS4M3%qJ!RUp_F!vQP720@0uVkmODL{4`6^vRi+bLv3ilQe7s2t^4V7Wn|o)0 z%%s)BLoOaK^&&d7q)N)5QdpOGca+Wix>mMT{2-ia&0Qnl7AhZrDE-56>Pqb!vBx9- zr({I^A))MjaAc`ax$COpO1J#hQoMqYO6Q%1h_^LgB%icmIY{Q1U2GvPrg2A2=FE#f zdSO0@^evxPE@Wj)fF6bJ5*eS)d%x;&_HvnZsB`;!HA~hBp$%*!=VYLav1hPVXyE)x4cbDGu`%Q42PDPl0nDrKlyP7Yq^0gkke$J(3zJ z!~wQ%c{z@SQ(Le%+d|{(;r42^o%@%`bx%eV(^!HYc`Ex=OgDbGnaZ2F)Yn0Zw%Gd( z`su)7FMuVIS(8LTiGVvHRQiuy-PYMSbZ|R~`*3MdK*Lf&7Se{ym_|L+c_Y;i zi}aw4_8z7LH+ut^kqqP^fK_YiRW;Dtb@E6w8;x3?XIWxK=c|Vn_!lTiu3>?Ycwgmsh$S-oyRn_g?p+mGFnDx85;~21h z)fJ$z0O9@o6?SIZBb20hc^A3fV)D-RMgBvzRF^5A@i^Mg&kBFcY=6^{4~JL(1l_d2 z4(FU8?_&N-?b;0MHbU2yF2Ow*omSP$(!SY@)kaAIEqG#3He_#)Evz8mkpyF0K>W}ws@F*PjG&RZ- zDxF>`{9vHqFGy>j3JV(tdngWh{Hp9j&nnW{nQyIH)WuyHd`W>jQ~ZnY<~F9|`e|~8 zduB^;xq7Kul-dZ9|1@=#B(*qAW-6}m!W|rSxo#K6jEFyidVjI}(C}S5#e*wbmC|0x zdxqGPB7-qEjfl=G`WAVnusJOVkw6oz4Wg?lHAa7M3o3;?#}0e%MYd)2fE~#s-Gk%; zy|{v;GW++{jI!|Oh!#-|^LigAC5GpE`Z_GYCrz1TkmQiVm)H+c%|^_07+kq7b)oR! z380Cm`Un@OI;@ns&>1_-`dB70F%!()yl{dcl~An)tE>3Z%yDD`co&Hlm4z*G6W6vr z#f}N3sZ}ZxwVOm$c>7btP{xwxN{l-&vu$%7^+<`bGiZ>GUd|5c$M^~0rXua&YY<_G z9GQ#dDqp&vVXml=%Zm>gTTIU(Y#9#%MEd=S-{=B?msEF>gXRk=Yt2`1r8#0zO)ck! zox4_A?)D-cEX&4ly!H_*60V5Kf#L&zgy%{AGXUcB<@FiHhpO~M@Dn`b2uE^lTU=tJ zO324W&yuXmMn=k?YTnK(6Un3`DSDPJ5S;%#4sDkbGiVfR83xHZo;eugE@I6x6s(KXy-eaFcoG;RZTUa|mjhwXLhIJ%nID1lu|b?4ME z$XxmaZM5dYN#MYtKEAaGEx2+Y@&HrUx>FMHcF%s#MjY;2GMp*>t&MuwM@|d+Rp8zO z7ovfiyWS2Pv7m_EA$dBFp+RA59E>XR=nG%qv9>+A+|6O<#5smzDsCNZ>+uR zwWkRcr?NkTv?O2EUK3s+ra%en=}bbO3;AdzTaT86j27W(EFY4C?o))7B(za4yjWY` zFuD9hwG?}+rj1GB#^j&TNpYJ2@nLZo+Bd%+U*n;)i~E#1Q_Q79f4*n?OXODSv&4m% zvi7ahv2f;$iS7IYL`v|ph*f53iXy(PX`oH9pYs9?INe+ZOC3r#1eX|< zqFRR~hm=#wZ~3$ol{&HoqcIUQni=b(r~ZBwM}SWk`7ZusX^;!(5!G&Luy~U$?)Fqo z>PaithY%P&z3`(Gwl*_PlH#`c^*jAWP7Kr0ZK;GQPmm@Iok$N(k6Pvuv-y2yuX#_+ zSqk0o_Um(NR<|d7@2%{4?}w6MlWe4s>%fI1iHeu=g6mBQuF337&JSEiVHbWWi9vOH zMWG!pdy*dQH;zu7^^7}i&OyfYyeh?O!aA689&jjG`#fW!>#V^-Pm&h@8Q$iI&Y+<- zWQSRa#%j%q8&|7|0mz?~U+Lxaw~OHH34tPc+9)SIHH7-^fL#6r1QT}J(W}o}=wE_N z!y2X2Fbk;`aoLzmJ*6;a0EpxQP4fiaN;Q6NNEiHpfY<4|I>qET*r*ozQGRZx^NQ2H ze(!8sM~Ul#0mwC7h~~Rlc;KAlpdNf2D?mh9oOuFMPu6Ybbp9H7JU6gbr!wVwn5`iZ zqd!HuFQb^(_B0K2Wp%hr2#6$aOQ7vcM#|YL=V01;YR75q*)RK`;ze-Q-5Oh^4U=fDZGN)AwL+ryuZu= z2Q{Y4EofzE{MT_pSKgp0jRDp21-Dd1r4u>#WW2HZD(k~pFYN$K&S?DpLTq4=o);`A z1(;*ZEoSLnDpCu@4W7v=92VOyJkKM+3#IrXz}CiFwmU_MQ430RL_~E6TGg-l^fuK) zotJ`V1ZOBtY_n#Ba8Ct5fdvf~R*+q<*Yk*fxLC}2_%^4J;Tx}ZHkq?mX=v-+M z48doD=qUy_2>WNfftJPr52#+u-jeq)x4RB81gZ@W7eOv#F@ey78k-qDG2G`2-aAO$g@NaID5iM=_o>@GYP z*RckO5L@!gEhr?3CJSkT-EXEjT)wTmuzob_By|9o(^1q!*`ry1%$5Dp<@dBkyL}QH zMDvc3j`j^|&>3+>>VEJ-Xz2{i>B7kOBj#-vweUMey)D^D_>htP6T`D%Wt z1@ox%hQ_WLnaGs7c%nBNB+3cBQ0PnY_6OdPDDwBoxn8|q{iAz2iR(X0rZ!oW&`wd+ zXd1^vNfs8Ul{dHb0}x5i;5Es%>T!i7`sM z{S)5T@h?Lzyf&*|j~4{E$Xm|*aBV=ZLNpQ|uudnpw#K-`uaWCajbV*t;RMOVEcSD-KkDDOn%yh)E+;>7I6idjuc1 zv&XwXLn0OIj*1FHjEb*HpTbyOMEQK@#s0;AQEmHp%Ptt<46K>!IAUpez4f&+nORe* zG(rmIIu1qxs6*ssMJk}~t^FW4#Jsq%Xxi!ilOSmWpdvW72C$+&yVvQQ1g1f&wuOGx zg(eQwBlISts3t+)H?Jd0>Sj@NX>uH<5>XTLA~BnHSme!RWK`6F^eklcWpyAWe5v7( z1{j*gm#nsKw6tS`$bOzN&fEjVD6S0;CPmvoHUtSH0R`y&lJh%yi z*VhHyi*hCzLLtE$_3XfwqP40Te1G*LT)m*F^P1C8+!)+X;;mmBNOqmMM~(s%s46$a zgnQRfw9jn+i?vUEMXNtezs2&a%TMiP+q+q(UTf@+u>>uQhB(Hp{{fc>K4GOpY!0G! z5x~shl3x1`rU_W9{qj^oIbPk(NMN}%7d|?IGPsoyb*bLv?W2oTUnYLMh<)Y1>ec(YSrtl&cd(KX; zZ1ekh8Ez{K)LzDKxTyq^4JRHY6AA=+q7el4w_XBi_0s3qO?;ObkIJVb9p;!1u!))j zBTmD*vmw9G%JMY_fLQZYAA4IUs$_p;{>F^Nk8eLzgZc`-gRcggY* zF;|D-mkqrv!r2Ruos*`+aBj~!n$ZKTOfcUkXqs6`v(WBPDhZk|9=PRL4qi-?3;yud zDA+(!kD!#bmfH-Lc=;R9=at^cfvNIj@kiPQgrt1%)S7w^?p3vBB+t(-l$&k~KvsDT zmu`{Wv@R#C&=_yRMbOQnEm!SBip>G^D@d+cjqu(O)0w6a7GD#XlZ@xc9dvp?#Fbk< znRft7J;eu{zlb7&_Mb(qI z+_Ti^60GwQRYw65m)W24hmIN(IObd2`iLCpr*esL9-vp5(s%M)8w+i``V8#d(f6=Nr*rC>KnDWnWNF*04_fE57%Qzj7{?4 zN$9o&l$|EIgCmLg{f^<2EZV?C~UnAP-*4-S*@>SmYPxhis><6c_Jj4p- z&r7KD8F9*8-~a+Z{l5=hON2K;Aw0SdunMOo|2U>W)YTxjhgCsS_-%Y(R4e<*6u49w z{AYc${q}fXy*HB*DTeLL1|~5zWqk$Z`uJ3}d}*73wE2`rkl~nLemx{8@)S2Y;efE0 ziYkjL>WxFNl@0mfY0RO`92B@eNnWXe;9%cJ937w{reGAyo8SQs5|?vLNf@zqo#epE zEvMH)p2YkEjK1!;d^qd-s!J^rBFT1}o0D$%E@|i&w|oI(VI{}znIGgh?4l=13<6}7 zJ!~Oq0R^#A0$=JItD|uuLz;E=uw5zP2_(ePE8zT@i`k?|d+XdgMA<+@C@8}i*HHjC z(Cd8J2JURfY{MBafB+%ubo&#0UXSWrh7s zo}~%Z?dx{rq{`D`N%pN!2%JE<2y^f25beZF$HwFUyF_#$LTRmmulJ4(0*PkEdKGgE zU$79>iEF**Y*){=GmMg9(f;EORX{Le%_Pq}@>Qf!PsQ6Mn<-@%!FVOxp@(hO^nyyI7LiR z>l~_#CQtJSa!H)?i&<+Yd&6Bi)NTG^-rVL@4+0i>St{r*&^{V6S>s}uyiE+fr)O;* zklA`7jB*U`0s`|iZ>A0@zgJ0h``l)-NhE!qHzU|h>RgpZj+mlu7!L(i z>LbaJ4k~&p;$!ja!&wI(nN^@;?xsPNv95nFggS9v!SI;uI{B(0hBq06M^8A6N>pU1X0XBDt(Ux64|MGab|~M9 z^->ct6D3FNJ3I*uJLC4KtfCF-tA5^6 z!&xvyeXxF|?d*!4c%V`hXOE7sxivc z1D)0h4D8Itu*f*59m&X3Sf+CENEgktbA^@4M_?A=xU`SS0p(unU&#XJ8)Ia_X-XU-By2g!Di;-^0U>f)kev z+g1IP?VQU&GVSc0aLs-Ha4AnECGq3kLC^xZuKI*R& zeGw8%4%Jl^QKS?E^=ibhNd}AI6r@~XTuuXO#^-}DbDOZ+1oTZ@<|PE$ugA#<$%X`^ zreDW6@+z=v?2goGw1XibPm8m)#~9Vd0qX?98=5zTV>kwbn9AK z;l*5axcZufrRmNcEhfz4aj+HI!;4g7DLf`l<@kX{sbswy*tHG%y9=TC(8nJw}ZR+KB+OWnc2YC6YK=dH>m?>rO+TX*qxGAX1QanJd8<`Otcp>RSHE zG%(uqX2}cIE{5FhhzHFrBZCM2N^ur@O26V#t*uj3+j~wkI(NaF*Ypm zmj*^t@H>1k!nUflaHkJfQ#!RAqDjPUL9Giprgd;nxP>6Jogw++e;Hu6i18eBf0(A6 z3KgPi-Ez_>*#97DvoWq5Q)t-mpA#U-MOFoOlaptvaWr~&&M1OrvXd($w>D2brCnvl znSF#Ozw3q;)B_v_m<2AgR#AsKpi1M;_8ep~tB1sa0$IiaJ8-+skSTuVW%)62bh?K3 zN?&~(_?LMWU)9qp_0~Cl2ff5|YkxfqF{&9K0C@{W6a-{8Z->$SzUzPYeI=-<8|UQF zo~>wUHDQBjRW~`T=B$2!l^F!^lE&hD%TUSit*$#571cm8xI<9^X8|8^qVXStrB=h! z&MJgxf&OGYY*7X#x;JMR{J>}Y+@8U#*3f{;7M|ziG;wkr7}p@wiqnvRP3}iXBwfIBL4A?mv7V@MguO#$=K2hBKkGH?nJ-``UU1`S(n(m*3*yPzdi{TAFg_#x_{b%5|`XpY65X zt;*JM@(N)^!%uLpF~Vr)?(wHPCIZ2vpPy88Ej1A)al5FFRSz2Y&wE-qqk_7+oc+dG z2@x5C#l0fZZd*rgeIs|Qcty$SZ{^=rh@OfYC5n>kI6Psh0eWa!X~a|xwVOzNI%5o| zz6JB1AUsb|`~#go&nlR9=JyT0Vek29P|i3%Nx8)nAJXuB(O8K_$Az}WCTa}WbBof< zn`e)`du84`6dsHvJ0-g?Ra-Xp?~S9EA@?-{F&0A@0-TPrm}VrtxvN=jMcT+*USO=k zYIdRql|TI+PKoM>r!|HE8*t1AClkm?tKDCN_)Wl?Gw%Opl@;oVRAW&~^i)G}p@H&E zoccqMkdax{mQAo0D!<<3$KA*sUmk4omrPZOG z&QM!Dkg;mrSz)DI5ANb8X?H1-3=?L#^c*ah&BU~KJ^@SXO@5U#fx`d5a<=jn@R%qU zOchyMG|HJc-wV9b@tOV}yMGaFKEb8uuVa2&mwa$gEMqi}V%qVo(H|xX2p&O8Tv9#6 zATrhFF1uI5qu@1FAeEG5PDl)On{kRF;h~qDmm3>jK=ua0&*_>Ods#v%Be${@waPom zq}KX{s-4;-*VLt5;IhitpwGTFRF0y>toUckO>H|Y zkezyGkns}sK8%6OXsWQAhe5h@BJoEg+po{RC|O{2WOkmGw^Mrig1j|@ z27=6WkDZ1C(3@UqRsK~Y@DDr`>FT*&mlY?hZCpy;BSj+#r1z(IG_;H5PT@+S)a^Ok zuC#Tr+kH@-D}!^?e)dFB7BY5mvD%-qV%)j+X6*u10}Sm$z9OmOXIhSNR5MO9GE4eP zSgUjmm>nkxhn}1R-TNtDCk@`JcHMQ#91Z-*P7nf6|Hao7zRpM5z7bS7ZPAq>77+$O zGBU)fRhds_&*7|8c^lMLqJ?j%7Mhj2msLV@e09IUyHg_3Y{oA1=^ws6q=pcqYC2}b zi7z)B^6t`)Xbfw7`hfMZ0x!t*4-$&R?Ueu@tH{@_41We z3o=We!Ytvn&X98jYDn<{uL_BU-PX|mC5Vs9oI3&T!+K%aZi-6QMz<&r204AWF&hA( zZ0u?O;|7RK$9o|5h+HuQlJXG*m^ls~qU}qs3jybh?_OQ;W~QuTEU74=mR@rE1{LZE zRBpTq8*24wnw8rHd^nO6Fl;Cw6AxT|kDOktZuzRRhk% zX7r!A>lbMYM8u|OT)J0LkTq`y_(v7kW+yy9JP_i6HOR}@C^Jv&dQ z3y5}jZ!k3HxmQ=Mr*JJxy02O0V0J8+sF3UwMX!;SPk@#WfnQkKahyGN49+|D>`$}l z6D)%%kcV`3vmrC|T_(IG=5i$C7hlp7Oy72GKzEXXR>YYtBs%n1We(%Z`ejhQLXk7x zHgEV{C8#xsDszQeXk!j2Svt&{{t2TGv7-x`FXvJ4yzHE#PoQZ99*}JpG>gO1qaN;^ zH6K+mLn8}>^)AQdrZi=vbE}0%CCs^T0Fxy4O*>~u5;d+Nau5-lc-qB3%fj)A1~gM; zVD~d|&@x+v#i>P#iVS~=#;zagGoG=TiP%?Q;}+)C2F^v+i`Mv1e>L+&N zUr(-~%52c5Sjtb66js^!vZypL%nR^=>#@ID!`QY30+j>grol`yL`WWlm8(4?hV9!* ze^}$_1Ej;noFjuAtycH_@8-+MLP9;_vHWSyV)$;BG%4GEZhNh_{I^VXVu6srU;k7Z#2< zHOe;zvDx9+CCKko_Y%A$pl?e*C0F5{^N{2sAOPd;x_01E{K8w6a^%RPL0kJf7e#x0 zg)2E{>j)EK#E+g(Q2{+*B%4K3F@-aKcrwBFewaB-KHQ;_GFd2;d?-4h7r%NfXO0IU z1~cXp&wdW`W%{tq^gIO`w%`_&FfnMP8wdp2!Gc6Su;HE+@;q39KqqLdf72di7w9Dl zE>7{!DNC;t6XU?Qv|-}0Q??{yAB_=pe&`?;o)-A+N-u`|dQuXW?Pv1^-`ll5beEMg z^zQ%|y5Qs$`i7&x>aH9ScDwSN;iCn8qJJ1ToisT4k-vAyFAlB0Vy<@7@7Mzj1%uh7 zwuRx-l))aAvx8jxHsfKcwg|$?l_q7JUQHSZ)xPf__FwMKbPXoK8i#AXHB34aOaj5u zmxJBKh!q^}4g@4n0JXZ*O8eZ#6#%t<4$WwsmY~R4a@6*xb9f!UlNi$WV~PnSOv{+n za#9%%>FixCPS4qO>UwlL84f1DID=?RInEzGAldTU0vaTRLT zCJPi(X(p_q!XFlm_~fiQ;*^@JbvlZteKRC2QmUI+m3^|yp*Evqc|0-<;NxGz8+>>@ zb??G50=y%RYJ_F)O^YN>z6fShekMVTEztsZG`LCJDHIfhQz~+^*o{T@EpE!7-~qzs z#)wRj6fGpU?1q%Lhq=^HLD`&yOpkQal2oZNG2mnI$a24CC`CMNmoP=TCYSTl1!aqS0h4DQ=DxL)EJoj?i+r5!+HV9m3=4Ua^}sHdfg!GPt|gY6 zCuW`Oa>(}UqFi3hj2jf$iKS~bY};RKc0x>HLFXwY|NTqw7Vjb6v+nFY|Eha3u#L4G zW`nM^%(r^M>_O)Okv*WpS)izDv_UH?Sx64=E%etDyP;}?f-Anr*d@~K;?AuuD-XlsB58fcNxtJOR>g36)K$$hQFEdcA?{8d1<#F?0xrd>shquU@8 zS*pr?FSZIee@?O0@In$!X^>ikMORPKe^3A05XLhxViwPXNzL6jdY|Gf; zd_fuug7k0wwK-vUbm)z+HHejo@T(tm<)$U}n~~#c!z{jE{&n$%a?pg^eGt(GiLR0= ziN~{P9`1CkM9>I>XQRTPh0bjBIAmV{QB76=J zVEW60Qh}Wmii365+kl%l&{;^W@#)4f!{2Dz-rjS9jfmO+703X`PPeIT0%Y+RJqnz&3>H! zmc1gZJGte`H7L;2nP|^CquhL^=V=1`)AanlgO=#Llxs> z_Rr50Kiup6b&Ro-BUrJjH|HGYiIR&NAv&@I!ClIkSo+XQjoh^bq~pH@GRoKU58_;F zDN}n8bqr7iix_C&MZ0cRC2KHjCtxt{LOR%QuS(LY85dT0k4)=Muz8m#Zi(})Mh0

Tc#k~~rfwGsy z;{APOem*@kn+Xgs-Yw8Aay~{SYG36O6E-LSq%dQ|TA2(`b#6V$%1xn=i{VeQkh8<< zO$`$sE!2S9dR-_{9h|lU zR^cX`ZF2E)tg-dZ!OH#nr5L@f6A$ctX(G3c^Mqv6MoE?FKW;x1G7ys0UwJKVbmFEi z@@}%SW5;i}!5O1p~K=^4}Un+6GL@lx-jY6=04~W6dg56g^VW)`} zdw6$tqL?{#tC;cBQfH`bAni%~H@!5+kYF9Hw@WI`5DhMZf6E}RC=ZzTYH(|dwK)*h zK-D`)rwI5@+U|>qFGKOqdAX6p8ey^E)B>2IX+l+nU{mA3^CSSaARMAcLJvsSO+_kk zFYbkB=jSIbkq?ouS}4pgO9k(lnY)QZA579hNKx`io$y6itpHztT027+lQWx-wogl0 zsqBx&yTr?Fz?cA0HaDqX0fmPG^T>Gjmu+j`D^Wx`-v=DE2~i8?gNd#-Z!=RMkysA? zLL2zL@)H#^R&_SS2il|>Uq#n{d|t5+9lp`kb_%;!X=Lv{$>;G`0@ULW1gP_SZoo{P z6y5uj;KG(Y$TJO%mCAaS1=E0x?{#*}r*BAvWUbggOs>-94->fIIxPwzSW9cZwvQ$l zdpp?^6|sFt-AQOa(n0A2V%Z|u-n+CA<5$YSH@5|J4%F!s`=9qR#LbQC#+xzbDK1x) zP7ziZK!L>JooG?=nX81vs%U1_tdIaDv9; z>M7PV1oo}!DW1GXNKK+BylM;V&S+GbQjp$N=Y$%B880_eYk1ehw%P3i?R4Nf%SGb@ zw@7Tx`8R_BBu`tp)~sYSQfGc7xVz{v(k)Qm^{8NuXOg;8(J&x(gd*)pwwUzH8+PB;1Tm@P7VZkM_f}V5DDZFkk zU(6k(16Dmf=ItJ6`V_-`t-(FmH+IIybz%CbZLUZD%S1{rvY>821-XJY_0X=5rXHX(JYy_PtEP&?o z8<*f*JF=|YzLI^Vuc>YPA+g#>B!J7rErm+5=ukA(@j%~}KPpWmx5&+XM_5uDz32pF z*OWepZXb|hvWBFkMW&D*9FJu4J|Jf&)JrBX+5?%F9WwD^MUA4N`(Awj+>5?9qr8UT zSPK8>n1qX@z2?lJo&Ju6J~8SeB~@pkDBa8h4tY~+IlDqplqG`3UOr_&5@DiwEBvOb zu@T!5FWa(dq}VnCfae_*$&9o|ol#=pOcnP|ggx)p8>zfeNa9AGdyUae=@KJn2|nCK zw%o`nk-uJpRFndFux_?|VF~sl6~`z$`J!i?87$g|)C1*(*!=hw9DKKr)7y zdht{1^Dw_*AOP+zS~i*N+JKU%VoiE8;SN`-Um!KS?Wnxj4G&E%q8qH-@3b@%?cYKZ zt*BVc;nq>8OT!6^GUVU=|4Q+tgW6XYbaDlXFXACCVDNP68-TDd1Zp~`Qu39dS`EAf z(w@V`uoD3L7q#iSTh_eO-o%3?qm`Z#uR~HACtU{m;+lC}9gA#W_!wqOf)SIL3#D!2 zQRQBzOZ3m@Vbg;(Of(4qB=qy`-fJNu(Vsw^jC)Wc3wLn2U_khH^zmvUJ+^8a02Q#Q z?YkL|UJnVW5icWs>1EUwNjv0~dPI{su%80gQWaGnA?n7#MaP57QWCb&i+&Y6(VKnMa#Mm8Ztay>oiHxjwH7h*n zGI#MQXvh0PL771qn~#=}OvSPr-_mJ}n6tcJi@|Tr9)4}R=B#$DSx^=q0l<|}fTxZb zUa_q*>Qj^%y|6c27Co{emdECenr5+L68n-V35-Z*)Q3}qinmc$%?FPvfnu6g&}Y2P zm4k@_ax$#`VMM($>cDNEw$m)v4#PLw2EB0gq;$rWxnw)_gK6J(9&JeF{m-q)N9kj> zbM{m1>OJevxyM}DpVsARm~qO28?(S)mA5k9NPM%eH_ zm_=66c|Ad2n%OmA4gfslOQ#xpiZk7oID57S$)UpHAhV-E{-~I5i8|3ii#IM!#;PcG z{n9g_5XfMw08hGfyUP^yb4^?$AM+rt!XkM z1Rv1y3@@bsV~~Wjcp4NTWPyNCKl9~F4TdZ6-By?)%b??-45qlIRjZUWOrAPo0Kv0s zqfiRmLifUUG$UETC!aClYjMZ~5u{aw`W^i4?X=DniGK9xV6Z_PfUd@QC%WubPD>uXcpFy6O7MH>e0 zLJ$wEfZNg49Hg~Kf0|09otCp3mIb;KD0pghD1C|*I(@A^p~{{v+$~BWTE-RI5Zn2E zOAadh1$n!LU9(WCP*iBifub^#n&cvuw8x%ZACl%v78?raWOL<8xN|04N$bQ@z%xc~ zNgIueB^x^I&YIlL(`io)qDMzRH4*JQZS;W%FRt{>6nY-J67D3sD$M1rTPcH;*f1js z!N(d$7+e`cp8Yawi;RiQe&W_BDxa(lkNs)yP+J=nR<=^KMOLix^Y78Vd`OviUjS^N z5KkBJ4CqZ0cXQ!;+3L;{zIN8tA_{6xjv$#oLIr{(hKvcLG)80nN#OMWHinas3*rm1mv-0+$;~b{>;>=T4ASwPw@H=K&Mz`cJW4 z+Tg4aw6ba`4(JNW6UIML2a9V$4Y79VFi0;=4vWCJ8DAq5T^VxE8HK=?AS^heia2N> z_C(p)S}ji?zuv+1V=Dhyt`P}qa6_lF;SWmU!Ur^d7zyE87USIFHLgERY!j9?DKC~R z8BPKjvyT6}pqo^@rDV7L$G|x1)2-HtLv9HA^|VPW3+>W&)WPMLxkM6mgGkPj=_Bg+ zTl&_PtX05M2XfOpfrrH>c4;M&!$k`Mp&4oao7!JO;)W{nej3<%k2}*IN!Icgn0K7} z8QA!+oi@c6OKRINT@1-G zU01PH>?kxJeUKuV<8L4)!2v(L`Q+ZGnxD{$nnq4)sHglKOSA!uvKe*8C=V?*riw^X znD9bP8-S2ehso^uk#i;p=|B~%p@hN9&PKkcO^`){=}e#b=h{K$0gi>W23r-#^?gj^xjYfd9dA4Vfj03FzOiLzbXs-(I2pUtX>iMLt3ee#CDf=S z@%F&o4)#kD$HPk74>0fNh>(1qUb-n~0P~R-nRbycmwqW`07X>muJ_Y(fZ^@o=z1^7 zYuMcZJxMmbA*M;csuv9tNQ0* zMO8PXdy&3CU`sDQps?%6Z%y}^-d+9HS%qHy*oD3w=b(|)rEuI9la1DNOii2TVlJg7oZ(r25hwzhwW7;1c%WVzz!t1ZM2p*`;{Tn~N}o zDLIq#fWfGDXX&V)&Ktv!~c^g>etwue8|Y410#$0atcp~7f|7QTq3P#z4>CQn{w z5i`wW!uHuRi=~N-8f5ERBk50{=<0l00d?ZRwE02M+wAL@>;tU5^~;LMMe{FS|1$ zK9v$ZkW9Xsbdh1*>R3Am!zBEF9QuXZcFa0|{{tYcvc>(gvD9K?qa?lG(3L61rs8^U zO^yKu%3+G$RJIQ_KZjEZ0@T9C#~*;+u%)w;==D#3b>sgYFLAd$VkHm}U&>FAddGXe ziEx9~VXgnvws+dLnyzXrjwqF<{%(f{xS`B8eb+##ln4c2H z5XO+Do1$V?TC1Tp-EZ?hFH9l8<+<6Pu(Ec_<-)j!hg6~;vZ}1w-t2(053?afFB2lu zPn|@wwUiKySO?-Bvl)&L6 zCXOQFF-=xywJJ_-Adr(`2)g)-=GK1eXNJ&TP%cPhSc|6Yk;FiW|Fb6;site<=`<0x z!