From da80d692ebe8f4734852a25c977bc9e804030a57 Mon Sep 17 00:00:00 2001
From: vados-dev <vados@vados.ru>
Date: Thu, 2 Jul 2026 19:03:09 +0300
Subject: [PATCH] Backup for MikroGig created successfully at Jul 02 19:03:09.

---
 .../20260702/20260702190305-Binary.backup     |  Bin 0 -> 184584 bytes
 MikroGig/20260702/20260702190305-Config.rsc   | 3155 ++++++++++++++
 .../20260702/20260702190305-Diff-Config.rsc   |  449 ++
 .../20260702/20260702180002-Config.rsc        | 3695 ++++++++++++++++
 .../20260702/20260702182002-Config.rsc        | 3696 +++++++++++++++++
 .../20260702/20260702184001-Config.rsc        | 3695 ++++++++++++++++
 MikroMaster/tmp/Config.rsc                    |    0
 MikroMaster/tmp/Diff-Config.rsc               |    8 -
 8 files changed, 14690 insertions(+), 8 deletions(-)
 create mode 100644 MikroGig/20260702/20260702190305-Binary.backup
 create mode 100644 MikroGig/20260702/20260702190305-Config.rsc
 create mode 100644 MikroGig/history/20260702/20260702190305-Diff-Config.rsc
 create mode 100644 MikroMaster/20260702/20260702180002-Config.rsc
 create mode 100644 MikroMaster/20260702/20260702182002-Config.rsc
 create mode 100644 MikroMaster/20260702/20260702184001-Config.rsc
 delete mode 100644 MikroMaster/tmp/Config.rsc
 delete mode 100644 MikroMaster/tmp/Diff-Config.rsc

diff --git a/MikroGig/20260702/20260702190305-Binary.backup b/MikroGig/20260702/20260702190305-Binary.backup
new file mode 100644
index 0000000000000000000000000000000000000000..f8063cffeb44a0c0c15b8c85b5eaf91f0eb575f2
GIT binary patch
literal 184584
zcmV+aKLEh*sF8CB(E<Q+gQq;lx=1(`|Jp3(ED%@#0002|`~QA$1qA?D!s&L3Tlaj%
zhzck8yNeMfT#~bgJo&PUFrnsG#Wif+-B)krbw>)k&YUbV0O8Otd6>es7Mm{xX@kP?
z?$CCO;e^V#?{(vhf0%&(zHqD0@otJuqGY&ZB63aZ*s_^6bHxdO*LmtLbwqm;2kU0|
zA>?L(mxBv_PB!ie(v+88LO^O8k_y1{hCTL}#K@8cK?~?E@fS*eH<~oCI`Jp15Tv(J
zYwAyQ-iyyEK^MTHhBc}Xdd{@UU|T7#6Wdk+GM|vC_)>MUvnf>8TIesj1ig#zu(>A$
zai^%xR&2S)*@Mqcej$KqI2ju4d1bdu<uL<@{biYZ&=vpg1i83yv9=c6tg}K@Ec<vC
zN3{2Ao{k~TqQuGqk?)ZN`?%arGt7q`ZMffr*vW%3Lo3_SYrw}^v`$}M#QCD9AS+f_
zu24E+#>PzVBEQ^iweq&6Y)PcRq|zy`faR`Pw(eU&<dYsk4R}^F!$3k2Rd>xjzIDxa
zx<J6UTR^0Q894YBe)hm5kuO#|pud&yZDpU3@y{%8gOivX{3)e@VSZY%hu6Ido_z)#
z%Z8!%FP>^`?#(f-irB~Y5Jkqvm~;7GA8tt-7T|b%@sDBsB32FS=Ed;2GY(zE(6E07
z_6K(5UYd*_!AFl_ngp?KC`}r$LhT3sp{naAIOFu-vEY!<DziOlrLo@1slK66m<Oyd
zo*jEMGXVwyy{yL`nqP}hO2Wz^#jv$y07T68c*hk+8t$>P0TvF#1+aG}cZuDQesmno
zZi5Zd_n6^Qi^OzT`lOq#Gs&#sJnO-u(38789z0n7Ru-mt;llWG{3hsZ;VMyFsb%U~
zIyA$*k)kXOy6e&5_g9U3jGB6cwYhLR#?>e_4+Aq~N_v03kyk?am2)y6V{;dJPBn%3
zifrxD;Qbe1*w!^bNqm4K0#Pks@+*Wy0zarjOU0HuUlQ|tJZ7k4RKn1gH2S)r4sD$e
zxspQ1_?oVusNJ+3aNz_VdU6FoiP!{3kp~JAFB%>m&Cg1-OJcqXH243rwQ+Hj9|PoV
zqI+e(lznlP&fxj{Sfq%lgXv!J{p*3{t5anZDj<?j4vx^Ekl_TBvZZgTq0o{oxfW=b
z+`n1dEDpYW04cPEl7AwD$a^h_N&0jvr4Hf2w~bt#3btoMZK)6CT9LW(zZ@C<dQ~><
zYsl;PlVYf9m+J~ncG%*mDul5{!5s*TdY#0=yLnq~HF8LbUE!|kCYrPwDxg((F~y^P
zJmT8qbykCCu!5pfw!lezKoR)@Vso!8mPSEVaR#&$b01ycZG(P)*u9)FUjD$wrObq(
zS@!qleN5X7L&C_odGm(Wyw3+&s?5+eNCFF~rJAi2r4!0v=@dFqp;dpyI4CH_7*4=z
zJA1n>VEdme>#d?&@?1g5s|c5LgCJm1DQp5iZLKHV&NDG>&E`Gj&VJ@Lc;W53xW|(=
zOuiktMx<?VEfG`e9+<PRwo^uZP&}1t;q-dIHMKwIC(F|w>*9lHYZ7ad$2Q{DyrgX4
z)`Yt_lAvHk@yfG=7~2i)96A$IeH8s%v`{@7u_$W9#rM_Fm?oXE|DvM98DTqgS0Y_v
z{(9U6PCoOfFxQAAq{AuTZ!}DSu5{oISOHLSsu5z2)f2OVK7et^ZYm4SU`mYn0|E4}
zw<Z+S(cw7#3Ehn0C^m$?b8^oN4LJ$24o57vEdWkAP7<Ul2qu<kUUvf&0CrdiU(yNk
zl7?29``TCafMWdEOb&p_Vcup)VA+sPP8C|my3}Uyx4`XT>Jb=3WtGiZ3<zwoOxGWV
zB>u>}j7J_-wMEKLjot=l^|%;5aX$a&4h@O5P1VX^qJad_F&16H_~&kdv8RZwBdWOl
z>uItIoXsIU!~tP}Mk(|@vpBLsMTNf7Yk(eW-&(fKECwxNqwIagVjb~MmL6<%u382*
z2FqefS#>b1!z|CS3zD~FTWe{c^<dcm<dFB61{QixXdEiV>O%9{$j6XsC%=%<1dctq
z-IyWX)!)w>r9kq=660S(hVqR-C7q8tk3jG_q|Ad`Tqo5_Bjmb2jVcA9zITgA`{+we
zLYMtpOA;{vyh|of6up)~Eo^N<>&8S~hnMGff+rSj<1F3|k8tX`VxpK6#@wQ~%l958
zAyoAZUSW7oHai^&xSs3t+A5(ZX3%J?vvy%*-Q=l>puDGG4O54x|AKb464B!Ti2skp
zhuQk9Zgx_{Lrx-=z1~Buk>CDG%t@k+^Ub@TA;rC@4O1~6ku?4bSt}(tYhx(X{EL0#
zIRjbews=J1t^9U9L1yeQse=vUdI<$G-Yt-7Xa*+R#Lv5sjku2LC_;gFk|BHNvp|Cl
zNzQPbRZbwop<h7Gjj3WdJ3FUYx)nm&SO0J=j*t88r|@+Sk|aU%*($essMAiAjeqDp
z2Tvy$7s#I2<imlFlT5a0kck#1vgCn<f4z}%2d8m7?>s1hD_!}3f+Yh#X3DT0-}Gr;
zYbV)Fv`owv@~WnNf52rDLch=n>f&F9^(Ukkr%kHmbAMZP;;w^iczzpB#X1Gj&oTI+
z=gCdk-X6aYutxMeuR5Jiu~H;nTMNXtsNFT+9=V(qtpcM-I#x4tyz_ux!bEN%4IuHH
zAR}7dA)876sIhU*k_!OPq~54=m}_@WYp-j&i;PuqTTVhjXF6T5>fi8-M+L`nmNtIK
zM(}!#Sk_#%dTf2!Zt5jS)CbtGCsvikr``rQPty(qTO-6NgTN~^Xc}SVHRmq5x|CU}
zSPh^H(7l?hr9XKb)5_&w+~kuzuiJ(9oLAI|?MQ!E3i;TBiJh0&Q#aQ|=E{sJ8;%I_
z6({M0xTZNUF_#&3_wiY$#9`3JT~NN#D58zu2*rkaG+Y0*C56zM$#n|xho=UPKBeVi
zXY~yh-WyV_C0!o&QD9#niCfn71`Hk3fPU}=2{eF5M_`mWydw8E>_>QBl?5g$dQr8*
zYli9lVyCv~uiMXfSybWWi3@XTZUt5)RRn<oCv*Nd+%fTAVOhxZV(&fm1t6!)dP}w2
zut%O!UahT5g^12cS#K(3E+7l$bfMWDVii8dgxT$n8dm2Vs&IT9r_B{aUq_E>xQFB#
zRnB+$8cygzo<D<mxi~9`;A(_NYHRD10lU+qj=0e-dN4|O(=$x;Fh}7Gqw)rki;{#!
zAserT22uxL&jRzUPRd)!m{ym&J5JC#95Vhby4wb~y#*V)56pPaht@%Z2ArRN_@~&5
zYQ6Gy^gy?84uo8+TcE^KjEtw%T$m!~e)MN))dHy3akShRi>j3rifURI>O+2|j#bPw
zFawHosKm}Xe+7S=-XOT2VG5+9g8F|##)&>F>X)bqPXrAG|Cz$dGUz|a4eYN^)Jqfo
zn(D>=KC1Y?24@Sw&X*dV<Sx*t7J_0M%rN$U@A^wWW_~~-wP1mer2V1L1R5h;F%g1U
z5BlW5gJo&|c{M-}6gP<O7aui+yq;@ARD!2%&h<}@VEl#?ng?pC*`JYL?H$4#Oe8VN
z^>eHqfjv#9K>&|Ksv&qppOA#m0`=<6`Ik*-q_?ERY_YLhdS*S_#F?VB1ZReUbCyRp
zg06Az21(815t;5`JzSL{(58{8N@MC*PY4$Ac1Y*1Q`y2NN3c=t2=AMJio2qRDV+O*
zbQ<PXFpRU^fMk+cy%X7~UG~0O9%~acaHmS($4XOHbLTM7+P@>JnP@8du}8^mq2Qrg
zEg#I*7%#RZ#UTwg>SZ#CS{(|fI`A$FU~fg6d8$4k8{oJXGt~{xSFb$Spxxs?GA3fu
z7~ofW+-Er<6lo!eB!x{24Ia9@ghta_37^bPrR2+^E0nnHJxek?noWD!gKT3QxH1!N
zw`Z=u<q$S6$9Qbgc&EJ3j+(l|!h;L>(}y(Otj7qV0yzRwyEly!r$saOtd2N>80gsK
zJy=P&87I~d#kCu)!Ox6(Q$WkF89)WwmZ?;v#MOL<zHFtVc$TAdB^BVbOkyxSA?kE7
zrX9@08037;c(0t*B0w2w_r<BpfM=<@|2l(f;Wu(#qdDLQLI~|{;dl9dTVHdiEv=^v
zUNMW{a6QM;H8KY%MaA0=Ck5Gke^hKIai47k6~C?Sy(rlQ>;m>WTV&h7O9$J@<E&6W
zT}pBv0AQ&%VuZ^xRZ{3G*TZ)1Z-z4=IH)fY1GyN=)M;G@WmUg8<Xc+vvd7gbx=vN5
zb_4B(!)uwy)9nKhVYp!=GbG04_T;K5$aWxqgYTr@65q`$;IK=Cdp~Mt@^<LNc^i?A
zwxqAc*sirMpoJdX2`zOd4MO%#-lJU!=bsjbescL50{i?f%@6op4!_eP&7G{Wys6L3
z-rjW@nUV1CRaXG_MKyY+ecvkO&+gQ|@^bJ^Z_~iTo6dU=^%W%~lQ$RxE+Sl}J+WrR
z#-okCC_$nrL(?pqXg9-LmKVmwEDMVqwK<5m_9i<u{y)dIdd^W6dh;RrLBC2vhI*wW
z0oap@wfyJudZzeHz%xtz=_^b<LUfoKaroyXG^H7#)3VY{Jo^ljeq>z>Y}tOh3!%hI
zHClo1%(K_?sXkejty+9c26Vo@A2JO^c@PVL&W-4O#`c#5uQYJI(}NO~pw(wdA<<ej
zj@uUUo?$a7e2DVD*!iM`g?y!RQ0CtOSURH2Le7-$_hr)eZ$%}&ROeQh?u7gW`yjXS
za$BG#WxJF^OBi0U9525bI)riLJYH<MMoCY1!5&WfSrS{>sjFqQ6>0~^xhht!nnz}=
zbh}D1xjUr9i#_koX;_(ctKj78YS3q1MW9&!$oy!hw`1R&|Fm221UPO{SGTdC*kuS5
zl=NcS?N_L`1YivQ_XO$GTHCvshk3a6g;J{kF5@Cg^(LO=cJBE%E|&*MWu*;|63!x2
z3tNbxp_8xZ(9fqiNVS^Sbx)wO#!(8MI1&Ap4`M(8w655X+F^Z?tN=t~AiOB;$kRki
zz|s+_pOVSx$4DDO9}U&k8c;QTKh~!sI9RDlE~i+FxC8~fG~w|;@2FRB<j;IBHj}TN
zOh+tZ{6YJaf;5bH*A6xZrq;JF$zh69K3!J8agk_4I|berMKvxyDlzi#G~<C{!3H=8
z^vZ5Xvw+8c?|9Ixm#~32X>PfkP{*|nccNme96@{)%ip(OtJ*SBguC``!mwV?A%wEA
zT26@KRZ~yAJT=P{rdKW*k@{GQzSqgA_JPc&`6&pq?sT5?xNYu{CSw=;OaXPngXx-$
zeyTN@Qz2^X0xTP^!4Yukc#AVS11!cDfS*cBD}q<mi&hp#9nVBTMdpwv>MM(A5a7{p
z#HH|{5-Do4j!)aw7=xvCb3@N93<h8J8q~f}mGe;i?E9<k7zw{|pQ?Qk8J&A53ag0=
z9ivAM1<yC(n{VlONOBYjC25pvC>ip}Xu6{fkw3;DDHV2OUoN~J9~0%$(snG1sPrk_
zEyhtP=fiA2_{iA`D0uVFF4Tv2i83Ye%k;68@%-Ul?lshujP!u`E5S9yhUlT`htKDG
zcYg`nNpmT5fvxn3>@b5L!Ik!6kBS?15iywgQ<#t$13Q$H*+DDk{K$O>`^zle$P9|m
z@4!KSdt}XWu?9x*k@Ep3N(LYMf9#br|FCL#mQ|!u#Wh&~X}K^(Zjc)klCQLI>D2Sl
z8;GiRzH=s)B5JMtWBVb$ptSBiG*T=zNtX1n=n{Asp5WZulC#UY=y>&5n`9}n*wSUD
zuq;{^cldu2mV^<V-ud;2Fb|lnA7(@f^N3%7H{zk7y8m7N2GqkR8#76Iz)a9$Y8ukU
zmeA>touhkSIMn7>1DPa)HQ5+3fiTJzXG5n(Pg>^-&F2vowq2k)v~Alx%Q9~v_qWfR
zyhG<?TYZF@F$*gOffx%dlL>(MvELz^(gbQzk%Lt*J6X!3?lX<tgdj{It*ouzP&XPI
z9Sz<Bbw{pI6@h(r1@^wb6tInUWE^U=Z38Fw4rHP6s`oTzx1VIv*@u>PJ4yI!9K@#X
zPj)PWLKSs;tr$0xf--`LCg~TH_Q|+Xdik>1&<r+QF|7@ZqM}-v_cx177Q8*XM`p(p
zGgYnUYlhUrjJ-nJDvq?_)+{6K<P=c=Q04>BqXHxHG73M}8Ke=2fsZyBF(&GR=n@)j
z<CF*d%iXe}YdbsZEOl?$?8?%0pEOvve<5?rpw8(np}FP~aMCh3W|9Y#9$8`?vOUCy
zi}pC)fNYtoa#eWxU&$(<&U7of`uzsS#`n59Uj)cW!g;*N|FGTez<?kh`O^b$axAv}
z&SVwz#J0v%)dn73265M%J_ozEm?+e?vWIswT6Vb6*MBR1?*gKmE}M5V5jk}@q^Ui0
zKKu+*Tlm;npEzf>`yMJ9EHecMe;8As#z5o3Kt^GTxfQ6MzBcg%qzXK!Wb8SS0}nR8
z;V=tp#j!H>9cM0?TLrw^30kOmni=|P0>DF3q=)DvjT_o%Xw7=R>@jB)nhKXA;Q^C}
zkGmoz2&|c=0*6VK;6=AqY!c>NI8Q%8vI}%_><MV5)uNY;UPAc+Yi$`^XjHVoQQrGe
z&`ETTwzKr1A(H`Kk;bJJDW{oMQ308Knl$lGm)Uy|sa{8wAVmx#;_>blN<DpbtIf>;
z?!AU!kn<@J7cd#1xg<?So_O<>h-5g9fMl`0DYn>8^8y@tx^#;!<FoJg(v{-`|4$UP
zNyC-pK99GfAVZY^9GxL6Gg~=~Cvmo1$m6VJl<<-lSgv3#kF@76AAsU(UleA8x=Xd~
zaW@b$eE%^#)~HZRzc@!9CR$$YJ@Hc7zrd-&+^+ub2#Y*ByR{LZ+IdrYf6@6KJ_uQY
zv5(eE`sS3yH**ZRKQANC6a_(fH}*$RMFwyb`v!wV;yUO~e=AI`y=VI$0G~}{YojWk
zcGYj+bW)fLek7%2@yfX1Y%$*0Xk!IpA3ltN+-fT`u{Ai8?z5hm-0xs4?zPo^QLYV-
zoGu7qzUVz17i|(E?@;dgk8cMo+Z)GDB%V4)7}R;c`~?~YViy~efm2(j32i#WZ{iCp
z51|7hxZw5R+{uY#9wn7e+$Ob#?>Ud2)$B@*l9MfUs{JH-ZX%lP(&&LkOv8LjzY%X$
zTwXsZzBaCY<r2|);YN&^GjWh7CHy1GB_;;6O_uU((ET7DR2kAhN3ZGDP>y2Vc$FRz
z@v?H8(zX0Tzc1k_?8cCV+539-?_l4t$OZn$!6oVx*0xnhHJ5w2f7UE=Rx(~p(@_d#
z;(?(0*W&LhZtW*&$voI<EH^@m`z3AD_Ia?H!{Jg~irZqy4&&-!i~RVR!s^+$kw+`<
zUL*Kc0U$&};u6hMgFpN`8VvVai69n(Sxm|7J^qtmCews)pQlfSqEp0Oc35+%w!seQ
zSKwomGY}u04$|~iJSjNNxT-P4Zo$iw{K5s{1@mZVEng+s@j6hTiN#pXl&%dUF#WL;
zl~L<H)pmDVrM+cFX5+wf4n&pbNoVe`f)KT+^5NwaCC-9!HLM?G9D@*j)J+iiXN#IL
zX=5lagq|5Uv{M}Yw8sGxcWsJpH*Ob<&xyd!+!cP)@X@}oMhb~U!hGWiRlx~E08%{)
z+Ed2TpQ&JD$?p2tD}xo3W)iRnT42Ex`RA9JBtV+kyzDlJ()A4TV7gL4cZ~|(Z0Rx>
zS3KiHoRv3;{Aln`$&4AFIu63_MDq-^tP=31l}o{nFEh_*b<|&srsC}^5oGW2iC+AM
zC?Fi$FQFg_y!6nusGd_i6zwx4+DRWT?IRhZyYAr@=P?+QxVzGM;Xr9vd&X3g6-3t9
zI0jM{(;Jz?C3fMr81zBG+6lR$;AF{B-bd^X`+^D}ptLfx>&vSFM<YnW6#M=XY_9aC
zkwh{wwUXx%(PC6COdqm?Jw%zoxp^21`#qm5j9P@q+}>5IuW58zL6}TPUx#uM`Sdo8
zW&~*jV>&6hs9O4I+CIcYai(>NQ4zPgbnt!yuKb*`L4uBBW7%6`T;h0bkBBsO=(G*I
zVZ)vUQy@}+sNczBWwO}--%gzWy}`jd2JZuzcz1osfJl?gj1a&ke{~+=%&kx@4br(N
z?~UfZbhtQ}+~Lg_JlastdJp2~v?byKX-FkPtuq3`zbO_y*Jo)&G^``cLevm!Rl#s3
z!vtMOLG!{h2s@4a*VhMyd}RlDb9T$i>Pdv&15PsCt^!HK3kx+hxtcggR_BMQ%lG?L
zPyguqpw(=S7f7%X`W=$SVvMeQ{zQR+el!7ro4<T8No)2J42Ei!flxn>$c<ItK$R9u
z7puE%x3<X|q#;sOh9=+3;XxwKT@^%=pz|zTv%4L=qz+DL3~xGqwYM7`eu?U`G?xm4
zp1{vig#r;D49_vnF=q7Uh%8w*=j)tDafs!DM8f&00~qWbm~EzD?xdrrch%e?wre=?
zAO_`u_Zhzv@|UU!&(wUbGZhDB5vjmw*{*gQ`do~|!li+6px4H1$C)M6HyZ4AJWtem
z1(?79yC}!|*EPT~T=pUCiZ4Hm&ULf_srwrLK{vsyP0AHak=aKXTa7KVhx?FT9=bnj
z?JuATT0na{9MHR61O^b~H`nZ<nx`K$T$E7`;ENMaDUA~(U82DM-!#Z8*3#r0+$S#`
z&HdyW|570)IkUihdqs*BRPRa++r-pzcM2Lc?u{Y*_RWfSp=R|-?oiS^<RUYuN~f}&
z<`)8Umsl6Wbl$bcl3tA|JBP)O&FRGhHR5WKiCi>+t;e46{GFY$)Mm`QM?PHgZ6EN4
z)2l(l)t3rp-rB3B_j{O^`Fg+vL#J2XP{bp)9g(?Fe;gTzHfx?iZ?dZe60*a}@LGCb
z7(;Q{aW!?Dz`H*;+c6i0s83(qvdq7$(0&l`FG2f>_YG)(oA;-I>=XC&HxO_N3onz9
zi5Vz&lE^r<sk&CLf%Q~;z|8KRUn@)T4I9*dW#~YWHSnz1+dH^<I#4np9_Dr(EdO-;
z=W79HviTT*?}W;OvH%IW@sV(HL9NMh9!F}XI>ROhyyXJYRi3~T2F{rM?R>$vVEW7m
z2$5Njhz9Q8Qr@*g461KTv^(VqYtP^aDcefcL@SuYR`fKDN+-06QA@%g<m8^^0NwqP
z#9Gw-Z6D4p?i{y0;}7x%|9MA}VD_^{w=Rs0v3d*CD$YQP$^l>W!F<i23v!aOnU_$a
zV-D<Gz@cC;ql`UU6s9IVNsEF@gR>=AhS@dF)P$^yMn)H&9LD;T?^kaus5f>}RWcvL
z)#!OBIHGqQ^?;;e<`d9e{A;k??paps#**2g1pP7~k|pk?gG>5p@zAbk$b`dlU2+<!
z${d$`jz04W0&xQWBcArlms`Za<xF(V6yjFp_9Lz)k8fxS`*Y{VSrbOthVdQ@#oSy~
zYCW+Eg;TOqMt!Br(0kJsQT=%kvA2CRdkKkoiYb$1$V9qATs13UxKG8WJy5IE<LT@G
zN{VnW{sg%KA9eHaLR`DrmTZ4u0aWmpX#3u*VkmZ#_p#!tFCR2SWr)lQv0m-b{nX~{
zFoKR=07T;Ncw9V{G3lP#H5{RQX$DRW@aEW8OsG<U;L%xVA^qv#63gViuLBDZI=nQk
z7WbAjq={-yFh1#C@{LCy<|Ea@I{?DA#}G<jZ+(sFJWX^ZgA$xRg1CA{2=;CdJd2ly
zk|Vy3XDewLA2y{Gf)yFNLr^$c-wgg;rOTLUj(o&(*YFIHK*-RbI03R8;AN!VYYN#+
z#p3hXwvcvK4mJ!1u)l+t)x#$ZYLf$vM*VHfFsRIv*5RrtzER>&UiEQvQ5V|R@T27X
zWi!NLaPEAw1+fy$oqqiZ#4weqezvBH$KO}`hef?EOuZFJOGDC3-znx+ZTv$O1K2))
zkLA7iK+>H_!*`{zVT697agblXA<8;TjR9;MH8lj2a4Lhq476Eirq!feQ%v}(5h>yQ
zIqskE*ade0ygbi++LR`dREtFq&S*W9xmBP<=E%p%IGh)lNAuc9N|GGlSFkXBJLw#E
zE7-~iBc@O-6_J5UM~}duU#4HN%sSmfat?9Y(VE%}Bl;<8TizN~{w30c9PlOU*voSl
z_B3&8e$?YQ)Qh}KzLw{%%sa)fTgCM&NfiXS&{3BOkZTtC8jSg8BFVvrpFuSNq$Lga
zks6{W(%C={FOknISrCN~Iwwp3$ra|rL~fH#)@E?mUwI%e1~&SDw`ukoss`oTdbds@
z&fbn|n`I)}RmYKgbKwam6opuDGi3YhLMa!{DbYVV<#SJhOvwA&MwDGfHEge@Ef*T|
zp41w#^1{L4vYP$@0d5r^mN#YSN{MlJQv&fJWL^M0@6YW7BRyNWcWqb!nMFcyOF3_Y
ze%#5VQBlhlax4Y>%g%Ono~;4X(A5<o=2UoOIDGYC(b<`{UZs6##u+Li_~|7<mknVS
z#=-<DM3*u)VsO_|5AkL;-5^Cg_ANhmwF5XN<7$Lp%bV@uH-RDalH7~yo=MobLZBWc
zW=vH}`O6QU;+VZdM;#x%9X!zYJ*%vnKu|Y;=6IlM1PM`>7m&8ls-@M?^{b>{Q~d80
znl_4WGhf4ir7r4{@P~CC$URdQlj+)HTKrwF0j1VJX_t2nAP6eag47DaA;TX%(B52L
zOkKL<Ob4E~$&s1FgXiYhGkx5N`x=h-hwARY0~5}tp)AAp=u(Y}?ZQOwB0rK60is=;
zKKTT7BrsBAE$YudRlEbH7b?~D)~+y8)KA*kaK`xUv1WeeDu2XST@wZ*FS+9U3>rDT
zyrzfT6#;7;1HFxotOL^7`=KKdm4I)0l5w&j;Ot6{qyCIr%Cp={&{>y^UvzE@8`eiD
zibvLc!xFjF5BV;e^K5(lCp-%1;N4P7jJu&oBifhqJNuW2h+#m@z?fRTbrs@+5UP&2
z%;uwpCU@j9xI(&M<u%Q<)YJ!0JJ_&8!I9JcvVm6>EA>Z(&k(k2*8Jcw6s#)-VndM}
z>TpJQSh_Y-rl~YJ;Px0sAeLB$5R?HcO&F<3N|wvfzf7E<bzNZFoWg(Rj*<OzN+wBD
zAQ<@vKatvvA$o@CapCT++h(`N=o=X*l5-Zf<ylI=L!01EvKTkpAUh`0DwV=d6SNj3
zI|UR~is?p}GQKDHQO#hup!j72)LH=muiu{({b3a7SqzljtH!=oB~1u^xtn#uOic=-
z?+x>*5f%);r!b6ibgW}Tu{96x6wIvn4(}$>kR-r#;u91fCt%oyNznGHO@1PWVwOmz
zdnBHbc#5Yi0$3E0k~4L|X=YX7;le|S9jt}qXfgofp0>R$?F8B>9CH-C$kb>hg-z9;
za=vE2`OEp>Jw&0y1|jrXx4{k}A-_zs?KcL&GANc;4;h+H89MX!oW&zh_aV4^O*ARY
zZiH}CJF}n*YcexHLd>TB-U4k5NlfZf%g8#IfD{^$(wFVf%Sb%2<$QZ<X8b+!RfM-0
z$9Dsp;<y7($)3za_!ar?;Otx9l9}X|6I39X)%}QtA#p$$@Y9EtaBs6R7Z^!@{-jqD
zKQV+r$KAcUxAQ0#L=-HWm0I3|7?X<dfXhtW!z{_9bFB?1#dOVX_UF{n>NoabXGc;Q
zq({^81-mj$5StzpS1O@4oN?i1r6wxLX<OwD{-%R-krfL{LHB7~$Nx~=7JtNVE^gh*
z1`ysH-FiPuW2jfW|Az^f6^X8&27|5F3xE~IUmiR!A!wj(5$>H4Xys)t9-AGqol7gp
zpl^=SZ4Pj>?z8L%jTJcXS^RO%hCxu%iVEdxe;1Q7a2k_SXn3!0myGxGuDJ_4{$+D{
zUpmIXh6-EkUdJmFSVTCaKjP0}jg}w79bdmu9Gm0K098gGF+yX9JiST>J-go4z0M3g
z`_LsU0q1~)$76oMQ%Sm$PT*T=PVx^N#W~A34>F&04a;0^@m8h&5TWx*f`C@y{WIYT
z5jt~@Qv(+M6P{7%Vt>>KjxD|S6#@u3e?FZUBMD=0FV9kBu{_1hKZl(lnQFby$}>pb
z+xxc$ymS4Bi`s)cLtJVvRDAqUuIZ?6By`_|B5+cT;IYt4$YdmNjR%sc`~T<x<$1jL
zJG$es_}O3SE{0&qg&&sl2-byPo6>Hf^ntzye)<#@><A_`Xkyg>`|LNXZ{J86Q|6l{
zcMh_eXIv2ScaHnaVq(uD;+JQ%3>Yd{IC#N=eb>}MJ6W1`O*6%`HXEAg@He!s8VNK9
zggiz(3)Xn3Z|h`2)AG7q46{HNR$dhJ(JUA=#d8bTG9Y%a4bV>G08&`Xs#3v4^70YM
zCP!Nsk&K880g&q|qFoGMZ#$!{k~MY_ea8gDkbG*PvHG%0VI?&J82bJqRDTg!S8bu?
z$m|*GZwi;75J%~$2?@jPnzM1%g;$0LGx0zAsn?V}`zm4b6R-8+PJB0>yj07vvr21r
z!SZ>?fR3(E51&^adbVJ(AicD*=4g@J^0lh52lqWeEKJJmvH|?vR0U6|Z_pth^4JI&
z7e{RVI8d68h$3Ub&wCM|AY#tHHAM*ouO;(~K&XK+B4Zb+Xn!u`@z_{uT!gFkmFzwA
z7O3dtshz@(p@g<e@Mt=-uz?JvoDv2g16OMpX5K;2p4qX%S^>ABMie2JC6Nm`Ew-zy
zo%l$^VO+!w3T{mql}h`uQ3plzx@BhiaX6HXBkZqt52hp>`k1x3CYn1xk!tBJ;p?2#
zy`483gR(x`jDGIPotRndx(c)VnGL7H%!_PWZ^Q@<><wF?5Av>c8X1p&&_BdYzXr(z
zZIzvmoo%8_pDkRJ8{L)^^Rf);MUsa5u$34=N>tt7kWo)i8A1Bn_s|5ADK%Qa%9@fY
z<}<7@FY=dArU80Bt1U6=;RCisdv(&>y`n1mNe;knl#OtT8tna`;X&vk)T2^BFshfh
zOE)IZG`QUl##Om#9A~xZ599w5zkj>sQz~$mLsA-E%|96&RQCC*M}F^0xEbgpY~?Xa
z2H+xU0}QzEv>^*ki23qn5|;mjJ9LO{H)7&OjNX+63$X-VS|CrY!hQ(lsKH7os=7;$
zGD2DWcmR~AL8?glU3S}JRDx>*Yq!++vrd+VGU!rR$o^P~$l7ei^?M+?Y9XWy0g5-c
z8SluAgC*{oR2Pm+|FU;nDbW`aQjMic6ja~)vH`_Gb##f*#5^U`A_M?rnv{%e*&=GC
zr^g8@m}f{*jxj~ug^vx4qo8Jje1lt#f7>iu&5yU^N15VpusWNUa0>Xn*Iq%?Hlk0k
zur{q}r~46uKI5SokZ_qaL22a0?NL0XQpI^rBR=K34-JCR$82W%{^Q=yI!+Uz57bV0
z6%%)0fIYZiq*iJK0}3iHnvel8BVj=S#>O7Zk2^m<Yc5_`@)Kbe?<t05c(C3U2O!k+
zP2=#vbZ1*wNx_Hf{re5gQMd<TnT-{rE(=6!e3nJTjYaa&AZV#0wL0l54w(~N7Tz8r
z-2I1Go;8}{_yWdrjbh6QPhBXIs}b?*$R*nO<W{3$*b`U3^C0`vmlA*De}Ip)6VqMZ
zgrd^TzOfKPYfb3ces=4h*XEx5N0?TYMbIN6QV`yXH#IKtpV^5E%rMyeM63p0cRC9B
z-3W^Hq_Z2jfmqOgjQD;cX$!X3InZn8OdnMtMYm;;JW<}&>pcqGZ~WaQrx$C?1CE$a
zZn5ey4O%gfK*#K)q)f}boDBr&_g)zZWU@UNiIx0iKH2k%Ymk$MxvTJo^je5}d|Kj(
z`4-PCz~Q{WS|E*o{WRM*3>--60pbH9bJqWBS^@+(D7}3=t_%kkP{Hsv`^3trA^@*s
zVl^WFGc!k)d`HyrxhUK4;ro;owJ097y~TX*s1u{7+?CWDl2*2Ht~11C1zy1Xsh;E5
zH<Ndfwaz>!kI`{4$ZHa|!5cT4VF@(DPk?m_{|d>{eKBbTLOW*)tGoQGR0`wfOOUKs
zgxU%B;CYMxKRUd1ehi*<ltXZ86Ho=s&MBcXFRC$UZ!om!iampNzyB$(cw|;?$h!*|
z<^CS6__QyRyl}r9)g1GGC?L7^tD{Gf2?sPBS)1pdZ5`=X(t6c2ji0C*Mx9-P8{b`+
zREM;n7yUbL39|_0P1hnPz$i4&V3QYn0I<xY-zG1aExacLBR<FeHQY7C9Qr^+xQ5@n
zT(-`|Au0}2mybJk)#2|d`Qns{>?rZZ>tB(rdhA{(F;A^9Ag4AAfLQfv#C=ex7{+<3
zPjsd;IrdhmDh#%oVNlHTXV0Wb*#iCpEqb89KL0Fs*zD$??jiU-x4jwvAyuUn!HO&D
zXy0{cKC};PnA9Gz)6?xJhfu8KF$b@-8eh@1)%x~2VM8AFhp<z_B$R%6D9}}rZyg}q
z6!JOduAc}FB>^$YSfn`Hu3oa&>Tt1}FR)U+yNnR<_<jsajJQh(#Lj|;{&w?Y%?i;R
z(upJC0l>l9a$|l<z0mh@eVeHu`G5cKVK17{Blj;b!w?CL1NSbi;bygOT%ta-$i}ZK
z_3oFVn~t!uQo!L`({cO&){7A8)tbd6iIO{aCJjV1OP>9>oY3yTGgPZ{Sx;RNjJ5}A
z<~kdzMKVH6-~kp&9*O5)Avm7|+6q{o_y9RWROBLbuEXLv9&bxGV<B~)(TIuoqdA|#
z&8o`S^U2VEFmb8`6R)VZkHLey<mis5T)O;={)|4qdT~&Fll6#i=5em=F&~yN_e_!t
zNo1nn$jEHdJ~Z1jtxJhhX(G*?3s*~x5K|TjIMkGA=x8ziikKv-WnkM?Qlq%BO`IF2
zx`(J7av(qKUXS8JA*!`%64c9(ZE!Y6=Y<Bf-Xx+0#+|!V`=<Y+N7NHcyBtygO;T>#
zem}{kWM<j~0m;7}XRSi*K!wmpmrd+Bm)nf#2SR_>`$=uu138-|;a)mEBh{Po<64KJ
zV`O9`BQOO<<2p3A`&>8szPGg{Y-3T^zioER9U)_r(AzL=RUU6CDB`<Ae*VHa9!YSd
z&!|qdxxy*xq8R4@u{yQ{(0rWMKq(d=RTx<>@#5yC-`0IuGV1_BZ88~Ettz;>xa7%H
zhNlr%1`Hj)?CB4cu0e@lkVA<vqx&dm@SKgP=sUI*y5yuVG4Rzy$qAtv1h8h&{-_I;
zb-Q6jQ}BlRPZ7nZQ}zhzJ@KsR+(H!fq%%_3x1q-^YV*a2fV}EBBQ80w!c^{1Y#u9_
z<((9`;E#2YS$BKw8`O?`oenMh79k&YgG^Sn%f8dWlpEl|SPAr!cbKJSE9m(?s54&s
z7~aj}&qfi28q^d|aP<V6Tny8ukS)_7DK5Ozr9#Kv7ozAQ<z}>#AZBv=`|lw)?S9#(
zO2<h_*+Ws?=~skintU`;qv)0NL%eeg&h?%3O<H_cs4+~A{2y%^xUb`W*~2zujDWjh
zW}nBFn+A`JIw_z)#<ct}&Ddudu;iI9*<ZY$-?$TsI6OCzD%L=e9a+A7bU9>DJ85_H
zThPYlGg2X1soe@jwiE#sQ{+<qcX5U+0Ih5|B{&4oAm^#wGDCl;yB>ui*j#?A`h)iJ
zXsYH$S&Vetjmzl%$$dcxm^KAwBS`D`YLWEGIX%r{7=iFpTQ@$}aI4<NI>kykVBxk_
ztwchD@4Z(jF!*Fs5{|ajlu!Nv8A@Sg@OPkpcFQRKTE^k9O;IwwUPt%w1!m8sVJhVq
zajvpC`Op_zi%|VMEaJ@};AUD~To5VU2`xq}hWl_%m{bR}_9<4x8WthAVnw9#hX-l2
zOewBYli!x;kDwa>0_#~!1SIv{4mBV>(DH7}K+;(tKccZU{DE7QC+xUztoqu2zjpga
z_W;5hEKz>QDx&ODOo~!Dhm+3*o846qApM<0h$)NY5l0RqqT&XcX7o8p;<&0i^PX@<
zHfWZZu*rK(2=lzkQ7e_J1;*!!VZNd9G);KbLwkErx{&)FWkP?|t#nwoRl?lo3eHz!
zZh#RTECes5{J>U02d><84U0_wH|Cz9SG^VLC|d!4p&%CM5kke@5$?tiCrp9u!;H4Z
zbCx&~b{k}aR-!-b;pUpJ?l%=rkl<l$`iNc}X4Re7>2nz?{LxsfS}FIO{JW5mq?C{;
zMMM}q)6=;x2v_YBy}=rn*#6A)erQOl$y*c{V$B2H$<xTLc}<yYq3o)#Qiv()twyH=
zRJYz`?WEt?lXf%QY>CIw7~xMK4qMf@9XG|!SH<>88w=s|X#=<(o%$GOfV}k;<k#nr
zL9aY43RfO$GwDnb{{~y1>w0_pRXh}`r5OSl7-|3yl5KL6g-q!x3oc>Q+7ouDpyL*$
zgJ9v#Wh3nsx44eCS@%mL1#*Sify$AP!NA?wLHaRXOb2%IMu071-L&Y)19J0kXpXe2
zv^OpJ(Z$3-ZJ3mZg)XcK8QEZ{W+^wu5#c<-s(YT<U>?XL1b6X`aUp)v#B-@N`y6LB
zX7*h6ax81@sNzagrf_XJe~dJGPxJkW1#wr4<%SkU(SNEptL!Pz0uhhm^&t9mxM1uT
z!N)deTB#AAV`4?DNYQ=HO%`A-aK4UQ*l$4I<F!7ey}oTd)8TSmo%bL5dS^(F-ILdU
zO2r2#fc^&OsGIaXENiEMCb3w&t3i?VVQ2{wNA}j6@%T4Zi|Kq0{%0@}0mBvelVdia
zI1h3)Avwl@*54mf`>iY5ELoA9?lGF{;X(2WlM~a-QewKuFCh%(Xp$}D*Bv^5W9y<h
zy}kXl409oKV~tj&9kjX##=Z<J4>YF!=-Gcvn^xHC<cv4d6;l{{t<HyWm7vq;m3ApK
z98c)~t&IJo^sxmVZQvauHKyIq&3eqz7Z|Foa9k=olF8g9YcAF=nT-pA(RFapZGW`T
zJs5SEyln2u!GgGXR~!TGRAn;g0-NDt&y<KG(0kcMUcjb}T^AOXXT%FG`fp!J&LM@_
zQxtINKG2Wb6-0rdN{P0tn>Q6SAlwuu{Et|s<`D(gLPeNs*wdycq?uc_+6SYvAN^$f
zb(2Cjx0LN|1+Ui9BR%K6i|?PmJEV?+;_8s+m$Q3IimQ<+&%H&*0|N@~RbsmI_duIU
zQ1(|~j6*`ipL%CeULBawva#OhY`EoP^InHvVj%zZOUQ~@X&fm=qGb|dpZx)#hI*T{
zjDT{XoTWwck%01Qe&eo;bn5w#52Bumu%6GK8O5D~>BNn$?j1NxJ7y~!NOsu*BrOw}
zJQEh9LBNpBP{qxHEhy1+c&p<)sH^N;EV~s#J4b9ihfDuxha|{;jW*y3b$W+{CE$;o
z`H8Ri<=%eh@ZJ~b=9FIVUXN2f8#Yyc8#y^X{-^3s<Na-l!=TDL@H^*DiL7cU_C@bo
zm)MW&L3N6<rF%pGp(uvdOdWEDAo0uo=Uh7$?zD)~#l*LWn@__(S_KhnEL`(oJu0Yu
z`B)m4Db^gJzO2GcBuSKnI$BafeGn0&vW?6A)r)`p_%%LVB67WhW`W8=wc1fR3TCxz
zd~&2sL}yRQiF08*6>_zlg*Bk@p#qr)Jnko%pLaRO*?&sGPstnF$$X@GV*Y)OL8>Zb
z^0L^|UxL0Sm5H6ep)j=2cJ(WcOD{T{{XQj1MtR!DakWjtR^-aZZ8+t1&WmKTMOxXc
z<_G+;bja7Z1TDvG5fB6;jhT59YrNOOTlHYKjYfY7QJoSpjlcmP3tO;H#oR<MO+6EV
zb57BgDJ5t7VRo~oTdBuFw-sre6Lg2$%kV9fc-ERrBP%(SXRjuc@m6+OFXI%TnJ+Eu
zhWaa38~DH`f;$OOS3)}9)1=4yU#p%=L4<ZhX|APbtVtKGiSd5MCy#5-!>|M;oF|-!
zumddkyKG>Sf;07j#gvyXoa2qZoAw@6oJ86G*X8yPcZj4i5ZEYZF-(JM2%s~uZasj3
zj*%iDgHmm|+xFRns<Xho9Ev0^8}7DhC7ihnO!56wzj{q?vA_GDe$zY)tygbCF{GF~
zupv%ADB<Z`{7t43r~aW@tU+*=c?kaAV_9j+9`;iluph2^0dPOrbq_$!6|OR?^O(iH
zuH}muf}o1W%13f@Q%4aw1=`!T=y%;}1nV)|?|m`rBx^+7NL+>S9O!<o%jLV|Mx<;T
zj(@5G)UmKMDwynEbP#@u2Q7MfDfBEe@E~cN_4{1JT4tXXpJx!BEYNe)1b9Ei0CdWK
zh<;!VuNHru67Z-ytJ4#@EPjD-kKe%ZNQ9Y!c2FY6R9qb?TrD8o<XL>yZ5&8v5&%G(
z)#}T}MYMs3uh$64#?hDoh7cSB*gZQ{%dalxJqbfC$x%8NLo+Fzy3qaYVa8IG$INR9
z?6o`wYG1Huk-rU2y{wm#6+xpA5MoCA;2O9(vR5S+jFz=KGFSX<1ZV)fEq{0{-XPF=
z!UFBQN9109V#al%U+T)kWF<EHblW)oxAzA6xXC3cl^qEehaL;k|FaHQ4|)8QI-#Qz
z22c34<$YUY$VTRBj_F&G+h`n6q86cM(I#5^8Ie=%XtOykm-Xt-*QIz<b5=a6s;h+W
z(GD5Cw|Wo97K6=#StE#ne#|Z&%{m&NA7n!?upe3H{np*i8eYekc${HykD?U+72@cf
z#q2B)YAv?5y&F_%`ZAdwDnT7JCV1){=x6F$HqmyAjzuIsx$<zG2eVr}L-IP2-sr!9
zdx%hix?RVsM*SOH<{!+yQoi{I9*#TKHcew?OI9zY>MD$Kvy6$L-ouNyNS!WslF_KY
zEIn>9N-ctH{PNkj653Y02UWR4MyD($A|_uSqQgE!8At}Jw$%vFY_u>_Y^if~MEZkQ
z#87Xx2w48k2b1;;0Olrn>f$(9UddmMU`eypaKC*$<kKIDL3n>QwRyd@5V|@e*{_@s
ze(!hpGGi;f0)wrSR@4v)^Cxka(~;bO1-1&#f3E21)$-mv_1UL83g!JY6<sW_5y1n3
zyD%J2Vrc;T{DJ6;kkQ_(N`Fjd8#!ou`6TvQlXC+hD@xz*=!$!*Dhw*5pX`Z5bqlHT
zc3+J`1bK~8m|QViW+xn52wzy9OM{<#7lq>epY7Om&kj?|Ah%ybwsJgDyv4$f4oM<c
zdyyC(gvQb!cM#ZC@zW9#KZx_&bj3!t#kqMJMi+wh-Ue(wT@dp3<m20J75NR;2}I*L
zL{PXdnU}YC^MSD-OOJ_eIXxIu&FImh!|Y3DcrzpmW($8j`ON9#=__oqmHdjBy^aG4
zxwML1eyv8%sZ~Q%a8=Xe$NCxx=l8dQpVG5i6_Y$|Kmcw*{*2{cI-|{0|Cs@F1IAIH
z<ggXyQrCKQ!!r+1`%Q!rUC=MhsN#(#B;<=DCKSuK%5h*<yT<_q1yVwcx2L3Wvqs`v
zA)=3L&07Ki!l<J5C{MXLd`N4ej3GfNCQu>-<d8=3)y%_Y*UH&0ZM|E$qA%bRl$`q!
z8@Yr2h~vVEysdmIc0)cf9?bF7+7%7oU(6Qkz~KsMmDIC5QOSz}Ba}b2wvDU5#5w-f
za26pF?hlEuI`bPdAY7e~M+cl>w31x5Q<LjMJ}QDO?Oov|WDzO-Y4YaQBCVryG5R{C
zlw4aPqI|&>cUfN%ZmRfsg!;-at%+GyH-SB;&SK;%G#5%huGQloD9eqyZ!ear@m-e^
zj|u~6dS{*HumS0y*1_-*70b6m25KiV9o())iV!_hZKwtwr%N2U*CiWO-VWMjL>Jyw
zcInu|!L;)HGsoeBLg5uY>zU+Ro6xw0>N24ZUh;VE%5M0w9zueNR)OXX{LtY7l0Hs%
zwbpm2vW9SpsNqg=2zHwQG<U-B<UZ}#OVHfa+HWdEMDYq8ik3c6^Jgv3^3rshK?B|N
zgBjlu*k*h%91N)=2w>oQ(U91)d6l*RJ8IN_&C2K5w0M7op>E6y(p#*pTOZ!gvWhkq
zke+-PvE`P5;~qNTWTt1l%a>(k8&hZ1B?Ca#KEW~Q&H{kjXCP%xdMh1&87Br5H(&v5
zQQTfjMaBcCe^Fi1vJTqr_|d%qX*?<uonaWgf;sCl+Ib@0=T8`rTlORZ@ESijR@%_F
zqH~>~QONgFpRj>x1)D)%rHiSRqzKf1+>@PNH(Xf`9wt4n9iInSLH>HksaM!%2qAhv
z*N<>Bln)I}nJ^}@Zm271nN5LL3Gw>T9vc0x3ryzjbxTj2P&z`%7Psf}#&VOI4vd2g
zvE?42+aFFR{<*hxW08rot?uXwF;d1IKID^NFo0>D>sen4YSAK|c?(2L41A3RAJqp(
zlZC+3TkVb1fy>#;@J;ij(RQ$p7OOCLl149pO$rO7(N~8FVe2)oqL1J-%|&jgpzcW1
zTaD=-U6qu;B{dP_&d#blFEH#-3h<?Z9-+AC3O^}za1NR}`q`0losD0gS$-A{GrQf4
z)+lA*z33Falvi9YHM9`5fd4+!$3f*{=N{hFAN!!bwn!Kl^x`uS=IBBjY19`?Tz(P1
z2;$@!uRK(ianxPjA~->PWRLX+9;DAp-KbO~AgGfbmma_r%ks7XuRN=7c@H6>ZrP8}
z7wr;yn?IXhY2(X~zf>oQ$Bd{=X$S+BPS%Oaf;eQb{c3p)As*4?x*#J5C0M}v6t+&y
zS>OUP7pE$t@A2LsJW~+L4D==Cuno*0cVZ7H7S~=kOXs@z_*kW?@9rgf2w!V}G89cn
zD815(tX@K!5PWzJ>H$7Gi<U1${kW{OR|J8_rw80Yc!F1P67EC^n>h3VDj-HarMVHB
zve6xS)(zlTf&j~}XZ#8ODly_{3VT}Ex}MT!Dsw?KkFUQNtMZg_kRp-b4^-N%U}mmk
z)N-K2wj5@4_<R_O96p7E6+iVP5IG8%;%)xjilQE$F>jqt_dPOX-bzy<6yanDL;qHg
z6=+&1sJ5H=j}LJkN^7#zW3PK%*0aJ95Widvy_b{tkA#iCQXa0J{Iu+d_L@QuuhplY
z1bPOEfO{V777>F&C#PNp<ovmA%GCLs6kckzcvRPc_hDDn<Y}`skvAmRAOO;(_JLtP
zFMdDlYiglN5C`3_a$F_(Q5$hI7mRlW0kQbA2CBQ-rUIyPZIWWRBev6-v1gR#D~rHf
z#V_)CNXN`gl?dxvHW$F3vClhg*A*smGDx_w9}`1=4x0}>DM&&+obPLgPpBYq2Ed;Z
z?6Eqxu(wvtthc5adP{Ol#c&Y;nvF5MFGjJu{6#gl1mo|)!If*Y>uT!}($_nBsp%4_
z#6_t4YwlWQDu3LsP*Iu}TgJNh<~LXxessOgZZ5G}T?Z(jh-o_e$Ks5~yT9!2YDQ7|
zns+^;B2?XLg-h?|u#2frD^p&zIyH6r)aP2pS--{4XFds#J$#AIoK5x!Jx;gZG;XAA
z_&!aLvuI6SjZy6!c(#4yqKpI95ggM+F5bw+=lge6a~P@f@Aes#t4_~juschEp3QD6
zX2~L!ag%XXCWO)P6RG{S=WiZYHIUeeo-4dsih<l7)31;2gAZ)C#_^`0ih^~BWjou*
z5P)#4m_`@)jyvT_tp{10s0Ey*0`$%lf&zsFV*}8oLq1etYm+G^OKf1oE{!r+BkK|L
zkDBvnkf_gFy1b0X*ip}({mZBwdAauh?sXrZNKUDO-qO?Kf_W%GJ&mMw#dr2@cI6&n
zSyzgfR{uILbZaRGMyH$#blN<(0-~fv<ZHjJCo8p!@PdX_VQQKOEde_2a5H~?6csa}
z0k^rCpon0fl=J}qKLEh#MxVvnRs4?}nIj4VM^}>epP+02lZv1HeBG|ZW>RkC$e2bE
z*msK*>%<sgsQHOdo0Jbqnii0@##cA8S-dr+mQ-coj54`?5mG-uD+h4T)LcsA%P-QA
zt>-!YOKmlRG=)MxA|%$-S1&j=6G?`hoKg@paF$2)qx1|928=T1d7mY1j8N{{e?w#=
z<lnQw^<zF>sI8{nh$!cO-sp6fC#gIz-Tq!+heT=zX@u$1E)*2CebK3TSShiKyP`V%
z()z)`<O-;PaYM!Ge^y9vY*Z%B^>YxD1P7Goid_=f7F8G4)95FMBb2~^%c)6A>txyK
z4Yi20)So%iE6ojKR6>%GlfGdhXfHvWMN8G9|1Vk}oXl~}B?i{YI6p=oSsEhPwpm0G
zbAhB6oKvv@UhCQ+T#B9w%+BoH+zCH+Qne!<!BimKeFReE`q{~kKx_MeL}vPU618)C
zl&{CCLsa%|xv-#+S`{UNz4J%v-xzE2+O9WX1^a>PSHULY$BvZdrCZuhOP3CE@2e~L
zzq3USO9kwzSb*_~H}nt~74D4ilm36=$Z4svQ$uNaj{C@7I^vtb594#FcpkK@zv^^H
zC^+H(|Jb6h2F6R`@{&R*qm2{>f-VzB5<sP<jPzFwQy@kHR>Y}|79*zrdLVxsrAz&w
ziwO&$W+|bo7<`=%{9JjSB~{x1_6c&CE<l#aom&;Wi%&rtTj6sP7t~Gql?R_6zR)O%
z?YYaR*c?2h63{BW^G$UTID!==c#p^_<<?EW(Ewls?4gj^ik^$k^k^_{W)dS|;%I5K
zay0oX@^D)V;b`~T^9GB4upHZ)&^FWiJi8g@6~YjI4B|jBc0QR%+A+n^D7ULI?8-23
zWR5ezovw1(gD{8xa(Qd=$KKGL?Q6*$)IFw||8#=Y@r0_icg3xgV{iKB{nsx-hy$}C
zQRuCX)4?ZYP0R}00nSS$<w07l&(HZI5g}&E4TWe+bucVEAD@3;vs(6`b{St3X^xG>
zw|A-)C=t60y{fTe^4*s>2_dHfheybgg0OSe7@VFv-yG(v*z>6@7&rfK__EsYS5sq@
zOQJC0rBO*=vmdGo9uwhsCO!P<rj2OzCy`Lk|EH>F1pyR$#X1sKjZ|&5p8%^c<cB3#
zW><AjYn!yXnp-dVW->&9)Xp}Lz6vAJJwA?op%s|8cI>0!{Ye!9`ia*qXbyQLM*67%
za=x`XR$WaP8ETVgkc5`)!@5DzxL#xE5;HRxnc&x+v=xQ1LhuV#SwfI}e!v|98xW0#
zf(d#db=VLD;&A_K?=Sexz3_R5CzEMu)ID5kIUuQqE&7jX3wq{$O&E|6n@a~~FZZ<7
zWsiE^+?-v%<Sl(v-*K6(Lz5m_tQsAUHmC`$!{+Jm9G)T-pWpy{<FJsHJz)t<n)dx3
zBWC>KkTllDNrgG{ak^(TmiqT}xlwkwB--JUbh*QZmK1g~0n>UiJGe8eH=s7Hq!O~t
zt-YaV90pBa=Ylm~*1;a*r(A4V)RxG*y%VQ3i%V@D!4?9u8Z&Kl9Fx_jt__lu_uUe@
zaqlEM1Q7<DnQu7K_IQnWDJ(+vx-u0bTnJcYvpF?M9b=(60cr}IMy<7c^+G4fTSTA1
zqsjBFyz29~sJ_nEHGfr4kG?`znR<kRg%eSZak08)$eG%uX!$2m6g|qhEq2>mo0myR
z;6*!)i23j<SG`U}pMRz9RnoP6=4bwTC6;G|3rV~fFt-~?A9i<4o(EleUcS6S9IC_w
zrH<JrfKIV3*$W)sW`1_DI~)wbc8I^D_4T7eiCVmf6aI=C8Lw!~nE~jX6bm6XC>0Q^
z_Q+W(rM3=i7V@!HX~mU5DJE%`b^cTPFgju<EQk6nz;N1D!tM!i;h64Fl!|?4@O}Ps
z{+ZA*1~?_hqM^OshtKE$QC%5U$)C`7P3G5L8=rmAWF2jub5shS-P<T-=jT8AoeSPZ
zaW2C+MfyXG;Ni8pQBbzZ3rTf$pB+I*yuW8zC0D)Pzdy=<XP@-h?HCb_9>nrezZEx9
zH+#}2r!1IJ(c~U0g7m0hV)08!-Kl47o&^#KM1^_#ABqcGIazel4V=g^IdGc2neEJL
z>+I5TXD%XcMXU~UttI-TPU`xfxeekGX%EW#jHi!ClOY7uug6{=Eo%$jTbi~DhL>o6
z>~`U(p=4^~IQ<s%Iu@D*OHX_#mv@``_GTQiQr(Qib{ZkQIGtpnCu`N(J3B$pCl<G(
z>9%zU@mY3CEv3bh2d35iXoP7rI6ZsC5u=)y<tpk`i?#2eDzxnRbIy}I5akhBKK)CB
zU`mlj+qAe2@FCa=Jb5k@oy*q@tJ%%{K>vcb!`UBC@RJ89;1yqi=DcR!vnXzuUAT}I
zjf7=X4F=HDut%n5K%|2<v5!&DhN)@S=Cbk%QZ4xyNz0MM8TdWp_`=jxF6`F~GhA;!
z6N0$w>@xJEmeMEcTYoQ1MW1|aY&p+4;YJfO{UdM!Dcu;EYiqzG^4WBAoI1Zwb!hK;
zHZQ=ue~IXmR$&?x0E^;N-L+9VEoEqcmR8mf{IzpodXxfO=zG{$3LkChH8e*MIZ0L~
z)Zu0?gcc8$BwP<{P7tMwe;RRaGzqbR@9)%|iPvQ@gv#b@>O1Lbq2x<E1?Rf|sATFF
zq@<+nAX@&Q9b)#|mBs)g;iHe@TKcwujmC$H5|<xq6GMjPG{8Y>Swo9h-Q#86FI@Gb
z+e}zpseq@9jLGe6(2LKJ*nS5H<QxHaXp1E$ULC_(1BLl6`tMX)AD6jprj0=1y-Q+d
zvk&Hx#q)d#?qL^bCeyRDE=!o5v(^HyBykSv{LHKZn(gcvKiLQu-v6+k@`Op0vok##
zk6F|0<!Grt(++HMK<sG_oBwo}rg6EQq@k0kfzQ-)xeTlLR!hR=$u7yYF4ljTzL<!L
zeJzU2DZj5NnQmaVV0PMQ`?IWyCUQxg_i$x#EIoFwfEm4TCxRZb)@u)_zZEd?HzGZY
zZH$)mH%g;fkS{NlS>kml`XGX8qDJZKh9WM_i}6z?@1IV$hB<Y&+)D8w|KtDcsM>$L
zt!*W?sSo5ji`g6>I1%d10CC+=F#(cRCNtv_85H(c!j)N6z;eeS_bupCyzfkHktxA$
zm*81p@PhO2!CbxjsB+}i+-XQMWysrn?7*{P_Kk-4O|GiO<P1h2i+Z#gU@VC2{U&>|
z_#0h>QQ-^cNWR`5D>YA_6{+PPgz~a^*$_K9Cr1S9i=nGc4ns60)Nepk0{7t+n?lH>
zPZQ|rR{M|5Aye>wEP!ocl1FMHL0K|f-3yP3PN4xLa~pY5o_dK?+6dKnF-kuo)jkiz
z@HX|a#qMg1wWT4rkq44%PY_@VnKZ<S^VhSM+h+(%ZJN-3oy<x@g|g4k?8znP{YeXW
z!a8Cw)_+z8M89JoF}R#8zC3>}mtFF)V#dLhlR+pXsC$=Ig)KnB*fz@k6)#EmM*PN%
z7<8&{9$VdbgMSj#+a9;ir#mZNkNK&-ZyY=QS<k<m66ATVzcSIxmX)!){?*uQ+{?q3
zm$2qUSgxd4gw=Ut)>_qi>DU*~z0G8^kDs}ySIeu2PN^Es>7qihp9peQ#|sri=4r3S
zQ-SO8mh`R7p-gN&RiIyOBKE0BdX#?lf?6)9@VaR)$Q<<mhx6^GEe5^OXS)`Y1=CSR
z3F(U3psnrCByQWiKQr5@XOa(g8x%M5mfrVSF?^&iQdXtDO0F?E&>?6M116@Pggl3Q
zJHy3#kQ}sNx;}+0Y!;2k*9&kT5+Om&GI=`s-vWv>BZ73Rmt1TF`rJ2b{?pASV{;0<
z84Q{MT{lmdHP9#pfPpMFNo{P{F`OJts5inM_RLXaz(1?Q<8Ol&mWkdyCL#zinZ0d@
zSlD$1>k*rNVKi3$uWbKEo@b=w3)RGdYgb6ZcUC7rfuW@*Z*?TlfmM>L^fDc=x&^VG
z<lCB19k(IMJr8le&jToB(GtL!%WKNHjfQcRz?e%5EMLy=3j`_#n(#+;Ia>9QR3CvA
zK*hT2evaXllwBXwHdM^1W}pbt=}4<h5cz<R{h(KPgjMi=kcX=moZ;dBJlEV{4*c4j
zG!i9!%7Orj?=oW$qcBzR!FM?aHt_!2|80sK#GQ?Lx^<0&zbdkiHW|Ei>alM+<Q{K=
zNu&~T_?4{)N-iWFrhV$tDwV(3nVoFKw8VFfA}gNPTDa!IOe8jQRGp^xHuHSL1^48A
zAcRoM9MDtxM^-{|4<=TKb8$zZo@xqIYP<zH3yEZ4(P~sHj%8}FE$9?z^4>y`PG`?9
zGX+I}=d#{t<+=bOgt^Y%Q<?|8@>IFk$;!9BR-o`3QQAFSS+qkxUvb32Gg}8LbW1i=
zsVLagc+jOqtmuJAb(hM4!J<z|E0b_v7VMs+sfFPKlC_Udi(8h)UPCba5c*uyKw8jM
zxIk>$T%LoFba*&KiT329OUvB>FE%3jMM();!!FOP$h~rKX=t2ppR&erhB$XIw-VT^
zj68h?Ak`HopV?#Gt(8CuaUCucBI*`wMHbuaY%-At+?rM6s)0PoRUw#*I!6iyQGgN}
zn%gRVeFjfKuN9<8MCGEZHIn&l5_J%w*cBp87zE8X`Q^*~eqm8<Ipf{dfK#>o;kDuc
z$m{6b0Vmtotj*qq+2{+h^o?UeX5nqZ)oLzE=pE03n85}t+e(=1)j#XcH=RuJ$vd6K
z)<jkTDf9A5>l$n)QEgZHP~ea~y(YwC>r<0}DVicsXT<;>_}IFpB)sZtug>d;PgHTr
z4^HwSE}7g?UO<q(M{*#cVQeFH=SvMq49U%G_2OtDG)Jcoz)k6RDP+~C%kvpz(nGt4
z64`eG7Cq5vzK2WD->q@QzW9GMByD2X<pO@nCj>SBvE&>)5B(#nkiW)^Zt@m8`j=SU
z#X3tXuqQDQ!NVn@yoBue?&WG`R{NxJFnuiD5)<39_N`XTNRhkI8%1@nEU=(7$c!cf
zL8Bp_)5J9y!m2l%xfgr5e91rqOcutrTOuKsA9w|rEqNO3<gYL7<8e1^JY{wjPb_xE
znGK)^c=0a~umd$acDqOAw5dg^HAcY|@`$|Og1`<%6Ci`)ypC-@FOV5mSp-apOg{$C
zy;NXUk7hyhg`F6z0frl-wc7SG(okCY>xm2o)Iz~@_#BFM^`dzM1@6Ye{=D)MO}vYL
z1S~8vF9BrIRdcgt+UNv<ni(w=cLK{S9{N#HdY@+M9xQM068^+Uh;Hg$K6ar;rwKeF
zGa5DX25Z>k^hx;S1LuGo&wzjQMQ*!PRi2?weB=%ogum@dM6YJ0)g7}-E^L*19%!AU
zp{l0~M8{L8u|?Y78mG8vWF6pcphCE_LQL@OdCbo?TnNozQR}`PJHdyu<UzK5&kl&*
zdgM!B7hG`gzrhBZ@;pPHN1$nERjgjE4;VgdqR}*MA^qomnj7h*_gr8P{9%YLWU&w;
zkhzdbI!|{jHPQ202F++!T^^$xXVPaI|L|Hc8HpDFB|kX*JzSzPT+=z{25Nd+RY}9$
zsZZ3-O7Y}N!$JVx3`D69TFGeBcs=PIy17afhg=)xXdyopR~9@nzBk?c<A<KXtp*#G
zV{Q|j@TdEsPH+@kF<zVB7+ttyeqBQaM_i<%ZjF69(#x>4bVAUE?brkFOxfPlr+iY7
z!=*-ZvuOAB?w=yYHUKPXT@uORFhw6l!nEJ4CmmT^;}1kR0;soDVoV^s=rXnAy%{(@
z=9W0u9{wW@9OJ=a3^Yd^$VVj#L}eM`c-JtU?9tHDT&`mOi8}<Z2csGAbT`&I8UsXb
zweD|}A1;{puR~0pEF?G&vcRo53&X$%mfI;zLdU!8rAk%+eMKRQCPFA{$=qFH>un)S
z$~OFS@m^E2SZZ+%+V2dez1D{yVs&@8fMf(NPd|jDjeQiXVwejyj~$qzNtTUk;c49m
zYht5pY|N9zO+A%Y!d!6e=Xj6=A^d8$5*mhno&m^N>ad+xK<sroQH%$+-y27sS2p*0
z`CM--b&O#=lF};U4zIzqyr>ROf;RRIClcvoH^IFXcRzPXq`6y(^&sX~$6syNZPugG
zuIP8*2CJ~U;HrG2Tpv~15886}zbuVW__c0zyIAeQn&aew{f=-2!V$9}9Go{rVeZZ3
zsjJO*DRFMID6rcV>h7Zgqq#x4*3U#@%qPf1)dHS8F(LHjE>ANPNiAbTL$8&=INd$q
zONLHLcW#C?(oJfV@7&WR8a&ds5n=J<C*;1dW-Pf37=*$R^s+VF{p-6;H?z)CU6b&L
zZ~)@2=&~1?q^cCxu*Stf4R=0?HMMpT#<Z2Au21;)irV~XIS^KRN@RPzB(WT0US+d(
ztRV@4{Cmq)5A8}uh4&D7LYq&P!Eo^Tp3nZ~JqXN>D?K2fleYv$Az(6}Q~odO*aPI>
zl$0EtZF>#^4W?ZGLr|}f86}t>k=Z5R_X{iGd%pmid<d9#8o7?Cd?r!+B+3k0BYe!7
zKu*NnT0Kk&EkZP>xB)gGUcs*xp`sa3T2%U9`jxVAq)6CEZn~aEaEI)S@+cw(c8d0#
zRI6>Uq^jvuA*PP+5omhr%>Y4!=BD@(M<}l^KrO$1+;uYaUSiu>ktS}+{fc3bHF794
zo#80RT2JyGz=<lo%q5-l?Rw=+34RO#6&_|5lRz~w@_`$^Tiu#re4{{EG3@SS@!s~W
zE20AP3M01^v6U4k&e2G3TI@oB5QqN!-GZ7*oSJDHpP_DK2x~&nP8RdVV_~OnHX;M|
z@HrS7XHmxPX%4D*O4%ifC_5M^m}RBEg%|iYS%viH&esEd@G#!ld~6xzqS1Ud9z)(r
z@Ba4+j<8M1{XLHXk1<2}r=@#tr|AA`_4s|=PH^wXOU5|u&c&Y@2N|KJz9V`y+?L67
zJUS^kahK!wJI^UHcO$<+h6!PkBGfxz|7y$cYrJ#K^CLNi%FdC5pHCyQ&3Wl=&5i}f
zK$V)l*vUxeJ$HaCXMLV&<&j7pf0e>_IIsU@;#hbpzAj~bR4VXVT*BmDiEk116wRbx
zetist>lRHy)~}0&E%YqNxLyVI<{0%33+s)OyPF*8Q;^y2Yega5c)^NCcxq!(t(dLa
zLQZ=%8J4`D##G1h4b<ykV=<5F#8zWPeUC`p>t6)4)MPu~C;=))9qY<`2A?w^#lQTY
zPVW`Uu?dm)X{6QSHQda6|5-s~#g_mH&=|q4x{5*Xnlsl5U9cJMKv)o12m3#u084$q
zS>ylhMtiKUxCcW0Au}>_e?1<dw80ehlIP63G$g6s<#|Flxw8#Dd;s@*^@bp)(`Z7P
zbb^uMF)wXXQ=viXTa&HFgW;R$G=(H*?*%Xz_YwC;`k`RTT(E&u$I8s@AY-i)s=CQU
zM|7Sl`P~E(*;3#<-GYtYgU^%Eu^E<~8y0w$dQ<qV*X@#G?F)ts2zZ20rSbG3EO>X7
zTpCcU4De*j=FSy4y5L&m7}%UYgZ*DeAVd9S;97BfBI@ai_NZ8)s4zDkT$^=?!92Iy
zSo1#Ii#m)51aF3Iq)DWtLG$>uDkw;(^v$?va_}+Lmo<<=+oFjODZ{#N|5dH#D}B+Q
zQnW5{MpA#ZKrC=GtimaLSIjWi*ux9inNR0YCdc;Y7+0#0!tpzMJlQ=&42#y46{iLb
zv=;h+aY)g1nP{aU@DNR<xX`0^-wj};E@-{DFHS?NW7M>+ufM^*Gp#_4_9=mp>w3iy
z%OT???i<45x{uh{9;-9+tJd>7F=@{8!<+wg2BU$l2jan)cwPU8w__s0NrXq{u<lS+
zF@nDSH#u?W%I6ui5w}HNO*p6!|IMJz<>rR_Yu8egBeW{*dgPwCWuB76b*2w*QXxTf
z`tbeO@IDz!usgi*T$liK(n&dNf`{=7DD&DAw=Wv-25Lc7vq(2IMB{e9zEi7q(6Qhh
z*b@o10<c@R8~iM!HXFH{pts&_0yyBH)Ce#8P~<Pa3%b7EPF1VN^_Z(6Fdb<Xalaz7
zwf|P=&ksYe^D#UH8Fm-%N8J&?M`T6rY)CZ+aYf-1h{KGWO6DfQ@MSr0Y%cN1ADH|6
zqLDW8Bn>%)(QT**^ool%&&4R&<7OL)k%@(F6T7*e+Kg}$aQ>cn!n#3(8Pk;kPP{L&
zp#P)HV3X>QPKd~pi;(xER7P|M?mhmyKPPTPuyvyLB}#LzDp@zHaDhKt@UyjpY6sFh
z#Ua=<)#8N`SOFwBR_jXQvLJeiL0A1?#_&kpCJzM{<@?{$R<wK`{-Eto9;+TPOyBE*
zX-IN*t0;hVO%vjDY}rsZ=>~Ntl+nFopOCngZVdNm#7m!i1|SGnGhx}T9`8+~T&K>T
z3o>apx>KAmr5rFuZ1QG2e_4!T?APCzAVHqk1q_9cP>!v*<~%*(d(Wl2Qxaa1OBVSw
zR88Adi@v{*JUuV{iRUX)E3_=vMf0L5ogN>|OthsYDXu;og_u2D5<Y1$?tQ(35m8I{
zc~vK)<g*}mz$_?%=rVN2Q-}-dkr>SdhheFR8*-(KINt-idmNc;?n7{iGpvI0KJJbh
zF~NO}sKQ9fy*!pU)nELRi?D8QxMDmZ4Ba&Dcli^kQPX}>ir;Y+O|+8?Ko(l<azg}p
z0M!eGDcDN9m%xVb426y^?~-If0R;OvWG>6+=s_V(ikk?$TO)C}&N4+Ft><tIfS5VE
zN*9zMOrC9cFczGvzwiV>E7-D8U3Ut%sD`gw)SBxJo|=O1A2M<;L|s;Y{+p+9Q@uPw
zi$6BI9`9BIUI*55xU`%o#sI!?vI2kmeJVUMp;_Y`seMopar0`lzGT1RR7Hw2geI>!
zBL@L&?tQQw^Fo7Wg>&o>SvD5^;aDa)sd#1GDF?TwZci5nQ3*`x{ltFrOdiJ4zXe#J
zA|zfnI|-uT3Dnkfikv@)(>ph1{R(~{^WELcr4S5OFDQw?CQjG)%gKm~B}>0BrVH7;
z=I`uVXQ1>hGO7wu`9b5Gqw?FqOkzX_N?bw`+$jvB`ya3L@L&+tsS9Qm)cqD%F!p78
z!FUD%EG@kh^Vs`&R>?f@O7n-lVAyN=PtZa=f`-hn`HO^iC>Z>XZ*c|g^x4K7HrVON
zvn<UD7dzymB+hs98TvAgdG^z0Tk%c<hw)FBg1EpJ%Yd5`jK{RuH>)aoequ)4LMk;f
zQI&KYzIX<_``Qc~NvfiiZVhC_5PA{f8)KkR_*Xm~*%*;OilSv1%2{Jcc!`w=K)T5h
zn8|8vg)$%_Q;r-!dIh1u>bj<e)v+&uDz92MMRM^k0PW-d9g{Lp=wz;<WrwT>K?{Ae
z@$=KB9W!8yYNWliA1<=J&R>}EPHsP@XO9nQP$EPeNPm_J*B{CflUbOz*`6mF*W<Ri
zW%xt>O;haeez&OMMG_1<v3RVSgF8xao*X-Jk6N&<LN+Ok4@zpN@#DHAx()a*^@WF(
zduIV2+9Pc^fDjMR+1S6^+1zwG0#>&xQ3B^`ELWYuBo9Q#Z^>q{#iOgilYHTRhk~}u
z=5<6kBP3sAbu#<0q2}$z1lJrrdRmI$y0V1Sy97vr9~@2+3Vi$^K*nmD|D<*sb|tFl
zHRDUjV#U@V@bYq>uFs$znXx)VTmfrI$KLNN?u{5uwt2G$6xj7G#~v(M91Ui;NmFGM
zJehE3eqekTRJkV}4Je=G%S1O?P+1+x-z#tkMV231bNBKQVCu_4D##2P70EJU;EDgq
z<L3*Q3HIKa_H;9kABvK#G0A_tu9JNTW4oHxTQ2Pner)Y32^hGiNk?p-kVkSc1|j=;
z(GGIw3I1(AM5z4JRd_-8aWFo-w?HVDzFenCdCsqcAWuG@&VZ?@hjsT=7ZYauOU<}c
zwHH0k{2Xg-@=O<6bBFZkJVg3H`!5A+pLUhPF6Oyv$Go~@Ms<^?N<P86c-<cC_w`iH
zwHJS)i9ZOHBTQ*Cifg$=-7y~}%90#)$ifUB+6?oKNR|^KB26)pnO|b=g8iK@>xQo&
z)xzC4EJRcZ(jJm1O$Ek}t);2UC1Z)=?P5VCZnBn2NG4H3gtO*bi!r0ki4fb}Y5|V8
z(%r2v>iv&H^&RPB`Yr6qX+9YrrB1#JC?cZ-SEQf{p|ek5>RRqii3Ekb?m!Xiq64CK
zs?^E_HLz6(5>)r6b5q>^=2&2Nbp-<b?TmBGDIk9$>nzC&x3WZmRLm7jG8Mrr>lZ|*
z6QP#>N4B_kFjX>Os_;;pj|9x;SKRI^>0!x*4mRWkFC+X|+c(aa!-fFhb}5!vlAmG0
zdHhy+1V$A#rIw!cUU7K!Q~6lNB<X0ZBkDQudSDH48?>mwoeUj~7KFheaY1B2Zcm8K
zR7GtY&Z!PTDm|7xdlg>vZoU=!gOA8_VE1B&O4b0b>peEtMa(yx=?rAdA=i@IbT?~W
z8BAc+HjnP;ir}8M^j*vEx85C-w-N%`DlKIOeNpya8OZJ6zeXG%xm<|${Q2KR^Rg&_
z(%nz+(nJCYFW}+Gk8Iu+;oQ<>qcJ;_03Uz4Q`-+vT1)MMv2fw-&2ryw%7XXgfC|Q^
z=Eiyn$SK9hn8Wri%LPh%LSF~XruZ@ur7b&vugZcC4EBN(t#!^(1Z3LE1^JI<W8!If
zSAg~pNNXnr=^OVUIfoX9Mcc{|M@b{;UxuIC#A>Jv`2=wE+6Mx7r~#QMv1SPFbi+3_
zC<#Zu1=h2kfvw`s)TN&>F=<3R4WpCx$U_8CAD=SnR^2qS$lvm7qT9cKl3d;&q{{lP
zjn<KD3OQ`n^2K0n*B;4Oz{>(fDYHy4@?tzI{lZ%q%7ct4(x8OYNOY1DINX<?9Os!V
z`!aef+1_RP=UeY`7cE_Mw}=($#Z8-M(2Nr_Ma}G#G=YOWs({<g-@_IZX;`R-I9v*l
zIA)4M@i1t=UGM-7d~8S%LvZDnYNL8BW7~;8P$#-N@LkQn-z||J9;&{VwUYm(W({ci
zxSp=3007F3p7%DoAoOWm>piV%#)P{~;^c7t$WM#BVFN<J>9s%y5-arvk;#_{kJk`X
zN0H<G&RaQ{c?R8Kr-19zhc{XCL)GGs<3yW=5(*svo_9+59SR2)W*Yiwhtm8W-`0XP
z_?_d0D_5S>3Hd+irb!*GUe*Kgurn%xe%}Ll7V<&zvJpUmVTD!of%zg=0{NXKJG@4q
zB?P_Bd!@o^2ubXe>|ZgfR|OiSyNbxZXP~X3XWt1Xs|&E>uh%Z|pd@b)%N&}pDeP#W
z{MIKE!d<hT!bWMs1c@svbZiEsNcxYpwg5V!J4g&U;E@`*e=U^>KtNt>8266U1|R0I
z=ICJGUWF;=6Op-+ZfLcLzVC{4@GX!ZdmczJ%Je{)eb3;eVH-m6sZknY*Ru*>aeY#s
zJOc+YU$_@9Ch^*JuP*Zn=VIOJ0*ZTW^BPLJhnyE(2+Arww4^!Ky$f2i3)>c|(qF;2
zxs$I`!*V76(V&zCJ+o8-$jj%hZk<WYPTc09FO=A5-$SK2qiaYzW&0VZ&>F1}nt*9R
zmdSNcrBlP!V*bK#dX_cZNMiHMhCF2a#Xm-(X|>|xeor;ifp|{?(Gz#c+tr9ycnS$$
zC(bFKH6A@YjSzSaPQd%f0UqXAA}_lyqg?GIDtJ6DuCH88$l^ql>3Q{gx96#XsLORH
zetF0wp~7UJinuu=IGo5S{aEbeVpY0KRanZrOFIh5iJCqhE)>qfbJ1=orL-c$I@k~n
zK^l%I+Sa4pFY!-F`8^gB9=fV191JXvd#%oj6?O9~Dgm<LLhsu@DLF24ZXee#0{)u(
zdDRuq*NN(SLY0@Iczq|l!x$SQTpc;ZsNCy(Bu3)mM`?YR+%!?g1IO(eF6XZ;9J_Mz
zx!B1`RrA*!dtLW{6{<J9j7li6tJmHAY;msXvD2Nwxwe@R;#`Gx9zyxcFLQ>B*~#!4
zIN~zoS_Kvd60=a6tOryJz3atLKYX;^BR7%y0#qJ2%aRFtsTK7$b{jkCzx>=E9=!>#
zI`<Te$hC|)xI1GLxiGlmx!uJd)|#qbHZ&uxQ2X7ynP}~-fIJ;nQymN#<-)3t|G4v5
zT}v({kt@O3J)gwo2dJ!N%cPjR@Mopk@9=}#vv^QZ4z`We$2I~JrCIX6ruRZz0?e9-
zBDsZ4DaVkc5_vrSz`qypQ@8e4wK5Q61CKrK#p)mE@1D`X6c-;TB2Tr8_F?K)4zH#N
z<r!Lv$)9MFnz<C4MNh}2x0D+xzSosrZU|lBYhG<~IC;l{lKho4$O`rXh7*)LHaNJM
zNu*{gnDd*sMsJ48ww6Htm5%O0hK*Mk3wA7LTprY$xo;b^J^(Eo^zejL8)gPasEszw
zg1Jx<up?J?_6CyY$Mg5)5I&OEQqZPqio$AL21RU=Z*QN0&U%AYX(dKBCA>wO7LaOJ
zs6Qb3>zLzC>!BykwnjtEjUfduLr@8FfA78=^i+rm<*zdhOZj@*r<eg{O|lvNPRaF9
z;`r>jLUzLcBaVem`N^tI9n@_VryTNO$iO&W?CWCC$MEriW}-O+cmuFmus@FDu79L$
z!F+d6^oFRVv;W6!-BolzqJXtzj_#+BWPS9lvQy$c%}SX(m^8bcpw2V{-U8d|Rmn`r
z(EiNQu+~ec9WmPF2wb%kcC#CG;F-AfWO>(_!-vz8u4zzR=7JK?uawqaK3v1oJ2Uc$
zUWX?4y~n+y()v?<PIOs@AluR6P!Q9XW{i9pivAiKiNzXSHDYY;secf&BK5!cTf89-
zmT48wmRXYmBEe|TsERNmv35qq9^Ru4HTtHnueWp%r#RuyKauQ|^>qyM-Uc>3vz4xP
z0((AaWY>l)&JPxad&eHC%j|T%$g`*|u4wDszz5e5q+Jsu8K4h=O0<88rteLR34)hP
zgBj<&viXp&X#i*E$_hP6X>kl}#kwOmDdoL1mBDSjbn0kJ&_3nf@6gp(*H9IW>vniV
z#yB-S(IxGC<ULF+9Lm&!a2A|XVi$H`?JErUP)ddtumI~5g;zDiZr26Xwv6-2e4!WK
zuyVKH+*m$ubg-5gi{k7?P#eXnD4oD?(&iJh1ClHlmU9N=nS22~7ZHUbi|H-bSepzD
zr<f*P$wbHdDKOoPPW5<*(px<?=C`Im!p@DaEBGno;kuiiYoPy|VRX`h%Z!c4T%IsY
zf89Y(1V>9&3tcFhH8e`=-QFWA=%*QyTEalhlJ5o5XsYh&Im?Wyx_ETl<b(DBLGgK9
zm7u!C!vC262P_|p8!QNKxq%)d&g&?t%IX>OUm0b6JC|G&1|0Ez^u^#dKNznYOUt>x
zgc`o@T`LWas-D98fbhK$3(q5szsGzjZJVxwkL$F><8e&?D-F*YqdhHi=ZUJWa&}Ui
z)8=0?>%6&2$84&5n(4^y&T}Y+LaEr#yZsW^Mf<%)MN&VELPE^>5417hQby<ifY)%M
zGT;chl+WLlbs)q^Ytb|<jg;EtmIN1!ew(=e1Ganq6ePE2jaG3Zz`eOVvq>{X`ms8Z
zG-p1)ITwqtEw|WRBQy?*Wy+q0E33f>MQP4ll841+V}W9#Afv1ZWzn>HwDof<gc<64
zIJd;3Ss!ZKbcT-xRO2D1x1N?)K>$B~;XShxT^B4HQL}feHzPT@h=I9L_N+upSijj~
z3-)PqFfM|iPOr?G!hS`Hq&vYn()@h16j9|$>0`jGIJ$TUke9^ECV#(n5S8yXMwoTn
za8&5QV7fGR$5JLq;3SS$g^U#q8g2d$1iKnxjF`wMU`}bI@Xqb@Tu{|i{J<H^2xnj^
zmW!>gIB@@})Y6UEt$PbPzyK_G^)}?dNudw?c6rmZ@<(&ZiANDero;0DgMD`f2CYw#
z?meF^%#yMsxD@%gUxYo-<GtK9aM?1b4h3jJ$ujE-#(IydzQ*P?owi*SplT2Q^*RY}
z%vcoKNSnfb{ck|e>dDpax|(!51=!bF({D{EB`*m``B*TK!=6yg&SnVzatA?NtdJ}q
zLizzo1C7T9&YF0(ONJmle#99|%)*j4IOC)(Bj*Yr{v{*vL<LHL3iJSIS+{j%t@abm
z!O>}KsiZ6@{#g45;<fckk?bjN$Ov?a<oiHP8Ap4KLRH6VJZ8te+N??BNy$~2>csAM
zCmL0gN;&9X!RNCoQ;yqY4S4m*(kIJ(I@VCW`RZMd?PJ0y$}i|$?pi<P&x4VOO_PXc
z7lQ*PT3mp<Fn?*`FA4X&r8{(wS|Q$4RZ}H!M1lVALO>`;eGwi))@_0ny)Pz>if>RC
z12~$Yk7Ie5qHfEhFBdw`uTCWJ?MSyQ<Uqr@&93W^=|HHq5~W7@nE-@AQYkKVwF!7U
z-xN#v!lBT^;p(Gq2`o2d?U2C7<FdY)Muw<0PeC8PtSr0>7lkkkK5Wt(ccGZX<IHw7
zxVzFnw^myl+D$?(b$yro7P2jQ<}sQwus0NT1%g0C-hT70xi_ahIRhjQG`ee}VRitH
zMH3i-7meG-Y0A@Pc5@l<Kz%9?+N3hB(=%t7&L8bZi^*1S71mP5CHdz*u}m?&IFweR
zEu7l!m``9jIA}6he?UBJwSq{hO%VwZOy(&4(sc1!^YOvLt4g#&XcLlXA5qnm34_yu
zWA>vCpq&4yk5}M+qfLvr`Cm^Ge&!bnM(z1ehAZKs{}X>?!VSB2fg6pc%FThsBQ6oS
z8ostc++|uCdJ09_8RYND_ilFW;6oDB7iAljaPidY@|u(*QN#EEsepG7tV<=0jkR1O
zf_4jU8*>^bEe9&EymfTKq88L)x-BdV^GQ{n8(JF+^?ojHlrYClNT{k5g3<jz;D9Rq
z)skY5PO8J+kk6QIKRZxQ-x%cG3eD!(DuhriPUjA6vqhh<B1m2h|J6V_^Xst>onH{l
zhyV9X<7{0I0?HI4h3}p8!tqbqXU)<%b??hF&Q&B2pIzV*tjJG_N0nr3t9EYKY$5#6
zI3Nr&+ze&6Po?B4c#azEQ8agm_3=ZSjNmMiqT(IUXr*Kyhy)0LeyGkB?2RJEVjU&E
zLn~5&eD1{S^cW6HUkn92s#QHLD%yvBX}peJ#!+$T5gRX0f%DLXc!+yj+uSwm#y#Py
zn8-Kw=}C_43asQizehE4%}aa^g>7yGAi+OnUDBnk#tjutTXXXv5k}0*?<#Zd0=?`p
z^GU}Rk}1YXJ(X18(!q=%s@=)fVrwJMBWZ^vS=(HzIRq~o*@z!Pnodwb1(Kh24Uzx@
z;pjan6&Nzk6joKIX_kcAj~G@5)JabfG@O{vi6Bc&C&+T8^qYyNQ={*r3_)>*_K!Po
z`D!+hQQg(!HX#&G;|q!r@jQ|)ooq`GOA4NP89iNMoV!r%0OWT7jOG@7KG_JJJGR|i
zIWD+a(lpeXrK^H{UdCvd{X_^xDF`%Itp@6cdG#!MgV|w1bZmE_e4oQ53p~5P*cLiT
z8IXM1C+8{;+xhJe_#*&gA%PbZz)>RXEnWM{o=DIN{!aj)xe2fC=(=T9PH#YOm1E2>
zK?Y~ZbAB+DWr}r5;tp{fod~WIymN&!#$moc3@qJE8br9zQcaR^k0-y0aSMl;0~V6V
zxrIJUS`(WIoF%h~eJ(4eutlh@z=owvn@%70qx|yB*;-n;LIUl}tFU|)ycI=TgLPfO
zdl&JBL<G9ae!gnV83ITHrHh!cGa)nsYr+ojEmM2($^qTtH;`YjV}+AO^oxmE<fPqG
z@GUKpGq{-M)7ZBSK%?3rjHeC=>($c*@a%790Jav`>yoX@Q);U_;lqf3`AHN~ZKax_
zjtgnlU8aW3Hc(bv{1kC9C%j)N5#DLH-|dp@#H}&VoGgcNUwagGN<iO3`4eb0+cUe5
z6dp4!P@y~#i=DD7GpVetWY6ml|3J4M#&8kd+bq+tu;8JNE1m3Wh;i<u9ri3@FmO+_
zj0;y8@ylfBs+p(dBpDJ#YKjUktxO5EHhN7|VJ9G4e|cRQ7W|e!4(OENF2SYHECro=
zE%63A|9T#yjbX87jbJzhYrrf@a6zIlM_v$I=jb@;i3nFhH!TIVeAWep3%2zbppVaO
zkHrdDnb@TVM|t3a07#cYFZJ1q8+D)O|I_LOHxe-Ce!j!Cbo`!9N<m7QPE0gczTSQz
zjc?kE<auMH8bxiXJY7)cx#9@nq)vRzwE4^J+W(e;mnmJ*d}{VhOL>4X$e<`$;Esy?
zf<xaQxhH43;;h-N(xd(H<r|r+@b&fKiD#r26?TRc;*Fzs2^(FcNA%%MzQpy=DA&4^
zYK*{qG0#_UR)6t8Sxjl-7N?lAH^2XO>V!nxW6zDbH)Ak;m8FjU`_hm;f~IXQ)zzW7
z2erLTlYa$TlYIAu%0|r0!@tA6XoWeLLtS2>6t_{cqa9pFpu?0%&q#L{pL{l%7ebC+
zP>1ZpZq^McV+VkB^y_y5IMjWr?XD>Q!)<cOxp}OJ4kkSWs=eh=fdSQz9WURo=ki#&
zjXCc?@s07c=p$D-(fPK+bB6|IHI13sOUlN?+RW7O&>`(p!u7rK6c8$NP%S-V)Wd8H
zL4+ZqHNoSxPX(pSJ-OdFXtUsy0cgXfi2&3<0<YU;3p>2Xn4y;roJF3agemT?w#~8Y
zL*)dQ{`9{lDf<<9qpS4+fAdJtm2QA_+@-rqFVoW9J`^!%_p*_ysswpQoVY*lQR76y
z1c~M|AG}WUYWWd0&WcV@MGV@ndTCN435T&3rn2BjHw0#Tt#;Gg->V<r@A15Ie(^!v
zL`6qj#jkb0M&snNrb+w`k+mJ{!kg+i3N6|VzQtrJh|?iUBVUX^*`fY|%pBObe9=rt
zwh>*aAUo2KEW90!Oe70Pa*TEWL!th_1BF~ui6*;m7zRLFiTrwqLQzSzXBpJcEdVf1
zHDq6G?u&Tkt1M5IDZDLQURx{D5p~uGwuJ|co>kG-Cm{%1RY;*^-3GmC&Zd!bvEXUr
zpN>R|3qMaClSkT;R(Vn26KOlvVe>BYQvto1*~$y=+_2s7xsm1#g$}-*UX&?+G!xV|
zk9T1pI->64Yt`fay>FE}bvV<fkv<d~j*d>Wu6~++tbGKD7uwc|azj<P0YczaFIp@t
zF0caDX-k#3B@I$Ix1UE4CIUvx6g3&#W6MT2dN-W@B%Go$hlmG(c4fpLD#_yKW63dt
zR}J~y9gi!kMMG%fRW5tJhBLw+lD*`Y{LzK18Lk>R?EZBf|Lop%Vor8O6_I#DR0JaT
z)+pW!n)}{dpma3Bib{3G&bME~hiky5{H?9s$UD4y6<6$y@A%*$a)~t4>?V_Z$rP`U
zKL^|>JXbPm4(Hs04V};w#D7;6;?XYq6&TCn5#bBb2&`BrdH)|OvU4boXRrW%bPN8l
zKdQ!II8gO2zq`^@htw;kt%=_^Xps!lcbOV${C<XzHuj)E5uT*mywB5lM1Ut?=Bj^r
z#Sx@}xRM2R1V6c-pj84nYF=rd#oIAe0RB9Ji?UC}0I7xD0n6-tWA{`ZU=Llz150#C
zRU-)IGxnDLeI8QT@AKp@9KA*8s;dGyr-+iV2gdXivkvh?J1RaWzGWh7r07*-9??1d
z_0C;pA3fej=OcYxaqm9@5L?q>DN7=DD&J;SOTbK=`;Y)2FeHL4#aj})S)(+}pBcB9
z4=QThnQ_3ZhzQg_rH^;i$|C;@i7VF`_GXTA=VRUkkrBs^@pn8r<$ZMU$Ghe@YsQbh
z8?%y@<1qfqExA$=6|Y0Bfs-gBUt2W_UmRpbfYXd|rICo_3y{$qjhl}6%d<s%M*U~$
zqZQGj2l^SZSTcVOOonxVCZ&DykYXn^(Px#H5UYJwWw09BS6eOLW5u_bW=_A}dDM`H
zX{6zXi^f4ZCo=Od@l7)Vtsmn*^90z}uZEri@{dyPWQ%%A`r%HPv{1bT0D|yKc5q^E
zGlJD}CxW%I9f!y1a$_az$Ht8dkuXxMfej}`zs7lXzBX8r20Yf>3xklwCdqW3ZQUCZ
z;U==UaFbHc*7{uoi4JGC$V{;}_wq^K66nyziy=TsPL7y>L^`TDneV*gT2y)8i=Q#-
zV3%|Gr{Ca@5kj;5T_EgoP<0Yl!iTK*_Wwx^cyW!TjFf^3AP<AM*4!p&%p|04ekHMR
zL^<nZG?hAmkaTj;0oV5tkiGf2(nX9aS3i%iT4=D|10JbWszlNLvbph-|B9`k1FFy*
zj22WbDQ;>id81W2jx8I}Pl@Rq{WAx|K+GE!adVHKcGyiNO%SM#cMm@9e&Zc+_`p10
z+s<QwzbxRcExPM%h=zdD4rk68S=9$6lm2&Y_-kwXO>EeG%Qq{_4tqMNR4>NC!%@Os
z*`&4XONPKSpObBHDf1;6<>)cW8oTT)JTOdfGmAIm34M{B5``ce9xl>D!buE$V?{%y
zHHH)H)XGn~bPw~WJJ{&5=AZTz#`-=f_i4YgL<95itO<0ySC=Kl2xafpcV>7KdXP00
z7P7Hy^S622+OBc}8Lgj_n19_+m09V5dNiFu`n?RF;5S|{*I4jKU>uJqREHIf)}G~(
z6!VPGL=7@@%6~?y@3;q-^0Y^ZG#)#pzv&Znema`B(=I`zrI)eBLYObzO4tim>L@NA
z9DM?ofw%T*$UMe+EDpX5ye@e4UvGpal3>uK<qQj%e`-CKR$XC_qz4Dt!iwm=;giRG
z!f-hvs7;~ZfY6t#%zP&nLj5pw{0yEMKrqyi92xG3R`quQXDe+o82l2?g~U4Za~z23
z$WAXCf<9!Z!-k*~EdI4#3hIP_nP#8=dPisdE$#D_KKJPMKtsXM8(P9;lt^X?C8No)
zc~{8Bf5n;kCeb6TXAHn5J%M+k$=ycBmRcTpk2eWFV??FSAQ0-DcyTcGl85th6(E0+
z><arw>A1$Bi(1?78xrkq+soe-GEUWWwm|>5rfYW8tL#wrx&UeW){W5_iITGl&p8(o
z8xd#;i19WfkNUa~2@u-|+S?;O7Z2>JWpAT_c7v|#&X9@fQ03uN%%&MAkD9GNQv+!A
z8_jK`M7sQQnzH;2XN2%8IKKl2=D<?$u%BM=V<!jt5<G;EzhIIZ^+Xr5(;kLi8BOBZ
zbNt;@qb7mE^)?teZkie%t@~2x`cMmbm{O<A7scMkQDv4g<*{SA-vAy03)~KlQ3Egq
zC#Or3O4+;8c^8~YgaKDi$>Gr|a=ljtd*}p~heBd-jG}Sua$Es#LnJN}@c>}nF4^vL
zlfec5B}voG{&E*oppJ70Y?T5r(19x^OTDNN0*vD9<L^8n+kae9sjZ)K&O*0<zMYIa
z!B(buYpjY#&oF2R?tj6tLAxUeD(}bJpZ_>ZWv&SlZ@NO|Wm0rB7jF9GNm36t$6)i~
zGJo)pO0R%~t(6#(>+OO0#c1RYi)G71%^;a{5E{%?V;N>n=AOpp1dvBic52snXNo#>
z%kbsycrA}+k$(ofSCGYOJ`Q-s;0sfitnBctqhOUjdX#}_f;{6etWwM4P$UcjbJ_6)
z{fs<Vj}NoR+_aDv_F{GcuZlD%TXnP7qZcSaWiq_w-TudM8meK|C)7M)cy$hzb^&@O
z<tXE%i6trtoi%Pmk4EF95U|rjEfDEd0IUN=ndEv2n<m*Jq;mk2l9Krds}FtZ@Qrh&
zrsMxaL$D;c)il<EP8U-7mo3;_-&*n`uv>dTZD{PLD~txbWOjl>qR$XRopKLz!0hK?
zkGkjZ3_Ga=5+Zz+))9x6$q=$*w1nsm!V_Y^o;gBD-}|P#Nr&jj#YxgMnlA?80MKD&
zG2sG^fa>-F)UQKPO;1TfNI|I<)O~<~q&p;k=Ss$h0q|VK#vgNfABQza?NJ5YR-iKX
zPyu_P(nAE=C7K^rlzNap^HOd+cVAPUORt8S@+Yle&DO6ByUxDyShA$x1Z4P2o*MJr
z_DW8LI*!8S#`8_Q-+i9dcGfkcb-maacECm0JmFtp?^f9|NZPp^lzktLQ$-LlcN=P+
zFt6+{8B&szA>L=V5?(>)qE-ggFgpdhGb24p&uX}=a9l4TpCvJ~L0q#wXmj!ft-htW
z#t~NS_~~}_!0?c4O#3@e7iw)7Aj=!nh66A*xDqwhn*J(;ek)x|LbYAf*Zd@2owbn*
z*Z5|{-POTXOWZ?JjE$cLO9inY1ZH0COfKixPyz>(QgS9*+|CP2+xCMrxVZxrf8^XA
zld#3wA60;*^y8AVg~#fPQ=Gn`#HsGr8Af2NP)rp-!C$Mg-xzxFWBBHn<Ud{S_AbQQ
zT`7X%2jWg66wzbq*b{*)3`xDyrrkFkUM(oQ8`J4BZ8j12=43xGWK6K-$P{^26)_FG
zNQ+jx{9e&8ta09QV}6=JOeRyDw}zE<gEqb+MImAD7Pjq;VP0__ty2o7q}lFRr^e;3
zoPk~O2W`eeCxX|yI3SOPOjs%o-d#!Nxgc7Y1|JmBujfH02RYnPwSV#fTD-;p8O>#?
zGRZ%i<Og$})n(Dsp|W30&W!LLj3U^erJ2rz()`*!Pj>4=XOTPd2Bq}-vPFOy6Gqy2
zscabg_PrT9Y~7<jEMOlmzmQ*Nyi!0$gwIcidC+}bgW5fiSc&%=Eu`#13HU<8ykYIG
z%&W4$^cN%!kQ9jWXF|PGeWsp(krUOT#NG!)!(Y#TH**vwq-K++lmk1wxNqbj96d!=
zIXyy;jGbtSU3Sh0ed7bciXcqV#$bRuqI>kXi<<&p2D_PN{5$&q5@pc=M~&#OILFr8
zV6dHMtDgs*N4|!#yv@RDWP!j(J+SK9)x!9^6-5%*BvbC=D%+s}Tw>K(Fz)ekj*DXB
z<Es(rM^kM10>|j|s4T&6)RUH&X^?kc^XlGgLE0Q2+iDclQ?aUsH71Ke-K(6d|I(UQ
zD$249iO7vbGa}vI>5!v7cbh_Iec3UI{r+t$U*_=47?U<%vKTCnjFHHacIl?{P7L5h
z2j|5b@N4^1VGRH~R#&*45mF;>Hj!B<_xk8khGo9WE{+yygfA^R%W-L#7|y+Pp*kt7
zs9?ai?QTGppm?-DcTK;XE|VO|>)-AEe%d2g6>2{GM9&uhVy!ML*7%=dR)<)_htA5D
z7j==PG_p6-^+l!Y;HX+!<-NAndUW7TugU<|Km%~R!}N{~VPdo;;ON#L`}>q+EY1ZT
z`~#fBHx}{{fLSb4kfFlBWE`s0lm4#g^E5ais_DB3k`J~J?w31y9Fp!%G`WP47dmpo
z705A=JzEWdl8*k2gZsV}r?h3zH=Sdar0>>PgxID{4yel`lm4_2ct?dpC9Q8ZE+0Dm
z7;1%t-UKf-XdHdV?-;$)M=^bEdbSxH0&mt+d1_bG>cZc`p8U?b8~s;WFFQ1TONQFS
z!fvYK?D@z&@>$25R;@Y8#o;UW)B30dM^x7NwmWklsH%y3h6+&X0is5dW=>XN4pP3G
zsHzlEL`wVsKG3<#%H|T*fX_g<<h{LVLr;;oF|7afYXo4C*70OgrK;@b<)}4A*@{(I
z7R2QV<6*@0%qaxA^LA(G2ALpGr0iVxlU)Fl@m}tJb;JJcAm)lV#O^#7OChz8%LQ0$
zg|3#saePRwQv1lwV-}G2ZBM{M+6D|T^K%}p)c;mYItOJV@%d0eDnbKpdhDPiK=r%+
zCq<)#g7&e?Chmyww>b7<BESIuKLEg7%-qo(i61imS)IH!VqMBYCM*;0Kq!r{9NdW4
z!UcGR@6CgWI6mYccqa;&m)Kh5xUZ%FRX&cUm4pcRPP%FFAO<Ov3eIGkOAtfZb#RZ8
zV|Gi$H~}UcEbI=V+-;KPpV#VOCOOEeb#{T;ev*gKR<*-%0$k4<VX>F|EXDERR}aN{
z4+7o5O6qP14l?w%V2lB0seCYCpLHQXZ-LnZR!mVp6NSMRKi|~AWBa=w8bals?Z0uf
zz=di7f-G$`ZA`R50qiMKnAgBXLuB<mHX4}mJZoVa)?%>O!u}supH_cRgD+zabrluy
z5NK;_1DF7HX#hxdOlm5wh(oW<4-%I&4x)3~cK7Hw(V7pvgz8Ly!ESBnC05SW9ArJt
z)@X8NoGb+#U5J-;oHjtLw3yI}a$y=S9fP1+vKhI;;OsZs<-4^|KrxwITd(Fic|8XN
zw-e*!<lpia*Eyzd#mAAp^o{Ne0>|cIQ0Q2oi-`>rOcx_8QH{DVnd7e&c!RS3H3mt<
z0W&83qcxj=dHZ{IsqtWSe<;ux=ui*|i56)s@K-22kzqt!iRj9I(3TQd%6|+MH2fy+
zf2nUx6#f?nmUNgkNlpzz$QHsl+Mn$HU|DmdZ8S$wzX=bLh^bT`+cy&1{+9_gtE-QN
zj|u_fLkH^7T}pO*Id`l?N&LskWZikku76Gjc#~4F*GO$xFb)}_fH@((?h~fu0ZdC5
z`xi+jj76&mUwYQyYm=pxun7u6)@x&cfHlJuT+D!4M6j4$PxdjYLB#<wm@d}?!MM#K
z)v@n);VgL#D_^d&979TCNZ~hV{vUNHG5~FOlS|~6MkR51VMGwfq1l<5s_jHnN4TD2
zZnSw>Cqulkuzz73=5%shhIusP6`vusY*2SWwx<S(YfGa3l|g(QWRYJstDa{TMRZqi
zV->3`bcYD`)h_KC=ms#|@CBYpjfvLarj1z?e%j+AzT=t88Cv+^^TL@lat!`%H_$9P
zwpyM3YWvVGH*$zd_l7;P!jr&7LNFl2SWQ%DA0jE^I3v`O?+Tuz#W#kQi`so;Qek<p
zkix=GT{+kkXp5V>@VrIa{9>c73IQXqBydg_bGW4f2{iJoN|3W!a!IL4F$TzpmOu@n
z4>Nr<9b+zMw0&{nR0*VaxHH~{^bR3Y^SPUs-%B**XWeMAp0>FX&AmC$fwI!)LjS#R
z`nGuYmbX)>7QLX=Cy2o!1wv&NGJRp%m5GZ^ZZmNZ@RaAQ%_?OtDc1uni<lQw=Iy#(
z+rz8XJ7(Q|W?a$riz-J@63m0~-3W|^aRSg|hwjsL;6Ye%rcWkZ^4|KPr}5poc}mWh
zi0%P4rb?d|R435-2M8!kt_}VlBB|Vp8{UF(S;M*6qqcBWK=WuN+Z0ec5|U_UCy6JC
z4Ts;5;P~fNUXjgAomTqSlVN_3RP}x~!X0EWw+DfCq(Mc1f>7v-mVQrgD{&E#nx0Ox
z(E5>!kkl4LGso8L?Q$RZaT;_#yZTQ+y9OtM^~mdOd%A~N<664pNgWl|OZy(Wv_Xni
zrW14~DSh+`x*fwg_OV^{FWE86nAkNKfT6}QAl)Yu&kZIF_P|dnUVZ!Ox(m3^WRw!V
zQiO`H{DIB5p@m5dVfZrmlvTrICsDa$+4m}yQbEXpa)i0r?8yJ-+zPZ>>6l1kU7!A(
zKa=Z6`gKE+Xh~FWpWneFkp-hg?kpybjQ4lMklNAkaWco%KGF<?tu7{uYFCvh<Ptw_
z^Mq<S<WaNrhx2JqP-^@en5ZC`mgex@x1~W)e_sNmGJD&SDMlCN=@hf5HTD{8!9Jfd
zMurfG6DwAEoB0i{n;g_VOc6T(n-=mt%5AerVb1w)_Zid2mRRSkw1`$J=u*#4;;E9H
zlr1MWK^b*Wwb%@i%_p|<GQf65wVFwZ|Nk#G*g22vc?{q$QLsr8o5fqPW<(AL+%49Y
z^6~+C3qfy(=*pD$pa7h6NHX<@BP1nQq9Uz3hbPy+sN$q|^tK?E!1C(`5~2a&a8csa
zBeB0hT{OVV2XU-|kySPSjoz3HLT)B1GaoCM6yQuFF<tF|C~&QL-8o{0lm5aYb&q*v
z*Gpdb_$Os{;POGETrp;HZ)&1nxfMkp@e2FHX_1oyWjrisYIZ{7u{5*})z>?aPNaHa
zmEA8{9|hS3D;iVpZF_*6Nek(eGr_auoI9ACJKo6{5lI1-Y*CeY<y~Hqh|}!$q{Ot$
zD;|cm3ldrpRv&5WLZG<4gPtALeb>QgXgfst$~&tPp67(wk}VCPD0ma!2wGngwS_l&
zRxJtL^t0lHTX)c>KMH*xH)H9Po^xu|3;G3bNuxTyo5|oR5sxB#ji@yK7WnJx=7`LF
z8H>UT5A{@+QlnD3kIPU4^+&l#yt3GmepHP^?m2pc)5*|swY&KB3^KMFcbo&fM>33S
z?{}+{fchnM2QwbR(dcx4{KX3<fMr@Fy$ZgafZByn4=Jbx<Wa)!`gKWdSs*(45-#dU
zy$pJB?0{1$*jv1-FlA#`z_hcsOZNAS3xYAq<YQ#G^|y^J`twI~Y4|7Oz0fAF*#V59
zADJEHU~X;HUZ@V|nVL=y<mg$bzrh>(^(8}zsfOmALZk|#>#=gSQ!lLD1COtL>GKS8
z`D6H8K#V~p0;alUzV)C9^b?){k(1tJerroeHB^QlsHSl}pyYSElCr2PI;fzpGcSfm
zeRTHOvYGKfGvyJ^>(T>c1TDrgXz^p3>pJFZA^L4{T7yeq9;E<HUT%B4V^t&+g=$z?
zJEUbeU0t}Ha~_pM7Bt#4W-l^$^yWm~m==Q6rX+o@y<|$?H$|GX=}{HdH*v$W9`!C?
zwQg7HVAf5E;i*TT(1}EK)s(p0qdt?rc<eL$1$&%);}H}Gcv<fl^%>nP;3cN+Yt(V%
z+xq<@rK@WLkLsoj(W&ynu-lqleUQ#+x%u0vO2^%l`8cv5mySUF)D{Xeyj);N(^B0)
z=qS4|Z9EjvILJF))xrc-Td~a^xvKxEYkng6sZ3ygeny(Yauh%CJ{1<1X`vrO$#U(;
zLJIv63s#C!!$Y+W{06<gmlA+xyk|rvhqM&dWOW#>BqLYl4sRg9MWfpAQ<~5KF!kLN
z3^2s$A@d&t>biRHW(p$sX~*^)kkE7j_(7bE4))r6o3SDEU&+b3@;6dr!NHIK*m@9a
z70BY1;MwUMZ-YEN%ZS7BQCn+XI_3H~oy-Mo#OW@ag=}b&w><G&xV;wKja5u9_;@<Z
z8pJ2LEY~GcNEfDy2*t00mv}mXf<!W0qRIW=xFf!Ht)=RSy;^}j3McCj1`k1~ySo03
zM$5ABmz9}jGwB~T#1=m6)zSiPX#ixtf2(#Y1o~OBB&SGs)~5||vH%Y|kmPB9+l}_K
z^8AS3vPu8v?_ynQ6EAqTnLSys)zU@w>!j&U|D&R$!zi$o<&8@R9gW57-tjB&v(VDT
z$#>#4G>xNu@KKpu(&&by^?S4KC0gv5zeok#U@5);c!@Px{Gq|{oU(U|IcHCVsh~d=
zIoE^4+r4AnY|>aX(iBEkl?LC$Z#QP(Y`7j5qWWSKeBJu`GrvZ`?AE9sEv`LxgCg#m
zxsdrZ0M%6WC}bu|29SaqT^g2s(9LX}Ch#nay6{KV^R*xW!5p9#zbS{`X&%F5jvX~s
z+LRO~c6>thy&Rv!;v0dB<vI|a>)IX``*vMHS`f)m5&?3ZMI=lOOa6#SPOtsD;o?W3
z+ZkjT_kZY0JjKTeM*stXI#W*K&@^4*9+#Wt_qNZHMS%$;_KU?nHp{$@$by8|r^$%j
zF#qNAV5B`T_NAaP@{v&8#G#G=P)0;MuP1Ht7+FFxezbp`SAkiYDdyTpQ$}vX)S9td
z5NG@D^*T*NmJ|;bLskmo9-o)|{@&BiEDfvVbiMTk@b#(gmOJG_LKwD7_!9)Yv(su4
z^1CsQ{9dZ2{8vCVtT55Pe^n*Yu=Ms8(|N|1Fs7dzfzQB#-1BDpZ@-p2T?~7Ymr!+)
z2~-H|?96)6+pmrG*)0|Q8-(ghVF;l`Eh#6LYmj(6sItUS*l@ya2R{1yz2KSCY1MK;
zEgXmiI}$o@-YF4|PlL*a<}y@T!Ug<3x_5s3OS?v?-fHU{jwC8G28M^TF20XJo+H_f
zI>VD+_<g%w>)HFE7Kv9LxgoV*duDS_?tU5YnLZbN@F!F+aH(u~Fy2N691V$JopSby
z2|HGQo<Pz45Ta2>htJ0D{>2OqpUqbJ5xzh;oQ)+1l2d%D9%VP-Y7r)e{_J1^PvCB<
zm1;P^tDyw~?e0a3(|DWlZ0dKJprukV*K&_-XCWrhHT@c2D3bmS`%e{N2FxQN5>*;?
zy1nuq^`L|1%^GD4q_1I#rvf#(Wo31<(d~@Kz`C{o@Z*R#*p7=6S^Nh<wsWNTn+YVR
z5Cd#0Ijv|&j2;sDnGOY6JNBQft@)rCNxJQh1!xw)?#e8WPf8|76pkkQ9!M+zdJt!^
zr0Fj5_SGmRXcX0XEr-UTGENm>5gXO$7h#9;Cykn6W`e44J`FE1(^%}8M}*vuk3*(5
zDzG1c^PJiF%;#v!)0^DsZQ4UDcC4ou3DhtU0b0OkQi;J3{v7{va0j_AM19TsDKj~n
zydBnad^T8nkv+F{Y7C}9#4L!Hh!MK`ax=dBxBrK<YYMt@jCO69qf3e>hn7Z&q6@PR
zj_H3y<x5<ArG?c)jc=26iId$;6Lcefw}mNx$o(~zM52mU87n02QrkDLO6e{8X#=Za
z$)}i@+0L6nbqk<|rYYu&RaJLxz>r$|rbm}hR6-;lm5n5+X5ppi_{r(w@fbq&9A&7e
zHt;`$T!>pm3@TIAYdxZ_CvOxc<{Nep1RV{8Vh)E=ZFa7B>~IO9z(8sW+EE1SC$caV
z=4F;$2jSlS-|~CrDX_cTYL;sJ%g2m$RLK1hDiA>x^t$?-nfa*SJuVEx@hCP=*9>Ss
zPp|6tbeBZKztNpOD{-N6CYp{OlY+qyw@(uMk5dxTJea0M>%*tS)VuKcQlUprAXjJr
z8abUPhVe>AyE2)9M1tMxSY$4aCe7dT(8KN0j%df^CVn8^!pgYsx_gZ=Ur2l|X-gW;
zhpYFcl~&%06e)^sPogc}r73G=+qu8`^8X;L*%U&-{-m=rmOmlfBQC9X=xb7{uw7Hj
zP!+UGuUsLnneJPbBVZL5O{W_w8MTZaVvGL`^*Q~N9;{jodD49y1B_#bUXJ4WI2bMm
z(+lEQ9S|v64-H7ikHR&3GDc1j+xHCpSO{l49y&$j8gdjYGN=2~WRI=zVNx6q$@Hw-
zrYq8}&njP2<sFUWGh$Iw>+lItM!^uFcj9&213`#;XNZKg9u2?rA!J_{6g%>vVl$EM
zn2Z*{fFo54Fc&|~pU#4e>Ust%Vi5*p!0umxz57B|MTYH<L)8w~IA?%T%#5Yi5oxy5
zB<4TMI<8Rxay?TyFPRDbgy`qV+N*6cvXNd%tex*xeDSy8rTnA_=$gKkX?vN7Y`nxu
zkv7SC{<_J00OJihc7J9Wu_gVY?t=$A1~{TL;AI|edmuGrQ6M6kes8Z|$;D+ZLW{MA
zh@8SvAyxDV`cr>EY2xXRgI}P<$%RiYUg~3kf`wIAZPH>fka-w-d06tr*<L#rh(E&|
z@y)4I7eBaiK&YLd^Q!Vy^$#OjC<gDHQHf?~%yLV*-WigcqbN!aWc6%`pCjDA)}ntF
z=JTBH^f^hT7TwA%`%^W1b}u#;0c2fjP&#6SXd|gM!5PvMm!48G)%hPw9f>A74TwRv
zVHN}UTgM*xj-b{7+kkoO&&J_gAszs8jg7Z$Dh+?-&b%CTR@h!`j3TyH3?E1*5Ec@+
z&)CB*@J<f%v!II*JOE&Lx)S>@$YCmGj~(s*p(T;cC;x0paSY7--_q(l0+Lg<9f)k@
zIL>c2P3M}l8c63@80@^r`&sMA2~$o2-^&Dhc<R>(YFYhrcf4G&`%37J9;E(-;HuN8
ziZrSp0c6I!F0D0Vh=3ZW!K=IAY^)-52L)Q<NWNPCtyU||(5LxHBjUuXorS78U(6|A
z>J~+wgR!Gbn8p9N*GOzv2@6e10!(|XIxt#pR|Qu%&Jc7M5dBZFvEz@{&a)>RTn{-{
zy~XBOhWsHy4M>u1-3bec$_v<C)!RD9Cai15in;`J=ySGuHkcRIG4)UDvLaE}P9u$K
zO-}*c|8XHzD^=Q;9Aoc=9`}$DyyV_A`%K$UY739Fer(y{C^D;Ia71S!m2l8goj=2W
z?F=;{9z^s%wJld<iam7~B|3v;8wc!4c=Du`+xe^Ie?WIClx(Zt{5yXftk)BkNl$@*
zV91U2w_3kSeNvZJYTttW?|+TVggJA&6^OqUKlB!GG_2wLut1ij{S$sl<PssjBtZqv
zxpz*K${Xg1q~o^?DpcSRm|}77fl_cBaOH3#_^knpe7FM@S>Vo}`5@4O)9=^eK+eCk
zy>N+4>!90{^$fbil(w8dU=P%r@&z=#xY@lFV<_q0o6p~+W&&p*3qS5Zkb;}-n=I>;
zAjEAYrZX+VoRxZi3y;=YdKyCL^w!k4q@R;5PZ8}tHx^?Nw8Wu-@Oav!3bGP0(+&Sc
zh7m^dOq|R+t2Ss%Y074a&klQNAgm2=$qLRV^<5T2RJYSQ8wy#k=Z5wNLm`qaDpQfF
z6et2B(@oN@@8N^3w*C=%!IzU6+_~LI4V;gTZw-CK5n^cw&i0pK9Z}BYtv5d9rW9;4
zx=TA4^ZLBAJ+|B4u!)zXgZ%4jd-0keMLXkn|5lUuMM?CxdC{ZGfU=yw$Ukrc<K^f%
zO5g&bY|@h@nd~gsPFZ+r<5@brfLUjQTNkkyHns7oFYj~y3N<$N6|ZaTS7R4Uq)@ay
zwfOCeUKNL)MK?nfA^XkvEbHU=Hr@QSQgqe&0@9P?-}p&^6|y5TC{q1W{vRnNN&|8z
zQmZSRkW+xqtNmoqmGa96YFDzzbCw`1o*|ou<J1kWG98vpqEw+i>t+;EozpMsjRi+@
zN!2$x!46YJ;E)shf!A3`)5%QqT&~RhU&zDmoDAq&0Xp+*{`nME$<2OKNhN){%blI$
z+1^<$7)&KIuGGKc<&j3z`Y9gBGy%IR(R13&@6{sDwPA(FZlMii6sN>{v;NWWXiabm
z1X$I=|F(Bpjr_&k>;yCC%AIfeO<VzX1)))~d1)+|HQfKVxiB^axyWS1^xa<4@J|)$
zV^|z8I_X}~0Q%7Y2G^j$gVp)a<gl)ve7p0JDaygwPq(zCvcERw672bdQaR=a-6)f=
z!u=m@v*nV-Q9-J?pfu&uxX2ZkC-cPceL%=DKgx04)iX`x)JWa&6h6Y`zl=N=qeD&Z
zc7qmxjf?^muXD+aUn!lW;7{2mxFHa+WH*0;%C}$`usigAliRW6^~|ZsfTt{6-af)A
zm-<fN!HEY6Y<Oe4)R|BmOh9)SrYGb=5nZZn{2uY~8pb6?HF6satX}A+=RnSD7OW-Q
z6`ss<!n|Z{Z#M~z`ENO%TpVDUJ~$xK^X`T+QHJ_qpl+3DgTpw4_p;tn(7@2naO`!{
zW6WxW5GLbCFK8g)4?`AlDhLbQiCsori~D8m85L>10Yg8+X0+>D@Nv{~0yfQAvU(BZ
z@8q|x=VipcegZmfC{$1vS2dTf<&UO`0U`m5_eW>Q8<)`F2C<J;>*AkoM!45nvx{QZ
znF9QkQ$CcjeI_M$XoIO{Qo}qiiEnw?ZwE%zt!_|^gy*c*m%i(0*RjJd(dS7~n=>)q
z_uT3%S?Pm6z?;_MQEzdVu#TOn3;t*LE4%zLVgGd8IXtJn0l9psQ&|WmASj2fXc%`-
zHq=bRfS8%GwC)KC!{_}WY(^SY{<5lIQE+DC!F(bIuk26k;Ltl&1Nck)QcAjrW*jdx
zGyWJj^nPn;QKN!*Xl}6!z`-P!7?o)nbZhNd<yevQHKnWNWXwk_AtlntzlbipRVumw
z%k5-XPcN$8%N+~HY1fJd@C`hL{S!oiW_DHlv4exlv}1h6CfP^EgNCNetwAtF-8VrY
zn9d}Fd}|04HTiPN{~`dU>sSCGHcP(ITTRZUBdyZ>)ragLDPh`fjX8)hPe%L+6D+te
z)#0{D<I1kk#pP}h7WQR-%qmM+d~7Qc!BMj6)(7=b|MeM-5cd2-63%{3)}*(WMqnY2
z3U`)V-#r#T*uaA)zLAJS$Lp<`#!AIlnRUqU&x+j489_OmvQ8$;fa3)PX0#;((Hzl>
zzeH5QLE>`k5Zoa)Uvq*=W-|C~G4aw+$_a!XN)>}qQged*s%ouIVQaHOWo{YoU2*Tf
zbwa?4hJFzh6}+RltB2Y6lRcx?u;%X!1K9l9_0!qnAQ%zRxQBL_jCxB9oPk&%#U)TM
zAWUbL&mAZ7VycQdVE}y8CSp`T(+>c?4gnM2FqHP&#*DO@$Rpy{3ixXWrQrY%(F{b{
zEDWKRHq(j>>P6_{<lGZs(u^4plB>@km1dt8=YY?#RruYBGH;v1C^^z4;nHsAdCph}
z6v3JsxL;K2<?sh}PW6M^Q5b5tIulf$JZQE!p8|Zj5=9i`qs}VpMsMtl@Rl}ehc7qa
zuohaLmEu2qG~Uo|Pc)*&ieiYGUUo}CJUWO-A&8mhIFl{2^ge8zWMXGzP|!t|CNBsh
zg7{xBP-h@G<<CUi+Dqi*$4AcAgUUB<{Aw&q=k+0lXxdr@Dc#mp6?1o}P~UCl&etj;
zfV@TRcV}qg+}k(KfODf2;@2rQWib-8l(mOkZJ_ii5J9#zEWY^TZ2v131Xh7&Str8c
z2gYpU%LR|hgT5kC{s)fn#i0#a-)92L#k5(5D%LrLl})iTy<gCujIuiW6Y?kmmJ6`Z
zUv%JAcMxAcbBS&^<%7FV!#n}GK;c~aQ;t5B#t9WMKRkz?3i$2QZt}%&!;`MRkNjeZ
z)hkezT0!U5buq;up@`Hz@6F}P>3ICdhV*p)T^&?9v(d3C@~OZE3W*2uQi1mfEHGl{
zCP^^gh|pxgNL6jq1-vd6e+J`C)Zn>Hb^r|lD`$RlWp4R84T8}*zYVuXsCfDBl&xU|
zbBD(D@F@jJQj0BD4*$-#c0(H(BeH*rq%&T1{#0q^OGoRq1UySR8uY}^Q${pXGdA<W
z9AW08t|ed^tOzQ_-q0KYKgILxEIpwftu~FsH~_Sm9GCN5O5NfhnZyrNO9^}*>9%?8
zD+HtjIMYfsh#y*cq_ZVQ*-+Q-gk5O`$8*HuHuU-6MrfNvP+*((l($IXyOoDV=%7B{
z0-NM+O~a6Huc`nJ;H%9@+p}`o>QIWvK4zMzPe{-Run^peb4?}89sHdSo8ojW2x8^}
zwj<+he1hsHkxWgaNP?+)tw8NQ7~MNtbpKmg0)7z_bixAn);dtYnN1>q1(YH5SH$2D
zhcBM#l`hR5U0cM&o$Gw(%r}SS)F5SqIt|v|T%?b?<np+eMALw&DBE~S@e?Jh83nQ4
zns24;-4*yOFSjQ(A9foY)tvODz9&*n&u^46CKRPk<G#Kvuff{>QbUu$@3XW)$>^(v
z)3BO+t7tlldi(hh#-nvBj=&6P`UnN0C!r-FI>9Y3kNW)iw{TzgIui4hH2Fb6i5=|&
zO8njgsh^#rr>7A|+I@^Q#ICd3HCJ{)pFS-o%qryZtN`6Ba4p_H)`Zt8ey$NR0Q3l-
z=OX#`7HtC+32de{h(*znr^bmJQ%|my$T@#)V|SmXk)HK6m+ymjnqRLwtUuR@P_&y*
z4e0LY%+Mk3;}E=lzfFO66dZO@E-Q_fau(RNXpYGkY4%8D@gPbaFgS|;bDsh$!@N~4
zI87_`eSS0iP}_{Rau&239f6LcnHT7l1H>vYPZofKwmA17v3Hf<xOM@BrrUk<LEw(#
zd2K1eMUMSNv(`M5vA!*%C@UkebMA!>$Jb(rQb8~BT5%tXYrz2WH~@LlueFRTbC`0~
zo$w@fWxHOhVVBfIe^MIX%-ChI8l_&m8qBDfR$Yj0b0Vm6dkT=Z&9tz|WUJ>@hAH(4
z_d@J?{C(@%em=h9QcXK#ncXb_3C~I8b(CY!)lbT6G|l+S&kFJrjxO=}kKqjmploFI
zCJ0Cu<YG%&KWr;nnm(uR>t6qV5<OXskE~xeLj9SwS7NDicUm_mvratCDkN<YfBH!y
zm=BR=EYGkwUrz*S8E)>%dhalhUXk*Y)#X@uSni^wXXZ7QSck7uace|H%|C`)T!l8h
z%--+xCFazN--#l)vi~P~7yaf)rPPm=EFmGtA^7DIE4Qv3Xu{#%{vy)sy-HI7576Oe
z>Cavmw2avIW}<V3;uUfz5yrm4mX~A3{bGv2a@Do&+!v;5i?kZ6tM#?+%GkB~jrJBW
z3SLw`#H^GlsvUr0N+@LU7ladLpi9;_o%S-p^4pj8L#7;fPLIl1?_*H9g=JMku^Mf?
zsvZ~b=B{+i6#<JiRgcUPH2#kkKn#H7l;kV>E-_Kfb%s7Fh#9Uo4#W!fN9ON4Osd#X
zC(7!d$sa(Iz|}PqzVpG9^`3HS9J<pI-6+NC=M2yLr8&Fhv|s<mnY_{gq#ka;rn`43
zgS3u_1)UAew6lr&!2@XQYmUi3uOpXGdAm^<|E1j$#`m97k%W#I*MJx-dSn|CwiA%u
zUe+y;G`mn^YLfV(AG$$N!pS~C8!Q#`ddrPyyzFu<B8cg5Xo|^2viU*zCLid>S>vIP
zhq+F!Fd~&OR{TQSWscvOk0yvjI?4p*a!!U;A3$_ZX;5jV`p89@vaz{Uo37WWCKkD7
zT}NziDf<wCYJfR!Ajx$It-bVIMf2m0WzL|$GSXNxJk0Hw7%ITBB|z+2>tfXEgEwP9
z!dP$&g8^LjUE6OoUp67Nv6Sj*a^yo;t=$N;wbRp?rRUvR01ZE4i;<^<paYmMVA<iJ
za3ebhA@ir}0Gm@SKrOwzQDkC=dO!M;F#Fqmpn2*ul({l0g9{F>reSD*$H^!=g<Hr7
zdc%GJEMjd}Hz8Na8G7x%-zBJp#r}7sL@aTj)orV#X?U4v*x0o^h3?CT3dg0XWsPoV
za}5~ozy8<?SYk!=zA7_3hVskoDhhijVT3RFf@^c!9wui^PHKTyVt^EYY?gH?v5B<;
zcvLnBL}DPHNmOe7iD_2>N$ktfny!zYsQ)%5xK1fH`tX8x=!2vpRR&39)+`V=k;@2F
zp^rdesRl%Qu=$$#*E)d=fDk4iY7{k*AvQ+7Yj?iQct0VmQ@9d+t8Kjvf<hfEt5;`T
z%2-kcCj!+`zBZ~zgEjo@*BIc`y9Ken@bgoZ>Z2J8<*Wa;R|_j%O&2Tds9MhN1$2L6
z;VV1CAQ+<w@MagmP5?Y*#GA~#->_&_THGjq=nRX4XL8MfLm-Lyjd&fKP1GIBJ|4a4
zQJj6a$nOk_tl1g#%2d>c7O5I0xaGTFrl!UPZ63RjfrRD7Ln06o6R$=*J9&%mHar~B
zI9`Ppmz@lDLEXv&%;aaj7#?+G$&LNm5eAkdg>ZdntfoDM&UuC=aVB?}gqoiO`#>`w
zlOE>f@c%I%8I0x0QanX=>F7J?lFrHZS#bgq>Jh?k@T-p|DSK8|wMpH7g{7*O74JL|
z(`Yv+2BbP!=!p$+45%0g$t(E#fx^Tvp3wFQJ5d4b`m4@&!mNc$;mEZi<uYomSWUoP
zX^@I2$roT>;?TBhjQ-_lv%8aK*hhqu7I>k#OVq_Lo%%+b!hywH$KJVF===0iFC`b9
zD442MQjtN|rB}RN^8?H`Ed9#CnDeiZqxOwtFs~%v=cEfixo&qjKUtY;XAZ5qy+1}>
ztzhY+Ng$L|T|BH}PKHl;pZ2dxdrMxV@sc_MJ;7Wd%F+RnlfY^8(norcNYu-sL*G?3
zC~WJaa%>LUl0B%iuCpXr>I+3gS;ERVef}?<riEL3{=lHGsOL9>+GjBZjY)Ld`QQdj
zT@v-^Kpa^Z4~Og)S;)10o~uO<c%LQ}Mw{oDqi=ij1TK=U*R0Op`;U?7vbglYGBcc{
z$`NIO)B6x8r|aMd4h__<a0Cr(2o$h@RVYWqK1T{XjV7-BvUfVxHSnQAp;QD@<9*`6
zd4#YmjSxh-i%veWKX&7JrW6JVl8xQj2Z``1)Q%9ULb(ZA*<}4Zj!~R?1mj9^v=<#L
z8=dqrD|68~o1H#CCcA^s@?aDdR%+eYZ(C?z9}EFCxDq?7K4!u~Cr+Z36Dxq`tXx@Z
zFf;;RV8#VmRqq^d=ED?gz=Cr**@((&#{)9U4}Vc@VXyVRljf(EVwqZ{W>jAyicZlx
zg8-;MV<0^}u%6gAtQbhKmwypb4$B1*5kE~>B`+X^cG-ZvI8i3a-H@^@$z=)*^Rjep
zTV7sH1c^b)?7U&p7ss_2c3<c=E~bEsU7X=Gf1HATep|a>mv?;>69VP11gbCl_Gv1_
zE7En@H1Kj26|qpwb<&>J9TA;_JJA7jxn<kN6yt#aWZ~l+X19W)9({PZq6|ze<Ra-r
zWS7i?qwpv<)>9ypd6=Dx3h}ga`EotOL!(>*JwUZ5Uu^W6>FTxe?Ts^fr7}ONf2$pH
zpLF5*JUGlYT@Jw?5d*_4Y`g=J4R4??HbuX2lb54JkSH#vs6yp`s8I!OX96mMYYK6@
zJ8RW?v>mhp^4}3+%iy@$lt8xy%oumWwbCRt%zuXSzPj(U6o0Mra?MT{u(0B?OB-IP
zU={2T`Ei#Fk`~HjA<=FV%W^XvMBiMwrj1)B2-_&t@4Vdp2~<<_&Q0)6B`&W}NwapH
zfnSNidm`Q`G~dPU7JbPZqe?MkwA&kYcJ&l^>ARSy=F}nmPi_ba5Lc(*y>iVC>0Yv8
z!T&*uq8J^<xlmlDBlW_eUYp((h$V<7wm-vUh<KywEI&h$P+HJ}ZQ%CdapY+T=>pK@
zpbq7am<rX2e;0L+C1CEwUqWV~+$F8P;FWZWG0?1=l-=MF=-GJ-4uiIAxA#3Rpc#m6
zJnAh{pFKtzAUA0bxL_Mc5qq_ImVh@2=B?LwVRKtuE7^xh3co6V=yx-9tF?8l$=%X1
zUSX8{)Cgqc9vO+hTy`)s_wIUvors5}6)s>=c}GANZzP}DFdXt9WOG+f^`lb6pfe|2
zoPSmS)fbEBDe1#fHt(6KK8y+h0HL6=<O9OFDN11hln&gjdU|ejH3bG}GMaeo_!a}&
zOT#x~1MM5LHmIP*aw9W@DjLII{F@DxM2cl-P(PMXu8?^Kyji8?b-7hpT^ZBcl#)+8
zSk&a^Km)=BTvBu)HdcILW{JX<Ms$gHWzYk!|KA$-_w7tjS~Uvoco}QE>N1`}Etb<&
zY4v5R3pK@W6_J{QU|IixN)!W1A)Qkj_lDagEF+PNeaW_bolSCZ^*{Z50KvugK@C{1
zR6FUz<5R24^L}8dYo@}mamS(^%<&h9Ba|knWJQNf1$nw>2&yM{InWn<jn(3JDa)>g
z;2LlVjaa9i_pU>h9oZE1chJh4+0k!9T>PHJE~K}KJT+F>r(cR}X2NzpMGX%WVf{Jj
zeI2m?_lRlP+354iXyEkVTWkIWCLqv(_iPdn!t>;bmgOy2>5OgcSy@<B&6OkF@i`kx
zpE8fX<HNx+6@wRL>P4B({$-ktreIT8QTwEKYQ;JEzem@U8c`dLAr!XN&&$JMa_*w$
z3u()A$wC!mG1cP##*i&dEz$)DnXhT>P`9ta{#J>VaLTE(4u;OOs_A;AOU{I$qES&u
z4~zFZcyu%u>t;$F#^ThoZa)<FbMc!Q5Ed`R#+9&kD@S1=^?3DF`kcz)=R1H@^^(|3
z|E~Qs<sb7QFC20^d}{wPx`Ed6HoV~#kOL^U(g&+w=h3I+^7!Hy0b`3urN=qB4+FtC
zYobP60xE?IY`ljxCvkk=3etw!9;}6zO12Uvn))gVgUR$>(fFVtUt6gZS?WK?tPMY!
z!t+^W+coh5K*E_aD0}u-?k}*5jZNjVid>=MTU?`xt*5sTjnl?Q21wfzZdJB5<{lI$
z(9e`e7hrL|hVY~WYU?J5W;mGeAVo;nda7Sas<WEi1mSxjqP3drQsZ;m)qb)(*~cyo
z&>WW~Zfd!R>0mNI*CYx_dj?~HY!!ZL&J+>)j}Ky#aoP|$Ugp^hc85*yVm_Km)$y?r
z`2?J?w+^f&)lt``o~>)fP+bx7Nw?m08Uz9W4$we4IsTZ%id{g9g6MDDC7OsyNL6tB
zXpIB<`c#o4^3HS9GU5fpA$pC+%ocHcCW_z#Rib=X=yDB#CFz3QGP{Ycv2^8I!e80f
zL{<bc5&Z<J^QY0@)qFMEaEpE7w!K4_FJD`gMTSH?Wm)(y*2Ft7zFl+A5?he<B=<GJ
zEiqE1+Arxhc~#1TGd3!jBX~4q&VZ6xIop{#S!lBXiG%s<B2IelCVaggXV8#(;^wZf
zTCGprZ(0Ty8jkoutl&h;vLwSTo)Qt>><2GfSUa_iJ7P}oa%pk1zO<i7Su&WYKLDk7
z$<O4b_FIKWx@JH%gL~7t@+x)-K{5rtutI?aYi;|2jQBb?(PA>Kbwg37ac)(6c(JHL
zWHaZAamsbVMN_K*4JoVi3r@iPf$-DBNFRFdTJC!gFOr7t4m`O6TSbNJ+X{O2vbWn2
zQt(o+E)R=$kJ|NuZ${Wx*>tb4!Fq0i!Mgh}gkw!gY9x0hf<Nl&^V?fX!lJqE^Vr2r
zT=*|mYwm<)heXV#iE^e$2Q28n`2_2Y#cX(_BX^7{|EGFsH96O(vter7S1w=_eU@l?
zCHrLkRhvL>zuzvGImRR@$X28Yvyc~rBfAXp&oZ%q0K{9%Is=U7`?>49fPsrZR^UF9
zhpHy38%fxW&%2_U8#L43fUa4(>kPYKxS~>?p}&}s02+|Xm}*m?<l`c=RR>f_k(JYY
zK~_7yywYfYOGGuEi+LkirLdx&z^O7!=*kGs$(+4)^2S0@U~7$SkaV@=A(IMQ@<u;&
z>bN7h)Id=a6UpQxSBTrOKy;tf5=n!l@9-2ngK1!$CssM$w(YyqyOvPct!PhF-eAdA
zPy`FRnCL8_lg>GEnIx;pv2Cw^L$!yyP|q9egp<?XxZ@Vbrx;!wR>lI7iBEK~X1?wH
zE&rv0aJ@P6!TA_%*5!%i{)xJuWB`D}#l653ACIR+M<FN^l1G7m!3$|-*sTVPf)>8b
zbOYu}KMgu<Xusks!<)2DCjQ(Tp+~4g82EMObcGkryYnC=k=FB~k;o_fQXl>Bvr^am
zBYDx+X-qn%rEwusA#uk0zPAG2jfFS^tHVbsx|pOo(%utZcnJ5oSIY}t^(upzd6f0Y
zSsRFUS_K6lk8+PZ4zw}n5=vfH^V2Wk*!yhSeldUfBB3BYzV8oz>39pIHJIqbV+Jpf
z<xLvfK}!xaNYZHu#a8|TlJgTk54*_zX*tq*+exf7k3t%JXx|#5Ms!RH4;SnjehCE>
zagEmqr#?U7*sj#bs(mqJ)Y>C*F7a^Q9xI^~BJ`ReThE^bxUe6MGl$pJRNDaQ$*;l_
zkO^LkodcC82qncp-R{V7J%hX$H<gqETp%WuyF>Psp>`)<l!M;M=~nWVz15#+Ta+w8
z_AP<&reU_L%<VxiclbdS#a#3%3$fnxlU@p#v^O>5joRb)B`G4{(_R1sdJG1?L$RAw
zAf_fuRC~p9csDA)wa8u>vbmM#o;K-Bi6tCv&hJ%AaYN|>yW`!keRco88KT37`vxUb
zOLJ&T1I+5L;I}$FzXdtMzH@vJtHzGoMU-^&+FauuaSP3e&uax55e2C>2mN%e;Z4dR
zH)6FkrCICMI9ymxgMWD+C`JNuQBr>ysJ6tD;R0Bm;F$3_x^vm7Mh<)VronrNoC8Ze
z#xWH#PF9PACP-P=#*ySX5pA4Z5x?~hB{`#!;U26J;LJdC(e>Q(NvObg8Egt(fwIdQ
zDijeE=A=`h<yRT!Aqj8`X9)SNXPuRAe}{-tpW#B@&AoZ3nrL~_k^2A<73%)%+=M>}
z<^PQ*FOW+Cb()o<PjwiNzICO$DekSa>tk<-m|?swf~)K?^zZE7>Pa4P^I69~o(MKo
zo8oW_ZK$f~Zr+Btd26y4I)mBzr}D9sbGf{DXNLyba33P>>ikDzG!42Q@T^2;c(|DV
z?@sg^qt6{}be#i!=VJ&`yFlIAS2p69@~fHCll1F;&C?P{aYq8S4KYZMTa76}TpSJd
z;~UQN4zOz8enw_zP_Tb$@#ljdAM!AXJrk&?A$IKjgTTu140VOGF~W86d&mMpd$}*5
zFMXZUuJz#fmp?Lu^22SrE)r>%P~f#agj#8Tzw#yxcl|2JNqYEaFO8tl`LBLBeL7>>
z$*w!PibU?QW2TsN6B$p>p1J|Z*1%ExLw9%o^mPF>7X%oz=irt+Pu;l6dz`KpcGJ-v
zo%$kSjVb47zh?#>)PIod$9^%^gG6Ybf&l!bq8l7gV&^gLxCJ8l$BmjjnbEge;ZO~T
zu#|ztc<+i?dr(qMG~+`)ibDe)^rVt3N$lvH0Ah85Y$rz?Y_qKFIKG3<t8Zfm&Sy$A
z#oDk0F&s~Wk>V076yz_06GA5$Veus@PM{k+kj=A51Yc?<NWt~A^)k`JZ4n67P<gFi
z^4*Qz6p5eEk-2T(c@TgV!5N&GX7JRFgwz1L>9{d68ewF!e%3e+MmLFc1``yCzQw}F
zjR7ePnRD7VTDA07&32AAzr0cuGf+=j^@emB)Id5NEr^0R7p8FtzGm6X4Vc^|6;^}w
z7a!^nnK&Nj8HbK%i84PbTfJyzKj&_b9Gr)-=)OW|N4p0E5_J7qt#gQM8JAhvV2qVQ
zvI~sS38_fkV-+ip6b6|k6Oo@_tXFo$q%n`h>wj0B+V;NdVq_6pOoU#l6AB1h{v~;6
z<d_a^5ofGGGaM0H@7qI&e3~PdXVblnV3Pr^kh08x1q6oUvk{bFd%@(Z@fRKT<5oIM
zJQ`8z|5ojHreKoLu8VY}J8BNiEKG?uPoC$a{yVINkC|_>>w`Yff4!px$YdtbUpyK%
zbwxeQnBggMOIgktL2GVi4&T<aCrP$k>x=l!MVJTc={#@h{s^BO+kD6q!M^l5qX2k#
zbYZE2kg>Rz6bTBB&I?Er^$CJF^W@L=iY(iz*NMHAXHddAGTG|}%d5@^h9b{Aw^!a9
zr(M51iW%L;#jFph=cgcw-HvPvwJsWnJo;Nrl&3;?9Kf?VV_G^KAPDDV3Pr~VbG{+{
zk#@<Ic17O0VcVI@Bw}tBlpt$l8=P9=$*%r*7<j<!zxnGd8Oia?Uw!#Swd^uyrl}J@
zVfaG+8xynaYtY`>1DbYh7ar#U;?ppmiP44S=YH#PH<DEH?xNeXiOkX*04bkhIM-bc
zxZ>lxx$w>#(t^uXdAEVgn=|(!*xtB2NT!HD{%TpK!h0#nbpwR*!+{eRouZ_eusIGk
z9yA_z{HX<kP{sasG8U~GU3V8#Rvkrlb~XvUeHknSm(-<S_Jh+FlV_Jp(mo$jx3AAo
zMnDfy-ugPid3nMlu!uuhNfyq0US30O8fgGOBAoU-MC|v3RW?sq#sDiV7NsD)34Ene
zt<Z4kM}%|?D$bnimygPTV4uo~LvL07pkJ=VE4M=_0Gw8lZc-f?$hL)P#}QCU#O_lM
zgZx77BK$4{A@PTBZD>Er#$-b>sBAR4N}}_X)f2jT+)1oGD#_DWciAulBtMBA70=`{
z1mYu6fl~jvGpOgw^~h4h>$?zD-8!4ds{BPG>0vzjOcgC~Ws^ZvM5N3PP2Q`(gS6fs
z6TcrMP%mOBbB6jS9_+(7qICZCPVoR7h3-2ia_5#eZy=l&>0-%&4`qli2M?ugy#zJ0
zp7~J^&)Q9N9>t`9)PJb>dVHX+<F8GtPj-c+1unC^P*@WVxdJbP)6HPX)kn5W-cYCb
zdZrbXWZXF{DMOsE>Dy^*DG+cxbXJDux5(0Bf!r0*WTc41#%#)j%)=n8J!#J$;Z6!-
zu?Wf;0k|K&fd9U&3ZHlO;hj!z(_AwzmOiXE&Mea!^3{_A$%Ok57IOknxhon-udP2H
zv{zELw`N!tRtM*QLlP5*JZMH7GX3FSoa|!@s5~YR04Wga)$?`ItScXmS@Lg0%G-GP
zO_#2xv{f9VT8-cEL5L|wsNcdg`>qI-a2dBvNdYcXRWl&W%>f}=zVc#;s?UMlZa1wr
zsrVN{{F+P{E83?0G}5LOkJMfed{4-fp*5tHA=138>wXcCAkUQd2dQNSVs`O!zSs)L
zu4P7W7I{&si>xP^u%;hHtAaYDm)1odL0EOx;UkA;&4}z_zqGBCI$<5ZBx=iM5DK-j
z45tL30HXLYfLC}Of)WI748>TJ<MxKRh=7llZ&z!hFw~KpM_o_NsW=<ip_Gwue{??V
z5(X(>gP2j|ZI}}I4OUA~XAE#rtobI%d|9xwopyw-+tUw4+3x{rG7b%)TkU@NjEw$n
zRx(zidr3oJ;MevYB6wQa6Uf%>(wd8rtqq3+Kz4H&t<ee2fMXtFU904bb(7(hZc7Sm
zxZnIW-VUWuxboS5Dt$6-eDLt-5wh#Zx@o!9Iy0uHw@kH7Jn<ZKF^p_%bh3s4^i2B<
zye~&L<B}_6yA^T~Vofpj|8_Cxy!)C7Ml@it$K7uC3Mh^^N?Sx`aVUfGEhb(TpLmp%
zYBI^L7T$b5J6UpCBsG8#ndE|4#4#Gj<{z)f)r9h$I_tF_1}gC$OVkYsTr85>Ei31o
zg6zDVvp4RU$2mDXHdBwRpVihP+PtZRWSnIZsJ{;MB_49}=#H|4QS{y5hy7wPt?D;Z
zV|Nc?Dj>qaw&)pvuS{$pxRNrdZmLJlw;A1ST%V_6<@6@&72Uq<SQ8{3RshbAma=~S
z&N^&DqsUCG%CcVJPiydqQ(h=)k-74(Pm&#?l}SHKIY3{C!YEAJ#lCG@_t!YMQLk=f
znW$k&)}sr6Lj_VW<@OgiUmSa2;y~HblpY9J1Qa=n#)P+2jj+Rr`2TVm<F|4R+(GGY
zwHe8;$|8s*KF)D~N@Kt-NejFQRVD*8UJLvRm0mJpV2f=KhB*?tq6AP<=M`e1a`h4K
zlHL>80GgU#2ayBakDw3A5GMXiXh7NL@O1tOmmcsteC$;Z9H+=eA<CVWuq@aXsgy(j
z3jRO64r$O<@d#TOHHKUc?oy<c-}W4`HMxyU8LYz)-;xb%JGFpijef#G@N$@T>e=5}
zN)x9l#=zkTu=}hrz800AV!s8l+#2C2ltwRW>j(oi^`m_iuj+duvt#4xVM)a^;<8*5
zM~s#${W{M3Jn{`g`Zz5g-PwCEl&Xr6XG8sr2zM(BTfG)jTc4k`WjHS@mabm)!IHH)
zdyz6jI5QWg;O1c($nNQ-?f;3#c|#hV)Z88~pG>|KZ*P)}_vNi@p_AaKZt?DxHGOXq
z9;)l%g&&QQ*`RMvEO5{`H%&6?hR(pXsNiXY^QWzlC6XeKR7+*h)Gh4BtA_4L<jv3e
zDM$@A`Uqat)*CfuQ<~eBTZ$o4(jbjh`|Nww+m^IhH-6b4OQajA%<YA{C-sT@bW_4E
zp1HAe(-<)p^4PmMKu?;vDVLZsp%Fx(#TjN==Kv@Br4O)m@|}IY!i^Ufleo<^kFB1L
zm&L8vfw{_j-M6vSsuSqOk1bR|Hxi)I%|Ap_qA1XDD<KZ|4{{ED&e{tfJV9{P)ydix
z%khu4(;-;v#20Q9n4=V{IKQgJt&T*IvKFpOIKx4!7hSJgTivq4Mi)f`IFViQSpBna
z_%z4?3^=vfi&vy=N4;Z*i#(Stwg8WLqs~pRXAIC@6P+nmLpC4=S>vH7i9dYDf44|S
zKa%4BLCcGY=(N8Yf$tw|pxJ1;myEOY$UhYAFAb4}ak4|ci=%o{jH#u}++EHKAe5by
zzvX!?O@SJzQ{B42qogG&o1-6@+#~{G0z>ZQFRHN8w*ylQ)W)hq<UVIx?Jw0n!<%?u
zRl8dS<AvFG@(FO-vB=jpYR1dg<_cW5??8g?+R$B$8mPRaobW>B&V{%l7Ris`<hpO*
z(Q!wNFB1_Uoxm1Ko>CRk_(fM9oqgDX@QJ-*`$#KZsskS4$fj)mpdTC9<N!3~j2lI5
zrEA_jpI8?cJ%2D$EySNPHM~`;AscN_X`F!Evy_XIOgYJZ?2P`PPCg>%%{e8&T1CA(
z3>tK?SE5aV@kf0+aa;Rm-R4WEVbYyb=_o;xH`kWDCtW&HfS5O}{YMJ(hV$X=TRGL@
zPYYWh?&-k&O?PY}rWL#L%`nS=68Wy`B723z*5OB)n7D~A<A%ph_pX=MIHBiA`?h?_
zG>&>-W`2=%FJjf+(8pIT6_s#wwsY$RRU)w<c{1JI^1G`!K#4KBcc@FFCXv*L>}{i1
zO#z<KS>U7bEdGWYh@mQnBTqw9a*e&6-&rH>P>9L(^z;<=yp$<_*(pWEga6|j{<)9I
z2BZ}@7+J3i8QJz~h1VAD5=@IFHz~00&e*`ki&IUjc8M(R1Lo@8t);U;KE7o^eelL_
zk^IwJug||HtO0FH;Y(Cq?tvwTgO<4a->I`wM5|cGQ^e6hog-WF19>?tSPGUC+q??g
zep|gEX=l9wI=P%%BmiQEMoQ(!$`z+H)7Gxpc&SgysIJB@ONOBJ!TX%|6E>z{GJuOh
zz^j-kna{#dp46fkg|Xbj2;uZvp#i9=^MSm8zCA7@_|0Hq0vNU*SMXi$wO88Wtr*`r
zw~udWtSq(I@_7X~2pE0D@lWC*S$A76#D_9nm2Y=iQm+M&^g<H%t$r&%`^1u=tCSgm
zQ`@x7`lAZhW2;I1Z3NJtDE=3?qDtC#!D;LsPY;Q>lBuJ|cl$C|^iZ9HA=NLHAC&Sg
zG{~$qC2lT;d<)3Hf85*dh!jaw`-~wdA+eD${7cxIqI$uFR;>fU5s1~kQ)V7RA1gGB
zYFjFEY}uh$h_dKYlX2(!+YAy`SX^ZVa+_q}?rq#7$!@%cuxgbELvIB^9|Mc1SWp-p
z%s@S_{qx{WnA_6%eO7Ib%SuP`DBik0snqy-Z#15S9vfXiM|&kio`FJ+X6jXA58t4P
z7AQi7X*0+R4L{!_WyBI>dC!_ttj6bF)o2Q4>g?UCs6FV$xvieHBb-O3`-6A{6)q9k
zU{@aq0Nj=<)HzVinEh0{dI_M~dffki1f++>;WucOTG-r?8(5Z`L#Tl^eA6j(qLJ;a
zsF4HRM}DkB5!Jz`Q;6h(drP8q3A=G;*bU`uiqXcgTNmt>ttEIkR$pw?h3if^GJ{w$
z=<KJX+y0eaXTV>%-OiTh=<JB569wNM@|@DaEyJKwR>~R0+7HKCNe1sKhQHdj{cV1^
z9G7bzPReguT7NRb$)`+Zbrw(|AI>XRmIF%jnaAl?E>`aL+O253H?-+??vP?`lDIbv
z6ZDogZL%RDPm8ORtrqP~aa*UKg8=re#|;AMpVQ#9$hdW(P<AFkhG0bQyD2G0mh8(H
z#7r=)^U!y6Wg`nKv=l3*Mf{0VgM`3zcCS}Z5VgYJ>yz~+Jtu+&3O{1&it~A}Q$e53
zhlb?LZfM>?jWryo>`Wlw7=ALwgQrz?rKkY^KLEhgFS)f5<ZCD(pOir*yS?JmmsLuN
zMTycLXd-us6a4e6I&$Un??VZ-mN+RhA%2~%MZ6-UtM)vA$b7(m<I#t2>ke2LlrL(_
z*v<;>;V_Y-Y#+`cOg<qj{o+S#W~2v5a&n&DznLuSkbljh$>VOZ6~ZbBmowMM#y;mG
zLa(fLiOcWK$`dL#mRI(p^EShpnpB;8xtOCPwD}m9$xMGduFz-rR9MK&YxqAFYTsJ|
zQhC{lgdEy_WJ|Sm3O!X)45%*IR&mucSj;e&q7FcrXwKxG_|i}2WGPhQ>8&XM>nT$1
zL?FYD<9H}Cn*QYMk^fi`E~do*iDzdKNOo1R{z*11BphsCy&4SCL(}jlxF4A0&SJam
zxm9T#*PoS@c8R3;XyPisttr-es{s)ArtPmrDc0yhr?fAx+vDzbw)l92*u-%C%;KJ{
z`5xN@FjQQp<Zg3F^u2Sk#~|cTJ6O$E9=^O~#qXAj$nBi({(=!q0q!P9FSV?5`#R*|
zoB^jhY3f`-6>BACi?D)UBwHA3qk&`VEnl?(>eFS^X6j^e6T75~SoGg=t-(gJaS(+4
z_2;(9yL)%SZTQ+BN?Y<I9%2^uNJfIvEajliaN1@qcwPq>^*1=e6DKZqRH=k=TO{x5
ze6Kcf16nF#eEXZg)>6^m)TD$xSTFQ3E{vZ%#L?+vpJ<!CS`Z}E$c%yhGe9v@k@8mV
zC23Vxi9fVeRHHO~0s9v6q}Z{NFs$8ToQ-|fM9^L_Gqf$hKT6>3aoyPi`kWnz+T8x7
z59{EGT=Y7L4R{$zT3tkxz_XKvsH2k{mW4=UIAtb-L4G8)y6O+3x+a1rGWQLS$sKaU
zV>ahWTgXZB)R^rq9G`*ieS&;nX0blLWF(aPTV^A5tG*R<^%bHNeh_5Yv<Wh-J?18)
zV`!Y6F`QteF;r>ciJlD=Yf-I6&lO5C+!%((6NRE^&|UxPX4{hrRt%o_z&ERCgnr~A
z=ZQ)>QlLF42l=nZM+u6#!V&eWFGO)Y5kY9fX|(&$ii35R_I(=9PqOcRc5&v?P0g3*
zKd^d~()QG0_TJv!<N0{-mgoL&|HhG>GN0&sRhQn59JFRt4tsw!>AF=#BW*z4$Pm6u
z7yLbJMuXKI{HCQZ8efI(U9|#-DR|wcfuSIJR$zF5>;KK)1(^|n!XKe^F?2kzJ3s7S
z^UtDor!ld1#QX?sqo2R%ZE@q7BBk95Z&)Ajw&OM$-dnoihL^|nz@qE*k&NadfH0->
zuGUh`N<jLO5t^P(eX2boxctCsYhBfg7Em$!&vIzfxG@r%7^62cgGK)|(Zn-b5!t1$
zm_u-QO1T=RCV>C=f6+#tlR`<Oq(iKG_vzhBK6zrE^ffax<e02v-2!;vb!zm11e$Y-
z-FHeY;Lg}n0d`i}-M$=gr;Aco1{#YnU?j<&c!<P056*VYZswh<O!uBhQ!t>IbMXxH
z<C=joPJY{x5kODeyZljhsK(Z(?Hoj2UzN6h+Ft3qy8$9zcqqzFK3vI+k?MStr1n<7
zgJ#8!KlL(t#9g>DKZZc`gthXRuo-u;*9{sFgbNujn=#@Sg`o<aYg4SYUcZ%UaVi}X
zcM3`ejKO-h2tF9IK7fWu08-IBMI)9_o|rk08_upBGr*Rm)4!p96tL4ZaKd?{U-kZM
zf{PS?MjLy;R@=UVxb6BEo9)aHm(X%43d`cGTJo>Oo(1B~Qm9!Alo*KJ;vlMX=@wyw
zc$qZs!boM%xu7YI^Uk2a+ZLF9q}7FSv*SDjMG9D{3cY0$7N<!HFi(k0%)unCtF0^G
zb;c=!s*TBDPzbxJg_V4b3DZt~3Khyz^kI4|VkKCocDldzm#lg<Edo|wM3rbTKKrHp
zR&Zg72g6~-47PDthR!iXgv1(2)lWCwI-}I<zMS?Q`AIAvQWT>MlKG3D1K`%$m8;)f
zrkEw_{D*A45y<3LPu-;{H)9m3v&NI$RXw_7)J_S4)A%0F2O7oL%^yyG#g#=W)6?n9
zTyfD<gAQT;V#_#tfJ9=^f?$~<9<>}Q7MP8k7^yXqDDWAfB#1hMx89}zPZk!AJjD0j
zYu?+4%68Dl4;a|37&m+n$<iD}XRV%Kbk*=0<ArhCWmab4LR%|1<w><G)%Dg>Nxlve
z*#hQNyKEQde-2~g0Rhx*b_2{ce~CkRyGzim%TWn5R&<b9&F~$aEEbLjtIrKhwX-u+
zt&}|sb&Q-HYHVLtr8%HLKfx3EzEfm<IiOv_f5IQ)(M(aA-UxWdLzsy(Mb%L;+(ech
zey>!UEO#TYn=iULO?><!!A&k0=M4w%3ssL7*Jql!{~@h2PbtL?Fm^ssg0#;R#8ldD
zx~5du4C*M4Ex!Xt0V&=zELaxSbyDEpLpYE;1SDm1E&^Pa9@S6B+iwpwqvQpf-<Xb`
zGy-hju#BOOAI2AA*^aW512!7~WSc<6CZ5;j8}BDcdK`BIe8k=PmCk=T|7I!}3B~ea
z^y>Q(AsY3q98ktWzkx7u5bAw+TyW(_{YVNaFnEU9CPrJ#!H8My=#(HM1VjiiYD%H6
zbY-i>9f5}lxOP|2O+Y)co2(OQI0Mqv(U3Y%u39}0PA*PF$T8ulo)>rpc1YGr-wXT2
zMaQnFc}8XL%84Y8<M{K15<*X^uN9E~0sI0EA7MV6JJ)Of7?CPIk{wT#&4x&Uc0Fi#
zFe0jEof%%fbvo!`XBgw)Jk<6QkNM;M&(XxFbXgP}E709Vx?;;3RAyvPE_E#HQ`hwe
zJnTDfI<>|e<|VSdN%Tbg(1J6oss>t{ftbjK<KCF^;~qu7V{$=O<yf@SVXR3O5YUqo
zah|CUTnrZ)^I{ZivtgOFu3n05I#MQkuY|obo!_cLo#>YL(Uv5r6Jy_hG<?CG&&+$b
zeSJN7AUr#a98k+%B^eb0Awg*?RTRA8!AV4hV>`~U2`-6kN6<)A&j6mx*?R5`bEkO+
znOG5ppm!OZK?229p&YS`$7THxy9bF>!KW?is*_c3h2qsy0}#Vo)&1HaFXb*wyO+em
z($(6ZTvER^5c|2XqIwU4Bvd{}<kj);XrA5ZUAHK(%3CDnfmNLBz?yBTcwE5mAtoT}
z;S-Y2m-0Fp--Ex?W7~K*2P;&$7M>hjV&A@=!@yZ9J4E14md5qG7u9yro91}K?8t0T
zU5nI@%7;woZY>CgmY7?FWBMe=kCnF7ecyaK#mFs|>IRTP7~IdVYb1dE`$5Z~bXh(n
zl$z4`uYG<}%mD;WrybAwb$2+_XDS7V92sWr*-0g?WZ?2OP@2WUh?xGV<CNeZJ0Tc-
z?rXul{Z)|aN(D2qv6rP9yt=XT2LJ%LEw;<BjW)x5Yp;ZC3Gv_knX&$@{6{NJ2A)Ho
z)(Uo0mGx09f#t`3_P)Xy@GSmc6$ta^aK!&}h0SgFJ+Zg6gGj)j=+z@n5dBCNwG6Pn
z$1`oV=f(zkZ(|V*9-42B?HIJm|8>ggU_As{{g}oH<7HFyH{98Z6W^Dcw+j@D_x<6L
ztEDg~=?@HCQU;wt2$6b|1zpp|XdTx{PcRMW86otl*VZ7K=#W4>>uaL-Tr^Z0qkDfx
z|9g~$u`2|1QLcKRo+TLN$8Ad!llwDtPbKJ0vle&1{x*j8zQSP(O!`S&p+)#(CJtYp
zl3kjJO)xuPi(}N!!U0!v4rV$07#OgaY{tA;a{*TR<`)ghp?PBJ>&xzh9gmd+<K{H0
zBjnF;{FeSlUg>ud3P!&~9y|%8g0U;m&_}8ET;Pw!PmQ0wIA!c6uplMjG=0&VVZ9+x
zyP}4aKN5e4BY$vsbUpW9Wa8^CFoBRI;YSzb*$Gd$=h_12YE=&04NViJVj4&~{ZNeA
zY>*J&=4iCMfk_$O3l9G5Lz=O40}MJ~Fe&NS@l3`rt~nm(lLYTp4!}0rvT^f%a0?0e
zwz6!V6KVu*R?)D1pZyMfTJkdlxMpXCIUl-C(W!h6pn2$d?qJG+njy)?UJoWnxl~+x
zW8h;tq-XHiNRd41D`vll#oKGK$Flu0k{$Qj;9h1WOo=Ftqxrmv^K|Ts+PA>O>}2+j
z&2GHgrLTy#0H&wvzaOOa8sFB9?%5ElhNAn~t?MYqyZlj}Qs)Ocm9_ggWH7HH-D@7b
zDnx~t{qKVlHtBE};Td+!Q`D8~F5srKt~*ib(xEKJzQPs?*z@!lbIE)qf4Y3L8@Rvu
zM(d9ZDgx?}o4N#s<nxY1?_e@X$DEX_pM5_mv<v<?n<OmMvIo5+-=>Eqwj_Qyg$f3B
z1;?QAUy3>~a@JR?w7$9rXHH%3`O1e1BdmW|{35~!L>|~v#KkN4mhG5vBvd~hxC`v4
zzb}Z{K~5`()SoO3B+A~zDEm-JD~9D>bP&>^&fh8|=JRZ}%PbA-rfLU({R<R76lp_6
zI)KSB)BDBx!2n9PeQoHvOfw%lY1y7Yw-pEvb3P`BfWv;_S7}c8Bv=F9=SfoiHKh5z
za(sHl*Vk6_fG<bD>)Ss_a090RshEloZvNz)^Eq&tG@5`#b#@bkSeS%K<qVrXTk=mv
z29W`FrgUW|9}^+a6w!zgVzX!BL%lE9^rl7PGG~YZU^r7|L>Kxjn-Z$!X{=Y`9Tu9i
zlaaSv&U5KNYQgh!5SzhQ(+bV_QZ=gsV9Ofc_hIno1mc}oRsah)3=Y$dDORJ(7oKP4
zKr%?j8v`kQkknVg;`s0KjXFkRZBkBv4Ta;E1g7yFZ!hm*BKkbKJ^AoSXJ?D_=)=t2
zVN<Q5F$bW?Ufq>vL~Ysq+57M3v>KKbKsXEa8upK~WwP9nUAYLB1VtstZ|OfsA0N+#
zQc%^Pw&%D<VQIAa7Exjlkw3Uu3Kq_sj!1}D$JquPbzhMYC#-#Jwl+84`@p(z6&n|P
z;T-_k36_a3ph*0W@TH(;`znarOsr$$$(&r4fL;G*eb@{{-XQ%-{>iG>V%e^O5eqTR
z--(iUPO-MA*<u%=yz&=Uxye8Ypg+2EJwCvbiJXgqbfZY8cG58g(J8=Kd8yetlda_R
z!8`d`StfF|+1Zw`7mkKwPtytUC@}YBx7{T-xLi=)uhUM$NBsi$m4H<DUaFNLo!`so
zW3_~kD5T67>jnR?d5x&ruCKJNSKNhny|aq8IrQ{#v54)jfQ8wGqS*~|=hIk&g#=p<
zpZ`&)4kiOS*P^`vuz3g-?B2h(kg%Hz7PTEG@bpBd8?zi6lB`I%=A=v;fawsAYygV}
z!wcbu)RjZNa&IXO3i$=vpc9s=b`>f(z@PAFEji`H#s?TNL0ulLAvjM=)J4oJjg=%_
z?|yc_=_y3e#Qic(kM)m6iB<WrUI%CuLz5w=jh2Q&X80W~<lC|23X`<TWCUEwSWDCa
z*N6}p#}Be%CGmwC5jTc^AYYVKbmfl}#G_%7Tc({4J{XAUru@6f<^AKFuYL{9jFGKE
z-XYi>CM+LD5P#W0$!|AP>iY?39V0VukCTQ}HB<WbFXOd6?)N0SkMo}*BTEMM!0|h)
zq_Yr66V9(8WS)d}&E-Fe0yY<q<cYp*v~bQ=h%3X{*?ORPQ52xH)UtWOOE|a=3PQnn
zVrdRn<MJ#Rfxim}xi4U#J=UgsN2T>%Qj8}8A;fen={dgB1-wa1NSck~d*puhFSAJO
zXK)UDLQ#P@_iZj9F02qKy67p~Km`Cz@g#N@XdtJr(<eF8@R`d_<4BsKMMi}>yLrJt
zHD_9Jd0SG61?&PiyS)iPR{j-qziF|CIS>BLvwDmO@aLvAt++5zTU0T%9o^z`x{djP
zDqHMBiq$h&-^&wo)LCY=TjoFGoup`o(-IFNh!pMW=5Fg7Q;$RgG>;pSwRD~7$u4zH
zODZCqYl3)hL$o<F11xe)*;vd<0o?sKP+ES-gBmRa3ne+px^{m%I0J<-aW6z-J{2jm
zU_KIbffAL;P>e50C!1yE0;gBWLSFFYU>Y#q7>f4b$4K$H!2XFv6tbwVBCH7)icHI|
z{lb2E$nzjayNo0h!J>7IgbFPRZNu?|<y<dzxW2RNl`Wf1n`f!kx)18)yEb{M-o-w(
zET_Y)qWY^l{0IIoBLIO?Bjpm$-gQzgo|vyj3Wo>{cnndf3TtrccsC*7a)~ZFm}6hX
zTbLlEu<5l}2mq0}(NC=Yq4J?33xJa@?Q>NMLIYvGSjPtr4ESn}O+BQ<ut3IM<rJ|Q
z`SY*oNn`(mVi&yWXriPnFaQBOT714Zn>tw|^r5VSA=z9Kl&H`Hw)zJJdcvkY&1$6}
z>NutKxL2mh9d`lijSiKf*>=Ix3UVnR^X;@<wp>qct%Dq(4YmD4IWD@Y|CdZB3Vwir
z4mn9g7C#&r7Nk7R2{oG^!2fN|d$iT2<5)RqkAl#n3`Jz5lAkK5e0hYoo)u<cx~$-X
zDE$z0ixwWiD^&0Tj<$Yr7JM$cCLsfo?Eg@gwK(g(Z5oCCk<uRod=YgUm*-qV)X0U}
zri^$Xu;*9rivj%k*f-=<9@y`l=aSZcCW>Yfc~7aI;H~1fZwK;G_<O&?JO=oWt-EV&
zC`vcbVt$DtgqiGa(3_EC>)#*J+y)d=h?2y}+y|djNh;&NUu&;4^tOAGe)SdWT=_e5
zQJ|L#7XhJ0wQ}sAFV#D~Rxpl!-rAcA;Zc$O5p!w&`asw;vlxVjTy$6gSu*JPpOVIJ
zR7<$vp7ZK~-FRUsDT{J$DR7@Tsz=X@GjYTsh=`R8%0~;eJPM&l*vh6QOED`F_*k9s
z%{(MG4_NA}z_32GrQo5yVM&$YlwcZVvT}tV^_w{6&U-L!<K&Rkl9C67n2C?@lL0By
zt^_|caA<wN?HKf&b~_A0f1K)*b-kHSCq#*N({kmYf~#-y{Kyws>V2wL>UO+8rT#}T
zn66y_NLbDENveUVym5O!=RQzadzIYwtXNLrJPW^mf$DrJP#Wr%jB>gqJ^XKOee<JJ
z$@ZrBx(vI;07YDg*jTLaE7}2c0R?*JQz2*`VAkaOC-YP1BXFR^Y!dfM0q4@kM)>mF
zm|(oC`2o)c)*|7Q)PH=SQeTvPeWy%;warG@#bb?9x4rIr{?80Ua5<{gxH10rue0vn
z0C*#t&SxXO`ysqf@2YvQ!FiO~0M_Vrjwc5EW{=5??_Z&;2=JIFH%ayyc;5zGK3Z}{
zNWN-gcZv5Coe-9NM~|Oe3Yknm5PXs{Ebw)}=yZBR4A|;&z-pvVw)BAAIYrXr+I#}<
z&V;lid=klO0p#%t#R#w5d<+QS3ge)WUK#WDKG-r+)yXz6Y&wtki}F<gs40NNh>UCD
zCPH=5E4k5vL$(K=(@?>zIn#-GI_Ts~heHY<@!k*p790J|3p=zoEYwPdar|ouJP$`}
z|BK`jgE&M6@17#s>PA|sGFwuhVgA;>{kZdZx=crNcewJozMlVV{bn^@Zaq;Yl|%bk
z6?jWSzX+XX8`!vS8l_?^PB_UsEVj3l!33HmOv_SJS6jznGm%I_Y~zJ|I$_)3MDvbR
zDeHPq7eT<>8(8LIu(mcrV-t?Q;Qchj?0zak2)Zo?nZUP0i=GWE>9#nK)U!cT+<9%_
z9_emU!6eJ5?VtU{%ryX>xTpVIoD+M+s~#eS+NlCzaVUR{DeGrwFUf54R9w@;j^k5r
zlwRh1n4K{0-y8UJsu6jp(1$`N8Mvw+To@eda!<^dbkwRV?F6c%EFOhG(lj<tz<)Hd
z=nIO|t+CfN^LAi3wZh5<+dOmf_Sh!3)0fd+(#?y|7@Q<*WkRD7ckWtNQp?~x!t*&`
zC8NCTN<h~agh{VXjU<=H!dr73FG91bbjo~wG|_{N&|0gEHl4+nJuz9dp0BkB=y*Iw
zk;j;yt@${2HW-Z_?&Xhq^n!{+fSBX+@bMMa1hB9Kfi2II@3#rP=jt9FCvIw#$*Z;`
zS;PbKoC=Z)l26Rm6zoq8)|z^7-6K9_yM$`LiodWqiJ7j^UQ9>)1x}^8bvL2-M#moK
z7ILqn!aql|q_cuVk%BN9md&}hrn*2OT<56hN+(gPb%r7mm{6zXTo6(S33g49X5-_F
zGsV?9_K6?g2jU;Zt$}nhu%K1uLWVDqN2uXuIozH-tRf2uveb|fWL_|M5k-4+)Mb_F
zIG2OY966H{n@0AiAWSp)1(#{~)J+ts=`e!!nsXg|Qj35wdjDR$oYRIwj%?3M`#USj
zfHn?}hQOgq&SN38NSY?UDcruV1G2c|pOld2FW+RV)qjky7wpI^78dt_fZ==Ou_9p(
zCEkB%CDUyYxm1EKG2V1jBo~6au7S^*O-OajbmU^;nO(-GU#`?dur+nZxR4#PmdhOd
zJ=dGC={3vkzw;&TYPoOog(<xTL0DPq0Q(55`exekHDSJD&gj*i?Ziki;WS4e(`WF5
zXuk@wt@8Qd_7UJ#E0nk*j)6)qwxiRoEZ+04SQFw9vm%=?J)pY1=9~&%%ZMLhb%DS-
z%kpT~7D&pVectY;_}WW5ztZ4CP|Zq|t5_RT=bPL0l#Yzv7$X3iiKG_tNZaS2R9mQo
z(|!G<i4KOSo70NB6v3{1EPdNdtcGRn`LXs#z^lCu?lpb2@Vd#XxdD;%^H<d(NijVu
zY${p)rKYu~;M-5;>gMe{dPqLBy#XBGL>5xl=X$WU+q@TE&{98@5fuOQf*Taeq*~|o
zP>yr%c<$uds*0R~i)@Q3^gKv+8_VA~H%)Q{&ygJ{D_Bf<M<4&(ESv6lv+N@M)(103
zjoN9SW24V@mzo+V9zrKqBYx6YKxlTN)}=gl^ABA5&0q<F6mI+hq<9+0I(A-R>1o7b
zZo4Q;K^*h~vdT?^G<tGmj3v`*LOgqUMUf@9HBolHW-^GMa+HWxo1gWBGoKLuZpMGy
zJDj7o%uqbSH-Jo{4v3QVw*lIc+!&et_7%5)ASs}-SF(aa!>BoCj&5~XBvgo1Iw1;@
zI6hysm)`voT9T`=*CJfn+iEiI4?vGtRZJrX_98*^Fo6x^V?1#pH@j*Vtz$|7e1WEz
zJ%?!)%h<9)i#)$ijJI{+gTFC^CshHk#`4=UX^5dq*PQgfZ>0GGjc0br4&l+F2)X^>
z3Awlb6gnwJ;boio_{7V2M6xx5rJdh0rfcJO_DaCW7#=aWg`ZE6&?YNv_)LS=)_Xj@
zxy#;$f0TXTl2B3AK;bF87MCVy%jsl{GiP`FP+&1{MfeBp&dQcuqpSSeE*kUK)q^tE
z;o1U!-|qc7T$AK0AeZ<%Qp%%3)7~B&DT<B>4zzv#Qs(e=s3R7N%p@KT0&A+Qz~^sS
zHG~zeUg#Q&k_3L-=xo6UO8amcZ>f}J+Cz1Y(1oR7$&!;_Lluj+jNEfyeY8vwu-GCO
z&{i*Dy*Z2~GNl1&U+l$N8EctQkkG7Wz6GTu$o@46_S|oW2yQ6H1&UR-C&M%^dgy#*
zvH1ec3THZ>bJ!|(33(coe)0x@R1&Nj@AX8QfB1rfc2IcrXthgkMpq%+r6{}vErf=}
zeRk~rWLdzt@o69%%<qKC?UeuzlbQf&Z4Uju9Dy0Y#6Y#+ns1(kJu!8L`bP-HCyyx&
zeQ6lop2t@k$FS2<EuV7X9u`xk?mp2+we8c#E?nT2@2?wscP?wBbecF}V=?VWk8aHL
zd5QK@TM*N3F8`12)szsAsxv&!ZkHeYrbqHmIhrz$CGuBN?-}NN(7y-_E#+Z%eRSx4
z*PX76_MK=DO`Aq1n}D$E-*H7zu|n~2a>D|ujHx;8bB`?1XWm4UGn^}t#MC25<v4!J
zI;#~*OHk6kj3j(;d2ExUBrJUKyb$h=g|hly_!Ly>;0<%@2Xz&vhizk&Z{4SG@n-}~
zuRKyTtG&*nXVGjc4-NZgx<kDmnABraqV{H`)$&fxpdPDkPV2&fPV8?I2^={xE4wY#
z+>TFO0s_?I1aC<PL2L`p?I(!Y$cL0}V$9xod7u!&C<?$#8QX2>C9Qi@!;n<@x`-4p
zD8FN(_uT*Rp$BN*?}&vvAqV;A+?CXZ=wv-KqXX{hT}8^60sMV(9@QNWo3NL3N)2?@
zil4_p3)M@~%hc#2(dJ;OqyfN*<+ij#TvD39akz2W{qAA0I_ZZ@@>+=<ezWNwT0WYn
z&Q;@y89Is#j4#XH8r<WbW<;81H5}>YmtUHmRu{IgD>TR3kB51hs03VB9=1U9)4kE?