^>#=8%7Z6mEFmzz5dBiPAZXbbd1tPr#oj19W0~xj?CAR91nGu=rk)94wjN2RTg^v zWa6AwT_0%$`gIBwY|w2$PLkpu;e0su%Kza0&^OSCmP?;ZAHum2XAeVAsdaJjdfVsj zhlAlMWG_4VVsZjw-nj)GMD7!L)FAi2Y|;tX>4sZ}hk_UIY}`iPvV@u(x!*`{5t9D_ zMC5@GrFif5e_t8bOb8M`N;%YgYRA0cTbLy03^Y*){Q4TE)0+_?38O`lt5BkO5=b4f zDF%5fQ(@%!-2By#OT0+g-)g7xh&4}g{iGC_ij6Hknp~{lk)MoLTS>?rb*1WFTRJn7 zgfMQ>v`@Es&^VoU-oY^M>>8^Kgw@iaM*M<&9=GJbg{PC*eN@y4T@JhLo>GPrb@!SHWdq~HP?IMoY9WjRwmR$jTQ;f!#)6HVsOw~-hm2255o(yar7x3go(g` z?BS@CM!!DATvGM}h|HQN`f*$B$@S znz<(7Ws}MAI1R{!nx#nZ_AznzCSIZN+2otwEa{&Ge%gl+8q`SC32{GxOC76$8a6wb z!9HA8SJA`2mH!2DTH+VL6*28~N)9W1tB&6Gk$bjEDD!I35?(b*VDVSj4ZHTzcrt}F z0Upw?Me<6nB~-J?b)28Y5+>IoE*{KPf)a_G)oqjr^ru1)|Yyvo9$#Bp3HVD@68FSnu89HQfn*OK&7cXI_}te1%##`xzoa$dbuY)_TzycHKR5hZ83m zJ0z*#c?}>o@DhNGn|c}MH=j;ad7!q(-d=oeC+KMw+kR23YcC z!;e^&Zf)>75*X&~R#4}z3!`94tj!mdl$lJy1i@K=rbI{=_m z&l6ACnNAoO{8L!A(z)6`oQzOM;+&^!y?61Wd`VqD^=njiP>TahX&8bc0o;CrE(hJFa zKx-tvPeG>_;1xKOP-z07zM?q%NbPZpjMaBo)0R@pwq|Oi$FprPiMwi*)omx-SlNdk zoSM58%1EMUTi}?T!n^V{8IW`yzg9RU)~Ddcoib?u{6DTb7hU|!Yy(VE^Ldv!Gam5N ztr%vF_3KMp!<$4*4T=`{Fpz#@9l+`AF|>s-Kh(d1Sep!!s4zrre}&Mq)fa`fL2nHI zoB%Epf(J0F^h$bgB(;YZQWE+`-sRL9?IMqQgd>)IzIHRE?e43ahm6{vs%A2=^l;|7 zF+1?dB#W%mi|ltdhR{Z9eFG~gNqPiG;HF;VsQ%&Af~uzV#I7~uwx~gY$-X+qF>8)+ zxm37I+wTceq71&iYOeRA?B|s+FjbFw`E)2OH@3n5xSM+xJ$eE5F%Rcy*-e`!2O4jp zy>oPW#X>d6!^7~_BY6o3;HunD{Rd4o$YDQU0tcji(u&ZlnEzppJox04`v3~4^W4-$ z)&~K=l~1Pjj0w3h2;P3#rGEGP4VbIEr0-GCo=gKMA7twd(|8~5|6y3G0xZRNYg97z z{{!%gsNd`9ipP)7oNCo+qqS*&^itq^<|+CbD$k>8in?s_;z;nbB0*x0Us+i1f*8|Z-u3Qt z^0}bom;lW z4xR+iHkn;B~bP^R`uX8@0PbF2a9QPsrzDf>oEveH1R`u{6%i$nrEgYBk zIwxE5&X*`MOIDQj)&h7txw!+|kp2Lb2~)8>7a`dlU=8RQ6D?S@DS$VWWRfTAvNhi{ zFZb_=Gn$k5pyd2At_+hoNyMen(GhyZODUhLWf=lOKQVRe#+a^LgB*$?!2%O^+;N@U z%%r5?(EhOAkJ(q+#Ig*HSLq*YYHQ=1V8E)6m=NUvdYC~oIFh$cj7N~=Q z_$=sMwB9xy$Vku4FiD8YXB$pwyxCF=od0! zOe{@`BWBm3xkmC0q-^_o3JZuP4n-HidK@HJEwGp`XMyFJQS>| zPxe$LwD+5~l7roWoR5qgp_zq*k417;EucsqSTRDKpttM9-2IeU3G<(}Wy?E56gSZq6AxtCY`y zSOO{P`(r(5+d63S5ag_bzyF-VW&(&k-F`LCwgv__#^48LeJa%d09&*h@ijC ze4yM8#-2ocGxdMo^2AQjtsnG9^!z-E`d6iAie$#FQC;$S+FRyt-Qg9Wp@TL))s5S6K7Z!4g8pX~^4W<-@)ONx(d{9Gs z5?30J{?J?-8S?`w&puWRNVh-Q?|5i<@1}7i9}+!qf_iNH_%YPETq6yHcaU}+C@}M= z$lt?4%n@RbaS$xCdNBmh6-2ZM`i)Co^Hwjj%Pz`z8cdEaWIprJknpIdW;pkAe%#ca zLtwCFp1F5Ur)F-M<*~Bo-yDGUl|hcO?tPz#VXXEoF7^aq^u4kPUvq8BB5IYlJY#94TiwrSTvR==r6_ z(Khrq^3A`hstXI8#K3~bV1!l@wzd74u35Bwodv^3iH$l13hsi8`sf+vO>UO8)-IG0 z=q-0dg~WQ^Ogh#Boh`ZEHs3^7W$d6i8X@gq5oyK8ashwqTlLvoq0+)*n*8{5AvduQ z)mG>Oi1tZem(~8PnF2v*0Z85d>T7#-93-EOh<+zR?Expi@bGTwDDyO$%1pC|pwHZu9FfxKZIGNw#gG&J{OA^`eQl~Rz!7>Ahjo$kY^h(S zZZrB-@?j}T|0oN*(Xp#F5!wS(}D6FbQ^XORj2@5uG{ABimB4Rvg|hJkG)P(%ZP1u5Kqx; zc#P7xCptXFo90I`U3D)?rfL>j*7lO|tFX(bSK7GJO|;e=Rrp@F7K>~QP5Q_(MsXyd zR6cN_{$GWnhwFKgnKeOy4dlPcHRg9k>a4(`5<&Q^mrw-avn< zxxG7vX?3W^qe_&x3lo?w%rkXgPM1OT@G=<~I1cmHCEOi@Fo$a|Dl?DD%Q9E85v*c< zjSnXWliv3O*=_?WOd&S~khbDCbH>sh-=?+pggU)a#y0BObI#@SFL`6%x7iq+lOyK? zf1Tl*x|J#F!*t$ENMoAwmCK>PCkRHT`uh_EY|<&gIYHK2rX+A%4`bG!{?{?~PFBy}54V`6QLuMULhbmG5>|ZX3rCVo+sIs_Hx;`r@U`Py&L z$oT%K#IXA7ZFWArS8ymA`cxLv7-agw=k{(@7QjY94M_x9?$!wa1gf%*N)adnPB6K< zM=jNs#shG6ds(@-2t{A2x*P5>ZhKJB_Qa+SltxkeTj4$`v)x+)h6n^a&T@h4H^+Qw zB>Ib;Mc(o5o|?D)Z{j!L&FSQoo(f?Bls|9{N(ZRqjqXxxOk?Fd<=cpT{OP>=o$;}~ zBkFpFMLd*;kR1|nkG9uOb4a6#8%;Hd)MP_wO) zpoZe3yF0839yR{{nL}lpOJl;7LsJo^d9^%HrgCIDan9usjCf-@q#7OyKGQ(B--{&T zZ8f~A#beH(j6Ec%#zoK0N9<}X<1!`BfW?C2EF;Awa-nZ0Q*N}nC#Lv}VyVbZ3swcP z)&mJp=rrtFbB<#;HSo0R{qM|zr+Bm_*hO`jCI3-{wfzec3+=NfLNzzFpMIM+Pl=mBc#xU_T;XA< zV}umQ1#mEf>1rzXosTnDQbl>7*+*HnXDL&c>w~yIv(pbhOXePD8@eQ6e0@?2pHo-# zfMA_+LxUP~uaWUF!ze_~BfbNzI9wYcL8d`D_0f0oCJqf z{>;~2h1LX`gCwC%m9$%9G5UJrRg3p(ByT}5D~d)RXs2Syj}MlEnDCD=i(KR}{Fb`! z15RXHWW82v*Y=+`HpZEh>?j0`nt=91wso)GHeZlr$IYfa@*R#Ka{eg+6mfPzRR4ev zJDoacBY(LG$y->;fKkbl;qK^}jjNa$R;;6g#TA)*p~qhX>TN8z19T{$fgm9g&3Sab zKOxGX=5~Iq3sztKEV9Z3Capz~B25lu;lTXJ4WTr@~Y`S z^j)<-RWIw-gJ{3>UTXy>{=VuMdfhXA!A=$vu_#KHYn$r7TVu`jc(L()YV{9?;K<=xJtt);krwqi8~C@_aEilSQAOXJSj3-xpR!-hly}N^0|>_TT>G z(pRI+%sCugcYY>RVplqjWX72<)|oTIWX-e(3mi-fv}Y1te@{v$IZDrr#N$RqC^v9s zWDO5!<>54c@flROOzFWend>nYJtIrgc$%HCV>$P0t;6MC?M&G$K@z$-s%2bQfKF|) z9Z~sP%ELpU>=J%@kIrA1-8=J(R6=W|ezl!y_19$RJJYN5slUN$SqiuJm>=$RC9PI{ zz-j+N%)F42K%?e2lA%>KhY_xJN7^)GEhVHRpjr~ITq~zE1e*%XgS+bdTc{*D@1qrm z-Y6gO8g_Era@5v%I}7>>Onn!n?PN)^c(u76PaW+yX1suyK5u!RuUHu9U+hQIlVMVH zC;}YrO^YW1%6ssI#zFHEc9?!a2 z+2%%mH!IpbgjQzU->Q#ccO4*=A#3jZ!B}34O(OHcoB};0#vZr0>(L;AByHz(NZp?sCaEVJi+u^BO5x)?zY2n`f-&m0Qhh$ z8kViX*AQq(l|{RTPO8 zJy3fDJ!#VOQf`{T+%MX&m-zu+=|Ippn9?hF>sN0($u!)~3;6Vr&I?;7Ex0oL3|fpD z2@G7kCY66hx)2^Mf2y%IUHHO55~MXEK0j^2ftsE?sKcc5 z>qGlxfS_$}rcZT-*ACK4A9Q4bS!geM@VrW)O9^rY4#EhPjz9k`E}4~0RX~`K+m8(e)@@`ul6AigwvUjUWvmI01m)rJ&0s%W8HsA)}v6|WZR_R!D z_%n2}#?zA_2EQoh6pHb?okLAh2}8bsIz{++5<9~@ZZ^J~eustOb(E;aFff$gRTi-K z|A~V9-0iyQvd0dAZK?gMHqJV54y28XZ351B_?{4|G0TftD~T{Iu3DgV?A{KEa!7mb zOo5pil#r!twc|2%#m+HpNDLc}G6Ca!bAnG$Rn3lk|9=4!2FkU(r$}FtiJoQfUx4#! zCl|h6aDojA$xS>WS=rpR`c5Z)9Kl(L@ygRJW?#Z%1b93`;&>g=DCWjDW>1md3CmMn z73&OEHSr49ihFfVc<#Ftne8A3R4Cx|+@~72lb;1>IY#C>1FMQ3nC)>P0~k;AQ57{m z4tDH{ZCB+GxSQtjO38>0=qM2%<$SCMQ|@KNm%&|6W8U~AfhC1*qf zex^#fam_HO7&pDa@kMi2&`ffdwjt{eE+xVpltrGJ2&)Q*EAc; zoAe%&O1Jq@qukWfx34jZOu^D3Grupilm$U1Q^7%;y}7PYWwu#qdMDJ>_@CBcqO5&j zSrET1Zpk&f;H%6cHz+gVxM)t%l5?BL0}!jxS-Bs)p-S@t{PQ5(FCGGzl4vCG}6l^Ra{h zl}6ee0|W5s3Q=;s!>vJkqPXn#O({B!`^auQzm&%*VOx!`EALO70v^+oWas{*QD5&> zYRvY1)szCqLGN=86^wLZjWAwSlML|+pShxGnOQHePItV)1SKJXBEgO@YpPEI0-Tyu z+$A);Wh>P~D1B%YiDwexhl~>eEB7R}VM`)IG=tx+JZkYd^SJXrXVc#1Z9mxDn|py^ zC3mzPKNcCrDqO{^?@XY6V30rr*;O)`Xs8fvn*=~%66E(HF)P3c#1s{$)bK24$b&y z7J{c7UdM}KuJg8ce{ZpXF$ARJ_|^9X6zWmmRRwA_N*I{^*J4J(YYR3Tvp0vjn2WeB zE)GbFtCtz9esQ29oC^%m3yUtm2D#ZqI2qhR1)}SwW+~UIah|6Ri_qE(=5j>5^Usn! zQXoU`bRG6Tct@})!K`-{mcd->79Y8Cc%xfVxYxv-{;@KgFZJSZxhzvz^s4x4UCYIx zcXkC1KAvmHNT+28Rl@5$00#Uki)#@73f{EoJ7Py6^sPJSOb&&VHvZ|k0=5Mqwm)yu zKwaLfoO^j83DP}y%wvl`4wY;Xl{lyAYn4dqYTc-SL+;|5K(qQt48ill^51d!IMkbp zctb*sk?LSckF9nIIHCelAc}N!BGB5@A#vla|L+Z}SPO@B`LhFGeoIe!TteFkPX<(O zv(rkcJuAv6w*Vh8wh6BDfP?kF?PmrX(~WkePTd-e81l5?T7QB0y%o)~P-{gRrn|gu z85g30qsN$S4FlV-;suixa&BqV#b3b@BQ9u7S9HcKfj=Nm(($YmSwo|R9Ofq2XRb?Y zmA+7^jHDvfhVEk3iUSdSz-`u|H^>ho28S0!+!c`cz&s4|sxcG*CZ=%@fBekQJZ56n zdpACLuH$yKDlKq@ruIT3W~?7hK5w@q%$|6ewf%0jj=9V(jdn?VA|fH_D}@Z>H9oY< z^*JP9a0ZDfv)(jQ#xUmw{a6Tr>J9D`jGQ$nyfLUGU@S&D!0Dod&oilJQ?~Z)YiQqr zFSLCgU?ueclOmQ~b{w576dnxnPLAdT`Sf(`Z5@H+u;x-Np};6pvF5yu#En>bYSX>o z%2O)Bh5)i|;?lWYU=Kd%DUtNfDe0ZBT`EnmD<3uOvuAUa2k4Z%U~-CblplwhQDl%Gpgpp)0b+SE^E+$Y zhX>Wb4XqYD9s^IurB9rhsM`;8Ue2HM`&~@6<2+4mDgnE^CoPRzlk^}V+xh`XjTa{( zwvRZ~g+Ol0Wzq>o9z)o~7>JYz^v^TE5RvWSXPB=Gz;qnF|ULxz?`+3hhC zgvOW?b8;94lT4tCJr9uUagPb4WQom$LWV~zjdLD1NQj)u@Hlk{h_M)S4Ur~ESLyK^ zEBG;6V?F|FcTMqf#E3SuhzY1ZhQzkNÿ%`N>_mo#9iD79jF+1k(c$yjEXo;Zx& z!zybzp6BbcDS&&PXyUawRD9*ifQ*dN3-QzE4Qf)nRphYWwhN0X)?4QHxvy0VZxktS z-6sFv*W$0G)n$CY=l*Px$^q4D5av<{>%`DzMBPEiK_RD+-9;xi*Ol4+<-3E6 zdlpq>XtF6!RBtqlf%SX%D}(!@=TgUdc1a z1Oy;!Sp{ky8o)1zjc^5^9*(9e`8d`Qay_s1M)haU&+lkS+RhBF##aNrWc}H~bnDDerM`<9!dP z`Byvz9=Ig2*-XGe8`0;ZB7QSiD;=0aux|J14NOiA6v$(#`=eOX;74Aw`O#A^ZNn8S zCBz)!=;G|yYT$d)g2@Y^8u6q3lS#z@(=Y8UrDkptX6EZ7#K7y@?lIm^QTsfnVVzUp zEkjOF)j**sPHJ&>%tf$cs1tyN>Y5LU*p;Q zvB=}p^$M3c`Cj9~;;7;q9l9%*xiq7ePTn=F0RKM#z`*_)|eN(QKW6JN>S{0bhR9LD(L849X5VhI3 zcGH@Dbrqmzgk2wyiXaM=C-f*YcVLZnaLPU!Fc9HGOHRi#v_taa5B*rXIxMP$(U*Tx zW1?;g%1S40yc!|GSg6l|fKw^_8%+P_ml{{PG6t}U?tG7vVLy-m)a#?BlK-AeB*dG1 zFNT1gEBhbeM#X`{l=cw~20p;dxRxWwBy=dxE+;EX@&%5H1XQR(*l5k(Ij4UlCL_GL zQ4|?nm>7afD=G)52KktB zx@Y`DZaW@%u-tyijjzFc3_1DVLaG>1=UqO;L0H2tQ<4V}#liEkw5Q*pnv(On!5dD` z-6}G^eK?ioxZ5d`GicG{#?ULa>UAD!uh3+#`rh~14(jpri~-xap=%WB*E^r2tlNV) zE$NYPXKX^gNj9b3GhZE8`;pVn*6S`BG(RO zzO7s3Gh}wh+M9LHx7IU|l00lP>RaLY!M7+&P#;Jx|3|nBGFCWZc;%fwxb(Cn0u*5k zaNHcmCQ0gA=&H%&hQfCvbv&e>lJiLMP zY4grs0+TY@`)YxZN4x%7DN$TW!IB0-U*pr$tLUbgyv=nkH{z0g?J(%)$Bnp!?Az$A z2dsLw~9(13p#fT;LF=@G2EFsO$TL57pBXY0P( ze*OT2RmR6}wu0p*(-mXsXBm6bQ%nikM8=~x$&7P+7@O3YGb6?b%IExp#RBwcyDtkK z40OrRU3waq)j*42n)^VC(LU7HV2Zno$ZHQd^$!1_+?deb7&U0<^Hb;NK_}LNTe7$6 z->qP1{DvLpg9{>6BCCx&|*vkJOY+Lo28@-;(9Y4zvqbV#UGkU0SonYZIwY2wS&O z@WD4})U6mK^r+4GuAuCF9Ws}dvRMsD6oXn5dKN)A}=EXUcfr{V&S?vtjzI?j5SMhck<>2 zfOuiGFlU`Na;T@M`t$fD=z!5`!q{%8~`=pUgiY!_1ESQ#GXWW7Y{joSfrb z(q`oaWF$|e{+6h?HX{<>OWx9!Y4dc$W~B+3@bCr`;LL!m1qsdL0i*PvZ4tKKiLL~e zr5xR7v zc;y`2Ic+V}g}H&+X{x`h#dsp(uO-#>mf7Owo23Fr6>@gezqd}M65FUTAg8KJ@1PMZ zcaSykj4vXIOYONt%ba4~JGJLAFXd(wCTvgfl+$*J`?t1R1v6cgy3i5Wu|aSNvkoF7 zaJCzX$z>#ig2A_%%av$UUcSw()$Fs`J~BOGU2jcBv+x^P+U!5gEf8%R_I9H-&7mtG;N z78qnO9nNlwIui(*`jZ1D!!METg4{Qy^5qL2xf;_J_AnK^lI!SjCcfE^ny75^vlI~o zIxce#C1dyNMVXXJ>b~C5(SOR1h%zb&g=}VFFj;n9`0`#tium0kMeb%-=T2R6JWYt| z$xzV7z4kufW2Wp^gxvi`(HM*3%>1ZGTGtuEp4<7UUERD4Y!fzX3B73poSK)e=jq=o zsO)zyDYcpZVfQ~`1a>AfdV@_FE56&HO(0~$whupnVZ0Jm?W2-331e9c6_=Ge2ZZ2p z(A%cDOK&-!{0U*uifh?fe{JC_vSrI7t=dpMe@~}tMb-f%(=m#!E_1RF$|m-8ec%HS$Y=nG!hbqA{%M1;*vgJ z%#cf1F;~EWWR{k2SnI{C)5$;+gP0=In}oG4Z1;Hy!}b%!iyv!)1!ydf*!^tH|aX+=I)&AhGCPBI49&EpyTb* zVGgSFRvMCrQC4uF?aDr(^@RmT%$)ZP3@T|#a+maB{JN#DFn|K7h%MD0k0HulWTZj6 zi`uN~Mo3g_sTa);U{1lbnG)3Qit`#W(cYcRQnGHdqh{I#bTGLdhq^x-=6{Y^-Jjvi z4A31D(EzHpFmXnPT{Y>%mr&)Au~w_4NwK|Pp`3joYkG&$2XnR$fTOTA3sjLRF5U#4 zf(BXY`SY)RLk9T@)iX1*y&K@%UJSba1kqK}fUFA5%gfYY2SJL0nR2>XGvf%BJBj_= zju8-@HqDohE&Y9=%ucV-H+5e_XS=khp8{Ma979Sd?``+-OPnd>ObC41i7uBq^BPU( zDXaZ0a-bb_ebi`XRsR=>2ZL=*+2AwVi^kq~YCH+~h{ClbCj&z+Y1p2KNQIHm7t2Zx zolC%~Ek=xut@G@5V?tO1TZgbk)Y)i%Q~K0oEZu9yV;=@UGSc5jRI#agW$pisRW}VC z?&bU`3Vq0EMq3)k5EOLm-_*8i!)uCxV^7TVt3C7qnbCi9Hy+s z8?uqNy4SgXUOGv78J;R)wlX(&U{g^w321F zo;mh)0=;RNxR!nwdtGGj-_j;yKvBpom2tMs| znYXI#8q63qCdeumf-++){A`kOX1nlqdouiLCW+ja{cih_80ar0Vxx0@b{cY8MM39^ z#~y6B&AxQb>H}9EyretAJzU%$bJBbzYkugja*kxKi~r9%3!y8)+FU2NE9o!Dx#rjQ zYwlS=w zs7^|;6!Drp7rqI`SvhBSsHDiSv`uw*TbGAIt^z3dj8cN9;8SU^AaukLEY~gUS$J~E zI8;${S$QBq8hmW!sqP-|tgR@z2x#JOsg|rXk%x$y+nIyPfMwgVJn@@!@Im{fl!WBh zRQ|$PYn~r)ST3tDnztzIjPrhW2NO-qpyi9hq-VhCq>lM>;sPyC%W)}feSmea+)|NX zz*>=7dFj89Fqkis*{9DA=J3$=gmn zq1+1T5^(UFlRUUO1^&@_+gH2vdh|nbo*GX7YYEPhCAPlutHr4zq2pTuI7bw$3d(G) zxyyr4T4|6{*y1aD3$efpSbl!S02e9#L~x-3dhU7tP@etN7Pza60n7F{H`cKVYa%(V zSC8DTH0}Q6bwG7{k{AADm;hOwu!&Ql-_%ou%%v7uHPQ;~Zhz#|c>~az<&uzVm{^ z&4<+^i5_SM7b4r?ODsyB^5EItkn-Xws<6d+Gd5E=SnD@Z_6K+5{}@J@$hOj@CS!8j z_%v{pjlGaZK0|zw5<`~Xs%OevGp~TZ>;XldBBuw=7m zWu#;RV@%8D2AKH83>`Nx>#c|>xW#+LzW*D2N-?`5&6|*Bh+~g1-9XgiE=yO%AIg#> zYR6M1AF}4&X%r>p_=E(SPKOm5dWv0S1fR>NqP{R{rn?fcp}9cebsm#U?XPi?82+G} z10F%`-lQ0V41b!qN3UaEJY&gpyOOGB%Ay(cT(56s-^T7!&gn)T63hs>A`Otw0*BZp z?Uwsf%@Z9|CZHVN(*n7FR?i`otfF^GnWfQG0%t<3OdG*$3tSMJ~3hxllPl86@WUQowPi^3R25e?3f^0P{cJQz;I z>^wTMZRe1Bn*9F#ah79joa+oV6LKG){etN=gZN^U|_hWI1LvN6xT`z_sb4*NlAPJJMWy*AT!1GIsRi}io-o6_D2-@Lz2DQ-MD zGzI>5oyHrr^5(iKj7{-_?KcH2`XM?d(8m9wySPZg-|#X$xrN(Kwzg)p%2@6g{I(_j zi3|DC@eITx8LnK+*=tsNADTy;xsX_OVtzs~YI(TPqUsvRF>JkDoYJ|i;HT-C3){30 z5cC#W2!XRd+Ku@h@)s6WJBx;%w>*kue`1iuzAgynNUG)ZE4to4n!fd=P=U6 z&NDoJzFnvPYyL0q0xH=tgX-15A{xZt&JAc~tM_aWu{g54Ly$HgB50s2h*)h2VINIgKnm0DaLkauuN^yBo;N8SuN%WjTyDW30 zCR}M=k$W1C{}~|or)q}c^j?N8^7M&qlH)w z@BbGu57McG_7ct7eA_559vTYl^UYav6G8E~yV0;`t_Nvrtz1$(KoB4A8DrcXm~qCF zI;4XX9ZhQepd%BG>|hcB@}NR_q!&1*4cI|BrUimH{5no!zL@raE#|4DGerI=*!KZj=DkYjg-`>>8mW0{rt*+kv_$0n=;QiFh8 zh|N}ynr<(L5#0js_SRbdop!8?{LS>~&b*=DtWqeCYSDIw6*%sA*HV(px-Q4ZoN4lZ z4vhGVAPPxAinjJD0Ds04fv&zEgt;8ulY+Y(L1G=_U({9~%Pyy^_BS?^vxN7+70fWn zBB2$9kFO`#Pl+IBa9-hlPe{qum-GenWm*uwqQLXQEQM#rXOaC=!%rSWv z$#*_kN6p&kVn?Fm*Oj=(?@8hS@ex*UoRyInN`5g^K^L5CjtYaJ~lS;=t1KZY_-7rU?(+bB)n1sP9QN_ zV@MJduxAWQ(CZ- z8QKx`!Knq)d%kf@mtiR;mdtcnO4WrS>pEq;0=Uu=BuDks|3$abI#` z3+&m@w^i}o34!GPPU%TYVAESe5rlI8HV_+G~56F%|e z9T+oJv*@jCB;pJ*t9XKWQjQ9(*SO%}q}*YHaB9FM^S)OzYtivCvnNWrT;saZwzlVa z+0)|O9V+8K>dmG{AHj!zp+bTFCJt^~!DVQcoKiEDN9X!7wEt98E6u)>Db#xt-;_{p zp?y`lupXziH&DTJHVUBFLKJ!dHBzvC5CnQggWp+#Fif9!dJPXDG-F_!lE zNUOtPeOAk_0@D@$(h3Y-Xq&PWLml;n*#+VCN&jaHyGou2wROLKYIOojqZc{16rQFX zgDeR6$(&^Ig{pQB22pUN&fbcE4Ym|DYRnrn@hkb(>MO9@-WP4J{NjWx@cv4sBK>)D zu%yCR^nhtMHI^1c9><{R9m>WJdqVCQ?9nmXX?~qO%3s3ZkAy)`JOH&u1&3BS-hmq) zia2JtQ;q)~0}Q+Af0BJ-XNMD8!`=Oq4_wFHSPAvi%Bo8_2!J?pWKkI{o{|DIwfG#V z(i?|1vFvZc&XjYCvjyXhWntS$=`=lk?UxUj zPNmBC4VT{FYA+qV;7cZ&jmQ%XKA8!NH9Jh6n7++c#LdwQh?k@iR%PpL1<%_BY=X&G zwG=AFby4nSEnoqg0W#BI58+;05TQgrKYf)}I^y@~W2@S;5yTNcGmLK?S_vv6qzbtg zfUnR=Xwy!OC);JLlD=a<5IP9gti;b^ObaL?#VGx>Xde7^U`e?35ertKjF|dplX&*c{-{Cu z>L}q=0MU#E>W%&#R939}@297Ij5*-{?(n?G=t`MV=ru9)*S=tHAjOw9mZC2l*s9LN zl*s9BF=9(%^8~E9r6|p?2TzyQK72&< zCNvAX4W02oXrn|5NoXlSY9oUmy-b0%m&!_<62*IIobMZrv=~gK&J}5Fvf^`GL}+F1 zI;SM0^*#}cGvLwwx+WObiahKjPJiS4aD@2y^oac^r$M386MDP~qiX36UvdXPv8;_o zM9T{PHoL{tB+ZDC1s@{Ao;O-jy=n;U{DAWHPS}OsC%OBCI|%#1$jt(7`NocNAA%{N zsFkNivjyUeuh`2Vry{Fm0_4`*iv2Q zpa)gp?jW34Yu@@)7?v~4;ig3d?`RTFBLLWf@Ol59z}D!1F!(0m-|3iBCGzB7?Za*# z4r*Bg10~Xl8U=~M(azd&X~!NFpltOo##mQ~llI>`I#m$M{NFB6<)a?Ll13zNBu@#{ z?-jc!dZmWGkL*blB$kSlYVRjp5-G`@tmhzgb5}_}$Oh&UZ+D}TJM*{E*ZXO2Jp?EG zzkzP?mjo^wz)MR>XHTPGr z$ifi4km{CcnGgEx z7JJnBASy;)+*y>-dqN%aSR-{GmmyN7o_nhq@s?%y7Eo;Yl2ING?<+OZv6rJCNTVxd{;pEi&8WU)|C;yG zx3F6n0etszGYWNFPRsFr2X7SbD0Asd|8ss0(+Tvd=pU*-l51IRcz!VYVfX?L2#%MR zYez8_L1LdEoYd1nTl?gU^8+Wndk(8mB<6|9&`4Gz^U*@8WU3-!W7Etb1ui-E!0ER& z8o_-KMOFi>0hvifd4igV(OGR8wg1&m;k?T#Ob)0amwD{zT@HCGX(mS>*uuXH8X3U#ZwP(yUEO}e>FN}m3l0s%RLHJ++KbW z|3rkTcqNP)bE;AVP_xiHpo45b*r&_sD2gQBJPln2dlh|_TXypJ%xdoIdcv)(aQa;6 zJ%S1-r#7bF_>I8^PxI+MhAAA07s^SfBd6CaBbAYz7avr4#8DxMT1cW`A*0?OGQ+-$ z?SJrXVeL*Nvo?1h9pfa+1u26PliY;VLq=eD!$?AtD`O-W?4kC1(K4<3!HsBs)IIJ9 zU3%i43h7pY`;7Sg0zaau^LrRlAdlAFC`75E`;HNSVkqp5J(oSsZWN4eRtSZ&F zFSg{AM=yzZN3l@o_z$=PY1sgAbLw4*obL`ZlQAkS0bs;$%pc98qGxn+Wi&cd{2n7v zjwx}aO^q(Eoj0Vt5N%M79+0KY*e=;~d0Ds|+qVjn6KmHnF=vC9A0=-5bE>tq{$Lfl z@ows)iifnlxm_GLdbt;t5*twyI`o(n;;UHpG^2>V*IO8w1zSQ*RoJDS1ri%WYZ57+ z5d1|WwhkfDxRE!*50I2`VHGwOuciK=FgR~H12fbXefY5^_A9D>cEo;2&_c;t>*X?N z&xW6+M4BPy!g4VR8K$?RQ{E#w>^1A{P3Du-)Lb(!--}7i35YtOKV`%-bylxz8jRuO3Cp{yHkWp%`1I5ZAD*$5viLH;Hgsj3Coa)2aW0J8G-E>gtX(k%ZDbodi28PF;Q$9>lZX07w&T#A#;u(m( zr>>_2E^&Si)OUCxLBxXetZexidzk-`aXO-H%2(k`$-FxU23(Wt0 zbhds`x3$*NBt8cpc5ZkO{v-Npw|rxeoNkfm@{_%72iyni(da~ODAtR>HNrW8^6HTi zGzb}rt@YY`5y}}mj(E~zcQCEJhryz$6YK@Dq`K9TeL)0@aSM5!F`Ew!`INU~u&Yb$ ze6jq{%b1+B@}invvOI_->Z5*05&=#fIgt;EhSO)IR-{D(^Mw{xjH6*mmy*2mcH~Sp z7_!H=BSTWp#NDMCVNVSEJt4)ipSMMR{CzSc_=^qVXtVR!Pi@9L&ysCJdf_fKwRcy{ z>qlj)NKVR$cxJ_r00wpIw7s6yfSYSzCf|7+Q;*tLjnJ~`i?9U%h3U7cZ(S{<_A2$E z37oXGpax{H-VPMnoN%{^j>8g;6KXGC{SgyBs`r#8CCg2F(NwS~5_y9iE-o0dTH7^Gl+|Db9dlRNl$@0Z zo~7o*F$A27ARG-y1hjkg)4YPv`*dH3&E@CYA;^acwg`;JBE-wNcDqQK{^2*ZdL+3+ z;|C#YM&iiVhb^OO`2Y)M(Sv1*uo9576M4S-WTtrqF5Y zdiGqqF{2M>azB%hI#3&)cqR^mgeWL6J+?OZ>VWI}oiX%tI*;j-ou=o=LbtyS)KB80 zZCT@J(l*LX0y9hE9a}1`(#-%Bj-H3Mi|~!@!fBW7<_OlWRFg9FkW7B)G>5jN?-j*Q za}<5-FXBNv%m_RItJevh<>-5nrdfDTF~&hSseWY5yT{0&1ha>Y>}8P1itgG9+mp!P z6)wm5Co1!0^v>3?N&Ihd?esmMc-{@H4vsc3^e9^|nGOOBcGS0K;VhoV6a5Oh9YW*JlR$uP zHSY|Rs=e8;<~T*Z8qaotr3(5({)MNV^%8WwwK3Dn1XIOntAPTmtArCw|DyH z52E5!R{&$%IWxV1k3*$M%k3)f+Le?r#3(zYGI*0so-0&l{kSU)lRhZewP`hNdzmOEY2g% z3}UJDi#wp<7NJQya^Jy}x$$(6^5Yx<{boq(srN#ZmiP%gV0*$F=#=<|1JX1<4pb$V3@=Bg!pHE*a*EZxqz43j21I4m%0#4rbyPnFp zkM5|WC%skU4b_uPMj34BR+9UBY`8O`o}Dr9WVo?r0}7@9Msiu~BuN(si{E4PEx zZ67WrqDCWP6{B*{eAt+EIb_*u8Qz%1fWXnZHXhqRc6Us3|FUlY)LQLT5U6>#W3h>~~<# znaol`p6Am|x>Ig?AdhE!s-K8gOyvNrTx9_^YFMMU`$RZKCD;j7BUCix6xp0vFik2y zc&Q!8TCx2o#O#6sU!^3BKDHgFOrZaw=cK=-@T^f7kZfhI5Yq$e8cLU{+}X4 z1B}EkhP^*;wRw&=u^drY+E(~=w_-v=8?xi4>uhHLTau{D99d5`j?u&YEDqq9fYXDg z*oLkdqr**2B0@cQOB2jGIFuKMk-evg7#-FG`UJ=Zh;lCxEzd{?4jr4W;vf4(bbrh{=#{MNOw6`(feAEP-2jz4VD8QJEu#VE*78yyUnbVP z-T%^9rAjRsjJhQ^pihXg0ZmYj9Y+k}vw$6#wY!x=Ax@v%;<2_&%p>V4f4qo?s-|3& zxU?Ne56y-$x8LQAJzFr@UDsp09X557zA^NS+eLKUZ~riiAoll$I9+2P$Uj|6rD)tu&?F%GA=Xr`DUi%FRSWh8- z0hZ%F`1EDFaGCFmOZAmgBH|7C2ZFQir)~sKx^g8DQHd{n0^On;X(-8Qytt|+d>pmQH&TN7EY*x0lV`Y^U@%^g$rFwR%T4AyF`JQ3z)ICzZ;Ox zRUrIzsy)H1o8bO|3>brN(aQdib-B+~m>bzi-*3+R&)G+}?T6P=uzpZkDrdXzS-BMu zzte7}6ic!WRdd?7tze?5=5;NwA)XpH?6~vOzeGYV|8px|F3?S67vY1Cl>JEHuFYTvDiaS)prB9+l#U9d8`TRqIA+7elSF7dXRL@CNokrci!}ZD zPQYRksD6+z^HQuNds_D=>_@ahX^;{t9cZi?AksLVymaRL7c}ujPC7}-IB()GpL5ysfUcir8+Q8Rn&}jpP!i~p3p~qYl(5$nN-GulwX#hfH0i<`V zNEF-DwaCKPlHrRpA(HuP#bVC{pe|P^&!NBdWwnTLK|USjT7-}p`i{V*H?OziNw6wu zkJzVDfBFonQya)kSv}*$`HTc$oEo@wC;~t2RUly5a7VgkI zX46Aj7o*+_j!bTso!9ar#BF#?EjOhB657;4EbFX9oj|E(rPLfTZe~_Iw3urs8_YjL zK6@PNR_!$w&zLGSjv4hQ#SXQygIUdK;Sy=WrZB4h#6Ng2U|n%b*VgVL(OQN&!=3TFyh4xKD{Co7cG3zX#9Mpb+=c^ zbD%z|(jlA@h$v~+dF~=9@V?V2mV$d&-6Y4F%-U2#4gidJuTNsHMdCSlrs(0$)BvUS zdoW-pd!Tt~bi8>H*=3f4gDgrnA1pXeND9pt_DCa`!dxb6gH~AMgwN8SH?X4e1nyCm z27^1q7ng0V$BBV6XnQF&GoJD`>mYpdj$S%_!ty0%TXY2#+lv1GZwIXZN*4YzR_sWD z0rZMCk&COc5~r;ZcA@!OhgHF*T1;1-Katjuu-u3rA`yKAB|AP=1d24BRt=NYV8@Y4 zmD!{)0{2Kc}6Dv^8emt8>IR|5}TOr$SZ4)dv?~_`9 zWCMu`5xyJaM=oah9qEyTtAnTFwTANrQOmvEs!LzQ&bG<1eMteFxW8WWty>!eS$W{w zqL|c54Bg!?G^uz}y(7;0D-p+Y`uFBD{E=d&n5o!0zV*Zx0^NM-OH@JkF_wfKI)Wgg zv4D&^Dj>Vg@54SAQrSd^YAgR@a(Iq?ax2BmJaq1!%r?Q8b@Tx1wm;WDWRsA2g0Bn3 zy4rxv8%o2Q%~9^61M#IM@2v>NS=`xilc^P--E);nh$<(sX%H0fgSwTQB~IFX&EU(= zxUJDf!sEoIR&J85wZvSGLZ8KZ zXD_Bkn0r#il`P^GS)37zSj#4%*-(0EQ3MsZl(t;QM;)tN3}YmPO=o3IBpTJ2FW+^IM0AUEARx72;Iog|p+ z$CK$Fs==~^ScMu-q3Xdu68_7&-{@(8ZkuV(Ce+l{1a;C-)S;v9Yklx!PKW^0H0L;L zK)6a>w?cJA(4@fhXq*xnC6V(KJ*zhGre&Uh5VgcbgHGYW81sd%Ey-Hwk!6lnLh`A- zOxmF0F!Lz@)!{e~3v+Afal!oxa&-eF{DdcUaxF@UX^9hJB=_8TbSt#UybfeK=?HoW z(Hr#)!;rwiFTXD-ZCB<9?M#l2{`wUP07(c)dGqpscUZZpTW3`w%p1v_-=K$iStfHI zucc`|O9KhPdHij5A2MzxUjRtfygU}Q!h=@2G-LfUC03T!o=JBy7*KN?{-83G=eZ^# zF)%XZFlvF_H1pwP(FXf@NvC!y&5D1%+J=IOM<{js$t*6nyny{AQx!q)1mnhvznV~H z+Q9UT;uGIwzSsXp{(fvRrPjLh#k0Tfz4&PxZuR6j?({^$l!F>%t%tgS;f3zV zoVGFteNEG2r~*KrfROt2{uGvlM-LLHi6Urf5NgkDMhsm8vpAbc8gI80-UUA*Y++SO z9TF0KJ58Va*(T4=f&QM1A;*Zo44F%~fMvf}F^R-kbK3v15_(+r2JrwZFqha?f~^2X z$0*mat>vf@>f46XP5~^qJtqB&bHS;YjzwKep2G3jCj%9_r6Uz7=07{esYPWsrRQGb zUVM=d)x85G?zy^dq4#p*tViBx%5D1a%BPY)8q5^Ze#z*lu1JS)8gWtO{RcMVKz%5! zSSpr_Y?n+eh}9J9$E0r`?efEcDhEp2j}*<$?ABJmj0v3WIUht>m3-lNVg1 z9}^)>B4H-9kmLC%5blR(ar`G zRV(!Xv1B7fFN`TEI4*08olefHj8Ss29+;sV`~Qw;UN$~mIzQrXyYAmc_OG&4!H`utABH#aOm#OO$1O1 zmwF;j*YBp~w?238M=r~66&3e)$PXqif4UTfdl6ghr|eMi*X>PYTpVErH{v%2h@pxs z533qDUmM=?2|v645&uMC{G;||pC(!NK=-p#CxUTAn`kU;;1apA7*_Rm`xo_sCuZz1 zrz>f-7-7$_UjCTwEi7p=SIL8+&fs2>S0?-qrITw!l6Mcho-XYn-Zi2$fq!Qm=I_`b zW;xYYsG1!Tk>a`pWl}lUc zP(JY|6+&mIWv?LzLq4<`rTfFJK~{J~6O1>Ey{o=EpZu+yXA{~Le&KO9QIrBsP>yDN zYrS2|f10!kyU+riJQNtCq2?3?<#Vky>Sf#!@p3Uw$i87AT-i~WGej}?1i+`}g%S!m z0aBG|uN&SCx3b}KkKZC6Vnt&ME4gVI=V_x@pQ{jbU%oz0B(xSEmp6G=WK6!ehMu}C z=LqLbV{`^Bb?DvUP%CB)vayz}SUjMH!a2xl8_(`yUJt;6T36xKtfw@CL+)O>SQfB+ zFN-@9XsBvre@HiA2y4WiHrL|J}_x#BdTx+}Uw46e%<-N=9E+56RE0#rARkfo4o z$6iaiOO}Ua{WCG&FGc7Wjd#3fs>^zqL@PY&;d}jV04L3E%Q@GPh#q3s|xfSa|f6HAf^y zZ2*6pG&l3IjEh5LiHKQfL~y1Jn^-D7ZcWH1{8%n)jC{<>_F8dz4|?}RLyV^w8qQjG z_C;ZC=u2e%F$368_pY_E#`HR2JfBdBUfMCWEqxGCm@6QV&g?RC;Qr|+3p3$r#j(N{ zztep8*AuW&G&TX5LLo6GC6MS6vGHd z!_yeA&bE6cc`tlQ77UTah^$>)|M;TY4>+x`kCia{*mL%|i0iVoWn&DfNv0o^h=45n z+cnFN`@z}9nUfEcANl&5`eozv3Raqq1oWtI;a*PRmn!|%As2rHH3x~JS#C?P9JFcZ zVktCiL|6LPzTpK7y4u&l&o_hd2$Y)HH2Jtk>jDUvN<8R<}4%C0b@1n$a2 zaYC$|>f1@CV7t_a?rNZRouy$-*5C%sAX58JIe&a7<@Jl!20e(7tht@_TK>sDC^zO zo!+SdAmyZrz+d+@L20=OD%7;T$<=WCjj<=wuI%d+6*JY~w7yJKI15hlRGgammNRVF!0ml0jZ_qbfX^N#qtr71DtYYq0? zexe)n+Q%SLJu(fuoQ%ErFd+Itf$j_KC?|BTg?j<4?=Y)K{4ym7D6+0?Gy3-cYLVrc zbu)avUoBxECbiqe>nvxT0>t`rk}sP1q6GiL$)+I_wWk@59fsE z&Vo~kP$EDS=XAx^NR{YesN7Q((c}G)`z2OgyEtC(^EEB<4*qPDz-R&sGm870m}+4k zOPz#S)J98YCg2U?(ymM5!9+i3B7rh~9CCB*i_lU3QTh{is}1Z`{Y?#RiwwS_?uqlzK6b9EyzusNs3m2K7mxJ3zQiU;%Hf-F_L>ej>^;(o& zQ_WIgN(D$fKZW|{L{KEg_~DGP=5BIUXN1h1GHB$p_0p?_E3$!AgqPUG{GJ%KaQzhZ z#!Ars0t@S&C0V*`F~!9|a>9F@tYt{oj;g~wl6@h@vp%3osOd{mD$pDhnIiF7Sl zOIP|{viN~(m?fg6hMpMJ7rVy;32|fqk1~|w9>P>p*u=MQSG{=karVLZL-I;?=G@>r zbGlBQCL#2h8|RcoOWS+uI!+dYvtxj)=Q*hp#s;-VBf#4#M0opyjAm2)7;FXwF6=!w z9=n4hg&{$kcpi-``EmF5p;IKsfQ_mR;=dGKDAX&11EX^x5LE!u9>6orXe%v)1in~p z6hUn*K=*&7R?h9Bzuff;KXjwl zyViW$cf~jrUj1&hNvkN~v%pP7){MSL+E9S1fS>eD_#S+vpPP&7dB!q(OLrai6jgZ4+cj_WDi8ydN}JuIvb;R z=hA(>0(M~-O841DQ<(y(LhPre{H{kI)5ILji1g*H$`Ugj8HP5jDCd9qOfY91Qh&YH zQPqP+HR$vT?8vkSA5~pEsP-H%V=;FJ3_Z7$GWA<`vkqgHt2V>y?Vl3vCKyi|Ky(I< zH3YOEHmM@O_TBvRdD&z>S5r3#KW6RIc?Hgb4%D#T_nH@SWi@*kItNlxxqw%xlj9p; zlH(*7o;Y<5klCtTOFV;Te+OYLO+nKj3js{Z+V^I4Ns*xCe*rG>vnNr;GxRL- zPOs3x4a;#s>iZXGkNtY&J|h08cL|;V+cf_SkJa(WwcAOLr4Dssq6HpYVnz?!p~JwP zXZ3V7=i|p?lW|)4a+@iYc1B3|oSzc->GnXB%=R0=F`LOXbWsvJL5uRFOiS|5y;3kduoj=ul(L>ous#_He>m4SO2rlL>8+-fBViRsZz zwSjVZra0dXh3|rwepM@I?VR4mTwxl*R~UEPod9e8XdhpDtx>fHs}n7>%`91izU)0QbiROj&z@AZs}eX&F-+~?;{MSP zVLx89ZkokwDt^{55=Bu$MSbafzuI0#t;sj;O%DF%kd&RV9iQcm`7CT^R15&Re7W5S zW&@vhkXYi3$8S*B1^zp4)}t?`$NKHR*n1O(W`~LlPY1%?ol7>V8!wOoc*d?Xc~%C6 zNa(@uv#nMFee%K)yMm;$3FKa|cYC%~3@$rtnA8lMjz{Em&Wr{mQcp^$n-uXUD04Aq-g?CBkX(daael;S!LDm*sK;!2DRsh)7Xs^14KRiq)V`+I*cX!NTaRBOVHpI|97};FSbSt)AXcFseWFWSpQ`(3>z-`O@xp@23NhYJAyg9}Ua)9qD?hudMR{yd*mSg<3EhVZZsSl$!0K!3m|B2!u+U z0o_R4YYkdY3k>bi^6zl_9@zM%)*UJ9*f;4MLRDT4Jr(*-0wI&~et6*SQ5;pX$w((B zms1c|H;6^*a^$Eba&&#W%z_DzB4qKcPOPv{cX0+V+)hF-wD6ohD*GQ?B%l#8NuiKs zcZ6A^S(WA{!A27}erjg?|1bvm45_-GWOsI<9mXtjvykRfr1EdQnc|GRnoNdMAiHXL z?;{Fm);3+s8EqI;r%*)YR3jfN;7i>E!M2A5#upsU$ClbW8G)=7^N*!}{xmLi{5&B7 z@P`fq+~%^J{);mEG{|#ic{bieQK2E2z`>+~gaC|M{B1Lc=1Gks)AS&!UzF5;PDVfAum=PEKk zv;op%eQNGinLKW6`mlh+y~_K&!)Oml()Q?EVK4P6AZjbYd`uiP3~t%cCc|Z}r=2i1 zhImMle8XXAv?KgK8g{us8mRR?PG9(s(jq&*3ZG&B!aAI$Krg}_F&?SXl?WE`Y9W<; z=45c65v)s5kpfchNYdaQz^_GhkkG`%voL(_qzRQZ?*fGwj2CN69EjkwHUvC;B3k$* zC*twuO|m`jv-NHjt;Jee^Z>T3Oj6;fob_op+HUw;BeCFYiG$nZVJJAO%8`vJwob~* z8rt;J9Lv?>iAN_`vA9qVCt7j-lft$eHULL9<`;vt#zWE>svjE#rRt1;cM@q6=`;Eg;MuUQ1 zPhpDGLl8)Nmwa+dU!jlRXEbMWp>iZWEr5OcnlYF;)Mb|myp2+Z52 z>H9phF&*E9@pS4jMxvGr`#>j{U zX}{(^-P-MI(gp;3tUp;h3hLxGx=O(EJtX62%bT1Q#ZS1QpJ&4OBX5ovpPxBoj!`1K z5#_-V^v9S$iNn!uK77VmB-N)s>(m>!b+`7mAvcp5;rtvCtS9iKHaREc?P z5&Wri76amh(sfTQ+XH1rn!d2+P6svjMhC4c*xXq;Fe22Kw9;5$1}s(aPAhb=a9Bo@ z_0)2+;twKo&1M|+ro=K-#}=gkh-SMrw8qDCV`5=mM8kZx?ud%PO+}h}k+iV13PAg_ z>KPzoj=NEnH`e+rS|C_vloBGpCZ~Y_DeUY;&*0WPApH$zqSXG0@l{RZsThO`F`^tl z>DeSd+7b|*x->ViA#}1nz5jeD%gdxqG%SJJz!PG*rN8dMNo1&L5zpB6o4IxCJJXY# z(SE*;EtVOx#UFBTRQO!)&?M*8P;7No;@_B$ul>X!ISr`GUY{^sG~)x&U|RmPK-^cV z=@D`aF{^G+PQLL|iUcxKH5`PEZ=B*&g+On&fhVKjHfJp|KrdCT(SA7u&4)%o|VrB9}G`%-OOU1-%I& zPW3cFu96)^p+tlfpehK@xq-Edb2O|mo8iz;=AT^<6w`=M<#tmh36--DFiWz&x4(V= z*c#)U_U)aRk{YqIvd0fnqO2SrwTsKeV*DBFhY;|*+HOR&9T!WIEf}j!UxQ74) zQn7Lt!qWg)!wn^F_SHL0vlOEadd;TFnYn(h#DV47Z4|0#IErKi|WG z8>F9LE7^Je`nF~H3d5x1GQo3*MLQycoaPY(ZxdP4NN8zSzmp~2HO5rN@x9rivaPBq zIVxM2X*O}`6}uW1NgKzo{$7!;w-RI3A)eoeZxri&%G%{etO?%CY@nQ{S`+?CE`Y)B z!myrH$k6j|((Nji3o6#(=WS%SJbKK%cy^m%uSZ#k}%G&@JfngO&urXIsB9V0ZbZFQYahGq8u;H>?XH@hG9sZJb6AC`| z|3Afb*&l+>wIY1dfF~4(@WmOHBUx9Q-D^m5EZ6(aXME{*$|!zdV!DY-yN8%{|E!J4 z@%huZL&bR5pK@gmMN9+-hF27}_6$`%=y$k<)l%<_7AyV5bITRd9ggo5w;iP^x$jG{ z7yMeI_OL8ImKC7~_Am*`nFw|(nqj}|yt7B=4~0QMaX=xcw|fE@U)AJHd`ASZuuzV; z0FU)56iIE{b_940%x~0qTOibGSA$TSL6Cu!l9sJzoVBGh3C>ji5GsFqKUFRJM^YPPjsm?b|P2zj&F*0%VSi$k+`rF8Xv zjbb0q{!!yPxOAmn5_2KNqo(`W{Mig9%((L8y^2A4lQ|V-i+VxEB#|O5(~BTD00J zo$$2dj_B;kFi2lOg@-*nIg4BDcV<7dRtJOC#U&s&E$s>W zn0W9+q!>JvCW06=Q=-Q4M077s?cR_kU(SaFJ!`L>d_c_^3K-`E$QeYh=3gd;UjE!r z1~;AZqFR!#I8@=&mB$?nC00hMP+nsX2=b2Qo(g$4d>5km65iQKxw^#wDtI2TOlp3* zqhf3)!LhCm8|{i?3q##E)B(`8`gd_h79xkPuiyvrB=Cgg6_iO_~RYdM$4~X*nj~ zi{VVu$|$ZNfs5D78}fK%e$;ebWSwDM>G?CcspyWenTsCiPpNGMCmL{$XL?Dv#H1G7 z1z0TVZ2Gahavk`_8m2n+WoVTXB^^!_#=AmN$IVBEPNA&t!umm9adcvgQhSkC-0ji#QFf-&?ibNoULo_47I!szsr1S0c{hA{z^?ND(qR*ST`!> z$AjynJ%QBLZ;K0iH*QJi!Z+=^%J5S`Eg>zbu{K;_%gHLrO*|8BU&9t7o@X^`S z=N&_J-=4}ee}NRAP&N`eCW9VuHRcaw3+!ADNKs^t0Uh(>YgZH?MVTdeB(fxs>`QZO zoE?qfaec;w2hgB1K5%gx(`diaK^W!vh&_iBff;0YWjG`!^K;)aE{$Iho+DI)0KRj-)l}bW5dd)$94s?)$Z9l+RjC3v3HC>q z5w)_tg#r<67ntQOHo_^Hmz6X@5341vNI|3#E)ic1fWH!aRFQuQLSe?ET`Lqn2uMrq zk0%eiipjd+24iqrlmsa!S*&Q&^XJ^1iAy+O*v8Vx=wwjt#}8w;xC+(6ud06afcKdJ z+FylChmb2V%<{ZFn=Y22A1dvAp-pj_hz}=g`6<}*rkr-*+h}&4C2l066>5LPvJi`^ zyX`n-`)!*uy+0ctcN?;b!M<6FV;$i7x#xj{CrtfiJc!*M{(Bk-krx=v{V+%AXJbq; zq(l4>%HA6`Mh+W{O$$_>t(Rk#wuP|@msk3|565h+HuvWdEog#S)QwSy@OZ`nRE+tA z;gQaG;59p!4x+WMS}8EYojR)c=oseJ@tD$$o&>3t?DJX^q!Nrt+uhP*Y<_lx8}xlO2;n(C=Dq@aN+VitEq6`qIw~* z(O6qhNEEkdW%ZQjh)n3~`4H_0`bQD8eHYD3AC!$*h=@r6)`$;HQ@G?(&QOx6 z1BYG;mp9H2ejP9zXa9=8y#({K3>Jj{PuU*#Ypz)CU=uC29x9n48WznUdz!E#>Lq1q zzrw~G$c`M^TAlSP7EBwqiE?ymBYXpmvZD;afkGr`5=_N1f{xo8YNxQ!y&{m3=VG%* z$-bGs=`)bj`2IMP_T@`XE;^@5Id!M3^ zkS@=lq~Bjfa@uHB%_MwUUl~qn9H2~d(m(dG?~;d0?$oZ0qbeUOG1ZjybZzd#VcEyu z!3K%Coe{EY%MSao6;{P4z&I2JMz{mnbh2at}$iyzeTH%SlU44`YQv5JeWaa zZ+MrRNnJReiguj>*;L~c4bgh7$}3r|l&}2&A9FWY9bj=9TSJj#*9ufS+cpwVTomwF zClH4w&2fl@FJ@tuZs#ihu{&G$veQ#2ff=u8%;H%}u@SW3VIsy+VpdqizmK+1N1zb! zriPvG7+;o45F3AZgYKreYr0~y(W1fgFR;h!JY<#B7U$|s(vYaGU&QA-a{%x#8U{y% zf$=xFT|ENegMDaV8}KzO8G6~1!XY}@)A4qtBp}5Cen#5(hu#za?ng}{!4eZNYkMjm z;R(a!2pOwUQFOC)`?3Gy$#WUE4ZoP9eYvy9O=nvCV(}R%(&DQ7f=}Aoq5!ce4=AKo zn|R?