zTh!)oK~M&*6_9z(rX?t=8)^Yf9({n4Njq&oX2xnTK;Cm#@*6VueXZ48uA=$Q#1*T!
z6QTNW;y^ljhr8LR08K_?RZKWgH6y+gDqqc!cML8L<3Z^)KGGDR$n#$QRy+9$+#&$%
zm^+WHt=Dat9{fbzK)n;E+Nse{x;qehtOVPI$CrDExzb+;$mU0vL2H7lv|T#c{QGpK
zQtu&4h%6hpMX{2geIW;Uy-cGcEyyU#X5dHcg<-Yno*R}|UvU^{sJ|9d`mUkAp9a5@
zX`(Pp{gv`WLZQKM9a|zjQ$g^J9!(?M=Ylg<x5<rE=pSiG!7O8lQVFU#lR8_@Zm(;L
zYSr5gMQ+Tmo{X6(0-MHH>Xsu*`YjP!v)8(Mog`B_h{&B11T7V`k5@Lf3H7*@IM8Il
z9nnozEJ%GHx_uQ<x_}I4+@czM8D!OMc~Hd@RtcFL6;B#P@g6?EC^ZCoCVrYWA+nuz
zBM4}Xgk7PN#P#yNTA{!=v*ux#Mz2uCzJ9f}nC7{*-l5D|1N)T&LSr?}sTkwfwB15C
z{aZ2HKa547%IkV~kVTG{#O}O0y_!g5#)+ALI+@f!VZo!^8$ZaVOde;Fcu4Zfy4m>1
z6e(8$9oh3|a;!%hy1U)1IMXz`(Ux)tH~;j+a>Vk^I-sO)ecUp~@i)Y3U|;?xa3ae2
zf!m3iV?j9j0sCVntwsW*spmtB_1zgVUI`nAIKGp(mu|>w;dUDCp+(o7TK?LxqYp8E
zn8O8uXX%fs9KS{=@YAs|EkKxBZAe6--haj9bag(Mxi0YpY$dboX-oC?)b}U_sGFf<
zt+)M%V`>TI+1&ci>?JZ5#G6Xahn@5^5VUnMQ+OuDTgEMl66PCsZlzBC-I3U&%J9Wv
za7d4b^iCJhBz%hL0uKr*9zILex<P^I!Cu{m-JiCP-ue5qqW+#onRd}#6hs_tf-t4O
zF8oXOVJV~1Zo45SjG@Xo&?#pK__@ezq+M1=^Wrc8()m;8{KL!_AP?QDGg@5ChwC#P
zS+N`A=%XLm$Z<*c1&+<vwnbr}+t0*F>NL+z$9ObHF8$PU9`KxAuO&$>cAC5hib^UT
zL6!9hC*|`b!KLGns!@Y3w1ftpnEj9bM=wLN(fV{4jiI4QkK?oU1*lq@EmPJ@Xs0?;
zL#ivSPNBrBP{3tyJ?DJQ#DVeS?CWs6ZW0d9EsF5L*rS|4+2?KZ1dA}=OVxJA2Io^+
zLP&d`K#>jr*hq!(9GWuhq)%$zLj?PraObU#r%m+s3XihFuT#WOJHx!Ypr(6we9uZJ
zx<K&iU3{nH6wU}L?K{DJV_4%3H-J9PiKyAqHk4McKlt(ZCZFhhLz`vat5ZE6kT{{b
zCJ*L-YcXF%8haL<-eO<28ziwUc?+}1m3%E3yVL%4O3WYyZ^`644-zMY$4Y%6_-8QE
zBFmMUbZJ}XTO0@OpFJzTD{IFq@TQme?FDc7{0r`mDu}<x1^6r#wMUXT|Ng1eBh)&+
zIeQ5<v1QtQa%x*PNi*nF3QemQ{jt}r(;+b8K`pG$f%wa;t)-K_e7LG$Ykgphbl%X>
zCk<AG{;fDZF4ls$TEn5NcwpJB1sr3#*<4SrQ#)abT*XO?sVW-M_{`<Hmj1}-8N~kn
z_m6893VOMD727a@pAa7#?xIh(&71@PLK?_5p^HrlFr*c<*pC7XTRizvTboZZOErT$
z41r5H`A;CK1E$B72{SJ)=zibSt>p<0o8LQUDkpx(ipYJ4HC<%SZ4zRZBx5-8C35fX
z>oXp@2k4Ds8;nlZS(u*RmX0_w7y><^yi+n9Ce?X11%26hZpAAEAL65ll<O;pGn2pd
zSOE|RB(`G!+QgNYTxHsWQpPm&2eaE`2>>_JN(wUnjM@;tYZL1BJq=sb;P=7E-d&Q|
z(r#3`!^+CJ7(+j6{;A3DS4nE;?+-tWo+ul+pByD-F1CAAaQ0Ty<;QY6ahH1=&R(x3
z$xClM6+0}2y8TB&YS&e*Ow41<s=hBXab+1{oi0!SRVeMLeAoGyDO|0NIsVNG=Rk|l
zl~^R~mAj}w4e?$+0cEGPGR2LG5T*G1PFQx$LhtT@><rqE6BI3if4^Ar%?Of*A|Fhx
z>fgygXvJO!$b9xAA4u3IIwgqhJ2Zed&gZ`~<M>q+j^pi!erh@_T;HDtD>Fms>=S)j
zI>2l$*S^upi5XJk%D;Pkpgk!0rFBxm!K=-TooqJ%0oQy-`1?-0-aXN}B|KJz$h$q5
z1mu0###67RO@1$T5@kn3s|)3us4eYuS2|yv4pj|)+l_MbgD+*_|G;CN2XULfz72xJ
zKs|HL2@lI&M#J#^2{u9?tb~MgJ0f!=LZ)l4BjWQLItiS_?jz=vt-cRLxc2c7zfGSt
zn_X|-<g4(tj*Sq$`e$^K<3laQWkzKkz#yjCqakh1*h>i=$Z_6X7i$or$nR-%iE!kT
z4oj~84mMy9@FFm{+ml%JI6R#N1Cy>>uAdxa-Y=+>!#417D19FRd{7!FRy;uOll%`U
z+W9L^A7-0?k@5&%MY`+$9p**DIk<|%)kD|*1~aEKKZc;3HSwdHSKJE<s?_%7-!y@x
z{#s@N|L*8Bd|Uujz9W3<WrB0RwzlJ`67H%1vbu`s<rv{UX2AA%h=<e|xIe(pY|s;O
z-!e&cCS)^*;NBevh)jlN=qVH%iGfkmf62T=_qwx_VY<c&u3bEI7cBUJaAHZ06r1J!
z&@KO`TC4lFZAzk_iRpP$I;QXeqE3Oh+?&8vBw>5*_dmAD`HU-$9hv0{ih31We8-=A
zkDVb&&b_*C(XHGVa#8Yc3opJA6p<2TURvmbSK+vxEHS*i57EG2DR@S2Pu#hNLCN@3
z1~B5}e)*9i7!Ey-yLzGFu*6s4yLD{UODMvl!Dnnb&klmVu4LfrPjKOaGD|H`6P6~M
zrB=Hu<dDoXzAl*ukXtT?m4b!*j5wU*r;jFF(aET%>S4|@Elu65QH6+YrHPoz+Mm<y
zHOLraErMy~VEfjnl6kNTK>6_<2!Y4Ny->1=U4yXWF9j=7qU|;rDqDvc6WF7-n^6JD
za@Lx{(`PtizYlBdZ~HrOxkC+A&5M2(a&d+a3Raov@XzQY_ji(IQT+&%^NyE)45T2c
zwC)xdGyl~Phm==F6We9#0?;g`)r&p}CB`q`@=y9K1Kt6Bl<9Y5t&LfJdOr4Li&~)X
zW-Z4-R9m+{Ds(=iCZdc!D{4yKVF%ax&aqTywftvNo&JHl)Awy;8SV&s{g3786zSrr
z=Ov;NtLro{7iVWp=HC`XGfOH|NI-)RWa(ka9}O}M3{vB8?+(BgOrz30aGIiNs@aF4
z43C%&ptF%YQQ=IgWGRF6USrH&vE+{_IY3abcFgZhmwJSUE>)MVpJN2qfL*tX4b%W{
zgxduM=_40Y7+MtR!FllNxFvsxyYi5U|91lHVoR2N+*l?uN6FSpBVN;9ha{<seWcCC
zKBEkuDQHOc;L1~se|AY{(F^va!&*#IYudaE%;v~geY(0@37T@+=?2T3$s{J>6})20
zi3ysrUke?&K4QWcp+aP2SG5U%)B@BjaPnFy69KqoBr_`Fn0kP`thuN3UofF98`0qd
zn%;RU4o}^8WxN2%t*302`n<O~N`Cd6VN#7pI(_1NgKK@+t`ybykS)gE_U#FifQt5}
z68jnMJQ70&H6_fs65r-*@n{udLngSnXUf3bzdXdK!HqxS7cMF>xfwdg;#VkutPo=T
zr^;qMK(szRd}&xuz<B$tfXL+P`j%}5-|0?eC!aCa1%0Gy{#jP8XylPRMJY=I3@tuJ
zGtX&0j*>iL5PV>{dTVizZ_+aaS>osPM%gkKr6!Ww>32871P~`n1Gs}DBezc$ZT1s9
z$8|(*$N^WPUSEJkSEj+Qs9|D$WUoBeLOdhRQPF={gUKPJ^goCBDcl##oAUBk5Jd|M
zD(9O>^Ke;zUd8=7^H5Bh!U-47m2cHD18bG?fhj6rz!QIYNn3ZaRNC1gA?8w{*5CNB
zo>oqYj&*S7ITW}hUQAM7S2I99f=jn7o!!-Nl@djOeD)w@vq?FgF}wx)Lh9|2wA7%&
z8c!zinY%NlYpIc6A4oN(PxZ{s)bv@_v?D5hF&VX=ss07))1O~b{*q)Eu7)HuOl0WF
zWpHcGZ=%2>vAU%7EFWI`Dt|y>FQ<Uvs>Si|mx5>i+!s8!FH6UHm?}msS!U6HTbZx0
zmr9H#kywhY5mgLj;WXjcW~1KmoYCX*n9pXw$;+@ilBE_)rWBD-SzpFLjIAndrvVSh
zD~v%JJ^UD@W`MDQDAsBZx)iQ67Cr%d&`Iv%91A@fPA=C-%CPTiCDm(LZq3FjpkgK-
z$*sOj0)}gG?4r_YPM<ixK?Z?~;g8GFT0uciIAdc~w6^1-B6>($JY&JdPL%9=wFyQO
zpe&5i@5nU#dU;C7irWBL^!dddP)vT`B#o}H!%CndPe-uN{PL$^_3^hBK;IEud-m1}
zwcq|C$h$9?u2gAA%<59G!WyY1q){=8nEbw^FEe%VoKNUxUE597u#>Qh3X5zSjGn8U
zCWic#A+|XaA7+V*)}v5`F*ysWblqrw;sm6yWPzwvuW^Up8s>#^)c2R6<F=I;{&;*D
zz>Z_3{tFjW$$qirQT7fSByMP@7&~-OKozi4dEDhyqghe@k7PU*nz|G+PHn-uz8}7d
z>3Q?Lb~8Gx&f75|numg5J)haNy6l>@_xHw$+;@p&J$b6;PTCs7%b$qf%;ZG<oC|xR
z;#bg~3f+8!GWSj3Tso=kBAUedO=}u!gA+{|Xjy4^$>KEhi_!sYq<RvztvJIKb-ylD
zn@fUr*W#RdSdxn~lF7Us?M9?s25qeZ0Bh?n4zz#bVI~J>-xIUCYEon*NHur$F8+>(
zLwszifFvOf1{jf@lHy2@JZ0PZd=IveRMDDHP<*n+U!A+Iju-#yC<W{AbP_`y0K~o9
z<`a*ypsO4O<i(!wIQQ;%1{?Awzq|7!jri>kFdFU-U<i?266&#aP%9h!PNW;{s%LEh
z=XMo-f%EyPCAu_Gs)5r~%iS&ai|DYb54K<SDCCWa81xVRN7fMyNn#ruEF{UCu%a*_
zn>~|JgCaAX5qpG#(+xYe(i)Mn=6uB9X_!CA%|cm0a3UH7#_lWS_;^@|QzI56e{=vZ
z)e&ab5*Yl~qA`ajP4Ao2<cq4mlaos2Gk52BF*JxeL*5K@Vvi~xn%^tVbqv}DaCe5s
zCaK^cp#-O^Wo%}RXl&KZwDYlF0LbQEp3VdA73sY!_;q^pBzmuW!re@`SnU7^!*0R$
zLN?M_vk(&mCJqV|brx0(x9q_?J#3J6Tn$u`?iPl9E1X~HAb}l&pZiqE&BS%cTKj{V
zPkC0g?BMGHQ4s_eDR~o<3$yl&O#=gS1vZ|s3?ISd)j9mOQ;Ni^fn27=_wTKw{=QpT
zL!%+Fq7R_U{P6(vWYdzA)~ae9c9V=iSx8M>(Y+9;)<0Ort3xclcp3KPZx-g${1%vv
z@qUuZ+ww8>hTBJw1V2O6tIv5o^~&<vTOkM#F$myoxX37~DdbBhdN&ApUF_CUFA7J?
zvc+Y}jX>VGVF%e=kL7wZxq>sb^3B~8FBXLaV|f2bwI8`v<b=<9a0F{s5|*#uSTTNS
z7r8Z7QOKQlyxQT~D9dMs6~Bn{G+rp-TE1J`m<`IpXaLSAvHfO|$P^2wnen{d!#S2b
zmnlf0s9f6Li^7Y;+_nVrs3w0_JLQ+cdv@LQUH0=)x#{_y;<+tx$T@xJ+5&$N49}Zv
zmd8b=orQBs28fDLFMzM{M4fpFu6#MSliRiRNDgg1QZYZ68|1eLRdP$yq!E0*n$|L2
zLu3BF|MS*nRCv@3U~>)ngE;y`<RdcfybH>PlA@i>gg8A5M(UnEquC(7!_05FiXmQ>
zcuP<qq)_(@dzMG1J`x%F<sNVyiJ3HVtfvgmM{n@f7oDoSM#eLp47%6CV#;pI)uVd3
z><Gp1(Tkr2_1Bb8B`!84jX-+iXfK=6w}Kc;J0ZoR=Bd6NG6(2ZYzJ->muX(da3-2#
zV!%eD>ATscaHRFsPA^mlX-9i0V<VWXkEQB(lSe(U!Rr@<Q0V1`73Icop^e<6Vi9|<
znH3J(tQXTUQ^=^0y}5k(kLhvJ;e3r4o(@vc4JJLsXv^n~tjxb1%Qbx<41qm_Ja_Za
z!`qIf0cm}oKAOyK)D}-#K^;XHEQ>5s#aC{)Yh&MVi`|p7;ip_yPX!eck4|?&MY?Ls
z`BW!i(O&}1%F99F>IFs^x&QQ2YJEZ7;5AF3oSLODo8N;ySo2z~tP?6pqprgh1(h=%
z5~VaT0E<HQlD74i5+Rc2Q7PxGWHL4w;U7yo=KSh=)SEEwEk_(LsFD<3rI-t>G=TL4
z5EDp4{ye|unU*XpLlY259>I*CL&h*0uu)rV?(ILVAzEj_uTR~XA*v9CxcM%eovsc|
zRr;By-D5|&h8tLoi}^BQ9nu0hfOE4X5qRcARuLoCawfj_8Kt%5mt&msEFbf4Y+}HK
zCX)Yy0*yWq{ElJz<MzuGV+&O@HmrKgbkj5$fCt4=3s{-fsLt#vsgVOnntQknw5tWc
zz7^|f#r^;XwBi6XvcN!5j9|!Al^@4uf`l1j4f3-jpd4uj5Ay>xVR(nf2)e@J0=>`T
z6@fhR2K!NrRQj!h2Q1rz3Qnp@7W`V6al2cv@#G5*{4%7_4%2uh?|ngD+TH8~q_M#3
z8P?4gp}#J3zkFhAB(-RcEk0D&>@@b~F8oNGb758%+vffrcE`)~fo2B)Y3a7o5e#Ot
zv-`!M8yUir)tAu8n-$DHNEsgd-@GEAH@NI4-{U8f;p@TFtJQ+m)Vdcd)$8fL6Ja+7
z&6>K+SvnwS_TQxR;oC%`6JLbpVycBtK*B+GN&R^FnC2%>Dof~9NjE8hg}eUlfj#dG
z;|I2*|8uGnkIKP#@=bAE>O(rJF2io=`-XjX_OvR8^^H2P@~x9@SJa70W>#Bwn}O{x
zUSicC8!`&%q>3-e=9OVH*k*vt4AzFAb=1&a%6ViQpb9MK-fYVeBu57N&*M?9c748&
z8|=g%lAr73#<V`x{9$@#CnM1@&O6&o6E|r`=yn5U6r!mz*yOAYB4{@{Zdf-%21ysL
z)=yn^sJR##rrB7lF80e+b#A5!-+^33<@K~ylabT(Ux04tZL?%ZkTwH`KIs4q3JoL;
z!_i(MuvN14;v^9ahqb)mKvV7v@%Pn6&B?H364K092D)n(x7b^_IF!7(V6unsNM3L|
zY?osGoQXh1HX7<!x2|hca=3g17otdPHZV?gySJY)O>$mw%vD)F1<ORnFmA;QWsN@q
z+2Xvqq~$H;NH7%%@SJi~#4Iq-yg;G6s(|RJ7uv^^PByN>IADA_H-M6>sFaq0MmNdR
zS0%zPfK|fX%gRq-BiN6?_REmel9T4f2fvx^1VX2fBs8tP#F!y(dYw69J)CV1m!oox
z$$qQx2IJs-OtXvZqA=~Ef95NdI!I$RfLwha_t-0%8@X7+GWq+4*xu2iK7Gt|5a)|Y
zu7I>eyl=(75#DBo?m-qJM`db4-|IgUT#}DeB0c4x)?qT0d9c9c$OEDezUP0W6%8ke
zn!>u?h@ec~*c2HpWMS=^U65}{{FcXJkD)9QQ~2LcsnV!sWNCM?(H&(SF;r=r_6QQ)
zFSl$DJRxXSPqHK(Tircl1NR*HETUm6m0850zQBQ)=Jlkve&54b<w=h43b~XC`S1lU
zU)ZCT8Z@RWSOEcJFLvEls#5<D-_(EY07_bE)rq%MT=8XhfP1Ay5`rtn+oOvCodF*W
zn?K_VYcGjusZaZ)r+zUmSJz7MXa2}vpQNO3c9kDM#~GWd>X{Fo!*_;qBpT!cbc^VP
zj5()1^}7hfbNFE#Vqk@6;iq(kWh2`@(kE$D*!Z;^&jY7gy0-Q^ZTA146kI&11dXVt
zH$G6#*XmO8dquk3P#k%CMYG138OKJzl#)0(0WO%Mysksb@II^p;Qvi~@F)DYll6J3
zyU%A9DQ=g&l>$fGGK<i@q<&EE9a({#tt@D5?{(6_FyLD1X4>niy1LiO;cdaL<(eCZ
zL37?ma_^G`_LGaC_3B)j7ucMd^fIITo@kdVE&M<Lx|0nBsc<&LO+2wXJPVQCD&}9<
zF(wGB($}=Jk-H!5ivCqJ6?K)_H?x0tWi)>-lN;^bZ;6gCph>}&C1X@lmU$}Q8E%`~
zPOhz7yr^?Hi+r*p?^8)2t)mwd6%e-{cV^4FyhdFDqfS)bMo$p$e}%7~M{D9OK|R`Z
z`$d5?DDJuU?aux?szTeLqe%~>A@4x6qw2bRQy$Cbw^?h6kg%;I%KuOuLUQ1;Lz|I%
zaG42D;o3Ivnm;V3@ZvO%@=})M6<Ijnpn+|+>V8i%zyE#Dae56e^GPdzvd!h~8uvg{
z0bWjp3~MCm<%i0pl3~VB99OKbo%XT)V>8CRdR{P)h0Ildpiwugd=l3d;(7tGX+H%!
zp%dp`T(B-J^L<ABBujIH-0}=@N$ZPXrOs*Hr*!|WWj}WW;M1`73Q=SGXedt(+~n1H
z+wildCyo6VLB+<DZ&X0@p!M!b>ry@);`_9|fM!e?F~1=@{T44bTHQOApF%?h!w~O>
zq|Gu}itf?c(<*7@_9JJ<S7JG=Pns~x0Bx#boXL?~((}5j{foyHc4500N$IO~3xcaW
z?}9-Dw86D=ayxPznttPe8N!=!rb6syyVp5kE56Ugw%tK0%&9`UrNU^o`jtO{nm@3d
z%0jj2vO$9<BfDt)Mu-_J!t>%cqr1eXbr{a<qN@dqJU9!KL~}gAuFD=EwmEGeyw$#M
zm=PsnSWHLGj=SevZV5@{c^O11AH|l1y*1;TQ**T;AadVT<*MOe1W&Yvqu5u?mlrkx
z&Clgpw~icc4z5u2PL$wdQ|(A=qKA4r|I5zi-|+ZD1%7~D%_G{EeAHp>S_dtfG)2-p
z5A7H;w));8;_-fa$6RH60z|Q71OAif@p@mDke!*JhKo^v`R2(_P^J!E`*rJzf7O{d
z3Iqm)#n06_i(3&WnD65Y7OG#AF4V7MK83nAQ~6$`gianvz4aX>0U{k|L^@MbE90a!
z%x3H~l!O`{dfD2gq3vx|Pjh}mRH+-^^}AA_V~>OjHT&=4NT_JnWkBJtA;q@?>7m|~
zN-lGTmW(c}3Pl<<fhq??<p&%BLbAhU?V)k0S^bjX!f<(Otay0{4VQ_COd2=~i><!g
zB2x^B_R0w~QUvyJHVf>dllGawh=E0NN(#)j)<Y6gH$a#}QNnk=Y{y<(^G<eYMBi=)
z=M*rM#f--?VI-ySS-H?kZP^Amn#nkH&%+9`=`B(;I^Ap(NR2%(DN)WMs7)%QD$<YZ
z@&&8gVMp)ev9o<l#kB?iQo=a%zdy$dcSm~obvH9Mt3pKRRi{Nf9XiC37b$R7ET%D(
z@xCN0-3rrPU_FZ(Q!jcI;GheJqKi%ns%vd!g0?EI^&LYg!jVu=aKpCtTEp*#O6B}X
zNhYDw7PagPOE~4i)51mCkZJ-^Nhb8$b8~5+IZPNBE?+paX7Ki1K;(_~KexP{P<IYD
zlLJH#+>|KHIO%G*{Krn3)ZPDC>ZI3Aq^E%6(D*o7yn-Fj1}rhCu9#N|jrtfn^p9dv
zp}SmZfQIx5uZ+g{a&`0XtB}ypT#y^k<1WIA9)cf|Ju4-V%R0ZzbK9a+M?3BN<Y>s5
zcJh1uY6l+*Az{nsQ&6Y(dbzMcHUY6X0wvXF7NsmRfrm#hXCKMdYy92(BF9kITPv@b
z;;<-6U+1)V4uE#++K$3pSKjG1#8WUZ`jWyY5lB!$`WDRvMOU9B%15aCvuf*fmL6P$
z79bDc9_&}GvmVM=7|yjqT^Y%)Zt4Eq0F8S<Iim<kS8Bl{#fenwAi$<q?+YJ}MKV0d
zaZz%gavy^TULwL_`=5B}`-iIjA*&O22J9bHi%+a?^C%LX?7(D7*FRSB98;gcrDsB@
zg>1`b#P~4aSd*9*%sL+<^u^xX<q6!vEpA}*VS`D=T=c2nTIq<`n^V^K+fO0g3a-l%
z->R<Hl%K#PACxGc<SC^RX8`Wxr6Zk__fW8w^q7^&O`C-2lvW=H=puY41(3-OT&B%f
zg<)eFiM7g!H2t?aTzHMp(TXbq6XA%<zmT6sk9G@!PXt<b+iJP!l=<#f@a!@vF>ZI?
z)c&uVi5q(-c+YA#pgov<&+kMUbgnp-y{oSF_y!B%B)%kEHdcjR#<1t<K-m7gY(l9e
zBFor+7QhCFxDS)#%&6hW$m}FR?6{&PQ=^~s-yIRDwWl&X>EXSnoHZ3F750d<xWG5K
zOr}(I7~#JB)0U_6LseB!iu38mg{ljXDJDw&r*AVs#(|Y5N!F*J)0N7M0UE^M<L+{1
zlXV5?bx=@+;4FA{#fVpwQKJO!S?MS_uS+!<<9xSE3!ps?-vpGKYlx9$?9{gy-8Bwt
zxe&&aX6haZdcwXv!yq;~_j2*xoHYQ;OsHggivpx!@A)mV0S()j>Da80S|UQv>?|Oh
z8=QH1;d7iVrZLZ00)jkx+Im}uMKLM2Nm?ZYYAw&5CE{{1e2$J~dbR^+Iv_d%)~HIa
z0x$nC5#&@U$j`Gf+APpAX~H|*g8}OXDgY}K*=hbvrxc!D#>-Ru-kFrz|3{mHtqD?V
z<Sj_$Dw{Q{8B9x$MjpO3e(^N*-1nt3d$J@Dy@QEaJB-n}x|1{?*9k`zch2;5f_Yr4
zx;{potn+5;Gnb|AK!LF@(`t9uODn^l@igDYYHY8Iq@yK+k25#}C-gd6!}SnAbW+Au
z9<B;!PMpc>!2qYLCbf}6)kzu76F9wdlcYn&C+I#-*`yCw0Rvq4S@za}I|hR)dRFEb
zsoqIl{VcBXwpnX4G${x&c$4~2o2R@-eIzt*k+)W<@uP>eQjlY0MDShTC8LPuXtp#v
zO63kFgC+;<s{vew-VE#blR*9uXQIjzg3;I}lYoV)=ZQ}7LG2mechAkOu&c;y63L31
z|I=3;tNHR~`Ur#3?&#c9b*5#5=}>6=zn+tXioWn2LM_PppWHrnQwsAK!(G&|=o9FJ
z>cC`4&Yi`3BUy<jUIeD9TX8sUmxf!!9f#y5aHB0`yI{I*Ojdn;fxRK%5Q?oYlrP`c
zKBSh<(@ET(yy@OqX_T2Hp@voWy8qM2dfp$)_wLb4TYaICd0~1)vbkb?TkrMW-rSQJ
zGW4KG?fl`>&h9TBnb2&(QQKs)=kKT`1%CU@*<f*D;j*+(rR@zwtVs1kt4Bjh1f_+t
zSH|`+rtkBrfhH)Ll!JV|9<ERVaJm9^_*dygUlGY!d}RRtKLEho5JXtQJwg4foA#gH
zs<@&Oovl}OouokoB~dY>$xHF9qYRWpJ(^YZJrN%lmlh$;0!_q&<vapJ<BEdQiR%h3
z^rH}5XXr{AL-k&AOSDCRMOp3>!dsiWB*qe+w7gbPT1yb~K<BBFqvtQ+nPoI9Er0;K
zL07Efqz-c>z@Ovs7$HT-;<YT9Us}rB@KHm4Re4fwAOd{NV2*7f0qv4|o?>nA4>V^m
zW+elK+$HhFlCen1*0NYmalXnSJTJ3J5@@0C4r4xIL}nnkis9Dqq2#ZTxL>3xdxOIi
zZSE%(#C`roeyP`(QVr;Js@~J5@2mon>%v%R9ifrHq#(=w7emel2f3ABXZt}4p|{>n
zYCs~Sf-U4}1>VhP?QloWZY{cZDx^EgRnFbA7^5TPy>Dg4qP-X}_kTqfYQ);c=x5Bj
zq*4YEzyyibL;_rH#}}42Sdd3=nCCCR%#V0yiG;?-rwDR@(;-tt(b}8|PBpr;*Ygi}
z%zX4|$P~$(j9Ub~at`wM?yFiFf!|nUcs~WYko>V0?z0`5w!Ma)t+Q|1Ba==uN*;e<
zQIQ6-C+yg+#X2>wLXN!cF-@I8ENS%NKCxHa9Q)YCEUqmE4{NC#lhhioouF36fXq~7
z{B61`JiLRwFn4*%7(vG^@$tF;lw8jD+;`aPgX%cM+aEyZr<TeYzbB-P6@L?&R#usc
z(Io`3MOE*~@X`u4xoUpL#Jq9$R_d*R%kH&ZmYu&an5Y}r4ui_T#YC3L?d&dqL~oyu
zEC2<jDi`Q-t~h^oKQ94}x-~)j$`Iy9U?;le2E6bx&N|S-%RnzM9|b`AVQy@n6V+of
zvI(#scDDg;tWQUth+A^^l=V8&Xbf?5i_DrQ41T%{JxRDc^Pr>5sFMZGFbpp(QrY`O
ziGXyM;=)QfOE|OIeZ#YU4?%yEkjcH9;D!8b`j}uGWs$igf~I7ZsNp+wqFTe}Xe)u{
z)4#6n>~ek2-0%*tpS-gP#ZfJ^P?1dU$~2?K37E30gw`{!>&qzNxt{AA?hY?_C?)Uk
z#@_n;)Mmj+xiy8buolSZ5YNp&9Za{YvC9y-_tKyi`!A~$+J92?ZvM6b7vX+w*iZva
z-~Bu@D_ap~9*`Sy!mK8ZKcN${_)k^KyD#ptSr<o#Dhh<`7P+$O4|dIp^bc5ULper2
z5~+e$v`p(I%b+{@#CzxYqhgv=@Emt7Q<HXN*G%R_d%2uLl{ZV`_`v&kzz|WIl4H@`
zWJMdRHVOLNYPCX0N@1rFaHNp3)$3lz=(Sx2;%BA2vWIvfPBr6~>B5VnRe_O!d!-gW
z5QM4w%ympGalO*27tz6%$Xo3P@p&chIq;9nyw+_olP@x&>)e6DHCyrtRcVF*4&gaQ
z{H`n|0DJ+?fZ@N+{;zqhhjm{giyTbZ5m$fc9eS>eH{1ES+(i3l$#%I)E7f|P{i!>?
z>vZV-gOL}t)arR2vIX378p0mQKa4i8sz#dUMS?^IS9Wo`_FE!BRZQ7li~}|?j<`Dn
zQQsJUQHhu7ZDKbBt8FjKt^jda^%RB;(p0DAZ;H6nwrS#Ya<0tCD3IA1qZ}0?5nw2S
zq%#0sGEEr@*9TBv4a%%bIX7Aqn&Mm@t1&q?Dym+RTw7BuqQZl){6X!P$qP<0lAXWK
zWfHlK+(PLi$KkT@rH9gR{s9*t>}}h8J$w7?$QXKGk<PnQ51U5BaT6DzJqNAB5EnoW
zCKQ47YSr%dw{SA?Xq`s7*%xu*67fzBM_20t0Jt7^EQ|<=HLs|B6(p~~-MpD%TV}cZ
zp%qoBC?i0ukwQ;hBSiV;o|SZxxu-QK^6zZiqpRHUy3<%!T<-bjr?U3iYa7b<_VocU
zH8|99fHfV|+=KyXo0HSA#1U*&A>X(}lD$qN&Ed;!9F|0f=?t8%#p6CTLo9ORvZ$-9
zi|AJj99Ayk3^>&cLW#0WP@eFb0tstrQdY1nZ=Sc1|KI*v%VQ%_Up)-jD$c%o9C8gT
z9&w<&P13c-p20qdhFdtz=7<!L5v6(fjqK<p%@4Q;wLgHpeWG}I`8;=EHLjCwy9_w=
z;j&L@lgGkMt#=<^Yssd^=}dk9lm|*S3Xg(F;Sn?AfP9;XsO9(Vy=>DX_wI;7egY8U
zHE~a`-k)DHYRb6GTNC{}=yVtiuzR|lAFb`AG1I#WLj1(*W@wO~0G+^Mp0w%Pxk{jp
z7#vlabw`dNa(<vd9$s#v);D090Tul&6vt7%90y5UGC=?PGv$S;iaPw=8SGnO!P?8a
zE|!C}ub{dh<U1b8tp4hhvdkoidr#cxD2eg=bx_{HQN0b%1Fo;O==$0P4q|r*ygVU&
zU*#EeQtoii+h(0*NRRW>VQ)AOy%i54k6}JEzM;ENrN7RmvqVqUbDS1>syxijzARHd
z(AS~xN3M4}>Csy-cizx^SMNUJiAl^ak#K!_M5%0KV{%nXIE2>v?%BH-gn>WB{zyEX
zV%5Xf4S1FAEo<ml-1f_1;Q-fD0GPH)Pc#5YjvI|(ZYbk)0$P~u0*)}K!f`aA>`qF%
z%3>aIvSqHBdjKPwEVn+V$-ns}?8N~ydBk-<8LL{Ldc|(6B;M`m(rnMFe4lUZK*(}~
zg$9!m(fPHBKOt@P2aa9Nxs|LXSiF546IOkw@(ZQDGkhBnAA_+tF1a)_sumRoTT6Ss
z4j~U!uvH}++8bQCTL_>{)?7!y=vhBKou6EpxO&!NC*FbRgs#5VHS5?CEZ>4n`{k~&
zn=Z}QngT3(Y2yUb=+LkRM-H)4R4LF8yW(+EM`C!*)O$mycPedE424PfH>~mM%<h#I
zXkLL24-VnW_tExx^I#gOGnP3CCo7R)AZ%9Oj8ODI%CvtM(z-sDf1TF_3W`O|mNg5;
zYF=kDR>4`%vV@|ivj2&aA|jmq9n9PtA$f`*ffq?Zm)-rvfgcd@DZFt<E%=(7<tS@k
zzp+4%9$dHv@If-rY2s_|uH-jW*f{hjvkS0K%;<DMs1kn#q(t(2XM`x55q&Yd7soU*
zQP$=_5|G)ybtfg7qTlxO5tK@!bKd>;Nm=@lX9r`ArM5RW^u_A1;N{BJ39ieh5ycKm
z-l|s}x|1{3TOTvPFwbT~jI{0?WCPgAbK(16ti{dYR6%n5l)s24(3>{LqDR7<2duC*
z8^=Z)+dwy>obKzpp93(%wV*IZI*`u;aa|F>JZ_`IG1OXfc4v3?ClsG>G1GWciU?0^
z!t4E;<KNqBfwAJnQFVh&l8~d-icAm98}?KvGLdGn^03lO6y!)p+P~ysnRg!wpQGTo
z?$TDez;gj!s$+_BmjVDZfn&HWOB1>Ze(T&Bgq<VG2I80Z;!yoc2NrazwkPWiF<5@U
z6bFbKEAiN^IZOW?lXC{CLvFmt@H21=$B<=wI62g0`j@Vn6z)*v{hFU+HD5=!RPNh?
zx{=a+unX#z$||&G5>Q)o*i(+voP=sZxrK^;WU;qElUYTaKWpw+;>fOQ=|=6Pc2&&@
zBTcdepRywo{6)a}GE5p{M$VEn?;TSFjVad7@bOkOAdhW>ZZ|S-cgbD^;_njWvaZg=
zL*W!*qkiq^SGBEa_G6f*+PqJ&9ixgafoM@@H;(W|PRL}uez=WVMj{?$_0VGWg`ygx
znYHk%f8NXXEw8#IFJo$#b{$;Z<(<xt@(IfZ{Gc>j=5H>LaJ|C7@quI9nZr%(GGJ$)
zF!Vwrb>g=CSSYnXT_8mU0BBUtgK6XH_0{5U*HOeRQfXRxte)U-v#;Y9#L^U-<2Kq@
z&_@(j^aHoW(*dossYudOeG5}-ik?(rjXBXQ)ZjzC0C9yAeSPDu8}HJtVgNdXaJ^%M
z1I|wc=W0gP$@6j@$lt6sESM-3#>(#J2q%B7fySs$sgivo#S2=)M6fdzkg$JjN%3n}
zE=!|8xOlkIVCT1Qd=tyuv^*=yYopp1Up9Mf7n8FH9n2}~r<i{89mhA79wIyR$x4Y9
z8ijwya$&P|JhJq!cfX=cnq=xx@29K3mK4~o)JApVuQ@shwsHyTP8lJ*$)iEhaSTw-
zq5FRjgEb|plS&cj53XjA!wQh7j@Xhu?xNU$Ue-6|Sdnt;gs%2)Hmbi|{7z_y5-T((
zqhl4aJ@9(lN=jA=ktK2B2wQuw#^yx;@G#x!^5_Uq3s)HuI%7`~>xq(wPST+UP4who
z0RJyECC##1#m@!Yv4pGub$O&tPo@P@JvM8x%i77I!HT@=6YEr=ryQzZ<`6@(J?Hbb
z%D%b&;t%+UxmuY6vQ^FKE+N%z0g~haj3{>$OFK`~>|Q&g-Ktp##)w3OzO~E03dyX2
z)}=u?C-rAn8u#J24yG7%pS2|OVoY*it(m`?<SJMxX<eL$DD>@)DVOu}xT9Z)M}=%n
z1Y*Jh=z-EH%39?vHLUWHz>E1yYQf_ku6%H!0MBZIAf~FA<aDU<!`lM!Mcur(W>oeF
z*L&0^T8V8TGc&wsbfip$FIRZ-(3*ljy5BD2f}@{p9haGqZ{w`KRE^*4H+ATTwq|VO
zLTP#$qX9J%Y38FeHs82Cfs|6|A^A0oxq;5fmCF;SrM6Gkl{BGCJ?6bC6$Miq8I(Jl
zaRC3cPS1y%UvLn*hgEzp0ShkL5_l?Bz$efWcPv8g!gK!RX4>vQV;ab>j8fEwkxS~x
z-e`vI0p1J^sSQVBonveO^|S#f!>{B9hXsj=eeRR7+GZE^9FD^o0#9LH-)aBwL#A)}
z-DVoK<%2SvRKuX*hgp(zBIE}mZ*A{zYYRuVM>j)`;(yHdn2Tj4J)CjI$LCLczB?p*
zl}3mLC^*n;Y=AlnJ{43MN6Qoen?k9J;&D+Qc!fd%l&;c49i1b-THPU#oma;%({k(_
z-e&EqvCQ*_ZBlVZK6JQL;d6LC0D_lb*wM|<YMqTm0{F-F`0EuFL0Q3Wx)n~Zw%v5h
zYo6wa`StFAl{vZuQP^3FrLZh^9<cR@9UlO?2zy879|c3#E@tQL>aUOLcEKbNtFH|H
zruFCc0=4?9lm+64dTM3}@aPiD!bdlG-ec*R7^z{q=N=*=KE09un3~%N3OT4It`Of+
z1g<n)UmP(2r^L7(<M5myj0jbHgJ<3{*>^<;>v?lyytjzdDnE$fjMGDyL=V(Pqjc}E
zY}-uIsrTV}mrrYpYOAf5Z3AEtCOS1<>?3|!%v&ws#jz`DYOlku<3SZ1^Yt|a&&)$G
zDJ6GnFindbxB(VA<Tot%yk=TJgxh$9&kyOjW^-BI=&A*X=s5TiYweZr>Yd-kRiAqQ
z^g%?0FHkg`Rupx8ZvSeF358>AHT6m=S^&LamJuZ^L))zZVHpM+CD@5xvIU-QA>cjW
z?`&Gg8Sniwk}P|84f8<~H|uei8foNnFYC*A>lt+ZeY+TdBvVEj&UV`=tXMX?0N8@B
zUbqbP=5%R@QCN4%on?F!cMC3SHt7?&0Kt86HBgTJCB-aF5#f$Fa|z<?^)VQyCkq;D
zh|6X|A_FM9X0#`QBQ9hS)e9R5;tm<sA;VX|H7d_zp=2(fGcZM<Uysj8+w5SPpM%e+
z!_wDP*%GTpdba-au|Wj4^PCJig7u_O`*^I+f5HcTP{KAfdN{P>12q?M0=tpVXaHK5
z%U~k*x*ra$fl<;%&a#x8<kO8AV;|=tvsn@m4a9+n**`C`V=SeE0GnW1M?<&(Xkcq6
z7JglNuC6QH*l@IWN#$RQ8mlm$?{t%1Iw;@$x5{`_Mv9LedXC|i(u#+{!G?k7lpn+D
z4`j#dSm)4}V9<w~XzQ<&qnb5?A%I*A-<SS^^M7v-X2<!$_nKx3sztsbTWcH$3lmTf
zMiw99Ey1+?=9oeb5-3rP@m$Xj8arMW!%Er)oWLdW+qA9GS5#4@chS8V${9z7KP7Hr
zb1TxV54KaZ)&llipPe4@`S$|&=FXaA8gW!O8DA^!>$>j&&HzhWq8Ki+2XMHVS{JhI
znOD@(P5!FPqtC^kze3@!##ORZyBN;bAK_dMEMA<b4Ht&!5m8dyp#b!{kk>e0orMk?
z6I-0*x{fnuHmjwf8kJQ2h{_M5m9{k%5&Jdi3n7zs+p{|Qz<SQ_=V@@20<=4S*8_0*
zR3S0Y&M#?m$IEqpon;8aDef{r`}M3fL|Qqz`fS$22Yj0?)7%-lR-b(97)*((8AV4T
zPDVy?W6Q1Gf<?I8aTq`J0hE#;o-UCb(UNDW%*cBo+Q+cYIFUac4(M6LZHQcNpNxfi
z3yXhNi1)rW7HC<FYa-Kxm(nprEz>vh8kWOOmAdiQ>pcjHJcKN-d&4U(yLx9L$?m0C
z6mT<{O3}`ncwKn6E};+_rx(kda{O1y|J2(zx*K0Q9bj{{owR31u+r*$&p^4F!_x`n
z_yv@I>{>F(a=q<d<Vw}p_MUA;b;Xn1WnBN;TU4HM+uH0>@C0qJ{Og)fThIf;`8#zd
z0V%J?(*-Z?+yc<^YLpJ#^vkfo6I6aDgyV`-3doqkq-HWk8~=Jwb&G{}RUkElRktcN
zz!{#pg8omGD?8)s)K9Xo$~oTr)m*PY0xG0iM?57?!_X4YRI~`dH-wEkB0^j$c%&R^
zN5+B`T`E4&O+T-lU*-?iT)lkt1uyAXlLq0PIE1^RNc(FiCrLtXd5=V4sZ%mT>DNwX
z-vXEdhKcy++~oDofxW1*<)|z^#QI)obG>S@Q!&LNnf!5a3!@yU*i&)Y$4PMixrY<c
zXU||dAS1`H2*{-@hnkVaNBaW>Y~}oI)6dbB05F@@Zt@bw4vALIXD()-1uc_h1JSRt
z0ig)vPuI|79Mmh<q}eQ?(|{<lc=cqU3Q)2G(!xC!v7_i5tB49;|5;BP`LN!CAzGj2
zd>~wFVGr>QnRC=YdIYScsl_@NnRMhExKcCK>v0D%jhr{v%qex6T(P^JwjbtV-{QwE
zHW&f!&~q@DM+)OGQfioq=08g0SB57Ans-Wz2!(wvBX~)q!HSxhUPL5U2?~fXm#Q}I
z>H!@-r2-E1oLHBgLH0}kM2<>f*<^+-7+bJY$$BVl>q_Ja4vAY7?nds3wmq}hLhobX
z&;IOU)`PpX`-pH6$x&x+-V6IcfF-|lx<Jf*TRH+K+fVk?tK+_UqUi~$HNDCRaDz{Y
z=LCvnUd_FSNgLgW`K~w?SYPrD)1R9Z=l?N-m?WMC^X_Tt=9l-CPh#Ef#m&KtOv;97
zA$^qI*88w>l%!<gReC4*nd4k!Y4cnfu?ldtWTY&ist1>-=J4PYVk=UOu%XbuX;kL?
zNx9i-ydq8GH*{7#PH1wz5CR6s%RVnGNRha(OeS>cVKhocg==vL=XaoD4`B3pl5zYl
zUn|r__G-<zHV9*T@@L6fPeh|EPWmMjYmvp|_NA2kkt5ES^w~qN^br|dJjp%9XhhJ@
zGKXFpz)`SZF<#l5D(033WHH9L!GwcOboeO&HDzwep!37e)2*pa#P*HmH0c0bB?{&i
z$aH?;k(>Jn9ex*0BOTPN%P51THbqVTxj3mAU<RF!*hpI2Gf%8!aRgD05u3Swt=4J7
zO;*X-1qgNBHcx_dgW>y$u7@ZuHM1dKzK<*sXUv+WCxYTSf(mvUj9Nz!#A@?BAO>4~
zHt)~(ZtVQ19fW{yTnE<XUdchFJ*H8JpfSkT-|387O&l6B>$xLftrt6Ks82?nilpQ(
z=}Gi8=}7`cdc=}P22dI$sCkrXFKFVo*{3<A;5sY&!$A^#xRW~L``5~k-dS0RX{o#k
z4|hkxa?`n+dDh#qp)dAd#VPQy_*tzY{I^b_P_xKSuP<-A8T-6)T-B&^x7=oIcQg<$
z?qkT@PW0$sb-2%w;|Zv<gOg{<ocx(D126^hqo=%X?bi(BiN?S9e#ECE(g!1Vdj^8P
z3^OsoEJ-0Ll7f6_m}Z3Tk_@Q8JB)@e_2mo9Cmoucf#l>5W2W1(#!R5c$0h!75!Vq_
zr9QD=+XpeEl^o>o?xnv~E-L!&SWLLs0~}3(bp)LAjm+!+gYc+1p@Rls;A8aOVQR)D
z70}<d9krNn!ZWKytavn!R=Lxk+aoz|4y0#k#-SNWgo0Fkfmtl|E*1FOeDjO!+Iogg
zullvH+&R_beH7Q$LZ)7KOk;itH(waRAETO)d9YM0kz(Ks-nwY6682L)wZZ^jrP*X%
z`cji23<exCzo;J$vK&4UrJ4z$-{6xBrv5_O-PQ@Xpumk$SW%Dg-9*X<%_T32hf3E$
zO9t1mtbITxJSg7}`&87|&G0imet6TH)t<XC&oZ?b1Tyd6N}6>-vqy)YC^a-wfh;5X
zbJZv9z3`6wJ;QFbKpX(@l|4^RbX0=4HVzIeG<r&>Z+b{0R0P>P%Hq@wFsG0zux(Tw
z3AYM*RM+pD+Zq}OH@~BqfP{2gHVB(*qV-kmI(yL%6);|O)nXw_O&>*-bqrX&YJ{5o
zs1|VeiZDM!YQ~^?n*YcgAgATUFTA~!xS<<`@*{aZ)?Z@>mEq%eZ0m7IPXc1aj66o{
zh^KpUP4#DvLH?l6YnycT$tkK%!^z@SrtdUbKEpleE8h^qP6`HE@GEAXjX;sjgEoVU
zJy}983Ku4<6<~i7>ip)~UL`-Y+~a@oZyZjY?8PJF4@uE}kCJj@dixPfg4lBf>2`^6
zw=tnKz{A)6G3lxANTOZCoxG-Zi`3w-poVs)pGlQLOb8Kwo_v9Vo&+bNzRmKEKB1S(
z-wVd{9yiP=DXvF>^w$4;JoAMO8`OtAZ`$5w@ruy9q`GyVjAL@XsIu3tH^7`RCD3&e
z%<es|q`ySk=6z`_BVG@CW*2ZIyn5pJE;ba5YIu4Gq)BN;G$IdA8@PA-8JW97lB}w&
zv5c!RbNn5^mDyxA(QRx>uQTJqrz%bcqN$e3djx38$j`jN36O+Y_z<CiRM#H3Z3C?6
zm1uc`NaI`8RYkh(7gsGN*2zN2P|DYj6_k%*R-xTYPJX02E|?ge4In?~)Zw0k-x{|_
z0)hZc^FeC`K2LgeqGv#13kca|A7DrjEbP1<MN^OjSTNxINsyCdrHxnPmfauZ#B*tP
zL`o3dTYK<IUy-cV?L(FGMV~k#HkqjZlQCwT)Sd05|I|D0nZ<Hu{7XZ?tL^WDwbu_0
zmjFfna(2fs-ulbkFJxl4IbCUQM7a?$CEKDEa5kz@zzKOGm)F0Iwec=Rzb9N!h;4Qu
zzWvr@<G`A0Kfmo-u92`+6>FDyjBfTHz^=nkR7=9Z`VVMjFNaA|{jn3bu89qfYdBw(
zDuPXpNo*4Up+n}TM$SNj`feOfPnL2LzY&-PpC5+#0c&k4OMSp$uvCU$<J()CMCic*
zNw{185Xhb4mt(z~!~_MizW+Rci+0{yV5Ae-iv){0lv+R6pmp)u<yY;$qTdR4rMy*D
z^m=&Y!8%%ZmgX$pMTe>n@t<-!1eZ@<?z8yeQ+w((+1eAF`7TjZv6kE8Ny-@WaEpkn
zGD*gH%bTV$3Jb=}(48kyZ&aPJx!@^6?X=TOvQZU(#h&q!ht~~IMe-><ggukO5~yqG
z#~@&;b+W!CQ^@(xbO~sT+$KYifx0xEZ)2MlawGN9nq?~T5IW+V6+8mt5%%*g-osZj
z^Ox1lHmEP^-lymVNChe{n8YcYXy$3*#2)ciZLlofnOf%R7M**qZSpGsqt`ddV2};>
z;ovq^Lu7=pLc{2urJAZw3aUa|ty8~2s%Td+R>H#G_l6_soxCTBz#X~k?BCs`bW_dU
zM9&}7VL9suwkO4{QvLeG&hAC79*5T*ih7RYtPZEA^iui5Kpl}J7o_x{lMtpqdrdR_
zS}X#Z`?Ip41;z4BCY&~mBZu>ptZh_T-)`iA{8u&ifCGb1qZSTjbt*Y4-b%XhLz#ZX
zz|0Q7f0rm@C56OlP1w##wI8Zcr`&3?scK!fI76)sn&!}l5E|JL?ZyH+n~K7<j?s$p
zLGkLKP8kK6Bl1XFq^>S`RgEDc=Pr!1Y3PRT=6Y+iA11~UT*|~IOjSZCA$qvW$AO67
zI8O{p5BP>>rNqQ3|1D<*>EtmuNB(ltbT(`u4EgO1!*^~{g`huOUYxJ!v5J&*F!3)k
z92lGB6s<8a7E95kv#Zej|0>1MYqr9985JtQ)Sk8Aj$t%nK-`LluKC16jxxlI?>4ag
z;xB&Vo3XW0^?;nZ%v+R=JgsWf0a+mvo3&>595aniQ<?=!IS8*6$FR}H47+^#zN9ND
zCU|sG8mGUp8gnPEaHuxv^FJx}#$KS%jm@%xPyg(k#}gl6H7vP2+{bo|uN)8aolKDt
z<bdc&erXCr<KO2bJZ8=_WXLR9F=FRU%E#gf4Pg<%&ZmgG{7XaQ%{XCsU~TSkug#JN
zJ<jJa-_Zp5ZfIL^kO+)XWk!z!cOLmX!*5E#SP1SD8&mE3mLEhApLhvo2eBrFNAHb{
zt)JE-zTh1B0p*Ubhx#i&wjNrVhebxeON>y`e(joeib~r+l&Ejl7(--{*8<aq;+}JB
zi#V+cyxFD|X^t7G6q1~z5s*#8GIcJ+98N#Yu~e#GZ^FFWia&|^{B?9$RV$E8<HNa2
z`7^;)$<Qy2EO3_6r}@a{0Y_2>ri7@i*Iw8a7LtoWQOogK@bgl{$#P?~)QL7^b$a)q
z%bM)!)3)EPJ-2Wr%p_d;mISWf+zKx%JE8yCR)_9cLUq~OCULd~hO_QC42O4@Ots6u
zFBmF)B$E>(4muF@gY1>NGm`A1;x{C;q9sn^&pR0nda8S$j8s~D56If((fD#4A%D#M
zf<wxB2V+&vko)B&CO>0(p=pai3bfDadJ0@ltWUKsiUJUbmpx^G<47Q@Y^ExRec^v>
zcMzkB^=7})_dsBT)hLHWzxU3-pp_#Nj*6L*$7^x6|FH}ejKr=2OBl?4gNcN{!so&l
zN_9rCJe*v%q<tK;ty>vqAPy8tw9wbh#09Y@v1$T=3|9v5peLb?LAp;j)Izp|5nB(I
zzyQ|rZWDfVD$o5nM9KdeF_P087X*JIK0hqj8y1Q2<iB1ol4Z>fYx-N2P0i9FNCS0E
zAM2c*v<2W)l8;qbpHMj1XJ7Ju>?=t4jeO*#I>JJPr5Oi1OtrkNZE9+*eE$@jOsT!X
zCqw`RA>G<{_zDPE7v5;_VIdrm7C2-K7IttEfmGAMadB!}pJq9fj$DK(IIK_}hce$c
z6k1@FA0DQO?)tB<DFJiueh%Ur2??cfwbcd>{gs7odH8}ccA~!=!qwyoFTE@q&7{B(
zBj?j(HCTJ!&Ph}dJ7#xpj!ql`EW7%>$$QT@FrC*%?>&>%vW4IluQ+X~yE8U^0#>zO
zqG#_tVX4jhmxA*p4QjvTNkZLfX?(n4cAU!uipz29ciYJBb5q@3>2852>^R_~Lb%4>
zN}~rxbB(kf)EHd_2!h*3fQM4l@v+RIF9HoNR!W6R=i&%Lu=-{H;uvMQ(0`M9OswvG
z)F>-&;>+fM7TB>B1jrpslbb4OEw^>DqMJvJ(2TNB4}O91vO`h@E)j3Pg3R<`@=-X=
z`To<!2nbu1PEKfy6zSr0x>=G8Oi$cc$TebJNin&&3R-^>2hUI4)QZB)XI@k#b;>L0
z$9834b}(!HVGSJhU?3oOIcm`ff2o#T_9+w3=#)=2!w&q0N!5x7BrsWmAZN^}+xUMv
z1DlO^iO8aO4iXq6QT{;aLKX0;^q$Zd|B6giB)PPfc~=g&6`L;a`jf<;l`$}^LV9Yr
z6{~NJg?=a`*>%KrWJbmf9}w$ILp6FJx%91bO5GN>y$Qo#pJz@MpJq?66&0xbl=*g!
z4I23a$r1x_c*+WRj7<834>`H`oC%HN1h9uIE);qXO|_iEDhh${Jj1stE;)DqY}{WU
zTBQ_joNK}~m8-Q&t$3HcW)!S)3r}XQ8-tCF6g-`n&>R+LB0iBIF!RglU-u-G(qprC
z30ZL~FVWo%Gwdod{RdSPn4mWX)n@gzW6d#~&AZkG_iVtZ3)>du<q^L_uBrnHHA~p4
z&hF3gB`mZ)9*}YmU4D+}KwAh`Lg6>Wu*Dq%qkqNEsU?i>8iT|bSvArnA($8X7jVH<
zIh!RprwgwMq}PIi0uni}ax5$-BgWKn-9Wp^>rXC?JEl=mp2QFCYW>7e;^k+nk64Lb
z4?W{03Icy3OihBi(Gt_Tws*F=R+3+anbT+!C1Q8wGfflWB2M2#yCY?8#Si5V;Cyo@
z$Ikc8{e!4?QCD4;VwjY7Cz8%rb8G>Nxi^9?pU3x>da67&k^7lCPgE1H6mP1Z999`$
zL8DkUTf(Vq{8JM-oE@RT!&xK|-MyUb!LpxfDbLT@f^|a_osS;<t*j7|#&uvDUe$|J
z$xHO_A#GDxQtDqZf={9xyXXI_h_@0XDxxYr4p@N2KFNN`k7Iu*>}0U|dGI+RYFlA<
zq1#2bsd&j;HZg~M2Q-nEuCy|JnXu<4XpS2Wq@&bVh%cM7o!@Ew{~AXrZIds*#8u>e
zf7j)d{ISOO3r~hA9;B8_e<2xTI#1`s@=pwe*@qhD4+?#2f&@Ko{`eDPrDZr7t%V{+
z)j2uCShu;JR0S#EY%&}j6!9<?jlgUix<d>>6YWKX^qs`7oz4sTswmM}7{M>2^jq}r
zdo7geWrOAo-83sZ4dZeXN$j_G3jS?JSf{noYA*Vj_ra~*xU=t>+-8ij_M=ERyr(&a
z8aPBES-%~~@_D+Wb5~*A!aNi>x1w>{^TLw_W{#%C%+V_wL>B-YB%AfCDyPFtC#hjL
z*Q5X}Z?Y_xI9c;`g*rSEaI;VPDQT0b64K~VQ&cG6OxZIkL7{rD3cI2uptbQ<+9^%5
zJ6+k(vxyS5>{4tY@SH!*Zs^F#<RCx4hDCC5?IV~>Xhx9NMSCj3ZoyTR%GsMM5o+Z0
zPROMjUJQO)A8CrAWEvoMYxwui1)>*7#O0;tIVHv9GoS(yphb+FQQRn0)%6CEU-^vG
zOCVShaKH9X@uZqClayy}#glQ2!kB?25tzhT@03%nPp=2RRLmvr+#!S$#AEWZ<{)g}
zCD5{J8cr$?T^E&cFAwVL=AG&>$y%8&c94szd1O#3FQ54%7zeJD%OZsK{KqBj4NEK;
zyIZZVAMf4rX{SIQ@3O}hc#kt9t&wtw>{C@u!6dg^WD3KIt&4yYRXZ6de?`uqv4_ao
zgH#6MRThTX|H4a%)5FL|Jt7OCR``Upof7KMO9N(uvPqlMu|3!vKZ&VQ1Y8LpcN^N|
zHf*I^{du>P?^=N{CFityGnI15mgYuyZV0k=fQZX<+UWQ<(|~ekL&S?^^54o`IS?zG
zyNnUabrNO<P4PEM^Y-TT$0#Oh?QV|4$&(m(($mcvgH^Y5lMR?I1Xeqf#-Z!<ONjpJ
zVm!g*lGu38K)4Vey55u-;n>a!J~gVEBG%;MgN_lGpjn`PZ<~v2H+a4_X{(L9QCP-b
zo~iPP<4&d$9Sjzjs2KbFef?`H&pz>HWyojvbo0>t<($Lw2r2MH@APmWI}FZ5Ard0T
zy;WAX?5=`b|56SJEOuW)lm?xMt>G<R)jE=%y^12^y-=&kRA~f(lWEt(tMkdQEIDsy
z0l};t`cXx`hk8z!c!l-WULnf2tJQekR%~8j;9a^=-Ondi-&15yU>$5!8p`VoyM1{F
zOBLQC(opFdr4HunZ8vJlpRsD^QirR$Sdryj$;5>T1Jd}17<LdYXZRI=4b2>-Xh+F{
z+M6b;b5iQXkc>m*k-r)7OAr<CFT!ym^5Fwn1dQireg_$JAvch=^=zP_07h$-_Q?G?
z4C_Rur<r)0{6ycPa36==7p1e~^>`&l?%}1`?1ED|)2Jgdn#)a3sq~mxi}$X=iKrK8
ztD<p;+t}4?-0Ye7T_T%E-MdH$LG8X*W#FCu)$|vipC2`>W=FoVg*~^(MF2u2Z|!m9
ziZ=$@3xB<4&5i8OA<*nkK@`vAOKF0%As<Ztnd6?HbN5`~KaX2$c00E4x<=*13|r`X
z2aC+=PX!n!b<eVosqDp3=?VNqF<2Dq9ow5M(!U0E4u&;I?*k;d(=GK%(+E7TPO@w>
z$skSFOZOdQ*o6CeXRJ!vR?oV@X~$zwyBcySxRCE6k>!$qPN}gyi#8?--4MrsrK+^<
ztCI2s`by=GhTSNwl5q;rlX^G=h(s>%o|LRU5^6=B8Bc#qQ<gX%8MLgo7JUur%d@@3
zk%c=i;8dKxMSOLeb<T!6$|Tc^CFsx_AAQqlDCK5$HqYJ+P_{&HmeY*v3OhYcCLC~)
z6UYB1HFaj#p$^ZXiaZYgq0YG+np6O>ZQ<Pmo5ab)YX!d<^Dx!^FI98QUsY=c7A}ll
z*G}IkI^1p#eqC9?H%%TtGR*?EF;&>vr7$A#Kq|akd4ko&0{U4^LrOyuD{~UT@*XPD
zf)#x`<%JI6{qXg`J|Mf_(#49RUO=dw%O2uzwqqfnJh#rY^(ywJGd`D{_~Nd@R53NT
zulYExikTzS!ok|?5`ya3-$NsF4AJGX-#OxcS!sxfZ=dYzay*#Kv0OolJ*H4V^ucH&
z)2K}8{PO3<^R+sG?)F_ZuSiXAgwyB$6UMWp_^uh<lXhH<ubZK)=V0z)Z!C8-j%H?J
zkpkEX-*?}VktjQ0%w2S;&5ZFyNI~t$LVCve`SB^?gH7ry#<A?46yGr^Co;l^%Juym
z4$hUYbJG3HN0y0Qw<Bg&>Q+FdbS|PUX#4G+nCaT2S1B?nc9Szjo2I)ht}dwZ+JttD
zEv_x5s-S290_zoVA*krlP__+lJ>e}dD%tNxc50$mmA=(19(HsD1;d;5&_iB6_MS%)
z2}0JwmGi|0&EeEktABm}eUqx}GXRs_pqbOWk120rWq`m!t@QT7!%>8IFVII>8PA)Z
zd?1r;bR7<^IYTuI-bUU+QXL4k3bsKNjG)JDv!K;Q3)>EB)2E>j^cma-5?Wh}3!o%t
z;04qy;sTIZ&;)GW@Pq$~I;(&7rO~98c?R`0f&HT{3TJ3l=273<-G5*kDE^UrJz&B#
z1yRdftiJipTx9`Hu4AxoI@!p*!#n6UsESl4fAT-W*j;eKtkDDxrl3QHq@y~KvtZJ-
zBs9U)q%N_4Wrn*jKO5Z`$@kA8AJayK2#L%4$T?ZNvgTL*F;k7)x8w-GqA8>CLw&fS
zK^tZByjcXE7*4H<hX;?@X~bYEHGev+akWJGj#QA_XmLyM)#YxZS8aD3LP81>_mrdl
z8wc7WTl&3H1o0@UbW!O3>}f))sU>^YMEu^^YBB9*Gq{n+{<0^7<2F}JP`s+~skrDb
z?gOyl1{-wPrjku9V{Ba@TGCI!j1YCH{^E%dUQ->xOlsQkIIx=dtY)NpxGV;c-gzp4
z!tX9et_~Oj<1&;)sf0=TU2IvWYca8FuKA2~Ne+<R)*r1O2T$6~9`AlUQm8BdX%V|B
z&gv$hcByVm9OxwRa^e_eK)SL);aithLQ1aVvEM-A=&bKrbFz@S5x7I9Z+PPOE>WVD
zPPNe%BVw)Is~xHg64Z2n!pyMZ^BQ*LC}DNZx^2%ucLi*mivtds@vI<b2$y65I^P%F
zx<Sgk<^XNrUz;0+4lHm~{fXwG!5Ss<5Ik<rg)hjm@;WE|uV4>hnWWN1!z^8E8nzS;
zR*urIS~wW+xyH~8mDLd9cvp|pGMBC-8%IRhnCP^aewg?>Juwj#yk<{=DayO}XT5}Z
z^<--so)^=Ka&Pyt_K*|#^In;pG_f(7$F$ucOUU#TgHel~^ne8lFqMePi9|3_>3?s`
ztE+6ySMZWj7~_xi|7+G3xz^Ui;z>d?K<`0%=?13VDV5yD>kDYf8zu0tMbJ(9r1^r>
zw;$H!e5+b;MpPmvM?vt@?1|4D9FMRr_)`7Mm1)9J(d8GhAMys*aQVosWWxl6^MNd*
z{*1?C{>47yHS3`wahF^ugQBs)G{o3zb*C546)kj{x0)&ZbG@4OLt0>#iuWxzG~MUq
z4(i5;2-w!4WwmUMncLzpz>Hb9sg<9fLPxY2+OOPa%k&{d)o#LZE%1eiZK|?M05>fI
zkI@QI3qVv^=bonx_jS4bEqgX4XQiT8($@?fFm1&n`~(wR38Wl1H=^&F9MQC8Esy_6
zx=RO7h;or5C>$I={-d_W!B8R%8YQ7R)z$wYUmr9Ph9^C<!#D!ev-)CaMhVWe_w_2_
zY`!T$b%$?Sd+()3`yef$a35j6g4m(&{lM96bHJ{BDr7XqcXt>wqpd9-Di=j};FCNn
zWHfTr=&Yd@*)Q;4x8_RI4WjjdXk^`C^~FbMzfE|v&9|6A)A>61>LI-AYn3U=AJ)&s
z0dM&tDGKQ~fF;$@Lg5_>wHrYZ-^<5TRDsBt=g|=t?wLk`aTHq9t9)>-9D}o`E?TJM
zn8O)}c`S_1<AN2>U8FX+z$M)(7=Gj=u2K=j)Q$mm<i4iCCj@}BHG{D>>mYa<D>&_F
z4sJ10Mek{%UJO6svOt-?A`6@yZ^}mcy7m$9yL3$|L6L+|q6{A{On(&e<VwOjaMGWX
zl2`K9t+^}@zvbwzL--!HSK+azz^22;T}K$Ru{PdLjc4WKvg_rG8LZreGT{qJZ}oOl
zAjLoez`K_xk$r{+R-y}r+3U%0ab(Kx#f@=6O@P%cm>VSm#L$s|l-<$EWb*0N`!6BG
z`K@p_u{rqzK9|;gcK1oC8@5KJ9I0_F#o-|>#9GO&`M#@HbA9?8O1XoJ|2I0Cqcd+`
z>=wfk9ug(I?zu^7Cujp-tZ)$}t`y)HNOc8#&UBS1nIKFM7|Yc99&Z~Y%>o>pu3FBa
zBpCY9n$~mRjFZfyWjZLsBYM4j-MOi%KE;FOc|V}u8mrHDllN!Wux7QJM(~|TO*OMp
zO*V)urE{@esthR@Bt~uYJ5Tja%JYB*;Z77ajCfR4WtQ7mR&jcK8D?6?Ej0H`hk7p&
zxj-)93|9^9>s+rut#Oiq&+v8JKy(~z`z*4Ky5wYg5F&9cQ6@l&<-}7;t|`;LP@N_h
zr;H)na-QXI&=G@aw;1rV26PEFtmNILO6nBLE-kzl;Co(MR1-W&I}OiFm+Pa;;r`a^
z8R8}1zvQpLmt7u~*m(eYp?yB!50uTB`~8wFAxeDob&!Lwsh^v_d2Q6%y}%5De3|Y!
zmhJ9MDS}vWe}+<}Fgq#m1kKEG*cvZ*J@r}!j4X|T^<lZJP_&9ANq7D8ikewpl<pp(
z(#j&<(sCc25en-m*5%aAZ4vIhkg}`D2W(Jf_Jvc6Do%#1A{sTMKZv`~3D@9Q0)M6F
z{(5NdEDd}d7nlG#y68Ae{4~72GP}1y$%=Dhd`N5?F+^_0D>zL_>FnBBk|tX4${%tv
zJqI|D!p8N=BN|1}3V@RJ<zmTg2>h!Qr<3JKTy9<)5DtRAX&?eedAP1$PS6eDm=jtm
z`-&eda-oVYeUYKGV4gu3&6ujM{JQj|{hi`19)i24ge@Z1C*B+i1ujj)KGZLjFI%=2
zcw1q*&N>2QYwB4Hk5AQf)dh*9634kwzgsz(IXV=y@Hz_;KIN&5f4_+_z|B-%)y+TO
z+#Hzl9gf=)t>EnExcMiAC8&AVPGB7AA{}Cd>n0nzclA2Oko%7R5PoOFeKq3zh565o
zg-`fmx|GrkTHL$i+<U0fuKxnE#O8!z0kE-U3S{QxT3T;h-$QIq@YFh+%l)5?!NNKI
zytjBXBLU^GXLp}{xcLeDAdm|exS;QP>TFB9#17|Sfu^lBe@66##AO&1>Mw;-9;j|Z
zn^eP-80wbxo-x-qtOr0Csg+}zlCF3CkQv<F@B}QSnSXYb21Zn~+p2o>XB&E&N5$UH
zb(R|3{#Kxj^pR9}Z3`IGO=zu6G`F*lv7rvAJ|Y$8y@E|2<Kj)h0urr^*b&d>+(r>E
zB>IY!wNeymG)Wv40y{l?GTOHc7Ck1`w=lnUkUu<;jy0JFc~;i`qf-Z*@#C2r5&kPs
z>2HJCdpU*o8rQ}f7yC9!nSj89@3d2e$nh^UjFO-8KqWiVD;vxXHX<+28vUaN>^Y`M
z0jwgc0`jXB5N>EEM)^YIu|JhRzb=F?Ob-EHB1#vUK8GSsw>heuQ!w%I(9VY)@Y??%
zjte_8LI4+%>>kOEHPFd9je%QR-cjbXVcDzszq1DIF@>@7`a*RoFan;iYmv`8kfHW`
zRlO2(E83z5*xy-6dJcyhU-H1^0AD~>c{f$*Y3N%1)=?la*K{erJt>Rzof{uyK<_gV
zm2qCP@P%#Q33N&hl-=0dcwDKlayt!$TM%58y{(7$?7mLg2w(BXZfE@+E@i{YP0EX6
zjP&?P*@bZM-L57IND)1lCOR5V-w-aN1GAWL0|LEw_nWZF*^B?*<XoD`sXCsDop&)j
zsNeR*!J~vN#oAkOCm0*%4^ed*(>aQ0`mQB=<^hLl{j{cwg{1FBcrg-MMfGtG^pE9T
zIget8F*j}YMILY$D)VK-4v93M9lUd?_|{b*2esE4gE()qGfar!K%(aCE4E7s)TK`q
z$1)7+%EHFT9ct)w>t|ayQJ!JuH@Kg?1I6bEKeM)tnLRyc&kmsqSzA4>4As^U0R1>8
z<u3?@(;OBQ0!QwxiFg=8dK1`g;Z~45P%C^}_#EMk#TJHz!k9Oe*Mbe<=3i*Upt-Yo
z?d{~&sAFL%CpZs}g-F2o7^}|WnW33FEI-Xoay8Ov)md06tY`{2!&-VKfK~KUd^cFK
zd^g<?m#)iUyLH{ybo>;i6J2szG{UTGm^n(Ar39s3Z&*3dzr54ng_%i^8Zv;;Ye5yh
zvXVDQYR9P|Ihfk!iTon6@(?cP$c&F;JKVJUKA@Auq=1UbEa09D22dztv$@Q%jZ~V2
zo++wbCpC!ZIg5E&x5D2oZ*$O=>l@H_U6n56+M44Xgr|d<#6J4nEU<e!^LsN#XKwV^
zBA5~WkeRTU@o)!byiJhDA8i?j(J8cmAGOefNOH`f|ApF8vNp2Bay(SUhZOP_7gDDe
z^9pN-lzCMY-aln|gJc1N3FPF-{hfR(Cl2Amhay#aV-%T3R7aQfvzEUb9VRx5%aYph
z^g+CY-{}faXgtjQ$TZYh@$_>><Ky}diFb%|{&xZOh=VJ*iz04Z>7|Dp{nG!NJ65T^
zCjCSdkmh-sr#QW5z#Eu+oZL6%hU|r}SYbMkE8-A_4zL-$*O@1)7J(@ojGaJgsY~_q
z>NPVVaVBE(xv2z*P@NG<Cf=MVtKVXT%*uOLEvykr5+42zviOj?AL!W@<)r>zjjd+X
zdQQ9(IpiYjhp6*}i||XzCQ-NaBy)tPUt@2wdElRcIcv_EU=6@b-fi`7gt={-7CYfj
zL7h(u1*h)s-ugR6PGE(|KGtFeijkK9wkE=sPL_|+)wGh!Wkj?lfso1)(|yI{hxV4P
z3^(_CKHg!Z%!0Bc;?)05oOX2?Ee)~+-4~ZX#X%|*`!(9P!eE~*zpO?0iG(2pIwSs1
z?Ei6%T5?F3|Dpaqu}L=epXD)03u7!_@fqM80@0pUyyc1^G3r|<WpZxeb_Ysqixgs#
z(x_?g77xP>Wp-C2T0*@5-YwV~R6>QvUa07_`Mv^P^<U)seQp*+w0}wJzigUUIPbfR
zfvIesMOkoOs>8A<pN}J0dMj)u#UZXW;n2aeTa?*^>Ns-G92>7+Yb5`P{j^;MhPd)#
z?T6%cDriId-VxvOB?Ra+kW2Lk7%yxzw5ptwjtDu*OV!ai4uN3Y76CV_R7ctU9TPXB
zFviLjT)v-q7iPD?X`{pyi(pI0R$Xl>i_fvo0!*<Oxi(L}f(rjN!)fpg=2w06s*oi6
zh3Av|niG&oscUu1!`$9G0S8GuTKRzPy&E<J6e?;vl0Wuy8{^vArefTN#Rvmw|K@<k
zcn<T>*`i#scQLF_*GDA`Eq$-(DVF067Z$O5=D+tN_t<jQ*hfwII9fTdxFP5eIyB67
zqdHg@sfm1zgpY30zW8c4m*eIrw-D~2Ia+}w-`h(@8fs;j<o0i$!Io##8$X*d_q@eZ
z`oeywn4*;Wbv7_am^epGa{27fKkbvH#zD+xVJ{+dGMpj4e+Yq7EqF`*H<(p)e!RAJ
zKXne7x)!#oHV@zXGPMebB7{|9wOUUX>001l68-?<ep|2!b6UB$5M{Ii7Wb>n6f5Ar
zE6&`85MVh^5}lAyr;Yov_cIKItG9*P6fZNUIl~#XjQpY;2{%J<(Us?=&L;^yoPf}<
zGSsoGbhSP&S2Y%~!b@e$n~MKk8pdaE{o9#uC6ugeP~0A%eSTF}7X;BH=6sO+<}gM@
zz}<<~>@vj+;daq;qd)hkFyCYK>uic&qfS}JyLC3Em`~*rhCYN<ham^dsz}da`sv@E
zQ5v!?jJY%(Xn8H5yk?8!o0oV768%Fo1Py5so7W(xSNw4S19#}3U2#*UsNZ0*^dm$*
zRs3e+9JxHF11zhnTckN5CSgQ9FXO|__0pkO!qPE=Pr4AT4b7*4^WC`=fj5%aoEP()
zG4K1(j^UkL;TUou!f|lFGRLd!Jg@;@e;^iG&OiLRCp3y3tcaEqFC<3*T@Iz#ca-fH
z{b_@{fqn%AHw=1rBBpFwo|!X3jiKZu>ctC(NMV)vx42P(M`ZX%K8%~I>C1gmI9G8-
zS`IA<all$;nbHFq-_rD^#;a;{KsovI@hE{0BNTP74_Gt)`!<5?Jce+p8rfHRAwcQD
zIJ+za9^Bn5RWz*<9ej|vmU%>nK3HiJ9?gF!Q>EZOzC~Q`E4i~s81O~V5whZLaf5@?
zkPry{_ho)EY(zCb)t6;YF@6Rn{tWw6ZflXa`rnrctdtfx4o=8R(z$W(Mf!02hBK`u
zjm`1_OeVXnKcRd;%F2MK!PFcVd*;hnhFLYWxaQ~MF`P)3=9HY28?WjYGMEVuPBP#8
zxNB&+TgFZ_1KH5&PP>u7d(*{()TPZPXx1lA%f?ng5&$^zfzfm&E7Gwki3MjkAj&xX
zSqvOJRt~2b7yc?o_Jz1@A+Y6ARvyA=k<Xy&NJ*=2nO{#R=arpl6o?D~TE8jAvrPeh
zm>e$A8yZJkmwu60IKY#=%ADW{^zRM!0I&u_EE910rUP5+!<|j0$fH9R+a4$EQ30}Y
zxKJ4R-1rn=O`^Y*z^Tc->vob}q8KvdlKX+o`7WecttTzKVZ0KCr2jr3)^11`ll%~E
z^`V6s*rCg&s91xta?(p?Sx&GxmJHNDc!vczvIqS5cl>xwKPpVHg>j5VDxXniHp7^-
zh;n}$S9zhpe5YQ>R>V*k3J*-(&;yx>JwK0jy2KYGObjA#juXUb=0N}Ip`=dD{UmOz
z4Wu8MaYgA(BSM;lI}mKA>Zb&5&(7tV7&1TWXp2FDuYYA)Pl5X$FJWb2F>Fu!y&Q8w
zUIIfHw>C(1GGISE7D5uiShGF>G03H**5S@?8qsi@^B!@lkhw=36j?gVsqyoVnvLK^
zMmWStRhR^XrJDw@;bq>)>D$LOxOR-|45=M;=FgFLQEXygS2}gJE^ihYkR3q6O5;PO
z@(qXkD-89ByVu{<y~@q*MC*FUg?sa-aQF6ER!vD4w9RXKOz#152s8lyKLEf0)!9XD
zQ94VXxsg85*b_4OP-5o$bu22%!dH}G56pw=;t$Xvlw0$YZLzc&fH)dHTtvetB@7;`
zLesUU>K=#}Hqkf{Cr*I$DEGrkhos4Jt~J$$aQ@}bO|!8U)cDp!IPuCgD6cc%|L_MB
zE=&laT;3O4ZaEXwfQVT6hYnBjQWnkNT=3gq5YG!pf{*Lm-Wg<?+R#G`K3$jh>~Z2C
z6pT(MesJU3HZP!s*9obg3n^SR=^Z;d^8rJNiws0A#f?@oyv|~{5eg1vCZA*rg`njz
zZi{&OG$r)6AtgTGig-A7Oq~V3xx27W)0NjSDCR0^7DRb$d`6?M^CI9773tU!2Zfd(
zRji8TQ06fIMX@T$lHu5%`Guy9{c3!fpID{>mEA8SugJ49RXX64@>G(={CRmwrc}S4
z0Ejwd(3nYiL^MV=i2_-P&RNpsw61IV<qhp3<yeNSZV#`ZfvYE#K&abq87o;~g9VNF
zYHQk#>^u#ncO$rHvzj%i%IiU3z}I~Is|NGGyNYugI6V1oKUrnVDxJcplKnHTH)62~
zhv$QOYTuQsBQDxg_!{MnDRkLY(uS<5W1KgEz#;2>doU5l1ujlrp+VDAsRm~AXW$ER
zg{Z+_eCOQdu{nPw+-L|5K>7S46L{Pa!((Q1>jCJE&GK%?^kRFg$njspRR(1zucPky
zjQI{$D)WHmi3&i>!mh@I5?AyE^=hbIW(hidu=)*7+)nFUS5u<xlF7#S79=CG-0n4o
zhLAASjXIMKe{;T^=+ikj8JBca5SP1S*x}@{AiFCHk-Ch*Lx37xq=ktI7}}((eP4cH
zK{690k#O;WmVY8*K>pgx$LR}%u^j)5c~!pCAix0L+*iH|cJrKsgK#Q|EsU7TQC629
z>90#O#u}_ny5jXJc?>Hk;mO~{INQse7>Zr3R{5NP3_<Q1zJH!@dR_s%r5e!%7CegK
zW}^{DTNo9-=8P0<^1iC_&-O$LcM=2rx^A&^JbP$GyZfIH?2>m?=aX}O(U&|U9sM7X
z)^u<aEH-Q*I_e&xL4FnahNT5UTc~MoiPc`}PHK2zQbK{YcUGA_wAer}bQsTVThyZ|
zVs2gd+c5}TupCmc*m7ZO-KWbPrk5B(l=&F{CqkY+z26<xY!s-J@R}=!pjgv(hed_!
z7iz5^#rS=|d?gLYrCd_TRUwl7e||=`pGE%E8vEp8iYRgI-Owr$Og#jhvSMDla<zDZ
zd-Bdu0ab^8fACTFd%S-ofDtJnO!Zm!NeZxuc4krmXaH1Dj{pZ)4g~!tdz!NnQUQ~2
z$1_%^>A=rdp?im{ItlfK6(EWdxAHGzjY-n8{gv!SxPrDRFGaK#{}}_rclhWU&|(m)
znKNVlL!yhB%?MBd-%&%g(E>{s;7)2=_71J^)9pKx3>67rfx12A+Tn-Zg2-p!<Wdoi
zh?QTv8|p%2f%-9}sMB$j2cRC94-j&v><t)=a_2j(qKNL6e52;3Y{g_UMnhMeOFByc
z!+;>qzIek_gt@m}e=#vd{hg$9J82M47>h^$1THL(_b3+Ypwn}@N^gE;pK`^IzK}bY
z?$2=DDiAC!P_WrV!du#&R<z%+BI369pq-lM2BQQ`Ah}lldznblWSII!5WDr3>(ICK
z#fgdWvPEmPTw+*`$sa$x(-XmP9d!lZNV@UN*P}4On}pR};>EQiXb7_TmeVYtTV(Mp
zvPla+@+OyoeF`5!^ZSq-P2-dV9iX3DaNuqG#9{dEtl$#D>cC!f(asz43plxf19s)d
z8Sz~PnVA-3C$>ohE&|R*ow)jn?G%<s#0Q?(RMt!m3=|v{B$#GRINk22kJ#izA=*ju
zH;p=)TGA;T*`>ECO2z$RidnbfTC;VE;!Dr)mHybAP3W|skGr%y^u^`Fb1D<xXB@`}
zN}qeknt&J+)&#K0d+Vkabyfn+6!a93Adu$lfrSCeqsrOP|9qYc!_1^ys&%OLNi`X>
zl`?UnB=w;8>BeY$P>7RcqFQNwOc*KfD8^eh7ul`Ic)lD9#t9nAm`;1da6crpz&iiZ
zejJu)=LFTfDQj=erwLmTJS(<0)^A__9r(oz&%wuW<oUbFrRVOuB1Q14ZE|zC?68eV
zIJcqjcbo}0#<uTKGqv)_l5fN#5edak{1&{Z>Du6#2paCWVzygA5ERIkvDYgoX&{Z>
zXFy1BJ|3EAwn3!wQoJa=?$SLO;mqunA(CWn{<svf<gd8pPH0UUdW=T0cm!xTxc<2m
zE+31YF;uPIEec~XQtslmDZ<hd8rYn<l1wScG5O4n5mRUg5pJjJpTU4`W4v|jwHyl<
zTsZDu7^c*VpOqQ!%MJcPSdyjz$}sw)DuNYPk}$4K1tB*%JhXovXO~VbEJ|*b;ba$F
zfV6%mK1ptl<%^^;Kv5#VFr3t;6ny0&JDU{B%a%PN_LeKp2q}0%s{*JS6SE~!x7JcR
zndA;06%L7<`D;Ps911jl(A8f|6lupns=1G*!p1zJb`d3sD96Djf1AWYkPVxkJe$+@
z!K6}q{xvuN878|@kTwLtMHMmX7ZB2KvV7A=EPP*YOd3`=KnSl|<FKj48BzfAu?o4}
z+RTRM_A8r^ZwYLg=+<<@txlVExtbNM831-(B832R@O2fhys%HO5-Dk@1TG8EZCLiF
zqF5i!`7e0m@lgOBz_R+aW`YjHU9j!yEV(^SO87<*lCD76{kJQ0B4-6b*o=ECJ(20u
z(0LGQo_bWeAr~qllO>dPXZ0=ATr*9$YEdc7TtYUQN^sgx04SM)bIKlb6yq-xdCiXA
zArMzvL8SfFk&a>_SKwgN1&R0_kD=kVqix)n6FfM#HyaqqYVC63V@*E38&91S-c|JL
zVw;>_R(vOMRW@5KpcsCWv&jftXf)FV9bpUqdzf#&ny-<vxLo)=CwT#J@rlBMT;WXJ
zOK@1UFg_RmON$TW<)0H`frj+zy|{7Zx(9(K>IF8<J#>F%ClyDKkkR#SMon0h9PBp*
zf6fOHB@n8o0KIgyPqBDG?w+xM?NlOV8mW_JB6e%J5MQ41#&k9rd(1n2O{`Xn7o?ai
za~FjLtf4CM6-E1$KvC4B6Z?WV-4nv}e_W~S!-k7<dix%m0rgQaREEf(%!{~DT4o3m
z)Whf39bxUbsn~1L1T7oFd8jpYxGk*91*DHHpJzSKN{3j$9^A)VkS&yQgk{tSh;&z!