=DN5Sp;+MrPilHQa1Z4OCMTe1eXDLLJMJlXJn<~kN`~4;{%f${wAjv794>Thq zivoT8fV%2E5=*TK_CVzSA&wuf6B|N@?HnZ6$EP%fqT;-4i=dbLRbt}{*utI7Ar(WBF6fMa@Z@y!QS#gX_*rj=xIW;5`cAJu<(M> zzQVoy%P>wgz2J}!Z&f@4QlkN5ptDsy>Iz-+CvYC1D-VNCh)-8He+paEF;fb=`s24J zvULF7%!#&A^(|rU4qS;Z7Jy(SsipxRRV!W4GtQxvUIJpwOp9J370G9RQ!i z1lxvc#>9{8Llm-*k!QM5gT;B4`;k`*XKT;tVBYExjh49p)MyW;9O_#CGhXRT6sIpP zh$C`~uCbx~5soC9k*9=pE~0=UlK*HTq=%&YhaN7Z(C0`)^`OjSUM#w))C#j@tU z2>9F{m1+;C_?US_hhC4KpXCx*bz=55iwBG#^>Az>nuo?3b_3qUrtNLin%K*1O&yfs zJWgH@o1``N`!rmYL0Z8If@nU(fz{)Mc9X?uUkg50TD!DnUtT{J<#((;#nP zI>YSZ8PVZDT@L-PtqW#PaMT}xKz9?>;@({hQ4&*D6)mb?vB~wswb?L5E6Q(k$!?J+A|lF%n&?u3o&chQzzOSSrj_n@y@N5K|LXTRn1I2KKja(x zX0yjkPfC8xqLN3S*D)afsA$aIAw9~BI<|L7+}q0w>W%fJN`tsyeMeXArp_C5sFnPu z|L;(IfBg=>xVqms(uhKX0Mbx$m8j_eLV;$xfQ`wS%g0J}R+!_{UCp`W&cZ)CO%W<~ zVy+76tXdQ2ojTY^(KS_YbjR>G9g_ zb;`CeLL0kTyIbDlaWUV1M^ucr52jn9tJ4-{sdA zS6_F&PYughGjRVG9YB_0qvT|mi#(tc#E$Oly2*>n>F`XzIt%R#wFL$vTS75)HDcjc zE^fWbWzZbkEt*n35C!kjxjOTSw6vdBn{}G~rqG~0)PP0=u14Pf#|i>c(u`?NMe-R1tDL44@4n*F3U zhodLRM8yY5X>4}v9xhu2F;NoW`)q{6Dz!+N3Ap0PG|CZQF`Y>Om4S0tYBWU=%WaSE zZEp=7w;5o19y34gm=+K05-&*PCxKoBsh@sfERuOtX|d8?g^o)%7i8PHe0N&VNsdI^HApWx-T7^&5GlnGc!8=Xz+bliKO(UJgzqi z=Nmq^jyp1`)DiWX&NpedZjM6D_t;N=UIS6ma8S_ui^Bedok8+yNfHJSmw-rW*oc4Z zJutZz*4K$w8r-nZ3?)d%2u?C{iD$j#{CW>ro{2}!H!k-a_k>18dobf=gE_}&6`SRP zOlYC{ufJY12S~FCJLLEwGsQ;}!E3`BU=w6;TJ%q;Oa+=5@z97MeP>j5;soS^&oXUX z*=Ewz-F(1v>~I@k@dV9Ve9$geuq2isO%2kQmQZ4I?}PoSSIn0@sX*XEaz_JdnI*-5MO1t zJmQ|~KSg$ub6xfqDnrkS8B{K`KU?N2L3#T8F;fRBb4Pd+>38>qG+e71#)5pD$$%P} z9tH$L3s!fO_L+tSfvo^X!A^jG5QmjwN|U78WXJ=Zf{rIfC64<3C&?opzrQvZRa_v4 z!xtuNd%hM2NEF)rlxZbP9IMy>+0i(H-Q%0jkM;}AqscaD$Zkn48>FIXv=9VB9EZm3 z(?z;l{2}wTj`!3V<&#bZoSd^Jh*(_wsu15MY&k(+AYiP%D?ESUN%7awY>@l2DGhDZC3Muj) z1D-MIUwW&`oO$s91Rl9fI`_2e0|!M>Xzi}!M5cKUakIh*Sv15lmzddfi}KyN-cY$~ zr!M34F;&FSN2nhppfl$xkuSmi`mRLjC5iZ*svbyQM=AsC{0s?wR?2$mi!zlD; zE2A<`5jQ&jJ;qq>5*C{KAL~$Sx9n9?Y+#EK8W`Bxg4b9Yun%lNZkCPu=v>!TL3?x#!VTo z&u&CSpOL*&2TE&-W|CNVE)w)*dfpU7T@-1MG@~$`>;|E#Qim@bOT-VN-H(F&imMVR z)Al^tbtZuaS(!_!%maU{sArKnOGfO*!Sg!R&F%=F&O_wi{6|*OWlXkdQ2cD(WnL7! z9z7=|Givdc!<9=F{rJ1@g$=H>w4;PW@FY7cK9{GU+l5p7<>m=+$7j^v7O%R8737?T zJ}CH`O!xb9hk!|#jOa#y#<8?-k!-AjgTSI+e?QgXL_2@fLsSteB$1{A$6TF3PWxV2vY$I;V&5HcpuOOVnC=_Wng@x#3lA`9U;6E&(;R7={ zjnJEVGpgJJ08cGJmq-!uom+jkQ-4ThDa@=}{63F0IRQR(U)l$x@aHV_{)_u59K6SW z0VjJc@){Y_xTaOaH$XalD~(zxi2izCp^ma)#~GX=*QJ9L$|M^V8j{+PnmkuJCVaB- z_j+C16wG1C%o|y8&RG%9N_>Hs>!FA*o`}BoNx+!Qfza<;RnEj zmV*X>29clS$R*=_qlrNdAbtd-#e)|^VM#$4Q5u#*0&!>YX09nPV94>k5Jg6Fsk2P+|#{~CqNRr_F zkV8HB2vm(H88c-#Dvzx6ijFw@zOI_MvDxFMly5XM*}RL*hx;dJxe88D?6+2JksavJ zgL?rES#Z}AfoN}OyJa*6X*Hthgm;PyGpe<@7qt^io9@U=!B)#U;5sieqLc?JC1}(l zp+(_9zN>~_8ciGqM3r)zoWunFb^gBi2#&6TGS*P`qt-CEn6!HU;584eUinOMI8Bt6 zNAj{K2nAUUbWdXVM2fGb!`>almimLb@*8otRA{eXUYzSDd!b$W4K*f`FxA`n2h`#y zK}prSfouz_U8|njeM0X;n1 zROlGEQ_v4v`RDb;xftP(;V+Ov``Rf=6d&91>m?l7TPn(ji0=n5imSE{%j+)aF1HsW zw$h3Q^0@q;8Gt)L;!3y!BE!i~!a#37nbODVK~q7nh2Iz=^|Y^RW*}jNPQ(TQdhxO5 ztQz&)oFyb%*H+hhC9OeW;Pmvl)KSxj@J?b zK%JT&dP#Jh5fApD)P|t>ArtMa&X8~>+576j<#ax9w`4?WEQ_hEa_ehpm0rqtg0b#5 z{}s|;J34xL9EWspv4U5}GZ}=CVPfCIV1(Zg#p5d;76&PT7sehdI{(t5t_ZXLlFxXx zW_*UqNx1#2Jof%)-b(PFX~nj~y;uG}I^M2Kn*T$vLe9DJOHnX%3{)}mTj?@eJ zD9C;hdB!zm=)y2q-JgT4Y}U79$s-2M0r;A%YHO{KBBh6*&+kZg{=5z5_A4aA8KLPMPikLF5<)jK(bs7TAnUqOxXuI;cMEKrsK8x|3Efzo=8ejK?mD@^ zZ#V=8&K_`kR*?Z=plk3hJ@qCqp6`(pNb)`&f;ipC8({GAF&R*@ga1wA*P+n=43z5+5o!d0$v z@w_d+byM^cTm1V--}YIi1i^5COK-hmF%FgAQCF3TZCKRJh{@J_+#DP|G*e@P-dp3Y zZ?zlC2lwP1Sn+o;8M5>r`?iJs< z=YnP5`uIUa{yL=E3f)6Oa)BAk-fLrua8HU=qLQ1c%(ST@2qu5ck9D2ZJnZ-Jdcnt zgSIAMJDfWovegiAD2y9?Wji>@0dV+#4Yh3}&gu1f%Qed>(4<^oNPXB3%*6p-S_9Mj zE=Zg>`abornb6=^%Bv^OkJDV>xE}%gz#1yl4>dHyDo!ndh5?1Lg1d^*%hwyL$;tI+ z{L#*RTz=2K_{O0$ryND)M=@2`6$o+nYP|%e`3~Ccn=XgetDTa+f+uRvnZLd04pa^0VM&ksMO5uOs6@j8?zJ0CR-AY^(01`x?cW(U zz?NCnw_%MS^!6zzKyOU8Xfy6eolHO4nGFi3Jra*uaCN*{M5rpy7xPG2iC@Kyndh=Y@WZNc0TC zRZ>*hIBb?A#N+IWR?O3dNnhu0z3dM$cOyQk+O~m2EVt=qPBJ_(uNeTiC{|sk-wfN{ z{i2I4?>W?wITyYyj8|Kc!Dp`S?xU`A4$NolmbV^#Lh-{g>cK{-+IQ3%N4YwiE1k#8 z$|YS{n?NrYFxTo_-}O0yt%?9!MgprY;#X``J?dA&aWx=4zT`x9%t;YajU77{ zS`zNMFFYKXDG}vCJd^N%)Jf`dldNR-9DZbpShJ+R@qT0@p7qJGrTJAPEw+bbah9Va zokfGEX%@Qf>Qj1z5H^OUa^VvrNwe1GXFfNQ!Q4K~ssDol_KP=l0O5`lQjyGkYLL%Q zzHQ&Llc($ZbXa(lR0k+WgeLADOaaZ-`wqQ?IZ4X047W0GSJeCqJx zvav!$4;S1AB)5530O6W!uu$7!Lb^d38ZBwUOkdGr`7jzX{VZ(c9mW&Y5du^#OdSff z93>9i%kq#K-GmG9n_|QhOs|u)x=glyc@FDjv0AB}F(o8sOeVp+6vRmIexGwx3+ z%em*iNPriTkGgMgh5AlgEw++MS(@2>xz2$U2#0ybAG*Z3L%zptIhiBjUV$6ZN@O@a zQ7YyGWF#JmiPP(tQ5aNEHu%xq-_hEzf!bgVZ7;^8L7jgp7wVCSTPX^b<>V!_#_4+# zOOJ8136}coesyKE;v1X^p5}DzU>uqe(cNEaSz`Nt_s3=YZ}hWJS^C@s$0DYh#G)b% zelfw~9(-_b_|5gI_A#@OI=zF7ek7XW##wKFe;>O9 z?4PB-xX-g|eY)wiZ7MV$-thu~$4D1(^N`x1t0Cag0J6r2i zzlVl5K9Va&GV(iL`w$;+Zp1p69GteNmTLAm`(%@x!AVzRsYCW1kitsq%IsxTTPqq6 zC&UO9p-y}?!R%tL81Tno-MdHX`84!UdasNGLREwO1g3nXSj1{Am0sG-4)_Fhk@djZ8 z@yngGimWJ|eP1Edl?`OXsN`E^bz53x!_+}@K3hjj^|CGY&87UMpyk_=cFjmw$^a~R z>Ojl48@X1d#SxM`1i_}~f2T$78^t3zpdVfrD@9n}>B^&#V*Z(OgyNI_tQ)_lHItA^ z<%f-*)(sBfQMKcnj&zx1`_6}QGTa6{#34~C?Q=E0&NZAUM!9^ha`X%#LkOI3d~&y| zq_k?ut(c9|Q3fuqAn^O-P$Y$)5E~cm@c1w6;Afx;x>W2Bo!I;1&qJwM&%?>II|T?J z7A^UG=%>ojdv3Nr@gDA|8T5Z+OqHyvt4PUe73oLK<%@MAG=^B&?v_%NICI36U5$d8 z1Dw-BhaX99II*KJfHb+mo~aoiJdH1@+6*$&i8krKg^|C9L|W*|4g_NEYrCJ`+`1L0 zyZ=ch<;`SWxJL{2)f-bHn8wD~jQh9{c{gpWtQAP15!d2LYVNLCKN4A8_C`^XFt>3$ zmRlQhJe|2FvS4BL%+fxPc!p$dV`~Zt4%+{?azEyg`S>p=uIhukgqcvyw2e8wix5Mc zOx&@;03&`Q=;cqXhBWg}Sb4eVBRAbr0yc2h(5l_ZxC(HE(sVJqs}d}TtPhM6qOcz{F9sDCr%NBx33OUzU`H+NA+n=1&U@+y zO2spcr2h1NUMQ6m;A9(H6Qh{y0;d%_ngJaO9xr@68^n-~Lx76so#IF#?$`3EWBx?#lpQ+!m40D%wT;$q0FphZ>@$S@D(Sr&4zAkg=ZD!Q_m*IYUGul!w}ucdBM_0Bij8On)9+aacYc94L8=lqnRLW(|H;7h8^M) z!1ypPmj^&@72!Zlil4}9jWb$wSRG#q^*_;;Q_@R3pR=ompuL{UBsFe@jN0Ej)`z#4 zG0t$<{2j}CrcvGa?H%HR$;$ux(o)sb zJ?%HnuX_%yu6`PcTd<`zcV$~pA+R4JECUlVTvEdjn@n3_P|-+6M{Lno5_P!W%JkcX zE8V%IPeCpSXakb@MrZGP`xB!}>Uty`+OUwLZ|d|Qc2&t+yb4ZRjubTI9>S$aur>W% zpf6}`*_|~b;gR|qiW%PGO`%YD?d~+y@tBL4uhl2S`Fa8|supjSf(1(=oUzP-*3lT& zDPYwNQu-72XD1@rf?R_6>2C2avGH>;mJLzjtLZX$lF0#o*x1TX%2biw`+8V)!n!W( zOm}CyFj(k7Xaa0iqwVbs0*B{TQ{6E1z^uRirj-?Woa7IPICTFHGrEnTSho-m+4gFR zi9cU6-o`j5|6n0F)K`p>TY7`_)Rsd6)sJluKKg$j!xrEkl-mg0H6Qg_cI$FY(VuWB zI?cBe(knGvq{7`68YVF2D-cp)gdhXQ#nIN+bsDzu+zoS+t)$gOMy(W-k*`Wd+cVL> zWQ{6VsvX%kVq5bf*b&S7!>e!gQ|Ge?hG`h^7J2$BojeU29>+7d*V`2_Tfz5Q>d`E! z9SC<~tMgy7Rp2TH57oqq*G1g?*-*uVvB$v%CIu?>(ri+;LQVW(L3HqaAfy?oD+BnL zSq@9g~gps76$87+j@- zVKK__wyC$ke1DVE&M?$9CMdhrA>D>XSeQ%q-}Eb;qn=*W-U#Icn@uf40IW9Iwt%zn z(Li}ClojTkT7)UMwIA-Ze=F{rW{07np$3`b+K|H4EO%vrUC%~rrKrqC4x-qXp{8e1 z$`>69Agzz01}&z@3FGuKB59v236S$$l0x>P-**gM*DX&Jf}A$D_JTUF6Zy5(rAjyh zyP7C7)O_IT|2O--f$HpJ6$KQ$+S5@hT3|vU)EE89^xch&udZ2C&dA-UejaMG5n-!? zuF%H#@1Sp$5j#!&b=ro4*#V`qs9O%s4$$~ZzUKS9UF7Ii)cXELQ*o_!=R)MRGHdm# zR@=(zq$f6@jwHQr;mrJ=<96@Re?;D~-bGFZlrWtJl1259faL7hw0?H$DQDDj}u*`RQS&@qMZ?m5uK?QlMgYR}2 zh;Ug1=POLrdwdsgM-d}~TP-G&aCz=LC#Z~jw5d;gVMIr>QM+3oG~HVW@>l~!rnsa` zs<4f7CK=ab9G0ImAL+5@P0Iu=oA-<@%JI2_sTiK5Rj` zvPR&Pc1}wUl78{3LE(?7BRxT_ohw_y9fxGrSPQWD+lG%3eZIO90uHB;g?s1!2m z)KgmjJx|*xQ*91OcL&Ho46g%N@{LxsHi$DczA&2a?=<-UTrbcoz-y6ezHg2*0p=A_ zUJAxP2P+8-NDVWfUBK0EZo;+Pz+E1-H+FGYJF>VDj=|*(xshKL9;Yr&IDLHwzo2Ss zji|yQz6A?QREk4j;xR8zc#*fD%-o3aM1sQ(5`4=K5#GKSs64P!O0_{#i2( zU#U97w^EPHamGh=dIXK6hl1yxc9*Ea0F-_g(oD@kjw#!65@LTQPj?}g<3W^va|OTs z$D_AzHrz!^+YP0AnwvF>C{FV3fd+or9keesy%TG8V#IN~+E(2FX3yq0k{{P$C36Ai zAPG1sh{8M|x5* zCO_Y+kEvC1bL$pnNJ?TIU@afqI*mEPZtWo0R(e_4>uuJfIY(UZ+I-yqa}Qsq@k~Ow zCg;nPiqxKWh7_u1X3h2s!NcR_%MBSUp%pnU&w0Erv?G!%%Xh3qc34q3m45L+_ zVVk5H_x9y$A(Pt+B>MgLPh@^4PFRT&0ILOk8E7%FX-BY7ePeO8PUMVo@=g1D1m`2Q z8zUlW|2#cpMbu^RmWLXHeWBSkvLg6qGs z27m&VCA*yEB>y!}$bi{c5AjKkMJ9)*ynH#ZvPukWUtFhGqd%2&J@4dME!F)1J%23f z(w&-g!o)bRT9DEpDk`3U<-i=Z%{d7NA&wu)wIEf0UN7Eo!o0hA56_y?oP6gT0bAmxBYRcD{X=d<@mDLYdz@Lt^1fCn)4Co{&LHyByB^Kk9LNgwChAUzd zHbgdmVON)j-mL-40AsfnJDwSSC-LTvec$o_u=YAD=G=`+6(@w?|r>56LEsfh{%Km0Vqw|I_*^`^Yr{$n{(f<0&wCXMKrb<&bROe zU1`X~#tNqQ{=cavlx*v*1jIR9yKfG3H=`2HRO{gxjgNtc-WW5pN+#F;^fE>8q!5YG zETKpD-=u)+)dU@MC*DEXm+*Y6@KAc0%G`hi7C4P;hCm&_cIG(j3gX`KyK_5`f2=@O z>>59v^a>0dsB=qbCyAeAj5#pUA6x~T2gtL&zV*$`2aAWI@YlDmA>ZjS-eXL#>(l%D z^`l7cQjOdh_Xs*k5z45`Hr_FqHk{{q7bX7o448I9yZdN|XWi@;gYWHi=43St5U_;c zo&^nj@Z5+e^zSPI#}gwq=XJpEN^%f%G0vE4$sQn;1o<_Aqs@#||JB!f@(Hvu^LoH^ zhg;v|gE(-jF4{GYYjCx9$Ko)FFhf(uUy{q#g%t@$es-3^fw0&N{hM}PGrW6giBE(r zrc=|23cs~wFMe3lCS&j6R|+BBFP!)C+X^Zxd7N0HPkZj@iWXI&rv^@B6SO?SlHR6! zACdh|odpbAqKHvULs1?9(LJ(bp4=~To2$83XYzs#cLOZxu~+2lr&8PrCE>N+LHc#b zi^8|vnDi+o5mk~+J67N%h2fO6p>ui`n<{aPb{jm|xyH+jLd{=~R1DWKxlutIx@V3v zK(sZ6Hz7xo?oxN_@s%)2-6QD**zE`Y$jtt(NV5fGi=Mq7kdO;D?!2t}ywd3S=T4`z zTl-wk@_C5%@;dRcxyFs%RZFY|ZBg@nU^y9gDM3qiqIatu@gd>j>u-cXs zHVi=?Isd^`k zuxznJrQ4a%_@KMjGtv6(A*CX1UFg)Da#uIYz&J>Q$ljzu&tz>pqaOKOR-Az z4>^G)_@w0tND!(=NG&`|Xd6=%UqxEU8DsN)Ux8&wLD4oa9V7a0tUEQP0i8Bt$bcTCUiH zv7I#PX#eZTLzU=QmCigr|Km&zI)~cWGivB0R70j~7?|0di-zCF4J8d*^F|l-t4%?oXj`0SM>;+Q)Op_C zAFxI-|0&_=Un|3apsWv8IeDg=UU70t)j?F)JAuGW(dD1#pPduv`-HNC5T^T|4ZsM? zOJ&J$6Wbt*!O-C#G{JK3wb7SM8m;tEO6k~M2ORzqkGFwoMb?-Gpq+j=_d`t zJ)oIijU}#Yg74T|=I{#sKezDet=^HeLm}`=emnA|X?K9Mng$LbT96pwGH5twHr^ zF@dXr8btdZG$)#H<%r@K$wRt{mG05>W^!KDx(IrSotN=HKy!c+J&#H^*Rfa&Y^iGw zSqyt_$*)|23K5btDDHe3(IZ9NuZNUJv}NuZhex-0((Od*wB(${f>cZ*H66=xRhK%Q zkbYg1!k2RoCYBF^a0665h6?8^yil#9!?*4Z+t-VNtvZ+7uv@kFxryg0HbvvP#dahG zyi(GfWO5==&q#}CV&H}&);*e;{SkHSSSgl!#IZ}t+EbaEupJlW#q7$aW=~C+l0kD4 zMd)IB0p%XyH8^ULwLu5oiHG{x@k>X15`{#TXU%D=E@Yt0y}5pbCCI&5TgyAriM_JM zl5pyg2k>dIZgj`eGvSDaZG8|}G!R3~gauyl8?(9$i)gAAtJpv8!M|npKK^b=-aSh) zf|McuHi%zu0yq$@N__Pf;S0rj*ub)fEJ^hW@)fj68-0$6dP^SDdM|=%P-ZN0%BbeM z+Pi=saFY2F0IT6O1-BHpcsAJ9E! zUQT&d>;G`y(}DRTfDl4}Y6ijYd5kDLE?we>UoIy{bC6=Vi<-cnLBslxPn0nH`l!{= zuJ5y>8h3i7lhTj}K{v&BlLid`iOTZZ>3WoC6C{iRAUHZNT7#vT(_L6~$<5H()E$%f zQFne(R`0=sn5#q7Ux%=SSTtfo@HU*It7|7n?n2CM-CVaCwx#E3!|S|$Q4ByF?cmyf zn?Us_?oKC%_(YM{*R6dZPR`qz5`3FJDM+KnpV9<2AEBh=>uJID@i6@`k>}Tvlq<=R z@LiE9mCbes>-2A}HXW4!0kJin&2_<=<0OT*%fX}m*M81$_V%>A+8P|~%ZS`qr;q2L zrezZ%+X_;#Xu@c9zn&&(x3~W^pjKRC3}l2+lF5tnhx#=O{WE|Jk!Pn)0+KtCmfIfq zTH2%0GcmATd5rxW%368yNNAQ&STri{Z#C-sx~6>;GTGpg3oHDI*|1OhoWj#7)S{<`iJ0PoheD`tO7^Pk^y|Ffc3Ibo&S9C2a1h9D7c1`}a( ziHa#`0yJEynE((gsUj@kRFt?T_h0MnFg;&!YWTevO%}DO-bOT&U|Ou%@FH+u!3E#J zRU49w2j^e1^m=o_Go0Ab5vBSejNs~u5n@}=c2N``N-a&v5LWrWz2m>36al-<)K^`? zIyGi37;e*M_YNwFk2`_>%o#S}GPPX}jajp+p@wb)U!(pBaKbe+Mh_34&w&mHUyBq% zL&3h=2SaOoDUxZCLULo`j^ESDPu%Nj`pV00YgqBavBzA9j@_EJqo{9xVM7Ur_W9H2 zeE`C?eo+#(FV7IBW+B1S65%H^aROLzKPk~=Q=%#_e+c6EwtawIvH+}An}oF#S+h6+ zv`tzBV3+gCzhwq1dY->plbT$~EiWtxnF&z3|2QyVcrNB_k zTx(N=LU{Y6OAWpx_~IcLktUoc%xU)D9N)Zf}iP0xVbeWV{ zp21A-^YFK-db4K&`INlqPF_!Eg`!PGgDQ}(%?x#)@*8*tGMrU^#eFh2?75wG z+*9k`X%ZNCur$b@wi{jTAneaGP{}o~iUQTt%Usx<)k6^|rHq#}Ef;@251-)R?(}o; z^3R#GH=}Qe*l24F;y?L-j5VzVl;l{4%KC>x1o|OKfVhqi`k&;Ect~x-Hezq8Bp_=$ z4iLaDZQP2+$WfLnC>YaAq9+ZAf=ZWHwG#V`5BOpA>@7%zFY-3bHF#@F4z_@6$^ymI zEaLKd;OQb#IUnmk>wN60?dM=fEg~{^j7KiY{aqJh&n}!CBTr)u){41gL0^sP)HK~{ z*!{VLOSr;@Jsi!*T3B9F+o_qyvpe`ayN3+7HysjBQ2#9sftFoxq0iR z(_PC=>|XENwQ)Ddh%dzyeWZ;ee=@9bCUOpnyw(@ZFusXV0V@(_O>Z?FBf7p6&?I(Br(sGd!683|o6W zG%pc9Ax)+<2f;=!)GpAs17x`EpmwEuH6C8M#w=7~b7-RMG3Bb|MOvTE{Q>e~3JaFC zw#E6bf^Y|Jhmz-%5ArGjwB-1N6mfdL9tLW?a7O*MhlO3KWwemn9S2_KiV&0BytD{} zQK)yt)A)dci*-z7zz%7se^>WurstO!*Vu_1=*))n!Tx-Ju+6fG>z&8K(_GsIf$FL< ztKV@)-eN9N$PIduoavaok_YJH)tCD2BOJ%vX~PkKCM(TDu)75uJj+@O66S+{<1%)! zv4a%+XN3X#^()8Ly9xp6Cez8?_3=5g7yD6XCIqn*84rDjj-W|DZblT=sxhI~A<@Bs z#(J4)vzv1)xDg%Z!bc&1j!aD^=vy56F*y(Ywf%zE7%GPD^vpP zhp;ko!34Qr@Fw#h6cdU|!wgg{BJ(*sZg24YifO91MJ?5yoQgt;iv<|+#YRQJunMJ3 zvQtb}vE*3D2xj#@&Hg~$zMV@xJ!`?p-@jYRwUb*{RC^mC48Y_7GZ7X@0MQoPKDeSS zT58pb@`sg=UEkNasgmJM{jVikvjo(kP`r*9#q_C;8ByfUevFK9F~f&F)Kk0Z^?A80 z*-F;bkg)Ev?~HYlRDXxqS6`9yw1j|?k0=*XjC8#!_N-2Ufhu^I46aPiQQ&%Cyx(Ii zcH`AC&kC-(ZhvLMhI?QuykWE~Xe={#>Ha*wygsswbN`C|V1jOoJ1HN(h9>Q>WfJt^ zdvyg_S2XxYM~)THv!u)xUeA+JKZ@gi%qnHFskg)c-gi!zBAkPD*lzP{5e(DW0$1vx z+sBcd&?B=ejl3LgxzlJ93mBiXnTcdFc4HxZDZSYdqC1R@-rwh0YYojdlX<1_N)QYn zf$2Gu=3dcFpN?i2`f!;On-S`xTmg4+KO=V(&)?BxHyT(z^6bfMhB9~l0DTZF?UIz1PO`8yQyp= zV8YX0Uj*tt3%$L%S`&Mv7_ntF{3JlAT{5PbMIS~h*(Cida_gpGu{4@pF_2?nOg;VU} zQiWa<2X7^fbrHQ`_2vkz_c0c>aEjZrbSjhXm^LXD?Ax|rq;(w!Xv#zfax54njbGO_ z6Mz}ZiT^R`)#!jQI!emO0mAc%)f>%_%RER{(Jh`~pHyT3NpJYf8Z`x$y-id~;HN%e z?oB$ueiE~E(H|w_L%_{2|3-4fc)}T`Bu%K*z^;~T2rSmGeJ^)=cr}pR_0ONeU>%&t zp$Q(q_ba4}*Bo(_3RA1R4zy_+-Y)?vFZ4+{v1ITFQ!xXgO9);IXk#uj_-7CwDwAn8 zov9~ut_F3DlCyb2$Z}=P=f=L8R)JqD{v2AAQv^BP^249QY8OC^z$5I_SE+h1LcPD` z*^F)|c2gA*cYE^@{Zp0jg7vp@p3H56j3BE5T>==;l2;W(ShPJ)5m^6U66e=Y9Yew@ zLaJ-aP`kgQ;EEIUsuEPIf3sS=fw-+RKn+E^G|{cE-9)(2(t@q8TV{*QgM)+H%BQNbs^!p;V&t9rm-(7K3NXURqu1qvCfj1Tzmi!