z&nMuewC)lU0rVEt%r)~A4iFFJI6&t37Qu8lI=e-PDyKq}0m8tkm?J_4ad$TyU3V@R
ze{lwCTfRJq%FLWT_8Lo~dQgT;yp340X!+Zr{1n@M#=UN|{(oC~&xvL~j-S&-pn?Vx
zQ*YR~^}~rsIdO6g0@huXC@EWV#NHI#G%poHcQQ_j8b9&-f{z-CXc7^iT<IEpKkdK{
zg4vLl1P;WKx)^fIvi>8<gV27zP~#1tB^8GCKI*cxUxDpBOM>y{^I$jaA_`^}1ar&X
zO~MIMr*6}lC;FnB8~^cYb4j9;55#|L6FRrYnRgz8BCs)<DI6pm*WNK5A#PgGgdH%R
zR+@4R2|3K_%`k_pkq0P8%2}GNHFeTM4<i7)rUO9*c!w!qJW_ViRE>^6Q_A6l@x~;v
zbm7DIcAyjd=Y`MeuEb4EAHK4zzqP$@8bM#1WWKrqLFA<MN>>j>XQN_5%d$)iZda*@
zc~MlGV<;2N54<+GLN@SB!+%8!f#>-<zx9vI;VLQr7=BhBSoe4KK<&cBF4%FoBZ=us
zZIV`Z@`Kwz8RRM2Hs`V%1|u>*KWTZ!`0y60TVGd@1_2=v1%;zS(?E!LHsH|Ovz@>I
zl5HR$qaeCcfx~f)PUP?{5%uT<2A}o|@mU>%A()O{kbT}g!cW+C!Fg&F-8K%LNm!GP
z|8Yz>;<UfJQYIbkocN5rFnERfu3kzhA>7@FBK~){LeTx}p$1>$a2U)1gx)T>e(mn8
zIIKA7$0^;00D7(MFaK7JCsE3e!Z{{^a;_GJy!@izz-ZY~a9lVej9Vm$T-dpI<kgXO
zAU1eZHhM53t!#zZA>yW|a9_tOFBfi#$TQ{t_&uTo<c@>&DLsuo(?P4#{`j3u4%!?D
zGLD;AybdCbimSZZU2t)T-U>SC^2TB)Min~(C6&)407mSwCky^d4jjbMTLge?#@%?Z
z;OZB0^bsrb_MQ51BlO4((q<7~5*icw1lDVC5$fS-oCPoW@*`w!V4#kh<)78inVx_g
z{8!8Sak|$LH0BRoq=Q1dtSp5{86Q1#-p7#s)BY0Tp<!)lP`&7p%YtuAN_GMvES-=l
zWSJT-{7aEYwzpc@hS+|ccK2C-o~11g52%EJ$nNy|9-c(0yP1~;_8lMoIVb#0ad601
zlp0vxQgumd>GHOgQ9B?Gd|jx1*NzcWl74nbw$~=%5uh|)`ff|tJ-bEnC;_W^3L?9F
zF}TZy8>yHvs%Q2hlGHIS$m#kc&^t@R*6e&Cc&tD$D0*?vf3oDg)i$oCepl`i=^nrD
zzpbH&-ZH~{xDbR)3048TRUD<?sX0Rubv)P@-88yDXli=r?ns0SSbt4aYe}eZ1Si!o
zp$``a!r;xhzvn+1LANZ<+CY8=*Ap27V+xA-*&5$|N@{(djX+gpR4?CgNaj?Hd%8>-
z<j4ETGzkN!`{y05GmV;HrL33Q&Xjy_>JZBZARJSJWeaH7%pEIWrs}*1M>NYyDt;S`
zg(+ICKf5|{9JY0&&ueD3u$LDY9*fmm8Z5l0Tm4JPBwQ1Z^91QZx|~BgV^EMA;#vmQ
zn}c#1Ju}xTghO0OIb&nR(8h<q-pB`^4Eo1h{v70QBN0{kRf}D%QC{yYD2>ozyiC@a
z!+Oe=%<sMN#XX_)!?~0@Bohk*#baQb-jfr_)E%&t7sh#=C`w`sI?Cp_7(8i%0U=Ab
z6q&&7cdJ#&Nc}jO6xxmsQ?MseNV5E+{6X|5;`vv@rt{hES?ZIHv@H8q`QVDoA;{Bs
zcm<xXFtK5o{DWyLC1XVM$+cr94|4uGAMBy<`E{S9{{miCbu}Z|$BZGx%@Xg!{sr8&
z5N@yX#%~H{ARc-^QMNF*EB{(y>XIc`W_@L6bqv>(K-<P=m2<GN$(`lk<5$LF7Zlm{
zt~y_Sze>|jfel;A3>Q0tcdKNzfJtce()WQn7P7(z^@Tvm*qmE(epR_0KeER>8A_h&
zM3}KuPFLuy1T>$yTvqed9v#<8ujRHFTdEBVmD&fsDp1(_Q%(VZD=7Z+D|3i^_fTlZ
zPtJDyvr=*xucIquY`G+PI+eX(9i1sMohZHhc`uW-9~dPa&m~TE%Rm*wsCkm;77<V?
z=AANFu76bZlYHtxlrz&COBEjjtt)7i82aG2D2^beCugan8Le$7<!03ibhwZ85qfpa
zw>P4c-h#Gq7XEzKP`+C0rwy7bfyMnvC77+KPoS)<Ta$pQs9!l5hp{b3+HoV0D*R<I
zoGjM+{abX>1oUo=ON)h9y=>;l0JQbeu~|va4Mr6?9PUD7k-)*-J|z`web}XL63&^0
z=Y7*CuUhbd^&A#9G9=EIb?l^%9G^t{8ObYK?|*$PoOc?*4JnhHCTrQ$GJEgy!0c5b
zxn(HwOdTcyJ(tWstv+XAsz1`N5@fmwaIZ+mgsFIfN8^&*kUAGB_HT1Pix#lq0MO`6
z4*m`;<)cl{L~IAh?;G<>v*69RXf(^*lQ2c^{*Ykn<%t+n<a0;NP(WHLF5T)C;sDMB
z9`h`+)nm7RYC!qP1vo@dxLVlBJ(v-MNqrQT3DLk%Sng#|mX!Z2iwG||>NiAA8kDwr
zIL1|V(S*77y%b~cKvj<Ovj-JLMd+f4xCkC-m5+BVz&rN0NwdXT{~flR)8>UYwXenJ
zYjY6h@o|0FXmdo)9N09f%0Uw&JW3lAt?Q27|0*!6Fi#?7kD0>gLqbP{xQ+m%NCd42
zVfk;PrV`)IEv`o(r#AftZeT<0dq}K-p^TPiTe7Dwf9qD~7zh7oC#pCNIsWD^bIGwa
zW=i;HA{PfuZRde4aR<Pn4G2~<r|SP^Yq&Mvo*lmduKXL~fZ)sVa`PxY{Ft-P+a-b9
zz>l@4a1lFel`q*w{Px!e{=24s#pry>7cL5c5}&X!wBoIr82C}a@P+3dqwq!u>I0&j
zVk1QprT>dkhMWn<)hW+M!X+x}?WQ&DVlDX;Rjx}8j{*#2M{DH`BO;|?E4MiU8Kfjd
zl4}TR@PHj9v9joj!=-4r=GL@9Oo7P58$1M1{|PQ1g$>Q6F7uyjl$+AQ?nJHONRT0c
zo9eD|))+TzRIQh|{)T{sRXD{Y@N(LoMdEAQ_=bLm5iF!ze>(9XI6+Hx#dpSsfNCqs
zmi?4aO~47*VKZJnk^^qX2W^Wz=+Q85zTsaJvxPD>R&{lzUQOWhnsy^`FG%EkNWha|
zV#TRtBsoV(JTBe4IK>*<m+mqQ%Ay++<eWbh@}XIqY>|YRw4eU-N?qHU!iD+FjD(#k
zrP6@oYUXmgp8y8WoxCt!5OcZWo9U)}7Ou9$<zH5zu||RUGlY^0EfBGbE?M5>819HW
z4nKPkpwTl`*7*&4E9r&r6EVmbFhxjlvM236N#~L-hkpGwY4$c$-9Fo8K;dm2nrF*P
zXQHRT_l!|Ys*GbqpqRzqGL~~#yNIU5?C?%@@v#Mdj6$J8gJ-pqTy3=hk|((od@7^G
zLxnr9;sZ*OE0()qVRFEdwz&Oo897Ac?fOqt_viGO2tO;z8>G5OYgpy|byV)iIlaKn
zdLutLcsMH%AL6Gf!bagGdyxY#F-0o`U#D8IUM+u;yy^$fs2$38Rw_16>v!LKvPBR+
zuf}2|awT2-#z?Fp-xp5+zXHe@%8HfGcNJqD3nL#wWN;X=K4`3C1*?Q$p`_)OU&Ute
zxd`G-#q0!^)tSr=Q-{RB?eVM&2pC|T#8py(<GqBz+TMz(0PxrGJXu2o>#8TUS}Ik{
zXsw5r=N-~!(7P1C%yr--0X%0D9RqQ)oY3)=Tx(pv!$4$})icX+mt7WVkh<a_;-iSR
zZ@)+M4YR8AhNb9~JP6FiSJ#AYu;Tj5{u+npqY229kViK8eXIn#E)QMJt28Z)_dCcX
zX}-Agii7B3)a=SG6GM(K*va1{T6?PCJ)O3aSef0T3?HPLo5`cCSw8IL(LSK_8HR-G
zPi67YZr2{=Ug4FeNIyE3Pbpv65s`yX&n1)RLoadDeiGsLH^ldVj336-9hwjwSL;lw
zsVMx6t{DBMmI6BVU1{vUHH!6r<ZDyuFbYYHBmK+15>N9{g#M70imyAua&GC0%}lKC
zR@aQ(=CSpHpR2Vytq=hBTMha?-M^wU71qABp}j!KRZWp!bk<e3^{m|9p$5*8!l1bC
zX(9K-+Eqa36!%>0iBv-~(R>cMq_HmV{iYm1;5w*-)qL_O6=8lWH$X0ZYDzY^C$?tx
zw`-<2J-6!Y`Q+pEE%Yev|BpTf;OTRHzG0g4Ci{qpkM&2LA|-l4@f$rJ{=|nOhvrw!
zLsi^zV49n$)aXei0I@$-3IU2_eBX`(kF$$Y{-7mXjt)^WYhX5oo%mx+UXOuDmhpp}
zy30{tTn?c~p-}Tpb|<QW-9VoLEYL`3DVIW;;laq5rbu10;3r~4M$gGvl#`^{&7GPV
zHT57eQ@8f6^}<Gg356SMHx&sf*{pBLbMIVlk$~|gy^#ZVL86kxX`QciYrIy7rf~8;
zeU_;P^H1A%AGG170no&A>b^S{?UJ;Y0~$y5+mz~4BaS`X@&8v(^k^@IQtOb+(`7V-
z-a01;(r1#af}G6$C;aKk11zl^?djl#;<qHV&dKBtb1zZ!w0TLQ{bAM^a!T<40NM@>
zBDLPxM->AXN}bv5jwgfSk)grhO@%GcH~-VZIhNyK_c8S49z$_HgGbU)LtO9Jtj;mn
zvK)=+&6`!xCwP~jUHqsys)3>sC594P1;_+EYZX1Ca+i`swrK|XZnY05HHRWKja5bw
z5KQ@w*Q!^3SWsS&mo>M_W)lCX*IQfRUTe3)Ea{cvs&*{AKeehc$jRp)Xi#kmbq02`
z8Q#EBlL5VQlqU1ywS%xgB-gwcD&SfsUngCB?lI|(6q?Ov^-CH>y)|?Au#S`0cYuK4
zb!F^`86xQIn?79A1EmeERddat1K9lg%CxZm?Bi-Lx*bHhCo+C2(@93!MU~Fz9JUqR
zs=AVnDz<#p_I1W$3t%LtQ#rYwHGN53fX{rUH7VYI@AgMNI0v}LBQuq$O!#-F;A(_n
zyqq2qTQc41rl6k%@Ewl^!rY4lo08t>2556;Bq9<1q~>_Zp%(N=C{*@2@Z@%-fz4->
z<e}P8vAHXRoKB}_d|<I|sG>eU)UW4yD_PA_yFN_e=Q6`w8ji&7r?X|%QNgh!8Dtz@
zcDSa$cj_l8GickkeU~rJ%eTWO7H0d4Djht5B#P=W2G>uR09?$F+fK1<L^#-7`$&C5
z2iRH`Lhf;JtTF>>_%Y*AQ61`!x#xWC!caK2><@y=v*=RS`M7AQw)XdoXhutSqTI~o
z25<c2pxXNr__aDzP|1C3aokJIP<fhnjLsSs@g7=4?>f0FqRRES^r-bv9-Cq-TZsQq
zWY*=2Pf7=Q(Z?WD-`F1eSWS(MVSvA$OTd<kbhUtxVJ<Tcs`Qn76VleVi{kF8b!&}?
z9c+VP{E;IAFX7?=*8HLlDlfoC$lF51!IGNuBLu}l>(YpGAN*1_twA5>GQpwqx{py*
zR|pmWO$M4hv>-SP;n|;(nWo)>+$D0ga!ejU#&P_9br3n0zFPV{Esrjjl@N<>Gp8V>
z$p5G%=_GK-J1jy*_c8un(9sD!^)SqZrbA}sGk>D97N(dM(!=C=5MLkJSB4OFWt9Is
z*d6p@ctp-6qp=P4QA4o9HM|n@JRpn)jL4E1X8HCfzgTy%cVg{7yiCp?7vdEhzP8k;
zbv-6qCM(jbhGe?z5-3@PT+h4lWMjCM8{x7H7QMRgvLJJbFwv>g5IlpW;xn!n8Lb+x
z>!*C#3+Q|fWs0Kx4^C^m?|k0UZJ(-Xl*9qiq&S4G4OwUy#M0i-g(Bjogw>Q8cohd-
zwQXbmv*8Gc(kVZtU|p1G%npB;><&<vHyXb@IKt*{y_c1g3}GSMg?cOTxDpw?mc`d1
z%11_-sKe%wtV~+A&(S<sUGPiXyUjk$sLd8^0$y!m+Z*B86dg%vvNH61K*oX%jg3QY
zX;<sg@GSV0|82{wkG0i0iS6h;gt++x+P%u?B@xXWjksLhY*6<HxmOn*g+U3nCSiDi
zMJ#J)Aa)2Vr6={?KD98tSJfoXDLI^IXVxKQC(K+W7Xk4iET39GtRz#RuBtU7C5)H|
zVd6Kdbe4n3lJVX>DN6O4FjA;y<><~ozokW4i<o^DbUJ#o8PW1FzQNrQSDgd0yPaRV
zPWz69ZFGt?vuj#@e7cU&%mHId4owy7NrQUVl<8SXJeOt3n;LC+k+n>OI;5LnQNKaC
zqYADrGc*Zg@b1(nk!UX7xwzI}k-k;Hki<G&S!{%mC%Gj75FqOCPy-il7Hh^j-Ep#1
zJTm*Hka+s#CZgMvO^zlm_q6^*6(fPwkMi8xe>#DV_>)kg5h~u_v+2>@G-J0Xoar6U
zO5~!N(glK|PTKa%0Q*Je(>fKg8!=1rd3F1=V==fnMKQ6Rd~g=?lW}k-9dbQh=oS_6
z&SMg)^Y!@2TrSgQp8&$rMP<DivUkhv=)}!l+-q1u1DpVor`lrc^`(O6@$pw!6iT6)
z<?X`~Uv=V{KUPoLsGYkNQ0*y8YfL(Y|7Fse)g{dX0XL)oK><Y6Y2us%8TX4NZDX7g
z<pP4jqra+Y+fUQF#*8yO3K+Y5yGH+aDq_H1VZ)VBmH!qYN4JGYf)Ms~sD_)Jls0p0
zSHL21>`i2egObDVMoRfav?V-OEM(x^&?=OU7~;=>TpZS5**ls~s#m&!JrhkDJA!u`
zd_VS?2~#1Qyju?R2?4($)YM~gYLk?}8uOA2ckc0YhY#cv^QnJmZ1)6Rx1`8ar+?BT
z!>XjM^+?{BGsNy`AoqM<zJeY<Ai2CFEi$axmZag?nKkL;UwBRM0$jw&t~*)8iRMu$
zc?5PG#FeqWTc7cc=Fks#<f8Z;76P$Y>+#}_z%Oq-;Fqt1S8#26c0!avgo<cfwH2u?
z{k6QJM-+;}@Wpy1wg4r0s!lEe+5xw`$i8+=3f*mQlA%k!up3-ktlX@>xn`*OuE?Vs
zn)MPYv0TG4yt`6<Z7Bf*V++xr8>#PxY`b#uR24ICIm2;{*mNm}WBc6XN)MPg71u8}
zO^In4-gXoNR0<~Y)IU?iOu+xA1PH~*CW8(9`x?~?`e0u&5o4ZBV8QEW>aTkqid^lK
z+5BWxai!&q4hAI80)`+Wu+Ri6qXVj(Sg)!!{^<r3c(A$K*<&y9yTNj60#RjkmwUJn
z?4fL~7SUH&9gE)HT8PaP@hEUw11N}9d{eI1oeA@U53EjOxg)!c4ermD6HA!CTP@dG
z;;76zBH}fVb6HYA82&PzqS}WA)46mFYhDl$t<P&0r|>2_$djWg8e{@dKru?K0+T(t
zmLctTXrM9mSw~xxAxp95ceg&p$^LN<4If=YnxiF-J<?<9)8DJ+e*jaw67d#+nRFt%
zXTV*&yINn%c$}VM*F9T8-}m8^E)@8dI=RS|1n|kggy(Db(%ccaKlEJ(N(_KI%K|g&
zx%+bDm`Th=(?eGG{g2d)iUj~0A6TH&tn|Akzp?Q#b$dzz8Pi4;A5sG`OOlLo--z=L
zcNPkGgKkKRv&M!;9DMd-FV+op?{N<gFrOdIFv_##<ApG9D`fpYi`JrS6Ni8yaawbK
zL1W}OgfF%Ui1f>JAKQKS-9IKq4Ng#^?#mQeWpr7OZrNIH(Idr)$XrX4|E33v8fVnG
zivaoS`4N-4$)$7$$OT_4DGGqlHLH3}iDV+_c!6n&6lMYhfXJXP`<xR!83|f#1j)Jr
z%9+o`6kWjs!bdU#YeNb4i}A$rr!A*#=Dn#E*^>=H4<F94n3qdrN;Gok2!8&oW;5Sy
zZ{h52|Hz=k*Cp%=gM;-1wT94gLs9DAv0xT}vGjW_X{X^h?(}i|uVa6b6>r3tMclI2
zMp}h-@`CU~J4`ybBKyt%1p&pg-}V7X*H9UL@X!MM8lJSf0~&Dk=^2|mb<NzjS&$w}
zqw$v^TA|7EQ=>phbD+OHRV#xWC-&6k+2Ic&$5^m6qx>vN4I|)HQRxgqNm>l+OK0$i
zh`??TKc3bB9v950xQJf_R4ng;L-6)?k)$khytWV-ha;<nSlq)RzCNc1Hh@nfRzWse
z2E5k&u!JKBh(Vu7bl>1RG+NEw)E$hD&&mUA!@f`E6O)OUcqbr?WJHzhi2Xao$8IN`
z<Xr%Pf6`cLv-T=8*@C3C=*VXbnl-9TjOW^<X-R%PPG+C^TYaP(B)2r4X66Ec{JT(p
zVVH&ISCeR(*;>3wt1}EXYA7CKzn3_lG_-la68S{lMO-pKe)#l@u8L=i#CJa7rMt4h
z4z=Q&u2pMn5g||wYA-2hWkMB0ywi*!Yayq7nt%E}4YMX))}#V6VITa&SPNnv|4OJG
zucbYz-vell-&$4jWfZAsq(!{v#gYO<ZQOsUOUZ>SQLDD=+;d*!1k<b)Eo|ng?c^rI
zG`VAYYwCr5D^f0h#{fikx+%J*0tt5=?xFO@uf?90+4WqC%INd;d(OzT-bD3fd-Jp`
z1{A0H{FpexhWJ`d?}1vu4If-BBj;2d#6jw?Bm_3gr1(^5n?yRHj^`&kfpT51lexJg
zi^Ox3#SrQfBT%6MmbXl-WfrSE8X_unq{CgAq>nkizf8^@Uwyihm~_bH`TWdxcjq&w
zY0YBY!R~1q33%bHy8_ZR^!j`z7;`;adLmU=$RGd?1o8-Mb?GAhDz6pqU~QS_eZJsQ
zTTM3~VLu+uZ5A>I7$y1^{p2C`{_}-QXXZegxm8l+0s9iUSiz5ccX+2UZ$p%n)kH8L
z!aX7rS)0qlhnqIIu4~~PvDrI<)`Whi3jgoeT&0vH24RUp)X#LIthNIahm6u^lx@N{
zDMxrR(3(QNBMV5dBmW;8^c`uW0`$oxwSBkqhTWeOc>#@LPiE;Llp{hHJcjsFbn++m
z&;}iJzPn<-cPP8%QW(9!(`&IJ?3dONJ%=ra9=1=xBq?v*Fd2q@%MTebVM!fPM=EL@
znojSxvf>ObDD9$V*hv{G*BN>MuD@rk9OVNgoE`r&zhYGSG<}Qo*{G~1EN^tL(WL^!
zOPzSMa^JMWT@u|kosVh&zaIonp&{ACEHK5AFEN{lk=T0%ERmkQbA&vas+ou#sDBPd
zx@uA~-tcNqfIx~_<MCzsuVQgpt*g?n>{r*qJfY#?;JHSm2xIb0DvXA>E7<aavZ>5g
zal=|Bc4mMdL=%n3>8{I_?V4%x4YOy)q(3X2TT}B1AcS_l2>}4}hg%QD)3ek991a)?
z!bs2!NklCl3{g<K`G(qKg3_A2T&0g!+$gDz`-bnL2bC=8hk7wI)+ZQOEM?a;H?Y<>
z|4n9{Vl;vm)8CMs(7Af#*n5?YGnNp}SqzObxV;qy>l+~F`GA<~iIvI>q8I*KDc=kB
z2c6ls{z63*DoeIq#5z>kdHXZBgs4M`L(bqA^ztFLQmtHKnRgk^vitrS{XY2vU${G)
zD}fOG`kD~qH~FvhQR*2taT|Hj<CDKRr!LVF{1LTozp;_rGckrOa{j9E^sa@_0<5lU
z&<e`V;jOqMScZ?mZ7UzSJwN1if9?1?7?LBv6*nrzP1j4J7$*rrGo?xgA`Y}Hvi+dQ
z>-d%Ws^au{iU{hzAsjf$^T%OWB1qpd+cf!2R2~T+p2mHrfrbF2Ba$mt2H>&`dyJe8
zR3rkHqmNUe?Qb4*)o##5Xlq@PHLLwOjVwxLV%+Wb43p{Svw+p$Z6l7K`CW#PE5-Vl
z!Bik++~!zUZ2&`j`7p_9>#Z8#CPuU(zymC92_2CrZkSJb|8x6-oNu9$f%vH7bL+fl
z3}m}R((Y9;`C)zB6sw93EHFH}HJ|9wIy%h~i-9o_(&Ee1w&f1p6>A(fGwibiUQ}v8
z$4rZW?3m7Lw1xLxVa^yuY`O>KpoM>+a4(FDQb?=Djf8!9RGHNRpzZ>=MV@aq^@Cjs
zOKubIV>kyyY@fegf}*kHS%Q2ru;Zo%MqvMkm3uf4cuQM+!_LSVEX0gLkLl&j_PKAa
zifPrUpW4RX<12BSOb;oBjlNM*Pr!L0NMX}H06LXLOjnrOX7#?af<9u<d6k$k)UYF{
zWHMB3!rB18C`_@<RAjGD=)Ha$cTbvvzm%*xOs=%GKWM0Seq%22`)@}!rzrt}wC>$X
zOz)>pO>@%N*#76~@dN|du+BDCe*LeA_4j4ntrB+Iy|>0by%56=Sq`3Ou2@wl37zL}
zwQAh0(o3z*pi;p^VH0c^fqT3!zJYnpLAr7FgP<XdquX-m=fxh1d#V^@t;p<#aZ@Q^
z^5*7jNw9ThSIO4YX`Dv-U$uXeD(^uzk89p&a{>vzt?oPkk$qqv*J)zMPeTe~E*U*v
zH%}>SR3MZX;lH|w3{;P$J<Xq1rN6YQ6)LMu`R8yR+glhZk`K1xDwqW!Ce0}1t3Npq
zDvY8iu)AN?X8Dvx@Rr)M5|ALl()SPYsG=Dy2@zm`@hUC+fP_U@KV&nNy0)lQQ9PPd
z@E-TJ_G$Mly@xGAJ?^1K2MC~^WFzV<vSpo2aR*@iG$dS3v+JuHLW|g-KRQ<x@TlbK
z_0lE|w8v?_Apj5KwA^_>UqAs+o(HaFVdE_SmqFe5Pf3u~ae-^XJ<n+Y3scO7((Naq
z%m#OQc|wb_(=m)#gVY`Tm7iq%U95T7p~sXK=WnxN@#PwkSlG845ingH;3iHJp1<rZ
zjR$U!7M5wo<MnMJu-a)jX2{dGbCHLXjtmKE5T)by*+aR3GY^8@UA{Lgeh{k@BVy0K
z;G7{h$6sXeW0;ONS2i2%EJhCbpVH`xQs5IeL2R7%X-DKtWXRK5Mcauq&Z@=a3#3aF
zocCj9_cUi|Jhd$vv{%LLpdCB+#D$v1XKn~Y-VLwwh@mmCO%?tH9tbi!I3rkA>y?G~
zjQ#1~XP6Uo->;+^GHVBBJ3Mup^$4we>obu62pJHGgVlfmJxE$sbV(d7reQs{HqmG%
zmKClH6cz)}k!Oi31;~U$L8{$#QhPuj7?!%Qr+1Jtr9!-SZZKW>nM00~#)?>6mI|S7
z0B2>=SpY$Ctw&#=@rMxk?WA2JASR@W$$=3?x;hj7jQvWkc%+)E5EFXoX{B5*2mH;0
zJ{G*cDe!dah4;=wa4PWvJn9gG|LBfasQ+9uL|Vtjcwuj;9+u*(=9eaplnb9osJxQS
zNM3qscnkA*r7STaM9$LAVWke?n#<lT?i~}my9Q{t|D%(Ahvk09Txlht!&K>``N8t`
zxixn<<(1;>+`d)2Kl;pk=OPwNZP*v^-BT|>!_zmSzQUgUWS#7b9XG|!AD5=W3#8H<
z_&a!Y>r|xy2&gLvhRd~eX@|vatnp2b`i)~F%Y3=<2L!*v-u4^SKY|rCU{9Z#%2HUE
zW>D}^@30!1rw6-amlOAA&na7Mkk0lPFgVmsti8f{O;&cq#8)T`M*TkcR|_TZ!E7Jz
z^cd#eIxtHr!u-FnbXHrVHP(I@R3!ey9Gx9d^ABLc^}j!6SW`N?nX6cH3l%y#^v`NN
z;8WLVO?J0PLA4L@^(-cmGgI90Y5{*r;WTb@RI1p(mkd*e4gJQ;hwhlq4oa*eg%qYm
zZP)MA-ha>kIBf<ElpZ>vroh;~fE}vj|1RUeCt-828z97y%)@9wkk_g|E=x1+ukH!b
zqxi;i3Aq8rk&QEhBZs&Ane52oBl{J<%H4asHXiaP_w<xW$KZ?aFe^-v1|ha!ihC=z
z@fvXC9v2(PF*#FP&2n=W0gVlkfrVI%sr$*tmPYG<mRywNj{xsi0GCWV8gm0EgI_C_
zyEQt;sTOHvD~YDWzP)yrA(QhZ3T|;2Y^JBv{!j;6<9_M_%~W#z@`TyTS$s?s6)3bF
zqy6Lg8gjD<FE#l)H}yb(#lTQDh1OeWXT6W3{08rRGyqC|b$@-)-1bJgn7I~<a^3W)
zTZ__V*2iyArxnRFbi*x?R$zBhSV1oT(6>Ivwv-A&1~Os3fhsoitjK%Os)~-G<v1oE
zEbDaX)OxDcb^`Thbys42B%_9O$4`SoGv^wlKE?rlNC<S+y3GBCqufw7ANg}j&#2n*
zG4!V^8NbN6sfJ^wR4hAc-Q;ek<MkW?^LsAT`d5CSKG1Dw=U>rrUZ8y5?9QS5W9@9G
zr{8f7t|5Ue&y+Mn27GaOgW=B`gAwb~q2giHMV&db3Mm3NkBY9$KS>y%A9NpB1G|+9
z5vpj!3J-UN)7KP=l3d#KT#~)dY&c~Qzzv1e8|0kC=Dp>q!h>i`$mdi^HR$)dTB~dq
zocQrtskcUvoTMIFi0bZ>aI&pKmwIr;Cm)%-ZYGthlJp4p{g|tBKCD+k_uy*7G>M*q
zUVjH87Z~ja{S`8D#gBKiAL|C_26-jy+nwKyDE5fL;$l;2`1jQxQ#Y2XoBb02y40&k
zm8p+kJd%SEsgzN7WwfTX-&%s}O^FoI;z2TW=d*{nHK5T->i-%0be)*a-rPS}*cNIv
z`-q4?SNElKH$`NA88J(CNf96|((jt|HCbbrd<ps?K~<ZjjIlAnA{}GuMlCR$WY<f-
zQ8_AfioBpNzN%rynO#>Ik>5#mv~`SE2)XCiM=tVi%L;22a`(ODsmy?yW|LhO0#XxI
zGU)%4;}6zP@Bfi&vvo3awg|wBdV!R>3ViHHm^hPU3f}rj4zWd7nepsC5|~^%dq5d6
zUAaXQDuLAb(-6D?NL?YoPC`J#m@M@o2{@4`-1fj_i5DJvuD~58H8S%3n&R9W>w(fW
zTfj9S+gha~iK7T(OXW9LJ_fGYYVyDK#bZ^x`O0|9z(1BciCk|y8Crsgx$><f`V6+w
zs;~lhZ4L@4B7ShJX-tbUPfTD+@rhl?4dEfPS%o(SDzI)q-oTxqzD!8OzAAs17B6Vj
zM!B$oN2khYPf~fYWgze_Eu@L-P1bl6K9Ew+-#avLTZ}-`Ctr!*OuJm__ltA!bBnOo
zyO0EC+146Z`{@jgR3}I;XU}X$e%11Z(;}d#p%+*7OypDk%R&ifXO0A)$h_<#7lEN9
zVwHRyzX)6!uj6;L3-IBj-q9WSpfVGeA0n7L`(K0lp&|~alZ))T;_qaFq)4R9(wXpP
zACi5I{X3TmE!<0EpIaID;*Ofa6LBYsV*72mkEHwNV*z5E+>pJSong{x2O;6l9YQFm
z6Wbv^I<RQ(D|`)V?m1!PNc3#4;MbIikY21v_8*P;{^LuNBRa>A9tiCO$<k^DHU7MK
zHF%VsYS4O>>+UBi^?!LqJP8VBrZ9`HTWDf3>SQSbxcJtU>u_7ux+JZIFZG<4u%rv4
zHyLTFIx$$;mHwx3WIxW}`Z32Jw>OKinhObGI%N9~Lc+_;d=59|!C6cN>$E**mmq)C
zcq<uvhNzjtXhpAb92F-Eu?G43j+AjZZW?=#c?*)1m4TK%Ca6?=&v<6}$(yWvWl6|;
zyAI+dyc!*UrqhyTB+pElg_F+v;*7@drv03MVY83(^d@*@0yhEzZ{nYs0c%ALM%C$3
zzHO$|Ox&kaYq3te5c*Fvsp-FJbib)AT7!i429M4j#3t7kf|4w^f3P1?u}NnoCBdZ*
zk-M$wnzred6<d1GAF=;v$F=lja&9~x12;JA&Ytnh3wDEfq^q96S_spS&$Z-g9GU_j
zKii}JfV%C3`eClKH=)|W0Xe(lcYx4jyvIGLyOh6wN=iTFBj}5~uV)OKk(8xE!4}Y{
z{~_(xnYoEACz3~R5~;3MFwko%OL}#}hiaLv+O1zFgbi-bNi-;}y)*=(uRJaszHy6H
zne96iCdw<Y5b6(@<D&_rG8{(Us}AZOLqRtNWoE`2oO1oVY8lRd@b5ZuMVkIDml-MB
zwS-RIAiGV+91yxyhiC=_RPA_xMVT|MJD-0K23qn}TA^Gxdt-w6vz}4TuP{l;)WM>7
zN@cDbaC*3^m3EJ(vYh-I^d$n)%nysSLI_6SzK#?>Z=a_ye$`M5qr)w^rfw-;CYCne
zCa7;4!@DN$mUwe-6+U<{Uw(gj*M9?Xz8yxqck~tbU}63plg<LIV&}Yg?_(K-)&)VT
zAHZ7p^ff8|)%ZhvV_gdw92}Al;8u^Jyy8q{==b&uklY7T$UKFXX8+epUlX)?OldBo
zZ2F0F^y(v_*0OS{^*0Wj{VCaksJcX-pheYsRR}EIwsW-$AqL%@u_B0PNc*{f(w&n_
zN5~fvI+28udLuNJ|9}kJ=jG0(HOBAR%d6oUotSSEhgiW7q2vG999j;ql*9n8Q!N^o
zlHa>Tg8pkH#vv8CMUsmGE;Et1YguU)|C7b5*X1-9UhnjQv=Eg+Tq#jR4Rf5O)x(SC
zG@rrue8hs0T(eJ}tf((XV_aPm&gX#cO|_Vr)*!#3$V3r_<I=`nbjJ`Bcnu93=pu8m
zA_B9^l^zgAY@+bCA^NEhx$dBe+N0F*MS2_YDOi03>5?-pAh{`{POICwhX?{C0A<n@
zDXyv2iH=!>oa@r(09|{ioqIc)iBctJDk%n^J)ER(pUb~o(gvaWhhf-WwFTz6{tHiT
zAOjc^jUC!rth{p!@}u(wzC2NC?u_CoC;_bEvzdmQ2<-krF2W_j#o?q)TFylX(o^!W
zh3n--lZ<6sfk5xL`RQILCieMh%K-R;m^QoTwi$u9bw-%8ia>*<&aBw%y7GgQ*~{up
z$m{??iV0W-COXi$D(N|YC!Z%De}6;q_%S;|Qj8PXIa8KRJUz-c_Jwbl=8+OIscKw3
zE#CiT0uG8O#>NJg?1K4KO{N!beHRN=d7U;a5Y%+Wn{LTO76I&1{J=XKMRSDm*cbME
zsfY0aCMSLr>wSqvQRWj5w-2$CoF&S|L*E(=lSig+Is8|ZW2tjx9-K~kh^Sj9XF{Z>
zc0Lp!51rM%ah$SB-yJABgyXUv$G#|KS#2mjb{)?ixP*$%4}@vJkU1H4yFoWKu7^21
zF$`X#7<QmxUC6BM%@Vo!0s7GfoQx_tI^PSBw%<z-J@E9@&rsFB3h?w1y+bmjyoJx`
zy}Ge8uja5pF<(f1JW4D&`ZhgTr~_#Q3gU7@k_i9!KUe}O697epK3yru_^11C;yU;#
zeHF?`@`nSkHE=p3f1hm2J1J4(f_w47Mh4z+Yh9#8u$$&7of$YM&R+o`6Z6C}kIR3{
z)pi7~6U-wG8)a~`g$nCjF*<8k7dLo&EY(cE9pz^c73|x<Q$WwcA5pc$4P%VesmK_W
zS1mo6!KkQ4pdQHWNU;1ulMrOr*n`hTR{=XWjGMvy+&c@k%G2eFXTu+s^}Xa-g>a29
zX_5=Rp2EGLrNga92ZxKHi)hWL+G_tVuD%MiWZxZHt0Z)$FR-jJj8OgxViW5n7RG&p
z9*P>Ul<38d9ggdPaIA@J%+2yzfgsrN0n-H1nX(5V^7ug)BimRRUA2h`Y!SOi7V`Lo
zbYxxJZmeb)8Os#7y<=wKIROkx)|0RyRWc+w!M8Ep`tb}7iGWz-o+KrzGPsP7$&l8n
zme~#Qi($$Q%56LYbj+{*nNH0)SDOh7UD4Zj{yP7^k3AuedThXvyp`B)?v+&~Fu!^z
zb15Bt<rT2oZ8mro_*{_lU|oA0^9EnFhuLF_;q51(Tny0>d=i;*R?cvckn;#w%(e?)
z$E(6-M{+Ck=;;J4crkBkaE4S+S_#LszT&bQ9qomRT+t#n8WQIvb9QYjeOHw)z9M8t
zD->h5dnJ|&EZq~WP~7b$h7^M@WMZUJr(}{^NjQG2yM;qX(}`qjR0!mh%7d-P$6LSe
zaw1z20%D$3(2pgGq1Nk`CBo+BIBL+$&v;BHS*7b_mj!vZWU=<$MA*BA^2p@g@xX5Q
z-WofH#aHwWXunNe`frRb{%UGxc6~T@ntKPOEzzz)gL9=h9<c4<)2{YmQaTh=6No*d
zbnWJkcH&~#{=JI<{^9_W8sfs5m}6f+_EPkgaYw^ocb-spP6U~c>j6%ko4JOT69~q*
zE~77HTJ{n00s5VDRD%rv#+lw=(=L%j?G2N<)U-KOdnbY8m8HEBz~*oQ1%n5@4g^fN
zR)H1~mwHubeqi{w-?ytTZG=ovE@7=>zJTBi6$}jcbx_){eUQz66!>!1lt)sHn_2L|
zP_;90pjJDt5JMIEI!ncJU&w^%+>JxVTdKcp92R~$m(XpR1>>2m)a)ozR%HYXIvoD{
zZd9Lo8L2^R_M$Lkv`P2`hfKlb2;<fZa$^B71qK=tUIOk7g>-Fovk^#XoWByv7Ggw`
z9~4E25Nv9Nzb_n-Qu}{_QvTtAnY`N#8H~}+=8xxK5w6X5eht%7R8`Lg#@MK}Nc)Pz
zNt{DgRp3~RbHCqK?dxp?IcDfN`X4q5$Zgv{Dm1>%RNQLNBg;Cu%f4(uy@Teasq(tC
z(VP{@Y1;Snlv^nc+WX4|xs%t2!WE$B#ST&*moiYrPHp}J+k`wejJmbB#c=H7^Cq>_
zc-d}Ci!?Iyv+`6WPnuC&<L^LCdT?S`U|6nQ#b_NR#D<OoYVIr~Fx9U`Qw(kEuG8_6
z#M3mxP+2F*{<=7iq4IgGe(ez#(_VVy2!bzmZaSCZv$C~7$-E)KmGp&gdMSyFQov%w
zMfF2xhP(bch7Cd27h0K(A1M0>r}(Czgxxqn$W30ABta8(K<E4YdoZIBj3s=dQm#!k
zs34ECa>f5aQyF<(&5rtjYu(z(ek8){48(MQN)HbXA6=ZQGhi{lZkd%1f>PDN1#M<y
z@+!<@HtQ3`tz}J0N#$R{oCS@!QMbNso{c}?Wf4`4JD<KK`*)@w9OktD__$jfC~FZ~
z7F^ztTjvPewFtOr-?u4DLO!8er_d5(97<rg|5g(5W7djsNYtfb5b-^X?%dN-p+BRy
zW(F5EDp>_6^-Z`jyT@CX@8V5msvL#K#_}ZFBgAqa5*kkv*>W9r+n>uR5WO2^3mI;h
zh|U!Qjm>V6_pL=GwN9Iax#-oh1sZe2l>+L9-#7>~MFzu@CHj{KZd@K5EP1@5d4hHm
z0{1i0{g~r_LHbz8dk<>BqX3MNg9PWsh(Y9+?I=~3%&1vtkS<Z?O_p-z5l$iR5QPV5
z%Z`tkvCLMFdd7G-EG1ei*$;cW)Cw*Rwli>b)31a@u~m#dNGxY;CH&aF?z80-m7S>1
z+vn6UoOtAp5Lc0~Y5#^^KCs_FR)mgO2fyotm>&!M*Ils-C<)!w3GfsbTFb=z)wJwL
z`$n^)m6?r#3a0PNgnH^#VYb1q?UK5p(__|(D9qX0Ng$U%p1R(|Mi4TBYhYgBuz*y4
z|L&BUs=uugrC<c}0%l$oE@U<-ss0CL>C}#o$-LDsU@g}9!f0!6l21%a#foR+kU`3}
zEEf|UE#+oB)g}5>8VXrq?IWrvY&TnnQhc{fS>S>##sQlng}KmosPW%1Maw6v<>5TT
zrho@6amu9f^SdV@rWrgiSBie)3q|5`lEo+1dGITTMK6wZrH*{|bT3hA&#41h2|v?M
z@$d}b2;Z~|`&&qJ9Ix?W0^qa;;`-r?ySmeRR~`IzklKVCnrIIcEt~Yn(sGpWC7x5{
z7VhlSDteKdq14-*oP!2$|Bn_@%sZ5|%F3BnnOM+lY(l1<?E{SSgUY!NhxupC4+a%c
z>Z$gnjT(`PrOx@kukXDKor_=GJk@RMH$n*QffpVTj0VR;G>*ZPz97O67-YJ4khDc!
z6wNGy!<ouJ?MP`!!cF{!%h49HPoTh=xYescjI|Rc=~%pbWLrC5JR1tuv;E2jMmrH<
zw5tG4sAlpT?)iG^f|=$<<(6n&2a2+Hj3W|2){z^jsn}1D|1`A{>^U`)fGzl9B$P=+
zQr!%~7Vf(ZmE269VU82!w5UDW#My~CY7zRB?4;|Zl!X+CBk8hafe>|07a!A(k(bsM
z1hP05sNhPMH`a=5>8*iQ@y@0WEZEdwL*^5Y`)upXR?R2GuVtRlJD4p>KNgSANva{J
zyEs0iWBzYBB@nJ*!7m_)2a?AW)&n|oSLCdyouUew9~{Q|zakvG&)=p@*=U5k+QYfx
z1e*ITR%p^%0Nu-RJsm9BOl|$b4RZ~fa{c7T^(WbVA17re)f#754OyrVtKDz>PLojg
z025wPag^Q3C)W&G$WaPV@5S1;;NPazj^c%+2SB)rtq13dRzd+SA*2+ieoa391b?6z
z2h91;OT&v;X<mqvaiXS6V@|Mqx%X_hmwAYYP*`A@gR#{V-E)9=AWtVBPO@b_mJN<k
zBNB+;5>D(T055+5w-sa83bqdCafE6ro3Or|mk;{N20R-o>V6Dee4Mms7c~)PBoYAs
zKLEgPxqua`vW4%T`u&SYOy&mmGV!BOLAgq!Jp{N7L{<Ub0SvGTzc7cut)zpjN1-ej
zj--VGgFl>MN$R6ex=w6}Yb(+>_<l0OMkc4@-O{eiq8icHi1eA0bK3H0dW5kTOUeKI
z8;!vjD8PCxgYr+4B`bBb6W=ujc>Lc!-s-~doI(<md~ueUNO^c;N$9l=6_V;KDQ(sx
zqgJLP?jR8IpvXALWa_0u&Gv#Ie8Zg+cgK2HE_Tp<b8p?kNgvh5_{-Mf7<4_lhi4vB
zbG=fU-q)W>Q-xrWRS4u8QVlxJqtTUr?L<CibK|&G>UuI|)BQ9(G5}`}5Ef`l{Jckw
z1|I1Ei^2x01<Yr}s9L2ZAtdG1?qV5dO3vNQ<~WH=G0rIwkUmShEtHE4dn>#jnr0c`
z-%VvIh_Lcr*6f)kIY81Vw=Z;x;vJk|Mk~u4^2u&6BoB0<EVq3xLyQRWE{1~zGF`$Y
zDYiloh|L`LH3g|WO#sb-@%;!T{q;P~*a!S(xIw%zEO<(z6raagQy(^jp=g{%23R67
zKo0~dbyGNyr#r9Fz-i)eCb6clZ^EL*EV37KGppqAt0OPUYYj~cg?KI<Z$I;2L-#)e
zu_}34ji!bsDAXjuNv+_tiX;j2(ig3Uv&|TUuanU}arsnrV4&hFd8$k})M&k(E+sB3
z5noX+ed=d%UGXC-=$!}3`W|MO32Ao;LUZEtna_ipy_E?Sw%8a3idMN1Tal)mGET|Q
zO#le1#~4s-MSM~2Y_kO*1Lp=A6x#&2#tE^oTT0p%e^SSot{wp%<^|&Tpv3WVox~e7
z<;3HbNF*(=I%X%%Zz6v#?Tl$_h-@ZOoSpK^MQ@dlB297^s%-<5aR9W+7o#8LB!tSu
z<q7BAXmwQEdDjsAqirezddIRPSKj9=EWKOPzY>0o;h|Gy+8=~D<?Wq=idH$XGtGDn
zM8$wN27tam_CgwCO-8B9I2pr?c5#L<E^qD)l+GGjBP>au<3mycC%`JPl$-S3%fng4
zI!d)Epr2@LJoi{6JvZ0-oaN{4KL2cTfn(HA<&i9dW@ptMw-NYeAx<c`>)B8_7^XGJ
z(2{%&=NQ=Z*AK_!Y!VmQE9McM{6&T+UDw3_=p|7ZinT-?M(y5$Fy>`;8Q^bgP$wjE
zGHBi`g7RNfpAMerq4zYsS|h|7$CG_;vz2iP*fceQ{VWt&s8s+eod31O%3o-FW@QYh
zJarQbjNv_T>j3=g%h8&qI+E*mE{8oWR|P}e8lQo@&X`n)3zFap#xv05qKb33dSTg1
z6v-L0kNcMP4o8Jw;pr{vVyRP@(b<*OZ>Z((CFOm~0cmPDy%bUd>lp|h{o9$p%J%L#
zTOos1)Z?!E@C@pPMcS$WUEK<DDaIvjh6f@|4`f--dS)wnL*izN|HDd!M{ljkhDO#c
zPru%98Two{^_Ld>%?MHA6ELJr&~@Sh!j7W3z=COZmyz3B8k#dusiW0`?j(#h(?(?=
z@LrsKzY6rnpt$eImx9WtRS?_4Q2K)eUT*Qg)0NVzNuCgM@LIUn#lKreaAmUU^zMr9
zWLK0H2Zk-6IEYGra%Y*7y>Gvn03Ult`?duKTl=+_e9s_{6cq`Ff`Ed)xcP2_;OB~N
zn{PX-AbzIA5tm^cY;IdyyM>KTauW)6h!Ll?gGY6u;Pt|}=rcmx76%!rW11!B7^%QG
zCx0p7Qv8I9yY0keOkPtx7_rc+$X(FOL^=hqdQFV*c|W8{rx{@{+#v~eOTMQIK;a%3
zl91)iGiD8T)%riKQW|eDx^(DzsQ*o&xT)`yBu#J+Tdbwf<{>d+ef*kt#(;h+U)YUN
z+h-zxkJw9ygv+s!(9q#8%=ZM$mPx`q<dg3O*Ek?*c&j#aU~V$Aku=l>@QRG1T%@3I
zJW-56lzY)-CXM*fWa{e+#+~2`66*P4XAGq<H~v5I`saJ{BtYPVk~qu&?0^4&+GUU9
zD~bvM89=Ifi?zrTjU_e0xi?B|G`J~HH6_M__>jEDjv}#?nf3m~{iSF+SBbVUj{+j>
zJCaP8%9dx)?#<mselFQK<E?L=$Gc7`0QHtpZJ}JIMkPMVr8<U5an!8dOUjhCSDNQw
z3@1{S_%>LwnC-4xnuu#Xc+-v4<z-y~kBZOef)^LN=bA9Y??(b6X|7gBR8g4YZCPa7
z>iSva%cL=ru%iyo+nitiISeLW9@s#Ml)o%rY=-{y;0>M}AV6f-0s8TsL0nFxc*oXi
zEe=~KUDV#HI3rZ8Ymr_5-WI|2PmrLpLu^@DF=1>5Mw0Tjd*b1Im7kevb-V(cgnzAE
zKt)Y!^Upq0RrM{b_AV39lCnl>L9Tkm!M-Jiw;x3!Pjy8R12=Ba1g~p%2<NHBmp2m`
zW>b%O8?<2q_2T{D!z$f^jBflr*M1<GN&3!USCF}lMlhg)Zppp&Ux|0SbMfdggYH|_
zT>azIMp$g3-nj^R;j+?PN1Y<8*}-v-St-dRb=mouC4?5p!ba8LP|AO~q5?nLKLKko
z*ff<fxfM{Q{l{1T4@HQ6sPDEpsht~T0P!w--Q*hRr>e=Di=0YJIhx!<BPV|S3pp(I
zWyMGgeL%tIX|c5ZCJ8ZeYuvVKuk)zAyDYd6T@gmDa+~ypVw|u6^m~2WKLHc}AHH=K
zS`Enq+Zq7Xq#y*^|7`(Q!Rw5eKD-^i40l|1I{d<uWJTldJ}fknO*IMjxsLKQDrlKO
z73jbcl*Sjcw(!vO=qOr2-9rRCof$_R{i(MXC>vampn%6?XNq$WC*Lbw8-Q_?6rAVX
zl0z{D0w51=+h8Ts>)XKY)t&hp<VkzR*8r9F2vmD1Y=yS&fCGk%Xb6-1K;3LiV~cy(
z_j#r{FI&<YJ#EJ%5R!?_Nsm#7_3i}96T<>jv!!o9l^RYI`i%bl&+px5qbdM(4aq6J
z7Nlp6nN|}ym3FL-xX9V9#nGC1lQyw5l>NKVeCI&Q#f7BQxgnJ{m+Bd2wrudxD3xB%
zRHiEuW(FcI(N2r^&mn@ELANjXF|E!OlGRz5`f{O^!~crZe2?J%iJz^F(h{N_+Py_~
zmJG5>kShoIMKBwBo+0!3fWWO_+DOAS<SM$;y+2|Q5fmm_9i1T_Pko1SU(OqB_KxIR
z+LJ4grL}(1C0_9*Pp}M)cW)WKj8`bU`;Wfw0{RQ$l1y^TLqd;o!5|yCn!!EnbJ8B1
z8u>q4R6*Es;LtF6*nzaA@r4z$PD&l`J8baTJhJIj9_=FWo}aO3AW79CDkl9(5+s0a
zXr}&ud?sgZM7FvCT7j)-CN0sCHC5~rM`-c0JQK2#fP|Ro^*7hS#3Y*c*%k=}Dn+)u
zKsZ1gsR1qa_XEOED^Z(lt${`~C+~4*<IMwZ&?n7gPMZwtl|*M@pqi!8Vw5=a6gV1Q
z_}?YrQsaMh)EkfuKXeT2=sXQ?mWq4GSO6nhq`7rd+C$ewL}Vi6NR%a4`=%A$3$%3Y
z>RK#dJ!3IsJr{_LWzd8B@dthOjCir8n75YbCvVA&%(&PLe$(Z7vW<ZRMHH*HEvhPM
z_2NU+p5TZig+~J#0Y<U@DTl%=z^LlXL625Eom0efm@RmcVJqoXeFjRNzQOej12o4n
zWH{)(mwvRm>dh=^9IK3FQQV{L>RzfG0VAbI7`V8&-Xu7Mj#nGx%{O+g8dBO5(#^L%
zf9EQmt!5Z*et~pn;w;#BW5a>*s?KwxF^b4pY(Wm(xrT*xOpc*l0#k0;lt^<{;Q9(m
zUE=ehv96pRFdas1JnD=4C)*ls<cl5p98jA8aRajy+WX+{mp^BrG)2r`F8$PNSuY4-
zPlMhX0!>a$MbySLwwmZ2q^B?be&<?X!+oJ<T!?@iwyl_RZ1~M}eH+-2IOD6a+(5?)
z0toE(uMu=@`h6aqMBlDSG-*KEaF<ITpLQT+tO!EyFf+N3^9MM$lY&yz#wTF6t4%Mh
z0Kio@h<I2pF#0B>x~pZt0UK}F?o&B*aH<>-VC!W|Ir*|zn=T4IqHPtt1EV<OHHT--
z%@NV?cHg7z5bgx~x{L;800FMSKkE^U;}1erE(_LuxyP%83%1~<$R;=tl@y}ZN4eaB
zTKv68_Nf0(v`Ob|aJ{Ces?DBSHmCz8f4Dj~WIow~40mJP&t<uJHAxGjX)p(yQF*22
zWAerv-HwBPI9JggFz;`GviKd!WOHJCI>+mvYC;Wnn^;E@=k+Vv8B__Z9+jF5HdWP%
zCljtRh+ABsCcHvZc*i(Av~I+yCxg?W7yQ<9bjk9xG=kTuRfoH2sA+<kjZ)8BT^jLw
z3cJuHd28grNwe2{Dz^BE`WC_FLfb~2UqU!N_MF*2A^?xE<1vH1&a=yfXX-7IK6#G`
zqvdzYQA)^W#7H4e2%y_VRXz@Ape!!qamfgMlB%1A+?vot`>3ft$#oZh+@_P;Q3csR
z?Vjnycfb?bUv{t6i#yjGc%#kXhf#d@;th;kzzN?9C5?HAuuV*l<Ut~9(F00{WqFdA
zxn;SEm|b^-=vVaQ_5!5<;~_zCs59^%+(fWAcm_HN!H7H6l|eP&1(9y!QAW_yN#Noq
z3zg-xZzWFvbWHn+Cb})m+=_ssvB`aJQh{1M8d%Mny?A}9!Ee;;wDoyUid`mVdOLfz
z??$I)SH#Xtkg{2{Ek@&$tRHIDq<dax&4~Zm)TpL@+6;C|Le<fbuGwIr!M#o?cpdym
zggd^!@BuGMFsppFgpj>+mS-L?NL=3>Uk|9hdC-mt^u8v9u4CRXzyb_>p$P`(qaNwQ
zOc8GZCjgYQGra@piWEi3&>sJ6<5{dgaegQ&);;XSXqzG%hrd!##sou2AApTauH^bK
zs`iR*-~;=fsyqf;&pIo#9EqTv&w&4uFwCkPQ}vI{`kAU<UxRKe^Url_5mAnMEZIMJ
zBczkPt?0Z$Pwx)+P<LKfBI7-kiirM1eS?ITRl8!!LqEZ+e+|nukU5D7*wCmMRA&xu
zEdWf6duS9QoP~+dttX+VHV6gD7G%7*vvbcXIY;|-d@$dKXETheP)otBS*m^(2(5Bi
zFBVNLaIjIA>DegmGb(3d)zM8~#8$ta3=?*uT?umfQ#W6G|EceLH3vIL#JU>Q_c-p0
zm~wG`X7HYm<v?kn@Lk{=Y$oVBssa81dgyX>j${Lq(;~&N&=Y$PrAs6TGrO+Cw224#
z;#NJNm8vPV(FG~1F|o__jkyGx<lLBL9Z7@>iIfl>2k0cC#VXO}x&KuCdtscH-8-VF
z%d{bXAA~t9Kpj!B*Kt=9y`T5vV_8Z6O!D^>1guN5ffQ7Xq`AZBxsBSOxowhOyBE*)
zorSOS9&1%7G{xtP5cmP!e1vkZYgEQ%4!iQ3MNIGZBy%M#Z<KL&yD%NCTkeA!X4>21
z*U!u>!jn^_+XUpmgB^;1licENDPf@nFHf9OmaIA)>S_ntyE8BDPmK1)pFn1Z^?kc<
zXq(Jre_|4P$mO8Va9+*xCG6-N=bKvcKL_@)YI-jmbOL3M@OxEtpa#U(_XNdR!%`N7
z=6}=%$t?Z(K!wH>9ngO7i(`f{|59Hef{;k>hT$v`e;G3n$XA||n_`)ctAkj+F)C`y
zT^uAZksNn7D#Wi!1xy_TTIoT1`*h86aGGxbE$qjf@`NAp0sXvsDQ}@cislVr$x|}f
zcfR{hUa4?7A+B=hPuZ(xJleaWVJA}?81bgBs}k3Fe|#4$H+gbr9(v5=dpT0c%m&wO
z=Mxy+>hRhJCt_$M5VRfHgo5!jInnT(>-V+{Yxiedloj9H32n}S3^dAtsB9aGQDZfe
zi7sfJFyppQATJ0?6%qQQ?VS~wTQVJqX@M<no}_w5t=muOKRv?#$=Q=hT6Gzy#;RDu
z+*u;gDUXxfs;*BHQ@%3plppp6gYOxkd+c|jRykXPKgroFN_GT7{N7u!4L=uCY*LpB
zT^o0d0sb-?sdCXcH~My0vq^`J;P?O~ieZX08B$~8f}06?h?8FeZHq4>f2yM@M3(HR
zpExnp_2opRWjw#}!#@#t%98du5El9R$JT?L1tz0LOVpj!oZ~fC*O;tP=B4(Q!ZRKd
zo6v3CQ(d!>fI}-wOoy~L)M4g#5u)7DyVpcJ^BT|;s_j!HQ7c4Z!4Ei=g2Ch?GcmBx
zx-@HOUrCcJ99k%HdA`&Y;-2wyKTpAx_YcZ!ai*sd$o*Ld3h4zQ7hjlVJ6Z8vQR}6S
zP&!3;yV$LG+*JL0c&Nt#gwfla3*duAJ<EqA?>g^@kvy~ngiu^=*dyDV)6XT_0!*lp
z2xeCc3tvps)f0rYqgxY3qXE~}A<jJ@)AeTjny>6c`Y$dh5J;)s)q!-J`(#;6AZI_^
zW5vGZD>#*2Kn755wQXVE;?nL0DUAKu{oZPOWhFY`9#JJdg1qYj>LJ$yH6mbV*-S6t
z{ylU>Bhi5y<Zphw|J(plJ=`zXC_c`t;gTN|FD2e_QHP<>w9oT2J128;VDY^7$$8|G
zOn|?<2N56{UeZ)gt$1vMvruJ_KjaIxvY4}db!O%7rlh1{xwxS2U?@SoIyBG(Og`)z
zyv9t`tm7Tec45625Tj#*FKCH3wM&FjOb>*K#tVw)^GzZN%Po#xzL0gr=V(uXV>`Kb
zs|W@qWU!w9o+p#N)QgaRB7!AsxbOu(y=s&-(pM#ct*vtGMuF@$_;01D;n*m16La{)
zF~8%RLFfkV?|idl#r*VSH81w<Z?-Z*5Q*Ua@w=}!E?==SW4hzP2s}5Ymrapgl*aZ?
zb)9THu2|3~)xe|~e$g9+A3xtEqc@ty#Bhk=1ouv&VolPC5Sj<PXfNKbv))OrhV?Ao
zCk5h(cp^mx<y%L4W69K;#c{Tz&=HZu8u_iJrO!OU;k|wB8=(EEw>QM(e7K|c>sh6A
zf^BYMpFayC4(gDf{hoX`m=ZXmJ`^H}9+W7!@3k{mrIat}wh;D#LmdmRH>aDT=Uk8+
zTOTH0bteC`Rs68x=OWcni|Lou47*M?UworxE34Y#renQ-)ZhJVYjgSZv3Q6;soC8-
zy0{5k=_tvA&l2+lyILoB!D?xUfF7a?UL&ZP1<ckub@bLrN3MVWO7VxOo@trmcb&(1
zM7!<dk9gOLj_HMT(iqP6!3QixZs#UAl#y|e*Ad%pR%(oO?nX<EalH><y#M<AcjAuP
zq7ac64F;yrB&XSzNwLFswxli}_%J)g5~WI9PU6ErpN(Qv|575?C@BuIH^pf;I1RXE
z{t_#KL;nWH77nyCQoCx*;Xed8XLA5^`KOkS0yl^S?uz?5-b=tChe(}TmQ=NmxX5mY
zEiHqF>!_BW{cR*BG`6!D%Of^Jfl~>-y^^R@GEdiOGe!PX75>!!ulgVL(P?311|N@6
zV=S5&6q2|(+Sxk^u5kW#gV@TMTlG-jm|c5zTLtnk_24uf5{mU<WH+UR2x)@$aeAxN
zPthcABHe>C2&`CWNz0y~q#5a=(*lZ<h;i={8u_0$6Go~jLmWMj`WZw$^~j4aGaF7G
zpHD<nSYX<n08{6pUR1B+fCC(k2?KeB#_aJv00P_q@Lh41LV^E_l&?|wGf>?ppe`~4
zjj5adv`23f^EvFBYCXFFuUsQ0*zPLhugb0!2U7*9B=W=LqoE-9toX2m>$pz!30#)(
z1*cU5R$i?@v!grD`@qsS!@t$yqwsQd>R1p_Ju$@cfMEFg7=rTR50vImTHPP(g?K0-
zJ}Z<el$V7@X1?<+XZ#JL&A2GfUQ;|X%-clMCmy$Jg?dzY#K&@N)Y5Ni1r`GGemar6
zy_U0C9TQbc?S6#{rXqDNM%j7~y7J*P+OWyUPDi0(Kl4=B``de60}L7{?BO?ND&@`S
zB4ALjbFwy%rW!1q;^a8%=tzI)WJw*u!e-ym|8o}dj~k!aM>Pp1HjKHh>II5DLSmH#
zeB7A&uhfLlO{VO;{n-$Gb{Q)CGy2JhgOpnD5-<M%M`~@Q+rZqau1>=0urW>u<Rtb8
zCHA0@ab?Vrlr3xLWm0qcN^u3Q6}WV*P_-`qUy-r_<`-HI8;eB`s=b<0Tk=2Y@lZ%(
zr`#Dj2M<w;8#!HeW{MbU87Ox@>}y09%zE_Rdb008<7j#sL{9UXmFu)T0dn(r@M<Qz
z0~y(i$Hqr{MIj=!an9Eg*2Qc?z`V6Ewb8}ga*Tk!IWj0#nhc8)2cla^WviH9cHo?|
zQCtq1$CIYeJIDQb>nBx{QeW6l0h4~vn30_dY37w7d$cDUv&(5;oud~J8-Gu7FpaRk
z+1}Px2UvGxXS!!QnirG?>{`bJGv9Rwa+M;J@*CoQr2sva%v*t7_8$NrI{vcoX=Gzl
z=lTMxVBO$5i5bFD>pB`xymm0-@zsN{@88AfC(-hoL-_ar`&mmAjsBxPDTN$QE=zC6
z!f-?3XI?B6^falos7ff7H=Q!!dwmQ9-5-Kpb8s19aki9UZ`IX$(h_2V%ykMM3vAi9
z*91}GJ)Y6~`p~c<Ii*-M(kfyEX!#yFXdGX4mvBJja_w&!x-1n+#Gq9=DjKT@mV`Ky
zisEzMn^bQ$7e`U=pl?R=`QuDzAvJ4Z5HynNXm+ZGClq(+BGxNFlO*aY`Z)!xg6C?g
zIaWMj<em%ri5*=5@i|+y0{y=R4Xz;4t0)GEp;ZOm>`Y<lce?mD1*k#;jQ*Kq{$Bi0
zw2l_w8MS$CAIfSxWw#)6uK&d=!(JxOEL?q*K;N1lR`Qxv&I&{3m1~$k)}tO~vACg6
zn;!E4^@@`bOKm@H;UAxas<x!qoPTD7w|P@t3Qeh!@%dDMYDcq`RIO*+NbPY*&hN#0
zi$V8=n{tU46P4Oo^QChinRy4oAB9BND3vOwh_=7p)^n1_q4xUf4yLS$>8n&@X#5n2
zL#F2Xc(GRMt&}73b;04(n|~KkZ)@^a!h$434x7P!L!gvR?s9D<VMP-jS+5q<pQy%#
zSJexXySX6i(upaIWnI>oEuPxjGvvXZl3X&Pt*^NQzv(xkIXM?8J;y6Z<S1uJ!-jeN
zM(Oxz#$C3CgC~AZT>m3V_WW;CVnD}y1<I|p#W@}=pv#7{HTu27HwmBPtHt8C1i<#a
zl~(IL#oGmrl?j#**w~x>CR%QM==V&ca{LKLn9~}PFte7`i=NAgWi?DiqrRWN4o9ZK
z%!@KF1~q)fz=rLC&v(S+x4z@7djQI?W^@Mq;lrAbJzB&J)9fTF{0hG<yAJr=Qt)ZU
z%RMd?X+J|;*_qR&Jd*J0)hm>YtG@n6(NN@&eL{i}>yT%|hiWbZurlBuF~|KXHJW)}
zLcUnx(l}h*t&f9Yhc!<Wex~ljUIpodf$o$Iu_hPR`?^DR-srcTd5w#?fc1eIn<)0v
zUV<MIH5uR>E|Qa*0mB7xqPs{$zqrr>f|~^LiGbcW65&fSSuzI9Sjbfl&J2}eIPR~n
zpinxA$%@fXgdSf*AIs47DN?Ujw+IF`JL#BzRyV~qeshI;woXYA*+Paxx~t1D!Mma~
zo?F+lnW%pb#W{H~a1j|Bm2o-f&*@BGC3ru=y0uHYh7W>nmJ2g0!f;~C*lCGbo)djH
zgIb}|jgHS;*hx+MzvV{iguc{V0)Oekp}E+qb&}G?!fnY)1&7^vGFmiu3dIWC*CKTb
zn0R_(qZ~9y6NmAmAWo9~y&#;;CsO-ZCfw7`RPCZ^ET3ez6tZE`2=uhH88BU`9NP&x
zR(*3l%P_);;bb;tw0Sha7A%Lwpqw`N^@+wxc&)7ZY!BbcGo+QR>;X!hwNV(P+k5-9
z;onXv@cBSS%BAD)CWh|JXCVG5_6H$hU0F^n@fklDk?tgN;35Eo%0l%+Exq=*`hv8t
zJPYrpi1Nb30A#TNR#=cQFlJ6D%zas0>nO4+>^*_gX*?RB3j&TKL*0e(k$Ioak{3(e
zP3_3rm3Csvyp@4lc=LWo-I&oF)U}03*7S*(!f-9!mGh3ECx-3X=C%|c?qMF2`hr9@
z-{Q#cX&8clkC11o5}8X>%YEyfME|w{vbTerEs;UqaRXDsuLi>rsw7$j_*i`D*+L(Q
zYHv5qB<);loBR|m1%{-mbY*$~2p@7Q$q6x_S7O+&AzdD%`s<fI!@|zAHkMT<Ar=&q
zr4rCEJYex%hQa!)qS}h8)z&N;dit~7l9RbmELvT0Lqf0OQ%(r$w~@kxx&_<V{^>`}
zGr_3elfw$RTSz5y)SVMwz+Ua(bQ9F_;CjUi`Aoh_H6YF40Prs@0nN7Lb8=Yy27jx-
zc$D#s;(cHMY{PZwXjN`*4`95<|3|_(U%lG~j(BAC-5#>5D`1eah^u3_^Zs5?V931$
z@&H(P=u`!4VE?E<(`1Yg*>p5;*-^#9YWVtO<qh?dzbK5@Zj({_x*oZs1@g;>y5nzj
z95#O_fM<Pb`TB)MqHhLh@B!mxvC_3a>WedTMu~86sNL;(Egyvs=GxzmD*7KOwSW48
zl@60~PD1f1K(U-WtRKSSH}=2Uwr<ONPNRjt5t-}PjgwutD*J@+cpbuk#*c+=znhD5
z6zMi}&${-4JNunLlznlW{VGvO&_yY-xTs)bmzp_jd8Q(T_eoo~b=hKRn~~0j$^~Gj
z#YS+T-&SVV6Zg;B`w&vlA4=ZeS%6<G35FR}<O9;OpDK3|KY-rJ8fP+7{4^UM7BZrE
zNhZXd>Zh`b#=Jt#$8OvUmY?V5u7XA{O2wXaFHq()W)%xnj~*j&Z@7MJ0C@(qF-tx7
zZX96QJkzlO&TSw?=s6zgqpayVup`};Y57fJL2eon6KygrFaUNXQ@IjqTi`c#gk^bI
zdRvPI(XdcY3J-#tO%02>ZigHm@t<oqpEEmRE5=&va?6z0KrN94{SYi^7Gd6xzr`=>
z9ww$eKG*(Gn!|?zW_<oowz2Yb?LEMH*VU#`*}~8xE#Lx2cHMGCNsD~Im|?uawH1DH
zgB9%wwx7)<u2ETB>uvsJ6^?`0S%kT3#^>Jy17<&h;IVByYPZ%guC(~#ASld^`!beq
z#LeCUm5yqmIB1{p7D+g~eNFzR0<Bkqi!J4Fz2SE-g~Co87%rZ&2emn}Cw}-2eY<(X
z>x5dIqbJ%2$tw?QLuPFF^;)>2z(9EF^{!+G+!1m<7h<21KqTNt5=x^^aKcx7+b!Te
zB99}^fJnWVKTIvo9#Smm0rizRR3ExbRY0lyOVr|TO>n!_A=VLzZM~pwP%><Btxc!o
z|D%|Q9WyI>?Sc6xz8sn!!g!xe<4yoO<6r=SDRV~gxt0)v<^7B(w3(>UD{q>(Ut!`-
zviwr2>RC)d!0HChgFLjH7*qX0HW<1dSJ5b_=+<Fjt}gN)@S)rK5nVYpm|>QXJFo@;
z21Gq1Oh(j@tyoG9Xmj&Au!yWF(rH~ouu9kEWFRbGFTa|K4goRyz}`y|+g+5~j15yT
z6b?6bjw+B~N7xvF6onvZm^N>~7A{|C;P@f(Qi<elQs{2t4z(%9vG9b_X7@H)GfdW?
z!S{@IN;8qJm66Kl+qHbW?r9m13#%DGqzR_!-P>GYO2h=6tt~e=2^UE53sL<K=6_{g
zO`?K-66&Zw%%5zXjdwo;afKEh@TUznu-*_T(zBiqT!ZB#X^eo~d9Wp^LWD`B3sV8u
zIjOKvU`og=NzB0>qERL!=wA4yKN53+N^J<B8_A$rtr$qa0}PG-i!%arM$#lX5NEUA
z$Bb|%^YQn)aX6KioXsl;j@OoEL9@h`+SaHOJ`$ziNG8!z*@<*gXy9QQjP=Ru<l8yX
zz0ot@S1fBTp#SezO~XM-qo?mGczX&O$?(~pfN<&W$Un28ucrSQ%zfp08CFtRHc~X9
zLVlm$0wey1!Iff#cm|Z#bUdW<b^ELKf-ZLvgDKI#&mpwpMI5W|-pG<L%|4vRXxr+v
z-@Gh0y9sQub2qZ1+{N%-E@Geo_7ZU+*LaP9h9Yd5I~sWd8wmk^aEMFyHYnO18N-O4
zTn6#Telb~3D&J$-$6X!3s>;2>n<^V<7uLrWT6?SqMj&04Y#m*rz))UV88m9eewgMQ
z5V)DE%nrR{?De;_P?#*$!(!}CbbD#%Vn^h-(gw79K~Plt({Ex4?O0?UG<K!<LE#&6
z>*NKz7@(tPay1FKazwvm>Je|Es`hnrznKsoDBej?Mx$;vwkvTfJx_w4dn?X-5-(=A
zrG$A0Pdvwae)$xuXHfPm7%1_xm;b|tKsH^*2bj2-9ClNjmSbd$)~h!R=*}qXtbN8Y
zgMh<;M#2GLf*J&$NmF`3#4o@q1t=~AOH}OE24R}Mr+2P>`q(~5$w=1&HG$raF{bsU
z&g`CSB(ANs9BmLI%p9eIbq0hjYGIOk&2^`-;o3r~OmP%7FqGCEm=XU%L?#68&-t&$
zIHE?G;NE*OpcEnu<uhJi>hlT1-wE+Ashq8NCs1!84pui1B$L?jQKIwmys6#xy<~^J
zG;kR;QUFJnW`g_u^9+{~%+18orCjvQ*YN8VISGcxBOt)|JHNF$;r+Sl51=zVw=u|_
zU~$NxfpWL}A&-;z*qHL@F;WWz@I98Y^s~ho%i6ZV1hE{X7p$QQ`uPGl+d*|Y>F`wJ
z&62)_y~Z~wJh`v14{w*%?9YhTCD|s$exNj?9YoOPFYnA0Rv8=uApTzDO<kIK_5s&f
zpc=XBB`$keMG%KVE{|WXC^RDj^(>oGbh-Pw$EfUYryK-Np_0Iup={|M|K*C(S}O~Y
z%0x(U1wGK`k)TJqxb?o0O&ufr_VKkj#4Leibqvz?tt*e|=#M^m6jQEn4F4AbK?S%0
zuO0H*|EJ7%#{l><<kF>w7AuZQQS36V#M~u!Pn2RlFjJtI)lsKI3y$HHOuasOg&T5V
zNPENO4bBECiX>|_WN#}Qs=8JJEt_GAX*h9oeMqm*)Wo~41;Z?+ivox%(X&|9nE`Tr
z3hI5>Bfbr%rhb6P*tNr2=!#i3S^mNy;+Jx1$NsaFQ&#ZJy(pDGkrN~Oot|-yEwz42
zpYJ}&jtz6r-8SY(xeb4fWfYmcs67L2H$de8*nm#GPB?)X1cf35_K(xrsd|=K;`Hm$
z%*^quSJs$D?|2TJDg4j!%zr{u77=?<Yb-h$o$<G{-r!FyB6)kZCJU_=Q0ovlc)o4C
zb?aLH7rOb^H^=s*C_UePiGdILMMJE|J$!a6I`rNt&d}kKG^dP*f6!>#gabW}?dL<}
z;4A=BIz#@)A<gGMIdEunxjGT7mZ=h15eV7#=cCIcN0ddrr8t)jT15hNpOFQXohNi<
z2FJYB2HQ(U3@|Td75{gyph2+=Tg!~T5ab&JN*DAJ0*&eJpkRk+m{hL67|#p@3`w4u
zUt<!E6IzsPNX!>X&{8bmkk1JF762Q6g#S42yyZTalry_oU$fOL*@hM4I)M_zB~{?P
zbRxD(lBKgR@A8NPA?5ewB}^lb?ewu4LK=WP8kB^)>}nov#LiA#n(I_h=gr`+0Pfn;
z@PQF}WCE0R43^T<p^A3YRp-LpAX5Q$jy_x{)ICmW&mmGK__n8Y0L2yN3WH}-QIew0
zaXI@!B;5DGn>#`yXS+6<u)P-@F7(T|L%EU@+NG0il+uLHQY#dFt5;8VM8WlGmPsPc
zZptb+XNvswJ|6Us3;wtgHz8+S?%KRlz3aQD=a`OqrGm>E0t#+Mau_eT&2vZ?e7NwH
z4@xZ8eJmxM(?=I_MDh*QH+GUcn2{m}##xQ{)MahA;?9h{10zFGoCmLrVyYkPRnW2l
zF#*avy4d@3i?vzI%_AY!6pw#isw;Js+?e*CIu6@RAdUQsaV!9Q24}`x;tb^AK@luA
zUeNwGeL1!n8F{eu`1JHV>kJmBAb&D(+{Is&n<Kr6@s{|ZoDRW<jOp2z%C<AHsRJp_
z!^Qwb*nwv~=6?xr=4xr)Ajtm?z2k^mwj|FrE;d75pjPEe9NqvM^~qw%zxZ)__z}%9
zj0H6OspYApv_l_Jr^wr8<2a!R=%Ry0VD3@6H)9fdE3jMZD-=Sp6;U2=sjVM0PAuF1
zWSV@235odT9Ox`m#E(R!?*U1v1%m{x4gyH}8Mg8Mu;TgZz<{Cd=xx3K8+iwJVYl^b
zRJ4pcE@F+%)l1^1SdE9UMj~j8L=}Z-?zd|!5U2EE3N3E_9-k|im$5w6P=F}?^0nYz
z#`drqxr<6sp+he>tiz(e0%nQF#D^>|b6u47!+RFgU?zN5*;61C56&Krx?5VY))xZ5
z)A2C|PGLVyIzI15G8*YYp9Pc|y8lf4i3E#+feWKnbcb<vI3BNHGdJYSXpsm}ZgA+w
zA88{=ZUbw;4=wbJX`(<*K|%Q>Mmne{a4I19C{!C>7tM`78GQ9cg2x^$py=mm+@Kr&
zZSFu9nr)MvI<~D`!P7@FW2iVlK!YlIk%v^%fEI;G!MpRoXyz_a&1c{jT%BqBNN*EH
z0Kk0G`)|ktSQ>)kkHOI67B(fLzIFbo&6_?9Ug~EcA~cDsW=Ep&9ON!rOMBM$y25*}
zq~b%?lQ%4t95j<Lw&7(;d<n~Gk1CTkCgh(|6Gz7_gE7F`07AoFZxID+S%jWI(J$n;
zO1;weYpKnJJ8<}MGxbea%>zz^gHYE@ZW3MOcH+xcLM9XG`t&6x*euOf)bNbG8WG?4
z(W0tyhr@r!2Zx-eyD`Se_K<=I(mq;NMxkYk|8l6M0o$=|b<yn~gMZ1ip~KW#n?jyZ
z$cH>*YJY34BZPNeQdmtiptrf-Xn})E_uVdELLAt`NkM&7&3L8g>GYwm6x~6P`%nPZ
zjImiz$kzxecuQ4oREKbGD6;2l4g+#JyUmpml{3pet1ov>x1S2TS?2pnxx5!)skx7h
z`W`_aMgQ&Cw(%Tq53m)K0cT5_orv<y*^!`x+c)&(o=|N(Pc+xwxYX8j%3DT^cp2#?
z<sn!jCtXrDFw8{0(s|ZLUXk(h6ZY&DUCP-6y9gaE-ImZ14h^-)H`U@yE*CX<YprvG
zwYTqDn7Z7&xq}JG%{DWqwAFWGJPb=T*}hJpNt6_2PaN~aLKyNfuZ7Y?P^S5P00)}k
zRs@fcFp(zq&iLz*RNQAq-mrXPJWJ6E7O9_pEry=-S2PqD@60M%Xv=|#kADTBWS<7j
zs@6R7j{UQz{r-z`9QlX3-(c+mCk;WQ>^aj2eq7tQ-{~|SraHj@veZk1`d52bXd@5*
zmP(6U^ifpc=C7|qwcL;iZ~lb)ST=grNwz`}YHc}}vXlYC6KMjd10m+Ryi1E_DM94I
zfUStiKJY8n*Sr@`s@2ZjR^iDgDIN#bLu2ah_OJTGb*>P^JhDT!>`ykJs5<O|Oh1)V
z!k`jwP8)b)zdvd%KT<U%BGjETrxuW6<dKJ2oq?A=gFc$z3&u1?_tUs~1LuJv5F+1@
zsrzltVr|#3Cr_*^WSlHq@60PwWKT8sN@R|)@IbBXyXjHfgG`p|Ew<R9%8<jtK&Vwc
zHAuUzy;cB)dKt0QEQwkk2_Ah0@p8ZIN1|pT2+_epkV1R%f2T!;Y_s-Xhqp5Dw_c*)
zLohy7;fM@M2pr)}Z=`LmMFl6VIjf*BX(VE}6-u6l+5SYqodsOn8Mm{bUUvTLtUSFQ
zqC1YBV#O13N3FRiF21@fAq^UmGAYS|`p4BkLjh!*RPKnv=R-Sd?&jUD+d0f_2Zju^
zwj6tpzeN@Wm^-h^YO(AVb}CvW=>}3N)Y9AP2_O|)jQwo{$>!PN9t=*cE+nV+gF@LF
zyPY_9S>IsNa`fL=tLP^_u-m0R+PP1ND$oHB?9L`&tk3p21G6%NfizE>AGUB<Aur7x
zIE_5|Y}Ci%O-pleB(wnn|E28_`guP~h-H>w);V=DbTR6wCk2<`Q;qUo+2(?UB|)Ry
zRAkl2dZ^ECNU;Qn$$AmCwmI+H^yJ1F?{5k!)M<RF(<Cg`im_CM`uKCA(FVMG@~o8V
zBA5Sp)?0-Co|Zt?<hYrwjUw?fQi}5L|3xq;2r{cniZ=*D<cpsQE<#$Wfx(^lX{GE$
zBD_v<0dm-uoQJLyZIX=r)mTN~t|)+e^hvw~p1W=fBt{(4)c4+`xgn-&mT`R%^3G!L
zlJmv&?<??nIvH)3IsydejKIlEG)SiZFg%)%={=Nc!!Vo(ymi9nmYX0p?70=9RBR#a
z__o{=#DJp-(&G!bXX(Iq5QAMX4B?ySz_fQar7T!7W-~)*0phsDHo!UBh04;G&G<~5
zFLks-m81zc#U$O@{{X?|EB_lNa}m8Kvh2;qYUfN9y&Pg47RBbNnhBd8frJnR`Xsa&
zM1uj<x^WBa5sgXQR5}qoMFZ=E#~<h5PGvM`ci3fe3;8TSVnur|XBwukl>K`I-+>k?
z?0jCiTBlnq=S(eHk1SOdbi0}BH=M4o!w$DO+SJbMGtT0ETS`JEXi^t?4GRP~;X;+E
zn)*e$uv61@e0)U8T>)jUrqVQ1Iq==tIa5U@!mgR^qsEibFEEmH%P?JL`Ka3S?SjUw
zG{<yhBjX9Vp+LB%q*E#|$n}(G8PM#)IGgY+7MH|{b4@~#^W-S<c=@6Fb)QDZmqiuJ
zii4b+|6Vd9%oH@YgR(i8c~&1KRN~dktSRLrHZ0>~W~zIp5D$pkEh+!LzZ7`O@9f=@
zD<q@7dlXI#awQlj3*@@ROm!^tRxh3VD9~6oQhWC^79c#S#=~l(CmtkW10HSU#+&X~
zfE=ax+^q=6YNEu1yMTP0DkN%mhb9|v#B&`-Umt}ZQRF!`fOi1n3(fyT4-!_OeH7ve
zK9HCS;-R4HFO88t0&CSB&JS#FkrUn|_)2O5>~gH95F~w961@%(BA?w`e)$OWu8;32
zw0ig41waSqo5{jgRY{VBR;e#HPy}Zk>bE1Kpq|{<Ozy+`i-^+RY#nx`jF#wxnI@|9
zv+O3yB-44aUNh^fEKN49+R2=74Ef1@RYaekGx)_y+}c#7{Dtd#x$?AnnBu$$&?t-4
zaa$M>vQm{S()&D$z-dNv5ie_2arrTz+E{4^QG6xB<3*10G&Rz2zdWt3j&ra53WTXS
z2Ki7f4QD!M0bffjs4`*Ybv+ZC?2AL60-evQaOK^4*WUZO9nP41?DeT$n|u4H$Lhc}
zk~rq#LVZe;3fOzH_C|Ksp2|!IOscs&hPM6K96Y1z#^UNM&KI^p6N0ybK@~-!jMnAv
zV!=){Uf*&D__`Z)nuKEd#$V;V_S1InGEKB@pYxj{6D4a~#CTe{&m2S~Yi3tO`l=*K
zm0}){M*!Q$s|ge<4vR-adt!jnURsvxI64v3;;3v}7Cs$$7qA;k>?~f{qZ{uqE#pzu
zDCj^J(%yyX$;7&zOyq?Nyf(y|izQDw6?o(Be7z)<p^#G%My9_^jV-Ab(8Ly1M!m-V
zHE8`cEMbdZ7j4AA60fH3aW_F;!8~8~nMiR<U*z!uZZ^bzBCAi9bMcGRf&xc#A?ELf
zYm=Z&>=P##V1f=3lGExK8xYn*#ae~;;Lx9SmXpbrwpoCz$F=#cPw$Xk8(zcOMZd8!
zlZ9$yPAc*67H~bgzQ(s&IW!RYPr^gfJ^SuAa{FGCqc5R~(L)C%|Mw%yB^jmMKD~P_
zj3@&r@^<Nx=C>YWp!RG#45Q;*ysl-8L|wfVl&tIvpAiJVjZTUby+nHV9D2Ot%3!aX
z(97r2>}E&XRpx?80b$o0Vo4sLfj=!RF_a}1XTogkn98IY+!sS7lj6^VlRoZ)x9JfO
z4*nsgpt&Y0c#{FgQ22$@2^fjfM*<s%4xCLrv-Au09IeGhu^8=`%TFC@?i$VQC7pd0
zuWj&)@V1qb@d*qj(#MdC&jy)L$Y&#jytNrZWnyMlWRY^}{9JTR*OU85-@<d6h-wG2
z3zepxc78$@=dVg4ZeWFXh2GzxXBa#Iq2;-wMbL_GO&7`jeuG<ZrP!Ld_%nlfoQ4R(
zud!e-=PDZf2|8Z+bGz$y(^0Cg;aGADUU`OHa*#ujsM~EqLVdu8bU`D)tz?+p>kG%i
zfToO~Jo(>riZ#_er-GkiFk_t59Bi+3m&mC(Clf-ekWX_G9JM7-S#zBV-$hChGv}Nm
z<heC^WVOLUPmuF17yc{WyAG8_ijC{(5w}m{|6ZU!D1$1GBV2L;+VB}rX5=_b#Am&G
zHEgJiq;yN`y@V}P=L&z{CC1chfFLHXdj%5?_ad3uV`A?_U0YF47(Kkr<9@+4RAgT6
zxa<UW#5^F}{ZOXfa-NV4R6r&0ei8`-6c}@<l=~6&Ofdb?xsBROHAVc5dzsFVAFI0w
z5*YcVzLUchijOD|Wb`UqhPOm%@!4^LOlbc`KrTbZt}$r$v5Lo3XI+|mwEVLl%(k3Y
z3@b-N<1z^lcxu#4ueL*B{|`|HR=TTMo<=w=Sjv)2_&nH$#@_VrDh-iZzMnVTjcpx*
zhS(x7gMGGKh@>eOSxKXIcnw&}tec?{!S+wyvl(O+!+%iylJ|tJ@_$=y05UVexL|M}
z^s>Pc1$5iG$i}_Lw~xP&Nyn43Cr?TnZYAzS=_I;0ST+=%S?0HJz2~*Nw;59jzDXA^
zPeIM}n#uf_`qBuFKlvEDjl+zcXcrYB*%aWnN#t5J#ddwQ+K`)<Cj^o+u!J6$L6bRB
zNB}x>Ty`EA+9wsBCm`?6bSg@&(hpxDLnQ^GISibKgwt%qZvj3iiV%_-sQ@~IpL1sa
z?47aw=|hcyc6Wj_0(G){902DQLnNDnV@c4AZvQAnJZ96Y&I0O(d*qb*(~V}cK}pog
z*Kp1amcA)kuH83fU9e18s?3LrGSz+~x=A`hKTVah;UHlVd+FK(<y`U+@x-**?)4f`
zgg8eTZ`fm9PG*7YLRwiUW3huJR=H~&)7c4RzIM#U2i~i%#IgZ>2)OZNI3^G^3|?VX
zgJ0H^d*hC!-sUT%BY?=}YHq@?XkrEYuQ<7)y2=ju65_9GZ`JMIDbKnD>zG@~O61S)
z7~<BE!vDBj)7W?I4!X@$dpp96gz*(M%cJB!#R9NQ{+w}d>4J7(xzHvAepwu^9b3n`
zEvy=j#`XJe%3vZd3PqadK7F93U7K)hdkAU6M-RkyFan)^nU@X?y0R3mq=|h(!EZ@a
zHISmB9GEb=Vz~m5C7$BtT7>1;QpUuG0oeyC-%>D~o#P{D1qXeH`;vp0Jr385SOhVd
zxn&RGIt@(|=ZA&Hl45uHk*ASGa$Ql1$S7|Ok!BT|%y3uNjc)eag%S)tQbr|x&wIWr
zfyyUWEZp5ztIjMS#~7c6%r8%r-9|8TH6Fv_%MbxmbWU6qDwsO1Ygp4$;<OaM)Wa4K
z6RaEI5$G~AvQ%D-WP|*7=HF8%?{QUMJjJ7Ehq;R7vysi%Lcs@+DSD2JC-2DR*LC_S
ztiBl{dxLb2F~{b>N3RfmdM1Ba@%_GC5}_m=Q+$w{z~^I0mK7I@P6yX_JyVDn-NLJL
zAAG*oyunBLWzo@4Wh@hTP*hc59qGEJ_mz@<xTwpda8qaob77i%X?8;4eF06Cc{UK~
zwG3X1(Fg&LgMTh&3YY}fgTz+~woS8V-9Y_B#ydIVF70(jb;|yJWSO2tx9@(sZ(g8X
zNiDA`E#G6x$;$DsV1G+`Pfk)7C~}~v4v_L3iHG^p-cc<iD;uh;-JBAmfPfg~yaJ^=
z?96dtQ=V6q)q%m*zVhDVY-2{cbtW-}dBaG|Xsw%!XGSZ}(L;*DHqc6ByyKdep}N5#
z0~-prQ0A3b?VMShafYQ4hE+3_P_!JRBi6{RU&+Mhx;Dgq?9b$2bwhY-EDci9b%%qd
z&DGyM{Vx}u9Pd89!aA&`39l*s7pfOGi7v6O_Yn|k4ns>1IB2IfDN|pzLV_ER09JJ1
zZuOx+i2nqt!Io915j8GwJ^l{#x?t7jSNA{PN@`v-=Gm2!i71|<Q6G{-{X;Q{&x}}r
zOw;p~fqQ^m^!22989CkN*cm+pf03kdHQSM#(!Ac27lFPfG|z`XSC>JYI<X-HXxk%D
zURiL+eti{vT+dflbth7)g~;h8J1E!1t{-ip4MT)rfZk!V%^ANmJyVVIBwR1mk7)NJ
zpP@Gh8r-$GCK)Hvp%TOjb3}u`DVr%Uzq8rpK+Oy;MT9KIe6(YO$^Gl7uq<YM30BpN
zhIR)AE~n}91PHT?XMhMIrAZR4dUHhinn7uJX}T?3i*}Q=-de3w834^_3d1m?I4B9y
zzgP)y+dJVJbq}=JuExFz$Rvhtc$dDe{1reyv6hLgGG}b>j!A8p(b*95$%ywIBtl$|
z3KBmh$Hu8SsS64zplf{V&Y4tcj`%$gbY<<)0l3uJH7>&B5vQklc>0L0m*2Pz7o+TW
zS7B1(^x1^YFQr!iOZD{vsBl#!RY&!oEQJS@NDPMV@tQ@!#9>XCP>1OwjDKyv7<3_6
zdAm`wHkd*&&<RCV;F0}?X~<R8F;cSc9j+6!#^_ivC-2GlETH_PMte&NhgS8E7aOSf
z4t0US86cATzE%L8PUwQ>VE3^OKqiR~Qz?&J*kes)bSNyJM?#g&5(2DNQ=DRBqEvh7
zdkD%a95F&VRPI;ltn4F`t*0D<@9p(gJ|+?MNkKozskK?z&I)xcJ9y~z_V3_52Z2Zu
z$}7F$<5)5x3w!H4*T;^KupS-K+ltxK=+(PTA=4~qY0ijUIzNH9+O-=TXIBN!MaqGh
zJX@rDv1Bl%#+%4Bfn!8h3QAC^K@p?L8OJ3tNAwvA089je_hr)bP8DX_rI+*|p22ZN
zSm^O|VW9avNdLMWW^M+~aHjop|1+KSdp8Asqk^{_3UUQmZoLh7?p0$^;w(MN6wFV%
zT}+WUnAIGMb5}r&4vHM_%n+>my|s_%Ic#<ZVC4xm7U|D`kr+1hPA?^HFy{GCBrWh6
zkF|3`#jV#Rxh<XKw{Fpy*(nKVq+xyRK5sq_2{6PXfV*I;=p5GD&`<Gt&T)${n~RF*
z<jhSRkKfd2H}g<vs$#ubfXgYT@%$JjTsx9SL;SC8<HnF@6d*S#buRuTi`~Q{z?%%B
za-tGG08E&mT_zi6U_2;<yUd8wS-zWqUet)<df;fK?}2VBI!277>1RLBcCxe|r+k#$
zq*f~Cnuj(}?Y<<6zCSKiV%<4|bXLt!KYbD30Y_phvsZYh_%#1Oee!6(sMFx`0kZ0r
z<+0WFxo5U`I}ZMih1hi89KUJAO!lr>(PIm7Mid7t9gO}$be`u%gkB@FaHA7(*zDNE
zJ_Cs&zoB-~94pE&Rd@J_!$?r&`%-VpB}#92Gd{GsyTdVo8ELbR=JusXkn9&#7rCss
zT^Mt`i-KYRQv`%w&lsPJ8<8+pMaY|0^010D{zLkAHDp+#M265z^{1O{5@D)_RIzwG
zB0Vy&%)I;Xj3M=NKv^Efhxua!KXt1a*y><{_!bV5qt+OMXTjLxUV<F5rvFaCk@UVt
zZ1{^QhZo)wXD)ZiHdOnV{J_(nu?)@2GS!5$0&tc7AE{DzF4`FB4?p-v`qHNmw(mv9
zMv}*rspL64=y>%fM*vvSK~*OJp_coMq54<_D_o4^A^G3?G$o-St-hofn@XMrIC-*S
zbx#oBFl_+;KLEfZR*`1??dbiXB`H~h2fu_v^{=VEUs=75C{T?YiL6*gKL-_kSRO%-
z2_uJcjbP#jy*N!EOsw*<6EW9#&W;e^sK`mG#{fu|^{p#Zdi;jm2!s#FK4_?o&g0bw
zZc{*?`pxe0@?C56w>bZiMx*;CzRsNIZ0a-EWs3u?0>qIALDHKqrZ43(rx;?Ue|Tbo
zNvKzz&{Xy-pcJE!U!eiAUC2NeHVJv<wzH6C&)M63sv|%Z?TU0yb8d33ZiIrQ;I6QQ
z!{yxqO^tzs+<4wYT~!y-|NgXudFhqhmLYZ#3!Jn}?ha$uwiMfY)*5w}53aX#D(>(E
zr6#DL&30t^x&R;4GbQ{rcf7G$@--+8TD7M&*`PlVA$riZ6Vs5_+_k55!q{%}X<9cH
zGxX)$aZPGWy1U!cq6?i{Eim8f30ycWgJ7qrCCdP@%!zZ3j*P?v^ao7BU>Pgieu$`~
zYM)DZo%s<s08EtB>MnwFWU^!*zbVBUAN0lt!aM(KH=zKT7sLuM_>>3F&x~?<Drd2T
z)A``|ti_<PASAr)9Uz*4A=6iLR0Tk(zSb$M$pMWq`zA3r-ec7!)dgX!)ujm~I(B`c
z6?>*89&?}L#fNDjrZMoi%s=XC{9IzR3dA){-n3z{R?1is3p-x-K3OU4_H3cPp+-1z
zl=SfV$GI*$Df7F)DS75x5o-U|;p{Dm-p24$E)9U(pm}v7<o1Y#HRuhq3e9`#H$q0P
z-@ar&B;bVM4ZOi{K?zFwaA4~%p3pJ1Is$VAk65Zb>=Wc8<{uD}YOo(L7A*@9ihc;}
zU*#n`WY3@P;Exn?l{qOXn}s`}YTpHq8AJD*w10MyQ)t(8|AT_zt5dp6C_J*S@I?%l
zG~9G@vlpwG+Hy_Q6qP4+Y>XD=dPYTJs1{CAszQYe@`p~2gcl3p3zO5f!LG`=1{=u=
zL$E;mab}N`x0p1yne<O*`d>M~;z);qhV{0rrb)Q!#T&=)@+~UGW;mkwX0`6Xb%ac<
zJ8pH-K*xDmX;}^^We&ko;HHb$iVTGYm*CR*!gMyJGC3PF{`<VHG>fFs>JRWit>{15
zx`|T4@-p{T2G}ga5tSvE-dr#@Q+k}9e*o~(Gclu*8FGW|9;}{+0p|aHJ9oH9yC5`-
z`J1UV^29}A2qL$xcXkdX^PRBq2ktPR_H5}^%M4qplDtgud(mODYHRFeuTqh5#N=Wb
zpe%@gvaalO59Fq=Q(QbV?GKQ~tJMQuc8}?Ai9laytf6HXq#r8@8}bu@v(Q1e_L^zX
zfYxxqRGK;^`v?}u+kf%o=#wFVQeSe)a{9^%a4!*}c`En35tz;DfML--n39E0vR7q0
z#w$iLT_exHIpe}#v*lFkjV&K+;emUq57r<lW~$l)|F`hbQTq1D8nl})7x`E^0oj9m
zg?eHvy&aOA^`w=XMj&~0w`@YCYaTS_ZNr(EmVZ3qH`+|ri)^#TgsIoaC8{rfgsxjc
zR)Ztldk_zq$=6dGedNO$s?fwqaz0l^{0zM0Uu$J4L}-&F$nP(yoOTznf<0OVDNfiK
zjgt@+I>9ATD(=Mv;nDx*Ui%0x0-y{S-Wic95wFZe`0Gl9+Xe%SXwc!!k`b6mq%jp~
z6$mU4o~6ryApRja7K`A&F`IkOyz?6>>fOY4g!XfYY=6(168r15#Bk1LkUF*#$I%sZ
zO>jSN)Y?D`ooS(W!xqtL)sk+6?RQcjbcbM+LBRhry8UX8t1V;^a#_bHr6HHB+VG;k
z(@YPTp#wr%4+Yo&K<3bqC7dA#5;9Fn^zr-aIL7lLpyAwt64fAOx(~K>g5qR`cD4S|
zT@n+_m%bRipvCNcBW=Hd%eXMNFh;V`;9(NZ*k~GfO{Y6JRgWAauSUPMhX%n=&u_4p
znq;1Uq=|zLsUwyDp2Zfhtqu~&r8d5qc#xA|Obfo7H|c2l{kv{f&2cJK<So^z-OJfo
zHHac?l^5d#{+cadW~?&<muhr(jSS=^M`OB)iT!W$5#p&kwNg*aJ}i0`0#YNq9R4!J
zWYbeoPe&-~+?!i;PX(rZ3c<jQXqK^#W*O>ZlmcRk6W|8Q*_pWoxLQP_S;t@`ISM!h
zg8&f2<Uu->r#bmE#)#|PA|0MN2L+tLJq&eRMvt^TL)e{JOw4(YVMPaLU2){HJHt>M
zU|Yd_(iGXt<NJvc&+63{4n&7@k@(y_8#+hv3MX%a8q_PS5fg#=n{>3gxABG2A@Tbl
z2XDp6q4dZcSnL~38%u1mc4B`k6+r@Ek_#VE_uHL?cc<|vFwf*aVs&WPH*gj{Z2L4O
zXzc={dBs4Oi<KOM<(~3~5(%4X(<M{fA+zfNrfjux(gi6hcuC(EqA5Nf>0Gd-nKcT#
z@@@=#4mT7WVh;Y-Zhct0BCUqFMLB!^n;a>sB@j_i#wLnl{D{%a!?-vm+~2C1Q(S>*
z&d4H^rjT)<m}LpOYbb!a0?x){VfJ{{FcIs`sP|Y#=v@E_j5ovc7%lF%3OB&IF?1vw
zAOAaT^6&aT$ykbe@!h68@>PCPwu0F@^C3B2(9X5#X(sd^?SM3}_D4@~SpA5z!ScOZ
z<{Gz+Q|*@WJC|btF#JWyagd7ROGRnn7VQI}A()$L7%o8N-ATN4v=U=4^Q8d(Eh_qf
zYK-ra6s%7z&_e_!6KWDB76aq^->nnjx_|r3O%xHv)08copzN;tjJEvx@&A#-(H&81
zb^fNqUe2mvd(e=>^WTtDbZYM^8)nY#_p4shKrGMN>=0UE@a;jH-)B8`qdF}2LNTK~
zC&s4Yk-qeSYXuDHs9%>ws^?Ho8AY(b%j|pCEVV93QP%A{-d?UNqk6ypr<=`p0+(PI
z3!!Z#*N7A8b_<5;Vky9ds_a`@#WnM^$qwbx{D)>FNn(Ky?sveHzU9~`z1h4?PRzME
zPTfSg)M5l^WduA4{yGbRZNj^FV(8C;G;+&PPOvAx{r>dPs#&(%r}>u4rdB3+g|mNg
z5Ck!&qtiqF|FWH21k;#|d6@w?uW}B=r*;iN*;!|Y40g=+wt7a7j&7r~UjjLH8ahPT
zK)?A{kROg+$u@TV#w@?T^+(`SfLzAXM~D8}d|I|&93=7EXlhTlV0^Oxo*zcd4ggVC
zVbW_D@dNlwew@eR*||ST6X8k9;vGp$=KqY9*{D#D79uO>3A*-K#=}5U>Wnr`Keu_%
zOJC@EV|SxBp?WT;mrejqGU)&d@iuB9La5!f!n_{-54=dwvk7m2Z4Jb>)I)+1jcN1#
z!^fQoY2idIvh0E7h+x7OS(Soi?X8C%dLRW_Jx42vZgOuSsfvL%y^D`8Qaxy0E!SjI
zy{#c=X-?{bPT@V$_a`hp4gxUA|Hyfjg&xJaNMJ-2jbz64TF$N(Ln%4NcNH_`{R|`_
z{mlOp47#tJ?$$y5+rA2%YEXS>+GM~T{hU5J@c%I+xJrM~dKbivuNj<MWSOWH2=YH)
zvtw^?-?yVa0D_t`JCT@&o3t{4vs}Z*sQIV35S;%}1(*360kMwt4q3E|A=0j=dd=Pd
zY+Terfx4-MdVFMy-AmOni1m(Py5M%@)@|6OF5A(J06D$1X{CtsrEx~7aO7~WEQIy*
zLHnWB_?FiUgv*HNhWzNGm|QIhk?^T5vk@<g9#9((wOI7dv*>*>iYh;)I3&4R09+~_
z)nk+Wts^lIN0uA$LiE_XH?9>Y(TQ$X40?t-OE1(DQjz+q00$aKc&A!g62O6~Mqpeq
z{a}q6vEiSCt*V|kl;}xzQ<*LWx}HBnGxk1!wKmr6HVLd7d@QZHexUzyoSF;TYBX#M
z&JefP7K@=KYBxV*)dE=RG{Ei)p6Xi6QK7=c?B&^LT7tR9rTCO+=#e~2!*zZEZW&!1
zQI>~MJ!O@tOr$X=cY#=`J}1fT8|r%~0Y3#&hDzg=i@Q>Od_6%UVf4Kb+h_wB_^EKp
zZA%J;WX#HgOLH{_TJAD~QMmQbQy75$tTQx@L^Iy@$hjZYM#pIFsYOcjzAV)Mj7mza
z-M|k4mXiDNt{le>xIIskbo!+}mAw*RVRY~X;N$*-bStnv4!v4$&hlk6<xN#cD(VS#
zHWQaYx!>sbK~CWs0{;#yr@^M~zsQR3pKmZ6YhVungHupWs&o2$H{L6-hEfe={r+LE
z=w#J>{p9ovyuge<$-C=9cy{G}yD%hO0O_(^H3_5OS=L`nu4xH(us35Sj6KS!AGe}3
z;*-*@*eu?$G(AGRP#C7HF%}PvW$p0<OZzvp>X{XuurH0J$-SidMX)K43N1gWpidx3
zo{Zh5q1)Rw)4Y>9p6zMWO$KSHJ-y?knB~zyKi_yh<;;y}s)fG)*hF)LKPk&B8=F>;
zA8kZFs`*fKsYuhuMM`a*pErgc`$y_B=05P{ZV4x#=QD<58u*i|>I^f)`eyYsz$aS0
zz4he-Zher6H<Sh-GA_gpePQOU+~rpJ7{lW@MGfE!I>sy($yAe`Eaj%`R7cABehlD|
zw50~57wS_sqaq+x!VqcaMrKx{i=~>k4t_Cm_8)q?-s}2ITa&^$Cih<}CjVj{FZ2u2
z%Lk(S3mYe8^&c$uB*=_LFU*7Vg;<JtUmDnFtyV*N4*pX<r_7XVwbPVl>UJb?wfMyU
zhDwzxMKZ>Z^|$Fz<Bi%G*e$DD1O(GccBI5z^ayobShGbo<F()l6RrXCPV>G$wJIQO
zQr_jf;0idaWrd4V5vfvmy~^c3hv=N-S%O;bM01bZob}a$-*Ku|34uxcY~Z|W`6fCO
z<+nn^0A+mt|CWZ*wVaFKnmy+aPBX0R#&j*EzK9-n`9>Pl*G!vL#UfZ-bBp7dpjYN_
z`$_tv$(SMNb+NFhT+p8KD@G!-mutmO_qnwC_6^=i7Y~YEbl*Op$SB8>^z*QNMOFx%
zE|TJ4Kt4o)E`(bpZO}$GB0VvC#m8yoE50Y$Q>W}bU5GZ`1vlmLJy3Kc8T}UG?Cxg)
zS53MqPGX0jPh!soxfM;_GSq}r6y!~?=VDP$<`|e5i?7Ht9A=@SKGLMNkhb}{U=~Sf
zZe5gduSWr&i;29%z*PWMh5<c;grd->eWHDfURA4KZ$P*3zFM$xr{cY>UFi2Tb25Ub
zL8$^6Ubnn%izFqY6DS+6?6!J7)jSLmM1+5EsM97%O>GeaS0?65q_S|H!L!zA-&fSL
z4tKs+R|EEOv!!;yR5LB;XIiQLeNAIH7CaCUynp=;!3ZxbY7~;)OWXK<CqgBIr}Omi
zQpBusA%<lA^5o%mjtVl{@AZ-cz~)F3HNpiPIb}_`9($Uvc4oLBKbnHho;0JP?@x_?
z`_9_?(T8a?>^mEVej!PzvB+9?ca1GEMRu4Wgly^W+X`5?9JN6kh{E;(lhwe4VXVLZ
zNG<I#=~a|V-Y3wYSr&fvtC^0i14UIF6s4(BTrrr;-`Zok<ox7(I=M$2+bL)XypX@F
z;*JW|hXgiZzV-o>lf07Qkb|%T{AUT%{}tQBOoIOizt%R|7$Xwi34VJ8;fws%R#`fs
zEA40u^oa!wPll2&DJ|2HLjTFa0iJ3n)-q&@Q?{CiT&(ZY@Kr*5<y&lK!<X{3pbaFI
z=#<H2B*33%mTwjwfTm{>e0hS8d{>cY*SF-~ZD;i@5wY5{hq|MN-W}vmG`z1ldko<d
zVzV~b%6N3`x5FTfd|5UT<Xn42n;n;~eW4K?=xS5ri)gNqM+Ad>rme@1L~Kx=1uE4*
z(Pt3gDw>^V!Tp>gE|b0+N5nwz^9JZ#+gySY*FhM&vQfDiB?_oPv<8@{XHWg37Nudc
zGa1@>x2|96LzUzt-u_6obn9T|P~EjuxIlI)dt=PZ6yKhQVElpI(iHID;{2x$;nT+u
zbg`Tau!Z~ZD1t@VQDPAx-G&ZDrd3B^Ry$V^nDpa)&p$wVTKAR<&mQf>1qEYiUTXxI
zF%s3pFZwQs@|IJ`lb5yv0zd9!oq99YY~7avf6#P0p(|rck!i?}>k*4=(1G+f*Dl^b
zjagaUaToct@X!}=AR@YzBltee_lcHmN<V^6srByQ07a^xmCG4L-*-v--G?6OZT7dx
z0uPL*ulWnt^mhSO8@knjv`+?&b8&r30}AJel%EWB=IFtUOLn%rY5Ik7+*mp`4xET@
z3GR*n3_~<kI|&m+ZzyEqUeGw@)2l>{=rV!e2}}7Kg@*Pyg9x($$XV{dfXyfeys}7v
z<@w_?7YYw}ZilQ~P&58q$h_s99W{6@NrbtEp34jKPg+{f5st+KbW_@b7L_SMZai-2
zlN~h9LxQ0cRio&8mj8E6*`viIy5_PT^^H065}<8HWbZ=$-{`@CZGgAFl{e;8qQxTh
ze!pO$p&y{?G2KC)gwUta<CtT_KR}B(z(FOd5X-HJ$U>(kano(>(M?yIGvAkK7G(An
zA)Xa`c?Src3<1o|6jy}!(mS=w_+<rl!Ax9oEmTGtqf<<0G<)l!k5UI3X{^;D1g;e}
zBeut#?^9j%bcMM}eR*O=Pl^&<G|h^9qOe<XE2+1lG5<0D;+(|fZguBqlO4eILx;(-
z=_`TfxGW-tFl#b1=Trv5srOL|D@53B@reSv{$M>Xu@tJ_V|=Y~*Z5hZY6ovEno+M5
z+KhHgp3JC`q5hz*#5~||gv;6Dq~#6QA>{?OT9ZJEX6;R+<V6&<k{Y~jIJz4y-AT=P
zN2tQxr>KD4C#SY@xR4`k5ZJbx408Rz@xOReJuo$2b6!X1SM*udROXgC-dyQLU_y!U
zN;Sw_#`m!I(78^e%4%Kgdu$?aTHyUeG)xQ;FA=TdG5F!EpD;MAlW8ue-(~8&EDnG5
zSBVyOR0j>ASLf!=nasT=Im!POmD^23nzX6*Qp9PnnAE*UVVlq~K^;1;;--1w4N4iT
zW%E7j_INfE<i^I7TJ_bah0hf?hjSW|ai*jy(l%Y0s|vqw(pu)PV1_tokv4;D|CG%y
zu`Y`SDZeYi>9k{0;dYxg5RDaDrl}FfMogz0(<iXm7zJBb3zU-~Yw37iWT#0P?d%Iq
z0eAR${`MU2CYqRNK3O;6@8RtOl(S)eDqe~|p-QGtgwmn_J%~gKrU|i^dGsBt3fxWh
zj}i#E0s&MCQQAaKRXrUQ!`B~nWnn#OpxS|>;o2!qThcb<I;Ii=Hs%}%r+lD&a?5X*
z8u2n=dOPkDi0I14v~VQ0Q3oHJv85@~%4_a^nXwmOIN<gpV_mi4%xF<SAACQh3(I5&
zeYZ#*a7+>eqb4xQtZ(kjk2)v^0PA6?RY1;yNdNjh4)5MYgdZNo=VA9ltMuTOhsZ}b
z00HRS#wceW`^xWM88P6I8S{K7Am$7!938tvl7F%;a^%}69j{_ue`}Ct3qDr|gJ#)!
zcWPHMDEs@`gXtNfinpPuwXgu}<e>~8u?a?43kJ322_4`Q7VmXstlYS~(x+?vigxqH
zbKY?fA-)_af}w)jkV}dUUm*@%25<16U>*V>TwF<x3bd#PJlrYDd)0^M0ksV0#NdIe
z=SJS6LJ@ASlhcQ1A|SpgW7X$rkYVWEXJ;K{<~;%=X({x^ktWS0j6TjU)=&S~@v@lC
zg4gSvN?je^+2&v6$^^r7b~^FC`E05}P+X~~Hx=^sD8@jV{KohWY+owh1pIp`W3+-c
z_9KrsrAsZ^_grIcL@ecbCA01ao5NYNUBH(R4Et84UuwTGkziDv8}R+mo^BSUIS~;u
zFU4Kow5)c{j;b*fp7OSwPubUF`#9K|?`$*>@!N;(>L{E?8<A|JopUZnI-SgA<`F^?
zD~AKU>~1w^<Q0quiDh8EE<k+ug-}^nAFH*%(IxX6qJoy7jjrXGgB+PI+7OrPYdh6R
zl`85<0LkaUR+FA5{>14q&IsB_@8-9pazfg3Z+jETY(|SDpu?#cAgMcQz2F!D07%|)
zY2%?Fo?#0p_T6m>AkaFVBvPZkPVcpuuJ6|3ZWctJ1n!bOlV!4`1x3x0D!ZPVf$wpV
z05=4SaY!zux*DrQC~EGFbc?A&Ny{_X^wZn;o$e$3*#h(4<>nS|ylo#n+V4bxi_OOf
z|5g8)_tSiI{nE2KtUsiZ+9`4Qe8LCZR{T%3Vs%M{So$r9vu{!+b@e5^R6T<;zA|kC
zbdt-hS8leco%=O9?<d|NS*Tnsm57^squcgR30H@VQ)*sgNSY#vCF}EB;03TZnfE@n
zPlPfWlwU;Z2H%Mf3xhBrszPQjlB+2L3#G-s$|PY8L5)tDSLVH`zcE}3N9O>_3{7Xu
z?3>qtaHvfHtloG(NF5409Oa^m5GZII*2t?}9y}v!=y;%qTk4{QMp@A;e}%Jy5quFi
z;^06k^RfrHH77Rwnn&vJ@!cbet5*r9au~ThcJ_c&_2&$1nA`?MeWn{+2apS=k6D3d
zfs6HFh?CwuEXDNh=YZ8Q0-r^%N;&!txs_8LrYTY$$y+S0ZLeWKZXu7C=Ta<B1tN6n
zEVixR&w@BYB-W8lxa_b*<PjS>@qvZSJ1%mipGVwj{xLL@>Q3=@$9ozD(%W3A?b)$h
z`f(&>&|*ep76$|?{Z0m%8iG%_RVg+z@NIVT*#3FMSgV*8W97d-h>m!3q(vAbo&WKo
zt8tr+_8TISyx7}2!jbz)A|IZT68f($Var^b7wG<?Hxpy7gmXhN)DnF}RLaZ{s%ukU
zmh@5;$debpNr9sP)O*_wdZ!Uy5fp<8E)U6}nQ58ZVzT@4lo0-=)(ho~bIw3k;ldyj
z3ZIg{F69+3i{NkKmJ$IRGn1ksY=rL=+j0fFru*v<saA>smUKhFxTU^bH+UdK@2K`M
zDb()o?yXG^;HBx0-cIRliX+ZV?n{+7X4vio@TKLH(q=2`r+2?I7;7G?^#q}g6<Bd%
zf<<{QdB&?JpCcHf<bPP=q84fS*lIZgMYYY^eenA`8tz!(j_nkE6_TsZZDb<A354cI
z07$bK=fKZac%-HHV8&*<M;q;J287#9_2PQkO(G1uDlzaNK+ShW#nEeI1T?;P&8sfO
z7~px+Qt%e?`wE?0$e?@$D_0Yfqoam(T}nk+;AK<^zRf}_wV)$GKjQlWe?IV;juSFB
zEhpnY19v^_lD{B|A>uq*lEvypIV+nGy|+30LSv=F*&H#2>_7;C+T51_h;Si2-IJeG
z3J34e4@~A$P)nwr_Ve#d!Q?igRJ`3)MAg4mo^-#O)ja%!)X0Veben;{346`Zs~`-H
zRf-B5X=>L+r=#*e4osT)%1VplEUA?{k$bcju?kwyuxgO+wxlXoHJU@tlt=v8o9Y-8
z4^cPPBss3iy{v@0mm=PEb0Ej<jk2&T=AwCmG)dw!<)$^y`;RGWxsei%ARvtJ8eTZ#
zeK)(u-^ljGnwn$YbHroQ6nYFIWEZ88<z^(-4BVi*A=ejZdQbkWIbTD%(SKh18J6sS
zWOquZMUXs_myDn5U^g770Ewc$<Fqm{s;aC0f)GNNCzJ%GV{tu*x~X_qhsgjQr0LtN
zQ|72WaD=cUGR6Hh#7725zYT|l$ttCPrA<f4D;9l0$}`D7N{7%~tSrl&D^|I?qCM|w
z?+6@}6!Fq<aL!IxJYtVhVfhS#^Xa=p8zV}aVh`Xm{Mqxz)r6p8yDU#DT;mqrW577H
z-V0arD9`xXXwDj*uJtYz(w#F0Fxi7*&{C;hlizAixS9FGhdEF&+&~pc_TKx($Lpd>
zz|eu)dUg6LTyPL~cLcdkwMLkSl6qa5&xKUHx;=sJKPYx;L+!){>NtCI7rB<IO`{6-
zto2)Um@0v`QCbps1IOau9V#T~(7A0QXEknuy_BfxH}p$>3C8h-KAmyDVM_AWSy2sa
zLDcTyN*|Q5R#CL1>Z;-xNpX<)EWHAm!^HACTHYVJBlQ8gY`NI7aVJwUTQX#gwtgf#
z>KN;}6yEee9sAz!SfNG&_gPPxuJr8Ze3Gk}51)2_naJ>Fj`-3IZbc~O?gEER4wOvD
zr7<R3=t&jt!uAem-qoFDIbja!30HcrtamW29Y(TJd$4F<xmi+JplkS|c(An=e>1))
zEc<CtQIgIF^$LzB@}5+#;lP2^nW`HF2MTd@qv3PUJO?`d_L9pAWyI3d#d#f!mpd}U
zHC4*-V&_oSV*!512pGWL?Hybjt;GM5%Hy=$7Q}t&`h(nzWSXM7KRXPVW~Q>#ZVstW
zQR?#ibc&qorbyx;jCjfY!Vu;7h%|O=K|6vmqL<F4hKgH0N0zk|&Dqc=%CSj&_QV%~
zVjb_G#=w*DAyuz#qJKiq%b@1QAzsdh6<pYjC<6LHh-jzJD0Hpk03`<pahsEzk{mhM
z+vm#Ir`0MZjB_&wkk|-IDZM2)S^nHR8Ro>Mv2}@Z5vzQF1qxC`awz2U4FL+aywy&`
z{Em-W<wj8le|B-m?zv$~F_jobE+03X2h`;E#Mm8+=C=y2F82P5O*otfDPgAOLxY;d
zML5Yf#EvzJeJCi=H_Ir5@uiJ0{5M97kKs?q*X)FK3eKCAV)ey6_Q>f*IFoT`pWG2!
z2mWIPV6u)0R<y_5$qM(~O>&pNe%ln#n9!=`{JQIZ&q{XKV}`cWY>0vN+hga?RkJzg
zC-?6(6fg8$J>0LU*|Toie?pswsFAnS0LS$u29xobE-o=NNZM^^3nHE}ZXwYflf1cn
z`BEkO*fvbeZ{rqC=c&t-5&8O=Q_S*ACxTagYY1;wqoEeU8}N@(*pqt^LOfI|!+LD=
z+34}(1P1chRICFR+3v{|&T4d2KYq>ZE&_^CaD$^%yC)YIjGxFFkxhu{Gf**yc~RGA
z@knVi?R-8AICe4($zX0;Ex4V$+Xyloi{>h*zdALXCKdC8p{*VoRKPe$!@R~V0N&=Q
z$iQdEYBvy=oKrz8$fd@wNyYMeZlR@TrWVaXu(ptIUEoBxrZuRIoHIUTBr7x7#*tVH
z{c^b}`fQ=ZtCy@<Q3OCIbOsLKF&j9~-79bk(S{0_#NE<uWv~zI7rJ#8^G(SCbPjk;
zBCD<LQobW8%9BMMIMvC604XtYyG?q7GfQm7Urufa38lvPK@LuCDN^pP%^0Mj(_>Hm
zc5PL;200Xm5nGwcDN2aaASk<KpO4^8LyLqIQw!#O+;oD~qkR`&O$@>=19n=Uutv4f
z(B*KQRHudquUC%Wf3N+oGMUaEh@b?9ry&JU7_>cgeZtSXtrlZ9g7nOWh?uMB+~IO$
z61IZU45yE>4z0)ydb%Ff)~{_om=BsCUei=scG*~PD*uUeYqiZ1rj$mki$)>Pw)|ZK
zj^56SIc1yjRd0pgo}$s}TqV&+wIU%40CoLCTck$P6QX`nz-gWwN-~6W7~(m4#y}te
zt{55#^uuy@bFM(xIA<2AYXZV7A5LTDQxJy(xXc=Jg(8GfDI|S#*mqe{bb&Z6EDoJ6
zR%(br5{q;5PA-R^HMjr*vNZ3G&UF1e;C@1#=deO<nq7TdNelkoYRJ!PK6j-!nfC<h
zCe*G<*1$6)AFGLX7p!;D6~Z&|Od{ZRx~G1U&CK3l@oI9%D}g!hsxwM#t0>s}Y$$nd
zk2{;EfK$)Fp(?&4Eb&NAC(<X<kWgkVyVMo%wEur6TM18~UuF7vcje-hlIr@lr2aS_
zU%EI28I@%LCyRzxansgPAn1slP_5`L8ozAcL2-3f!O0%qr(;e3rSv)kG-8ik*nGK=
z%CK-%*uLl5jw4q!g2RENxCX^{VU{&W$P#NT8aLwC)rE}Q7ra5%PVbca$@MgvySK&J
z(#=Sb@!VlTJBq7oq@qA@CLE-1s&qf3$OZ$usKNGbEnGdgCGj|b-z!wTIs4E$T{smH
z+e`#t7I$7gy<VcDv*~n92VTZH=b?6*&{U|JZt{iY_>QYk%Ym4GD5$Im0Xs+&TZbYy
z<{sN~*y;Eqz?`S0<8JlRztD0Wm9xTA8~~E`-W?4^TM%_FX)6R^6omy@<nt5H4~QZ>
zpGnU(Ue~n#3Q8+;Gt@E4+BzT{TWO46!|e1H*BTc)3t|imBW^1>^poa#^6axMx*_vD
z7%Gyd2-@yn((lge39Uy#&V8Q8H*zptDJsp|ZKf`3OZC>0c=Zt&aq%(;Fi6{CM;vU(
zhKd-#^1F}xuYLsU27tJt6<;jp8HEeqpc!Ui)KZMkkOhOiFE&#<CW=y4p}YO}C&HZ3
z4Xn944CD63yb=p?j_K%E6cs0d^>lby;TPB#PRwa%Ub!%oO3KfQSNx~4@bB~Wh@|?`
zVKbbsIC!bti6idWWrTq9*XCW97NTjw9TL30zrY)RZOkdxSP<narufm1-cgr2HU@I^
z0d1!2PDz|h&aXamQyV}U0okb#o|rndb|wr>V8mE@y^w3&;{D`}f!;Yvy-k|?F}TLZ
z4RwAN%evwVk>c40gWU`7Rg?$KGWhjkE}FV#`%XK&5|T>iInoq=Uu$dP!p)>2((nCo
zo?&!YmH~f4z%H6wAc2*s-R2n3U;Bg{lo9sKDn#L!@5s2pZgxUb<Zt0>-?Wd_oEB}9
z_SeJE#HDlez-revAG2^iRvR8$4fc+F)xRxMtorg)5CKjf+yO>%`$pFyC1?j&WWNk=
z&}oNYPyRENCEI-L2%+d*eFasUc3mdzJ~L{#FRJb<m8>>9U0??!ndOU?5SXjtWuSb2
zk|FTkWe3;_c^LC`F?-Hv8=>h{bGsAq%&&#nQgy6>)SZhadW0ZUk`k)?NhUsAjacjP
zDzcuPp$)A@EWx{%2kA@4)N1FQa;XGGWc$r>qoMXdW`8QZv<3lAyheJMc~wjDoiYJj
zthL=y`5opcjOUMnd8xifn#3?zWsH9?N)OFF*LgjIn^V4iV;l*53JOf!@iz62egee>
znwEYkpp+*e#1*Qo*8Nl(7641i*><8nb1(K)hXKx}&9le3|AtKv4RR~&X;L#GhN#y8
zSCK#G@HCVvrJptx(=n=}BTX(<r?uZo(5`R%7j8M9^aLY2`v(U(vY`7-AF<D4Q2mnQ
zyhoY<dHR`qk$8!plzKmQvbv+|>r(hF7*!;v40a<k{SV-aeE4&@c6GukR+JZS9q+!x
z-8%*W!^<z!PmYy!UdD0}!Bd#A^{q6)+Y(3eYIxlwP&+M#kbwj@NN??3oh0zMdM1S7
zTY=W0qjMhBdLYM2Ttv^Onv`hj-Ja%qRrO)+f9GYsyKf>ggVDN}eS@+k3B|Cb-sxaa
zhe3Y;x+$F&Zy&&!2u<{%E|r2MW&ZfUn%EGU0sw#8<aElLJ}27IDwbO1Yz26uR&ck#
zkCTH>@EnE)fY#c;n*03dI<e(d6-Y<Wi)+tSJg?aV6!+0%3+XkvUphnHJ~I#k;BEic
zI|j4a?~Evtf*6q8+MBI%`+rJ@7bb6nId~R5U>gDC3c9IcLVHAYqI1&<nf+!5vlkS*
zXH^>@BZTINZ)@930^6o@TfTr&dN3c=%KAO7B{*@o{H3ASlkefShtKAJM(Q5#;JS{1
zw-hx5sf0N5?Ic?iBpNbCq1R%ah{2y5IxezzkVBQv)<dQHGt79aHTK3Gz<=CVcn8(D
ze;1_5!XD|6VCI`S>F+;%CzImjOw_fm^9Li}Psg9DVq+#UX?*Wo;pXd~qNkEws{n_k
zF)1P{sA<Vq&x?{4#??kx8dJA@c!g6u!22wFm?=5N=D=kIr*Tur5p0qxdlP<xos$SY
z!=H^)F^TTp2}d=^YRF0%%P{ziW1=U!y%cN6QZRl1OD#%dv@A)e2t6>axvO*W@5oRJ
z@16IZkOyY1P+Dk%%pek#9h_4fEx?Y0Tfc_`@z4uCq@%NcWM=c9cnd7Cxi1&gbdV6C
zLVq$ba?v#2iZDStL4SZsw(S8jRK0&_2(as@?I^sRRxd2@{Ffs=4t1X?6oz_p*#jj;
zjfXU_KE&38ToUTf6RCsE%*5%~)SkDby!#>$O{hZb4@8RF%2ro~tn6V@8kVa~aVIAz
zipP!Q9Hgf)<yIz4)R1Gdg2skS2$|JjS5_~tYWH4r0i(|<zyTGk0!*ELH@dibQCgy0
z?H8a|?fI@^`^~w?k)p^G;rtGgs)*(VtbUug06L3Y8VHOv`e9OF%R4Aid!4Khh)KMM
zFX?*2#=0x2SvmUP#5gv$Q9-T`1BRlu3yKJW%zv9kj0L(b6tUDj=2?w-yr+zeCC;@g
zUg^lXb4uMaQspWwC~c6kMZPQZf{6;$K;H4ap>i|A2I$#ZSwlO|D6#yLU<g@2hqy|m
z<!wBEu9VeXrsF}7X=a<(P}_{+-UZaEnio}<W>s*+iNxhR0!mqv>RB=G78UnmTHZ1>
zXy@eE{f*96M_ajTs+z^8doLZr))|!tTcDSeg?RfRslKuoa?rECYY#6GH85YtU>E_E
zC|=Zqy)hov;Vu_l#=8Of&h+^i^7_n<Ql)pR#6?sbV)&ZyA1SZ(6K?wbs6|5^S7qi-
zS6+XK?UGh<xCJotnIntB6xg~qs+{^YfP$7Cb9*k-(gmaA-r3zK_zBc5Z(CI2YXVxe
zcrkpyOU1xlZmZeKL6}KfvF?w;lm)>5W&(Pn@Z?5N0ktLfWJ?UWD|DHIHDgt^2&j0+
z#!qh%PkN_K3SM@2utWh-eHx0bd`}j)z8dS51MMu*=@JYdt^<<uR{IL~M@b$2rnwpV
zAevV0a?rW*2x}D%OM>KfoZ<O;9@OY#gmcLX+AQHxUR6?C?Z;Iug}0f-<YpGCuC?!t
zv6(bs@2n>XFO{eRZGeUo?&hF1$GOX+R>$QfBXVl?jUW{%dEpzo*JH6=$34ASV}_CY
zGYDh%1_>NCS7bxBX{=<m$gQ)vpB}H2v4bu5=18&{R&AljJh@=XRbAP*4ctzvm4UqC
zr8>8Mu09NCs$*n<XLa3K_<4!gNN?b!pci!HRIiIJgNSZpE_|KnY%xOP630q&1n%22
zeW8IUD4k|YpQAlB$b#j0b3Db&<vmP}^KR6io)Gs;fEcGH<d~*%z=0+W7-19x*b(Ea
z<yfoCXggVSSSh{vMw_&Tw1ib*E?45ZS-OUsY=duqZ&JQJOAO4<4v%_9>kLnXu2Hxm
zDcbnabZ|ww7Qk6b#A02&MErue`UY>CInqOC**}yxH6~j<KCVvpM{t^^ia(PC!TWi(
zr%Os{Z`!`yXyPbw3yg<y9809AvPVt>Jqi&k)~MJI14R5wrCv<kN2R&7jI2!A&4^hC
z^WRYMzc@vpZAJWg_-H$$c>P76Kc*?;cSd(LjQ*xsY~em~1ON+%juvJc>K?E(JOID~
zd%AAZart#UA~SP1>N*2DC-l=O*XEE2u}4tk0dMMr0OhbmRhrurlP7KM@Qos6a&bxt
zlS&g3=@$sVyn>Hy$^85u@E`)j@DQaK8jb|un~cg}b47DJv%@l0!g%IDPgmgX-l~2w
z(#-M{tm1DiwY$(h#GwVCj2GWe2=ijsm!5V5MI`NvwT;unAe~GK)+B+udoaKhP7Jk~
z?Wu+{g!B>M7W(&mJQHe^ncjhU2oW+8qQh}05&4HZJ&bZi1g&kCs`*s=Z#i~UKA-id
z!Z7#d@hYkGyUlE36ioR8cZg1l2oyULA0jX9sT<e@HQv?(qb)%G4>18i$fMs?5*X{F
z+Z6!%ycD5zc9_`>w+g>2_z!xfao^0Y6C;;VdCvSSxS8-_o{vcM3v(=i)x#yT>$6g1
zy?e~0^f&=Np@lGnk%r9q+(j2EE(YIyqh@%QHHL9XWUC!<gI-H<J1g5&MZ50g&!T*}
zTjtePVDejkLNfd6ww%lBOnO8{O2_5E@A2*gj(3>*symuWZD@#pEp#jSU&$=$N80@L
z9Tm=Vgl>ZB&WH|riq>-W+ni$=quyYCcw@t9r#es)oE9^JpWP)<6PWd~xLLwxNtv~{
zu-UE@Nj-Nv{z%_NUPE@o{*n(LLal|tCf3@U4SFjT4&T202K$SRbN#xhIZalm<2K8V
zqL^8cN>`7;sUZto!f%rccHTI10e+p(>3e{q##Ur96&2~xAS?xVd>J*mw$1}<=-l}A
z%i41b7%QSe<kQEFVc`c5<Sq-bn*9Xo0DtvRih9OE?;BS0J@jVe>UpGTl8TDCIf)59
z51gvRd1c!4DLh)|=zTfR4+PfZjJ~lH?NzS_DpZ~LxK20T*9%By<C4IhD*Bk$O8ioq
zsb)JT3}FHoEG$vjOu>kZO^)6?#V_#deh?xaoakkxEBXrVdcxrD$2H4B;cmWOf(tY^
zl7+7z+t_l2KN5%)(0!o;upwOG9%3~C0%*z%!%#;-Vs8D<APDYyO)<)->Ln{YQ4zT7
zpgeA11eTL?WV24i6Ir+p5|^!J6#OTuqeD8N5VTUE3TQBNtJ?`m0wpkClgED|3#)#+
z>+@|vo>?hm&xmSua{fYlpYQd!^<m<CNI_S;zu_dV(eord`GoAf(d?02&@>epDpD&v
zXTqvN183*HD_3Jo1WjJ4=d2nWO4zxJ5{Uv4uAVbz6CBLeD<{2?jFO?n%e1BhedK@~
z%6uA!&n~aF9604Hr*l~~wuK8bbm@G|nu;Ayj}ofWdfZMMQaM&~=i}?TQE8lp88{-t
z+T<;uusdm4Rxitxj^f-7PHo=^LJTehvSMTB?mhoSuASVx0LByG7a{?&D?9|#%h7NO
zwi0@ji+6a)`q>J7ggeJjw~fYRiqH6ulw6|@I?>>g-aa?f{Ix58Yh7sHKQ#(S_s@zO
z&$j&+rketD9ukp1Z)obdt6aT6$Rf)`3$ChU(#f+hx~-1PWka)-YD`I{WX!3ASMwWw
z4||ho5z=^SqIU*$+C9uI<{e^V`s====*l52;@S`s1FeIZdNejb0+){ZQI%I(#rB|w
zo}P#QbKHzA*@{|nzrHGXV}*bkMJ*I+!kM~KHPI{M<)3+#2C#=yL8iqoWvW;#+h+;o
zICTC+0#Y$YkQHzw$eGLB&O`1F7lswZ`A|!PlIqK=Coa*K_ARMwW3_J%IyIm5S8Fql
zgT2M)y%TZ?@4-09Pu)xoTRH&#olk@zpd`o_Z7CLF?fv;AxsuZNF(8O0U<2hDJ{3_5
z@+ru#S^e)~Ghyw7cug8BJ|qI^)Q$V_8GyX(6zVP$3uvnUG1#+j(vTJJRNo#5>1!wf
zEqD9H<JY`<hF0!b3uV5bZmw}%?wkycb*DR^Sg9AC`p5&cW$@1n+tIMJ7tfkQL5Vcy
z0qDma3?x|Z%$r?cU!yU-aw$HHP0dkD$Y2bH>Deq)-h}c)v(d!v$^o~26bu0I1NLRs
z;soC{T{jZ(lFUDl!C<8ilH)b4iDQ=oV?_ckM?Ienw%c~k4YFtpmr;1h=Gu}E70y4c
zVI$m-iCR7}0an7Fcx8SO2^R87NB!>q!&zp*Df<#bJh|>cme>p)9KY%5njd1P5&yGN
zeRQ5<xY-87t9&Pj7DBF7a=gZ8j})L)7wc_IelsxlSf^&<PlTys8*rVIq3gIiXe-&6
zCjqv$1{`gDZ{lM)T1M%1CD|`QQN0-x|H^peMtrlTD*M=FX43-)8X8m9WnB!7;YrK@
z=9HBqm+~|VuSyx5d%JJNcs1choN~t)4Dy5&C)W;Ttm1a*{?a)n(@L{KGK%)|j}k*2
zfEhZgcq|OuU>=!9zb!r($&CBO&fOGp*NmKIK20m>0U+}{eKVcjOLT#Af4*~exNZN*
zJ<Tcvl2@CWqH_2v_LYl{ygG$S-k<tTIR3xtCIhdMaMLyoVgkc=!!)FO?fD9}tb*zf
zKhgDzEevfl`+Ix9YFdxk8DmIlMip+2V&uN?98i3PC<%kJg9Gr~TB#wPqCdn1QoOtu
zdMO<5bUzZ-h2PO8357`qbZe{|3S=p|keontEmlk}&KyM|u->_ennE5`O0hpxZM5^r
z^?7ob{D~09hW}hdKX5R!g*Sfq;MGAvXvXVdw?2@h2^qAlKcFLzrOr{vc>F++hY?NZ
z;$2DdM$}_PvK?Xx)qFbOZ3C5X%s|4VmA=$M8UEk8b$6`}pf=6?r?8?UG#B_i*Tz+Z
zDBXPTZVDu=>eb-59g0+QjyXjUX)|wZRZ{RFMr`0%E%<G)J)}k=Ax)g9EE2A3U$8^D
z^Fq88#HJR|0u4+UY=8+XVS~>cs<g9LLMq*o6pdO2GG0b-R(5wQCCfi%R$s7Xa9+D*
z(1GILD_$kGO_U)tIYr79JC|vgX8r$&C*`|Veq#rw!MQbly`arsPOPLPi;UiQ`Mic}
z{Ol>lrWCz?f&0!{twQ!LP<D7gQSY(2Q!{fwVWS@vuBiJz0YfgfuE?e(()gO=x*)RP
z>o4p+YK+>{)ZzHRVIRG?aEov{uK;=kF}h4yOzg=YNwv;^Z<68DM_?miH;QoFT7Ae9
zto?^=zkr-!i`&fVAKQ;X--wKf)yegz3|s;Vc>pG9jfW@3kV;K1uQR=F*W*6?p<$<6
zITC!;KyQ~BQ8l>aE=Yn`&l-O-AA?;pl#8W$7~G!@n`GmRovno9jFlmDLI6T_0(>hG
zq-$_IGnM6$?Y6Y){`vGJ)`i79#$KpSPP(NlMcjZ}YY(`2M?6cXnx}U|omCD^tBxO|
zh#laWgHpUmLeo^iv^--hQ~TL_>X-f0IPE_GycevPW3i7ilgde^bbYgAm|cP+60qde
z4i2Z{T+thPfo-3E3)^q;-0=>}TPn<Qs}p|agB%?S0QzLjcpT3`d#;@&GIS2fGq7t?
z=6)L`fr&lq5qapiF~WTi<R>6JK#!$39o&N%DbF4Q!utl!!5D5*0HZbjn!=pZ*O#U_
zmqV>fmwR#XkH(7W1^2Lw)$rX@FBv#X5-;(ux(`&*hJOcmpR)0`jTOxMoqwVVs$ycY
zzO`Pi^`UzxbuhRz5rmrNCD^k>Z&$Xzd<0@X(c^2ig`H4L_<!yuU=;SD5Tx**b^AK}
zo4^5LC!c*ZB;x24{u2P{+^{NjK7w5t<|oEJ)Sq0k-T>^B?mxwyo^=80F$is6z>Q_$
z*nli9$RI9izS)$AW(nVXdpgS$kff(6_-#7b%A$RsU}FT#uLoLe6N@iLQ^lhg)6_@1
z(qKa@nsq0oU+FBhR{i*2nM`kBQFkTWIA=>`Umi2L$GwZpl<E6nI3cz$uIP91>=^IT
z7#S8B8vdnvVhY)4gF8xf-7Cv%U3mUzWt@z7opW=djvQ0--NkoKBlN8dbITP_&x)cf
zbki3v3XV3&B=uj`0=i=LsUd!nuY;xCeKr@4<1lPVCBeGXPv!*GreUCsv<F8C7_$yI
z1FFHJN0LF0WbBO9pykr>8Osk^Mz_m(`|cjGw(PooM@K*fHCdQR)AVHR3CHGN4Qej`
zf59-JWuS(h^gQl2ojC|`D&apTU^$mr#;IyAmN%6{30EmH$z2t67s#Ud4H@T{bIerX
z6A5qoe9*v+&yAZGy|#s+w3_@P<-Qf~c^nAZXY_g$p2OOp!dAdP$7GaN!sfpdRp=t_
z__3a;>Au;htPU}Sw?94d8?!#!Pef}5Q<3C#w7$$$fGt?K!!Yh-hKtLg6Rb-E^OLk;
z<6PqbdQgo3bn3$ZfT<rVo^-h>+=9W!;JV&gG$yhhnJ)i4bMo&KwU@{`CVm{?Cz`o|
zo$)Q!wfgcjMyZdYqs&B%k78mXjCf{~Ox$kp<v2E0O;N6IVKV->1>_L3(;j%(YQclv
zl%4lcfQLX*d$0h_y%-BDIIxMz6MZ%)ygyz8a4Y=W7T-IlQR`)O-z5twRY=VW={*X6
zp@saWYMtD*)62QHEW@(+Hgw$!M^X%hqC_3}m68w|-l;|gXACXaj*7fj)ggZ@4fSV~
zd$0lXQ7XC3vackuO*m)oZ3kTMG6tZR3HrrspfXFRBVPvinpHrFHP`kUj|i=sgVRA?
zz2cVzT)R7I)i+t;4Ue{6SlwEkeP^8!<}I3~XOhW(Yk}R?BqXeVYtD}*iY#ZP$?e9a
z2JT`X;PrTb`<iicDs;*1gK?L_g1{*cu4J~-9*1W*4V@=4IH^gCQ*d*26jBHdJp~!}
zZ1^ctKSZ%ptBTlS3io6VJmX|?kLic0_S~Iq_z5JJZWGVSRWXbia*M&9+c1h(-s6u$
z`5KAIB--w<)luxb!zirXkV1P|Aadh+&yauoHfzHyUi`B6P(X$Dgd}Cu2c@ZglL9op
zCO`-C^Q#EObl6x*d0|iFVAfdK*+iA~=9#3#gRb(BQGS}`zs0*S(6Axk)mKay-kyuB
z{uRdg4se#h*c7~tJzA}@{UfPKLS3A%Ny?3j3G;sa&uru;^*ut)$y%U{-6oW+wz;@V
zf4q!1sP$I5UWUL!TyW-&KcDXWVu;sqZiz|v#TAu}HP-~6xJ1PhQ~v6^K~4{pk^@wi
zH}`I;c-D2`m%>`!38NZPiPKTe6jV68c^h`9?QG&88QGek18l#jOYVFF#6+ts73ZFD
z82;;P`R-aD#^qdiGRcTuhV@~rM?$no8DTp@fsO^Y-9k9l`k2*yt9=PBoDM|WbjNX~
zHh-sXlnnlJ45b}`)XJ~Fz*)#BTpfErX;K@F^K6CYOd1U-xp!*Q#44ZfC&fvJNMM|{
zJM5vo2_}v7T3OSR%d+N*%lrdu(#0q=@d69ey$odiLk(|~T;5d%FTcqZV;ZqSpHl3*
zKgry`b<t{<`Fq7zO6j8N0+%$jF6-MCq{;YeTUD6^P~fcCGzf3UgnsZ@Mj^RtY6ylq
znDWP5ZPpfZp;+vF_qwK~?NnNa>)&usu(zw_)o2Y=jRzNBSWWnB>LDow-GS6hY7BK0
z;qK`OFSdLi4a4kzrmGpqh?h9j?j;iv#oUV`!@3aMKg-09T8rJ94{d-)H;Kc#50af-
zT1QO40{>Tb2>M+B<l24na2oy0R~b<*rU@)8VUYMLguCGY!r~`UxAJE0bM!kjEmoW5
zrC&af`=7Vgh-NqZUg))G0jfccpHtRwDl`v}YNZiL)1qLdHeMsO;s?oLXBXXd#)H4J
zrkxe`BSvH5!H;)tOoc@Na_;Zwi5?H>Zr>r{#SfNdCx}29>gE3GkTROb)gm;O1EvRB
zL)ZKe9FnHsC3^nn_D4_E2(35dhOISI0ol<*QxehTd*RbGbt*Wb1&Si%uk$Shx-)pH
z8w1TM(qJ=+d=tDBRo9;3c87MFst99Wp8r5{SoI6dhGiH1OPM@+ZG@7g;R^FjS#a8_
zt=+VIn#;8}^AZ`@2P3PB3`etgo}!-K9FdB#BsFc8CF<o?@QJ}?6b-gnQ4EAtevD_%
z7t179l%rh~;b8|p&fYJ_YrQgE9OEduiUwO43ewh}m>qMsX<wiL{7JLfX8Z!t_HqUS
z9J>Z9M$h4wa{T<<q{(K(G&sW!{8|FGcw2V-JtzDfK^59~;G7Lr=*?;7EH901BJ{g4
zt_sJKbS9fHijKR4Slqh?#cUbR_nfm4C#~$JROfzgpBcs0gT4jcGL)`;QHrQ>GhVhn
z3eLr+%^`z8DiXUcT~*=H9)!2Kf{DUbuXHxRcFDDcByApGA54>u@K`B5FC!y-=3tD1
zMaC4NJr^y>0kDOq{!W|MDcvyO)H73LwI1SZjKZB6*>yAgvC9Q@gvqGN!2|qe$4FO)
ztkqZNPmt14M}WJtg9!ltKLEf94IaESg56}#i%MOwooH+R0qCWsT~#EXy3O-6xCJ-7
zq7ghpu}G4%`&YX^G0y(DTRcp_(P}3<7&Hz_R*N&Z;&x`9_xBg233Whz_!@Yq2yj-#
zlw>O#nGomrc{n<E+yb6+YatU~*lGng;87;QzkrQ>%ZEiZ0>ViFb=-9C_5w&M5)n`q
zI`IK>(DqELj1UV#W&m=V$I0VKi-pSkzLn)6k<p8M)zTFpV9k0IFycXA%j?KYQ4rv|
z7;Hnb|D(|2lXTvSKb}eEzzvH}Y7<@^-%_5MK{2pB?l20)(>tP3Mlk`h%a%55xA^Fs
z5~Aljc^jU9FzgN~n{4zU2K5jaR+*bIgn;-}cszCxMV@a%y9<NF*M>9E0F*o@dP|#r
zLOXt-rEwtK`5N6p?b`Ial6_IjTP7sgx0x01a@Z}Jt2u$CV3D-sRC)x;;=Duq^|dIk
zz&xYPg^0?$l-+_xgd!u+bk>I_X#!dtzE1s+@4R5=y&XR@{8z?2%6b&63Bkq-h>&a7
z!m0UlJ)uwNv+Wt?{fk!Pw{0SO)<r6Z#?VS18raVBTqrP++yfzqwv5kHQZ<)rS|}9G
z8HFb-aq_P!$dI`aMYh!^!6f*#CN*v+?~ea555{}EGZigV6D)9zgaq85BlFlWZqz8k
z*PAv&QdgKnxJMVC2Uh)x)3kK2aR+3q<ce#j58(2j1#fH>kmcY|ZHg!c09fF5z96J2
zZ=~Bzj?LA6k6473Fnb~BG_rz@!?YMp55h*p`%3TjiU)D6Jh<8{IPvB|1u<h4k-Yu|
zUfdJ|4kk<lqE_yz8AA~;8ypw8Y7gS;>8OcjrF+=VgTAr0ipr(LTb0y}SaLooQH`;F
zl2e{N)1aRC7AR&m#|pWr=R;waa1dQ68-HVABenof%zVkz+lq$|VHWNGQp=XCA~r8(
zs)IWTaHtoZJG6C=e3!UqvCLeBL!Z<sZ8|XdE~_Jo0CO3+yf;~rNvl#tZzqv&?miB&
z6={&UCoF|{5iEsMHP&U%@flhBDokaLzcOJ3e8W?Sm-Xo)O$lIV-NSlo`8?t+mD$5|
z4!8>7F5Pi-Zr_uf<{@swlAxuBtVaF5sAQED6~*<~gb6@A%5#Gl5nTelSF)^Osd4i}
zx;xKiUe`()o%e;Qqx7WEw*W8*RAJ@NVQb+GNHTZW&36Jd!Au?&K6u=Ls*O~Voqn@#
zic&=y--oz1*mA^gm>D$JX%UDx?Eh81+m?0ljpDf~j)K;xpOzh?FM8bN2A;IAQ`4cc
zytPl_ac~)x5<(3Xf^a41Iq;RGN)O(5&7|*c8M<OzwKG@K3i-aaw=6Okl)Tpy2zg2q
zD-D%zUYqt3&T>48e0FxwU-6p^mCm5F0jM}7@R#z|+QzEJX<t+k4zh`YLduXKWs1%#
zD_+^(5PG;e-hY_AGM34u&gb`S#2}jeJ5;+s;}JNqKm&cf={15zJeLp+ei_kS5J-M?
zAw&Wn*39+fO>hTgfmoR&#6h-`7Q2#8>f0Po9>1N%=))q4E#GrO{dMm_O2S??)o3wg
zmCuOAU)tj}agH4AU{+`fPH;U-Kj6EdMiY>BYew><JtzgIDgiA)Hs>dKVKz<P8Xem1
zTGuXmDXb6bW|_qk6X0jCw{DWp*W&DNI@3BUH%mnKnGyM6j!{f!yM$^~^`S;*!c{6|
z_7Nl-F~b8rXe1-^gUEl-j26uLbecaWW%?oXJ4v`ZqJPUd5I;K$Vk3rJ;p!ZX2>ylf
zwSi;4|J6d#-FV{vJHn>rJuUp!LIIQI>tETYLKFRb(OS1r?Gij2yqg&2Os};wdOJsk
z^$rqID&|_48yqwb*FGgzWyYefTlWxY9T!|0dg?)$6Jh_14HomscQ|BNTztUd^NysD
zb5g#=m-}a*Rw(3W_QIq}Xs^#7B+`*c=<QjIRV}h`RXFQ2F|(+E7X!+ZqD+fZYxSQ_
z?o=*E9&Lq!rxlFwAq%j;PSJW}2#yWt)PCl@lKG@lzCYm?8aFp1uPpDCvY4dNIgB)g
zkYc({kmU0k+=d}}5?p<2EK(wE@cI6|VP!8oW+*I(qnu-TIhI+v4UpV_i)pTi#Fd;U
zIDl(BdCm=p!GjvXfYjB10a?0)$UY|<r|22lK45-dN$%2s(h?5;A9Qq;lt);2KQVZv
zkzhP?YmJ7g(!#x(MEP&v2F70;Cd#32cAjX!3g0C6WSle#Tl~xNC1zDgevamU<ahPr
z&{Q1HAif<}-T3I()1!oqtwcco@!dFmsqohslSz6N!d(jofTz#Vr#PHlWTwwD3JMv%
z670!g+Px{MpjB3%+k5P)%5#M+<glk>&^s0|81Cc;6NT#K7&e#v4cN2XEGA(Tljj5A
zFBpxt@4Ib}uciNV4g!`E;kAksmvLaay*$+Cr_TF^b}EXd8w5U)jt@9c<fA}=9Iyt<
zv31<psdJbC&dT&KHh5Vqr3PHqVfJ1<2*tXbm>YW)KTHDIc4PIFqC>Vcn{CR-OFFsr
zJVzO(M6mWe1j%V?$0M7szc8ou_k4r|a!Y8I`|RNn7Qv%gAFlb!;-FEtayPisSaayT
zH`#);_7SSl)CbbklfxQYG4+07bL(V)YJs3*CW15KgAlvlj>rSpxC`NeI1We=%ncS4
zUD5Fjr&cdT7BG4=YC}?YhLVCIU}@aE(XlF9Ms{e(5^lDh93o^!P`*Vo#ixJ1KmWOo
z-x}Q;SQ={fZC|s{k~9<Qt!RyJaoE-IW*TcL>J;rZ-+}ja!8GCcq1ouQ=@j(Wh(U)!
zl}Tfo$v(B_aUk6U^ED40l}p6?rSpY-U5C<+v=xmI6yNzmLHOx^#FTiua^wv6rE<Vw
zf)#W+=giG^i|Eg_>zXN--$AC~gH@oy#Eu|E(4GH(F3LaqiT(GA<NAjBO2igyXuZer
zDZ;`RXZ)@Des|%kvWCpX?l?RkB`^|SNw<FEET&REh8lsskxn}NtGzlxEyTPBb)xHK
zoBnrzD9j+Cp1Bq`GJDo?nAmwr-ZtM~4xk|vk-b4%+u}j^{KKxvxeU<dBWA3GG$;ks
z&33Pp6@ie3$K1gKMo-u5N9!b6#)Cv2!rv1vDkUAPwB_VQ^i}$FpZy(bS!D3o0giRC
z=sOXCd%f<g<QB4MT?SQ$58>qqN4#sAB?`HMp>F;5FPF8$#D#vOyE-TcCifN8cccN>
zwbp;CnKU~`*xruTrz2`-p6fSJrXc@IA=#*@MLWSlJfqrb@h{pOG+k=I^8TFWznfl;
z=LcJl0I)3i2U%n#6nxP1SIE`OMY0Wi#dX&)&j+}YrC6o^$}zL)@a@QZ`mw3l>rf`~
z9CO)#%lA!XD-|MY*27kaNcyw2IHpManbG$pX+@M*ZR^+Kjc=WclBxx5U$8pw{Bu_g
zKjWsRI79Nw(A9b$k_$be#@{tJjksY004-dEFS$)~#OE+d=acgAx<bRJT_I|e4M?zt
zQ?DwWMvzWLGwAIhY|z3>>o0(=xlOcxSzTdzRz9Yv#}4~QRD~qjVfJa`Ct;SG!K>z-
zD7>C%tGUYoVj=Z->;yppNqhwLBRmxREz?HYvN}N`A^{<z1`zl+#f1B<F9?X8b4?8=
zyg>8BaWlVLWU&hWJ_6D_xt66h#<Jy75w$LIlNyU3SKP8#VZmnZ9r*?6=1TP@1Hk}m
zLg_N2_CAxnd-)Lu>Y}2pjM;Q%szBK=8153zk<xxxM2Ol#+F~;zVs2zk*iz0bD8)d}
z@wH|R&dIafKQ+L<<pyvM_Ubo8XM8J^M;$_%Alw*2scVT`;4=2FeS&dKI^TilY5uMt
znVy?Jl|L^~KwKAw%FLgxyWlTExh@8Pn>(v>iV_qb-*UJ?eyBh;QSvH>uWG|^JPSzV
zi*?Nr5Jd&CX5yeB9pl3N!Gt~B*ve3hjVUNaV;*gLJg+&Sx@TEK{tnt>UmuDq9vEib
zWZ6%N<>$@<U>HKfWIvAknr?g)Hxn2cTal*1wGMdA4kRp}{mefJ)(c1nYbvVtfwf(Y
zYCp$tsb#}es7W7ld|wE3QnZ`k!)WHLiqPpgkZm^CLc=4!uA@8lrDx!R=WHi}2rUKM
zfl}$MzWy<kj3f*@nXg@s8(~ROU%^z-yH}*~u=EIngIPv{mcQB(!}(_4(rccwoUmw%
zDw;P+y6&l}^yQD?R`mewZcP_kIi1*{7#c!kO~+R>YVEE!2?@TZMyCpFO^olJ+_@?>
zTGeA-x6-SX3|Ep&)XZ~vM&e=xc7rt=33i-Qy0&+sj0dz}+1|-X_gvCzm_p70sKGM5
ziTfkNqSG^P1(fPN?Ksp15X%LDN6a^L)c6H5xvUC|bQ?;{cBlJw;(!r_5S~iG_>t)C
zwA&p?MvC!8ftVI<mu^RiN{OC<A}uL<&4m^(nkE(;kqozu0hwR>hj3*|@N-)|IecFB
z;vuU#d-@!nf^Cs058P$uYcrKRQ&z7%Tf;#sqRcY7WZxd8I#aQfeb~4_mGE=)zSp#H
zSr@f`wC_zIK&q|YF&Ol)Qe0ZKbyD+Omj@s5p)&^`zXZJF6lVqfkRGSTioB)&th|vv
z_Q(O;FwkWB2eo`lAzBU(Tu1JzU$d_k=jmx$ob`YaFPT>_YYAYu6foc^yU(pV%?S{d
z^?GT+|JCqbw*xkTtYOqPo#aK7-?yz4Pd6?*Nr~1JRl}wB&09uO)lWpJ{px5_dj^nE
zV)^=jYz6|w+k}}T9rEv0m$i|vZob|l7x^A64GObGxRW-hFVl~M^ZxB}e$j-c#)tWL
zHG6R?f=xxhD<FZ|7Yo7$?nB>YtCtL-^r_w9>+M^?Cb;lRdcr!hMr)TOs3KVQU+KL$
zMw6^s5+5E}_S#vu;WUL;Bj<?yE?$Ea?wOQgBfqtLtlto=d{!G_7<T@~5?Z*}|8T$@
zGDbsNu9`>;^)qBVdCQ+O(@A@`Us46ivS*MY1*nYx_}{vC?WSG9K7I=^H2ZQ>T}pkk
zZQr4@Cl%NTxOw8h@E(iY5b=EQ8zZs%8@TJncuT|epo?$;%IE*fE1|<VeX<fHn<L6p
zDS(1H_%@Z$Qxz5stP(aRp<s#8G#vF3@vjBR=8?OOopAHs%r+-K%vGm|nZ@@J@s+Ky
zzgmT)E905g<*<m+jK}muG8T!2HqH~e=_1>ubvXtBZp}&<#tLHZ^Y+LVMl=m@GKia@
z<8k3a%Pw#T;dv$o-5vai!b#i7aT5dHRDus$s_1xyOikLv>XetUaHs|5l&logXEgRu
zc#ESg0>+-fUv@)<V+MQ`vL@OzvD-(txQTqXu!&CaxFBl~ppEo4xkI+<$At&tX~k%p
zo)R`DKzTP0so@2I@<=+NcLcc1A64-!29B37V0iJTnvTPpfIv50rq;=wN{P4f|4Oqv
z5d`dsRH*cdG~;t+FARACde0~JbNSMrs%95~;Bkt1s$Vp0m%rk@3Ca~>VK=;(kII7;
z0uk80Cs-%XN+FH4oKkNvf_v4o3#bdnnAeL;d4ipE<<tOS@ir&=P%&%!#@n}%<yw@x
zInM>`<6~X95l|Ns(@lPbTLj%)2lgZHZr8E%pjM#bk`}t$c>)EddndiL!ssUS?Y2EW
zokd?1nU~K@XPf_UVGtS9RwUfn!5a+MpBVbL_(dTN=bOLQS>E{wQ8UDf=vdl41x*w#
z+7h9=&VDS#=8sczQ$ezlO411wPgZ~O`RY-M{1!icQ;iykiQvMpwk{%2JDNHMgKE`2
zR`g8>QVpgyqcSr&+5HwD1zn7<smSZ;?I-Uh7_uCUs30ibpvfW6jm$^7OKGy0GWnhM
z4M8)g`I0-a2puRzwh$9*z_N1v`osHmGPXy1Rb~dX3%}A5XX@W@i?-@o)GPwO-C?<p
z^C&0<b#ARgO!?`pX%9IKa6`$1Z~~35fCu%Gg&y!X05iJy$-M~vm?+xGr%eV?eZ$8v
zET37K5Vvj}sfC8;X1e+$64e(QL>0jvUf5Lu<-(|up_M*Xh+m8zfrQmA5Zj5a53;uN
zzy>WlEIsZ>j}dN+FitpuqGb8hoo#f;6Tqx79O@d}jkKPl9MKy(0@UtqlHvxalo9G%
zX=Il8Pn-#*5by0DfGa4%j)diR!e$G+%HFx3ULfI*1bx<voS{EZb3hjjoFhx{NVF!f
zLO@^Py#1UTnhBudU|Xb`Za|Z5)@lweP=BSCx>EvP<6T%x+3u4vfeh`b!Ai4kk~#b{
z6I+`PguogOPumIGZoZ7*stW#?v~V&kN*J{kpNm1_nW}&}FijN(kZn;PEQh9>izC?~
zifjmTWi_pgRiAmo`5vO8!f9-LC!G9_3ihf9BeJfbtMTSk>)dZnD3NN$V>HGOe`9?C
z1KjZL%<*4Qa2SIDq9tENeD+eKE*lUtS~>A^kt1J-*xR@BeOj<Sy7q6k#-p$Ed6s^g
zOjsY|Gtg#Q$YskeQzLAcv`Rj>PO(s?Ne*n2$X3Mjr!=9Lu}F1$j28-feKXW$PPmID
zAq)m<N#{cn_7aXD`+}^UeyjpfZ5mb@QYcA+Ah?aBM!H|rUxPaebP893UY3X-463%>
z+6c0k!-jNHWV>h8xPg5c?X<Q(&cRisH;t3lmg)_N!5VawI8@kk;4&94mUtF}_(YI-
z|9*ukwk6u(B`O@$PJQ?pkh$8vb_P(rJElLh7Ow2wdU-vQG~=Rw+b%6sju8$1zr%)*
zK_bmt6%RNHq^&Acu#57L7{!kL8!gMW9&XJ^<;*A3j>g$2z?lGuhc>z;nE9T`Sv=|>
zd(*b-eoqDN_bR0E7s~>fl+E=FwI$N6`;zopPAZ_uNMe2LKcUors;Ihs6lWn#5M(`e
z(zueGC(RM=Ym7>3AZCT5h?;lZ*5QhSO!iGjo}I)EdjS_eHMF{W9N}SoW(c&tpN^ju
zr1K;#>I-K?XiSY@i4Ti87N-6^f>ro*w<R|6^wAbTG{Nl8TLba2Fn&_~Je{M-jPD=i
zS=`C&bj2_8&2i6nSYS4tiaN1zIW*B!0*;3l0FIHsZ1!qmZq5byla6shIkutcTyusq
z&ndF{nh1bayscKHR=6yWeeAl-4g*~4*)cDV<#l<<3E>uDrPb^jfn@Ab7#)xJF*jo8
z09b%{`3xG;?qoW@XZ^M0;^<j5wvHfB*m-G2i%{8jH6drSn}uD^=)VVa9ZJG7+p5Q)
z`t_g%M<c!(<#SYxAQuATYeN3u-UzUPt+a?C`}R4l=95Qf`skUSiLv<Z+>}C^pyrEX
zxzQ(}4<yPOh2=z#0JM!Gx5e;n6XZ;Etgf~oFPn)?3D-mF=l}xO=@_wrejO<84z%6H
z#IBV6{52V+7;Y2-y0i9voG!(^1RU8dbzoa68}G=x3(?Xr;YAb(X^%ZmeK(z2!K+se
zPU~bIbTu%<%<JXI-p)PJW_`!d!_w;RM<c2YAwXgHG}ZtS<roh;;nF@a`t4K@E#c_x
zc~vJ685XEH6jMQLSur|4q+tH;Rl5&URwX~H@^xt!7Gvs=R)&i&|FmMvn{k;SbpyDw
zWogc~k^~Nvs|P7;eq)O!Ah-|uKM$+Ph-;1&V%Xtua<H8k<mJ?bOnZdmt5{UEp*%u!
z1xKv)O~_rY0=a7)4^RUsLvcf2;*<@YeoU{{a%j6y2&RTQf!3B1=n~;s4wh~JqhVEe
zL(78)TMMN47Bdo(307$AM&I8|!a?k$=@%sXo#6>7np+f`a<e?`#*HYbUZjjd!w@$%
z3OO*c*p&7RPivI5k}Q-pbmlY~wckPEVV^hk3JEsnE$NS~TIe#Z05vH2d=#<+RuQiM
zZ3Ja9CUyVWp2YQc`wC?JV{shXr2Lmekurs_tZtfVeBkJiIQ1<}Khb~JPYSb;yN#R(
zRls)y<j?XC0k622FJ{u85GLzb9$Mc@u=$HR%q6S9q~sw`=r73Fw>q%w$v@or)%u?7
zdK#2s@h?|i>oO8&Pa`(zP#0Ui5?^(`^h3LS{j*>B!EBozQh#w}Q4B42AIRe-V{ew^
zWp>wa8GVK<`F;mEVDTwW)FK~^>FuF2Vw)Lz%n8hl|5__K<|YROS)zaXWR=snFSdq-
z&UkximK<&BF6rYGI!dyuHJRCm*Ix4@ly{*wbjyT{>5f(m!fE<XR4|8R#2ktl5ddBa
zG>Wr+oylmY{5L-I3X(^*dRo!Rp8JmM(v&LD@+i{t*DQ1?oRKC*s8lag1#$YYo*Hhb
z;BbfK`-5K3RT6Hp{Lg8)LulBNOG(Zx)2~)x7tHs~kPH7UHr(WV;zUM9iEWw|{tF_6
zvl2U&B7J#W5ghKA|I6bK0^bjYo05uaSNcDDeVSP$4Zs)O0hSGCILo=U9c4*n6FqN)
z)}i!<1G6)%Hr(7X0(Go5j;QsmoTdO~js2#6N(^r!2GF|Lrc7d^K54rvo}Vv7wa6t>
zl~3_fI*MG}GD*7|&ECnslH?C*!6z<bm2bY2PgcDM=nO3#wTXV_-Ozydmz7|XDKpjG
zbmc9dQel2I&R`>=3wURML>OqvwbDaK{YIigyPvKiLU4FJt?@Qd?Ofngs~O`E{ygsW
zP#}Zbi3mYYB%+_v?iXD&01hW4#-b`W1hD=?TZ#*J!&|3+KM|DFZ5Z^@<AJ*2ulI~K
z#P}AkKNkEDnonA@_C^ZV!Ea_uV>$g-vj9PVa?K8+LdS`j3Yt?^u*ua-`$0ur&?Zu0
zfTvbcJxUriT7f$id_*B!TbLlhWw+pXA0TV<tx<xO6p@RFK<l=m0H51L0^hQ-+KI<L
z0IP_SA~r~SK7IJ5g7UV)=kQ<Hax;WLdsR>A4{D$pU1lRo6X@gLAN*$?0^LDzeCWQ9
zsL4@}oD%@dI+adJWsJF8?YI9Kxc*E(`W^ySqDz$$7-tDEFOZXWFsx!3W0z-g^{&Qz
z#x$iQyR%m~nM&>}gUIg0xlO`=<_CfTpbZ(ep4!=X1-QUy_aeFfS{f?FuCVVKd=sS%
zWw2lFbk@7v<)0#nSzuD+p2EER(4=27tw!O9jv{*{{y8oZHa<};bg&ykgP)59^|lw$
zIpi{khej<RK8xW?+scy6(AKiwJANBj7jobOX1gC0wj}c`&#-$bk1bZx_VE;M*)jRn
zN#d_L7z`05nt>>by(5?l-$jNslc<&)mii(VZQ}efqubAD)tfVS`KbH?<U;#H4lH%>
zUni}O2q>T+>G)E;$lG;G3KK;-X!8&=(Q*El-}Z#3iVaa#)3j77X%=YKbk3)Ly-?Ch
z{tjgMpajB=vq5-IgkGZrr6V`U!Xc;5!lhnzhLR3UyMm;!j=0K9!m)%?VVp%Kj`pJj
zsU<Zmloo4Oe^v{OC`rFJ1}4Q_8xQXoK@lIK?X>FcH^>`V?s?z*-A)PDp+KRtPtLRx
z+)MYG#xX!IjTo!BeJ`EIKp+dvw&hxD=s@Gh1&J^NuO3<_?CDbQAOE6lMe6E4o%Qi$
zley(rlrjlb`DP4C0!c4Lw4p0je85j=9bV+4#(_)>`L)f7*tHPHvSZENmD>#y>{oDV
z>o34&$t&`78BeB775Q~_=M$GvNw=}+Z>XZ`gGyTJoAPa$h60|6OnVTH<BI=&mdWMk
zyY);Ms7mdmseMmZ8}-*0BFW4gyfd{3%YZo%%<Am&mDaJmgW3^E4d_@pn&ra30dCjj
zW7?@`J1b{1fGbW_F%3&sZtky5n3uGF<6zy)Ei+0L+H(&Gdd1he6UaYa_;!83DsFox
zU*%OiQ6-wq#FcaB3F~YJQS3j)3H=ANWJ%sV?SyUPJLhPTCiQ|AeT8=vtK@z(K>4s=
zv!?3YTcz006DPaR`Ky|x)?!SPDWupq{auRLo+!v}^x^$WkZ&lG(+gsYiyGJXXE_h?
zDD7YBq|Y@@CshjPGYbj9KcUi;nx>-PvI3$0phbBu>!<m87ZW0&D!HNa`#3YhCb#*o
z`WKSgu0hokN%<YUWt0@DU290POA#?4ptNq|k;Y$B&ApL`VGdB)Mge_PeknQ07N%4#
z#NyzO&%LZ>8x_FV?h@M2QF7>~){(B_#UvIX{y8rOcbWA#3-sId)f3(@rL%so=>IG#
z7_C7m*`gW88Db703|mK3)%O~amBwOi?gqY`G6AJBn=Fp10bIs4(WDXJTC<Wgm++Ek
z7-zEUV1}SfUBb7Oi4T+`U!Xq>hCLo1n#?czeC+wgu0ZSLz)~bUCpXB42Ijg(!VZ`b
zfWvbD<?L$eRq+$}Vzqcyj8?FXOWwf@^p>*1@-t<TVHy-^Q@7k^9=Kl?wNUWw8VUH{
zlY$&?+04qsasO(d=dQ8VUo5SrZN59iF$L4$e&87gPLZrx9ec0+R=~*a8vijSA{68(
zlJ>4ydFNjM`u)ttmC8VnMtC^`wi+Lf{r0yXGhKeu5ce3-_t0)$obHcDgjHnQy&w=@
zO|%*D*&vEfs=`}ma}b=IC0INF11V9Fz8SDVS%yX9zpanOjF1Vn;ba}GmpBbolXUN-
zImUN)`vr9Nh7-QUu`dr}J%AQy74--el(71cL+~4_wl`CZA>f}C(#xSnt<iGJv|ADq
zr;NIhZMEHKl%}L{pQ7OP((uop1NX)di>>_P0TR>Ie9y~9{&%9*<8XN=o?;xSPUAg0
zufd5Yo=`uD^$0_ZKFJ-%7TbgTr>#Oj2#+}wi~W+2TtM$@J^L$Fysm<0N?r#r>`)6f
zrl)+1RiPh+%_}(VlWWLWz}YQ}b>xmi4Vn-;H-VeK+JSphD^v7}=+au_gbZUF-(IC2
zsKwJdXpi0rLd@kC^^CDh4>aiUsgRi7ERS8DwtXT~r`91$A->Y}0`aef6W5Sb(-;a5
zbYfO=p;{OU?OAHRj(%OWdgTw${AjHtgngZbUZq-}-^LdQ-9j|QFCL5fFyo!Yi%saC
zjMZ7vqdPZI-<f4TJq7(F?$V3^-%cRDGj(%FvT!X$5V5El&HY4z039k<+T?vQtdy=S
z{1_RLs!N#Caoe$QDT@BtEI3&gXi-U%(S$GJ*nV?Twdx6VcR=n1%Zni7;ve8aL#b1{
z;zAvKENQ#{*h|j2x9)`eT;ySTf-Se}!@fs1lpodtg7Af_YK|yq`nv8MeH3NsCB;Cn
zoo$%t+q(%%mGk|;4h3b2<Zn&LgLms+;QiHV%iVwDrQg3)&;WWyVGXOKp+B01AW!bY
zl%H6XPqoDJ^6C_biLVMZZ;t8DozO**V|;X|#eXxaO+3y#?j*18(SK@8#!;Bfjdc70
z!GBDyh5JKayo-1zx*>UOe~1jJI4-hYr{rV9C<qgFY`*N|#yK39Aepifb5#jYf2(`V
zo+-XzIiZ#Cqrv>~<?0jFy!X!(#u4wFH^@S0NFxdBz2_+4+ge#Ky4VW{gtSjkz1}1I
z;0wc`M(taDsgu!=5pGVYe6EVg$H7HZYF1yw`QiQR>rvZJ{$=bmn3=^#+<-a#+x1Nx
z#7(ac1EPBAX2i^W?JI`3pVLchWOIZE%=3J&%7L}pKNwDxC6wAB)I1SdE*VgMB62?5
zN}^g8yO+B<3-8w#TC#n(A2Vu{4inB=a`o|+L_+S0gfZ7bRTLt*W}??od-;*3TvGI`
z4z?`85bt{?SC(l-^6p8JNeg<b`pto;Ms>r*%D#d2WFVfjh9#7|F(R*Ls^hS}?m6~{
zuw66aV-U()KtuLJNmIpB*!Viu!HMEh?gNe5U-q%R9ysDB_vzP+k?Z(Yj**_>h`3p|
zCgZ8cnU6XlwwPe#wY5``!fClF*NnSAQIVRMTSy=RIUtTj27d>N3bfq?^GUYQyF;1a
zUq#B~geh=MvB(7X6D1~(=n<U9B@w1{ZnOPLWr1ao)tP(oYEGmQTr{=&kU|*mf1Wc+
zIxZMZt4N-d^pE!YwGcx$6zI-4+u2v89^@+nPwivTCNzXD=b<3~O~DtmWBq5gY}+y5
zdCXU<d3J&_+SlMa2yLjjJ%gdQ>sx}<j%9}L`Wh}I9a7;QD{iNki8hwAf`<*^ZrQTC
z_cr=Ihk&iGan{kH&VTonRX|XPHg<2~h59A^Ks(yuF*rkyVf5|^VV|gTOkoXPe_;@|
zuBlntXVu~I)bn_ywrr2@Y+C-xuil-}rtWH9y}Yq#4m?vL-3D^IxACr(GEY>X7?(qA
z$zYgk+dz(R=Fx>tuEWzi{1-qo=x{<;>wfcq=j#bewL8FVQ#7bA6LI1j9^@lNlAq>M
z=h5Ony6)6-hcjew$`|IKQ7;9;sVUwz2({nNRu!_}a%>3&iff$<e-v;a>$x@D(FAsr
z#D05)0W>dn3$2Akj-e7xbL&`zIXOHU7Caa0Lj>~jP;)M4E>xDvT}rUI{W5GGf76#j
z>zmmu;KsTDRi`%%aQ#8%o40U7jU=3v1fSsy#s{ho_uE6qxF%?*kVpxwy>&p9N)w^t
ziTB<MVe$BxZp2>Q<DT*D6bP)!e?gK_CknHas)y=-3@HGN=Ab#EX>R$E<H~|ElL;<+
zy(c>c0hXrh>NoCdAw||PFV<-)8*xulMRKhY0VVDWyeHW69JI=rO8*bQOYYj^)I**R
z6m*ac#w{uP)oy(%og27AG4xo*%L!+OH+X_I#joHewrzzsS~a;cI$!m}=pP{3qOSQC
zU0%7-n$lw-(OUYP93)4EXxId2r7k2gG?&PrO8Ym{yuhw&=`o>Y`3cH@5aIb;^rkgd
zrS*pag9DI{CaEY37i8ZK>e%=EW+Qz?j&bCuvOVArjOUGavA9PCTasLa<B<5^TV{Ix
zDeO$PV7aMYpz*F`et6Z3YA6=clyB@_#v^#cMW(Rc%pCvK2bsKlh%RIz!H5L5KA4EC
ziq%iWm&z}^t`#cx?KGe!TYG1=p8*omDq8=u>^lj;#TPjalkUl=h$<835fa^R^qdVQ
zRv9|-U%OR49n^n0Kfj5I)M|MgIj9`@nlZo2WGpEf8;Sv-{;#&SoSY@P4z-9#buQE>
z0*vN3#jpO(YwqfaOh%px+5n&~=w4>EeafWDFHTC$DGeuDc5?v6XHaF@Y?gVejpX(_
zOZ&_?Oz&evnHH>MTw;QRuB~}5>T=;`;0E4VS%qRVqxu*H27Z)Kwses$p<j$Kk*b*+
z-~8dF0Y%7(y}>OiyQ?8T_eT!5@$q={b+*x>()gzo_Z;ef<WAbGI|Ue;MwJQ+9yd>}
zxFY(L>i>KuHtuvRS1uhwDxzEYDpYJVGaY9JNFWKgpr((d?Wg7f!3k?i<M7MsOfoG0
zOgw-i7E7JTWu-KvWbYr9rDmSOrQezB08o6_St7LVa3aG)NyUEOibDq$Cu~erbevlM
zr4x%}tGBmO1=<=so`kV}T9kEC$n@%l0!e}_1qk&D;})_`zETK!K%?-bUnQV@Pt7oC
zTj~`0>hNqUCOQq21@b8eQD&=&o-ana^@7r-GLP1jR$KV)qN7`7&DsXviwZ)XaAw<D
z0M-@n4PK{d8!g1qN(l9c?3Ql?g4a(c$jshdi=PM;>}4lBh|V}Y<Lp_d%-MtD^tvv&
zX+0D*u0mQQ0*d%MkY4r!;`3LsxQOn_-3=G%iKL>z;BU(aB|EkKUOsb#TnDIYxJoL2
zu$*zV5){QDG|@QkF{|uj6?$9-DKZiQM0&<Y5Mi8qp?gIR0;_KOH_OrXLV}^#ep)3V
z4=YSLt(H_#{wL`iysh%dH+}I3vwl`}&yMzmQ`?Z7xQ6uRD20-~_Vhspd+#hmVl_VQ
zjCQCX_9ua>%!KNg9A77xyUkpVTL}&;57wkR{Mcw5;&1X{c!u3$RE;)MqmjN}TaT>|
zRhmm?_1PyL<BLNh|8E_<C+#odF$_tw+||La(6>zN&~DB-?P{ze{1PffVx$y46k`R-
zW3zuD_kqNs_Tx#`dFcpGKby4C;>wRIY+)%~uN^<C>`#cGcyjM>?I431M_tnhb8OL}
zORVo)H^6C?mQ@Y#fM=X)^MCHGm*RQ0&&bM-q!DKdH)&d13=ns53$61z<5n_x*&~XC
zXG({Y0L&q}75PC-Q6dsG?pH;-lSrAn;VIDd#UBy>enxH3!ZmiQ@m@Rh{NTb3$;40^
zzBiR4Rn*r~>`=`9R~mNGg6c<sA$=REKPzLIm9|82mL$|u;1^~c5k^1#-wabE9_FkR
z(S0Ow_s4uddNPs9{f8toF8pW-G2XxsF-emT<?_>W<g&vg7U<3x?yF)zIuZg!XC(6x
zVclBe^^`uoR%@9aJ6L}dQl^pHn?l%}9=V%C(b;&AX$MNKsPZ?1U_vZUp(|AxuV^ug
zFJoyA6Bv&43ZM&D$(9h4AAYx+R$_%92*v6!-+%j}?22tdE|hVCeaI3GIgB1F|1<zG
zZ`5l3lMHxyIwG~~u$9mr3PQtbD3*VNAe~@P%Pnx5Sm{|iCkP}680rH?pE6O?gyjnk
zndgbiE^6X<V6S(ZPRqd5Lg_*uGfYH%>xox<*%{4Bl8=c`*+im$68m6O6v%Ki6bfQP
z=oOU9fZgx&xnzuaqIMI=InQ!jd>%*%P{N=ShI+ITRZ4(j^Z?@_yW3jR)qQ#@_Xv*q
zL~UqiN$ONpKFO{rCrq20EzFR>58xR8O#6=vs62|lTh$t+=V*kFt!qgRbdpPVz?GWm
zp-6lM8<+#>muaWd<(v&(0;HpM#tmwai_tU}2U*m7+@Bx{7Uh-+D3kFDN_62{MRWK=
zh~o-%3&6*b-Qf^x8qe;02Xs#!%(a%<SBeDAq^mukfP@fBJ_Umv<#({kUt2wH!E`9C
zRUrGg_To4Pb|px#a|3L+2UeB-tg-?Bx-x;yj^SnfuXRZQR$iS?8U|)&J*&PVF=Z=B
zo>H2puIL7GX~QsP)8D@PlL%_dbHwye>ZyH6#&J(FPW|+P0RABJu?ts<T<H*kV)`v)
z0yM7r3bUI`jlG$))U1bORPsV?Bh09rlu{HUwXU*R+nn1^qaNGecA4%){9^!7U_4I&
zWRo4KK@Uq51^xxbFf30T{B43Mp{ErtMljajx#pSQU>prCR2@pUMjW}gmhD7K;rjA?