+ zIs17FE`i-6BnFz50;k9)H3ABoGG2K99F%U(3U~6Ma-X_M`I)VGORu22P^8*fG(XW2 zNAthRXGlSACX=i8r74BC0u87p!u-HW-b!;!%uoQNDxD8$!gCD>1^WlQOU!B{2)KV{ ze~)4@3jKCSA%Ulq>K5iL)wzVHy=WSO+{rYAM-89#s_}ok;7BpbW69&BrGbtfxlM}5 znXFl%9KoS0dhqVVKc~~aufn{)ReE96JiR7@qF+T9ftQ}@#t}!49(K>F2h8Hl8VS$y_5wfh3M%M#9 zg+)B-BQ*$J6>cqdj}{m}NU`~e1cT42CU8RLq#pfUT?5|ih*3Xwj2wY9e2E0m{Bh%T zS+g&)x&VW*K~w$OT5a_-^rWf7)W$hbnf@{*h5dFIzo=Vc#gba+8x>@XFh%pB{j$dK zWmxP8te}ghq6n*7ipt`w?){0)*RBd6QZ8vPZ|C0F6<`S=b$mQkFI20{UM)LiVYo$nXJfNd+4*J5!VnyARImZ z+BXY)&s2Gm$bO#v;`f()8-FkUiv5A(ttfKOKO- zVqA16SgTY#5D9vE{;I`{PMx}+y=(a>z|%~%&l}~y_;3{US8+P^IqKjzcmO%K$QOJg;olItLRzj3BlIZ` zO$CjBX|Bv)s7!9CV0<$b5X&ErDt1C81gzHzPqUt5P{@)q0tZg!A@Oj&P)N6woRX7O z<8!d%B+Cng?R(NpzXGsEKVzDSHn!$Qrqr|=@UKEDswX#tSrIaW1aa4452`&p6O8{6 zDilvQY+eb$gahVaDT}|ef6(%3jl#)a6e8OTrjgob-y9nU+05LToQOwq&$S8LttMZT zV$hX?$()Yj4FtXeA0*5&wqR}dDAS$cl;@_YZp2Tz6i z9o|5`E9Ga<3IPq*;5cKV#)RSdUw*9s2f@UZZS-Th;;G~b^hWnAB(9{J{1zei@EIaE zNf|tde@Sfd$&HZ^4`Yo&o2Rm(woTUj-={FqO19}diI9f2Y)fr$$lGmz>?~$aaG;%? z`w%9W>;2PENRS8AfsBFID}j5&Yf2mdel&xW1IxyVdqT2`J^aO8t~1T2CKBaM+E+1d zD@$gPs~`jkl-SEl)8NhwAM3wNfy0)z)zaa6^Kw+a(r{{KU5@+c>b;jM%{??rtaM$s zkyvN;VkbX*mE_+7iOXE=c?l1pZ)T_L>o`NB#1vktI@_uF5Z}$UUJ#`4ObO<4GG`@M zDF`Jr5p{PSA$=Zzd9yv|OyXvdHPcp^D)%(Zyl+?qT#4jOdLJ=70RfN&gH%unnP=;~;VU0%j0(1F+BvMk)5%O|rI&1$|^oQ<6H z*KbFrgHc~?>}MxId@QL=5W#|lI9S93gUhWzg-(F4I#x}2;K^7pt4)^UF(#~hJYik=#R1OPB?zs2SP*`R+byvE+d~E!54et9vb8`A`^P6Lfq%$H^3uSpvm= zA?~}TA}l=1z`3!kR8J)%`+jb=Q~xNAdL^suC$~{33pE^tiOUs|wVYgQPJlHcJ@@|J z@XHEX=i|7pf=`i?I8TvZhQA+j+A4*GhFas;tPqmbk`I52diLSFr*qRvNfHKgbFMmqrz;FsFX|uEt?LV>av9g(aG9CrpCu9NdE)VXfjIk zs%^n=&Gtc0b{7K`!ba90zr>j$yh5ji;awKf)wfQVkhHGvHFUGol@MzU++@Jp%b6`9 zvXy0bcvBm*r3$9rz{8#U(@KS`E(39%TQIcUkBuE_Qgsj?Mx>JeFKanJSpEhwuLh1$HYC@tT^2WPN(()pg17yEJ>|CGnD_xQFoUYc(jRq1&Wv&Xu*;yK&r9Wrr#pVmGHp zeU4ia<)fz=2_7;-kcU+*!FD3O|G;29i7n>BDcn0{6!-77-k5juRArDD5x{V9n#cso z^Q7ixYt62HtL}S8`2oI+A)8Aa>t_eTRLzVEa`_{Qs5KRA z5Tib)OOL$WA_#m%hm;8_QsMZiGgovk-25t_aU6ZVnC66>MB9CTTorsPfL#PGl@Xic88Qj&RTQAcP$k5&9;&+Sfoeac^!((7oHC*C6 zl(P8Cd5#}@)u)8x3$UqfvomL?6iyleLET=QgH_{=smk;^O0V~X3|BFIujVk(vk`PQoBRW3XZ6Ds#W%W&Sn zb;v?6UO-|(n6zb%l3y(fmiafU1=pB4rmGv+&yFqsS{3}ky!nDmVVnx2h>6qzJXI!^ z2^EysIF;o$fz_py06ye+{X@qw?~w3mBAJ3Uo>m4F!yx%SAxps!v(Sr*oSK_PHg1%Z zkj7^(HC}AV!&U;u{8If=U!5bbrpXS0tt-p|pF7k*EfYvCrL^)z2`h-7GQ0TZ;)gim z$gN02AIUfx`ztN1+tx?TezdUF06&hnuxEE7@)b8D^SnODb{UP}*sG6Uz=42Md>6O&^yYWnzo&vv8Kr$oLBQ2lr$` zFQ<$#WAA1Ur=#3SqbO?le0(j_8jRnD6zr3lUm;tx*an{iSp16qQb{szZX^>2mS9}M zEDzxA?4!%d4m{5&eN+n`bQKy1=DR{bQbfou6oGdo%|XkHcTHT5>Wa1-d{Of4X-ssX z!2*te!I54y&+qaux|&$+Q|ruhGPgM>M!emz6}Z%;o-rWtnV62muo@2wI{l zg+Y(Xu0ODuu=&K3Z*}k>tCvoeN`6Z(d!XyCrU5F%7#3Vs{l%a>0dh3@#EtLh$4p9! ze690X1?)sY(UFiWyydL%fj3AK)*%5O-bwY1B`Dk0i1TBKmn3xH&JN5X;4k!V%;8W<6ObWv+9{rwY=%o z(A_zyBAh-DzgVPtjx0e;0|;_Yjgfb;#auKNgxCOC!_c{HIAoK-+#aD|gVI5w#Wj+FUo|~g1*-LXA=&FD@iITs zT#<-N{)=qPhtGZHk&hB8t6(MAhd>L%Js^y_N0f8$MgY#y(OnaB7jXroC8l6XxHQw+ zM$b?YH%@t3?HyzyNRygH&BGWp3n+k^1~b%)0q8@#let;Omn~~|S-(4e?*iVBmUMZq zzE#U^9E<%1Hec8c9_(p$21dBeUfE`3g^noCmiwvrIaXntc7-TdnShSAhv-+=dMF(z$>PMD5Lm<7!#-`PUh*-_;Ygn&C=!^F7Ca&lp~K{}qPXS^KJG1>49QRRTFZ3vOaN2!S^UpKK9H z{-?)x@||2sHTSI&c4UY)7Q^_{F9&Chy-X*X;&ugLxBSVhL~Fs!B*patJyJOpOK%K& zI#fox(bcoH3GcwRFQ1uDxvgB{a!%Jw4-1FQffUcP!WH&Nm*z27fg^@tdbCU)XADp- zHg!0}KXc*yZ|S7tqaG50obsh8btrW8`KEpb zy5Jl3pH8$!aHgK)`3w#4=%tBzkM0T72^a{lKk%Cr-hF1K`#~i9&AL&1+u%Vor9(QlOt%ZgEbp_NV3YE$+#Mqs4Lelwb@c>jZuY z3-{Hv)|{w;;7u$?Ku4|f;BmZquU9BgSoIy-5C-}*5`MlS0vy#mCH)3sLpw#%YYr_< zl7_El%`}Xfqin45IjTI>`-o>lKFAMhe{VrGxA*Rl3rUq~38B|RgcS2d|DAXnya6+r zXtz&szVq*I_NOh~jI`~Y0Yq?Ae;w?u-%#(<46JQolQfhHORH?VPZA~aG5t*#DnEEa z4k-XC76$BX60WJb1``Xcr9zX9`nL;GN?;@rEs{HjtKSCZ>JNsh?cj+~WbM4<VMYDj39njGMv09!Cp6N#0Rcub=|CUgjwF2yedDYXh)zx8vork0}S`p~(+=P|g)FjcyyKN{v$3He%QUpRxaYyC}-HG@h03JIY4 zgL@WLAG`w1NgM(auR_a2Uc6Ry{k=HpUvsrjVXeAk>PqTf; z@e=J_ovoBFp$fGV1_37519QsF&39ky7UsjG(VI~H{&{RBR}PMFtHEmP)@HKTH;)A3 zJXRyny{0qrwK<}Xo?)4b?y?_%dxTx{HW05++i!KGBdRPfP}_!;<;Pq*+l#?|doigEg_jsX9N1_d@@t`%g*w#v8PzLoJ{3WT1yeGtC7+asOcO0%KZY)XKD7I>E zT)OPeL|&NxN8u8(8jo4r3>TOjK#WUWY-5A_pB*PEv+Cx6btKj_ac`EHnb%OJvYQNj z@Hb5sKSo~xe}c6o$00R}WMFl0S+@A$;Yg7+lws_uvbvfol5;W;GcWuRsdP-{UG>A6 zOkNSgLsT@M8VFjJSzk$3HQW-khWUXXg}L?JvlW#hW`&-~%n zso4WP5RFEv8q$-XW$HxUCl4o@X$jRO$UIH#VX$w_VPF3Kq!chym%uMhO3gRyj|%CI zeHVSJ6Gn{?902s&Qk-z{MRcOhXOLYTcPMivj}g|7K#_f0ht$Kx-29w2L)U@LAo9Ag z532^S6uqd1iT*qI*net%ya&5#oSxJwDpQl%K;4 z-@=Xm`r(B5;K>!#3aOL#tTL4RrR`x-e6lfMs}9K-fbSqcM-A+Znb%Rv%{T%rnhL*8)A=ZV~Y&=rNacT1OmK2!0C z-v4yfurn_{l3)8x9beO?oZmlX5a3B-gc`mg?@VIUc&~hRn^Ha%rI(**OwI&C=5&V? z>=mjeTO(!kXJHONAg_36^WW0}$0~$+$NqqVwHx@F9<1u6l6LM1`GB=JB0bS6qCc?i zZn!j|1@SF6{@3{FCV^eUx);b zXOqCcIEwQ$;r$l}*|6)I$qFcka&9mrhSjifr!5Xb1V0zE*->td`HZZ#lmuQ3c3D?< zY@#BlW>&KRbws{P(v?2Ox8WYzws$vdaN(yE*stg7HEapf)BUJsqfXm0>~?N~;#8Lf zZI0zv+i6regmVnut%W_@R(ICRtbR9a6X33QwVE$Nz%kYtK<)Y~z9tuI)>>kQ6??^y zdPX|9zPkSj%IgWx{M<*xa`1k4oLJp{*o2w9PkL?hynHoPgNZ4-9gIue-Lsn?oq^ng zO52!YMur34v%7y#j0P5eMbEcrr+Y|erHff@cHfMU6R5OibD*;6Gh+iZ+N6}&>_qYI zJ70;X9SU8C4i9aU&1T?vunzEI(wznAO%e^<1Uxep-F;NVeMuF3;1BYTdW65#E-`G|Yv!v?>N+xjMijdEl#w|% z3^$Q30t5!rt13K5cy8_NFP7`)UWcmpf!@)h?#psw%y)m1rmsJ6-2RBEQcN0k$7>R+ z_bdl|04?hKro4_E$rswk5&N>$Hq_qkRN7R(OB=_<7#cBdem*U68&t^dU8Y1I{Zr2y z9bBqF79R(W~OxAH*DZ5FB?lLax@A!){8@GxB5r%mEGQw~p8fLx=^ z)I4V@*fLQ#9Xu1MsdmIvnxzT1lkXrN%leIoygx2RRY)Yii#e$qvM=>kB{^Qij5qno zBV+U~E~Mn;eh52ZMrYpm=p>2k@))h0k-JF?=ctu`Qgg-?;ndG-?UqtFwE&^j2bnI_ z*ri!b`nUos|L+u%Kb9n%1BVboEt-jc@kHNP2c{4qAjJU82=rJCdamXYbNQ*cqK;k!3KxG>1HUZ zOerqC2$Xfy)@N%);HkNg6JR*@$h?g;XFYmxQuMan==f6&Vf0$sD#@u`{Gei3zFq?G0O@K4I+k~BEHQ`<@I0GNzAWy;@2aM11yQ%XBV~}im{?Y! zBZZpcE;c#k_u91q93Wvnzx>kX7!m%Q zfY%2n*Hj=GInU_0#vSWBeW9E{lCq~*V#XIVVMO2bS4&-DaZ!-lN>jYxYJ~LeU|K`r zR5({QFAU7(`|2+!jN>plYiDch#RT`MAS!!-GJElph8=ShsV%8QZ85Vt-^$+_*otT# zW^HfZ)hUlAIh*z$IAk_Qa=^A2U3_P1A#+MQ6N$(*X)*s(lFvP>A`j4n5pTv#%uIcn z*(Re`Gh`<)LM%noYnk?+nu;`y##Le>*^QO4+su~FKjw84+-m&5x`lEfwBwIdx_g{P zus&if00zkIOlevMtn4f?_4p>}0K(K(AM6jv{Ox+jfmur*Ql7ML%mzVuW@XW9y?gBK z+XW?AA_y#l5F#pG>9*I%M(E^=esjjRlvLr$c+_;cCn3*72+L7assB@6--7rOM>I>f zfZ+H|)x*t>;^T0k6o$ZhMjk3wt;;bYT0%nklP50W98~W*zd!wG{_@0=C~SANTlr|- z9ds=*@Hf$jH5qXn`one|ZQvY;iizBL_HB}spxjNG-{T+W8LR#W)Sz5pz~sgMh>nd0 zoZf}f)lXXP_Zu_)>>%tA?zUwwuY6%d?Z{&{kPZ=I2FOYi!5&cSoCBg_EwCk?8oDdq z4Ubk)cIx(|?=VFK`T6!K55J8jILsSJYqP^k)Qz5zyPo*e({6O?Gl%X|GS{G#AiaWL zns-*jLrPy8!sKM0c0jtkkyx4iC^EBj*_5T1KFEC%LGWrPThp~drO^EM^SVQs=Qe9) z(#cyy8$s+dAUqgZ!czWD5;F+qcLurSPi1xqo1z~CDb7&G5hlrC`c_N7Ooi6y=SX#O z;`dM}?{8`36<1iCkYEri)+>xKpj<_{jIH$04Uom^6rsa{EEXcot6HPu=71Y0>jreu&uh-nG ztFg2R*3bM*wJz(H>9K$+kef8QTt!Fcnx5;0@rR6AUfR|(LDxmub3OSMUEJ5*zP;JG7A0s`x29>Oo6sm{C$nF~}b`Z`mIY+dG}SR{Wcr zPKwaq9a&55KEi3XvZP+pcuq+FMr$`CjBdL}KZ@4);3B+tlrf^VRK0%7!!_(Dq_DM8 zbpi!VxG^~pnUrTWKoe7U`HV=2ZH@WA4}+N^D66T^P+TjY3_?ujR(i5=o= zTuj+27QK)6#KV9*H6jrPJRD-UO&QvSPA%zTQ|y$32}7=KftIAj@K-A1*aq__4m~rY zTDMV$)|Ic7zAv8$V~?;k+7rwOwyL_(Xol%n1yR8qjdD>@zc?cgWa23&tsg zYAB}QDZuahfUB0ViN?hwNynHsNfJSZkZ#o75u~cPZ8By!7r_v%9P@ILh1*+cf6~6w zZ7DN{HJt)tQ{Du&6mwjen~Y&9U7GYN;mQ5Dk!axtft1RkhUE6lP*Cf=T(2cVF7vVe zTX?ku(e>vge_gAotwN@epqp*$(RxuXLfF4Q*$d1`%N1Y-5FqQ>p5zIwwqCjWP z5msqSdxfy1sY;>5Z=QEnY~`e^iU^MeJ_;%JG!X2dF5X6?#oOZauKl&Um)h`5Fo(5O zEii>KApbc|YSn!9kc6yL5aK_h@1W-MCT=LGumMWfd}C3U50DqhCyfCdMDk(zmaLSE zB?Tl`u4|$)(V@6orN4)BsM)%RFpz3uD^ePvprJJslAqZW1EYqTR_EmWP1WOa04E3py1fQCogycs|9-kHuc(UsZPXFr(<)(6NY#Kw{6yg{t;HP1MPIw)?0FnS^586$Y3`Q@$ zdNM8-(&D$gI`sSnQHc7paSEDUU#O2hXUOl)g6%6PWtZ*0)=1o(Td$2k38P1Bnrn8!|j1Hud zMP^L-2VB4I$%vLvr@0dqs|DXzr1;jnzFJkt=4Qz!&U>OlO2Vym*!+gQKRX~MOa<`n zhz}oNlO{pqd1;K1*S*w&JDR$|D`7HxsfUiL#PiAS0qA3!0=mBq=&1ujkRM11(jE?{ zN@ZO(FOA1PCx-55hH8b{{PO~jmMDjK@U1^|3g9SXyP3_)8=d@jf-PZ|T za7AhY&}z~nT2?nmZ89!SquLrwuCjNy7v;S9vMgs9U=eEev5$)6tw}E78>hwJEN=Hl zvoQ|j#RQGxg=1I1rZJX^2(59t&UkOd6Fpx*03kAwBIY=TxlT)l3s~ ziA&3^EE%!pmlZ`a{$UpP_&$Ay*UCA>mADy|^3U9!wo$ZZCwYELDFAE+Bi8o_gZZu( zeyH`jYUQF>f0w38#imZk0o}x*Hnr}|_YG{qxeK~H4V}vPE3<&>9;#Z=U26B0u zKKlj6rpc~YOjqNd!b~!err#*PPeJ;YAaWI69|4EEJ|uHuGd`P23Mr+RN(kSVSdM^E zo0-IkEukW)+@qnwBFwT5OYvn}p9GZYZ`HcnHL30?5(3tksy-75YvT2^ad?MPP%FMr zb-3mS`}^x>%ywFQuCYM#8z#bAa9)u5!8K;@!fxFjy#uJy zeBGb~h=9f;{2T|e%slBKWpaq#_g+wtuDaNT??RLXc%w=06LiK87JIzthQqX#QRwk` zpY-AjUb&?9F|Tz14oWyoVRPzDY(Op#RPV6_u9$0C(v(j^+T#9_u4Srf^!Zi|a6Zmz z5VO0g5JXt9pYPzD2;rlrg%^G88iyZQopT8OY`@=yijLT=6oo-BL-~J&%AR~Fe>K#- z*wLnS?HZ!2Y_XE@Aum{|W0x;$YJvirHq{MOuy`TW0E;Y\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/728/bebacfc7\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 11:00:05 30.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment="Download custom Certificates By Routers Identity " \ + dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\ + mod/AM-Certs-By-Ident policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Certs-By-Ident\r\ + \n# Script comment: Download custom Certificates By Routers Identity \r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n#:local ScriptName [ :jobname ];\r\ + \n#\r\ + \n# CloudFlare\r\ + \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\ + ootCA.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\ + \"\";\r\ + \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\ + G2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\ + lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n:global tmpAddCerts true; \r\ + \n\r\ + \n:global GlobalScriptsUrl;\r\ + \n:local UrlSuffix [/system/identity/get name];\r\ + \n:local UrlDir \"certs/\";\r\ + \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\ + \n\r\ + \n:log error \$CertUrl;\r\ + \n\r\ + \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\ + me=\"DigiCert Global Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\ + n-name=\"DigiCert Assured ID Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\ + me=\"DigiCert Global Root G2\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\ + me=\"DigiCert Global Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\ + mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\ + on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\ + ame=\"DigiCert Trusted Root G4\" ];\r\ + \n\r\ + \n:set CertName \"GTS-Root-R4.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\ + t R4\" ];\r\ + \n\r\ + \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \ + where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"ISRG-Root-X1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\ + oot X1\" ];\r\ + \n\r\ + \n:set CertName \"Root-YE.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\ + ;\r\ + \n\r\ + \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\ + \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\ + here common-name=\"USERTrust RSA Certification Authority\" ];\r\ + \n\r\ + \n:global tmpAddCerts (a);\r\ + \n\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n:global GlobalScriptsUrl;\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n" +add dont-require-permissions=no name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + :put \"Download image, and save him to usb1/tmp\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\ + path=usb1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\ + \n action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\ + er1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\ + \n action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\ + 1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\ + awg2-webui \\\ + \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\ + \_shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add comment=Generator dont-require-permissions=no name=AWG-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\r\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\ + \n# 2026-06-30 22:08:12\r\ + \n# ============================================================\r\ + \n\r\ + \n# 0. Check prerequisites\r\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\r\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\r\ + \n :error \"Usage: /system/device-mode/update container=yes\"\r\ + \n}\r\ + \n\r\ + \n# Auto-detect storage\r\ + \n:global awgDisk \"disk1\"\r\ + \n{\r\ + \n :local usbFree 0\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \r\ + \n } else={\r\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\ + \n :put \"USB found but not mounted. Format as ext4\?