zvrCL(PTty^Pk}4M1h?#*hxE8u+JDnEJuTFAl{3GbwFIr!=pNNgXm6%oWFEqF0VE-1
z5^K+nRMcNa6Zry9KI|QC)e_%PX7WO8rs{|CuQgCKgR$%ikdJ0V!k&7%kq!7Q{wjag
zJn>C1%b5*L&O~8w$n?;YWrI5|;zzV>HzVQIlGGpB`1ysm(^|v2Lfr=-LtkM`i=y7B
zxV_j@Tp=ex&4N>%fn?Gsh0aXnc@<%nG*RX6y?+Q?xhq902!SbfM(?HbB^M{c+W8`v
z)zoqwChF^vPzv$awbSRhyvo*!q>k8!UpdX=nEXK|-MSem!1gLYhN<K}3?>MnP5+}n
zt0O1|7}^00a%Aa@q=m^6!P(D`A1X5g!DFw~4`EP}jA<NaBPf^yS+fXT!&C<+AdN7?
zxUP_zf~Ui1pc$m#j2@qr3TJ^wmwlf1?3P!5dhoY#J9X*T!T}`!!kZe&A+_Bj#ZHrg
za^NpZM1`GzJBOw>Q6P@l=US_<Q{djDUWm?3hCV|ooGfaw<rxKjhQzz{TIF<(&x}(#
z)!l0})mk6C9nV#$Fy?nwG*Y+T#z5W1mi|ey(?t}rK?r71@xvGa;5GXsZ;_B2?Zcp2
zhnH*O)^35OVYwrV_a5CA^x#>bd@4X;nnrnw_mCWMnJ(sfE-A!C!tOks575wq5)L7v
z;Sg}&`BqFh!_p>BEpQ{IfW|FW8&BBM@Vx1Ae^%G!4s}QO*eVi{D?<0c%Lm9~xNW0p
zk3!+lY>f&H&UtuZVzTXX!$q+gq-H#Y&E!|O0N$Kqs><y?yx_RINFVe>;%K3{wGVpA
zyxe4neMZ5&qYhxec03s+V`fwep1)yBgS-MO<2O;I{Qb+I>T2I`nnd#V-jjqoRr7DL
zej~7P5kq<94-@6<@jU%$EsZJ2fM`^Xhi>@y3fqtl^`@F<Pr$7h7B)~9=K`~yA!`tA
zWi`%O@Zew^EQVo4)Zf}t@j_T@W8b~_v5rizNo0NMMs@z&8`y$sn8U(QkDhS>ty(~A
zzt;p6m**U>ofgh)k}-kvWP8S)36&!0d?Ko;L}Fz=Y73slN_2!kSk*CI@!u>hL3fBO
zx7zggKHUet9pC>QgPzERHvz)D*l9n9)cxf+L#@Nhh$e&8{YP2Mi-hg7b-NlztF=6V
zW%)E1Q#CY7GY=tDY%i7fTwlq3KPbBU<c-zBQc2^PVw2w#q?NSbq{{i-7Vgui@29ex
z1rXO;k8jd}zMI$Kq2d<pzvDHtE?G>0r?%_WiM8VkXe^TOLzKyXaBiYjP?)+<U=Vha
z_bLG;;D!=pBD>>GR=Sj{?Z<bTl6!pc7jMU$^c4^myqMMhmWCt>MS*wEPqSolWJD|$
z%S<eHTeA5Hkev8rP`2Bk$5~1Z&LckB87xej5LOB#JgddD-(nb0AsPGtw7k%|-k<4A
z<pJ8KmAT^NAPALq`Sm05g2)t$5HOsOS-$|oF(*>bFi;r`hS4SeuqP;n1-oSLy(BfC
z{{Zr>3MNinRVFA!7kk$`diN+D^NP@nN?ZUz^MLC4`kg@}eeYmm=@`thvJ9MKRT*+7
z;K<+PN}<b~wt9@om*^5g5=$&>UUt8TL%Pu>SU?;eB_yH#nZ-|yoqr%0#Y%ssfI7&y
zExk&?Uzq2Igs_a_YgAteJtsu0crtO`d@ge4K*5fpenXe2sQ&7SCTv|52GhI{P&kD#
zP$IK04t#-XW?%7FK@*+sKgM7yiK(O69TcMWei>VxH6xTvAlUN??ZkjB--HJ(OKKX>
z>Lz{$BY!u)S>%d*t9T*-r%+Jr5_!FwoUoF9%<3>oaZciz)<{P`GOpVPqsDgdA==IV
zotz+yT;%!&ga`a+cTQCi0_HI7LTU~3AT0#_M`E^52T7^a8-d&fsT8Z&3osTRQk3os
z=&$v2CLoHD^a5RF2;gnh{;LZRChC)K{CaS|Nqtw)VmF<%ARDT!F%dw^Tf=l5dR=7A
zWyK!ai_99&C|c6peR592ziz{2)f9k#%3~0*o<c&+lu!cMNJR_pTG|v*<T9L??Hgut
zos19aR$?p?=eLgf+l32FB^UkpQ2J)$WSFovA`YFUI;_FYIvQEOC0g9ny`?Vr7`z@A
zNe8@`31*Vfqfo?M(S~Lm#wlS^zgsVmgBzRPv8a+Vp-{XtQpuTPXSvf>8B-y_S)VPE
zk&e=zTx{QDQ(&SX^=Vj#kY=m{?1>bl-FujcCJ{ZmPswH<OQmoJfO|v(#0r(SyW)YZ
zHKCKq0|VSL<XxZYy~VMC!8cqSekxwjTfo3c{^Q2chJs#{=9t1P&`6rDYZ91I_i=Fg
zn=KnGTN{eTT~Te1J&t>}Cx_Htij=nN-Y+=#VGsQosM3!Y?TFp!s(`A06=J~LFZ$2Z
z`Ssm7g$8$A03tWY;q9AZl4^WBM7mE?gG!}=C?pxcMy7;54tU?+rBy2ZT%Olnc8aTK
z2gBX+TPOk~Oe|kj72B-J9EqvD=K7U(c5&6T{JS)2%JdMKapuHFrmXq!RCeovf=S2m
z;`fYRUg$@o>Es{n>O8FfQ!Fv=pWx*}i&?0<Tr-vLm~=~0H!a<5Glw*<MrOs6@0@=f
zxF!uStPHkovo)A10td;?i^AxBuINh@+vefXP+3FWf>sm*cDC3vU3;yNEXo;JiOUhL
zfj%zN=FV(xk#Wl4{Sconh(-l%oYt{gHoaW8@Dn+_!qu-=i2SR42+zWO#Q<=90G&L-
zS)@7XyIx0y^*)n^N>RsqY%4l*Fzl$9tx0koLNV-#IeNzxH<93RsWn~hQ79G-<wGJ~
zO6|~eC@4hx##qKHcMd(E!+mx6Eu69ocIHZoX1VC&Ghz<|G%ZqHjgW0_FoVc0DkocG
z-R>6XaoJ?ITq*v1d`u|M0qk@^NkD<+Q2E{;&IO>$K9ZvycTq>r1O`s0@@cZp(a%-R
z4HRBPv8*X!2zl0Qwm@uuX84g2>Fq<^?wY(`t@g4DAiBUM4KDlLcYQdDvn^Pvu+vnO
z@q(y&zUM@s&QR)#)7Ff3mG4*7DRlB7E{MXG+!I8Qu)*g8Av+YMTH$OJc;O!?L;@`J
zJpD*3_&?NTj>VrO>1BdX5x<Ss)tJ@BghC`O8j@9w45LV7>KO*rlEdLn$K>(w((@_R
zxdybGD6uUn<MC8>UQ5Rpj{%e#2)q~SLY4?LKsx$I6T8Sn(9qo)rJNbM?@Hg6OvOJ(
ziqFXM)*f+gx$0ZjnsfeTYawCe4$VWc3*2K15vHZ%3FGMZ8JI=M9k$F^VXo*=2Q`*|
zRCW@O@S#5v1Qy4+J`?a2Y|?RaZ=JD<RlPSgM;X`k%2>v?l3jj{M{nNm;NaCe55B!B
z4hMSUBVHXcjbsaVWLE_Hh5Dc$`XfCZQ0vhd0i8JXoaVw8VG0_*2m!S^*j}Qh+V-KH
zp`7T59kAk{@xU~$%PZX|nL&V*5yFCU0Y4AnP>*c)?Nx;(rn$VlYNC0Yr{5VZh^dpO
zLW2zUu?|d>UcB)7mqBqu;9{y5sWS4*@vLdnHuB}{bxCVlfPLK607J^8=q98$WL<3O
zTF)9>$zz%vhr!l7IC%I;yw?5_1$3f^O|lAb<s1~XRMua`f!EW+(}!Yt1SajgWpgcP
zfbdRM77AUcbp2~5Qg=XuU88C6*~s%{l!2|W1O*V@=+KpihVkf;Y!Dl%%x_)eNDcef
zYkY%K7Ng9UHf7VllXZTDCL-`!S?r#lShp3K5VB4LjLIWE@(c7Boj<D79^u-sxW+0O
z4~cO^OY+BOP_ytmAwz>rlmht18D*NTk+3`-aGNmoy(TsbAWm1*W%PpfnMb)}LcDi)
z0lP$>L9s4lmHZ;WQwjYrZcM={MMIB#MN#fNUE<(hc{I8A@(<T_N{3_|@3fmzyHPF9
zF7xvIUk(HOjgYXhcSA6zUbJjhuJJD7q8duoZAtMNh+ij@M&h3te5hvhnDn@{0MDzu
zVqf?i*dFUiEA%P|?@x<P*3t$rpv(J@zw1UXR#ht`!;ee*$^X}Da!_eW2c<h_*`lqC
zcGT%V1(QKV-br^+eA)#7Q^UjNT0QN<$FV(^|DdS}*8T)J@fOqrxb>RS<8$&Ze|DWy
zsNc~%>GwS*b>s_97;HG?1Hhvvi*#MCN+f+Gr!|KfW0cyANbski6sGeQ>s$E$Oe2jt
zmVRWmP)uj$D?8jsGEpU1Yy%KsZa*==(0G<)A&jepwSn9_&A_m~(;iq-Zdy;+X)0hf
zK)xMznxp04$e_*#wN3F4Rakaf+T~!I3mHliBKaoZQ79q?O}_I*+}wJrtzsmT$IVtn
z8XVs5%Ga7D%Xz|i>1aD+{P7bm<zJq%MPk3KdK37kKg$NKetsItdG1RY*I1FtP9)o%
zPi2=8U0#KIJHA-`?T*+wBCHgYqG>#<(UU8aA+--aq$78b)`F8N1XWN19v@=?KVpPu
zPjQFj{SCO$dgFC*-~>V>plx^J0{;!QE5^aWD5o`5%819CG%uyLu@kbepbuEoG^$5g
zGV}?4GCAip-jAPnCj<Evpz^_M!kuje-rM7s``yV!h*|P}dscMfsvL46+FnHc9QC6U
zxEl|(=Sc-yZ>~1~#tz$w>Y16Idl{WacZ{zp{KbCPKlUp9MGQ&lMkWO6Aoyp3e`5Iq
zSw444K6JI=(Q6d<ZpzHCN&=7gqtT;JIT5h@Ji>#>GfXJ%qfsIIaRSua6fYN#xwnsr
z)lf4<b;AcS=(o=AE-@MR`h8+dud7fzMtQA-N{saaSthF`1d6&0D{Oj7P4e6?a5^h@
ztL&wS7aV?HDe)UDNwe%u9g<Q)8lG_Re=ivzs3(%iYtosN@pT8yDVwE^;$mE4^l^^e
z@d&E<fH!TY#0)C~x-P;alz{WEN{hW@1WBF$MXxcPMwS^p0B>!ohzo(}^R^^ppvnP?
zdSiPIrkaKuI8B6X7g6(l_3Z?hF4yPKC7EvTCuPa*$8^~Z(GD$2hep%3-ZVj@Iuc2d
zinxN5+TL}csH>%jJ`lM4Kp=x(Z$8#(tnD9@m?5mGQ!92}>{7Hp6TzgJgWdVS)LA6W
z&W9=Bz8c7#3;J&GQVCqsO3dN;x#!`8Kp-@pEbJGr+Y+rOTeA~$STJI58&~_<nqq?X
z?X!LICkE2ZN!-@p_$8bQ9NEJi%b)GE_7*L4>7xGVkPu26N#6(iFU*^Am}a*MQ_|#G
zSIzKR=X2G4cKuawb3XgHb-iN+rCbga8uOHX?C~{*gG6~xxol@qOqQCBDsxkWg5-Eq
z{V}&)T_+IzkBmu}ur8vkGH(>Wzy&`7XnLgo7E&$YgE&BQ*^}%AmK#4@0+ZRV7_aEs
zXb5^PMA4(rfPg0Hl-<eBFD}$Ed9FW*1czteD#o7q!)6Z-JvP>|xOyT{3`qn_L*x8}
z+<|JCHTV_%Z4W)-a`qA?K3q4f;9xwFFx_T`5i;<kaA`82q~tEcet<*DEq!4FIj&KC
z{QUpYy9hzj`sZ3JAS2t4@<aYrT;%><wHdciO2?DLlvA9-wVns?OJibvh`&x7zrP~U
zWUEclHgi~zC!!%{95VP~o9jui*(x+vFF;|CKA#lCUJ$oh77QnL1pP)T{^RB1FuaBs
zCh;}MoE)dh-|4M54QvQ^Dp$M`ozDi~ii+j{W?e=b;ZYI_h8a%s`^TZ><SVnHE(Wsh
zX!kIQx3<ReCA2WmgF|>01d}nCg_6}*%Uob*^8@*O9F}`1N)YK=_;VP~o;K<pc5)vn
z#Bp{=r`)2p@YTdtNR8p(qJ2=C53XIdQIOGv&t5zmTv0DY;~WdC&N3d+ioZU%P8pPk
z7e-AQdYp2-u~&mhHYmHj81_XD@(Ouoh<MqIVhei*#>sOO-_JIFo3SJ<QTA`{t))g5
zj7L#b=noaG$#bIL4UuNH#)A5Br7?`wQIq-3xTj9}jg{ihFN@K(uj%gi-}DgijRWR~
ztedK-vB8ITbtNj$g@#dC3m>nEjSrswEifb!j;}pSYw<(SMdV|ESS$fU*gk?cbJk4e
zaGe0`_JI9_wu{UugC$P&@4$H48u9X&oo4j;TJ7tnM~<S-+e)VJL+a|@bO7vYdufI0
z|DZ*e1GfU2Oh~R0*DPuCOJ`89LijHFEF0hLU7kQf0phSNx|+#*za_?w*=ej(8weHQ
zz(@gS^#O7a{g|*$y>WnmQb*E)n`?io3%3$onD7wS!qvn+9Df=9LLmd*&nl8qM_|2`
z4xVKZ>&jeeNEU)PAsWSK9vlIT9_}~LbgQ0VefwOzD7WTP>8hu0Y$J{OK;{_3Dc-8k
zez`q?2DzRAUWkAZ;Jtm~W2GfcN0r}#R_>t=2c{gkf(h36i(s?OmR{mqn)~zQxV5&)
z_IUd=Jz!Z(+S3`oK0GZP(`G9KDKTeqntr0#Fo{<N`ZQ1}m3J)`%TqR`;`<9eV@m5<
zSN1r#m>-gnV6IjR$Eo9HX$OOkLrAKAepi2)V2i7UK|Ah@YqBo%0ZvvG8=5$_<lZz_
zpqSx<q#r?PY+8;>&cRTB0mz2@Pb;*-X;y+CQcl^s@Z=13<4s`Z5yA}`XzD07Mgj*M
z6{S)1EL|wACmzZh9rS#^!^hSMCQ$(YKLEh=*H~QI<nJZ+P{4W0+lr1O#!0;#MuXD&
zfQWpZk(HygJ<>L<rl)v+8~i*W|1DgvBaUnlft?RZ?(F1xL3b<L6(j<iOiI4O{||JL
zr7uQ(6ZN8^ZcSGDwVCcI*Dnx1AJyH!+Z+B+Y-e(R5&pJ#-Gf<ZbxSVzeJ)+E85&m{
zdOXF^r3lx%(`eCcnUYx!;O70Fjv9x(C&zbUNkKFj9^F;$GIG;B<_9^FjuHQWA&1Wo
z#>7#}QA<RoQ;q)fPj9wzF(1c<_e?h+M^2e#E<AMmhE$<Z*kmA$93k9ui8JZ;CL*aj
zHg||vq8mM#JOKTk5nAgpeYw8oN4bd<3NkXbr>7q~FJ@&LD*hUi<()x5)+>9}LuL9~
zwz1V30=KqQeQ=|z+LQ~2wM&qB8i#Jal?wrvu?5)zyT<(txl44*>CO}zr3K`v)5WlL
zY(v9zL4B&fPUF*EhjpJk2fY#mL|Z7c%uA$FYh3*;pOKz|%@GpKwd7q!lPJV}f2ofd
zPj=@T8ck<k!R0V3fX$WIo;_r*jK}(b<GTCwEb+m&i8Qf-Cb_ujWWMB_%(r4sp&W<a
z!}`CbZM#LUI1`APu}h3+GkXE|<@@t*6E~ydF=GdK?!f6a8{N1T{Z6_>$|12V#$8My
z@NmdRS>yGkvs*+>0vYT_ps<--_ZG#oP0rw6XzE{nYywh2qzshBJBnqvD3n7+r;IaQ
z2;y_Lq!|s<OL(4{lkTNEpx&JhbioWU$<;X>P=bqls*G58to|2mJzK^!0t9ila-(oe
zgn~>(_x)fY*w0B2IK{Ly+yI{WbPGoYo=kEE2g;V%e45*QKW+3+2Km+0)GekQN8}mi
z1{KA=eG&T(m;ncxkIJ~l)))Nk1X3EJ;V;kQRR?{P0>LMjC$>NhJKxBZ_YR;AH(XL_
zlu;-}#tIBQI|HziryM=LtSDJP^)B6eEL?%OfB0aJmL*ozh(oWMEJhK>gc2d16(E$w
z7^CxzTr`3Te4Qp@#udegK@$`QV?tFm&-yzCTc3NQ)~MALy9z24$%Upv>wrdSUtc4q
zXKiqX%d@?ry`>NLc^1o+QiGruGtzx?3Zz?IQ4wI`XWoiF6yEA(P!XGB7|Yy$Mp2yB
zE<N~OkMv4j%~>&E^~$zKFhur~QY}zw2$K`izkFU6AL7fTtZ&^p>Tz1>>@+;C(52i+
ztZ{&{gF&5;;N?nXFmM9+9!2Q4hqZYTc1MT)0+?@JcyVyYArM&@eP2@ub&GCzl*t+H
zfKK&DpEd*DbqN551usz<%p|KK(inslj;+YxrD{Xrjt}W6GV%C6s8k93lewA#3zyB1
z@b1fcYW&+YrEF6%ri}smA+$WhhaSOiZQQ2(yI;9oNsOJ;KK^pBwLvS_knAz3SP%RP
zpGG$IFQF8~=iOuXUU3^<j&ZUnSQlT3W?cvwJGneVhL}`MHHUbDPp9TFRUQ;dV?a*Z
zyMQJK9RgJr4_v}w$6`~0WGUFVy=-$8p%v(YL3IZ+U~?Yhw1<(qlLmRmgQ@acC)Euz
zp7KT;KcanWFixDBmWmV^GoQTVR$>0&LtZYa7$PBTrIacZv@5SMKl|~7rFpUsdh@AJ
zVE3~xqth6Scm)wAkkrFbe+}{u?<?@MF`UTWbbnS_SSVmOp}efq3l^YPdi?XKMJ0V|
zL`PIEj_@|uNw~{wAQ#Q!iG|JFKQ8qic>fS%EFQr;odE}rLJTa|B*G#5zYP!NER89L
zFYdXp3Zy!Zs3@_`X%a%9oOsFS+#(Q4OGK7eXE81O_dhl!zL8B7@F#S!68c_UuybUm
z6=jXJWO<HLXLjOHy#a3i!OaGEwc^VK!2yOC%a>oY@J~9!8m|b%C`P8PGAJa{KoFZn
zx%Jpt1W)UX6u4J_DRk};fzTNNy;X_e^x05{zIiYQST5K%$2j_D<3OQ;-2-MCC^2e1
zFsBA{w7RaTPvMIej9;1Ep7=x58N~mZW+=w7l<#uF+m$fV4iAxs=z?y2Z8^EwuTJ2(
zxbe(1u{bcnF+o-cXsKz}H^rZxl4|drnEq}^)la!?W&pY;gd5^5Uvd}FV3l@lemPKZ
zrDyYC9CSFtii7q)y8zStl8-Kj)-y|r7PcM&I_GN}(1LHXa9Yurj|FzJrL#G`+=t!w
zCe~mAYXBu%oZ?x+_^(dx*jJP<&W85tlm*Dg{T_`|Z(n=#UX*bTXnfe~ATE}$1c}ZA
zV=y)V3+p^0@R@^MD{w{s{xys4f;b>+UEA<f!t5@2&F|ho_kL~WdQT;wLCrOkj5g2P
zQgZfD_?TBi5%R^FE(Stz+?7Zv_*l19cC4_+m&_av;&Nb<_yEI#BoIO#$dHBDb|IM7
zh=hk2h^xf+#~&BDC9%qWVwCJQ95r~I*LI25bjYUOFJ)2*tqu#D=ZR*YdT0L(b^!>}
zy9?&U_)*Oz3=@+_$}`^q7(^%bh_lF#SV0FOp*Ah*^GD@&C%0tU@-)m%Kt`c;#I4lM
zgk$Dm0GQP4^AEtGY@;Tvw7k4$TBd%qQca}5D>T;Qif|+0Dm)m`uHAN(5?w6eL!%D;
zofs<%aP+A<f$V?7oO1H$H`0(4BloWwF77#8QuvX8!^Z-k22!L#b;TM<%Y92CCeSm%
zbjTn5&3cHB)wp-Y(A~uE#iVS_gxGId*mn&dYM{qTrR+ECxSCy+%2FTiXXd)|0u3ku
zK}=dLIcgXsS*6{hEwS}8LgAdz3aqJ*CSSo5waDea0Q;4wiu_g*zvjSHuXz7^%TSHf
zS|l1Gy&N4{u``+Sx9AK!5O7|HQh`38HV2Hi1b-|y$VDzjPnO!Y^uIe3t5y@*>lK0+
zS+AN@<XA$MBhpHK;otX{=b4uM&mV;pz^UEkM0LSiN6Y=Ub6JZn9rXj_n{ai#FO&^L
zw543llTXIz7rH@h$1;-8{K2xcx1q?ta4fRQKsK4L@rZBA0z@dDaIx^k{{2cF!(R$8
zkV{rG<|3qV`>QoAJ!d1_?sn%oO6YJeJbTil*U(rI!w#bRd)hrrug$0^#}qeqZGfFl
z?P3QN&F_1>uVH2Bn;z|{lHAwuuzdsz5(OB^hf6^B!u`jSeFQ@=R3ro?v2U=sTI+G1
z2i;8#vpy;*)$phqGj!%1inxFWcEt4}7h!dW3a#*2erO-VA&AB;HkO&)QDR1imSZ_i
zfPxG^W$GkP7pN1>NQ{kY37Bh3Va1#_WLgiR)<WpL`8VSL7VLt`S^!K_U()6g)m0eS
zoE>lUVGAb^6Bd3-<w>fAdYyhS`mJQxyFnT+j5G~9QDJn`?)+q~7}<r#6hqK%B9rd!
zGnjju?eS@_0g{mEp54cDESWul(-YqjiBC#xRqx1V-SdF!7H;0&+Y7ceY4%<dzL}_<
z`6f<?%lPV-LMO_8hFa?3(l28)v`hZ;Q_3}>XARv=f>GMc>OjR}PmnSDyO=Ni7^@oP
zcjK%3)Js>GkYPjCL(MuYX-5XB=sD9$AkFh(HsX*6)knIcq9PamqB~$8i@{6)M%<?L
zDi*8L2=N;mN_gp{IS6Hs05ejr(deH_IPOb3{(~jrkjBVGRxixHO|cGbZK|W-y7G(S
z6VP=V5vu$)X!b?SIJi#^x1La>ZxgKW;JQsS17pn5xl?z2hGhH;(2#=7huN~XrjxD*
z#r!rxU+gj`b<e|c3<9y;XTH@S<RlcpzU*0!d*G70qjnI4<e?FtW!FkEi`{haPeG(e
zBV1G2KT)n>57h<iE3JEww3#YcHhn1e<aM$N)V#Jbq9dGuB<bY-1sr}$KGTI?{9%X@
z;BR5=lj*G#kHP{)(QGt!WVaVUrB^_D`sFa$-HnQB?T0<!TTG>2t$ga7{tII#;J)z0
zw4)=0#Dlm=U@?=_y8K<vMAX;|K)H{UwJU~Z5#++aj8hg(35`E$TR;A?D_&Ukd<hjs
zLu>pb?7SSoe)l5hb-J`~d$xZ<ISV{GSF7#u>koDgMRQ4b_HgD|yiZ#jtpIMBUIs{1
zOm?!e7esTUbT@f>vH$D-0u=nW9ET(r8MInd$wUUXU)`ph@5}G}97jVscZmdjPPjCC
zdJGGq02L0G36Pn5{b}GvdVY&6LeOyc#;P;|ucL*3avvz85UV{2W7ZFnw2@^h-g1wF
z*NrIwV}DU+e!Zkjlph>6Vqpj!_q2hWWqiOqFZ|AJBytHx48`C#$7G;!`?G^FSR$iO
zmkW}+o2}Fj`B;JJuz#o&yCV<D!Lc3(%9~aR0<on<6dpwRwLD>DeqD`?@JTMYA}PuV
zkG$2|+b5r|vwGJy8f&%p!^xMBZ$ve~q2UO9i4ZV7AK2^EeA}23p3r)cM1uKL0R}gE
zeGOCj%T4;tcI?y}1;5n-;1igK{~o!R-e3Z@x96CjE%Qdx=9rM4N-K45n1GRvsL=n+
zER%R{=Ax-H+Ux2PhoKXW$?L-Zt>WHn#qtl&#-jwSQ6iC?<fD?m{GCuoL0vZNlStlc
zbxs+mE!ha>7eb#@bMA_iB2A1X5peuHwx$>?HZIFe8yOle^-UQ5KP8M8g%hvhJm>bH
z0VJG<V_o;Ojd|X19&4_NQ7@tC4JV-5XDFg{b@5BpDTO-XL*2&59`~uS#!Bk7<a0BD
zHtQIh$f<S0sUwWf88yMcY!**7-iEgeolG#Z^%$5>Nvl0rku(X`|LXNL2JpR7iDay=
z1GmmC3dTbN@cYS)$4aq8<(6T5eHdR%{CZ30tmywRUu!Z?rol|sujXyXl`B}NtoUy}
z#N9^szOa?l`TU<W^tpj4Sz<*SkiyjV8`wyb$Y&|_-Sn24C=><qQbrlWYk-cj)9wAh
zfe@xJrdxkG#&{2;Y!UJlIr6E4^O51M^7Yfi+rifv8eZ93?|u*<j<j62z=IXdxm50}
zX}PmDd%^j~@((IoM#hDxwF`|bJCb2TSfVWZzj=6q^CRWAk-;_p!LAA?kv)n7%i7CZ
z52Rg~b44BvLz~8k%l3TT1?_AASMgPgux)`06s@kPHC_0dwp$s*_k)4y54T4w=X|vl
z9AuDQ&O%%@CGPOos6T-uyp=~Y1M64+kbfsFI2117;4_6xU%VDdrQy_FDSvzEG-me{
zl^C&zZGK`r0&~^AE>*pGyotK}6h-VFLW6g?mTbh2<V>+s<6d2^&NEy#znU&!%rpuV
z7nNjIf7WxDiWPP7XpZwfZ>$%LsH_^FM3-fVYEk*>a$lo?|Aj(xFw*0@df_QKX<Ttz
zOZhcL%(blp{vg-Lil*MxSc6~+Pmb*Yu{25G{*U7bd2>d^vD0?X5x89ystc9>vbiEn
zERkNv!*0#p8f<ep9AbS~vzb{gqc1x}dL>E+W;wDaQc98W&>Zu#!Q+FDF$`hoBC9(3
z4eDbxC#Zp7K+MCq043lZhnWEO&3?Nb{ao7(T>^Kt3%G4D2;SbmFa%kMGuAU&6by;J
z3L%ndU%EQq2~!n}ulaK*V11bpV+blZy*q(=);CA@0bMcuVLra;Z<~!p{ajcX5@Z7F
z))s3(J6T_!Sy8zPCGR0eK%Ao8h7*gIHEAjC$;=W5o<u1`W=-)#b^Q;a5@TRphl*6w
z_Uw=V7ErlcATChW%6(AS@B%%;;$~Zue)Gq;V0Sb~iY9S~yri>w#w|rDBhsI}9&(V$
z%?x?`KF^Tu*9e;D!1m=rsMw?cYZ}QCF^P0h`e@p>lV$FyAq)+E9kA#LQYi;2V!vs1
zulDces`OqPJ?l0h6Qb3Quyg}9s9H3dT=Y2FVuO~j*z?UAAI0J6yvU4^sdz0Ei>Yo`
zI$o;jBBME68WTQ1`bd<pllt2xgZ^Ah{-=U$%OLb!<I|sa+H!3zj!)f&z>u;fNL`wC
zQw~{g55kA+*C78#zzxj+^E68x6aXZrXru4aFijqf+b&(1c}Kp7mwlw-E!cH=)8JVS
z_2dV>IS&~xsEjL@{8jvCen!35VK~fs7fA(G+cDajSIAx`K*8;=K8_IiQxD(!QY;lz
zpnm5=Kzd7EV*R9Je;~*_9^)Nsl-Htfo!urW`dK7KIqzkK`9tj!SZfZPfAV3jC_VzG
z;25)Ye|h7BG);HFX7T<)7VKSh@ZsmWtOIMyo;;)0K^+{GluZaAx3D6Y5Y|tYBKz2M
z)%a@c`0C8I9R{|h1SR~eL?`oE$G*;OaGO8eNFiIbI=mWj!}NM-0;vc*e+B7!tAVc?
zAB5ZAfeOnr4MwHv!_W#RvE>US3Z2`0nEPgyt4RBD`(^0-A_GV%WLY@5HvNLP_u3oo
z=uo~-Qgev5QPgEjrmk~Lrs{72mu$tGxOaS4cCX;rzs{Z$9t<Lhqe-vOKJ~)5`Zr^a
z<2Z8d+kvTuxW^!g2T#O2%XUxIe9+^~<l7hQncV?9Y~v(SX$9**B-OgVVrvsjKV=m^
z7!RBvx+umH<R_Zxi@YoVyr^WPn`NO>5cmIWBntUXfxh!?#|)ta`zqAA3&q#aRpi*c
zz)FQAw=$YW5V#z97Lu8WmvSx;9TPq|kT4`qv2#q-h1?#$87^=!kDOWh^+oK-jo3in
z^GyvIi1l$z7Myv}%5Rcrk55<SqCgLp1fB@APGtWh%6OBfWb)H!)pj9awmq%%TiKhi
zU-BB^*i^sHLRG>V{lpmK4Rd3R9y-O2<>M;;5e0(CMQ}QDGK0hab`>%N*#7e)`gpF4
z9+B2X!({J1i&{y3mf3ajr`vUm61#qM+MZ+I!7y;59hyyNBh>@!Kyv2qMT@iDBzMlm
z_cqL2F-n<=?{5Y147~28-q!M0wp8Gy@>HyTxYR|Vh4W2OAQy&hrr?fz3g_75vC~~h
z`;kzwt=Hxs9-}s1l29`9&I^-P46eZ(s#LHE%Rn=NQ+2w&P*&m7FFx6y@&8zlnt7?B
zp*{LJr9!Y_J;?bQ;S&d1kvKyw@oM|o=lM?xx+S8!pVk69qWsAn5hWDd{F^~eOwxrS
zENX1bFgGC!3%$~Q|GAts+3YUoPTWiO50jq#i(u85Wso%|sb>IakAE(duu%Kc@u4f6
zm2EioEl6~wF#uqGp?(X+E+l#%cy$QXOV9nKT4u;*^0Pm&s>Gh(KA!s;ekEIOm^3nm
zj&N;|G3@l_c{VjrS<e8{1ZWk3>Rg%%<`&l&5sy1cs$ZO$-_uyC>-XFQ1*I;eQ+LAz
zfc0-}Y?)CZ@;wC*x8sbES|VsZYl~L4i^Qvjlx-r}9h{-7d7s`E>oyrrkkikCs*PC*
zIdyzb!q%%XSg3X{f4?seij;E3p~onG@7L8cE0Zl>ut0tRQ&o;-h%@UQq_rIjBGRPH
z5UiVAv8aIc>p0Bmi_p!Ah?{Kj*{ozb1utT}G*=`c7?U3{iN5^t+q;#Q{#+j6Ubc6M
z92tB^AHR*Ev^pSIJU7d$C}B)QrK1_qyIp{SE%YaCTz(I;9gs&89!0O#$nGgW5IJ`h
z+DJbmyGXb%224~1#<DS(r$7C}WkmMwD7AKc-302`0rwY#9|q&$p;Bw|#36DnOYqTx
z_##<9_{qyCQ7fYV!}Vvq2XT`yfhgPSq@G6NdEm5=dk{@V+{mNDR^o?$Zbv>agv+pJ
z*t&$kPNyh$jXJWjyiZH&L`tZ#IBM8<aWl2Gh(hTtpV4fMPC$-RUXjk?)Q@ERrT+9n
zUs8QoBx!?3&f17u&X}KfzKi`>pX1>VkXBKCL?G;;|J%Fb^j}X{P-x~@7wtNqASh6z
zjP%l#=LX6qr&q>vwTyXf%8Ntk+oFLIDkX8RD~)IrnIk3I)x*-n??+fat}WmPU%mRy
ztH>PAbP=LpxVqMwo22b($^mfyf4fAgKtbLaXtev_F-01?u14HXVb&kiv+Ja-=<s4h
z=yR3eW_OYgt*DG=)Dm(V^oHhjl0`T?(!nUTXBx=m{a$BPTwd_g7Wa$rk&G-@WwXlD
z_*oq?Fv8_ZLWzWi>^oj83mjDW&fGL1PgF?ob&N<N*sZ7v)oP!-&K+?ATgZs|&^U%7
z<}C8fAPZe&pnNWYEKE=U9xeh0kZK42rdG*UpvvL!JWLaxk6@<f;l*8$Z|A$yqZ9)i
zuFDAsAM_2KfNcb>PYFvw`@EmVgczEAvB!@4l_Omp<;R17%&N4reBVDYY*ilfI#iR5
zUdrsAoNUzE+rU59O5>_b?IT9U3eTYH?v}+{)cCyX<1rIzK6_N_8<8ewKI9FbVV!J{
z->UE}eo1rmq4&)Y%rpq8OYo>*NdDq6bkCvyOFWW4vOl=jA3s2(VmJw%LU=8(4mQDx
zWqraqn(gYD1wQ84<!v!Lr!;NN9*jW;-u08e6u<#_j=dPrHy)TjWb&#cB86_y27HxE
zSUFuSg=zB-{O32G8@IA)YhYzhzW4BFSxW&*5pg9f^VXTA!?f$I9u)}I9u?Ed18h#X
z;#skPC!W}9j{pQR@D#AENV^5teAEN++`IlO9M}fo_<Bg7H>r)@F}3^#z7AL}4{fa1
z0yxyBucono79Rm_kevl!kv-s9#yNN;9P$M;MSkR`U?jnR`g#y}pWSOrJ>Z*t(>7<f
zj4oAddn=PowtgiO(vx&rhC?eu&%GO$%L-(lpM+u_Ur)`y?oE2rw*o2Kk;O$IU3%5{
zVEeAke)$i{xMP=#yt@g5Qm>aTT-{b1Kb2u!9Gr*WsjVfu4$eop`c)Oc36z|6KRWCc
zB|slmRH^@1;!1n!(F3PCnJN*Xt?kWyd`)nKUWL24cqWz~EXTkzJzrM}#o(W3+d#LY
zbPt^s@q;Nl{Iqkr;IJ}gHIaBczf0+__u6YYXxs9O+x5ZphQCzpV>E=H@2bEC%TI4!
zm<{vh?L)?!uzwazps%i%od*|;r7@tE!R@lXV4=jJ`E;g?x{W5bj1jFK-)Z+b^t->C
zPm=Y>{<_S&hh7@fuXx+X{mHWht!KKVT+u>bbx%;vWZAF_y?w@Ah?SD?&{m`FEwU@U
z^td3^8AG@nfVaQIAL&G@kMwqGh;{XE#I1X?(Q{Yo6wmO!yI1snYB!#KxnY>oKXLCA
z-tU?Ju0^J@fkYu7P>U@$VAprQr}xm8r1AHN1t(^a9=!|uHna7pPVN8sl26^svY_iL
z)W=*1F#sU4SJI@@rSyIHt$g}>l2Bi4c>h1EgB<{{tjf#8INkIU{=01ot(zuJfrMUg
zyl4<$U$i)=>pDFec79qtzG#ZA&0$S(?&-vrQsXGgAQ@>`rRlqed;zD>&T}@vbg^1z
z*P6P@B4n8B8}e4dK^01{6`;D5*Ae5>^5<z(2V^e~61clAA6p@t;N(u%LMB^o<G}ji
zWgQU!p69J3f0i}!6fQG%PrszSkXM^%Y2|Z5`$&gIqbwTT2|bHqg?nmo^6={+!`7@+
zXN+eT9BB5rGsY$Kt}DE*8{90=uo~(`(QS1R+*7Y7PBRd8U*yio?^A?gZq$A7`7(hd
zRNrNCXYbTlV_r7+n2j|Yys;={XAGrXg}oij!l;Tze5B*J^sNE8T!fc+G8dSe`q0LP
zRhb+CPzG*EVd=WtS-g8*2ohCnhLsB?($%5AE&N6*2+buL|5hCMTcMXoc-l~{@O>=)
zh?~%M0RC^t*JY%)76%PZ)Tf2_@e4_4^J`DFUThZ?8YkRwmIV;u)X<)T@!}`Nf{41A
zD3A&XdKj$)QFTEf2spRWj!}c<kAH0)*oabktR>iLM}b|adz|qVeNP?OFwBaH8xP1B
z8{Qq(K*G_5R}LN1@t@=}o?XyZ4TkVkU|IZg>I2hodV*KTOlHRX<}~nqHEr$LdAa!V
z)&2!8d^z`*d-=F<(#Lu|nDJgDldujEcU3?cm|_+h)-;=+FFz*O3Ag7@PGQTZM<bby
zT&BH<Gx3Zifsho(9e(yJ<&@ckL7LR~2)vej4QUs&NP&uH;e|CXdvC0_$sBQ@26mN9
z`Cs6e<DW5SFM6r$>@}9T@|hFHg5ngis;hI5Ab2<&e4dH!ejKM;=xVK?_TQv{u7BlT
z;ggvJ#{#JrH8xLV5L<(QTX3li>zv-}1$o;vICRr;lWq8hAFy1(z{uray}Pqtc2^f$
zJ)*p)nna|^=!p*z4!|NbM%*xO@AeO?9?!n`Gu8OWtRIi*4q8S2a$)YHB1;~f_j8z1
ze<4Os&_x-e_kVKTkZ|okK@3ep8wtH1?X`{gu9nC-y+Q6#pW8_#aXF(VA&*kYMF(H7
zy$mK9w3_KYDKBlN>#!sg+*8!f+^<KNj_)Z0k?IUf&+Dkm=Afu&L@Ru13EY*)?qeGn
z(IRmJ#VU>Ivy>;-HoE_g{uMMrO*_I8iksX$7I*m0FjkmAf!p?R|C3UH516xapBhjY
zQ3Ji^iDQO>rCOTkB>X$92E-s#A1!ahMF-e+5$O)<sq;A!GiyE6Bjy^A>%?FsR+};#
zE!V>eAJaJVOI0BgMUK0GuDL4P8~QM6!-EpnHTyiT!jm!f3D#*qNVda9CBRS$V`IvD
zY0-qiL!fK1Uhr6CWkYhTZaL}~l-tL6!2;jZOFES8$%dk%Lb}huMDSo6YCQfccNFrA
zIE=}?)N{}ftx>z<Kijh1B`V<~FP<h?48seQ$&j-_^}|G{lf4Wf%*q-hl?mMuwv*Nz
zRa3@>2KZjj-OW?V%j_d*z<-S5aQ8(08%svz-3SnJ3`VzbFP!ION)PeA2U^h}l*Mr7
zN^k@?juT^cJ;Do2_i5w=Yje;x2Gdl)P;+wkV^c4otF+nM=Bh6VUbM7eD$<5+vbd<z
z1kj7Eadb1ovKMz1Ip2d}(cwGA-Afh_`(2jzJAoeAmH1V5Sb$XK4G6q|?~?ktmAW#5
zf<f{QX8|T15j{l^a+HWeuUr#(`735OxA7wDIOA%+p<0DfE#c!SCQJO8>-MO0xU<bK
zc=I>d(&0AVTpp_xyMFsKdbIAo16$!|92Ggo(Se*Bg;Q@`i41g=uVtjed-^dbOEY<M
z*VN85#10IU3R-{RBAId7;Z(sDJgI;48<7_qA&s%A^E^0Fy=>}TbH~;=S`tfjR#iyS
z53==Cdg#ACyUW^+xNIGA0<Cre1UvwS$EkvV**_UO;al3bbQgxf+w?ZP){={Es6Z~1
z%HMerLTv*B>iPYR`g903oU=RWiA^=L$hNFzb6wQAo~UhORj6yD1=g$zg)oM8J0AU>
zWe7m>FLj8uC2i!oQLY=Beq%D2_CMKzA+<`pDwaGtRZp@fc;elgptL3W!%j;icFab5
z7shn2e&_j$Rg$oqS^3&aq=28z)qQ&%4HitRR$=005s2D?V(7o33WWIS{3GSQn@gu@
zKbGM1M(aT$N_Baj!l7950Fpr$T;TQ|QT$!15;zBZ0^}&Gd$r=l$^Ih9q9}o$$p|Zj
zl7qoHZoE(kTeW6Vk3th9z73e})Tb8mb7z&A0t@r%B=rEkpFs2=W$$8;HP)@dJLKEv
z!4oqC#QM|ofGWB@|8^o1!0;n0*07DUKze{+`;c~p==hjQ{<(_YX2RLCSkB?i)*T<(
zH@(>o<9d(maHssQPrb}B4^CARI!?vTM4vQqP46w)MKS_PZDSgLP(@Ix6|2kl+*Uq5
z=P&+oUT>@5p`i2uIfvIE>pLFUOgRcLoGWlOM*F*1>mOdmO<brRN%OT<+yyY*?Gj6V
z|AX)btJAA3Bi^Vyke1Tpn2>+lUSpJaAt5U58rH_86e?ouuse&Et+!e8c+aKdL}=BK
zIbc#LVjM~o|I7K=erR~Iy4&f4B`=sT-oLp%-Ww<)H(;`Rtti}Qw*RLX5H-hR>iQRQ
zX%`v-{MI+()i(G-9~$G`zh#mE$&UAk_w5fZWi*(ya+G@EIvwts#R0@pjoqE-)!7!;
zz&4hMKzw|j2nrAMUWfXdz9FzghdWN9A5CwL3h}9OiLW_2F}ytAKfh!yt=}g8+U5u+
zxytYb;Y=qoXhd0WpXvt3t2z9KpJH~hnEXHj^I9Q!I8BI!mXjtv^cejY9siborXB5*
zv@%6qP>7Ast01VFL5EF7uJ^Axrcxp7YdOn26M*E#<Q*!P!vNneX1@iGP99PHtDL*y
zG#HSnp{(1UqwiAAv=$0(w0vT5#Tl|BobFu`^7v&n<gt)JX~P(<PqaCFL2Js+c3eSS
z(soQ#XhgY?r}&ojq}*2a0>0?kidiv7_aEolIw);z)0r@g$d>Gt$y`bQrFMhWwkcwR
zme;@OrffC71f$%ANWcnTM!L7>t4A{z09*9mqY&4_CAILrQT@|5rkI1<DJ~~NHA2;(
ziTlE+UWFqY%fc|IqORxy-QA~1yP%=CNNYP}FW0-N2!SP<TwDxHtN@oZ6{(1xG4GHi
z)a%I6%$6C^!6;LS#OqYUXy4653V5miGAiglp553el5hGbg#%Hd?zXo3?w0>|)`=_H
zE~~c_d@rhh`#zwJ)l2?wX~=c=`44}y+HrZ|NFCO63pZl6J%+VDVMVf5DTAbce-HAV
z*#9$T3dy6rn&*F#&b1s8;9lHIO-?roU>Jzp{OH^$(yz98uRQ6CZ47U`s)-l?sQ~z?
zz0KXBs{Dt1P@F03!wl#b@lS%ziCiBCX+pwBnxTd^KRYHZ#mQI&w9zjG9?KmfyXz=@
ziNE|{`qFeDzcn@rA*5Z;Uvsb7>-AI9EU(y_yoj=I!3fpJ`?x^ribZvfaOz}nI^>pH
z**=9D#`n17O1{(pWKej(l!vuZYLboQWg*0$!+em55Tr?W6AWwj-)7!D*bkt0G+7~&
zX@fhFI%Zo(P~hV1<415>(^nZp9kB=aPKnk!Uc#ZiLG4GoXbfTv0`%J*a$Yi>J!fv*
zO|5Rrjl{2eV0lXb`=1;t9fNesTtAS_{$sp5{WLISJOcG$7BASK|ND^QNlhi@WRbWc
zWVqS^N_-z>hz%K85z!FKG5iwtE^YT!lTA)<k^My|74T{Pcn_~#UR$RXV~@ggTf8PV
zqQ=#N3Z>TlJD?<xm0_3Z-`dh@CwtGCicve&ritrKd95}n`YJ4u)6N0NoS0p==hBYR
z<9SV%$L7h7OUyAEqqX5!iGr4e?$?=q&eG->ey||h3muAZRX1H_#2PN@=jCv@3>d;Q
ztFYw-<GDJY7Fc|#rA8zfF6qTh>zM9S1kg%Lvl>8u%o1D-E#YC7?JBX0J9|#e`HSP-
z`3db)dBv__4s8RvUCsKmivJcz)BUQ0EECb_vR^eXoC3Xx4~2|;3+VD>VSNYTg(Qo`
zXVlvC2ZE@GImRnQX5EOB;^9y|4UvH|^IgYi;Wg7L$oxBhpCC>V<%W2x#w(JQT}mRb
zP*dFk_J6{1H~IUv7&_&bCipm>7^7_q7I+6>0T|cGP`z9RJ^nQBkYRa55?(6@Y9GyV
zt$pgTx^KJd5SMq(0hq10!4Ndoci2dojo72xP8wB_^d`$cD#P@9syoFC6_KtdN|Rvf
z$ERt@^p>3Di-EA+_y!cUNUSCp?|)3L&fzy*I^bVbj*5&unNC|qV%}$=s_~vUOj%YO
z9M`T>r(<hmJi)_6EA3IDn(3L2jFL4@iv!f&PnAv>JoHx=gz6VbXL&+~6wHPWt0+74
zkD6%Mlzek`-4vb-xdj=m%6M#SYOy*d%K_Wc%V`4U;yAnF(0UU{li$^zk`vh=8U^N2
z^}{$Ff0~$twA?&$K0xc1!Q*+UceYLiNrt-7K^k%lX8%LHnkGi9>R7wI6_g{Xd&p!C
zIYAI%<T&=YrD$rvX9^z2nxOjg!{MN0+b8Pm8EEQNEuVY=@5|vvCb-~r3H9XOI*GjA
zV=CWS@>dJ%uv7xI@$P*ypBF^<d?@?M=EF`RE3K2NOB4q4hrSh&7<@jVBA!{s|E;6T
zPzax*vDw)Dam?GXfYOyP@`Z*u;`}Y$?q%o8zFP%L<tDK^h%Av8Lf8BL9XZQCXTa<l
z?eQ)4p3lQK1cn`aWE!tn1Z01Ms=m(b>6DWK8az9pvjh2<T0r)p(SM}g{ptxv-zZWa
zNf~fU!BLT}`khz|gvC0uP{(!rW;SnmQD^J}+=nPGw23DdUM?2Sm9D#wn>Z^Ux140K
zP64Yt!#ZYB3oP%`2a{n%vVNyxeu|1ZE<DxbUf(W!#Y01|w@w*guB6}D_+5Ol`=Ope
zySoVtNYj#uuo$T|zc>u*WI+rUhA>V5*91D_&g4E#7eiKV<wV{{1i%XkO(Q|MIvh4|
zdjr0h*~QwoY>vxFS9I%R)43DxTmOzF5?k3CW#->@z5>q5cV)?bV_f$BYb=}>OAW&C
zBviFiC`3v{9xf%T;^`|`+B#Kh`MJY9!mVd@*lCSopB|LWVfl6N0PfIvi*x(|F2HpU
z#PIJ&(R2uOVU$Gi<b;IuvMrhC=2eWl;B{U6V(8KBM=4iY%0+a`nXjzG-tN&c*DkvK
zr0uIM^hJSp4FqEaXnMR0x@#nNQz#r8leWN3L8^11HLhR{<eaGvCghl0&Cdpoy~9oJ
z)hOEIWql&BuvZVuL)|P*Cq;|y#;fZN1I8Tq?9+=TyNX>)msBa~c3iZ_Z6zu!!D$yY
zwAeAzchAEhCi_V)hCmz9;={9jK1>nvV+!Pq+c{D@od>*&Q)mUck&*uj+zA6Vpe?=l
zw<dy#{^`<QU*0K>Htj<6n!f_py?j`)wtuzQq1@OU0X}-z&^dJ3R_vk&WBE-N8cD$T
zu9X-9T?SX1ELwgyg#LM##ufI8t8>&Pu{v8gYF^L9Ymign4rPFb72GBet;VwzZZb>$
z-%^QyiNZfkJX8{yNF+6zel?&rfm(?o;TJi~`V^DLQ3?<a<<!;lidX9tWL|F9nKRtU
z+U==`LLGbFTb6tuoSCgo2{R0ODkT2>0q|{qo+eTjx4Wxa8ByK<R0Hs$&JoT&Q?_=T
zS?7$(7DR*|r!qF>CruC}F%@*_0mxKDLMvGXR1$_9fE@<OzT!==a{^0=82yask+G27
zO)W1VJ<rFECegIq_sg3V<5b5+$~$h!QWtFWZB!ds>i#>usLYo9q&t&{HN88fH72N1
zYu>K@fRG5N*O=>7I0#Bt7<soDvVMH5<#mtl6;C8l9FHy~(N_vOkrwhQ4iKr$AI0Q_
zjI?_|%B~J73}?oIGb*1w8#lTdTC8w_O#0}V9_41bPz_BFLBCumWDG5dw9mlSe0r%t
z_mpF*v!<Sdbk)7PihSJnZ+Lu><+Lt_H5n<UeSbSmfTnw((;b!(FgLwz;<JSj^ZP&4
zR{dBigT_9Fz=T)rT1zyTI>rRzMs>>ORckI${jY8l>h_=kl3KA}R2BOv;dF<{Ps{pL
z7?e1}d;9qgVTy;C%7cGua#6FJTc@viXR?a(c8!x*-$403CIgdos%(~1Brm1dm@sbs
z{`XcoF3u6{Wr0+eV-obLnlP<-48B>2J$x{;M}b<M-Lfdqu+>jvdwUD7JYOXwB3g&F
zB_KpQ_cg$mh>waLt$iZo%|kwj4-XLCf*XKFwan&JLOCVD!rra@wn4KEbm7VJZSQs&
z5}Z_c{u>1(+N1dHb@fHo8QMXdY+$T)Q*gV4wk99s8Gfh*c`S$az;7y*L7Nmnuf43C
z9%s2g$FUk}<#sN2y3u0V^}a?GN>;xb0k9>Tb3n$4mBw}FOr`Ij6J4_Pr50I-z_Qw?
z|9N%eN%qR9fmwvE{RS&*hwQmy%B)X&*F!Q113TtX9$jbXzT6zb4Y^`A#OgkFkkmBr
z)K~}1w~v-IAVlr?s+2-30q$8c2O;9u6WHS;C*{C`aaIg_WJA%(+`9fvufSw9lB7cD
z%ncb<W}A~ANrW|t7zq|&&b%NEk={oqh0=(>)>AJG4~>5an4vJICt(~H)Py{FKB;$O
zS6OfmNJ`HwLBS#uQfr7pT{?M?j1Bc&<O!eSujtsap*8<}t7=^#MDOMGOOPo|p*}Fr
zc44f=sr5jF#=}QD#$RiJAZ7xrp3*qlW`Z{QiGiVFa5|Y{Mq=a|4-#+N<<Zru+z6sC
zB5&+n-lS{f<=EkA3UGZ$igwc(&bMQh$TjoIBNle&(~$cGqdIl8Qt3a0QMIR*nmCmv
zHd0?5(XeOkRU|<f`7Id=x0#5A5@d=?9;0sW_Wwf_us<%qq_-~2A}fILN%US>W+%x-
zfhRIOlR7A!rzd~9_oB?(0gP{BA!f88nnh#~pc+`=ks)J`*qb}xNuD{Jag1E^DXo2l
zX7|cA<5_+&9C@g6_$x`;-fLS1D9&Lyx$A$My)jA{;k(rtEfRk4LzZ}@B->5D&wu*J
zFc)zov@6kN1$<8nwtp$R`_74qa<ohCg$Jd$?n=vxZZ$bw?!ke*6)0i|{9EQiObW57
z&i%%cc`ClTm3~8t$DEWUSfp;wGyC;5XDZ1a!9E~AOyrU=oqFU%Sfgu=P>O5X^mcac
z=55V?AuxeMbm5LAX`uFmS3yh4yPim19zT3jycxZwuvZj3b9#-=!Cm;+rMs5Nx37yd
zAVNvx&Z%LO{rZT#WrN~!!9d9ttg>6(Emn?bhq%`?J3wU?!m+|PSGu>Y{nDqbM+>0{
zcAqyQN`5_DIww>i_+>j=_DU+WxVXP;Y~>&*mu5yDgMx(cA?GlTV1uhDEmFE&?j9#e
zEC=P1XpL&A&5&_D9=go`i^DYM;66`C7RkfKo|H_Vx%P`L@$WU-fJH~wE4)v!!C=S;
z249E7HC(`JsD|nE>r*c7ta;p;Uk%-0Hg%*`$B1hN{!LfUn)tS^4?@7cqpGbnjqMj4
z7O7jylj<HHomiUle;gl@a#WkG@Y}_yfMwPjJjf^wY83Pcxz7)J@sWR_jNl{W1LqVQ
z-U`n<zUj!szP|5}Qioszsvf<eyjz|=B+pY3Ljyi?L90m|<-!y){Wb*00m+RXF}B*Q
zcd$!ngDm~*^TcWvyG<JL_(r!zSYQ7==_vaj`O;xYrbZx%7AhW^(zV_-+IpUA)IN5H
zx$ZiWz2Nv1OL^!1HKOaw=2FT#fa+pa6^mZ8ZM&-h%a|525;8)|EQCd46&=!g>eONg
zrtHrinhyaOL;=64#CgVp%OM|$!*tN+x~m>}vZ1@N+mX3x=FF2BvTYvA6atFO`Lu=P
z=3w^?4UF`?W^<El(YLCO(M0q!3+sKMl_;%Y;^o~xGu#Wvv<(l$QnWi-D0UbpPz|{+
zRzA@l3&93?W-ps*wHDd+<S|0>y-XZy_gvxl=d8V8G6ogut8m%&LBjLq`ImE&`5pS<
zT|{y>Hz`S}Q5L}5w%WeRk63qEfSW|EQ9tLmug<b+Bb_uK2p7jWh#)7@dJp4PNjn7R
z1i!)kGSYlvW{HA#JC5IlP%c08r(c<DF9pC~J7gUkK-c5-!U2}OFq^qAZsZh}rlw6o
z1jI&?iZef8d)L|}E}Ju!*G?8dIH<R`oiQ6uo_QY0WyDw0o#yYnwVxGmR2~4|A;;Q)
zZ!K*9M{)UMvXz>@CRnsV0>uLN=yyANX|!>@C%2m@(di(ID9g3S{Z&gvOP*f2CvtkJ
z*({W*6S0JclGnH8<;53TsvOnHA8-|C-{dKzaJV^S#6Fhza73C(;K}P(_~~(G@d1GU
z?UYz@*1hD_xmzF@8qwLceW~jE{p10vqee|0;g2>K*#sGYn)GI`^Bvzh&}X)Fzcip5
zO1PIuuKz054Y4PRTFsZpani~ly&7euyLL4#%!W@SWHe@W#K+rr0t_7p;HtS(V#qR?
zGWMcgH;ol2o%0Cz%-oWj8+J0wW`pF_e?&p0S2-hkpmuL$8u-tqVEol_HDAGM+}p3(
zD?7i@Yny!OQueoAkINqUb%(wNn=Z51yw-j5GFP=7n~*=HJ!2Q8Xpyqkxsbz_$EM95
zlcpHwWkoyk+qOgnGCxFHRPYfFDnYXioniK=b)z}eCfUW(|C-=l@=)bOC2>7LXVC)C
z7-NcVMhD{~(<-|cj1i|wmMh&cDF!M++PGVIJuh-?=P*Jr_!BD0t0R%*Zx*`ctS|fH
zX@;cu*R&YF{C!Vp*&cVR`!`1=(LjWO?uA#FRi+X5L0no$oS%cgL-y^H`svN*)X)Mb
z^$3F6FE933bqO!B0K22~ElHpf`q}ki#`3L691KwHfnA{WlE!}O1oThjz=%2BNbCCj
zpy=eb`#bPrL422ti69-dl-qau!Uq6tlyFym!8~D{wdrC`t$7m6YGrfM(rm}nDW#)<
zI){yVn_8Xj2f3DiHThDDq3T*!Rj1O1{8{Cmh40H_Ew@@z|GqKsH4}g0$RWfkT^Wn9
ztH5tBUf8r!C|cgZ#cX3+)jEG2<H+9R%Y|*7_F{AlK2uWWVjCidK<Vs`wC4v>sG!Zl
z-dE%2wIUoJQd^Y0h?(tloST;VyMVm1wVXghTE`b=2Th}&<p$4vyw`v!iXc`NdkRk{
zJ*g&IMo~Pn{bpkG*1eF5LbdR9;P)|b&dxYOy}xciw$i&G{N3rv%cu!{K=J+%uRp)R
z^=MD?nCyYO#RnK)24qbH;oGh&eCAbO2jc-s(MKb8XnqkKgs0|&F3_=+h|4i#yis{e
zFTo$A2RFkHZjBWJ&KThj4F8Mv6}>Nu>|W&+S<vB5qDni4*Y2m@2<~^ST<1g`gAxsh
zT780N4h+l{vlczVwxX()XXI@-M-NNJ&YWaruVLczc+8+bvG!_dYjj6CRGE3SHb29D
zty-LAmeT}ghE@GcwM7u+DUg%oR~1M<iidtV+(HH5Dp2F0IzLbKQ&20pi7sL*Tqj=a
zZCM8O=bRpoTu(hcTr=(FaHZ<Zd_`VfqmXFx1TMRxfc~`uZ9X^AwfLO)6hLvl^=a0R
zt=U~Gldf{i)sgBfi60CUf)#qreJKg@6i<6X;@a*JOvT)YF1BVqh85OE>Yv-&23@fs
z9t>6deOMvBDU0Be01%+ha*AiZc>Ad+8lEbIU^J~56n52VYLLN!p8ibz!?lM#8xI;Q
zbUMj}X`QbcSBRiO$fdi3gN(UzJZvcGZ8&#Ym3f!VL6Cs6E;>UZh-tjhr0sKE=*Ype
zxae=uwz{!(qqjwOhEcr4=^U2~QdivBKc^;CqVY`8^wWFHlI6sJ6pC47+iZc`;@-Z+
zd0t*xrMu=0wjQRcWTPT@+yLT;Gw~OP9;DZwZk1bdEEVE<)R#zuE5?XN{;`ZN^c)^N
zS$Ec9y{njy>!Gi#H+-D0b?NQ^Rhhp=l<}D2CJgU;Fp!*QYePBJyLt<OybIP!R}V;>
zuNC8x@uz4IzTFx#5)a#b)1LbCtGm?Jn7kzE^Ixgl5jldrC3m3X`U{XF@g4P)*iiO1
z(<K_4EueG(P-Z{lm*<wA!6;)j5vW3qWOC+S*~d&(9=BeYU1a1PVTcbvst(h%4(6~3
zG@`<a%dT7f3c2%RK{z|?HpG<p=w)IOU(Ps$)Coeo<a((k6Xu{b>Skz{9N<Bc_=1Vo
zS7%p9NlT~c*CxZ`YB!wRzC;}>Tgfp-(p`|*?;O*Rd!TIzA2XUs8gWgmTSP5bUpb?=
zyt1-%HZZ$@-|6Ycs0|!sf5~}-kq5X6&>}r%Fg{L4s^&k<S)WVT5SlgjX`}uu^o8|u
zVF$J*T{+}swH>A=F>K><rNMT%BwCu^(;73_i8Bt!6Zj1duQhrqU9r>it(1?DFDyEa
z2z{C4N~CsR5b9dR&iq7TWcwasd3cSMc~6`5os_gt^anv1_8%y-Tj&5}S58H(jr5B_
z4?ULohL9h56#`*u&Q3a--vC$g%CKcCq#52+Tm<Ftn$Tc@7}snle@zwzj)KN8wEMc-
z_ILk5z_c+>x$c8kB|WF@T20A)p!>6-YpR`I?)sx$nzxIq^p_J)@0+2Ls~ZQIkEmaN
zi0833b(azlhtg@e(^EtOHVTv!%Zz3~wdrcrfPgy9C?f9j>!W0iY={8K5Z()C+byMR
zW;;={gbKU959UFg1s@9O?yhPJ^P^|d;88zWu)MjD{(T`&Xgc6grL*WUwV+i%q1ae3
zC+^jFsM+UvYAl`J68db>lEL?-HY{R`+`tgw;*fkdCYqdX#scq~`{ILZb}>GGdXzLC
zsZGbGPc`(nuBXE@YyC|_A!d+^;pRR2mS3jFAU}xQd1^F(qU)rhnE~!+Cv`N!Cb0s;
z3b=>MEfJs7K+yzGG(&k#R|f4k(oG9lCc<L@v00C&USv=&zTk9Q+Pq4@Czvd5S2V9<
z1)LQayDq5P;dW2JuL<o^hqy?pyh4xD^zYVT$?gQnGAN7GKfTC+gkv=h=H{|U?53ko
z6P`;P4~6>!0qnM0{vMgvM8ffDIdWaEo!_SNl;RMNG}PpWq{)&RMi)e8-axKMiBtdb
z1&+9x|10jAjw#;lus+0RL!5D^dox_xUDNbL%vAj~E+2FT3so_wx+Squ!ed@OcO!YF
z8c{!S<XHvy;Asd<$T5%()p(?sLf(e-1OM8WFcw4NP%?;s0Gc{bQb4g6+rYZMZbMUW
zR~;u28<<T67u1ZTqJ#3%L_b)#W_y}Toh|$1D{olErqI>vxK#Qj+DaxBB<!78#zDo3
z5k2rH%(7fOVU79OA|=K1@3TcdXG#bY<x*UW%bW-T9l>~94DOXzkT#bc-B2Df_R-?x
z5hX=N{}MSJkbKsa*$xnC7<wXh!x!}8t>pAy$$t2N@Y5ddTV#4|8wrAW{vLRl2uRA4
z+6?$4t+WmP1{-N(Owfq*h6orT-nLId6i9FIGW9u(31(0x3)jOE-Fx9pD-|9i7bL97
zP?4M5Npw2oCk-N;{Z5%FZ@l@9)eHc|R*C#oe1bctZ?90iv05@+;(UYo(tn@@XQr>}
zMBVjyf9V&DRTa@l5e5>lp5RJnMex?^<AJF(@b+z&zTLkL``oN*Ru+!bj<ua%BzAa?
z*q20g5InaWH5|0PwowHC3|(5P*LbHOQ{QrR`ZTGb^*#bIi5B&z;K=4RjiR(m`@huR
z(EzvIZvgvml!h?dW_o8|A8Z@sE|ZI-%s`T_T71P<-M}LSc0%D^0p)#jlSWLMH>Hzp
z2=e9hAAs4A!+mt>XkG=<No(VvaDotD%<}a_I|p)<Fma@EJ2Lu**E+8?|4NDs5d5|W
zqWoVE_ku0lAt#VF{Wl$B2b&x_2+E%K&^@(Y?gC%9o`8>5_6&xY9-(gelZZU(TxNy)
zN570q=AvT=G%F&C2z~s;2vrWC+_9-ftQwIhk1bgK`DNBE8EXyx<iMqXB-<MiH#AKh
zgIoGZ&SQ7K?H*BWrBDGzX;YTqhFodgpo8^b96asbSLzuzVK}YHgjWL!P9Uyndxj4|
z4z(j20g5E}mJtlGqVj}^g`~I^$cHmtl4hk51C;y!$j#^n1qp`z*WY*`kf+Y0A~ztS
zPN)s#A_<iB%<Ph{v0z+}kcRg#5kn?`oi=u_dtWalQn%cr-wdX}Q;BC$^PWzG)sCa5
z6P$}gmzibGZ@ir+;V<9;pl#lO1(w)|DEO51`AiAVD^Ho3`vuQ(U%){#6aXk3uHIdL
zzKr|lwFs~GUe$>|9%zjPUP`>^AIi-59s{WLbz8BHsPP-erO8%ch6axxrhWF1EzYAM
zuMhF&!e6BnLpfHHoL&zNW&Mm+J?bhxX3q})<ie_X&D2p&h$B`n4rxvaBEj2)FX<@K
zuaSpB&Ta?uzcWgIfEYKP)$rN^b}`^`c|?<p7XtwQKLEgSh-s+zTYb#T$b2!1HMA|3
z@VgkBU7B9wIH-emb>vtkYZu6`SWM0k=ZdFkd9l>1OoOUnnqzGh?`VWPyD`nNUB1nc
z)doRTrD<Pt)A>TV*o?m-WVWYP4Z%oMT0V2;KtC~Bmgc-t7hvhl_Ctrt+R>9n10#&C
zuG7aBKt-+|B)-y10T83;<6hui=VmPlAjj!grPE`XsFm$-6r{bw;!(K+6yBxvq%haZ
zD{V`!9`YCXEPMd_7rzwUWUFvoEoJ`YbFp$RyQV=FLAKT&q^>1V_TMm!;F}1AcnN63
z)%7Zt<)2EKo%9uVc9mxL{2(r8W3KK+_iQ{mN82bUvSmM3CAXj?T_mhtJ11pGg|pso
zDg#KjA{q4}((HPiO>~YYEONd{a*EaaY5*p<#24Pu>ice+i3R3IY*$5*9?Mip|9VRM
zMuX`77Gfv<lckEbvo^2{du>7`iAOvHKTJa!3<IhkMsp0rOcGTE;Zda+K-iaw{KnBP
zFI|L<Ct&nxT)UJJW|-(l+nrRw{pLgbnwbW>8uewtw}^TV<T*LhI#r$uFaESTw?4@&
z?Q`2~_{Y(ud9nIrIv!CfKLnv2RDwAMv{{$fxTbWg#0%fKtAyRRd?RH289({Ke<2`;
z9oM6Sxe+ExOdURT0!uiKt-)#4PpTQ&zh`K24D?ZfW}*dpYFfVZT4xGuo+4)4WTFH(
z1q_<;y)6Fe^;If{k?fJ@or+<2`YX_1l`Znfg44I_*uHVgK!Hq;d>lo~+AFWII)`3E
zIMTPG{7p@yE%HAEA$xY18PWmYmc*i_S!mS5T#L9h3LI2nzy~G84n-SgJXW~#zgt=M
zfNfbEHRa+=9iFG`Jcib#336uY2DNGSl6v2WFLER&Bph7@d=MG$3TiB~raZ2J2_ID;
zp<#z-$8~vr!19NRCycK|?w4MPy(PR=Gy=m}obg)aWiZ^#E%Cq$0j?1)FniI8_UrjA
zrLJWWh6w=t)To=i6jauf=Yjrk@4Zrw<;k2Y$V$if4gFMv3+1}h4yw%T*bSs*LLOZD
zP0d-q?kjv!uqAC1IGy(@$+=zYW(>PFs^E@m$85C+^NSv7{sEAatQ2sW!9oGZPb8fY
zg2p?oaOSD-wz@Y;uX+$yOMPv@Rd`rVKx_wVl>ZWrNvCqTYX4V^;M1*9;Btpg&!#ko
zwD!>!rWs94j-g4c37bbF_q#VjqJw9OtO0+aD8}u=@wgU+DhR!n{U=8=7s+HdMikA$
zK<S*4NKziW+we{xcYCr(zfTrvuo}7$^kUdmh-u`<%bI(j$<A1!Gz2mwL5?S6bWbXt
zGxFxdfzi^p9;pd=B;wGX+mm=JP?aC`hi)A8>~CpIKa9W&o|z=wHkdxfesM<<S!R|)
zBdtT@O-_b@$L4M*tcCr!zA1%Uf-zH34TD7XUkh_+Ng*?grVu~&4qsTfN4GX$&+YEJ
z;!`(-QFD<Tm(}VsEaL$n+hUQKiODY#r;b#~rIH|zzD%{~hwz%du6%Z6);S7$`PJGI
zbElM7Gq2g3{j?)X?Kg_QtxJKRH|hqBVi%F%zOYZzl!u-2Gdyw^^K}sKf3_d`03{Tj
zR8GjUu!}qOlkSiYF^Y4&B&M1Of&>xb@AxlCl8!J1TJjNs&>~kqz5%zju3+=MP}dcb
z-}U-nIy_Yg*Zml9#$=Li)w!CC{#%afmdK0hsNzw(*XYb5ED>=PYY^CDkEuSs8!mL=
zVr6SDXpK!`{9@NonRDc}2a+e!Na<*Uoy>_5!X6D;3KkC8Hxw6{>vQ>{K_LzQmA#IS
z-y{(}>RH$p@QI>~*C8O;4AeTG)%^&dTlx|h-4#oG^dCcCUw-nUvoV(Bof~5bY&0jk
zHwAP?$k(_!<zAYOsqqCRvz`?+ubsj%zbX`lD85Hq(&<xhlL!YNwT-y-A%TI4OoAUM
z5hl_O3wyitia_zB`GCX5v8XqFgSA^a=ed=)9p~LdB8Pu5H=(btp4{+j5-sF{36D93
zC7h2Pg(CeYt68*$DiR(Mu0UriDfv^)GZ_LWXj>^%ql<>qOAfaw6RIq(x9u{TMJj8y
zG(bwQV@}H$Vd$`--uXv-v3R*)D6{r%DU>wh(O3$Yo+t(O2lPc3DD+64*z=le6a`BP
z!dC-ZCq1PrLUH?)ZPm2oY8)YwRz*F4_Bv6)mPpT)M}>pQyA=c~>o`aRdZobxN!FP5
z6M5MD{sZ0;NM>}^Sup|eqK)&9zLs}=RxhfGRS<p-PJ!|y2`IH4S8G&M-t18wos0qu
z=_<!O$sE87(wW2DtatQBlIg%Ycg(QmD{hOZ)FNE8oUsT9-n0y8DUE2uXcaREG(Kbk
zBmDrd)1F$U^0`Hk`ks~NRN&Hp#4d~`53MM}f5BrLth>b^#N_#3FpS)PK>hQA{&P-R
zZ7S6V>OmWwZC<o7Yxa7VfN<Wvi{z)EEl;}AyiUuEaNoK#GxGdrAok!iRq|S1x@R>=
zT~@4+*#hbDhIg%YEu?kXS;rH)KMO{L+~TH&6p5diQ1BjL*R%j(O0=qWKuLdfz<zxh
zOYkCjB<)RTwCfb=VmvxU8VTadvd}nr8Ry#aS<>vogon3pKq1PCOXt=N?h|jb%nHG<
zIZgVjp?%LnX01&+@*@(O^vJ__M(}RQ<hxkOFSP)6r2O8ZAq<A5<aP7_u6A|OUpv%d
z19~2L@M&X!q?;_}-d^3^cWTxn0swV~llKHGfChe$%|znRhMDlmaR3;;B5Cq|IHSs7
zWK_awYqU0M5*sfOl0(g!rcyQ~z(6q$lUglxA;bJV54)UwN4r8C_ii^JZPAmSO9=&S
zX_7?$57okDWs~Dv2D{=qeWHrD9rcUPI%u{-4VmLH5-f_Hdpi>CMaOv`&Gzp^N}Kj+
z64Oskd$$Pv<%;Ok95{t}MxRSiEBz30!3HBeOWvYYlURXdz*2DCAEDHq&dw}2h*b&n
zBYR=bZJ544!1(WU4W20?dVwyBMrAkI5t6s~tk8~dEbVq}79BCE1o+Mrntx{kHSg?m
z;5LdLVZa41WAOAj2d|Td4RqO|GQuH)hEg2YxZ$eP5U|M(R~Ky9!LW<*aM-hT*N0n5
zPxp-iEyoo82k%K3f0U|m?(3=qUk+<xu0m39VMk586-@2-IgRIc0_i<2dM>TZ?>3I1
zSSh+Rj}+grXRk{Ti9;)In)hcy#@CZHRfA1W!t5IFv0ZDX?m~ub%?cBz3&|ML@J?Hd
zthMIrT8-a;Xw;F?hd1lE%_iPktpj-lu>}Ru0G{aZxx+d)6zbf1K*2O&K@{G(K1ELV
zS(p&>gW`<{pA&!U{O2<Th_|Ca<6V&$0+1fW23g%M>TvhpEBNDyib^qeR|DOobX5(1
z>jYUr{%)stpmN^LZlNEq6uUX9Hg1IRbUft+0!gf6hMV#+(kM{8R)qHpMc_p)@TofF
zRii&+{;|J#Nc&Bp|73cP?GrYQ2uw?@L&p{;ElIdwOTF}qF&M4{&kZ7ZFsmO$Q4ti&
zSki!bU&6|CILysekqKQn*;4;&;@L0Z#No`UD(xHoTTeUKrOwjJH%*F31M0$pRM<v}
zs!d#8_jQgGZqN|=vv*FUMYYXiJJM6WItfiEwnPXc&mtRt%3ub~t*4W(7WpW>9jIv8
zeVy=*GPwwl7JDAG1%ktGLt>raOU0_$7QW^m9~stug}Rtbu3GR#JwVX{G|^|qu3rmf
zZ8~CJXgaOt4kCMKp{w={%J~x5%j$fco;}Rj(2!;VR>p93zi4lSNeqk3IeNRs2;1?>
z8Iy+*<`^_{jWzn@Z-VerJDo-j(w=dlkYiQwxsdi-c$ruYapD*xpQqo3di!b%4(gZL
zQ~!{~t&#Z^6A@W(_B7>q8wqpxaeNk_MVVD9(LUSL&b2fTCJW1Qh{{6L5oY(ha~guA
zL-&-VXF<3LaGHt^&I(9S&~zGm>HuZs(xw6@CYqc5HNGadg=U5zNobJijNCm@#(IJ&
zo;~U(R;%1&$j`?vnq-eN%LUEM6pdq)=1CFb82dq!m@li_BD-pflg{8C{FAT%e0UQh
z445}iof0L8tLHV~2O@#y?a2+<#U&#E3VfTvMOlXrbNomE223p4RuzdKg}zdIpfO2H
za|osZoi8DdSwIa;xou`EHuQ5Vn<!&L?ZbSx_FC!U5&c5=SE51~_;td(b$aMKQzi2<
zDhXOW#%=9aZ?=WxL>o;rl{V&WuhlU{9z_1Yg3Ribm@?wr&-U<g|9ii_fC+SHVhbK<
z&`gb*68kT_hrRwU#ge208Pg!geGX%h!glN_T23?XtAs$bj5rng`@-VCN-_=Gi=Z$n
z=PI>BLCj_uQC<<e$BB<oBdmr%`H(|__C_oLZ1hZPD*$R^HEKxmrIW;e&vL0QwM(od
z$MYvIi3%)x(9XdJKQV9nmwlaae@ko@Q&A)I;;|Hf@$g3%q#ue|KAgv9H~RD1zfg6a
zsTjdw6vyk2g;jh<=~dSxWN>7B>`!@RG_Drk=0m3TV>u^AtnNo-F!+rm@Ib;8xdU~m
z(tk5Sk15djUjYkaQ1<;L0*Lr@AHIf;GE#dAQIX&dePmIg71dMSz#L_(yLMKs2t>WU
zG|nWsmpx2AAYZ;mkFpbABO#1+?VaAl!I|mf4Nx-7=-(^lpsXcwFXCn?;Ak-sgckw#
z!iBOUvinqM$DjW0df!yG2QB{IeLt*1`s_fRF}w(s>0L~1-LMA4F9|yV-y49|D1xUI
z)Q6I31%{)vD6fuq@ISs~^9Mk0I?`Kii-$v(BO*W_ACqN0-G5@l?(S^cvacxvv}&R^
z_B^d1KUhY^l{QaEc<KwPDVnY;vMHaR%-d9mgyZu`QISjEtk7Jhg2__Z-SvY4p0rk5
zWGlu@2ST3fJjw+zk05cSuE)^BZ}D(Wx#zJUyk#z2Q=YzGntG0YW}L$7P~5P=>;B<s
z4fwW>B)2yYMY*r3KVDhB<}-|i{kDdL@YEF}pGq2L3Q(6~`kW3|qGn*Ni0`)}wVPWH
z+JxQt6eL2uW6VvB{)IDqJAV2^Q9YLM(vX~7Og9?6Th!R<70l}z1rkrrm-0eheeg9I
z)$5+C+x@w#hAcjRsSGzFxR&@$Kf$FXv3Ps<?7Lsrz+FESj!*p?D`Q+A>&oD(zEw(!
z5*cn7Al16GF(p;}$3BE-Jg27XT;Z?&mgDJ>4UXy%rp_WbL;oemg&C1b)<V<$quw7p
zj#IhO-%U#n)`KU^_eqY;ZirxC&GIsa*L<dQEoXltW~8{TYU2;KsM;G_D^y|3x3bkS
z94kby$AtRw_;Jju0;Q?o5N;W+<JXat-n0qJD_9XY>V(N|6C657l(ba3uD^QsI~7)X
zFIa9>NVUKq0tWWzyg!hxNYo<3Ha0bGXDT~arX}j)qY>U-WVygdScnA2tH8Zb)R6Sl
zxiiwYDMN+$LEVg(zWj8+lsr$O^bVzWOFEubTE<uW^)muQG5rr8zNYs%(4RGoGiN**
z%5~Kj?;YG+zYANdG*+PJs?9ZKK#XJ4kk$ACb5{#1v$!fE+RzEwXRX}~P5ofRJrx}y
z>-nEM8y15D4YouHtJNJ`23|X6oSBP3o}w`OnswwP_JtK(g&WbSfB)k%PJ6eo1LA~7
zM#H>?P0`c}Ci6Q`0p{@>vOc#zN@HvtBV{<EbH<Bx$$em(eMd3t|1dqEB&O$u$j8%p
zoLyl=|CwUSF(aCO#d<^t<ezjx{NVsvFf)WaIOPd+1uX-sA(}SiL6upE;aYq!0=E@L
zN8vy%DG0m{W-Wx?o-5Ijw-B2PJDa0`1hEf9PW`OG@>pYa0q&{=g(#KZoj?MF%|6RN
ze$c}^bP>$-=O8s3y;95SpMJCiNR0RRc4>kJGCB~fn7*?-t*Hw@d#M-bt+<-gL{<Ex
zw|aAFOyEo=Ihff3)}aJ9>9ehWK{v_K5gm}>D6mNYl>koIi{RnTUZ0YVItztNwBSQa
ztWg6{zyeQmBz%m!z6z2w4@x(&&Jc#5s=rS6F?;~-07uD%rJ*T;lv{JqpC94d0tc+i
zGwMij2hh8n3cainqm=c;r4F$oXVE_&{-?d#5=S107x#&>dS<0OoU41dksaM3K_yq%
zt^6Na`r()!xpd!47E{qnyT$ke6zAUc@^>54DAG%OV^>^FXgI9=B=f0lJu1NP*~8)6
zzo=N}s1bfkPfLQRG&$k5Rp&6f>{OEqK5I(Rg|XR0y5eh$=+4RZ-W@No(;t(-aU}2`
zSte^bhKVN#?sloosOuJO#;lv~OJ|+`@=2<+^H@~Gc2AmNcynWYj#VkZDk?|;Tim5-
zmBArcy+#vLo}RVg%|L>V-U`_!*6)L69BjWUS)&QASFmp62JcPaNo@q1fCCRc(rFz>
z&9Lu5q7pcD373V9TVZ<WML33-;SpMq9*4D<nn5pP9+6l^vF?$F4v*ZqYIN%6rkUJA
zWb|hY$mZ(eiq=1GG*j1<Kj)oB`VHlqd%yD0|4fpya!O4x$9bbziR_*alg1i_f+(vQ
z7A{yit~6?YMB`j_;nx^@voK*E1!P2oBdO7*(>0^<H{|9Qr{G{ZlSfN495NXmS6GN*
z;vRIo@1_lvaN7{E)V*99Ew3L5_OnNlC>1!%6A(N-wBM-iaR_-a7b-Y22vyx{0P~X2
z)yz$9{WX{#08>~)0apD<z1L+g6>PTnx<)m^hf`#E-Enk+tNiZtvJXQ=`Fgb6D&Oc>
zAO>I%w%J2>UZ$JiG=0OR+HcCw5qR)=b;x@fjq>OxjV8<hWG&8NQ70Oh2Xb`Y{Cpw)
zGn>;&D=WJM@eby_+>Y5nsGL`f`t+oQU9?_62T8OMI`ZdH$VZzI6L}HjWM>w=<H`Yi
z^}E#tAa>vP(#>q0`EC>`+N4X{iOBXKx-${YS%$cnWpYASl@$;IKv&WRGv4w|;8<8G
zdLZlYl*<wi^Rea}luX{h8814_FWD$OdX8EDOBut4*F!lRp%-8KhX{bUdKhomEhVYE
zWY)Ypj*-D8-`rk0fLAB<GEM7plAcCiyVJ<(E1~^5&^La)4%HS0<Np7VZjD`bo4=~B
zpNkpE7JRP9rnz5$s%Bt|593Jh{<+A?U}=@~Rjd>~9eYe623T64k#+Apz^1O*vA%rD
zPZ-T!HroUr9hA1dF|(G-<6K6fUgYw0ZPF3jktKM56^^45ML5vdre}hoxil}ciS0!s
z<n68!%d!-Jz}BSnl*~?f6Dlho=G;SWo@gMU3}2h9{<4OPN(Tm-afW9Vu+C`9C_H87
zP=_}7u$x}e7BD5Je{C^FY5Tb-&BCz$I(97eu*Qv!IMiJJlG6k%x-HPdnrkT2jpYzz
ztz`V~Eh6(N67SPBIwvTEAj&Q76p)2@q8Xxna991XCDG0zf}nKlOVTWrA7#I#980XB
zBn!kFM>UO-1q87D4J&&}QCb_;&Sot)iAcAUd+qE#izx5*uU9yuG)pyC<6<_run#ii
zK}bOEL0QKBW!n$(XV*@NHMU+_8deJpFm%pqHh`~P7qQI5(bXeTN-Cngz*^j>Rrh3G
zE7e<FL;HCb4#3sOdSVYv3SxBs09xpD@R5nx`Tt}Kgh1Z8keBtVJxl{-&%6+#WoF3#
zceF9yq+dH7luvTp+bJ3E5Ap<N)i*j2$wS#v_|LKXg`s-Pk9+;H|A5$}myOja%*h3+
zo3NtjU}y+{wGjd2lpjGC!V7NN^O$KG#j%j}BRqowRY4N;pU!cVG3G5RNd*ND_iTR+
zR*rsAusw$M;ude3&kPM6qK2z9OAw2BzF`det|==or5ReQUj^ea0~$i~1qY-Aas_97
z(09ptKk*(Zg2415ZrCqQ+yB*%+c7Lgy<>Ts>6Am*h%`t!@r$Y4{{d1Ut?@n7(^q9_
z3f%xngcDEyjWEXvHLL+%eIA0QYkan=>b8^<qLe<N)UEKFDMzm%&3q;6;r5m!$OaU>
zu*h3W{_6(4-Ng&WQ)%SI+jjX1cM~U%$4f@r&EwbREhDmu-j`X+Sy$#jb%N1vroke&
zRWyD`g}(Yr+lpA~<CWNvcoAj?$DD%~1JcqAF8_fn8gk!9Y^Neyi;*Z*xg42d;*#n|
zyl#U`1``8s9A5&K!6Sy*NdsdN4@MuvCH$Vh?&XrZMgk|z|4=4u6iLxakZ~G`)eziQ
zP(eQGJLGG1+WIztf)^DMks^|@N7!axRxz{S{7N6yKTu^V1=pkgoA^n=M>!3Jq#yRq
z2x$ndVkq}nBo`H&YPFA65d_ZfZXiQLM+#WK<!_mK1-H!sENh1#S&<Igw1;6mR<c+Q
zkq7ORJ$;}XXNTuK8nL~m|4-NpPxp&6W;@KFun;;TqU9*k$?&l@x71xGr;U5e6515s
zmK2o-aar8C^>f%kANBQ&2HV|HHJ~bq{fibL$+rdKQ;@)p)!>*lSkVHYo=(7a1#;^(
zKq_@L5Qu{q<z@bYz6p5vd_%B=c>980w5HPVxX(%z*)liGOXXu7gem}r{F(BM^a#3Q
z&JoWxGwG1^)s^kw<VTzdYaLLE@#^2Fnh>Lt2$HUcb$<+EKWovUr#$nsP;fb|&oTYL
z*5U~;$Lu@h!J;DQ$yBpWFSBXaYxm8X`5wab-@QnbFo(-HYiC~5Zo!h=FA6xqY&ySN
za1l)fR^K;QKk)<JuR~TcC(U@XH+}e;>mkp<mV@CaV(@(Iv#^;_2(uzN41280kVgiA
zg+G%M6Ln_J&<qHMTzojrM&(AU;WPxY-rp;U*<C#MUL|HtvYw9$>ws0sQ}9TxHz8Tv
zTBKm8pxZqo3--Impb0K=EPRq2U0Y#f^9ZRP^mPt1AYOf0LZdXZ-=+0X1<;~rX9%kk
zLZA4^@*^lLdl^`xKH+T<NhN5)NWoaQ03bdzTBH9n2>iA71uZ>?1(4rioygvWQ1JBT
zt*9a8`C(SdoE0Md9B`C&cFJRy6!hWAM;KvXbZeFFtP`8hZ)e*gDCGm!k!9nfjr!w(
z^~4KD8sLSQA{U{Uz>V5yh88>I3{*OA^5S-zu1my4IbS3xL=WQI@!JXi!U+!-wfVMp
zl;fEwFd?{GZaxt?M3Z2S!^UeoP~=)pjiwd_k^tfQ6kdUpwrTZYg&3+v^EroBp@zJw
z`X+I)NG`S}*4RnNob8f$(ofO;$&b`8QJRKL)0gG9`W=f3xjHfaYV#3qN~}x3IU2wr
zaI7Gwp@Jk|CE6uAew>IF5=q3JT~&Fou+VWBHkXa@fY^lse&fMZ#PYVC1~C}Lu#1`&
zfyO^wfp-!mn)S3V#}0)NfIskC4LAPN`<4jOFE1HD)yWo4r&D&@^Q^MymQ6`l0AM8j
z%Bq%4^h9KwFdMRqtsp*1lM1NhFl78ec~~w&kF<_ev5=)Dd?_{L0Kv$$3j*q!<HGLg
zexr%N)GO%6^09dey@NEoC1z#=?tlk+>#7Dw?Lkz(iwwNz^r^79fe5HGM>2hNyoutH
zQ-7NRn1j{G((r5BOw&bdR;F+$tL9i4K)W2>7?DN^MREq*oIv_QHr`F1{*NdK8(i@=
z{>`*!fDrrd^!e35wL|&LHcM!;n=aRTgV$S|;<}5Y+Y+t^8iN_kNH&q6#!M<toR_D2
z7;5KD9GYri`t;Qa>U^IZ0YLUOGvh}3(~yE)K(})$hvzKwX6JtVq`Kkv`H_N;1s!#{
z7uZQb1fD&Y4Is~Xe+LI|(=ECBOzd-1%GU{$!Up~njh+WT^W52tk{Qb=v}*4^@n(gu
zdu>G)U&`Qp7vl|@Jd+u04rIYeQ~SHSWJi|^&!I|lc0hvWXS?i1{$)c$Q88@tGyl>o
zuNmB8swAd_PqF8iTlUwgIiQr1@8tLFtnn5WQEft>Su)fyAs)<!@wzbDvQe0G!1y00
zKa6*e3DA+GSsYhGK!`sC`Nh4P4BrVwp4-ivzQs99mt5q`5B_+-zg<Uj&csJgi}I!J
z*lJC^ZwCA3Pn!16RiZ8Zjx6Ba2fUx0&iS><(L56nr8EQxEkhC5M@n5~GsVgvL$MFc
z`2ifoXT&|!$!ffC+39;>*?t`#!q=t$Xc?Zbc*U|?DP_j3znz(7F5aSBc4FMFnKO^0
zH{^<{_=B)p1MzY|vpRt#4aB&i#+gq7KCY^34D~a0gO^R@QI--_#%#8t)h9ml={d8(
z&GXs%=8^xIISRuysUa4t>=Kk!gF2>5sT4gXaIM=IiF1lIvKye@a0CmrsAIzlB0^IB
zKuj8*DGl&Xe3yDUYtXZ0pac5gslqgj$-tXiv}!BuZp$=*=Rnuaaz0f8h2RaNdOpAJ
zWol-F`KnD#cr;t)G@T0-!o%;&N1^;#e?za_GPTM42y;zlO|qcT1H*qvD2QO0T6!k)
z9bh|3<J54fQvXJw9xC?H>iZD6)?up{pb|squ_Wu+NrgJF0N&~-*gMa0m&<e``|O4u
z1of{EF^rKVD@^YDEp1%Yw=e`LPr?oa1yYLNoo+Q*Ss`s0J&TfS)GKD9D(tp27Cn+3
zCwHD<6UD!v^XRy(R?-EWU@_KhRaU#}DRv-txAb_;U2Ui-xt^r~VvD!xMotk2mfLO5
z(4G<5c|FAZ%Ps^^>4;tml*>U5RE{uGzSz^;y!wV|9qcx{f4BuvK*OiyTWMwY6f1qH
z8fBVI1k#rENx1S=9?e*@CY}~er&49#os&Y=-g`Q@h1orpl-&tKyj8`sI^Q|kAbfsC
zJ*hL<EvYRps5_;*yibd?QD(dXo>L<dCe4+@oS*t1!Qu`^y)>yuQMO*FiigRyhjS^4
z-QbGMpgnvb|22U>)*Odq=Ko>sHV-sj!+jmC<cjE08sYJCdsy8r-L_|X19RPwrCb6~
zGhuC>01F#g(Z4U9$#L9jTjZWULlclb<te=#3N)|tDj=O$qor{iH+6@bMM&_sLkJE%
zJ(w-X{HXUp<HCr#_rYuOiFMa7cl6_oDi=O@6n}H#wcRUD>H&F*o{P`HNy~r=?vCRu
zKU(aXDihkn(V&$vb&$%{@$o^`DM1J>1?G}O<sVsMk>kaY<4LZzd8!J#)0cE?azayL
z!fuhHjN0t;l03$B-^T6A>j(o6w9YCI4|f<rGML?x@pK}$kfeF;J+R+C9wJTX!HT`x
zd#ZPVcnr^H{_OT!$_Fm;&pV38f|a9TYms6dA7V!UW0@@%YYJief!kbn+?eE>)rm`<
z<uf-)r$o-IQ42dplju884EpGkhx4m~sXomYa4FzFr~#c{+Y73j#mY&fTx->1e9lfp
zOn=|YJ!iwVMUYi`S-5Rlq5()fio<)jAP-`lfYdcp&So_V<_|sEgpw7L=`RO$s`6Ip
zlo643d+w0uSO#*}JVXW}Q^rr_XyIjShqIwFkwqv~rQ=IMr*~;?y?~*DvI!EQAHDn0
z^n(Ha`I}VDp!i)lNu_Vj+G0F@*5+4nXz4-tJ9_B?w1}_OhiA}?&MG*A9p^UdEj1Aq
zYfW&0+^Kxc7ZFQVkiPdAWV&!;xL+>7&8Vy^2>7hah9jLITHpF|YuI|dyNyi`7fcZH
z&4~K`GhuZ*s53-UOeBNN&4A=lmP$C%6V%7!)<$0g2Y9<A-Ol6+uqD@5?;dldW^MF_
z+u+)Xe=hYXpML(YTup!;N3}jHZtF6VoM)aa(q>HjFAw`3E9}Pwqv<L5L)QlTTN&<M
z;&ldS+1qu*4Ph{%r~Y_t(i~gPqSRqNhv^29_8V}g5cNQEO#BIc_+~*ncFOd_=``OH
z*8-}r6ljc~uuy_+Qcam&4;WVJ+5W5-y(otH5G6IDo!E_oyNB}qzuL=d{B~Mw@{d32
z!bCp>+4cFEr*8+*R{399QI%Y}<!o=Zq@OpgipSXWU!l|TY0YlM_PC(8^)z_fM{7ji
zYPe-LU1OZD<f-|!<M2iiYZl%Nj$o6!E!den8+_RuN6@wk^N`LCYGMR8BmvwdygQ|3
zW#ReBl-bNkVZv)lPLeb!hGXK=Jn%F10{Pxj@BE;dvSZqpDydxE%EdjJNGx<$+{oH{
z?f#Y4PG@ML1_cc>$p$8Kte%d8zsbm(zOuR}Is2z7|I)Q$lcjqZMeDv%<g7&iZyt!1
zF(IkPOFu$_$6HJpRicn;zk-+KlJNF!%co9wRJ5hSlg>B2@DYvFL8-m)L)CxN$&1k`
z0?t=+Y*l|2C?8bNUO=9tf=2i<n8|*w6z&NLEY!OcQGen}z3$z`jYgL2Q0UfurT(z-
zlHz`*l-U|I{*jgEn!-SKpjx{$>hB+-l+rEu(>7e+KX_XQ$B)U6pY8;umBwyy{)#i+
z?C|_1BUM+oTdltK3LRUxI3k8-kL>V$Cv8`Qf8D1T^_2uQ!!DrCFMZ>;fVrdOkm8L3
z#kiSx>PosEi{JebEYtpgyqL4u<gzH-8^mwe08(9Xj=CW}PrclEWDFSmDfg4p=OoQ8
zWtu3DTw@F?P2|$a+B64lFjTV-giH*{=BLQ}Z&?Q3w|H~rFnWf#(&KY2zA2}(-B&vd
zc0^r%LsOw;>S#1`y(8#bh#LzmP74x?!726ufZ7~a?Ze~qFyrGt?$Og7vzYcnB-on~
zaIIH!7$*6JECQ*JRfWJGrMDp<9!mO1U!ExRKMunBG)0?WS5uq^+NZN?%KE?2`qM9F
z&4n-<3Q`8c-8Tm=O!9?k?{&C<>CI9&>oes^KJjo9wm`P_>eBj|ycZ?>vQSt$$;wvL
zQ2DUA1rB`oNnFm3JEEwuq)rVjxSweKI<|ukDC9QZqiPGP%rrDtBJTw3sy8BSBuG<N
z(bLWf5^2)d0ol;j^x|(`EPf6oYN53#ed<|`B+bco+U4E}V6EA$p6Xt24BBH|XA$ei
z^&*8i^mA&52)i>&rU9~2W!0Q!`=8+Fd@6OMYgH|qBQjlTkBf;#O9-nxMXfOc;t@w3
zz0vqAuF{4ff0fI!YOE!!Ku=s=OX@vcCv#HRan_Pg+J}#1J^@fdki1W`w5v@b;S?{-
z<P7W|nf|FKU&H`ECU$5E<M|H{=oOyVOT7WzWjlZ(D6&^KWZ-KhXE(5Q)afDz^6<Vq
z=&LsSVv>uxR1R`!o5T*ky|Bk5h}%GORl3Y52iJwMvl-3uQ9%`J(&3QfSG;l6>&M&m
zKvEK0HPcV0Sj0Q5bKJt`wLwn|Avx-idu9MbU@?}>t<f8^-`{1q_xsIkD+J`wk2*uY
zkX)diKmC=Wu-unK=%TShA?Y&CE_U?1s7VXLf3YvVfn}(&_7EV#O54EATRLnt%a%Fz
zgqbZQmq9j3pMz)|ch7sEdnzk(o#vZzG&*rPhm%MFeKbIOIaa%i$5aq;$h5&$NTi^L
zF@r0)y*YD&L2@K65^aQFO;KAqQ*Y>-b;CgF!CM`8WG8|#h+GR!b_qHKOEN;P^lG{b
z$KTDmPKR;Hbtvu5K<O$GvE5x|bVJ?8-D^fY^lVYLe%bxuR`XyU)PawkuUG~OG|*%_
z9}};w#X!|_fK!1_JsH#{-6J#$x)uDak8=G_ctx3s(AYnH8et3PZeTM9S8?TLvwu~o
zJQWm!7)&-)KUnS;SwLkvaDqc&#YjGn#jY`;?RacN<VnQ8n!_zroX-BrnJj*7UNt?&
zb#;b3;k7N5SyNgH5Nn)LOh?@lAq3=kAC7F>dTznQqBWoSyNJZ@X!L?4)}M}}Pxr&P
z{y1?o(J-)2G1oG1*!KJ)&OBwY7Wt{S71%H^S6xny1cc~P2cj+anliG+wH>6}!=U=`
zw>F(KC{`J@TxqW>9BC1L4*e}5ACTuPfvzr~PMAwEkH6s1ZAv`WtZeqLK2rukT6$q?
zPDytX-x8zfT$)aJ#koSesKyVHk6PDm`_KG7di|K%-UA>8?jOzJI4rb^nI+ggswN`v
z`0?y$se{+GlZY4iqq%#?k0)*}<`97n%V$^-@C4~J(`=5id+US<=04jgHGY=Qr*LyA
zz7+hud2w|s?<LW*F(S(fm>CXD5L~7k4}fSp1{xb_@O-&6l3HPg@>D~dI5(?J`^o9W
zzbeJR+W3SpGHr`gqEv-*>I+6Uw&JIiywy@)WTQ8$R!|VN(Y?(<k_<$!bB*PwJv4g{
zrV8ySQT9F+7~<*R#&Wqdbb}>puVyh!kJkWvO2xkT$>aVhe~V9N@LBi?UP~OTE#m&z
zx{E04A|3%j(c~aqj&1vlp(#2-h15GIn`u>OAW(k40<d@zzWmm01N*b8NmGy_LvD<g
z4db{4*Nm6<X_q$@ob!7J@3QHlvMFq>P)ZBxA-><Fey~fudUOoUQAHWth-(k!c@4cB
zJF)g%)jueS9*(I5fhG(VZ2lUz%`Wko4pJ1D)i(yzlV|sMaSGqyV-fUDhPh054*`(R
z{dACMdspS&(|299;6^c#d}kSN7z^M>Cc~f*_9f&Y7En(bL577Gt>zoyn+w|8Nq}(4
zEB=ll#*Pwz^$U8Q({8jpc|iW{z^i<vtXct+zdz;_0k>B&{^Aq1HC~;0LPRd4;>cU*
z;WCsu%ka=(N!)(6P#@#luG*WUp$`eN>XUSTp-^ifB^Zp3KId%!pBIF?fg+FxDu{t7
z?Q~mcX68PyN^5Z(2r*2#W=YHgKR3PRe|9R<<s3P)56xeO-g>lDx6i+GZSgnH^Gx}9
z9nJJnPAliAF^$$-+U06)v`l`F?dklv3P%wkI2b%8G4vG=@VV9ATubvDC*QAyygfEg
zo;VcYZRC5AZWCpda}P^y>J4R|O^t0W7Dg&NVPXVuMTtFAi53y@_XM-Z?=tn*BauC#
zLT4N91GErxReK+$u|KQKTs0Dld(sA}EDj+4pG2iZ+D#&%pz0vQbT1buj};e#Y3o>N
zOaDKd6ax}mZB=6j+UI)WK&3R}8U#C|n#!<v;U4mJ+$~dJu49-T<Pj>C2^*TnOITo!
ztZW)Ui!CD<p<eD9(dDLZcN1zw5CF^#<%mI*ZMZDv#aB=ek{H9|3VLsp7*8|k3xm{;
z;vUDp?L$b_fYYdXHy1{2QWZ{O#$zro&#A=xm$z!oKzQP3I0{PZJ@Jg(Jk^$T0}@_w
z>AJ)6Gj>Ay@qpDT<EXrIgy8S(+9B>tY3<|~T_lu5x~xcM%A#3foh{#*hQgvagcyJ1
zPZEGnA+(QsADGYO#0|&MZpB5BiYOY5-+5RjyJPYI1tTF9;_NHWX_P;0pZ@k}QDMt8
zuS)$+uyu_+F{?+E%Q$O|0Gx0+-jhnCT*v{~*_R49u<jW@?SnQ>3!67@-%W%GQ6*Yo
zb<lh$kAX*tqCZCqMd_#HAF&Y7!yb>Ce^e)W0E0!VS;J7YygZEntLZ&^m!OkJy*QFx
z3U}Ds%t?tBsygdAkcIV=#m#mUZI;>Tx`hP9#YydE1g-QiB!RVR>~1OHU8W4WY}(k+
zC$^jQ?d)ydntOayfCU}6TvK78^(PQ=o{=yxK7LoAF^LWkDa$L0_`h+CnL$TO6?Pl$
zh)Hl0SOv-rzFjOcNtNa(b*Pyz9>@)A7;SGU?(pt|Ke)yMOH17uBXKr(^Z!HO05p#z
z<HCDldMZ>RXU{DdQ2eV}sYaU&Qbuuwfvl1bHNA~7y8omMO}#nXI@+_sX0-|xm+y&N
zjbDYCaWt=fh%fC6COHw?VWS%T?vRYccsGc7I^CMic972-Z~!Vg0j=5`VJszQ+K*M}
zfYL)6M?>3D8C)-=>I>%xw9<REwSlK@Z{tY?g%PfY%8qX;TpGtcmKjO4Ld+|TEg|48
z7|3DsPTBy4z>5~=p8)f4q>jJcZXyPo@VUl>Ll;J3rUnz0Vl$Gv5DNFVJQE9g=NoAt
zQ4-I6A)W_Csh`8#+)a`S6(wHLFV1&6PqiRu8*ht{l_Y`<JUh=1*0xR2vlJw@sr>xk
zP2R^ARjZs)^E|4MIPVYC|M?<^>gC!jR4<NcqW&_ShcYsKDUnInSF8PWkv7|*X58?t
zzir<K)D<B0P>H@~LM1!$uO@X^EOMZ+N|#PRW)M4}W`3v}ME&02_zC_qexSQi@eK8k
z(uS8Ixz^<W|H6R!siRq%Nmd5vu`b}6uVQ~9g2tP>IImwaAJzm{KzaE~{eYNp7r~8e
z-+;qc2ofs3cxm#ff!t-q!qLZt0vB@QyWNcC9i3e_p^nVl1Ed|Og0ayT;q$t1!vKT*
z3>0I)Y?(Z$YNBqqR2=pzm(l5N^}#IaK!F*8L(h)PQfnH??nz^A@+6NK{$Mz*$n`6i
zq4NaSse9~XW@nKJJe{aXg09yagp{YW#w{GRZd#UaIC{<-42N$4=80`nuk`m}b#(Br
z*EiZUQbJ{Yd<f$R>nR<Bg_KXD0Si>7;2!Auon*cllI2mX+JoW6NoGrGvn7oi%=@@L
zZ5g2yQ8tnMPAV=m?Ke|d8#*axSOfZBtI(`-y3ox$CKF#ZX1t~OFUQ#MESVp7tphkd
zZ;r_^7(DvDzRjv*KOpkhQ)X`kS!NmIWLy1SqC+g<Bu#!5zBx)_y6Zjdt@K`AJ>^=d
z&VXK(8$X8a3bh>KmVW7=gUUrY&OST96jd-Pk^F|VYF(A1?w_fpQoD^#O?qHd{ef>b
zlyG(@@5qVZ<L|6Zu_|x=qNiTvd`c!K9%kb9@P)4+MsG&Dg(~94w7D4}#U)@Itt!V+
z+)+Y9b8@_0@$v+?1}B{-rpn7jb3ClathR80zzF{593Jf4^x)@)dZshJuDG3dcrIQF
zlw#fk5m4W<m=%|98$q|^1{ld>5MC0~S2Adioi*mi{sc|D4qS-2yPH(AH~Q|1&%{Mj
z(w)^b#|pDr6GLcKmZls$ZzhN<AUSzX^gDO51cM*oXo!z!wmAJPzG`)wIz>_yvzQLU
zh&cv%Mj*B!77L^z7sC~sa?0_dDseoL;qCy=$hhixiuQk`f;5fx7<h};E8BL_=T>4I
zG7CA?3M^*bE#?gMulU5Zdkw4lI5VJVOT|ADG;|4u_8VKLYOh?Vm<)N(9FGl89!(Rk
z4Wr;X-xF;FIIdt$WZJizYTgYdA>!d<3y^0RHBf;VbNmEo|M_b&-)xL2uskgar)akp
zq`NW;8L|r{k&8@CHT|%WAaK@)`?mwp0jO3o&4~Y~ZAeqJrUJ1H0nYQ1Ja2v_1AV&#
zxu~4<N5i78w@gg!YUEz6Y4@;W;x|!QN5Ild6TQ}sDO$KW#z}0lxYg_ybs~{NVC2d(
z?#S+)&sa^{pZEfAs5=_pa(r^L$!RYcXO%WRQw-?J+Bl{|qdG^Gn$pA0w!yb0OZVZA
zq%8G1Ho2<5fe2xbhuOJJxP$4zRyg9JjuXW={XA|Zn`?UNXGJuF9;FrUad%@vt^;S`
zA0aOfuOwa6`7>HL$a-1!A4~Hn&1;tA(l0>${5k=R^5TC~q0nKb7!Co0tP?p5;MrvJ
zl)_BLyi9QN<WNrD7Eya9!1EUa@i_?(Z7Q0W-0$d>U2@<fD7t!blnHZ=61XDY&af@E
zZbUR&?nOXO%atGX({P}YzmkJpc-)yh<npZFOoH||Fb5gRYXyE8m+r@n34us&1QtkV
z!pzT;fblS&!-A$R7CacCja4u+-}u8mvc<}9duxRaKc!veXD#1B$q(=8+iLnzLb(QU
z{GB^JDw)+>4aC3S)O`KTwLF+#V@171%i^s*W;Z#HFp2SBX$W<oj?INq^bCqR@M3kK
zhvj-3s5`%4jxoPA9A<ctsAjt?)B+!5yi&B`{;DD{yAXN1-|D>SkTu~F*l8gTB0CQX
z7psUG1xjmP>z+8pFsD^kd87|}kq&8FWL`laLoLkhkhI`kvIb=ox-Q}o#Q?IO!w*&K
zkdioTR*lG@Es|#mF@TEDPS9_d`H|mN^Au`TQkV@)bx4}P#K3u7Q8}y;)&U3lU*+i6
zf42!w@p%ak`tCG+>RhEWjN~spjH8c<&3xdk%%7uau)Y2)ub7Bkv+cs#wie(hDAS|?
z$}b$iU)PKYFqq~Amy28Asgt`d4g*W7pr|99Ec2#1++osJ5OrJI<`!%Jj1-O}XGO?e
zf!iQLN7ZHdf;RF2&^;%-4*c34mgUc`h=J~iy}PC-$=%bZpuq#9i0lo4|HRL;Zd{??
zF_V@0y$|spu-RD<_&OKH0ZlK7%M2{PZzr4kcS1d~GCf7rvm2^8WuDfd7a|<nYsaTq
zRc{~IOWTsA_BHi9zBu_O&b&9rU=cv&iQ+wHPX#DiutjHGI=u$=RwFKLSR5&`U20Fi
zM;!jxnM2Pc=aKFCGGW&x+M8vY%A=XX9)3~Ae{G795`uF@TFcy?UIA~6q&t?zjKuj5
z_aJMlndN(dE_cPg_Be|0?WvBhOSk}==3BJt3H^(4VPU?=*XM@**>?0VUV0-p&TK0M
z9FlS89X)=Si^*U&9!b^UB#HS~G|V%acN7a?q~#zy4_5N>aCCnkEFL|NbHyn3YQjlc
zBIDLH1T%64yEVAImZYMW2%8-ahaTyQr714}RuF@&-YcX4ZAEBlEz${<2QV3d3J=hG
zO(UTu`d@2Ju=FGTmm*FT=|oAA>J~5_n=RM#E<J}I!Eh&XE<St(dCcXagvx(8u3=R4
z;?&X_vI1nO4%iaXu;%{9t?atnLj(K!RQH2RKqXqHvuALv+mWlt7C`R!IDRa>eO5NP
z=j)A3+y}<EtIla%3VW?{FxwOY#I+L7^~l30<nZuUu4fK4RAR}r7rP_K4sfi95<#xd
zkv=PD+!{c>YN)2HCt2Q5&kd(>{co<F%MPeDByS%|*?<`-M>?mvpWf>=^{*H!Ic_V4
z6RSciqB#%-!!<!Os+9J*HVHzPK0r_NE4>iFmZ^^;@+%fnb?Sx<87_#BWee;0PG>(h
zTv#X`UY>fuPDlm-0G35tL<o$d0e)uV6FH!_F|7bxk~qEwaJV%Pm4Q*~{NAKRbuBlM
zn`X$m)aUO11cEj`$2HmE{5dTjt*$D{ntzj(mH9e05hzpqGQh+2j`3;JzT}pLqp^Fz
zw&E0qf)%kKPi40CP6)g-jYPMSs2wY5YVG+=KZLJvsTQv(Bp(pxUtX0VJyI<k#<C0D
zm~g1o1UK83=a*nyAaPx|Yb~!UaX4LN9AmS9K#x|}b2bV^zzjzB2L|KG$IKXkKSa>9
z+q+`819k5-%aW$GIF>qWAA+h0qbim~WtBK{>-|XT*766p*+#@k$jX}4>;0JJceMqy
zz9+lilEp4G_?8#1!~t@EO~5fj4YM4vm~UGqLXCIo8A*9YXjkU6!GX+?V~x;RY?U==
zuXSDB7(#!8QcnZxeBTbeF*l>BMe}Zvj3d$&umB<z!MJzlHbe2iJ2>YTkTd$U&1?CV
z%lpbE<+#36t*ou&JRP{Wzl3nd)G{0$;jkgRj2X#ohbjPlz*65nHouR4sSDtzD6aAC
zQPz7opFLdn^+*PNID%^Xu*am*!GR+fqVD+?bo}xOqYj(kL8nTsyer6mkHTS3V2xtB
z9y*=fXo=m56Ow<lg>{6lEl0ZdGNPa@+wpb;7S@Sa7o<A?rLDQ%TFY%<6-UcU{W2Xy
z1!t#lp3~NW$(Mksd-3QIwnwnRkh3l{QOHANv<83Qnw4qCqeQ6dne7@V?{=Fc$tb{e
zhbEbJYnBqLfUR?%hh@HYV4A@c6!15B3`AeC?6vIM6FXofyYLizbFyCb#P7jSE=&AQ
zUz<<dnuB@RyAr<#PW4q9Wi%Y#Rtl@4>opvjgNK12fcWG%MqGxpn+oXXa5|IT?h13h
zBfayeB{KTsi$l$550U^;^T+NhaT3B*`d~5ik+?@RdgP~waU!WzTdKBzP`&lBBIMyu
z=55I(Av~7GIx9b3lnWR4)pjIjMp!$rpdn-x19xorwyoPeAVPn@mt5ha|41J0w$Mu4
zr^=6k6coQ1In`a!oJ60s;^cB7^x|w>w?$OUUWQOw62hi~IFo<2Z7h4kbOT_l4$hX1
zMsU|maNBmT5`VSmXwU`gQyKe}1vo6_t$4gE?{Sdkoxs0qqXy7d4Z}`~u42jiPs&->
zwC2$Mp5fspvv?zGo-+n4eWLd;9uSc~?1x3v<(v`TH|Y;>Te2{Mg$lK^Sk>ye1z;H{
zz7<EG?tHxZ*xLLewcLF7ku`H8EoSKgMV-wB=u3F=X+O;z>NEHAc|yhPX|_Qfc)sXr
z8cZg>XgrSGHghnjeoPpz+@ZaYK1Sw4|FY$ee#BthW|%nyEkZ^IOBIMF<^oz-`*g@!
zLkhJ1mw>Vv1BWHm*gNmC;!sr!6z4my0R=PAJhC;F5tWRw9-0M2C-ecH<d0-(70l>+
z0QJfW|KpJ6hBIL>5Kx(iX@jEJ3dm8O?}_Mf+aD!5js{PqF$!4(^gh!v%vt~`^<i|1
zMm{(U2x|n>FM2=^W$Qtum3!g%!5=Xu<`VYq)#{yNdndPG|L<D_)<t`bfayu>I85qQ
zI+kw+VXH?{m=byD)%+pJHpdC}WKQPRhTP?gxO|3FG^Y$F7J-Ud=`_*$_Sc4B-#r%6
zwHa^L#KCtI?FuAgi{S>VJ4#V_0=iob)G|-402KR4Vm4znOtkN9BzFW0K4^NWyfEuD
zW6@e42GXi-%A!tT#%JTkU-c11cgvN*YT9>6`oTeOXI?x)tmXoeKO&0PN83d&2A&M=
zdv1T6Hy)a2s#AuYfsIw~xjF%wmMJMKGAN#aQ}uFzoUd!fgiu{=PgJgq*~BT0=FU2+
zxwYn!0qpHmdJmul91p(Eyx#i7s6h>ub-I6=oTm}tMowzTA&f5=R>Yzq@^pGqfyLY6
zaElAL(a*Hu+*FAY^>v{UjtY@(G<S=CsFK+b@@MO6^fK&=ZhvtJJ)etaZoI10v$?^V
zKM(jQBzpdqe7}K)p`+NC$cS%JE)%|0BjOD~DUt9!`qd7Li#`vq6*&P?3nU<nli}Xl
zhm3mbP~|R{*-aAHmN~TB5IZwTo|M56+ZBMQ0AqQzl=(T`D#5KTjc@_TdZB&-kEvk`
zuV)8iU<uxWR$YMbwKm`k6NXeQ8emw4lYm%O-Y5feZh<6P^j>p!5&G78Seq<@iZ7x9
z!mfbN=vZG(d{*8L?jImI_k;C+Bx=AOTPuRv@L_Avk{n*~6sL0!k>{MTU7sv?1v5cl
zZlH>T;#RVF;H;D@KUeMc8SZnd>)Q85Kv6dmYuV|hw4WDsdF*#aK$oi(m}2P#!ffpd
zypZqTBKR!)&4g=C_xWLihcR<vDiNwC;V<UX=#U0~)<+S(`U}=t1J?1c`3?&E(XLEr
zSsLEJr5rztw7r)a(%Km2pm7&&s%~>y`Y=-}?nz}LI>&75H!G(01jZ~!-ksp+_Ie8*
z9kHg=_ZsLh`fd1-kVi`ts2BYVxHe9Kdv}R!${E3e@!SFELR7N-(!p!Ox;Y-HY}IZw
zi!1F`5~R13Pw(z|qccYIV7q$-fVkHztw6`P9U#eWXtKeGC!(=Dv!&Kv4R?A_r7=N)
z0*q*t<MtBUpbui3&2-9<Zt*sS%rlBO6f7iAmD+Jd(y3TR;96gnO9B7~CqmM^>0=0L
zA~5C@_$+*#*crF9v{}#vz^qv!vO;{_$~<(qrTI?0$cdLtp(u3EZYQ?OdIwm!j0sz!
zfhF(M;q%#QW;j)S^hY~nL|P)zdBmxl3eTOJgmW$ATZ>{oI4=Pc5$x_*B@WU5?oy03
z2`|qmUJxxX7JC$JeQ6|}Ossw3FjPG0i+a`;2%OR#mmkLQvai3+s&`bBDm;P;{}5Qm
zbLSJ$AOze{P~sWbU=N8D#3IY71o-*_>E2__Z@ReO6HL!Jnhaq`BQ3SRp-b_PPlyjc
z=$algKO*|tQ|)&YtVFPtH#yZIbya!&)j+D$Pi8?P86$b%AP0y~J@U2ou=P0*BYKa3
z?$=)Js2v;K($3DS%CqNKp>da@$^|*u7x~vMUSWirQdmoSw&81OZUc9weHFJW$<QXG
zNdHm*%>8vuzWI$0Grlu>tb{^T^XsrX;={;Tp;Fuc@gDkV=0zNdzuYZ6P<4$hzNflh
zhx&Lhm~6F+)b4CWZE&wE@p+YW27c60*bgm`lC#iUj}l2_OFSCozK%~og@O6P>t(c;
zh?_x3?+WvS{$a~^Z?!5BeP3@6{Yk|R$Dh>S@-)$r{sGJF2!#`ROMUup1op~lYq}+4
zEJs(|@#&3S7Cb(Mm52zYCR;_eq{=pB>vwbJyR>C+R7gB~=vp$-4*M>~4K|XjTg+kB
z^5~Pd1eq9Tj%zPtFz;R+wLbMF-E%=}s8b@?0>P7|ahPtL0h5?M%UUk7D$t#zV$)m=
zlvHHR3;*n*i#glz7QEn{zBcBnG~Jvy2`Gvp@!HajUAa7HSNlw?jnS%u6o@KOHpj8e
z24J+(mHjcXzUv=XZ&7O;FnpDJX7x~CcA7ygJz&Z*;i_aqqU|D!e`#Qev@Xi!y{?wR
z$PAB?CQWPW0#yaFdodtclbtq;ZtZa}@a)mI-&q&WS*4Q#kEt)DWXqVZ4R35s75SvG
zk9>x+6>!NvUM@n`03Nd!V+P}bSTv~bb;b`Q>UOfw@2>TzJ5Pk8tfD}yp*LyS27R{j
z+;w*t2*+@<7FpOa*ZdEjR40~bH;@R$2(k=Dc6|0K#dJu&6%^fhDS=cdbucT1evM53
zi&>#JS>j*|Bq|yLPjAqirtw1exo%OfpY-wVcK(V3w5+t&R^3??J+C?q(FnDel}RK`
zn}e8`={)bW+F;_Jgiu>Q(xRtF`Ykj>Q|$z1)}uy^sI(#2QG{jdo4~lgt|l4&Y)4#T
z->Tpfk*_c-MB>KI41o={mw1|@F7~ThFk5@l@>mRsYUpZfBUCw^?w#;K5xucUv2VN-
z#Fwdqfg@QPdyefM%Mo0q!K^&PL@DXhwW;DmAZdq_2d8q<$?%5r!a6I)lumDK`FBl$
z_o*&VJFN=qq5`<+xY%<uV04?{oKsbSdmjBF{d1|-3w|A505a!OI$6=jE-+0Bf7k=M
z|4-#^1+>`eO89D%$1&DFfwG1iLOHxN(nQ809Cifg3@B?3GDG-L;(d(j6jc{bQBtkU
zhF|5fv-8lb>D(L7<3%`Ph{)Gn_1F+*!)x8=<Qe8TaC;}<Lz;t+YfRPJ?^1bQqtLZs
zo3EWc7R*?e@Pjgdxj-U-P4b3*N4&M;pyzZxOEqh`X9VGSET3w)bR~UET8ABeng}H;
z>#wE75XwGbLz$H~Jw!_7_bt!sJ%0EqfcU!hu8Ch>T#A+e%XAjz{%pdvpU3#FvZK_m
z5*p15P+#nVl53lvm~r-@BdMwds^cYEji>ULi707JP2zi$CB9k{Lx_fz!~^?ql(-zA
z;nw+*VtYX@&skiSEB&VzGhEjy64*Er+!fWuSu$z6?6JrCf2?$P75>86eIp;y3qH(&
z%^WslN3?|Wq8~Z>5$<fW+n#wq*wW5Be$c9MK)zr(6833xTB=z11sS$P=JbwvD5Lg;
z*zmWGjTp+#OkqQ(=0#a5pRuU7sg*V4=)?DF%z#1=ri<Tkfm+&KkKn%tzp)Q-`-LQe
z3p{NMM>H<yV#`T@RSEf5v!y4aLsqNn#oL@A$KS|V)q(!(kY_&EgSByG71ukZ4y3Rc
zNy3G7IUF^$s5CY9kHzOH>5ch_6)5W__;8HuKpzTqqpi5S5D|}aUgwNlct;T7{5rEJ
z!7tE^Su??j`asLKYCYRioF#y@<ymxb=}!_uNoO1g&%SOc68hMg)}+%`3bTK>R7dWG
zx(dmc-_xs`Wb>F2PNaSs{x0P_FW&EPVq;lDf_~Xgj%-jdM>)Q;QdM$>34K+t)Y&^2
z*XiBh-B)clVoPR53$lSc$B;@;w{`a9Z9Omf@nIm~lGY6ooE)SVD4+ur{lRMKc&>ca
z{{^0N2mC=u<2T&syxt-457Jp9iqQhN90f|sFO*gyQ9B)%D!u$yTWrBvhK&jN68qV@
zyeI{zP6)fav!txVo7ivtjVPU00g^b=k<U7;xP3C{_oAR6<^Vm5Ex1$SfW+JN?TCC=
zgZyRZBG1#j;$tH~xu_CQ33<+jXRx6d{}R1+C=Wod`+9NORsWD|gnWg7qj$U)64lH4
zqs{D@YxtC9NYLiFwK`%^K7wXa9gRK3t7p%K<ND*;T_ykp=)%sk{wJmR=PyOO(jX<I
z<95AuFyh3y|3|4?ZkG|Rx~l(wvZDg4c6#8v&w^Jyh9J>2w&ne7^bEHpnG;vrHQoT2
z%u~V^PWAL3Vc=OK2`cR>*sQ81u481Tg;%%NF2>E^pi<fL4IgYE>XXGe+p~so;zE`1
zNRY79aOm%+S$%~o@``Z7np~UA$OG1lxy9s|Vgy*G8B(<2$#`7jcQ|elWhLsdc7KKQ
zJgElqwO~56`}?JAcW57$ZC}Y-W1;)vvpyE|H&q~0_esKK%UbPNo7K%O8aXHxY#w^k
zAdDHpQ;6V5n_wfCtc_4Rk;3!!@hpu<v-Afd#9$4oZTBY&{HYn|<P{X@NC{!0hK%NM
zKDfsKX}|P83ChDIRgJq&o%gUhrkyUVuN}~4-YbK>t2Ly%Cu@~srwk|~p-oJ%*_{T1
z7pcmGM?ypb3B8S>io1^B9^jf^t5LYW@CIQa!2m!z+sb3DG&x|+t8lTN<lbdkdq1gu
zy>zG1a{2E_$W94*F;nVA74qc};gAl8I~9PO?S?FJnuX>z^_jn*0i|CEBv~Do3sz-2
zKhNl8TKU^UUua|5{0mPNZ3Ou^{n3is9v6d<-GSM_ZB5)5?|sc3FJO&vZ&D)LT{$No
z{Zd-(?l4LvAXel&lM?}(H{jj!3_>}&rg)*Jk>T<1E&qvK@{a9dN4a)|7!{0Tze`U{
z^~c8{1LbAFfW7r|DDykTDtUI)lq~oI47+x6{pfFS@WPZYN(VY3{4=fa&pFJWQKfBJ
z*$t6u7%^;mg^%xg(5iYbK#z7x9Y#Gvd%-z@qG%%H3Slcv*Ci1AJKlSN)hDM7EIQao
zxv>9ZoLvlV5T-BR2m*H*dKEQ{m{e;D*w<D3PDZs4jOhn%s#4djZkKii<KrVZPgW2g
zTVVaC8zygDf?98%eQa!I(W0Ycnq$arLv*yrL(A6wYn?-*tfYBNB$N=Nhm#`$BU;b1
zDi{HsjsY4poDW&nrZY+thC!Q#%ZiY+syV+G8fj>$(@rN%yr-S(NJy?Xx6cd(DQ*|V
zm`{IR8%JY4{h3+fWQ^a&@vZ7>`MILvnyXpFOGjj;K3+*Lt~$zrpdS76RtarX^^Sxe
z9v8a_Z-0WNP=Z*=6#X7Swq-kmTtO`W`)d{8)Q6_&x%R$UITUCJC2&H=Mx~Ib*yrLi
zAyL#r`t{~#-xCI_WoO8hOt@~DLX4=2(KEuLxIqk0f{6pbROl$+$#l=dLPaBo;^rzW
z&DTHB2I;Xw42#PzdzGOM74wk*F02b&&4vQu+I!A%>uOe`l;&YhfjaFflzg8M>y<o!
z+m*}=L<{K_F1A4GNQdJdIydPW6wL7>h&DI5Uvv%7mF2EDcjgKGp2T^@w<55grHkWh
zWOrM`&eaZ_g0_xqw2aKBl>fsYYHmjh_+dJl{>%se=K9{9Ek*;qp1N}G0sD143yfQ~
zls-)TZaMg4qHHLxzf={-@p-#@VG<dw_)Ru#8G;POb+Mc^uY*~1e{ufq_MIaC!4Y(p
zI%nEn09U}R#pC#W)MFdjHIM_Vn;%TryOZ#|w<AeodxRfsyO8+xosJ`+K)CsSh~r5*
zIe})H8#G2)Om}k0Fw=O>QC1{kih>HLt+daKe9+!=S&0*{dSkH{Q0RAnRVOEozWY+$
zGxz|;FqxtpF@I+}N=oNO-7{!w2~pnJ>}|cZS_@jHF*~pZ6Dk&fusZIdx#&d^;ama%
zOt*~zAI+iI*#1sYEw-DsOiy;y<!EMQO@D0A0tr3kuth_p&}Jw1)~JhL!rNJBszEcX
zM61I?zE*Hf>`}!-siY0+N=S(xyw<bm7;}3UT7)D26~?ihjo%e|oR;KA#O16@6b1YT
zEg#&^Vf&b_d_I+_Xam@qfwtYe{LZTe5TZ$((9D1HL60YEQ~TjI)1@z2Gz{BLO>x7P
zAdXNZ0A=5S1QfS0g+nZ%#c@Z)WdckR>PQIM*|)$q|A0nVBY4Czs$z^0g0!<t`{4Ko
z^bV9Q6pj03l&T4~?&SyVPDAa>s^RQ|eP;g24k1$WnzLN?_Nm1XHf;p8N+RDG6%X?h
zM~ks8-{BwVpaZFs+l}~;30qK)RoBNiw=d;>f5UAXZ6R_<edudkLYKGZ^VlnhMEjz}
z^6#Mz$^v@<O~rw1u(<j%R9PXcB?*CAV-u?uU)cRATfN0(g4=FM)K+!vG^xI+aqwnm
zLEk|PSnm&~W)*O{frik3HH3sE+#)$w+Hm!sviaUhI3mn9=kU|7J6>d|@RkNR;9~9<
z_Nq!VE|3$Uum0{;rGUMpvcjDTV6QV=Z5e36OzeSK?eLqRg(%p6Xx$&M->Yvm_sy<w
ztGjVstVsHjDUNYEpUpf_1Qp~(V1|u1Wz_RXyCT&b9aW%=7G44dI(_V?c(s9n_KdJW
z`F>1egR-3Yvp48bR8P4&*Xa-&d4+ln7-IkFJyhJ2+g+*t^y|2`s-D$?dyrWIW%-RH
zLGKMc4zX!qNVQ2{9!>Cq#J(ia$!GFqtMN9_LdX(PbM9HQ%kbEi4?m00qa#<Xbd?zR
zr{MY>WlPO{=_h}A)WZVL!iqQ0^z)pIdEOJlHNG8o3P+nQpn79YE%7A4Nj4(0h)C{C
z^E&RK`SFZ-O^(8uX%lI98cEHl$u<%h{{d24V^+S5$q_mCdq7R7)2#|||Efkb3m8xo
zXh8l+;YfjkP)xf7bY%ZTCi^NC)_7JFfwJdrf7K&FD3_WV1A-riuhkXGu(k0czL!Bj
zWYN8NQ6L8)8@GCbf3$b!yBgy6*&m7<ic$OVXo7i2=g9Q6wx*3x<sk3JsBIkI>2Uf=
zK$sBmuxyHUIcqqM>-8YMPWIzN7pcdL?2Enw`h~V1&FC3K1W3MQ)x#e(iRFd*@A9<`
zL>Zk_fV~*zv}jMlUc7bQ8f2po-88qZ)f8C#MWU$-xcnXx3*PAPZ#&xta?iwb^#b3G
zB^4diDJ~G!<J@`V3z86W%xQNiaKzXgr%r|DR^2<>lV|P!8L>8374ldfVZ?6-OeE5*
z>pB@FbW)YhAR|Lv;8e?ZJ~&-KSn!)Ht4GadRI;y*Af^9&AAXg3f9hsZ7uos@ns@^q
zIgAAaktcfWl1)UFFv&dC;VL1~NH!fx5=hAB_G-z{l|N?^uSbI+nU?AYyOBq|ciR4k
z)jEL1&j$iN5!|xef{B%e(0^CVCq#;LjH_w@5AgwRY1=bTf;IVs<ld2WM>LmddgquK
x^zA+g4HIZlH=At%?nPslt%HMSG&kQ8Gp&%RvyWnajl%3Z##M8H#Vj0m-Qzv$#R~uc

literal 0
HcmV?d00001

diff --git a/MikroGig/20260702/20260702190305-Config.rsc b/MikroGig/20260702/20260702190305-Config.rsc
new file mode 100644
index 0000000..de192e5
--- /dev/null
+++ b/MikroGig/20260702/20260702190305-Config.rsc
@@ -0,0 +1,3155 @@
+# 2026-07-02 18:03:06 by RouterOS 7.23.1
+# software id = 2961-C4ZZ
+#
+# model = RBD52G-5HacD2HnD
+# serial number = HCX084RAVFA
+/interface bridge
+add admin-mac=18:FD:74:6E:58:14 auto-mac=no name=Bridge-LAN port-cost-mode=\
+    short
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    name=wlan1 ssid=vados wps-mode=disabled
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    name=wlan2 ssid=vados5g wps-mode=disabled
+/interface ethernet
+set [ find default-name=ether1 ] mac-address=48:8F:5A:8E:1A:BC
+/interface veth
+add address=172.19.75.210/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+    gateway=172.19.75.209 gateway6="" name=veth-awg-VDSina
+/interface wireguard
+add disabled=yes listen-port=14710 mtu=1420 name=wg-awg-VDSina
+/disk
+add mount-point-template="[tmpfs]" slot=ram tmpfs-max-size=64 type=tmpfs
+/interface list
+add name=WAN
+add name=LAN
+add exclude=LAN include=WAN name=Internet
+/interface wireless security-profiles
+set [ find default=yes ] supplicant-identity=MikroTik
+/routing table
+add disabled=no fib name=r_to_vpn
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add comment="Script for setup routeros script system" \
+    dont-require-permissions=no name=AM-setup owner=AM-setup policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-setup\r\
+    \n# Script comment: Script for setup routeros script system\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# :local ScriptName [ :jobname ];\r\
+    \n# Additional commands:\r\
+    \n#\r\
+    \n# For scripts:\r\
+    \n#:global NewScript \"script_name\"; \r\
+    \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\
+    tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \
+    \".rsc\") output=user as-value ]->\"data\");\r\
+    \n#:global NewScript (a);\r\
+    \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n#\r\
+    \n# For run from terminal:\r\
+    \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\
+    eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\
+    ut=user as-value ]->\"data\");\r\
+    \n#\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF \"LF\";\r\
+    \n#:if (\$ScriptUpdatesCRLF != false) do={\r\
+    \n#  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\
+    os\" ] do={\r\
+    \n#    if (\$ScriptUpdatesCRLF = true) do={\r\
+    \n#      /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\
+    cript;\r\
+    \n#    } else={\r\
+    \n#      /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\
+    ipt;\r\
+    \n#    }\r\
+    \n#  }\r\
+    \n#}\r\
+    \n\r\
+    \n# /import verbose=no \$ScriptName\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global SetupScript [ :jobname ];\r\
+    \n:global RemoveMe true;\r\
+    \n:global RunOnce (a);\r\
+    \n:global InitSetup true;\r\
+    \n:global tmpfs false;\r\
+    \n\r\
+    \n{\r\
+    \n  :local RmMe [:tobool \$1];\r\
+    \n\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SetupScript;\r\
+    \n  :global RemoveMe;\r\
+    \n  :global InitSetup;\r\
+    \n  :global tmpfs;\r\
+    \n\r\
+    \n  :local UrlSuffix \$Identity;\r\
+    \n  :local UrlDir \"certs/\";\r\
+    \n  :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \
+    \r\
+    \n  :local CertCommonName \"Root YE\";\r\
+    \n  :local CertFileName \"Root-YE.pem\";\r\
+    \n  :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\
+    f852f02a708aa5d5666\";\r\
+    \n\r\
+    \n  :if (\$SetupScript = false) do={\r\
+    \n    :global SetupScript \"AM-setup\";\r\
+    \n  }\r\
+    \n  :if (\$RemoveMe != false) do={\r\
+    \n    :set RemoveMe true;\r\
+    \n  }\r\
+    \n\r\
+    \n  :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\
+    \n \r\
+    \n\r\
+    \n    :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\
+    \_\\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\
+    \n          (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n         [ :len [ /certificate/builtin/find where common-name=\$CertComm\
+    onName ] ] > 0)) do={\r\
+    \n        :put \"Importing certificate...\";\r\
+    \n        /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\
+    \_as-value;\r\
+    \n        :delay 1s;\r\
+    \n        /certificate/import file-name=\$CertFileName passphrase=\"\";\r\
+    \n        /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\
+    t YE\" ];\r\
+    \n        :delay 1s;\r\
+    \n      };\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] != 1) do={\r\
+    \n      :error \"Something is wrong with your certificates!\";\r\
+    \n  };\r\
+    \n\r\
+    \n:local MkTmpfs do={\r\
+    \n  :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n  :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n    :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n      :log info (\"The tmpfs is disabled, enabling.\");\r\
+    \n      /disk/enable \$TmpFs;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log info (\"Try to removing directory 'tmpfs'.\");\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/remove tmpfs;\r\
+    \n      :return true;\r\
+    \n    } delay=100ms max=10;\r\
+    \n  } on-error={ }\r\
+    \n#  \$RmDir \"tmpfs\";\r\
+    \n  :onerror Err {\r\
+    \n    /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\
+    et total-memory ] / 3);\r\
+    \n    :do {\r\
+    \n      :retry {\r\
+    \n        /file/get tmpfs;\r\
+    \n        :return true;\r\
+    \n      } delay=222ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n    } do={\r\
+    \n      :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n#    :return true;\r\
+    \n}\r\
+    \n:if (\$tmpfs = true) do={\r\
+    \n  :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\
+    \";\r\
+    \n  :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\
+    \n    :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\
+    \n    :return \$true;\r\
+    \n  } else={\r\
+    \n    :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :log error (\$0 . \"Directory tmpfs is not created!\");\r\
+    \n      :return false;\r\
+    \n    } else={\r\
+    \n      :onerror Err {\r\
+    \n        /file/add type=\"directory\" name=/tmpfs/scripts;\r\
+    \n        :do {\r\
+    \n          :retry {\r\
+    \n            /file/get /tmpfs/scripts;\r\
+    \n            :return true;\r\
+    \n          } delay=100ms max=10;\r\
+    \n      } on-error={ }\r\
+    \n      } do={\r\
+    \n        :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\
+    Err);\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n#      :return true;\r\
+    \n#      [ /file/get \$FileName ]\r\
+    \n    }\r\
+    \n#    :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\
+    \_global variable tmpfs!\");\r\
+    \n#    :global tmpfs (a);\r\
+    \n#    return false;\r\
+    \n  }\r\
+    \n}\r\
+    \n  :put \"Renaming AM-GlobalConfig, if exists...\";\r\
+    \n  :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \
+    . [ /system/clock/get time ] . \".rsc\");\r\
+    \n  /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\
+    fig\" ];\r\
+    \n  :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\
+    \n    :put \"Installing \$Script...\";\r\
+    \n    /system/script/remove [ find where name=\$Script ];\r\
+    \n    /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\
+    h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \
+    \".rsc\")  output=user as-value ]->\"data\");\r\
+    \n    \r\
+    \n    /system/script run \$Script;\r\
+    \n    :delay 2s;\r\
+    \n  };\r\
+    \n\r\
+    \n  :local Script \"mod/AM-Certs-By-Ident\";\r\
+    \n  \r\
+    \n  :put \"Installing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n  /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \
+    check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\
+    rsc\")  output=user as-value ]->\"data\");\r\
+    \n  /system/script run \$Script;\r\
+    \n  :global tmpAddCerts;\r\
+    \n  :while ([ \$tmpAddCerts ] = true) do={\r\
+    \n    :delay 1s;\r\
+    \n  }\r\
+    \n  :delay 1s;\r\
+    \n  :put \"Removing \$Script...\";\r\
+    \n  /system/script/remove [ find where name=\$Script ];\r\
+    \n\r\
+    \n  :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \
+    ] > 0) do={\r\
+    \n    :put \"Renaming certificate by its common-name...\";\r\
+    \n    :global CertificateNameByCN;\r\
+    \n    \$CertificateNameByCN \$CertFingerprint;\r\
+    \n  };\r\
+    \n\r\
+    \n  :if (\$RemoveMe = true) do={\r\
+    \n    :put \"Add Scheduler for remove this script...\";\r\
+    \n    :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \
+    where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\
+    \"_RemoveSetup\\\" ];\\n\" . \\\r\
+    \n    \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\
+    \n    :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\
+    \";\r\
+    \n    /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\
+    time=startup interval=30s on-event=\$OnEvent;\r\
+    \n      :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\
+    . I'm leaving.\\nThere will be an error below, this is normal.\");\r\
+    \n    }\r\
+    \n    :delay 1;\r\
+    \n    :put \"Loading configuration and functions...\";\r\
+    \n    :do {      \r\
+    \n      :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\
+    \n      :put \"Normal removing temporary global environment variables.\";\
+    \r\
+    \n      :global SetupScript (a);\r\
+    \n      :global InitSetup (a);\r\
+    \n      :global RemoveMe (a);\r\
+    \n    } on-error={\r\
+    \n      :local ErrorMsg \"Loading configuration and functions error!\";\r\
+    \n      :log error (\$0 . \$ErrorMsg . :error);\r\
+    \n      :error \$ErrorMsg;\r\
+    \n    }\r\
+    \n}\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/728/bebacfc7\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 11:00:05 30.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment="Download custom Certificates By Routers Identity " \
+    dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\
+    mod/AM-Certs-By-Ident policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-Certs-By-Ident\r\
+    \n# Script comment: Download custom Certificates By Routers Identity \r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n#:local ScriptName [ :jobname ];\r\
+    \n#\r\
+    \n# CloudFlare\r\
+    \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\
+    ootCA.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\
+    \"\";\r\
+    \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\
+    G2TLSRSASHA2562020CA1-1.crt.pem;\r\
+    \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\
+    .pem passphrase=\"\";\r\
+    \n# Quad9\r\
+    \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\
+    lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\
+    \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\
+    .pem  passphrase=\"\";\r\
+    \n:global tmpAddCerts true; \r\
+    \n\r\
+    \n:global GlobalScriptsUrl;\r\
+    \n:local UrlSuffix [/system/identity/get name];\r\
+    \n:local UrlDir \"certs/\";\r\
+    \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\
+    \n\r\
+    \n:log error \$CertUrl;\r\
+    \n\r\
+    \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\
+    me=\"DigiCert Global Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root CA\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\
+    n-name=\"DigiCert Assured ID Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\
+    ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\
+    me=\"DigiCert Global Root G2\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\
+    me=\"DigiCert Global Root G3\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\
+    mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\
+    on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\
+    \n\r\
+    \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\
+    ame=\"DigiCert Trusted Root G4\" ];\r\
+    \n\r\
+    \n:set CertName \"GTS-Root-R4.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\
+    t R4\" ];\r\
+    \n\r\
+    \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \
+    where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"ISRG-Root-X1.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\
+    oot X1\" ];\r\
+    \n\r\
+    \n:set CertName \"Root-YE.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\
+    ;\r\
+    \n\r\
+    \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\
+    \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\
+    \n\r\
+    \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\
+    \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\
+    \n/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\
+    here common-name=\"USERTrust RSA Certification Authority\" ];\r\
+    \n\r\
+    \n:global tmpAddCerts (a);\r\
+    \n\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"GTS-Root-RX.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#internet\r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n#:set CertName \"ISRG-Root-X2.pem\";\r\
+    \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\
+    \r\
+    \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\
+    \n\r\
+    \n\r\
+    \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\
+    h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\
+    .com/dns-query verify-doh-cert=yes;\r\
+    \n#/ip/dns/static remove [find where address=1.1.1.1];\r\
+    \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 1\";\r\
+    \n#/ip/dns/ static remove  [find where address=1.0.0.1];\r\
+    \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\
+    ment=\"cloudflare-dns IPv4 2\"\r\
+    \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\
+    e-dns.com type=AAAA\r\
+    \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\
+    \n#/ip/dns set servers=\"\";"
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \r\
+    \n:global GlobalScriptsUrl;\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n"
+add dont-require-permissions=no name=awg2-webui owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    :put \"Download image, and save him to usb1/tmp\"\
+    \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\
+    path=usb1/tmp/awg2-webui.tar\
+    \n\
+    \n:put \"1. Create veth interface\"\
+    \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\
+    \n\
+    \n:put \"2. Create bridge and add veth\"\
+    \n/interface bridge add name=br-awg\
+    \n/interface bridge port add bridge=br-awg interface=veth-awg\
+    \n\
+    \n:put \"3. Assign IP to bridge\"\
+    \n/ip address add address=10.9.9.1/24 interface=br-awg\
+    \n\
+    \n:put \"4. NAT: masquerade container traffic\"\
+    \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\
+    ade\
+    \n\
+    \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\
+    \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\
+    er1\
+    \n\
+    \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\
+    \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\
+    \n    action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\
+    1\
+    \n\
+    \n:put \"Create environment list..\"\
+    \n/container envs add list=awgui-env key=WEB_USER value=vados\
+    \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\
+    \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\
+    mboLs2325272931q\
+    \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\
+    3\
+    \n\
+    \n:put \"Load and start container...\"\
+    \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\
+    awg2-webui \\\
+    \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\
+    \_shm-size=4M\
+    \n\
+    \n:put \"Start...\"\
+    \n/container start 0\
+    \n\
+    \n:put \"Verify...\"\
+    \n/container print\
+    \n\
+    \n:put \"Should show: status=running\"\
+    \n\
+    \n/log print where topics~\"container\"\
+    \n\
+    \n:put \"Should show: AWG started, nginx running\"\
+    \n"
+add comment=awg-VDSina dont-require-permissions=no name=awg-VDSina-uninstall \
+    owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+    \n\
+    \n  :put \"Uninstallimg AmneziaWG...\"\
+    \n\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\
+    \n\
+    \n  :local prevDNS \"\"\
+    \n\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\
+    \n\
+    \n  :local storageDisk \"disk1\"\
+    \n\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\
+    \n\
+    \n  :local prevTmpdir \"\"\
+    \n\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\
+    \n\
+    \n  }\
+    \n\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\
+    \n\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\
+    \n\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\
+    \n\
+    \n  :delay 7s\
+    \n\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\
+    \n\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\
+    \n\
+    \n  :if (\$prevDNS != \"\") do={\
+    \n\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\
+    \n\
+    \n    :put (\"DNS restored to: \$prevDNS\")\
+    \n\
+    \n  }\
+    \n\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n\
+    \n    /container/config set tmpdir=\$prevTmpdir\
+    \n\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\
+    \n\
+    \n  }\
+    \n\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\
+    \n\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \n\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\
+    \n\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\
+    \n\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\
+    \n\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\
+    \n\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\
+    \n\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \n\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\
+    \n\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\
+    \n\
+    \n  :if (\$storageDisk != \"disk1\") do={\
+    \n\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\
+    \n\
+    \n  }\
+    \n\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\
+    \n\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\
+    \n\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\
+    \n\
+    \n"
+/user group
+add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\
+    !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api"
+/container config
+set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+    registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+    amsternl
+/container envs
+add key=AWG_CLIENT_PUB list=awg-VDSina-env value=\
+    "pEKNAHuN+yRImhmL0pISjPy/kts2vE4e2TRpFa7Kdkk="
+add key=AWG_H1 list=awg-VDSina-env value=472437748-472438637
+add key=AWG_H2 list=awg-VDSina-env value=707808381-707809250
+add key=AWG_H3 list=awg-VDSina-env value=1609078552-1609079495
+add key=AWG_H4 list=awg-VDSina-env value=1012329484-1012329741
+add key=AWG_I1 list=awg-VDSina-env value=\
+    "<b 0x000100142112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>"
+add key=AWG_I2 list=awg-VDSina-env value="<r 32><t>"
+add key=AWG_I3 list=awg-VDSina-env value="<rd 16><r 24>"
+add key=AWG_I4 list=awg-VDSina-env value="<t><rc 20>"
+add key=AWG_I5 list=awg-VDSina-env value="<r 38>"
+add key=AWG_JC list=awg-VDSina-env value=9
+add key=AWG_JMAX list=awg-VDSina-env value=920
+add key=AWG_JMIN list=awg-VDSina-env value=105
+add key=AWG_LISTEN list=awg-VDSina-env value=:51820
+add key=AWG_PREV_DNS list=awg-VDSina-env value=10.30.30.33,109.107.177.79
+add key=AWG_PREV_TMPDIR list=awg-VDSina-env value=/tmp
+add key=AWG_REMOTE list=awg-VDSina-env value=109.107.177.79:55055
+add key=AWG_S1 list=awg-VDSina-env value=90
+add key=AWG_S2 list=awg-VDSina-env value=136
+add key=AWG_S3 list=awg-VDSina-env value=45
+add key=AWG_S4 list=awg-VDSina-env value=27
+add key=AWG_SERVER_PUB list=awg-VDSina-env value=\
+    "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+add key=AWG_STORAGE list=awg-VDSina-env value=usb1
+/disk settings
+set auto-media-interface=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether1
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=ether4
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/ip neighbor discovery-settings
+set discover-interface-list=Internet
+/ipv6 settings
+set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \
+    forward=no
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN wan-interface-list=WAN
+/interface list member
+add interface=ether2 list=LAN
+add interface=ether3 list=LAN
+add interface=ether4 list=LAN
+add interface=ether5 list=LAN
+add interface=wlan2 list=LAN
+add interface=wlan1 list=LAN
+add interface=ether1 list=Internet
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 endpoint-address=172.19.75.210 endpoint-port=\
+    51820 interface=wg-awg-VDSina name=peer4 persistent-keepalive=10s \
+    public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan1,wlan2 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.86/24 interface=ether1 network=10.30.30.0
+add address=172.19.75.209/30 interface=veth-awg-VDSina network=172.19.75.208
+add address=10.9.0.2 interface=wg-awg-VDSina network=10.9.0.2
+/ip dns
+set allow-remote-requests=yes servers=109.107.177.79
+/ip firewall nat
+add action=masquerade chain=srcnat src-address=10.9.9.0/24
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \
+    to-addresses=10.9.9.2 to-ports=55055
+# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN)
+add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\
+    tcp to-addresses=10.9.9.2 to-ports=443
+add action=masquerade chain=srcnat src-address=172.19.75.208/30
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip hotspot walled-garden
+add server=*1
+add server=*1
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
+    ether1 routing-table=main scope=30 target-scope=10
+add comment=awg-VDSina-dns distance=1 dst-address=109.107.177.79/32 gateway=\
+    wg-awg-VDSina
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24 disabled=yes
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set graphs-plain=no rest-plain=no webfig-plain=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required \
+    strong-crypto=yes
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=109.107.177.79 interface=*A type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes
+/system clock
+set time-zone-name=Europe/Amsterdam
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroGig
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=10.30.30.81
+add address=10.30.30.10
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment=Generator name=awg-VDSina on-event="# ============================\
+    ================================\r\
+    \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+    \n# 2026-07-01 00:03:43\r\
+    \n# ============================================================\r\
+    \n\r\
+    \n# 0. Check prerequisites\r\
+    \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+    = 0) do={\r\
+    \n  :put \"Container package is not installed or disabled. Install it and \
+    reboot.\"\r\
+    \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+    \n}\r\
+    \n\r\
+    \n# Auto-detect storage\r\
+    \n:global awgDisk \"disk1\"\r\
+    \n{\r\
+    \n  :local usbFree 0\r\
+    \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+    } on-error={}\r\
+    \n  :if (\$usbFree > 0) do={\r\
+    \n    :set awgDisk \"usb1\"\r\
+    \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+    \r\
+    \n  } else={\r\
+    \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+    \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+    \n      :put \"Press 'y' to confirm:\"\r\
+    \n      :local key [/terminal/inkey timeout=30]\r\
+    \n      :if (\$key = 121 || \$key = 89) do={\r\
+    \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+    \n        :delay 3s\r\
+    \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+    free] } on-error={}\r\
+    \n        :if (\$usbFree > 0) do={\r\
+    \n          :set awgDisk \"usb1\"\r\
+    \n        } else={ :put \"Format failed, using disk1\" }\r\
+    \n      } else={ :put \"Using disk1\" }\r\
+    \n    } else={ :put \"No USB, using disk1\" }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# 1. Uninstall script\r\
+    \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+    \r\
+    \n  :put \"Uninstallimg AmneziaWG...\"\r\
+    \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+    \n  :local prevDNS \"\"\r\
+    \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+    env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+    \n  :local storageDisk \"disk1\"\r\
+    \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+    ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+    \n  :local prevTmpdir \"\"\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+    Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+    \n  }\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+    \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+    \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+    \n  :delay 7s\r\
+    \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+    \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+    \n  :if (\$prevDNS != \"\") do={\r\
+    \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+    \n    :put (\"DNS restored to: \$prevDNS\")\r\
+    \n  }\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    /container/config set tmpdir=\$prevTmpdir\r\
+    \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+    \n  }\r\
+    \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+    \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+    \r\
+    \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+    \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+    \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+    a\"]\r\
+    \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+    \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+    \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+    \r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+    \_} on-error={}\r\
+    \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+    out.rsc\")] } on-error={}\r\
+    \n  :if (\$storageDisk != \"disk1\") do={\r\
+    \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+    n-error={}\r\
+    \n  }\r\
+    \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+    \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+    \n}\r\
+    \n\r\
+    \n# 2. Network infrastructure\r\
+    \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+    y=172.19.75.209\r\
+    \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+    \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+    5.208/30\r\
+    \n\r\
+    \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+    \r\
+    \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+    kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+    \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+    Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+    AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+    rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+    \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+    \n\r\
+    \n# 4. Container environment variables\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+    77.79:55055\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+    438637\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+    809250\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+    09079495\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+    12329741\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+    l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+    face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+    2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+    \"\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+    \r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+    \n\r\
+    \n# 5. DNS\r\
+    \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+    n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+    \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+    g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+    \n# NOTE: replaces existing DNS configuration\r\
+    \n/ip/dns/set servers=109.107.177.79\r\
+    \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+    ce=1 comment=awg-VDSina-dns\r\
+    \n\r\
+    \n# 6. Download, create and start container\r\
+    \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+    \r\
+    \n:if (\$awgDisk != \"disk1\") do={\r\
+    \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+    \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+    ntainer/config/get tmpdir]\r\
+    \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+    \n}\r\
+    \n{\r\
+    \n  :local arch [/system/resource/get architecture-name]\r\
+    \n  :local ver [/system/resource/get version]\r\
+    \n  :local dotPos [:find \$ver \".\"]\r\
+    \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+    \n  :local endPos [:find \$rest \".\"]\r\
+    \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+    \"] }\r\
+    \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+    \n  :local suffix \"\"\r\
+    \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+    \n  :local file \"\"\r\
+    \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+    x . \".tar.gz\") }\r\
+    \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+    \".tar.gz\") }\r\
+    \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+    . \".tar.gz\") }\r\
+    \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+    \r\
+    \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+    atest/download/\$file\"\r\
+    \n  :local filePath \$file\r\
+    \n  :if (\$awgDisk != \"disk1\") do={\r\
+    \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+    \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+    \n  }\r\
+    \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+    \n    :local freeStorage 0\r\
+    \n    :if (\$awgDisk = \"disk1\") do={\r\
+    \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+    \n    } else={\r\
+    \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+    k] free] } on-error={}\r\
+    \n    }\r\
+    \n    :if (\$freeStorage < 262144) do={\r\
+    \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+    B free). Need at least 256KB.\")\r\
+    \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+    cient-disk-space\"\r\
+    \n      :error \"Insufficient disk space\"\r\
+    \n    }\r\
+    \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+    \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+    \r\
+    \n  } else={\r\
+    \n    :put (\"File already exists: \" . \$filePath)\r\
+    \n  }\r\
+    \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+    \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+    DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+    yes comment=awg-VDSina\r\
+    \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+    =veth-awg-VDSina] shm-size=4M\"] }\r\
+    \n  /file/remove \$filePath\r\
+    \n  :local freeMem [/system/resource/get free-memory]\r\
+    \n  :if (\$freeMem < 16777216) do={\r\
+    \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+    . 16MB+ recommended.\")\r\
+    \n  }\r\
+    \n  /container/start [find where interface=veth-awg-VDSina]\r\
+    \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+    }\r\
+    \n  :put \"Waiting for container to start...\"\r\
+    \n  :delay 5s\r\
+    \n  /interface/wireguard/enable wg-awg-VDSina\r\
+    \n  :put \"WireGuard interface enabled\"\r\
+    \n  :put \"Installation complete!\"\r\
+    \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+    \"\r\
+    \n  /ping 109.107.177.79 count=10 interval=1\r\
+    \n  :put \"\"\r\
+    \n  :put \"======= NEXT STEPS =======\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a single host:\"\r\
+    \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+    comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Route a subnet:\"\r\
+    \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+    \_comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Remove a route:\"\r\
+    \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+    address=8.8.8.8/32]\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Show all tunnel routes:\"\r\
+    \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+    \n  :put \"\"\r\
+    \n  :put \"  Uninstall:\"\r\
+    \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+    \n  :put \"=========================\"\r\
+    \n}\r\
+    \n\r\
+    \n# 7. Verification\r\
+    \n# /container/print\r\
+    \n# /interface/wireguard/print\r\
+    \n# /interface/wireguard/peers/print\r\
+    \n" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-date=2026-07-01 start-time=02:03:59
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
diff --git a/MikroGig/history/20260702/20260702190305-Diff-Config.rsc b/MikroGig/history/20260702/20260702190305-Diff-Config.rsc
new file mode 100644
index 0000000..219d997
--- /dev/null
+++ b/MikroGig/history/20260702/20260702190305-Diff-Config.rsc
@@ -0,0 +1,449 @@
+8a9
+> add name=br-awg
+11c12
+< # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding
+---
+> # channel: 2442/20-Ce/gn(17dBm), SSID: vados, local forwarding
+21,24c22,23
+< add address=172.19.75.210/30 container-mac-address=00:00:00:00:00:00 dhcp=no \
+<     gateway=172.19.75.209 gateway6="" name=veth-awg-VDSina
+< /interface wireguard
+< add disabled=yes listen-port=14710 mtu=1420 name=wg-awg-VDSina
+---
+> add address=10.9.9.2/24 container-mac-address=78:60:DB:55:90:E3 dhcp=no \
+>     gateway=10.9.9.1 gateway6="" mac-address=78:60:DB:55:90:E2 name=veth-awg
+2628,2719d2626
+< add comment=awg-VDSina dont-require-permissions=no name=awg-VDSina-uninstall \
+<     owner=vados policy=\
+<     ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\
+<     \n\
+<     \n  :put \"Uninstallimg AmneziaWG...\"\
+<     \n\
+<     \n  :log info \"Uninstallimg AmneziaWG...\"\
+<     \n\
+<     \n  :local prevDNS \"\"\
+<     \n\
+<     \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+<     env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\
+<     \n\
+<     \n  :local storageDisk \"disk1\"\
+<     \n\
+<     \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+<     ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\
+<     \n\
+<     \n  :local prevTmpdir \"\"\
+<     \n\
+<     \n  :if (\$storageDisk != \"disk1\") do={\
+<     \n\
+<     \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+<     Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\
+<     \n\
+<     \n  }\
+<     \n\
+<     \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\
+<     \n\
+<     \n  /ip/route/remove [find where comment=awg-VDSina-dns]\
+<     \n\
+<     \n  /container/stop [find where interface=veth-awg-VDSina]\
+<     \n\
+<     \n  :delay 7s\
+<     \n\
+<     \n  /container/remove [find where interface=veth-awg-VDSina]\
+<     \n\
+<     \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\
+<     \n\
+<     \n  :if (\$prevDNS != \"\") do={\
+<     \n\
+<     \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\
+<     \n\
+<     \n    :put (\"DNS restored to: \$prevDNS\")\
+<     \n\
+<     \n  }\
+<     \n\
+<     \n  :if (\$storageDisk != \"disk1\") do={\
+<     \n\
+<     \n    /container/config set tmpdir=\$prevTmpdir\
+<     \n\
+<     \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\
+<     \n\
+<     \n  }\
+<     \n\
+<     \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\
+<     \n\
+<     \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+<     \n\
+<     \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\
+<     \n\
+<     \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\
+<     \n\
+<     \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+<     a\"]\
+<     \n\
+<     \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\
+<     \n\
+<     \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\
+<     \n\
+<     \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+<     \n\
+<     \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+<     \_} on-error={}\
+<     \n\
+<     \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+<     out.rsc\")] } on-error={}\
+<     \n\
+<     \n  :if (\$storageDisk != \"disk1\") do={\
+<     \n\
+<     \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+<     n-error={}\
+<     \n\
+<     \n  }\
+<     \n\
+<     \n  :put \"Uninstall AmneziaWG Proxy complete!\"\
+<     \n\
+<     \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\
+<     \n\
+<     \n  /system/script/remove [find where name=awg-VDSina-uninstall]\
+<     \n\
+<     \n"
+2722a2630,2636
+> /container
+> # killed due to out of memory
+> add cpu-list=cpu1,cpu3 domain-name=vados.ru envlists=awgui-env file=\
+>     usb1/tmp/awg2-webui.tar hostname=mikronuc interface=veth-awg layer-dir=\
+>     /usb1/docker logging=yes memory-high=12.0MiB memory-max=16.0MiB name=\
+>     awg2-webui root-dir=/usb1/awg-webui shm-size=8.0MiB start-on-boot=yes \
+>     tmpfs=/tmpfs:512.0MiB:01000
+2724,2726c2638,2639
+< set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \
+<     registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\
+<     amsternl
+---
+> set layer-dir=/usb1/docker memory-high=2048.0KiB memory-max=2048.0KiB \
+>     registry-url=https://registry-1.docker.io tmpdir=/tmp username=amsternl
+2728,2753c2641,2644
+< add key=AWG_CLIENT_PUB list=awg-VDSina-env value=\
+<     "pEKNAHuN+yRImhmL0pISjPy/kts2vE4e2TRpFa7Kdkk="
+< add key=AWG_H1 list=awg-VDSina-env value=472437748-472438637
+< add key=AWG_H2 list=awg-VDSina-env value=707808381-707809250
+< add key=AWG_H3 list=awg-VDSina-env value=1609078552-1609079495
+< add key=AWG_H4 list=awg-VDSina-env value=1012329484-1012329741
+< add key=AWG_I1 list=awg-VDSina-env value=\
+<     "<b 0x000100142112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>"
+< add key=AWG_I2 list=awg-VDSina-env value="<r 32><t>"
+< add key=AWG_I3 list=awg-VDSina-env value="<rd 16><r 24>"
+< add key=AWG_I4 list=awg-VDSina-env value="<t><rc 20>"
+< add key=AWG_I5 list=awg-VDSina-env value="<r 38>"
+< add key=AWG_JC list=awg-VDSina-env value=9
+< add key=AWG_JMAX list=awg-VDSina-env value=920
+< add key=AWG_JMIN list=awg-VDSina-env value=105
+< add key=AWG_LISTEN list=awg-VDSina-env value=:51820
+< add key=AWG_PREV_DNS list=awg-VDSina-env value=10.30.30.33,109.107.177.79
+< add key=AWG_PREV_TMPDIR list=awg-VDSina-env value=/tmp
+< add key=AWG_REMOTE list=awg-VDSina-env value=109.107.177.79:55055
+< add key=AWG_S1 list=awg-VDSina-env value=90
+< add key=AWG_S2 list=awg-VDSina-env value=136
+< add key=AWG_S3 list=awg-VDSina-env value=45
+< add key=AWG_S4 list=awg-VDSina-env value=27
+< add key=AWG_SERVER_PUB list=awg-VDSina-env value=\
+<     "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+< add key=AWG_STORAGE list=awg-VDSina-env value=usb1
+---
+> add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443
+> add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q
+> add key=WEB_PASS list=awgui-env value=zoomzoomrulezz
+> add key=WEB_USER list=awgui-env value=vados
+2763a2655,2660
+> add bridge=*D interface=*C
+> add bridge=*F interface=*E
+> add bridge=*11 interface=*10
+> add bridge=*13 interface=*12
+> add bridge=*15 interface=*14
+> add bridge=br-awg interface=veth-awg
+2781,2784d2677
+< /interface wireguard peers
+< add allowed-address=0.0.0.0/0 endpoint-address=172.19.75.210 endpoint-port=\
+<     51820 interface=wg-awg-VDSina name=peer4 persistent-keepalive=10s \
+<     public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU="
+2793,2794c2686
+< add address=172.19.75.209/30 interface=veth-awg-VDSina network=172.19.75.208
+< add address=10.9.0.2 interface=wg-awg-VDSina network=10.9.0.2
+---
+> add address=10.9.9.1/24 interface=br-awg network=10.9.9.0
+2796c2688
+< set allow-remote-requests=yes servers=109.107.177.79
+---
+> set allow-remote-requests=yes servers=10.30.30.33,109.107.177.79
+2805d2696
+< add action=masquerade chain=srcnat src-address=172.19.75.208/30
+2828,2829d2718
+< add comment=awg-VDSina-dns distance=1 dst-address=109.107.177.79/32 gateway=\
+<     wg-awg-VDSina
+2885,3152d2773
+< add comment=Generator name=awg-VDSina on-event="# ============================\
+<     ================================\r\
+<     \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\
+<     \n# 2026-07-01 00:03:43\r\
+<     \n# ============================================================\r\
+<     \n\r\
+<     \n# 0. Check prerequisites\r\
+<     \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \
+<     = 0) do={\r\
+<     \n  :put \"Container package is not installed or disabled. Install it and \
+<     reboot.\"\r\
+<     \n  :error \"Usage: /system/device-mode/update container=yes\"\r\
+<     \n}\r\
+<     \n\r\
+<     \n# Auto-detect storage\r\
+<     \n:global awgDisk \"disk1\"\r\
+<     \n{\r\
+<     \n  :local usbFree 0\r\
+<     \n  :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \
+<     } on-error={}\r\
+<     \n  :if (\$usbFree > 0) do={\r\
+<     \n    :set awgDisk \"usb1\"\r\
+<     \n    :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\
+<     \r\
+<     \n  } else={\r\
+<     \n    :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\
+<     \n      :put \"USB found but not mounted. Format as ext4\?\"\r\
+<     \n      :put \"Press 'y' to confirm:\"\r\
+<     \n      :local key [/terminal/inkey timeout=30]\r\
+<     \n      :if (\$key = 121 || \$key = 89) do={\r\
+<     \n        /disk/format-drive usb1 file-system=ext4 label=usb1\r\
+<     \n        :delay 3s\r\
+<     \n        :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \
+<     free] } on-error={}\r\
+<     \n        :if (\$usbFree > 0) do={\r\
+<     \n          :set awgDisk \"usb1\"\r\
+<     \n        } else={ :put \"Format failed, using disk1\" }\r\
+<     \n      } else={ :put \"Using disk1\" }\r\
+<     \n    } else={ :put \"No USB, using disk1\" }\r\
+<     \n  }\r\
+<     \n}\r\
+<     \n\r\
+<     \n# 1. Uninstall script\r\
+<     \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\
+<     \r\
+<     \n  :put \"Uninstallimg AmneziaWG...\"\r\
+<     \n  :log info \"Uninstallimg AmneziaWG...\"\r\
+<     \n  :local prevDNS \"\"\r\
+<     \n  :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\
+<     env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\
+<     \n  :local storageDisk \"disk1\"\r\
+<     \n  :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\
+<     ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\
+<     \n  :local prevTmpdir \"\"\r\
+<     \n  :if (\$storageDisk != \"disk1\") do={\r\
+<     \n    :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\
+<     Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\
+<     \n  }\r\
+<     \n  /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\
+<     \n  /ip/route/remove [find where comment=awg-VDSina-dns]\r\
+<     \n  /container/stop [find where interface=veth-awg-VDSina]\r\
+<     \n  :delay 7s\r\
+<     \n  /container/remove [find where interface=veth-awg-VDSina]\r\
+<     \n  /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\
+<     \n  :if (\$prevDNS != \"\") do={\r\
+<     \n    :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\
+<     \n    :put (\"DNS restored to: \$prevDNS\")\r\
+<     \n  }\r\
+<     \n  :if (\$storageDisk != \"disk1\") do={\r\
+<     \n    /container/config set tmpdir=\$prevTmpdir\r\
+<     \n    :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\
+<     \n  }\r\
+<     \n  /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\
+<     \n  /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\
+<     \r\
+<     \n  /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\
+<     \n  /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\
+<     \n  /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\
+<     a\"]\r\
+<     \n  /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\
+<     \n  /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\
+<     \n  :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\
+<     \r\
+<     \n  :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\
+<     \_} on-error={}\r\
+<     \n  :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\
+<     out.rsc\")] } on-error={}\r\
+<     \n  :if (\$storageDisk != \"disk1\") do={\r\
+<     \n    :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\
+<     n-error={}\r\
+<     \n  }\r\
+<     \n  :put \"Uninstall AmneziaWG Proxy complete!\"\r\
+<     \n  :log info \"Uninstall AmneziaWG Proxy complete!\"\r\
+<     \n  /system/script/remove [find where name=awg-VDSina-uninstall]\r\
+<     \n}\r\
+<     \n\r\
+<     \n# 2. Network infrastructure\r\
+<     \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\
+<     y=172.19.75.209\r\
+<     \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\
+<     \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\
+<     5.208/30\r\
+<     \n\r\
+<     \n# 3. WireGuard interface (MikroTik derives the public key automatically)\
+<     \r\
+<     \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\
+<     kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\
+<     \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\
+<     Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\
+<     AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\
+<     rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\
+<     \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\
+<     \n\r\
+<     \n# 4. Container environment variables\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\
+<     \r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\
+<     77.79:55055\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\
+<     438637\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\
+<     809250\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\
+<     09079495\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\
+<     12329741\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\
+<     l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\
+<     face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"<b 0x00010014\
+<     2112a442><r 12><b 0x80220008636f7475726e2d3480280004><r 4>\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"<r 32><t>\"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"<rd 16><r 24>\
+<     \"\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"<t><rc 20>\"\
+<     \r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"<r 38>\"\r\
+<     \n\r\
+<     \n# 5. DNS\r\
+<     \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\
+<     n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\
+<     \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\
+<     g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\
+<     \n# NOTE: replaces existing DNS configuration\r\
+<     \n/ip/dns/set servers=109.107.177.79\r\
+<     \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\
+<     ce=1 comment=awg-VDSina-dns\r\
+<     \n\r\
+<     \n# 6. Download, create and start container\r\
+<     \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\
+<     \r\
+<     \n:if (\$awgDisk != \"disk1\") do={\r\
+<     \n  :local tmpPath (\$awgDisk . \"/pull\")\r\
+<     \n  /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\
+<     ntainer/config/get tmpdir]\r\
+<     \n  /container/config set tmpdir=\$tmpPath memory-high=200M\r\
+<     \n}\r\
+<     \n{\r\
+<     \n  :local arch [/system/resource/get architecture-name]\r\
+<     \n  :local ver [/system/resource/get version]\r\
+<     \n  :local dotPos [:find \$ver \".\"]\r\
+<     \n  :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\
+<     \n  :local endPos [:find \$rest \".\"]\r\
+<     \n  :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \
+<     \"] }\r\
+<     \n  :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\
+<     \n  :local suffix \"\"\r\
+<     \n  :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\
+<     \n  :local file \"\"\r\
+<     \n  :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\
+<     x . \".tar.gz\") }\r\
+<     \n  :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \
+<     \".tar.gz\") }\r\
+<     \n  :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \
+<     . \".tar.gz\") }\r\
+<     \n  :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\
+<     \r\
+<     \n  :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\
+<     atest/download/\$file\"\r\
+<     \n  :local filePath \$file\r\
+<     \n  :if (\$awgDisk != \"disk1\") do={\r\
+<     \n    :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\
+<     \n    :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\
+<     \n  }\r\
+<     \n  :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\
+<     \n    :local freeStorage 0\r\
+<     \n    :if (\$awgDisk = \"disk1\") do={\r\
+<     \n      :set freeStorage [/system/resource/get free-hdd-space]\r\
+<     \n    } else={\r\
+<     \n      :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\
+<     k] free] } on-error={}\r\
+<     \n    }\r\
+<     \n    :if (\$freeStorage < 262144) do={\r\
+<     \n      :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\
+<     B free). Need at least 256KB.\")\r\
+<     \n      :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\
+<     cient-disk-space\"\r\
+<     \n      :error \"Insufficient disk space\"\r\
+<     \n    }\r\
+<     \n    :put (\"Fetching: \$url -> \" . \$filePath)\r\
+<     \n    /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\
+<     \r\
+<     \n  } else={\r\
+<     \n    :put (\"File already exists: \" . \$filePath)\r\
+<     \n  }\r\
+<     \n  :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\
+<     \n  /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\
+<     DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\
+<     yes comment=awg-VDSina\r\
+<     \n  :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\
+<     =veth-awg-VDSina] shm-size=4M\"] }\r\
+<     \n  /file/remove \$filePath\r\
+<     \n  :local freeMem [/system/resource/get free-memory]\r\
+<     \n  :if (\$freeMem < 16777216) do={\r\
+<     \n    :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\
+<     . 16MB+ recommended.\")\r\
+<     \n  }\r\
+<     \n  /container/start [find where interface=veth-awg-VDSina]\r\
+<     \n  :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\
+<     }\r\
+<     \n  :put \"Waiting for container to start...\"\r\
+<     \n  :delay 5s\r\
+<     \n  /interface/wireguard/enable wg-awg-VDSina\r\
+<     \n  :put \"WireGuard interface enabled\"\r\
+<     \n  :put \"Installation complete!\"\r\
+<     \n  :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\
+<     \"\r\
+<     \n  /ping 109.107.177.79 count=10 interval=1\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"======= NEXT STEPS =======\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"  Route a single host:\"\r\
+<     \n  :put \"    /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \
+<     comment=awg-VDSina-tunnel\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"  Route a subnet:\"\r\
+<     \n  :put \"    /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\
+<     \_comment=awg-VDSina-tunnel\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"  Remove a route:\"\r\
+<     \n  :put \"    /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\
+<     address=8.8.8.8/32]\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"  Show all tunnel routes:\"\r\
+<     \n  :put \"    /ip/route/print where comment=awg-VDSina-tunnel\"\r\
+<     \n  :put \"\"\r\
+<     \n  :put \"  Uninstall:\"\r\
+<     \n  :put \"    /system/script/run awg-VDSina-uninstall\"\r\
+<     \n  :put \"=========================\"\r\
+<     \n}\r\
+<     \n\r\
+<     \n# 7. Verification\r\
+<     \n# /container/print\r\
+<     \n# /interface/wireguard/print\r\
+<     \n# /interface/wireguard/peers/print\r\
+<     \n" policy=\
+<     ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+<     start-date=2026-07-01 start-time=02:03:59
diff --git a/MikroMaster/20260702/20260702180002-Config.rsc b/MikroMaster/20260702/20260702180002-Config.rsc
new file mode 100644
index 0000000..362bb18
--- /dev/null
+++ b/MikroMaster/20260702/20260702180002-Config.rsc
@@ -0,0 +1,3695 @@
+# 2026-07-02 18:00:08 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/727/203f86a6\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 13:30:05 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:1 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=10.30.30.33,8.8.8.8 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\
+    !NoWG
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260702/20260702182002-Config.rsc b/MikroMaster/20260702/20260702182002-Config.rsc
new file mode 100644
index 0000000..6ffe0dd
--- /dev/null
+++ b/MikroMaster/20260702/20260702182002-Config.rsc
@@ -0,0 +1,3696 @@
+# 2026-07-02 18:20:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+#error exporting "/ip/ipsec/policy/group" (timeout)
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/727/203f86a6\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 13:30:05 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:1 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=10.30.30.33,8.8.8.8 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\
+    !NoWG
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/20260702/20260702184001-Config.rsc b/MikroMaster/20260702/20260702184001-Config.rsc
new file mode 100644
index 0000000..1b603d9
--- /dev/null
+++ b/MikroMaster/20260702/20260702184001-Config.rsc
@@ -0,0 +1,3695 @@
+# 2026-07-02 18:40:07 by RouterOS 7.23.1
+# software id = A8L5-07YF
+#
+# model = RB952Ui-5ac2nD
+# serial number = D3D50CEDCD38
+/interface bridge
+add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\
+    "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\
+    Bridge-LAN port-cost-mode=short
+/interface ethernet
+set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\
+    "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto
+set [ find default-name=ether2 ] comment=LAN-2
+set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3
+set [ find default-name=ether4 ] comment=LAN-4
+set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\
+    -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \
+    loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto
+/interface wireless
+# managed by CAPsMAN
+# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding
+set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados wireless-protocol=802.11
+# managed by CAPsMAN
+# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding
+set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \
+    ssid=vados5g wireless-protocol=802.11
+/interface wireguard
+add comment=WG listen-port=13231 mtu=1320 name=WG
+/interface list
+add include=static name=LAN
+add name=Internet
+add include=Internet name=WAN
+/interface wireless security-profiles
+set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\
+    dynamic-keys supplicant-identity=MikroTik
+/iot wiliot servers
+set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East"
+/ip dhcp-server option
+add code=12 name=HostName
+add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00"
+/ip dhcp-server option sets
+add name=HP1505n options=HostName
+add name=StartLife1 options=HostName
+add name=amsterDev options=HostName
+add name=MiTV options=HostName
+add name=miller options=HostName
+add name=amster options=HostName
+add name=garage options=HostName
+add name=domain-search-set options=domain-search-list
+add name=VADOS-LEN options=HostName
+add name=VADOS-NUC options=HostName
+add name=MikroNUC options=HostName
+add name=master options=HostName
+add name=MikroYellow options=HostName
+add name="=\"Client ID\"" options=HostName
+add name=iVados options=HostName
+/ip dns forwarders
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no
+add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \
+    verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\
+    no
+add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no
+/ip ipsec proposal
+set [ find default=yes ] disabled=yes
+/ip pool
+add name=dhcp ranges=10.30.30.83-10.30.30.254
+/ip dhcp-server
+add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \
+    dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \
+    name=masterDHCP server-address=10.30.30.81
+/ip smb users
+set [ find default=yes ] disabled=yes
+add disabled=yes name=vados
+/ipv6 dhcp-client option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=DUID value=0x00030001488f5a8e1abc
+add code=61 name=clientid
+/ipv6 dhcp-server option
+add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00"
+add code=12 name=HostName value="\$(HOSTNAME)"
+add code=61 name=CLIENT_DUID
+add code=61 name=CLIENT_MAC
+/ppp profile
+set *FFFFFFFE use-upnp=no
+/routing bgp template
+set default disabled=no output.network=bgp-networks
+/routing table
+add disabled=no fib name=To-VPN
+/system logging action
+add email-start-tls=yes email-to=vados@vados.ru name=email target=email
+/system script
+add dont-require-permissions=no name=fetchCustom owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\
+    \n\r\
+    \n#:local Script AM-setup\
+    \n;\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n\
+    \n\r\
+    \n#\
+    \n\r\
+    \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\
+    0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\
+    \n\r\
+    \n#\r\
+    \n\
+    \n#root.mnuc.backuper\
+    \n\
+    \n\r\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\
+    .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\
+    \n\
+    \n#:local Script AM-GlobalConfig;\
+    \n\r\
+    \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\
+    heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\
+    sc\")  output=user as-value ]->\"data\");\r\
+    \n\
+    \n#/usb1/mikro_bak_rsa.pub\
+    \n#:local FetchFile AM-DOHCert.rsc\
+    \n\
+    \n\r\
+    \n\r\
+    \n#\
+    \n:global MkDir;\
+    \n\r\
+    \n\
+    \n#:local FetchFile Binary.backup\
+    \n:local localDir \"\";\
+    \n\
+    \n\r\
+    \n#\$MkDir \$localDir;\r\
+    \n\
+    \n#\
+    \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\
+    \$localDir . \$FetchFile);\r\
+    \n"
+add comment="Global Config Script" dont-require-permissions=no name=\
+    AM-GlobalConfig owner=AM-GlobalConfig policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GlobalConfig\r\
+    \n# Script comment: Global Config Script\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# Warning: Dont touch this line!\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global GlobalConfReady false;\r\
+    \n#\r\
+    \n#\r\
+    \n# Global Url For Amster scripts to fetch\r\
+    \n# most be defined in AM-Init-Script or AM-setup scripts\r\
+    \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\
+    \n:global ScriptsUrlSuffix (a);\r\
+    \n:global CheckSumsVerify true;\r\
+    \n\r\
+    \n:global ScriptUpdatesCRLF true;\r\
+    \n:global CommentsInScripts true;\r\
+    \n\r\
+    \n# Debug output:\r\
+    \n:global PrintDebug true; #false;\r\
+    \n\r\
+    \n# Debug output for specific script:\r\
+    \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\
+    \n\r\
+    \n# Debug logs\r\
+    \n# Other actions (disk, email, remote or support) can be used as well.\r\
+    \n# I do not recommend using echo - use debug output instead (https://rsc.\
+    eworm.de/main/DEBUG.html#debug-output).\r\
+    \n#/system/logging/add topics=script,debug action=memory;\r\
+    \n\r\
+    \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\
+    \n:global Domain \"WORKGROUP\";\r\
+    \n\r\
+    \n:global EmailGeneralTo \"vados@vados.ru\";\r\
+    \n#:global EmailGeneralCc \"\";\r\
+    \n\r\
+    \n# \$ScriptInstallUpdate mod/notification-telegram\r\
+    \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\
+    \";\r\
+    \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\
+    \n# Use this to send notifications to a specific topic in group.\r\
+    \n#:global TelegramThreadId \"30\";\r\
+    \n# Using telegram-chat you have to define trusted chat ids (not group ids\
+    !)\r\
+    \n# or user names. Groups allow to chat with devices simultaneously.\r\
+    \n:global TelegramChatIdsTrusted {\r\
+    \n  \"454403445\"\r\
+    \n  \"-1003631309063\"\r\
+    \n  \"-5124482807\"\r\
+    \n  \"1087968824\";\r\
+    \n};\r\
+    \n#  \"-5294757340\";\r\
+    \n\r\
+    \n:global TelegramChatGroups \"(all)\";\r\
+    \n#:global TelegramChatGroups \"(all|home|office)\";\r\
+    \n\r\
+    \n:global NotificationFunctions {\r\
+    \n  \"email\"\r\
+    \n  \"telegram\";\r\
+    \n};\r\
+    \n# Toggle this to disable symbols in notifications.\r\
+    \n:global NotificationsWithSymbols true;\r\
+    \n:global TerminalColorOutput true;\r\
+    \n\r\
+    \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\
+    \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\
+    \n\r\
+    \n## Update channel. Possible values: stable, long-term, testing, developm\
+    ent\r\
+    \n:global updateChannel \"stable\";\r\
+    \n\r\
+    \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\
+    \");\r\
+    \n:global CertRenewTime 2w;\r\
+    \n:global CertRenewPass (a); #{\r\
+    \n#  \"\";\r\
+    \n#  \"v3ry-s3cr3t\";\r\
+    \n#  \"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n:global CertWarnTime 1w;\r\
+    \n:global CertIssuedExportPass (a); # {\r\
+    \n#  \"\";\r\
+    \n#  \"cert1-cn\"=\"v3ry-s3cr3t\";\r\
+    \n#  \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\
+    \n#};\r\
+    \n\r\
+    \n# Script BackupAndUpdate mode, possible values: backup,\r\
+    \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\
+    n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;).  \r\
+    \n# osupdate - Update if available and creates backups before/after update\
+    \_(ignores `forceBackup`)\r\
+    \n#               Set `forceBackup` to true to always create backups, even\
+    \_without updates\r\
+    \n# osnotify - Set `forceBackup` to always create backups on every run\r\
+    \n:global DevInfoIncludeIP true;\r\
+    \n:global BackupAndUpdateMode \"osnotify\"\r\
+    \n\r\
+    \n:global forceBackup true;\r\
+    \n:global BackupPassword \"Peskar55\";\r\
+    \n\r\
+    \n# SFTP Backup Variables\r\
+    \n:global BackupRandomDelay 0;\r\
+    \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\
+    \n:global BackupUploadUser \$Identity;\r\
+    \n:global BackupUploadPass \"root.mnuc.backuper\";\r\
+    \n\r\
+    \n:global BackupSendBinary true;\r\
+    \n:global BackupSendExport true;\r\
+    \n:global BackupSendGlobalConfig true;\r\
+    \n:global BackupSendScripts true;\r\
+    \n\r\
+    \n# Remove local file after uploading if no errors\r\
+    \n:global BackupRmLocal true;\r\
+    \n\r\
+    \n# Local Backups Root Directory \r\
+    \n:global BackupLocalRoot \"tmpfs\";\r\
+    \n\r\
+    \n# Encrypt Backup\r\
+    \n:global BackupEncrypt true;\r\
+    \n\r\
+    \n# Sensitive information in Backups\r\
+    \n:global BackupSens true;\r\
+    \n\r\
+    \n# User Export\r\
+    \n:global BackupUser true;\r\
+    \n\r\
+    \n# License Export (not for CHR, will silently skip)\r\
+    \n:global BackupLicense false;\r\
+    \n\r\
+    \n# SSH Keys\r\
+    \n:global BackupSshKeys true;\r\
+    \n\r\
+    \n# Certificate Export\r\
+    \n:global BackupCerts true;\r\
+    \n\r\
+    \n# Certificate Password\r\
+    \n:global BackupCertsPasswd \"\";\r\
+    \n\r\
+    \n# User-Manager Export\r\
+    \n:global BackupUserMan false;\r\
+    \n\r\
+    \n# The Dude Export\r\
+    \n:global BackupDude false;\r\
+    \n\r\
+    \n# User Files to export, comma-separated string or array of strings\r\
+    \n# User Files are not removed on backup\r\
+    \n# Any directory paths will be removed (/ -> _) on remote file\r\
+    \n# Nonpresent files are silently skipped\r\
+    \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\
+    \n\r\
+    \n# load functions and any custom scripts\r\
+    \n#                    [ /system/script/find where name=\"global-config-ov\
+    erlay\" ], \\\r\
+    \n#                    [ /system/script/find where name~\"^global-config-o\
+    verlay\\\\.d/.\" ]\r\
+    \n#\r\
+    \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\
+    ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\
+    \r\
+    \n#  :onerror Err {\r\
+    \n#     /system/script/run \$Script;\r\
+    \n#     } do={\r\
+    \n#       :log error (\"Loading configuration from configs and functions\"\
+    \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\
+    \n#  }\r\
+    \n#}\r\
+    \n#:log info \"\\ndevMode = \$devMode\";\r\
+    \n#:log info \"\\ndevRunning = \$devRunning\";\r\
+    \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \
+    GlobalRUN\\r\?\\n\" ] do={\r\
+    \n  :onerror Err {\r\
+    \n    /system/script/run \$Script;\r\
+    \n       } do={\r\
+    \n       :log error (\"Run script \" . [ /system/script/get \$Script name \
+    ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# signal we are ready\r\
+    \n:set GlobalConfReady true;\r\
+    \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\
+    \n"
+add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \
+    owner=AM-GlobalFunc policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    !rsc by Vados\r\