\"\r\ + \n :put \"Press 'y' to confirm:\"\r\ + \n :local key [/terminal/inkey timeout=30]\r\ + \n :if (\$key = 121 || \$key = 89) do={\r\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\r\ + \n :delay 3s\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n } else={ :put \"Format failed, using disk1\" }\r\ + \n } else={ :put \"Using disk1\" }\r\ + \n } else={ :put \"No USB, using disk1\" }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# 1. Uninstall script\r\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \r\ + \n :put \"Uninstallimg AmneziaWG...\"\r\ + \n :log info \"Uninstallimg AmneziaWG...\"\r\ + \n :local prevDNS \"\"\r\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\ + \n :local storageDisk \"disk1\"\r\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\ + \n :local prevTmpdir \"\"\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\ + \n }\r\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\r\ + \n /container/stop [find where interface=veth-awg-VDSina]\r\ + \n :delay 7s\r\ + \n /container/remove [find where interface=veth-awg-VDSina]\r\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\ + \n :if (\$prevDNS != \"\") do={\r\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\ + \n :put (\"DNS restored to: \$prevDNS\")\r\ + \n }\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n /container/config set tmpdir=\$prevTmpdir\r\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\ + \n }\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \r\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\r\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\r\ + \n }\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\r\ + \n}\r\ + \n\r\ + \n# 2. Network infrastructure\r\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\r\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\r\ + \n\r\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \r\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\r\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\r\ + \n\r\ + \n# 4. Container environment variables\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":44044\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\r\ + \n\r\ + \n# 5. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\ + \n# NOTE: replaces existing DNS configuration\r\ + \n/ip/dns/set servers=8.8.8.8\r\ + \n#/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina dista\ + nce=1 comment=awg-VDSina-dns\r\ + \n\r\ + \n# 6. Download, create and start container\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \r\ + \n:if (\$awgDisk != \"disk1\") do={\r\ + \n :local tmpPath (\$awgDisk . \"/pull\")\r\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\r\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\r\ + \n}\r\ + \n{\r\ + \n :local arch [/system/resource/get architecture-name]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local suffix \"\"\r\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\ + \n :local file \"\"\r\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\r\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\r\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\r\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \r\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\r\ + \n :local filePath \$file\r\ + \n :if (\$awgDisk != \"disk1\") do={\r\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\ + \n }\r\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\ + \n :local freeStorage 0\r\ + \n :if (\$awgDisk = \"disk1\") do={\r\ + \n :set freeStorage [/system/resource/get free-hdd-space]\r\ + \n } else={\r\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\r\ + \n }\r\ + \n :if (\$freeStorage < 262144) do={\r\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\r\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\r\ + \n :error \"Insufficient disk space\"\r\ + \n }\r\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\r\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \r\ + \n } else={\r\ + \n :put (\"File already exists: \" . \$filePath)\r\ + \n }\r\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\r\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\r\ + \n /file/remove \$filePath\r\ + \n :local freeMem [/system/resource/get free-memory]\r\ + \n :if (\$freeMem < 16777216) do={\r\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\r\ + \n }\r\ + \n /container/start [find where interface=veth-awg-VDSina]\r\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\r\ + \n :put \"Waiting for container to start...\"\r\ + \n :delay 5s\r\ + \n /interface/wireguard/enable wg-awg-VDSina\r\ + \n :put \"WireGuard interface enabled\"\r\ + \n :put \"Installation complete!\"\r\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\r\ + \n /ping 109.107.177.79 count=10 interval=1\r\ + \n :put \"\"\r\ + \n :put \"======= NEXT STEPS =======\"\r\ + \n :put \"\"\r\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\ + \n :put \"\"\r\ + \n :put \" Route a single host:\"\r\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Route a subnet:\"\r\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Remove a route:\"\r\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\r\ + \n :put \"\"\r\ + \n :put \" Show all tunnel routes:\"\r\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Uninstall:\"\r\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\r\ + \n :put \"=========================\"\r\ + \n}\r\ + \n\r\ + \n# 7. Verification\r\ + \n# /container/print\r\ + \n# /interface/wireguard/print\r\ + \n# /interface/wireguard/peers/print\r\ + \n" +add comment=awgVDSina dont-require-permissions=no name=awgVDSina-uninstall \ + owner=Manager policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awgVDSina-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWGVDSINA] } o\ + n-error={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWGVDSINA] } on-err\ + or={}\r\ + \n /container/stop [find where interface=veth-awgVDSina]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awgVDSina]\r\ + \n /container/remove [find where interface=veth-awgVDSina]\r\ + \n /container/envs/remove [find where list=\"awgVDSina-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awgVDSina\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awgVDSina\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awgVDSina\ + \"]\r\ + \n /ip/address/remove [find where interface=\"wg-awgVDSina\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awgVDSina\"]\r\ + \n :do { /file/remove [find where name~\"awgVDSina.+tar\"] } on-error={}\ + \r\ + \n :do { /file/remove [find where name=\"disk1/awgVDSina\"] } on-error={}\ + \r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awgVDSina-uninstall]\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/container config +set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \ + registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\ + amsternl +/disk settings +set auto-media-interface=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +add bridge=Bridge-LAN interface=ether1 +/ip neighbor discovery-settings +set discover-interface-list=Internet +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether2 list=LAN +add interface=ether3 list=LAN +add interface=ether4 list=LAN +add interface=ether5 list=LAN +add interface=wlan2 list=LAN +add interface=wlan1 list=LAN +add interface=ether1 list=Internet +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 disabled=yes endpoint-address=172.20.0.2 \ + endpoint-port=51820 interface=wg-awgVDSina name=awgVDSina \ + persistent-keepalive=27s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.86/24 interface=Bridge-LAN network=10.30.30.0 +add address=172.20.0.1/30 interface=veth-awgVDSina network=172.20.0.0 +add address=10.9.0.2 interface=wg-awgVDSina network=10.9.0.2 +/ip dns +set allow-remote-requests=yes servers=8.8.8.8 +/ip firewall nat +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +add action=dst-nat chain=dstnat disabled=yes dst-port=443 in-interface=ether1 \ + protocol=udp to-addresses=10.9.9.2 to-ports=55055 +add action=dst-nat chain=dstnat disabled=yes dst-port=9443 in-interface=\ + ether1 protocol=tcp to-addresses=10.9.9.2 to-ports=443 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot walled-garden +add server=*1 +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add comment=Monitor-AWGVDSINA distance=1 dst-address=9.9.9.9/32 gateway=\ + wg-awgVDSina +/ip service +set ftp disabled=yes +set telnet disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=109.107.177.79 interface=veth-awgVDSina type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroGig +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=10.30.30.81 +add address=10.30.30.10 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=Generator name=awg-VDSina on-event="# ============================\ + ================================\r\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\ + \n# 2026-07-01 00:03:43\r\ + \n# ============================================================\r\ + \n\r\ + \n# 0. Check prerequisites\r\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\r\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\r\ + \n :error \"Usage: /system/device-mode/update container=yes\"\r\ + \n}\r\ + \n\r\ + \n# Auto-detect storage\r\ + \n:global awgDisk \"disk1\"\r\ + \n{\r\ + \n :local usbFree 0\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \r\ + \n } else={\r\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\ + \n :put \"USB found but not mounted. Format as ext4\?\"\r\ + \n :put \"Press 'y' to confirm:\"\r\ + \n :local key [/terminal/inkey timeout=30]\r\ + \n :if (\$key = 121 || \$key = 89) do={\r\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\r\ + \n :delay 3s\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n } else={ :put \"Format failed, using disk1\" }\r\ + \n } else={ :put \"Using disk1\" }\r\ + \n } else={ :put \"No USB, using disk1\" }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# 1. Uninstall script\r\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \r\ + \n :put \"Uninstallimg AmneziaWG...\"\r\ + \n :log info \"Uninstallimg AmneziaWG...\"\r\ + \n :local prevDNS \"\"\r\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\ + \n :local storageDisk \"disk1\"\r\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\ + \n :local prevTmpdir \"\"\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\ + \n }\r\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\r\ + \n /container/stop [find where interface=veth-awg-VDSina]\r\ + \n :delay 7s\r\ + \n /container/remove [find where interface=veth-awg-VDSina]\r\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\ + \n :if (\$prevDNS != \"\") do={\r\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\ + \n :put (\"DNS restored to: \$prevDNS\")\r\ + \n }\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n /container/config set tmpdir=\$prevTmpdir\r\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\ + \n }\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \r\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\r\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\r\ + \n }\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\r\ + \n}\r\ + \n\r\ + \n# 2. Network infrastructure\r\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\r\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\r\ + \n\r\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \r\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\ + kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\ + AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\ + \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\ + \n\r\ + \n# 4. Container environment variables\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\r\ + \n\r\ + \n# 5. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\ + \n# NOTE: replaces existing DNS configuration\r\ + \n/ip/dns/set servers=109.107.177.79\r\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\r\ + \n\r\ + \n# 6. Download, create and start container\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \r\ + \n:if (\$awgDisk != \"disk1\") do={\r\ + \n :local tmpPath (\$awgDisk . \"/pull\")\r\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\r\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\r\ + \n}\r\ + \n{\r\ + \n :local arch [/system/resource/get architecture-name]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local suffix \"\"\r\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\ + \n :local file \"\"\r\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\r\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\r\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\r\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \r\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\r\ + \n :local filePath \$file\r\ + \n :if (\$awgDisk != \"disk1\") do={\r\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\ + \n }\r\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\ + \n :local freeStorage 0\r\ + \n :if (\$awgDisk = \"disk1\") do={\r\ + \n :set freeStorage [/system/resource/get free-hdd-space]\r\ + \n } else={\r\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\r\ + \n }\r\ + \n :if (\$freeStorage < 262144) do={\r\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\r\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\r\ + \n :error \"Insufficient disk space\"\r\ + \n }\r\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\r\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \r\ + \n } else={\r\ + \n :put (\"File already exists: \" . \$filePath)\r\ + \n }\r\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\r\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\r\ + \n /file/remove \$filePath\r\ + \n :local freeMem [/system/resource/get free-memory]\r\ + \n :if (\$freeMem < 16777216) do={\r\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\r\ + \n }\r\ + \n /container/start [find where interface=veth-awg-VDSina]\r\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\r\ + \n :put \"Waiting for container to start...\"\r\ + \n :delay 5s\r\ + \n /interface/wireguard/enable wg-awg-VDSina\r\ + \n :put \"WireGuard interface enabled\"\r\ + \n :put \"Installation complete!\"\r\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\r\ + \n /ping 109.107.177.79 count=10 interval=1\r\ + \n :put \"\"\r\ + \n :put \"======= NEXT STEPS =======\"\r\ + \n :put \"\"\r\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\ + \n :put \"\"\r\ + \n :put \" Route a single host:\"\r\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Route a subnet:\"\r\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Remove a route:\"\r\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\r\ + \n :put \"\"\r\ + \n :put \" Show all tunnel routes:\"\r\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Uninstall:\"\r\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\r\ + \n :put \"=========================\"\r\ + \n}\r\ + \n\r\ + \n# 7. Verification\r\ + \n# /container/print\r\ + \n# /interface/wireguard/print\r\ + \n# /interface/wireguard/peers/print\r\ + \n" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-07-01 start-time=02:03:59 +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add comment=Monitor-AWGVDSINA down-script=\ + "/ip route disable [find comment=\"Route-AWGVDSINA\"]" host=9.9.9.9 \ + interval=10s packet-count=5 thr-avg=0ms thr-loss-count=4 timeout=5s type=\ + icmp up-script="/ip route enable [find comment=\"Route-AWGVDSINA\"]" diff --git a/MikroGig/history/20260715/20260715070105-Diff-Config.rsc b/MikroGig/history/20260715/20260715070105-Diff-Config.rsc new file mode 100644 index 0000000..1f47421 --- /dev/null +++ b/MikroGig/history/20260715/20260715070105-Diff-Config.rsc @@ -0,0 +1,4 @@ +15c15 +< # channel: 5260/20-Ceee/ac/DP(17dBm), SSID: vados5g, local forwarding +--- +> # channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding diff --git a/MikroMaster/20260715/20260715064002-Config.rsc b/MikroMaster/20260715/20260715064002-Config.rsc new file mode 100644 index 0000000..70fbcce --- /dev/null +++ b/MikroMaster/20260715/20260715064002-Config.rsc @@ -0,0 +1,3821 @@ +# 2026-07-15 06:40:20 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=Unet-cable \ + loop-protect=on name=Unet-ether1 rx-flow-control=auto tx-flow-control=\ + auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG disabled=yes listen-port=13231 mtu=1360 name=WG +add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ + mtu=1360 name=wg-nuc +/interface list +add include=static name=LAN +add name=Internet +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +add disabled=yes name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# 2. WireGuard interface\r\ + \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ + uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ + \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ + G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ + N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ + 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ + \n\r\ + \n# 3. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ + ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ + \n/ip/dns/set servers=8.8.4.4\r\ + \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ + t=VDSina-dns\r\ + \n\r\ + \n# 4. Enable WireGuard\r\ + \n/interface/wireguard/enable wg-VDSina\r\ + \n" +add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\ + \n# RouterOS script: AM-Telegram-Send\ + \n# Script comment: Mini script for send messages to admin Telegram chat\ + \n# Copyright (c) 2007-2026 Vados \ + \n#\ + \n#\ + \n# requires RouterOS, version=7.19\ + \n# requires device-mode, fetch\ + \n#\ + \n# Script description: \ + \n#\ + \n#\ + \n# Usage:\ + \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ + \n\ + \n/system/script\ + \nadd name=telegram-send dont-require-permissions=no source={\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n}" +add dont-require-permissions=no name=telegram-send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/certificate settings +set builtin-trust-store=all crl-download=yes crl-store=system crl-use=yes +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +add bridge=Bridge-LAN disabled=yes interface=Unet-ether1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=all internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list +add exclude=*2000016,LAN include=*2000017 name=WAN +/interface list member +add interface=lo list=LAN +add interface=Unet-ether1 list=Internet +add interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=109.107.177.79 endpoint-port=29185 interface=WG name=\ + VDSina persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ + NUC persistent-keepalive=11s public-key=\ + "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +/interface wireless cap +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN interfaces=wlan2,wlan1 \ + lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless comment=Unet-client \ + default-route-distance=2 default-route-tables=main:2 dhcp-options=\ + hostname,clientid_duid,clientid interface=Unet-ether1 name=UnetDHCP \ + use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=0.0.0.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=0.0.0.0 \ + domain=WORKGROUP gateway=0.0.0.0 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +add address=10.30.30.0/24 dns-server=10.30.30.81 gateway=10.30.30.81 netmask=\ + 24 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=8.8.4.4 disabled=yes list=to_vpn +add address=myip.ru disabled=yes list=to_vpn +add address=10.30.30.98 disabled=yes list=to_vpn +/ip firewall filter +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ + src-port=13231 +add action=accept chain=output dst-address-list=VPN-Server dst-port=29185 \ + out-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface=Unet-ether1 src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +add action=accept chain=input protocol=icmp +add action=accept chain=input connection-state=established +add action=accept chain=input connection-state=related +add action=drop chain=input in-interface-list=!LAN +/ip firewall mangle +add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ + in-interface-list=!LAN +add action=mark-connection chain=prerouting comment=\ + "Mark connection \"no-mark\" to NoWG" disabled=yes new-connection-mark=\ + no-mark src-address-list=NoWG +add action=mark-connection chain=prerouting comment=\ + "Mark connection \"no-mark\" to NoVdsina" disabled=yes dst-address-list=\ + NoVdsina new-connection-mark=no-mark src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Transit for address-list \"to_vpn\"" connection-mark=!no-mark disabled=\ + yes dst-address-list=to_vpn new-connection-mark=to-vpn-conn routing-mark=\ + To-VPN +add action=mark-routing chain=prerouting comment=\ + "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ + yes in-interface-list=!LAN new-routing-mark=*401 +add action=mark-connection chain=prerouting comment=\ + "Mark connection \"no-mark\" to VDSina" disabled=yes dst-address-list=\ + VPN-Server new-connection-mark=no-mark passthrough=no src-address=\ + 10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-connection-mark=no-mark src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG (1380)" \ + connection-mark=!no-mark disabled=yes dst-address=!10.30.30.0/24 new-mss=\ + 1380 out-interface=WG protocol=tcp routing-mark=To-VPN src-address=\ + 10.30.30.0/24 tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="WG for all" \ + connection-mark=!no-mark disabled=yes dst-address=!10.30.30.0/24 \ + dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ + 10.30.30.0/24 src-address-list=!NoWG +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" connection-mark=!no-mark \ + disabled=yes dst-address-list=!NoVdsina new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=mark-connection chain=output comment="For this router" \ + connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ + new-connection-mark=to-vpn-conn-local +add action=mark-routing chain=output comment="For this router" \ + connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=*401 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat comment=\ + "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=*401 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment=WG disabled=yes dst-address=\ + !10.30.30.0/24 dst-address-list=!NoVdsina out-interface=WG routing-mark=\ + To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=masquerade chain=srcnat comment="Default NAT" dst-address=\ + !10.30.30.0/24 out-interface=Unet-ether1 routing-mark=!To-VPN \ + src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat disabled=yes dst-port=44044 in-interface=\ + Unet-ether1 protocol=udp src-address=109.107.177.79 to-addresses=\ + 10.30.30.33 to-ports=44044 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ + to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface=Unet-ether1 src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=*2000012 src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set www disabled=yes port=8080 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=*15 port=18443 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface=Unet-ether1 type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ + ] WireGuard is NOT running - reverting rules\"\ + \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ + \n/ip dns set servers=8.8.8.8\ + \n/ip dns cache flush\ + \n/ip route remove [find comment=\"wg-auto-route\"]\ + \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ + timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ + NNING - applying rules\";\ + \n:local routeFile \"ips.txt\";\ + \n:local routeDefAddr \"0.0.0.0/0\";\ + \n:local routeGateway \"10.8.0.1\";\ + \n:local routeIF \"WG\";\ + \n:local routeTable \"To-VPN\";\ + \n:local routeComment \"wg-auto-route\";\ + \n/ip dns cache flush;\ + \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ + do={\ + \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ + \n}\ + \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ + irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ + \n/ip dns set servers=\$routeGateway;\ + \n:local content [/file get \$routeFile contents];\ + \n:if ([:len \$content] > 0) do={\ + \n :local line \"\";\ + \n :for i from=0 to=([:len \$content] - 1) do={\ + \n :local char [:pick \$content \$i];\ + \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ + \n :set line (\$line . \$char);\ + \n } else={\ + \n :if ([:len \$line] > 5) do={\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ + dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ + outeTable comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n :set line \"\";\ + \n }\ + \n }\ + \n :if ([:len \$line] > 5) do={\ + \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ + distance=1 comment=\$routeComment } on-error={}\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ + teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ + able comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n}\ + \n:local dotPos [:find \$routeGateway \".\"];\ + \n:if (\$dotPos != \"\") do={\ + \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ + \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ + \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ + ateway distance=1 comment=\$routeComment } on-error={}\ + \n}\ + \n\ + \n" +add comment=WG-Default disabled=yes down-script=\ + "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ + interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ + type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" +/user aaa +set accounting=no -- 2.52.0

~GEC^qSvlc#=G>Jf~R*xOwbDcq@8&U&?CS@+f3&wdI- zremO+?82DMSr{KFSP%QQC*nT};G8(alXr+NtvV^QlM|IwNr|Sx{xyCout4hRNn+l) z;l&un<>OmV7xNj*J6>7Sml{SWheC@RtgjO-Gu807$9AN&;Nr^QGv53&eTlchAHAV2 zOJVgg$iWv3?oQl($5`iXhJ@ASWpa(C2Fzr*NvFjzmLx;hDn)M{Gj<^66WsC`l}8CO zp>(k0zIy=yGZEV1ML4D{X-NSF2Oq2LChD?k;0=A zpxFnG)EChZ4u(svl1w?8?gPD2p zv(2YxlZpA+57D;VUU_CIFoyXWdKqe;wc$I&y^i*>Ks0};zt>=p`IDVGKpBw|bYQz^ zivnbcyV4#S;0I#KnxaCsn>db7B4-tZ<%|k3|H+H)* ze`|0mB5edGybt18hlQb(Q6PUqFtx)B{Z>sK83ykmfNl4W)%Kr+pPb!v_!1r2aZXHl z4{qSdS-1jzkD;Lf0NdZp;J%=m^Jbi53~iI!!}q?wOW^=infqWqd8IK?y>hE3G0DrT zwL%G+7CRWe6v67?xuywJk-mhj+niDh4?o#{%lx4 zVbpOgS=R9~U!5$A!5C}PcV|=DKoO5Gg5dj6pE_$&B_N9Y0xgfkaoTfTsrQ{E&bX6> zz}+aOjd4-^7YzO6=H8~g89ydDvzLE(=ekeQqhlqjer3+-`<9PDpFMCg$(BHCFWqxj z2F-T?8rikNj`ue)V*AR$!tRy!NEKY4%Z)m{GvdcM;1(^oq?^MUw#UT9qOgDMpGm~D z{7nT-H zGBXY9$biO9X_{B6DqKs8O5~=TW1!e8GdUQj=k_xZD+`8dGWZOCMG9wZ3nk%9L2bE*}>U zOM=&hjJ8v^-SIIK06g~Y?y{x#-mMoeH|b-q3F`|PDf=#@decl(R?Q;>96&Ad;vIV9 zo0Y3%P()>LusE%LIvm{?EB*-i^SG!z);tfBy4nSyg1dufJ*}if+Tr}A7X|vcNy0a` z`XO&qf)+@O+-8-@8eHTczjQ&G}4TP(6v&HvkyzES?;s!!gw_-%Jiu9BLedRiS; zP#3H(tif=Fu)*x-aI>>!&JlJ>gln_Oa4Bcmq#lriD?q6F3GX2BKEw&b<|Pcwpaa~U zYp#KG+6ju8>CMBy&N!k~n)Vqs=Rvi>6yr%4Zi30Fv-I5K z{{(wy$|r1pMr=t?7Z_%60HZ#sD9GbtltAbSRRUIkxKS5%s%mjY0cYNyviZ04xmg65 z`&4d6a_URkH9wZ`MG-wjG}wv;s0LNOD+anKBeSa~&MSyA3`W3lS%mJR3cuU}dTJ_8 z2JIc!oA|z8kUKF?oBF))KmdC_qZHc@jLXTIK4197vO4KaMA<(+U=KaF`l;rQMpKlp zDO^C)2H9|GG;v^yq<=P@xxV6%i|95gF zs=YupVT$=<$mo5SL@A;?8YDrk5na8`6Dd(wl9m!t;thN!WzPkoSXIKFJv zkMQRRx>ESsfZG=4Xc~Rfl+=^l$iC66l`#Y+yfmR-B~AwW0#HF;)N>(zp2*&!sUss8 z^2JYP$L1aES1;6ja3j8W@n~TejU2@!6mdBS@B6LS^fiAcZ-)Tx8(mcI>kyDC+5;*> zp5S{FDWjdL!iYbG78yu0&aBc`hA?E1>yegIorU>R$U(KIX+ObXKB1s zUQ-JVrY4vjyza^$SArW9W?cWzGVPQ-1pAjbQWf6^>uSV>O>q&AL}F@F>P&Ji!9gLC z2L%GWeiFOWrb5Q(=A0by!4fl{jmT5mH}?H(rW9qET%>$>7(Aog8M(IK&bz#nE66$1d;GhEUOJIEP6G_UtH|1Xq zJ5MfXL{nf1nSn(~To)f@)w!NsfW~BnNnG2+P;#dgK!$}eS}9GEvuH^}i9)rO$Rj8g z6>bpc9V=9wffx(o=j;8RQ2e%TY$|nrl>XAI}D_(sg3+tvaG9qt#37mC}jU z?TlM4p_(%yBsVuo$To&$DoTp?8`&$ z=(op4g(E0vs#dh%dVU6+g?~ObMn*3*vpGaC3IZxvO1xU+xD9c7W^dIgSY;8xd zQruH(KLZ}~jD+x?0-IK_1eSz+T$yH`IpL^K@BJ=e9@@M_HC-xfI(! zsJoHgErM|2lT_iDP{l|2KUZZG*t7N}`JLXkG~|nMMW_^Niw=;Xu`;HMBqUep@;)Is zXcb!$^L>IcMSqKZP&XQL{m)0I$V0}X>Kflo_v8-U_(OJ)r6L;M5mbp7Lm)JNfF1Uu zSk7kJwGJ<+DaZl8(b-AzNR11TYNt&17Yb()hsXz z6@JNU2TQHc{%I_BL@6PA!~hiJ_VT=BO4olT|1+qX%fY1j(%e*%lq-!StvVg7en@WeE2n&P@RZ%#fy@xUeN6k zKXLJvU~|`oFEYHCFz>)KRCP6d3}Hd?hqRj9HRha}Q@>1uar@>)sw_TS7=U`=8D-e> zmb29$-hMTX`L;hu@Jw;IhT5mt>-u3#M+to`KEaP7)QQk4_Bpl{-rVq-O%P&VqQ5O? zK}TFbt0Gv3er(m?8+}&+M2x;ry6&uV9~3W*Wh388F_jRI9{6!CB19EYlS^eRp0r2A z(OwaLoRaW-SF@&`!al2evi@P$dAy3_*wtN6EICjs5+^=3+a>VgBWP2$!T3v)L5b|! z>D9$)A<{XFdl{Ytv>Vz-91J7cpdeJh@@BcO)IbfjlrRj{nH~wVBHyDVo?P{|StzLN zImEdIvXzaCtsRIomzeFbI-S^8BjI-&nR_P|If(?`D^A^+`gqzBgK6eqUYSZb2;pNa z#irLm=fXr?y_n%-;Ik1Gh9917BQlYL7C}sBRn4OCx9x?q^;9mcMs!1w%666P%hX_# z^|%^fTvC`(XV_7lIydIzxw{A`1A#t#cvu#MLikHLA2yJ9vaZKCCriEt#247++^Dg< z7-V&TC-m*HWAHz#jml5@ST-k5*@I3CF2ip>}<~pSoR{Rf081bTT4-YNWIi+ z>NiNKumV9Oqr!t)m(-f`lto!R63Y zN@Z-jEFk)LGfKa=jQaf#qHN>*WE7~Ma?l(zQ}-RkgRud~`*>N8fb z$3B+S4^5qrgK(W9r4LPfq8HqFoSGfrK&Y=J$bl01^zL1NSd0r6GnRTL(wOVo`&Q7V}6o7{q#vna184JW$!kmAn%2Jl0wMo$aU%bvq*$e+gP{b3_oq`aK#2D= z=4cmjY}3_>GM7SzSl6NFG^n(fbie;51$?Ex1L982+P^7s)X505@hRTPbef}9{t&Mura7~Ln?X+ye0O1v&@ zl*+(;9rV~XEb{UWLNZz;M`xf_u}sjWaDJZO(^^nlI+QmpF0DC_`k0$t9Kb$M<;&`z zUXu@!N;?BV!|y3V$V8-cN>4IdgK@~C5M;2Cq*(|axT7#sNCDGh!&%-`w@iITTL6L< zI#8m|nbe=8GIULA*}|(!HDH#1xNW_03PjtL_9@!n$UD%2aNUbtg$VMk?W<0_z|R-= zUAVioeU+K3VB(EnM1MiU)a!_l)|}-K*^Dbp0P8E=9O)xJ`PY6@d~H0g zGHB8&xP6C!2=d1xlfQwq5_)b2>7v+eykpgMu-9^IfVMNj_dM}+I}eYABA0vD1tvFa z(7g%)G7(VPp7w-zNs$s!T^hsJ&J~}QEU!s0*)pTpg%T19@R4PF zDU0jC1KYLnYG}UZqTl*cRrx-gX9B-~VzwtGk3^=CjdXl>ZM98@1DGoaq{TWQV)0VeKp%&`;D zC#s^ARts!!iET(`_nFdLLi_b)z*{AFt5fP(50uYvLVGCZEcCBwo*e7MGCAEs)CPRq zl3n9w9Rb>~w@^#jyOIfJUQYD7fw&)JL*@Z@J_A}O?=gSrLs|9L#zh9QYd7aH#K5F1 z=*pW?A3sDsF`yT&#fYQXSv3M{q!ByqaaJypyru41Z7Ritoz zQ@Q584qm+%@q^HEnky}kpOxHw7M=$)QS8`3?9(E%YjZK!-BZZWU28l=akW(~A-&#k z+~!w-bCo$+PwekrB#Ei`ikzdRUtU#Joj|1*87&ZkXOqEc^0aCO^jaB|%U?!*qH`E! zmB`UUz!X0**+fYan&Lxy&94P*W4)iE%?(zGdi(}6sb8Q^4@?YPF<({9y>*R}XYQ=DAUU1R97l^gYP=h1dX|hu7WZU$U%+{b4&q+F<6MVLa3@Cz_S?T*IY)I9Ycy;~ z9a{!R$*N7}1&NVpOk1~3`cm^q#1@p|O*6S=H$3_x{JAlI$v26OeU$<^xx+d`SVQc| z0?vRzlwdYs#bY)Vm8+MOm+a|uy_I7FbmMjFTDyzWXy5*o#2bA<`K<9iU;*1874 zmEWmy0;kX|ox5PcaeLysBs4yV{h#jmcDH-6k=Sr|C;8q<;b)C+>jK}x<78Q*Jo@$z zaxBMh*wpKz{+fPbF&S}hSXlIdg?R+ygjViL*PXP3P69*gO0D`3-_)`So4tqWRO(Fc#%upBULTNCWIog zfx|CW=#*(sa9W~~>#dwnw^z~>_Bnc7ftvd1H=u36r5t&;9gU+u?>sh&6j?I9#xE=~ zsoZ2x3frf|rqN_(3}#Q^c}}ITFP&VtzS;s zK^yc6VCCTij(#@CO{{96?3UW=D1-+TJ#=^@1P}K zGD7vjD7!!;Q&zRTwvN(8Z_O6#vn<)LFy#(EjQE+^4Kk)KXo_j0n$TJoBRb1DK;uF5iho|}8W9LBlyF-wqU7ztP$`W2M;<7qHR%r9zFa#~ z){_%FhSjYVD2rbUSWs-9jqa*>#+y%DViBGt?iw#RH+d9CUUnTQVeXvJ%zEmNzE9Mb zH(EPP_yR=Qc7j|?ndDbwgJ!H6rmaxjlh{xPWABTb4I}3)fm*O=bY zFZD~JVAzQ2jMpoJ%xR)3?FjAVhi9Qs%4u;y@qnyDx|VY%yX(NkxzyNGcK2Ik(GMt> zE!X8{Y(*z}3b*mY+MQs%9rJvaZc(}QIrxAPkqI^NI-Zz4_et1HBEyifM&ZdFp^ z_e&WGV0*BBizsAj&K|B|??wcd-IRZte5)XB2U^|mNbJgq%gn>t{Q~QqnsT=XbOkr} zy}@2Fy(C>%@12kcxl3olha3Z?T(_P!S?=Aj5Um7~0Q*hOq)*Xt5e<=#fEGP<-s2t> zr*hI+t*YLLeoO*n7XB=!k6O#|`Y>Jw;hdZBqOk+MGPxw**v}JEGp5QZf7R95imzin zBkb`Jw+Uv|Xp)Z^4vEo!qI3~h<_yzP3w_g&sNwr#Tsoxb&$9XXV{lc3^H?}r^cud# zc}<%M9Sh(X$~Gxa6NeADn*=TfT^}&WU0-%kM{y^mGTJiBfCxeHR z=mdgz;`KjGiw@u>BGib**9n!O_rGg->zbTTQx+&|siNU^vgOyfvY-s5?Q@-_Yh<h&M^$wy<^M?Fqn0&Jm4Sr_R|Jp{R zOyZjyf+!3ar#e{^uuG0nRQ6XI_QPQNK@g;T*g}i9SaLmM{990%v68!32`ymLg@=MT z=-%3Qm2f&DnQi~y;WtdEk+3iB_sg(dLGsJmqbEWv^;P70+p6${fNyAjn$vc8ML3=k zP;Qea6xB+kRpnjyn!KN9M_5^bL;L68;*ujLgBw@rMLkSuyz`M8|tbGg9Xhn<&R^P{dmr2Pemr63_|up_56Vl|Zj^GlC~ zA_GU)m+^R25#(d%JdT9eY#CjaBdjvfmnB!dBSnNY*AH>j{NLU-I3m=TKIHRsrY`E- zJHgUT(bz8s*a<*EVr2%pIVb?<8!strG^3-@Dr{iogSG*<1OGN-58T1~;>)@s01uT7 zvC9Cs-#VwP>U($KntDR}rPF?gvX%Y`w9x+Nk)i2gi`5bAtbYOw9&$2S|H7j?-**45 z-aG%6xXuU_V>g4=!O`nM1%?HJ2L-s{ zI3j6D70LAiIuvbyXF=1s?F3-<=Zv7J`{vScy1Y1=nZn6S|M{D=+98N>r+a-OFa*5Hvgp+FIrnDh!%aeFJ^Y`by(uW zKjAVSAX73c6ODvg92i zGC`Z5In)FA!~L-mmnjcOik#k~IMj)Zk&r1uz-k<2&cs`fXK6gm{Pw4Fk1M*!p^W$@2Fin_Vk-lrj zn7rmb77~!Pei!{l524x&cj0baxS#aij=P1d!p9%av6fGLKaYuv+b#VYmbtmX`%DMu zv}_6Fl@NCPZF8;py|t(f0wqzFp}x+sre39Ltq+K!4q+88UaS5)yRA+W@!zYrQLEf* zkQszLW3w`iblu)10e301XP|RhZQ*eI-Vp73ge-xG9rsyhl{+Hk0S9@tDw1$z@)%Rw zN}c~D04rW49jPvi2ma_N_-ZE^SK-&Y^Q(HA0Ji8k+)r3!8q#%z5Z{JU)M^Muc_?yQNr3$L&j3c1?4CDQrNASCiQWJ=h z#7UcwLYz&N+`6-9``BMi#t=$V;S#Qmxb4Fz7_%vUJRd~eoV`8+PEjjpB@@|lgI#EZ z83uC8i@6ugov0cZ(0Yph3MKV8q_QS(OCS)C=8H`|oOFBGT}rnoayyCp{8^|2SQF{Q zOR`RFl@Jr^zO`Rnk`LL5y=Y> zQWFTfcJwVD0*1M5+t4>tsU}BLGlo)R537pWO2+tk;)}=wdfSxgw8KSS=nAQ$KnEcu zT?`Q?euzMOFVy?Jr`_g8ie(m?HczW`Z6j7N{Vs<%6AQ`W@d4V`zS&6Cz)WXoezra2 z_E3<_2hwP6OfNqmJfV_EX;^SvvQi^km!wPnMyNdqZlf~Y%7|)?a(Mimp#0F@ehVCo zPbtR5ixM+a(vK=alR8rv;w*85(KbZI381rtEan}GCG)dogOY#UIhBuCevbhDnqm^( zU73Jk+it2vwQ^+OmBO5fi_b)aTVcO8!%p6%7uX1g{ISV0+MxbVmXD>jo=qy~rBsYG zmuN+^+z+rFzJ+DbYWD11wCe7r;;ON&iAOltM*t>TF>1p`q8Vq1KjLrpO8cq}!tEox zRcx>X)trWsMLu?fsMt9#+I2J*as0FSL0=g95is=UQ@0 z%uJN!H~g$4ms}1$&t4E3Ru?bLkpX;s@+3lFzyCI5mUYR!6+3jzbu9pOmVipKr0dwm zNc5>opg!4!4w*q<2A$Y2k>?X~UTee8oLu)ww?lI6qPRB0oewYDR9YP2E`UOE`O>AN zg&uYCD>C)VA2$74+AV;buz%BGKlTCV&1oi$>mc|qNg@xc zp5T!*mN~;VqTD8R%5TiCwb^CixavtfLaKGAJJOI+3Q7GA2L&CxUCz2Zoi>vn-J!Yj z8WMcRX`&$+!AcYONrK%qw7erj4z!dRS1Hnqqw1hI!Zqc3y!%W&PS%~;>`o%DriK^j zqPyevgKn-uZuv4qEU`96s7rR|-mn8@fc)*Z8ak>DO8SDJn9~j8aq0k^)c?0FCJNC?zk(3}RK(&Lx3!5wOqy@N8>dnw5JrK*8(;DA(%rKu1 zU8AxlwOhKwGf@b7dDL+ekPgo|+>zcrSGn+L^O&BD62BhR0~YQ1kP-NQH`{_-ulcK! zg{I9US-Y2Cxh+b$yEaEs~R4tAP(oSRJdUPG5EYZsK5-%RH>g(Z7{GIYmr4RA=rhY?Z5-Srcgr z;)kDiMdI0W=9(kXXj#cRSD)#RwbFe-2DsNc@~|iVC*chJafPVUhu%B(0Ia!tV6tLx z_i3uPj|EgJTRM&TslPcWm(6MW| znswTRkUCZs9`h`MQ)cYIe0$v`a*I*X?U?5Qkc}%Etno=keWSI78ksrQYo{tD=ELq! zd`s?F!*ri)vivOrm3&vDR2DW4n*5f$o87EEb&v?si|429*o7tpti5){H%nB>UV*f) z`ebPj*W2z}OUYy;(eNJE2_rT6mU%rPZzpk1lGZB}*=z#r)W zlX`SVwq)uNQ`vQ;^^uwL6Q3rDgEUn`g8&3y_2c{dOl8V)agE|s+Xm$8HKjN#{J zry7M&nVtJ9#^ktvx#BjsS8H-vfE~V~wrRX$V9G;yg>~-^*1^8`{%FGdQ`H>uU1&%8i=)TOyt}RxHD?8}2f-voWRDz|PXC#tz&BF`r zyI=DB&I~PRneTO4;4QQ%M5IS%>k*yAJ+Q6;6ENGf09_{l#_O7pwe`r#3I*u5;Dz;f zPRqvwW>eG-lR7Z|*msDO8i zg7W0=8&*;fE6PCUfMb8>Q-xW}p6Ji-NUMsmCsZTe)Ku6v+1MY|ogABIS#QAzRg9lp zbmHAii^<&ZmY2x!Epq_G4@70GRp;}lN=GbrgI+9#b@<~&Rvb@;J&rm#oFheg27|c| zpUFxOaLs8vzcSD}r77Fu=1}8GyhbW5=jdd3D4D|1$7Q^s%E7XrIL>?KR#Y6vodW=| z$(Fc$f02CAH*}&Q32?r%h6t5M$z!{~6kaUwDV&!nT36}D-=2L@jJLnI!BNkCBQV}f zi=3HIntmf^K3g3)A!?R_$ZqN`P~!FF)hq98Gw-F$O0?Lm?zaptm6q{3kkAuPI*Ui~ zn8grmwo^caPe!v%yC!ltGYJu*;Xe!V+(OVy6rDqDn zPPR<>79sgC&@oS1_B9cubeot70RKM#z+|S6PK!FfNdW}sPScmEKi^>Qcj?e2DmAVB z-L4aWrvN2VLRSWys{*PDEZ{$^GI?ew6Os}%RdM9YALppQG2M}<<7qPb`@VGLIo=Pr z)73_@HF<3IHF&))gWLV8#MBg8S$fr~3Ko!Iy7{X2f>JW_@g8Bq?eudGI$k|%ikn%mIn&}ef)yZ<%F*%f^bhT(YC=y-(a_(D} zEEG2%z>0#^abD;h0mThV5>d+ZInk~Pu*>iv(tfw)59UN_7wK&W0mP`H*7a<*4U++3 zXFdHWxd5vtoAvnW;YjMzCTMWN(pVk!(Z!w#43V~k_t#YqpP~eV)&?(9Q8ch2h$e2I z`hRV~i_;@epuUrJ$qpiPVm62xxg$rOJw50L@{>&3OUk!p4At7Pyd#>$=5uT@=uc(= z9nU_;xyvnmv|~|v;XZw4%fCgS&fZlcz`xfIhuQfu!`N-o>%?q6wuV-V$sWUVT>> z01%twbMo7^55KG6;9b_j2B7M@x5?;oLC(^87*sCTf5V5BVttJh3AXmGn(3w>5%zvN zd&0J6xcu>GSV%0^j{8tR;?5(vnwR`WIR2hzrfNpiGH8n0qP&Rwz`g*}-SqlFT;?nq z{S(qunD<1djpf-t$e&)=S@E4kSuTCEo=a3IwImvh%SG`m-WpcOt~io@lBpqJZZ;Vc zm_-{JF}xuNyFibJAHcE8$pupEvd`YCqG>MLdy}}L{CKGvpU)2d4_WcDdu^SZV%@G!oZ(!7J^L+SF$ z4IYZsD4XR$sM<(5Kyg<)^E(_CH}H4gfbKgUVK8xq%3qfJSOp%WFqHQ(n{lN^znM6r z*klLeC14U!=B=)`B$1j^wC3--a>aA!tYuvDW>tI^1L)#}J)gv>ewCM~)C9brN(Bfq zU2i}VVy4&sEoV$}`15Ll%~O@t%~0^Vz!ov^>@5>O|45D2>v2n25?>1l^v6pim&y)| za+Bi+X6{8WP4;;(3Ud}@A|K4s5kU&sABoPK6SIHsf$Kj(6idO+zesPL2rgOKCIlCy zG`82BfxNY;KVHQ55KuI;LheT7=;BIDITYyQoZZpGuaDF_e)qK0tH;wx0kRSr$b|r% zl8ok_qnu2_ns%@&Y6C5+BDoLjCvy>l>zM!C^xAvm&9D3IK)x0LJUF0fj9?-}VL+Vk za{%*~1xzCYSB4P;h+tNgAN1SnDE2!?uT6o}lsP0K4aBB1_hI0>H<_+%oeVtZpw@UJ zJ@emMyipdj!D1}PXyr2=ty=*>u*?-CrWwg0nVNZ8A5>v9*znKawHj4c zDXg^w1U9Eig#K6*lXI?_%=RpE#yO0uVi%4!h+yN0Savi(Mb%4a; zCWAeG&51JBg~LQLiH1e2M*|!L{$CMpnsY;$vY1hWsAy+v_Y57)&G{NUXtKl0PxqRe z^Tor1dc^-ZA-+}E`8ECb$WYip4BvU2m575uok(Q0egT=(CW~C+s?EZg@s5Jt$Ae0* zQeEnTnV9bxg~=<{g6fZ4$Y(=kHb58$@RB3a{LUEn>Av-ZxT!Mcc%d5Vz|OLxqS^>Q zTT{VSwVqkm?X%J5<&sNd-JbMpU1&-4h?JNlZ0RdcP>uGzt7C%m9Fp<)w|l8kUzKM+ zoQN#s${S`{@>Hwz>I65N+LF0h3C)`LuSq} z&bZ-3Xrg6Iqi`|A3b9_EwGL~*huw;fRCT|~u!MMv4 ztv%2|wb&Tdf^7a5u9Bh;IJ2-@^n>U(!nae_*B2c(a!`RYFmJ@grlWMF=4q&&V*{pZ zpnq4zpLubi0Nh_rnufefx<>QGh@z6&h>>?J-o`#Vv<+yX8Z!7H-@TKn3GT2lJ<3w{_+h<=oWL zkgXRlbsz7wQ#0Fyr*b_Joia}@Ev>;^Lj#~nnDA9 z-%goyCl}SnR~_7U5Cgc`9<#i^BHYq+|7~q@=+O1NeBo7rAqu62 z%nsvRKkl*by|4P`)Sg484NEc^MPr%825MoLKl{VBpg5!L{#dce6Lf!x#geQY{eJBl zKyCHMWyd0b%=DzU<6jAcii$6r!W%88mQvjmaeS2VlXU$6LC}#B