+    \n# RouterOS script: AM-GglobalFunc\r\
+    \n# Script comment: Global functions\r\
+    \n# Copyright (c) 2005-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch, scheduler\r\
+    \n:local ExitOK false;\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n#:global checkRunJob \$SriptName;\r\
+    \n#:global fixCRLF;\r\
+    \n#:if (\$fixCRLF !=  false) do={\r\
+    \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\
+    ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\
+    }\r\
+    \n#:if (\$fixCRLF !=  \"LF\") do={ /system/script/set source=[ :tocrlf [ g\
+    et \$fixScript source ] ] \$fixScript};};\r\
+    \n#}\r\
+    \n:global GlobalFuncReady false;\r\
+    \n\r\
+    \n# Git commit id & info, expected configuration version\r\
+    \n:global CommitId \"main/727/203f86a6\";\r\
+    \n:global CommitTAG \"unknown\";\r\
+    \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\
+    r: root, in 13:30:05 29.06.2026.\";\r\
+    \n\r\
+    \n# The variables are received right here.\r\
+    \n:global GlobalConfVersion 140;\r\
+    \n\r\
+    \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\
+    \n\r\
+    \n:global Identity [/system/identity/get name];\r\
+    \n:global IdentityShort [:pick \$Identity 0 18];\r\
+    \n\r\
+    \n:global devBoardName [/system/resource/get board-name];\r\
+    \n:global devMode [/system/device-mode/get mode];\r\
+    \n:global devCurArch [/system/resource/get architecture-name];\r\
+    \n:global devCurVersion [/system/resource/get version];\r\
+    \n\r\
+    \n# Variables defined in AM-GlobalConfig.rsc\r\
+    \n:global TerminalColorOutput;\r\
+    \n:global CommentsInScripts;\r\
+    \n:global DetectIpAddrDefault;\r\
+    \n:global DetectIpAddrFallback;\r\
+    \n:global updateChannel;\r\
+    \n:global Domain;\r\
+    \n:global EmailGeneralTo;\r\
+    \n:global BackupAndUpdateMode;\r\
+    \n\r\
+    \n# Single functions, without nested functions.\r\
+    \n:global MiniDateTimeStamp;\r\
+    \n:global MicroDateTimeStamp;\r\
+    \n\r\
+    \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\
+    \n:global LogPrint;\r\
+    \n\r\
+    \n# DeviceInfo and Updates\r\
+    \n:global IsCheckUpdates;\r\
+    \n:global WaitCheckUpdates;\r\
+    \n:global GetPubIp;\r\
+    \n\r\
+    \n:global GetArrDeviceInfo;\r\
+    \n:global WaitArrDeviceInfo;\r\
+    \n\r\
+    \n:global devModel;\r\
+    \n:global devRunningMode;\r\
+    \n\r\
+    \n:global devRbRevision;\r\
+    \n:global devRbSerialNumber;\r\
+    \n:global devRbVerAvail;\r\
+    \n\r\
+    \n:global runningChannelVersion;\r\
+    \n:global runningChannel;\r\
+    \n:global runningVersion;\r\
+    \n\r\
+    \n:global devBuildTime;\r\
+    \n:global ROsVerAvail;\r\
+    \n:global PkgUpdStatus;\r\
+    \n:global currentUpdateChannel;\r\
+    \n\r\
+    \n:global ScriptInstallUpdate;\r\
+    \n\r\
+    \n:global DeviceInfo;\r\
+    \n\r\
+    \n:global OldMode;\r\
+    \n\r\
+    \n:global ParseKeyValueStore;\r\
+    \n:global RandomDelay;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global EscapeForRegEx;\r\
+    \n:global CharacterMultiply;\r\
+    \n:global CharacterReplace;\r\
+    \n:global CleanFilePath;\r\
+    \n:global CleanName;\r\
+    \n\r\
+    \n:global CommitBrief;\r\
+    \n\r\
+    \n:global EitherOr;\r\
+    \n:global FormatLine;\r\
+    \n:global GetRandom20CharAlNum;\r\
+    \n:global GetRandom20CharHex;\r\
+    \n:global GetRandomNumber;\r\
+    \n:global Grep;\r\
+    \n:global IfThenElse;\r\
+    \n:global MAX;\r\
+    \n:global MIN;\r\
+    \n:global HumanReadableNum;\r\
+    \n\r\
+    \n:global IsFullyConnected;\r\
+    \n:global IsDNSResolving;\r\
+    \n:global IsTimeSync;\r\
+    \n:global IsTimeSyncCached;\r\
+    \n:global IsTimeSyncResetNtp;\r\
+    \n\r\
+    \n:global MkDir;\r\
+    \n:global RmDir;\r\
+    \n:global RmFile;\r\
+    \n:global FileGet;\r\
+    \n:global Unix2Dos;\r\
+    \n:global UrlEncode;\r\
+    \n:global WaitForFile;\r\
+    \n:global ScriptLock;\r\
+    \n:global SendTelegram;\r\
+    \n:global NotificationFunctions;\r\
+    \n:global SendNotification;\r\
+    \n:global SendNotification2;\r\
+    \n:global SymbolForNotification;\r\
+    \n:global SymbolByUnicodeName;\r\
+    \n:global ValidateSyntax;\r\
+    \n:global CheckSumsVerify;\r\
+    \n:global GlobalConfChanges;\r\
+    \n:global GlobalConfMigration;\r\
+    \n:global VersionToNum;\r\
+    \n:global RequiredRouterOS;\r\
+    \n:global ExitError;\r\
+    \n:global ExitOnError;\r\
+    \n\r\
+    \n:global FetchHugeFiles;\r\
+    \n:global FetchUserAgentStr;\r\
+    \n:global FileExists;\r\
+    \n:global CertificateAvailable;\r\
+    \n:global CertificateDownload;\r\
+    \n:global CertificateNameByCN;\r\
+    \n:global CharacterMultiply;\r\
+    \n\r\
+    \n:global InspectVar;\r\
+    \n:global InspectVarRet;\r\
+    \n:global ParseCustom;\r\
+    \n\r\
+    \n:set IsCheckUpdates do={\r\
+    \n  :local isInfo [:tobool \$1];\r\
+    \n  :global updateChannel;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\
+    \n  :local CurrentChannel [ /system/package/update/get channel ];\r\
+    \n  :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\
+    el) do={\r\
+    \n    :retry command={/system/package/update set channel=\$updateChannel} \
+    \_delay=300ms max=5 on-error={};\r\
+    \n    :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\
+    \n  }\r\
+    \n  :local Update [ /system/package/update/get ];\r\
+    \n  :local Channel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set currentUpdateChannel \$Channel;\r\
+    \n  :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\
+    \n  :local StatusPkg \"undefined\";\r\
+    \n  :log info (\$0 . \" Checking for updates...\");\r\
+    \n  :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\
+    dates without-paging as-value]->\"status\")} \\\r\
+    \n   delay=300ms max=5 on-error={};\r\
+    \n  :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\
+    \n  :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\
+    s true; } else={ :set PkgUpdStatus false; }\r\
+    \n  :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \
+    ] ];\r\
+    \n  :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n  :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\
+    \n    :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\
+    \n    :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n      :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n    }\r\
+    \n    :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\
+    kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\
+    \n    :return true;\r\
+    \n  } else={\r\
+    \n    :return \$PkgUpdStatus;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitCheckUpdates do={\r\
+    \n  :global IsCheckUpdates;\r\
+    \n  :global PkgUpdStatus;\r\
+    \n  :global currentUpdateChannel;\r\
+    \n  :global ROsVerAvail;\r\
+    \n  :global arrDeviceInfo;\r\
+    \n  :local Status \"\";\r\
+    \n  :local Update;\r\
+    \n  :local WaitCount 0;\r\
+    \n  :if ([ \$IsCheckUpdates true ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n  :while ((\$Status = \"\" || \$Status = \"finding out latest version...\
+    \") && \$WaitCount < 60) do={\r\
+    \n    :delay 1s;\r\
+    \n    :set WaitCount (\$WaitCount + 1);\r\
+    \n    :set Status [ :tostr [ /system/package/update/get status ] ];\r\
+    \n   }\r\
+    \n  :set Update [ /system/package/update/get ];\r\
+    \n  :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n  :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n  :if ((\$Update->\"status\") = \"New version is available\") do={\r\
+    \n    :set PkgUpdStatus true;\r\
+    \n  } else={\r\
+    \n    :set PkgUpdStatus false;\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\
+    \n    :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\
+    \n  }\r\
+    \n  :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\
+    \n  :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \
+    do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitArrDeviceInfo do={\r\
+    \n   :global GetArrDeviceInfo;\r\
+    \n   :while ([ \$GetArrDeviceInfo ] = false) do={\r\
+    \n    :delay 1s;\r\
+    \n   }\r\
+    \n}\r\
+    \n\r\
+    \n:set GetArrDeviceInfo do={\r\
+    \n   :global LogPrint;\r\
+    \n   :global arrDeviceInfo;\r\
+    \n   :global devBoardName;\r\
+    \n   :global devModel;\r\
+    \n   :global devRunning;\r\
+    \n   :global devCurArch;\r\
+    \n   :global devRbRevision;\r\
+    \n   :global devRbSerialNumber;\r\
+    \n   :global devBuildTime;\r\
+    \n   :global runningChannelVersion;\r\
+    \n   :global runningChannel;\r\
+    \n   :global runningVersion;\r\
+    \n   :global currentUpdateChannel;\r\
+    \n   :global ROsVerAvail;\r\
+    \n\r\
+    \n   :local DeviceInfo;\r\
+    \n   :local Resource [/system/resource/get];\r\
+    \n   :local Update [ /system/package/update/get ];\r\
+    \n   :local VersionString [ :tostr (\$Resource->\"version\") ];\r\
+    \n   :local ChannelStart [ :find \$VersionString \" (\" ];\r\
+    \n   :local RouterBoard;\r\
+    \n   :local IsRouterBoard false;\r\
+    \n   :local RunningMode \"\";\r\
+    \n\r\
+    \n   :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\
+    \n   :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\
+    \n   :set runningChannelVersion \$VersionString;\r\
+    \n   :set runningVersion \$VersionString;\r\
+    \n   :set runningChannel \"\";\r\
+    \n\r\
+    \n   :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\
+    {\r\
+    \n     :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\
+    \n     :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\
+    len \$VersionString ] ];\r\
+    \n     :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\
+    \n     :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\
+    \r\
+    \n       :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\
+    \n     }\r\
+    \n   }\r\
+    \n\r\
+    \n   :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\
+    \_3] != \"x86\") do={\r\
+    \n   :do {\r\
+    \n      :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\
+    \n#     :set RouterBoard [ /system/routerboard/get ];\r\
+    \n      :if ((\$RouterBoard->\"routerboard\") = true) do={\r\
+    \n        :set IsRouterBoard true;\r\
+    \n     }\r\
+    \n   } on-error={}\r\
+    \n    }\r\
+    \n\r\
+    \n   :do {\r\
+    \n     :set RunningMode [ /system/device-mode/get mode ];\r\
+    \n   } on-error={\r\
+    \n     :do {\r\
+    \n       :set RunningMode [ /system/device-mode/get running ];\r\
+    \n     } on-error={\r\
+    \n       :set RunningMode \"\";\r\
+    \n     }\r\
+    \n   }\r\
+    \n   :set devRunning \$RunningMode;\r\
+    \n\r\
+    \n   :if (\$IsRouterBoard = true) do={\r\
+    \n     :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\
+    \n     :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\
+    \n     :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \
+    ];\r\
+    \n   } else={\r\
+    \n     :set devModel \$devBoardName;\r\
+    \n     :set devRbRevision \"\";\r\
+    \n     :set devRbSerialNumber \"\";\r\
+    \n   }\r\
+    \n\r\
+    \n   :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\
+    \n   :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\
+    \n\r\
+    \n   :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\
+    \n   :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\
+    \n   :set (\$DeviceInfo->\"model\") \$devModel;\r\
+    \n   :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\
+    \n   :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\
+    \n   :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\
+    \n   :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\
+    \n   :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\
+    ion;\r\
+    \n   :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\
+    \n   :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\
+    \n   :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\
+    \n   :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\
+    current-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\
+    upgrade-firmware\") ];\r\
+    \n   :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\
+    \n   :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\
+    alled-version\") ];\r\
+    \n   :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\
+    \n   :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\
+    ) ];\r\
+    \n\r\
+    \n   :set arrDeviceInfo \$DeviceInfo;\r\
+    \n   :return \$DeviceInfo;\r\
+    \n}\r\
+    \n\r\
+    \n:set DeviceInfo do={\r\
+    \n  :global GetArrDeviceInfo;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global FormatLine;\r\
+    \n  :global CommitBrief;\r\
+    \n\r\
+    \n  :local License [/system/license/get];\r\
+    \n  :local Snmp [ /snmp/get ];\r\
+    \n  :local Info [ \$GetArrDeviceInfo ];\r\
+    \n\r\
+    \n  :if ([ :typeof \$Info ] != \"array\") do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :return ( \\\r\
+    \n    [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\
+    \_. \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\
+    \_\\\r\
+    \n    \"Hardware:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Board\" (\$Info->\"board-name\") ] . \"\\n\" . \
+    \\\r\
+    \n    [ \$FormatLine \"    Arch\" (\$Info->\"architecture-name\") ] . \"\\\
+    n\" . \\\r\
+    \n    [ \$FormatLine \"    Model\" (\$Info->\"model\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\
+    \n      (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Serial\" (\$Info->\"serial-number\") ] . \"\
+    \\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"nlevel\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS:\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    License\" (\"level \" . (\$License->\"level\
+    \")) ] . \"\\n\") ] . \\\r\
+    \n    [ \$FormatLine \"    Channel\" (\$Info->\"package-channel\") ] . \"\
+    \\n\" . \\\r\
+    \n    [ \$FormatLine \"    Installed\" (\$Info->\"installed-version\") ] .\
+    \_\"\\n\" . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\
+    \n      ([ \$FormatLine \"    Running\" ((\$Info->\"running-version\") . \
+    \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\
+    \n      ([ \$FormatLine \"    Running\" (\$Info->\"running-version\") ] . \
+    \"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\
+    \n        (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\
+    \_\\\r\
+    \n      ([ \$FormatLine \"    Available\" (\$Info->\"latest-version\") ] .\
+    \_\"\\n\") ] . \\\r\
+    \n    [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\
+    \n        (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\
+    ) \\\r\
+    \n      ([ \$FormatLine \"    Firmware\" ((\$Info->\"current-firmware\") .\
+    \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\
+    \n    \"RouterOS-Scripts:\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\
+    \n    [ \$FormatLine \"    Version\" \$GlobalConfVersion ]);\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\
+    tionFunctions ({})}\r\
+    \n\r\
+    \n:set GetRandom20CharAlNum do={\r\
+    \n  :global EitherOr;\r\
+    \n  :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\
+    FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\
+    \n}\r\
+    \n\r\
+    \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\
+    \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\
+    \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\
+    \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\
+    \n\r\
+    \n:global checkRunJob;\r\
+    \n:set checkRunJob do={\r\
+    \n  :local Script [ :tostr \$1 ];\r\
+    \n  :global ScriptLock; \r\
+    \n  :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\
+    \n  :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\
+    :set Job [ /system/script/job/get \$Job ];\r\
+    \n    :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\
+    stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\
+    \n     :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\
+    lse; \r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVar do={\r\
+    \n  :global InspectVarRet;\r\
+    \n  :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\
+    \n}\r\
+    \n\r\
+    \n:set CommitBrief do={\r\
+    \n  :global CommitId;\r\
+    \n  :global CommitInfo;\r\
+    \n  :if (\$CommitId = \"unknown\") do={\r\
+    \n    :return \"unknown\";\r\
+    \n    }\r\
+    \n  :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set InspectVarRet do={\r\
+    \n  :local Input \$1;\r\
+    \n  :local Level (0 + [ :tonum \$2 ]);\r\
+    \n  :global CharacterReplace;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global InspectVarRet;\r\
+    \n  :local IndentReturn do={\r\
+    \n    :local Prefix [ :tostr \$1 ];\r\
+    \n    :local Value  [ :tostr \$2 ];\r\
+    \n    :local Level  [ :tonum \$3 ];\r\
+    \n    :global CharacterMultiply;\r\
+    \n    :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\
+    fix . \"-> \" . \$Value);\r\
+    \n  }\r\
+    \n  :local TypeOf [ :typeof \$Input ];\r\
+    \n  :local Len    [ :len \$Input ];\r\
+    \n  :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\
+    \n  :if (\$TypeOf = \"array\") do={\r\
+    \n    :foreach Key,Value in=\$Input do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n        [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\
+    \n        [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    :if (\$TypeOf = \"str\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n         [ \$IndentReturn \"len\" \$Len \$Level ]);\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\
+    \n      }\r\
+    \n      :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\
+    \n        :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if (\$TypeOf != \"nothing\") do={\r\
+    \n      :set \$Return (\$Return . \"\\n\" . \\\r\
+    \n       [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\
+    \_\\\r\
+    \n        ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set GetPubIp do={\r\
+    \n    :global DetectIpAddrDefault;\r\
+    \n    :global DetectIpAddrFallback;\r\
+    \n\r\
+    \n    :local PubIpAddr false;\r\
+    \n    :local Url \$DetectIpAddrDefault;\r\
+    \n    :local JobName [ :jobname ];\r\
+    \n\r\
+    \n    :do {\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using default serv\
+    ice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \
+    detect public IP using default service: \" . \$Url . \".\")}\r\
+    \n     } on-error={\r\
+    \n      :log error (\$0 . \" Failed to detect public IP using default serv\
+    ice: \" . \$Url . \".\");\r\
+    \n      :set Url \$DetectIpAddrFallBack;\r\
+    \n      :log debug (\$0 . \" Trying to detect public IP using fallback ser\
+    vice: \" . \$Url . \"...\");\r\
+    \n       :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\
+    \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\
+    )} \\\r\
+    \n        delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\
+    \_detect public IP using fallback service: \" . \$Url . \".\")}\r\
+    \n    };\r\
+    \n    :local IpLen ([ :len \$PubIpAddr ] -1);\r\
+    \n    :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\
+    {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\
+    \n    :return \$PubIpAddr;\r\
+    \n}\r\
+    \n\r\
+    \n:set FormatLine do={\r\
+    \n  :local Key    [ :tostr \$1 ];\r\
+    \n  :local Value  [ :tostr \$2 ];\r\
+    \n  :local Indent [ :tonum \$3 ];\r\
+    \n  :local Spaces;\r\
+    \n  :local Return \"\";\r\
+    \n  :global CharacterMultiply;\r\
+    \n  :global EitherOr;\r\
+    \n  :set Indent [ \$EitherOr \$Indent 16 ];\r\
+    \n  :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\
+    \n  :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\
+    \n  :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\
+    n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\
+    \n  } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \
+    \$Return ]) ] . \$Value)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseCustom do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Start [:find [ \$Str ] [:tostr \$2]];\r\
+    \n  :local End [ :tostr \$3 ];\r\
+    \n  :local Num [ :tonum \$4 ];\r\
+    \n  :local Return;\r\
+    \n  :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\
+    \n  :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\
+    \n  :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\
+    lse={\r\
+    \n  :set End [:find \$rest \$End];\r\
+    \n  :set Return [:pick \$rest 0 \$End];\r\
+    \n  }\r\
+    \n:return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set LogPrint do={\r\
+    \n  :local Severity [ :tostr \$1 ];\r\
+    \n  :local Name     [ :tostr \$2 ];\r\
+    \n  :local Message  [ :tostr \$3 ];\r\
+    \n  :global PrintDebug;\r\
+    \n  :global PrintDebugOverride;\r\
+    \n  :global EitherOr;\r\
+    \n  :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \
+    ];\r\
+    \n  :local PrintSeverity do={\r\
+    \n  :global TerminalColorOutput;\r\
+    \n   :if (\$TerminalColorOutput != true) do={:return \$1}\r\
+    \n   :local Color { debug=96; info=97; warning=93; error=91 };\r\
+    \n   :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\
+    \n}\r\
+    \n  :local Log ([ \$EitherOr \$Name \"<unknown>\" ] . \": \" . \$Message);\
+    \r\
+    \n  :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\
+    \n    :if (\$Severity = \"debug\") do={:log debug \$Log}\r\
+    \n    :if (\$Severity = \"error\") do={:log error \$Log}\r\
+    \n    :if (\$Severity = \"info\" ) do={:log info  \$Log}\r\
+    \n  } else={:log warning \$Log; :set Severity \"warning\"}\r\
+    \n  :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\
+    erity \$Severity ] . \": \" . \$Message)}\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateAvailable do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :local UseFor     [ :tostr \$2 ];\r\
+    \n\r\
+    \n  :global CertificateDownload;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n\r\
+    \n  :if ([ :len \$UseFor ] = 0) do={\r\
+    \n    :log warning (\$0 . \"The intended use is undefined!\");\r\
+    \n    :set UseFor \"undefined\";\r\
+    \n  }\r\
+    \n  :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\
+    \n       [ /certificate/settings/get crl-download ] = true && \\\r\
+    \n       [ /certificate/settings/get crl-store ] = \"system\") do={\r\
+    \n    :log warning (\$0 . \"This system has low free flash space but \" . \
+    \\\r\
+    \n      \"is configured to download certificate CRLs to system!\");\r\
+    \n  }\r\
+    \n  :if ([ :len \$CommonName ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No CommonName given!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CertSettings [ /certificate/settings/get ];\r\
+    \n  :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\
+    \r\
+    \n        (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\
+    \n        (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\
+    \n       [ :len [ /certificate/builtin/find where common-name=\$CommonName\
+    \_] ] > 0) do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \
+    \"' not available.\");\r\
+    \n    :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\
+    ) do={\r\
+    \n    :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\
+    \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\
+    e ] ];\r\
+    \n  :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\
+    ertVal->\"skid\")) do={\r\
+    \n    :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\
+    \_= 0) do={\r\
+    \n      :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\
+    >\"CN\");\r\
+    \n      :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \
+    is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\
+    \n      :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\
+    \") ] ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateDownload do={\r\
+    \n  :local CommonName [ :tostr \$1 ];\r\
+    \n  :global ScriptUpdatesBaseUrl;\r\
+    \n  :global ScriptUpdatesUrlSuffix;\r\
+    \n  :global CertificateNameByCN;\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :log info (\$0 . \"Downloading and importing certificate with \" . \\\
+    \r\
+    \n      \"CommonName '\" . \$CommonName . \"'.\");\r\
+    \n  :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\
+    \n  :do {\r\
+    \n    /tool/fetch check-certificate=yes-without-crl mode=https http-header\
+    -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\
+    sUrlSuffix) \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n    \$WaitForFile \$FileName;\r\
+    \n  } on-error={\r\
+    \n    :log warning (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \\\r\
+    \n      \"' from repository! Trying fallback to mkcert.org...\");\r\
+    \n    :do {\r\
+    \n      :local CertSettings [ /certificate/settings/get ];\r\
+    \n      :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\
+    \_] ] = 0 && \\\r\
+    \n           !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \
+    || \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \
+    \\\r\
+    \n              (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\
+    \r\
+    \n             [ :len [ /certificate/builtin/find where common-name=\"ISRG\
+    \_Root X1\" ] ] > 0)) do={\r\
+    \n        :log error (\$0 . \" Required certificate is not available.\");\
+    \r\
+    \n        :return false;\r\
+    \n      }\r\
+    \n      /tool/fetch check-certificate=yes-without-crl mode=https http-head\
+    er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\
+    \n      url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\
+    n ({ \$CommonName }) ] \\\r\
+    \n      dst-path=\$FileName as-value;\r\
+    \n      \$WaitForFile \$FileName;\r\
+    \n      :if ([ /file/get \$FileName size ] = 0) do={\r\
+    \n        \$RmFile \$FileName;\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n    } on-error={\r\
+    \n      :log error (\$0 . \" Failed downloading certificate with CommonNam\
+    e '\" . \$CommonName . \"'!\");\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\
+    \n  :delay 1s;\r\
+    \n  \$RmFile \$FileName;\r\
+    \n  :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\
+    ) do={\r\
+    \n    /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\
+    +\\\$\") ];\r\
+    \n    :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\
+    e . \"' still unavailable!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \
+    \"_[0-9]+\\\$\") ] do={\r\
+    \n    \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CertificateNameByCN do={\r\
+    \n  :local Match [ :tostr \$1 ];\r\
+    \n  :global CleanName;\r\
+    \n  :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\
+    rint=\$Match or name=\$Match) ]->0);\r\
+    \n  :if ([ :len \$Cert ] = 0) do={\r\
+    \n    :log warning (\$0 .\" No matching certificate found.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local CommonName [ /certificate/get \$Cert common-name ];\r\
+    \n  /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileExists do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :local Type     [ :tostr \$2 ];\r\
+    \n  :global FileGet;\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={ :return false; }\r\
+    \n  :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\
+    \n  :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\
+    \_true; }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set Grep do={\r\
+    \n  :local Input  ([ :tostr \$1 ] . \"\\n\");\r\
+    \n  :local Pattern [ :tostr \$2 ];\r\
+    \n  :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\
+    }\r\
+    \n  :do {\r\
+    \n    :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\
+    \n    :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \
+    \$Line}\r\
+    \n    :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\
+    Input ] ];\r\
+    \n  } while=([ :len \$Input ] > 0);\r\
+    \n  :return [];\r\
+    \n}\r\
+    \n\r\
+    \n:set HumanReadableNum do={\r\
+    \n  :local Input [ :tonum \$1 ];\r\
+    \n  :local Base  [ :tonum \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Prefix \"kMGTPE\";\r\
+    \n  :local Pow 1;\r\
+    \n  :set Base [ \$EitherOr \$Base 1024 ];\r\
+    \n  :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\
+    \n  :if (\$Input < \$Base) do={:return \$Input}\r\
+    \n  :for I from=0 to=[ :len \$Prefix ] do={\r\
+    \n    :set Pow (\$Pow * \$Base);\r\
+    \n    :if (\$Input / \$Base < \$Pow) do={\r\
+    \n      :set Prefix [ :pick \$Prefix \$I ];\r\
+    \n      :local Tmp1 (\$Input * 100 / \$Pow);\r\
+    \n      :local Tmp2 (\$Tmp1 / 100);\r\
+    \n      :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\
+    \n      :return (\$Tmp2 . \".\" . \\\r\
+    \n          [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\
+    2 ] + 1) ] . \\\r\
+    \n          \$Prefix . \$Bin);\r\
+    \n    }\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanFilePath do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CharacterReplace;\r\
+    \n  :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \
+    \"//\" \"/\" ]; }\r\
+    \n  :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\
+    n \$Path ] ]; }\r\
+    \n  :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \
+    :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\
+    \n  :return \$Path;\r\
+    \n}\r\
+    \n\r\
+    \n:set CleanName do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\
+    stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\
+    \n      :do {:if ([ :len \$Return ] = 0) do={:error true};\r\
+    \n        :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\
+    ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\
+    \n    };\r\
+    \n    :set Return (\$Return . \$Char)};\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set RandomDelay do={\r\
+    \n  :local Time [ :tonum \$1 ];\r\
+    \n  :local Unit [ :tostr \$2 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global GetRandomNumber;\r\
+    \n  :global MAX;\r\
+    \n  :if (\$Time = 0) do={:return false}\r\
+    \n  :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \
+    [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\
+    \n}\r\
+    \n\r\
+    \n:set EscapeForRegEx do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitError do={\r\
+    \n  :local ExitOK [ :tostr \$1 ];\r\
+    \n  :local Name   [ :tostr \$2 ];\r\
+    \n  :local Error  [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$ExitOK = \"false\") do={\r\
+    \n    :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \
+    \\\r\
+    \n        \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\
+    ror\" . \\\r\
+    \n        [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \
+    \$Error) \".\" ]);\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set ExitOnError do={\r\
+    \n  :local Name   [ :tostr \$1 ];\r\
+    \n  :local Error  [ :tostr \$2 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\
+    \\\$\") \\\r\
+    \n      \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\
+    r\" . \\\r\
+    \n      [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\
+    rror) \".\" ]);\r\
+    \n}\r\
+    \n\r\
+    \n:set MiniDateTimeStamp do={\r\
+    \n    :local mikro [ :tobool \$1 ];\r\
+    \n    /system/clock;\r\
+    \n    :local vdate [get date];\r\
+    \n    :local vtime [get time];\r\
+    \n    :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\
+    \n    :local MM    [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\
+    \n    :local M     [:tonum \$MM];\r\
+    \n    :if (\$vdate ~ \".../../....\") do={\r\
+    \n        :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\
+    \n        :set M     ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\
+    PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\
+    \n        :if (\$M>12) do={:set M (\$M - 12)}\r\
+    \n        :set MM    [:pick (100 + \$M) 1 3];\r\
+    \n    }\r\
+    \n    :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\
+    \n    :local dd   [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\
+    \n    :local HH   [:pick \$vtime 0  2];\r\
+    \n    :local mm   [:pick \$vtime 3  5];\r\
+    \n    :local ss   [:pick \$vtime 6  8];\r\
+    \n    :local Return;\r\
+    \n    :if (\$mikro = true) do={\r\
+    \n      :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\
+    \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\
+    \n    } else={\r\
+    \n    :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\
+    \r\
+    \n   }\r\
+    \n   :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set WaitForFile do={\r\
+    \n  :local FileName [ :tostr  \$1 ];\r\
+    \n  :local WaitTime [ :totime \$2 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global EitherOr;\r\
+    \n  :global MAX;\r\
+    \n  :set FileName [ \$CleanFilePath \$FileName ];\r\
+    \n  :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\
+    \n  :do {\r\
+    \n    :retry {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } delay=\$Delay max=10;\r\
+    \n  } on-error={ }\r\
+    \n  :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\
+    \n    :do {\r\
+    \n      /file/get \$FileName;\r\
+    \n      :return true;\r\
+    \n    } on-error={ }\r\
+    \n    :delay \$Delay;\r\
+    \n    :set Delay (\$Delay * 3 / 2);\r\
+    \n  }\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set FileGet do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global WaitForFile;\r\
+    \n  :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local FileVal false;\r\
+    \n  :do {\r\
+    \n    :set FileVal [ /file/get \$FileName ];\r\
+    \n   } on-error={ }\r\
+    \n  :return \$FileVal;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmDir do={\r\
+    \n  :local DirName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing directory: \". \$DirName);\r\
+    \n  :local DirVal [ \$FileGet \$DirName ];\r\
+    \n  :if (\$DirVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  };\r\
+    \n  :if (\$DirVal->\"type\" != \"directory\") do={\r\
+    \n    :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\
+    ory.\");\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$DirName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\
+    : \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  };\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set RmFile do={\r\
+    \n  :local FileName [ :tostr \$1 ];\r\
+    \n  :global FileGet;\r\
+    \n  :log debug (\$0 . \" Removing file: \". \$FileName);\r\
+    \n  :local FileVal [ \$FileGet \$FileName ];\r\
+    \n  :if (\$FileVal = false) do={\r\
+    \n    :log debug (\$0 . \" ... which does not exist.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\
+    sk\") do={\r\
+    \n    :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\
+    \r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/remove \$FileName;\r\
+    \n  } do={\r\
+    \n    :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\
+    \_. \$Err); :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MkDir do={\r\
+    \n  :local Path [ :tostr \$1 ];\r\
+    \n  :global CleanFilePath;\r\
+    \n  :global FileGet;\r\
+    \n  :global RmDir;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :local MkTmpfs do={\r\
+    \n   :global WaitForFile;\r\
+    \n   :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\
+    \n   :if ([ :len \$TmpFs ] = 1) do={\r\
+    \n     :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\
+    \n       :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\
+    \n       /disk/enable \$TmpFs;\r\
+    \n      }\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :log info (\$0 . \" Creating disk of type tmpfs.\");\r\
+    \n    \$RmDir \"tmpfs\";\r\
+    \n    :onerror Err {\r\
+    \n      /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\
+    /get total-memory ] / 3);\r\
+    \n      \$WaitForFile \"tmpfs\";\r\
+    \n    } do={\r\
+    \n      :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\
+    Err);\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :set Path [ \$CleanFilePath \$Path ];\r\
+    \n  :if (\$Path = \"\") do={\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :log debug (\$0 . \" Making directory: \" . \$Path);\r\
+    \n  :local PathVal [ \$FileGet \$Path ];\r\
+    \n  :if (\$PathVal->\"type\" = \"directory\") do={\r\
+    \n    :log debug (\$0 . \" ... which already exists.\");\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\
+    \n    :if ([ \$MkTmpfs ] = false) do={\r\
+    \n      :return false;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :onerror Err {\r\
+    \n    /file/add type=\"directory\" name=\$Path;\r\
+    \n    \$WaitForFile \$Path;\r\
+    \n  } do={\r\
+    \n    :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \
+    \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\
+    \n :return \$2;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterMultiply do={\r\
+    \n  :local Str [ :tostr \$1 ];\r\
+    \n  :local Num [ :tonum \$2 ];\r\
+    \n  :if (\$Num = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set CharacterReplace do={\r\
+    \n  :local String [ :tostr \$1 ];\r\
+    \n  :local ReplaceFrom [ :tostr \$2 ];\r\
+    \n  :local ReplaceWith [ :tostr \$3 ];\r\
+    \n  :local Return \"\";\r\
+    \n  :if (\$ReplaceFrom = \"\") do={:return \$String}\r\
+    \n  :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\
+    \r\
+    \n    :local Pos [ :find \$String \$ReplaceFrom ];\r\
+    \n    :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\
+    \r\
+    \n    :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\
+    \_\$String ] ];\r\
+    \n  }\r\
+    \n  :return (\$Return . \$String);\r\
+    \n}\r\
+    \n\r\
+    \n:set IfThenElse do={\r\
+    \n  :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \
+    \$2};\r\
+    \n  :return \$3;\r\
+    \n}\r\
+    \n\r\
+    \n:set EitherOr do={\r\
+    \n  :global IfThenElse;\r\
+    \n  :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \
+    \$1 \$2 ]}\r\
+    \n  :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\
+    \_\$1 \$2 ]}\r\
+    \n# this works for boolean values, literal ones with parentheses\r\
+    \n  :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\
+    \n}\r\
+    \n\r\
+    \n:set ParseKeyValueStore do={\r\
+    \n  :local Source \$1;\r\
+    \n  :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\
+    \n    :do {\r\
+    \n      :return [ :deserialize from=json \$Source ];\r\
+    \n    } on-error={ }\r\
+    \n  }   \r\
+    \n  :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\
+    }\r\
+    \n  :local Result ({});\r\
+    \n  :foreach KeyValue in=[ :toarray \$Source ] do={\r\
+    \n    :if ([ :find \$KeyValue \"=\" ]) do={\r\
+    \n      :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\
+    \n      :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\
+    \_:len \$KeyValue ] ];\r\
+    \n      :if (\$Value=\"true\") do={:set Value true}\r\
+    \n      :if (\$Value=\"false\") do={:set Value false}\r\
+    \n      :set (\$Result->\$Key) \$Value;\r\
+    \n      } else={:set (\$Result->\$KeyValue) true}\r\
+    \n  }\r\
+    \n  :return \$Result;\r\
+    \n}\r\
+    \n:set RequiredRouterOS do={\r\
+    \n  :local Caller   [ :tostr \$1 ];\r\
+    \n  :local Required [ :tostr \$2 ];\r\
+    \n  :local Warn     [ :tostr \$3 ];\r\
+    \n  :global IfThenElse;\r\
+    \n  :global VersionToNum;\r\
+    \n  :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\
+    \\\$\")) do={\r\
+    \n    :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\
+    e/update/get installed-version ] ]) do={\r\
+    \n    :if (\$Warn = \"true\") do={\r\
+    \n      :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \
+    0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\
+    \n        \" '\" . \$Caller . \"' (at least specific functionality) requir\
+    es RouterOS \" . \$Required . \". Please update!\");\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set ValidateSyntax do={\r\
+    \n  :local Code [ :tostr \$1 ];\r\
+    \n  :global LogPrint;\r\
+    \n  :onerror Err {\r\
+    \n    [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\
+    \n  } do={\r\
+    \n    \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set VersionToNum do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :local Multi 0x1000000;\r\
+    \n  :local Return 0;\r\
+    \n  :global CharacterReplace;\r\
+    \n  :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\
+    \n  :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\
+    \n    :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\
+    \r\
+    \n  }\r\
+    \n  :foreach Value in=([ :toarray \$Input ], 0) do={\r\
+    \n    :local Num [ :tonum \$Value ];\r\
+    \n    :if (\$Multi = 0x100) do={\r\
+    \n      :if ([ :typeof \$Num ] = \"num\") do={\r\
+    \n        :set Return (\$Return + 0xff00);\r\
+    \n        :set Multi (\$Multi / 0x100);\r\
+    \n      } else={\r\
+    \n        :if (\$Value = \"zero\") do={ }\r\
+    \n        :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \
+    }\r\
+    \n        :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\
+    \r\
+    \n        :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\
+    lue * \$Multi)); }\r\
+    \n    :set Multi (\$Multi / 0x100);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptLock do={\r\
+    \n  :local Script  [ :tostr  \$1 ];\r\
+    \n  :local WaitMax [ :totime \$2 ];\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global ScriptLockOrder;\r\
+    \n  :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\
+    \n    :set ScriptLockOrder ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :local JobCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :return [ :len [ /system/script/job/find where script=\$Script ] ];\
+    \r\
+    \n  }\r\
+    \n  :local TicketCount do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :local Count 0;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \
+    + 1)}\r\
+    \n    }\r\
+    \n    :return \$Count;\r\
+    \n  }\r\
+    \n  :local IsFirstTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Check  [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if (\$Ticket = \$Check) do={:return true}\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\
+    o={:return false}\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :local AddTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Add    [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :while (true) do={\r\
+    \n      :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\
+    \n      :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\
+    \n      :delay 10ms;\r\
+    \n      :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\
+    e}\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local RemoveTicket do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :local Remove [ :tostr \$2 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\
+    \n        :set (\$ScriptLockOrder->\$Script->\$Id);\r\
+    \n        :delay 10ms;\r\
+    \n      }\r\
+    \n    }\r\
+    \n  }\r\
+    \n  :local CleanupTickets do={\r\
+    \n    :local Script [ :tostr \$1 ];\r\
+    \n    :global ScriptLockOrder;\r\
+    \n    :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\
+    \n      :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\
+    \n    }\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n  }\r\
+    \n  :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\
+    \n  :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\
+    \n    :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\
+    ist!\");\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$JobCount \$Script ] = 0) do={\r\
+    \n    \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\
+    );\r\
+    \n    :error false;\r\
+    \n  }\r\
+    \n  :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\
+    \n    :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\
+    t . \"', resetting!\");\r\
+    \n    :set (\$ScriptLockOrder->\$Script) ({});\r\
+    \n    /system/script/job/remove [ find where script=\$Script ];\r\
+    \n  }\r\
+    \n  :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\
+    \n  \$AddTicket \$Script \$MyTicket;\r\
+    \n  :local WaitInterval (\$WaitMax / 20);\r\
+    \n  :local WaitTime \$WaitMax;\r\
+    \n  :while (\$WaitTime > 0 && \\\r\
+    \n      ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\
+    \n      [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\
+    \n    :set WaitTime (\$WaitTime - \$WaitInterval);\r\
+    \n    :delay \$WaitInterval;\r\
+    \n  }\r\
+    \n  :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\
+    \n      [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\
+    \n    \$RemoveTicket \$Script \$MyTicket;\r\
+    \n    \$CleanupTickets \$Script;\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  \$RemoveTicket \$Script \$MyTicket;\r\
+    \n  \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \
+    once\" . \\\r\
+    \n    [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\
+    \_lock\" \"\" ] . \"...\");\r\
+    \n  :return false;\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification do={ :onerror Err {\r\
+    \n  :global SendNotification2;\r\
+    \n  \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\
+    \_silent=\$4 });\r\
+    \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\
+    \n}\r\
+    \n\r\
+    \n:set SendNotification2 do={\r\
+    \n  :local Notification \$1;\r\
+    \n  :global NotificationFunctions;\r\
+    \n  :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\
+    \n    (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\
+    ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolByUnicodeName do={\r\
+    \n  :local Name [ :tostr \$1 ];\r\
+    \n  :global EitherOr;\r\
+    \n  :global SymbolsExtra;\r\
+    \n  :local Symbols ({\r\
+    \n    \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\
+    \n    \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\
+    \n    \"arrow-down\"=\"\\E2\\AC\\87\";\r\
+    \n    \"arrow-up\"=\"\\E2\\AC\\86\";\r\
+    \n    \"calendar\"=\"\\F0\\9F\\93\\85\";\r\
+    \n    \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\
+    \n    \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\
+    \n    \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\
+    \n    \"cloud\"=\"\\E2\\98\\81\";\r\
+    \n    \"cross-mark\"=\"\\E2\\9D\\8C\";\r\
+    \n    \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\
+    \n    \"fire\"=\"\\F0\\9F\\94\\A5\";\r\
+    \n    \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\
+    \n    \"gear\"=\"\\E2\\9A\\99\";\r\
+    \n    \"heart\"=\"\\E2\\99\\A5\";\r\
+    \n    \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\
+    \n    \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\
+    \n    \"information\"=\"\\E2\\84\\B9\";\r\
+    \n    \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\
+    \n    \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\
+    \n    \"link\"=\"\\F0\\9F\\94\\97\";\r\
+    \n    \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\
+    \n    \"memo\"=\"\\F0\\9F\\93\\9D\";\r\
+    \n    \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\
+    \n    \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\
+    \n    \"scissors\"=\"\\E2\\9C\\82\";\r\
+    \n    \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\
+    \n    \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\
+    \n    \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\
+    \n    \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\
+    \n    \"sparkles\"=\"\\E2\\9C\\A8\";\r\
+    \n    \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\
+    \n    \"star\"=\"\\E2\\AD\\90\";\r\
+    \n    \"warning-sign\"=\"\\E2\\9A\\A0\";\r\
+    \n    \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\
+    \n  }, \$SymbolsExtra);\r\
+    \n  :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\
+    \n  :local Special {\r\
+    \n    \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\
+    \n    \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\
+    \n    \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\
+    \n    \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\
+    \n  :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\
+    \n    :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\
+    '!\");\r\
+    \n    :return \"\";\r\
+    \n  }\r\
+    \n  :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\
+    me) ] . \"\\EF\\B8\\8F\");\r\
+    \n}\r\
+    \n\r\
+    \n:set SymbolForNotification do={\r\
+    \n  :global NotificationsWithSymbols;\r\
+    \n  :global SymbolByUnicodeName;\r\
+    \n  :global IfThenElse;\r\
+    \n  :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\
+    \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\
+    \n  :local Return \"\";\r\
+    \n  :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\
+    mbolByUnicodeName \$Symbol ])}\r\
+    \n  :return (\$Return . \" \");\r\
+    \n}\r\
+    \n\r\
+    \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\
+    \n:set UrlEncode do={\r\
+    \n  :local Input [ :tostr \$1 ];\r\
+    \n  :if ([ :len \$Input ] = 0) do={:return \"\"}\r\
+    \n  :local Return \"\";\r\
+    \n  :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\
+    \n  :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\
+    %24\"; \"%25\"; \"%26\"; \"%27\";\r\
+    \n         \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \
+    \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\
+    \n         \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \
+    \"%7C\"; \"%7D\"; \"%7E\" };\r\
+    \n  :for I from=0 to=([ :len \$Input ] - 1) do={\r\
+    \n    :local Char [ :pick \$Input \$I ];\r\
+    \n    :local Replace [ :find \$Chars \$Char ];\r\
+    \n    :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\
+    ce)}\r\
+    \n    :set Return (\$Return . \$Char);\r\
+    \n  }\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsDNSResolving do={\r\
+    \n  :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsFullyConnected do={\r\
+    \n  :global IsDNSResolving;\r\
+    \n  :global IsTimeSync;\r\
+    \n  :if ([ \$IsDNSResolving ] = false) do={:return false};\r\
+    \n  :if ([ \$IsTimeSync ] = false) do={:return false};\r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set IsTimeSync do={\r\
+    \n  :global IsTimeSyncCached;\r\
+    \n  :global IsTimeSyncResetNtp;\r\
+    \n  :if (\$IsTimeSyncCached = true) do={:return true}\r\
+    \n  :if ([ /system/ntp/client/get enabled ] = true) do={\r\
+    \n    :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :local Uptime [ /system/resource/get uptime ];\r\
+    \n    :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\
+    \n      :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    }\r\
+    \n    :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\
+    \n    :log warning \"\$0 The ntp client is configured, but did not sync.\"\
+    ;\r\
+    \n    :set IsTimeSyncResetNtp \$Uptime;\r\
+    \n    /system/ntp/client/set enabled=no;\r\
+    \n    :delay 20ms;\r\
+    \n    /system/ntp/client/set enabled=yes;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\
+    \n       [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\
+    \n    :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\
+    ee license and x86.\";\r\
+    \n    :return true;\r\
+    \n  }\r\
+    \n  :if ([ /ip/cloud/get update-time ] = true) do={\r\
+    \n    :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\
+    \n      :set IsTimeSyncCached true;\r\
+    \n      :return true;\r\
+    \n    }\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n  :log debug \"\$0 No time source configured! Returning gracefully...\";\
+    \r\
+    \n  :return true;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchHugeFiles do={\r\
+    \n  :local ScriptName [ :tostr \$1 ];\r\
+    \n  :local Url        [ :tostr \$2 ];\r\
+    \n  :local CheckCert  [ :tostr \$3 ];\r\
+    \n\r\
+    \n  :global CleanName;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global GetRandom20CharAlNum;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global MkDir;\r\
+    \n  :global RmDir;\r\
+    \n  :global RmFile;\r\
+    \n  :global WaitForFile;\r\
+    \n\r\
+    \n  :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\
+    ithout-crl\" ];\r\
+    \n\r\
+    \n  :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\
+    \n  :if ([ \$MkDir \$DirName ] = false) do={\r\
+    \n    \$LogPrint error \$0 (\"Failed creating directory!\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \
+    \$GetRandom20CharAlNum ]);\r\
+    \n  :onerror Err {\r\
+    \n    /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \
+    \\\r\
+    \n      http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\
+    lue;\r\
+    \n  } do={\r\
+    \n    :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\
+    \n      \$RmFile \$FileName;\r\
+    \n    }\r\
+    \n    \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\
+    \_. \$Err);\r\
+    \n    \$RmDir \$DirName;\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\
+    \n    \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\
+    \_not show up.\");\r\
+    \n    :return false;\r\
+    \n  }\r\
+    \n\r\
+    \n  :local FileSize [ /file/get \$FileName size ];\r\
+    \n  :local Return \"\";\r\
+    \n  :local VarSize 0;\r\
+    \n  :while (\$VarSize != \$FileSize) do={\r\
+    \n    :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\
+    768 file=\$FileName as-value ]->\"data\"));\r\
+    \n    :set FileSize [ /file/get \$FileName size ];\r\
+    \n    :set VarSize [ :len \$Return ];\r\
+    \n    :if (\$VarSize > \$FileSize) do={\r\
+    \n      :delay 100ms;\r\
+    \n    }\r\
+    \n  }\r\
+    \n  \$RmDir \$DirName;\r\
+    \n  :return \$Return;\r\
+    \n}\r\
+    \n\r\
+    \n:set FetchUserAgentStr do={\r\
+    \n  :local Caller [ :tostr \$1 ];\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global CommitBrief;\r\
+    \n  :global IfThenElse;\r\
+    \n  :local Resource [ /system/resource/get ];\r\
+    \n  :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\
+    \_\$Resource->\"architecture-name\" . \\\r\
+    \n    \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\
+    CommitBrief ] . \")\");\r\
+    \n}\r\
+    \n\r\
+    \n:set ScriptInstallUpdate do={ :onerror Err {\r\
+    \n  :local Scripts    [ :toarray \$1 ];\r\
+    \n  :local NewComment [ :tostr   \$2 ];\r\
+    \n  :global InitSetup;\r\
+    \n\r\
+    \n  :global CommitId;\r\
+    \n  :global ScriptUpdatesCRLF;\r\
+    \n  :global GlobalConfVersion;\r\
+    \n  :global Identity;\r\
+    \n  :global CertificateAvailable;\r\
+    \n  :global CheckSumsVerify;\r\
+    \n  :global GlobalScriptsUrl;\r\
+    \n  :global SumsDirAndFileName;\r\
+    \n  :global GlobalScriptsUrlSuffix;\r\
+    \n  :global EitherOr;\r\
+    \n  :global FetchUserAgentStr;\r\
+    \n  :global Grep;\r\
+    \n  :global IfThenElse;\r\
+    \n  :global LogPrint;\r\
+    \n  :global ParseKeyValueStore;\r\
+    \n  :global RequiredRouterOS;\r\
+    \n  :global SendNotification2;\r\
+    \n  :global SymbolForNotification;\r\
+    \n  :global ValidateSyntax;\r\
+    \n  :global CommentsInScripts;\r\
+    \n\r\
+    \n  :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\
+    \n    \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\
+    hout.\");\r\
+    \n  }\r\
+    \n\r\
+    \n  :foreach Script in=\$Scripts do={\r\
+    \n    :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\
+    \r\
+    \n      \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\
+    \n      /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \
+    Vados\\n\" comment=\$NewComment;\r\
+    \n    }\r\
+    \n  }\r\
+    \n\r\
+    \n  :local CommitIdBefore \$CommitId;\r\
+    \n  :local GlobalConfVersionBefore \$GlobalConfVersion;\r\
+    \n  :local ReloadGlobal false;\r\
+    \n  :local DeviceMode [ /system/device-mode/get ];\r\
+    \n\r\
+    \n  :if (\$CheckSumsVerify = true) do={\r\
+    \n    :local CheckSums ({});\r\
+    \n     :do {\r\
+    \n     :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\
+    iptsUrlSuffix);\r\
+    \n      \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\
+    \r\
+    \n      :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\
+    ficate=yes-without-crl \\\r\
+    \n        http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\
+    =user as-value ]->\"data\") ];\r\
+    \n    } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\
+    \n    }\r\
+    \n\r\
+    \n  :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\
+    s\" ] do={\r\
+    \n    :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n    :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \
+    ];\r\
+    \n    :local SourceNew;\r\
+    \n\r\
+    \n    :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\
+    \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\
+    \n      :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\
+    \n      :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\
+    iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \
+    \"'!\");\r\
+    \n        }\r\
+    \n    }\r\
+    \n    :do {\r\
+    \n      :if (\$ScriptInfo->\"ignore\" = true) do={\r\
+    \n        \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\
+    e\" . \"', as requested.\");\r\
+    \n        :error true;\r\
+    \n      }\r\
+    \n      :if (\$CheckSumsVerify = true) do={\r\
+    \n        :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\
+    \n        :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\
+    ptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n             [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\
+    rce\") ] ] = \$CheckSum) do={\r\
+    \n          \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\
+    >\"name\" . \"' matches, ignoring.\");\r\
+    \n          :error true;\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\
+    \n        :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\
+    fetch\" ] = false) do={\r\
+    \n          \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\
+    ng without.\");\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :onerror Err {\r\
+    \n        :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\
+    lScriptsUrl ];\r\
+    \n        :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\
+    lobalScriptsUrlSuffix ];\r\
+    \n        :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\
+    Suffix);\r\
+    \n        \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\
+    name\") . \"' from url: \" . \$Url);\r\
+    \n        :local Result [ /tool/fetch check-certificate=yes-without-crl \\\
+    \r\
+    \n          http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\
+    ut=user as-value ];\r\
+    \n        :if (\$Result->\"status\" = \"finished\") do={\r\
+    \n          :set SourceNew [ :tolf (\$Result->\"data\") ];\r\
+    \n        } \r\
+    \n      } do={\r\
+    \n        \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\
+    al->\"name\" . \"': \" . \$Err);\r\
+    \n        :if (\$Err != \"Fetch failed with status 404\") do={\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\
+    \n          \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\
+    \?\");\r\
+    \n          /system/script/remove \$Script;\r\
+    \n          :error false;\r\
+    \n        }\r\
+    \n        :if (\$CheckSumsVerify = true) do={\r\
+    \n          :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\
+    riptInfo->\"url-suffix\") ] = 0 && \\\r\
+    \n               [ :len \$CheckSum ] = 0) do={\r\
+    \n            \$LogPrint warning \$0 (\"Added the script manually\? Skip u\
+    pdates with 'ignore=true' in comment.\");\r\
+    \n          }\r\
+    \n        }\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :len \$SourceNew ] = 0) do={\r\
+    \n        \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\
+    >\"name\") . \"'.\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :local SourceCRLF [ :tocrlf \$SourceNew ];\r\
+    \n      :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\
+    lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\
+    \n        :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\
+    \$ScriptVal->\"source\")) do={\r\
+    \n          \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\") \
+    . \"' source did not change. End of lines set to CRLF.\");\r\
+    \n          if (\$ScriptUpdatesCRLF = false) do={\r\
+    \n            :put [ :tolf \$SourceNew ];\r\
+    \n            \$LogPrint debug \$0 (\"Script '\" .  (\$ScriptVal->\"name\"\
+    ) . \"' source update end of lines to LF.\");\r\
+    \n          }\r\
+    \n        :error false;\r\
+    \n        }\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\
+    \n        \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\
+    l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\
+    );\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if (\$CommentsInScripts = true) do={\r\
+    \n         :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\
+    \_\") ];\r\
+    \n         :if ([ :len \$CommentLine ] = 0) do={\r\
+    \n           \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\
+    iptVal->\"name\") . \"' for comment in script body, is not found result Ig\
+    noring!\");\r\
+    \n           :error false;\r\
+    \n         } else={\r\
+    \n           :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\
+    ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\
+    ] + 2) [ :len \$CommentLine] ]) do={\r\
+    \n             \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\
+    \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\
+    ;\r\
+    \n             :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\
+    ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\
+    \n             \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\
+    omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\
+    ded!\");\r\
+    \n           } else={\r\
+    \n             \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\
+    al->\"name\") . \"' did not change.\");\r\
+    \n             :error false;\r\
+    \n           }\r\
+    \n         }   \r\
+    \n      }\r\
+    \n\r\
+    \n      :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\
+    \"\\23 requires RouterOS, \") ] ]->version);\r\
+    \n      :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\
+    \_false ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires RouterOS \" . \\\r\
+    \n            \$RequiredROS . \", which is not met by your installation. I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\
+    \\23 requires device-mode, \") ] ];\r\
+    \n      :local MissingDM ({});\r\
+    \n      :foreach Feature,Value in=\$RequiredDM do={\r\
+    \n        :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\
+    ceMode->\$Feature) = false) do={\r\
+    \n          :set MissingDM (\$MissingDM, \$Feature);\r\
+    \n        }\r\
+    \n      }\r\
+    \n      :if ([ :len \$MissingDM ] > 0) do={\r\
+    \n        \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\
+    \") . \"' requires disabled \" . \\\r\
+    \n            \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\
+    gnoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n\r\
+    \n      :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\
+    \n        \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\
+    ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\
+    \n        :error false;\r\
+    \n      }\r\
+    \n      \r\
+    \n      :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\
+    ript comment: \" . (\$ScriptVal->\"comment\"));\r\
+    \n\r\
+    \n      /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\
+    Val->\"comment\") \\\r\
+    \n          source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\
+    F \$SourceNew ] \$Script;\r\
+    \n      :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\
+    \n           \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\
+    \n           \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\
+    o={\r\
+    \n        :set ReloadGlobal true;\r\
+    \n      }\r\
+    \n    } on-error={ }\r\
+    \n  }\r\
+    \n  :if (\$ReloadGlobal = true) do={\r\
+    \n    \$LogPrint info \$0 (\"Reloading global configuration and functions.\
+    \");\r\
+    \n    :onerror Err {\r\
+    \n      :global InitSetup (a);\r\
+    \n      /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\
+    \n    } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\
+    ctions failed! \" . \$Err)}\r\
+    \n  }\r\
+    \n  :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\
+    \n    \$LogPrint warning \$0 (\"The configuration version decreased from \
+    \" . \\\r\
+    \n      \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\
+    \n      \". Installed an older version\?\");\r\
+    \n  }\r\
+    \n    :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\
+    \n    :global GlobalConfChanges;\r\
+    \n    :global GlobalConfMigration;\r\
+    \n    :local ChangeLogCode;\r\
+    \n    :if ([ :len \$ChangeLogCode ] > 0) do={\r\
+    \n      :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\
+    \n        :onerror Err {\r\
+    \n          [ :parse \$ChangeLogCode ];\r\
+    \n        } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \
+    . \$Err)}\r\
+    \n      } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\
+    dation!\")}\r\
+    \n    }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\
+    \n        :do {\r\
+    \n          :if ([ :typeof \$Migration ] != \"str\") do={\r\
+    \n            \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\
+    \_\" is not available.\");\r\
+    \n            :error false;\r\
+    \n          }\r\
+    \n          :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\
+    \n            \$LogPrint warning \$0 (\"Migration code for change \" . \$I\
+    \_. \" failed syntax validation!\");\r\
+    \n            :error false}\r\
+    \n          \$LogPrint info \$0 (\"Applying migration for change \" . \$I \
+    . \": \" . \$Migration);\r\
+    \n          :onerror Err {\r\
+    \n            [ :parse \$Migration ];\r\
+    \n          } do={\$LogPrint warning \$0 (\"Migration code for change \" .\
+    \_\$I . \" failed to run: \" . \$Err)}\r\
+    \n        } on-error={ }\r\
+    \n      }\r\
+    \n    }\r\
+    \n    :local NotificationMessage (\"The configuration version on \" . \$Id\
+    entity . \" increased \" . \\\r\
+    \n       \"to \" . \$GlobalConfVersion . \", current configuration may nee\
+    d modification. \" . \\\r\
+    \n       \"Please review and update global-config-overlay, then re-run glo\
+    bal-config.\");\r\
+    \n    \$LogPrint info \$0 (\$NotificationMessage);\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\
+    \");\r\
+    \n      :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\
+    \_do={\r\
+    \n        :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\
+    \n        :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\
+    \r\
+    \n            [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\
+    \n        \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\
+    \n      }\r\
+    \n    } else={\r\
+    \n      :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\
+    \_changes are not available.\");\r\
+    \n\r\
+    \n      }\r\
+    \n\r\
+    \n    :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \
+    } else={ :global GlobalConfChanges (a); }\r\
+    \n    :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\
+    on; } else={ :global GlobalConfMigration (a); }\r\
+    \n  }\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n} }\r\
+    \n\r\
+    \n# load modules\r\
+    \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\
+    ns\\\\.d|mod)/.\" ] do={\r\
+    \n  :local ScriptVal [ /system/script/get \$Script ];\r\
+    \n  :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\
+    \n    :onerror Err {\r\
+    \n      /system/script/run \$Script;\r\
+    \n    } do={\r\
+    \n      \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\
+    ailed to run: \" . \$Err);\r\
+    \n    }\r\
+    \n  } else={\r\
+    \n    \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\
+    led syntax validation, skipping.\");\r\
+    \n  }\r\
+    \n}\r\
+    \n\r\
+    \n# Add and fix global scheduler\r\
+    \n:put \"Add or/and fix Global scheduler...\";\r\
+    \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\
+    ; }\";\r\
+    \n:local Comment \"Every Day Set Global Environment Variables\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \
+    = 0) do={\r\
+    \n  /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\
+    ent=\$OnEvent start-time=startup;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\
+    \_do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\
+    \n}\r\
+    \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\
+    ) do={\r\
+    \n  /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\
+    \n}\r\
+    \n# Add Update Script scheduler\r\
+    \n:put \"Add or/and fix Update Script scheduler\";\r\
+    \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\
+    \r\
+    \n:set Comment \"Every Day Check For Update Scripts\";\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\
+    \" ] ] = 0) do={\r\
+    \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \
+    start-time=startup interval=1d on-event=\$OnEvent;\r\
+    \n}\r\
+    \n\r\
+    \n:onerror Err {\r\
+    \n  :global GlobalConfReady;\r\
+    \n  :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\
+    \_not ready.\"); }; } delay=100ms max=5;\r\
+    \n\r\
+    \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\
+    \n    [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \
+    \") ] . \\\r\
+    \n    \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\
+    \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\
+    \n    # signal we are ready\r\
+    \n:set GlobalFuncReady true;\r\
+    \n:set ExitOK true;\r\
+    \n\r\
+    \n:log info (\$0 . \"Global configs ready!\");\r\
+    \n} do={\r\
+    \n  :global ExitOnError; \$ExitOnError \$0 \$Err;\r\
+    \n}\r\
+    \n"
+add comment=\
+    "Lookup IP addresses for RKN list and add them to firewall address-list" \
+    dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    source="#!rsc by Vados\r\
+    \n# RouterOS script: AM-RKN-dnsLookup\r\
+    \n# Script comment: Lookup IP addresses for RKN list and add them to firew\
+    all address-list\r\
+    \n# Copyright (c) 2007-2026 Vados <vados@vados.ru>\r\
+    \n#\r\
+    \n#\r\
+    \n# requires RouterOS, version=7.19\r\
+    \n# requires device-mode, fetch\r\
+    \n#\r\
+    \n# Script description: This script is intended to be run periodically, e.\
+    g. once a day, to update the IP addresses in the firewall address-list bas\
+    ed on the RKN list.\r\
+    \n#                     It resolves the domain names in the RKN list and a\
+    dds the corresponding IP addresses to the specified firewall address-list.\
+    \r\
+    \n#                     The script also handles CNAME records by following\
+    \_them until it finds A records.\r\
+    \n# Usage:\r\
+    \n# /system/script { run AM-RKN-dnsLookup; }\r\
+    \n:local ScriptName [ :jobname ];\r\
+    \n\r\
+    \n:global dnsLookupReady false;\r\
+    \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\
+    \_true; }\r\
+    \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\
+    \n:set dnsLookupReady false;\r\
+    \n\r\
+    \n:local arrRKN {\r\
+    \n  \"telegra.ph\"\r\
+    \n  \"grani.ru\"\r\
+    \n  \"xhamster.com\"\r\
+    \n  \"lostfilm.tv\"\r\
+    \n  \"rutracker.org\"\r\
+    \n  \"lurkmore.to\"\r\
+    \n  \"dou.ua\"\r\
+    \n  \"youporn.com\"\r\
+    \n  \"pornolab.net\"\r\
+    \n  \"crimerussia.com\"\r\
+    \n  \"telegram.org\"\r\
+    \n  \"api.telegram.org\"\r\
+    \n  \"facebook.com\"\r\
+    \n  \"instagram.com\"\r\
+    \n  \"x.com\"\r\
+    \n  \"twitter.com\"\r\
+    \n  \"youtube.com\"\r\
+    \n  \"googleapis.com\"\r\
+    \n  \"youtu.be\"\r\
+    \n  \"googlevideo.com\"\r\
+    \n  \"gstatic.com\"\r\
+    \n  \"googleusercontent.com\"\r\
+    \n  \"nhacmp3youtube.com\"\r\
+    \n  \"telegram.me\"\r\
+    \n  \"t.me\";}\r\
+    \n\r\
+    \n:local ListRKN \"RKN-dnsLookup\";\r\
+    \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\
+    \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\
+    ={\r\
+    \n    /ip firewall address-list remove \$aListItem;\r\
+    \n}\r\
+    \n:foreach aItem in=\$arrRKN do={\r\
+    \n#    :do {\r\
+    \n        :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\
+    ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\
+    \n#    } on-error={\r\
+    \n#        :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\
+    \n#    }\r\
+    \n    :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \
+    do={\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\
+    \n            :local newAddress [/ip dns cache all get \$dnsRecord data];\
+    \r\
+    \n            :do {\r\
+    \n             /ip firewall address-list add list=\$ListRKN address=\$newA\
+    ddress comment=\$aItem;\r\
+    \n                :log warning \"Successfully adding ip to list A record: \
+    \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            } on-error={\r\
+    \n                :log error \"error when adding ip to list A record: \$dn\
+    sRecord, address: \$newAddress domain: \$aItem\";\r\
+    \n            }\r\
+    \n        }\r\
+    \n        :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\
+    \n            :local cname;\r\
+    \n            :local nextCname;\r\
+    \n            :local cnameAddress;\r\
+    \n            :set cname [/ip dns cache all find where (name=\$aItem && ty\
+    pe=\"CNAME\")];\r\
+    \n            :set nextCname [/ip dns cache all find where (name=[/ip dns \
+    cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            :while (\$nextCname != \"\") do={\r\
+    \n                :set cname \$nextCname;\r\
+    \n                :set nextCname [/ip dns cache all find where (name=[/ip \
+    dns cache all get \$cname data] && type=\"CNAME\")];\r\
+    \n            }\r\
+    \n            :foreach aRecord in=[/ip dns cache all find where (name=[/ip\
+    \_dns cache all get \$cname data] && type=\"A\")] do={\r\
+    \n                :do {\r\
+    \n                    :set cnameAddress [/ip dns cache all get \$aRecord d\
+    ata];\r\
+    \n                    /ip firewall address-list add list=\$ListRKN address\
+    =\$cnameAddress comment=\$aItem;\r\
+    \n                    :log warning \"Succesfully adding ip to list CNAME r\
+    ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \
+    \$aItem.\";\r\
+    \n#                    /ip firewall raw add action=add-dst-to-address-list\
+    \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\
+    g comment=\$aItem content=\$aItem;\r\
+    \n                } on-error={\r\
+    \n                    :log error \"error when adding ip to list CNAME reco\
+    rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\
+    tem.\";\r\
+    \n                }\r\
+    \n            }\r\
+    \n        }\r\
+    \n    }\r\
+    \n}\r\
+    \n\r\
+    \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\
+    ={\r\
+    \n   :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\
+    ptName . \" is NOT SET! Fix It Now!\");\r\
+    \n    /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \
+    run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\
+    olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\
+    \_start-time=startup;\r\
+    \n  }\r\
+    \n:set dnsLookupReady true;\r\
+    \ndelay 2s;  \r\
+    \n:global dnsLookupReady (a);\r\
+    \n"
+add dont-require-permissions=no name="renameLists " owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    local oldName \"Test\";\
+    \n:local newName \"Test-IP\";\
+    \n/ip firewall address-list\
+    \n:foreach i in=[find list=\$oldName] do={\
+    \nset \$i list=\$newName;\
+    \n}\
+    \n"
+add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\
+    #############Script Settings##################\
+    \n\
+    \n:local \"IF-TUN\" \"6to4-tun\"\
+    \n:local \"IF-LOC\" \"Bridge-LAN\"\
+    \n:local \"POOL-6TO4\" \"poolV6-local\"\
+    \n:local \"force-update\" false\
+    \n############ use then static ip #######################\
+    \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \
+    address]\
+    \n#:local \"interface\" \"ext\"\
+    \n:local bound 0\
+    \n\
+    \n###############################################\
+    \n\
+    \n:local 6to4prefix do={\
+    \n    :global dec2hex\
+    \n    :local ipv4 \$1\
+    \n    :local ipv6 \"2002:\"\
+    \n    :for i from=0 to=2 step=1 do={        \
+    \n        :if ( \$i = 2) do={\
+    \n            :set ipv6 (\$ipv6.\":\")\
+    \n        }\
+    \n        :local fp [:find \$ipv4 \".\"]\
+    \n        :if ( \$fp > 0 ) do={\
+    \n            :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\
+    \n            :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\
+    \n        }\
+    \n    }\
+    \n    :return (\$ipv6.[\$dec2hex \$ipv4])\
+    \n}\
+    \n:local \"str_replace\" do={\
+    \n    :local \"str-pos\" [:find \$1 \$2]\
+    \n    :local \"str-len\" [:len \$2]\
+    \n    :local str \"\"\
+    \n    :local rest \$1\
+    \n    :while (\$\"str-pos\" >= 0) do={\
+    \n        :local t [:pick \$rest 0 \$\"str-pos\"]\
+    \n        :if ( \$4 > 0 ) do={\
+    \n            :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\
+    \n                :set str (\$str.\$5)\
+    \n            }\
+    \n        }\
+    \n        :set str (\$str.\$t.\$3)\
+    \n        :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\
+    st]]\
+    \n        :set \"str-pos\" [:find \$rest \$2]\
+    \n    }\
+    \n    :return (\$str.\$rest)\
+    \n}\
+    \n\
+    \n:if (\$bound=1) do={\
+    \n    :local t [:find \$\"lease-address\" \"/\"]\
+    \n\
+    \n    :if ( \$t >= 0 ) do={\
+    \n        :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\
+    \n    }\
+    \n\
+    \n    :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\
+    ) do={\
+    \n        /interface 6to4 add !keepalive local-address=\$\"lease-address\"\
+    \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\
+    \n        :set \"force-update\" true\
+    \n    }\
+    \n\
+    \n    :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\
+    cal-address];\
+    \n\
+    \n    :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \
+    true) do={\
+    \n        /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\
+    ease-address\"\
+    \n        /ipv6 address remove [find interface=\$\"IF-TUN\"]\
+    \n        /ipv6 address remove [find interface=\$\"IF-LOC\"]\
+    \n        /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\
+    \"::/0\"]\
+    \n        :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\
+    \n        :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\
+    \_0) do={    \
+    \n            /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\
+    \".\":1::/64\")  prefix-length=64\
+    \n        } else={\
+    \n            /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \
+    prefix=(\$\"pool-prefix\".\":1::/64\")\
+    \n        }\
+    \n        /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\
+    \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\
+    ace=\$\"IF-TUN\" advertise=no\
+    \n        /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\
+    =\$\"IF-LOC\" advertise=yes\
+    \n        /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\
+    \"IF-TUN\")\
+    \n        :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\
+    s]\
+    \n        :set t [:pick \$t 0 [:find \$t \"/\"]]\
+    \n        :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\
+    \_= 0) do={\
+    \n            /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\
+    [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        } else={\
+    \n            /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \
+    where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\
+    \n        }\
+    \n        :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\
+    -LOC\"] = 0) do={\
+    \n            /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\
+    on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\
+    \n        }\
+    \n        :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \
+    0) do={\
+    \n            /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\
+    onfiguration=yes\
+    \n        }\
+    \n    }\
+    \n}"
+add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
+    global MAC2EUI64 do={\
+    \n    :local EUI64 \"\"\
+    \n    :local MAC \$1\
+    \n    :local HEX2DEC \"0123456789ABCDEF\"\
+    \n    :for i from=0 to=5 step=1 do={\
+    \n        :if ( \$i = 0 ) do={\
+    \n            :set EUI64 [:pick \$MAC 0]\
+    \n            :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\
+    \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\
+    \n        }\
+    \n        :if ( \$i = 1 || \$i = 3) do={\
+    \n            :set EUI64 (\$EUI64.\":\")\
+    \n        }\
+    \n        :if ( \$i = 2 ) do={\
+    \n            :set EUI64 (\$EUI64.\"FF:FE\")\
+    \n        }\
+    \n        :if ( [:find \$MAC \":\"] = 2 ) do={\
+    \n            :set MAC [:pick \$MAC 3  [:len \$MAC]]\
+    \n            :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\
+    \n        }\
+    \n    }\
+    \n    :return (\$EUI64)\
+    \n}\
+    \n\
+    \n:global dec2hex do={\
+    \n    :local hex \"\"\
+    \n    :local dec [:tonum \$1]\
+    \n    :for i from=0 to=4 step=4 do={\
+    \n        :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\
+    c>>\$i)&0xf)+1)].\$hex)\
+    \n    }\
+    \n    :return ([:tostr \$hex])\
+    \n}"
+/user group
+add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\
+    t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon"
+/ip smb
+set enabled=no interfaces=lo
+/interface bridge port
+add bridge=Bridge-LAN interface=ether5
+add bridge=Bridge-LAN interface=ether2
+add bridge=Bridge-LAN interface=ether4 trusted=yes
+add bridge=Bridge-LAN interface=ether3
+add bridge=Bridge-LAN interface=wlan2
+add bridge=Bridge-LAN interface=wlan1
+/interface bridge settings
+set use-ip-firewall=yes
+/ip firewall connection tracking
+set udp-timeout=10s
+/ip neighbor discovery-settings
+set discover-interface-list=LAN lldp-med=no lldp-poe-power=no
+/ip settings
+set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\
+    8192
+/ipv6 settings
+set disable-ipv6=yes disable-link-local-address=yes forward=no \
+    max-neighbor-entries=8192 multipath-hash-policy=l4
+/interface detect-internet
+set detect-interface-list=static internet-interface-list=Internet \
+    lan-interface-list=LAN request-interval=1m wan-interface-list=WAN
+/interface l2tp-server server
+set authentication=mschap2 use-ipsec=yes
+/interface list member
+add interface=ether4 list=WAN
+add interface="ether1 - Unet" list=Internet
+add interface=WG list=WAN
+add interface=Bridge-LAN list=LAN
+/interface wireguard peers
+add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\
+    109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \
+    persistent-keepalive=10s public-key=\
+    "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4="
+/interface wireless cap
+# 
+set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \
+    caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\
+    CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\
+    wlan2,wlan1 lock-to-caps-man=yes
+/ip address
+add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0
+add address=10.8.0.2/24 interface=WG network=10.8.0.0
+/ip cloud
+set update-time=no
+/ip dhcp-client
+add add-default-route=special-classless default-route-distance=2 \
+    default-route-tables=main:1 dhcp-options=clientid,clientid_duid \
+    interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no
+/ip dhcp-server config
+set accounting=no
+/ip dhcp-server lease
+add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\
+    48:8F:5A:8E:EE:A8 server=masterDHCP
+add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\
+    F0:DE:F1:91:0D:1E server=masterDHCP
+add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\
+    00:80:77:EC:43:86 server=masterDHCP
+add address=10.30.30.70 dhcp-option=domain-search-list,HostName \
+    dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP
+add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\
+    04:7C:16:36:F5:37 server=masterDHCP
+add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\
+    10:2D:41:2C:20:C2 server=masterDHCP
+add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\
+    10:08:C1:81:59:5F server=masterDHCP
+add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\
+    10:38:1F:D2:5F:13 server=masterDHCP
+add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\
+    10:B1:DF:E9:D0:D5 server=masterDHCP
+add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\
+    FE:02:52:BE:3F:16 server=masterDHCP
+add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\
+    D4:6D:6D:FD:E5:49 server=masterDHCP
+add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\
+    CC:42:10:12:46:94 server=masterDHCP
+add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\
+    50:CC:F8:85:96:0A server=masterDHCP
+add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\
+    E4:18:6B:58:34:AB server=masterDHCP
+add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\
+    00:27:15:41:97:A9 server=masterDHCP
+add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \
+    mac-address=C4:82:E1:03:49:10 server=masterDHCP
+add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\
+    10:38:1F:82:81:F2 server=masterDHCP
+add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \
+    dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP
+add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \
+    dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP
+add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \
+    server=masterDHCP
+add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\
+    MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP
+add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \
+    mac-address=F0:75:5D:1E:5F:71 server=masterDHCP
+add address=10.30.30.100 client-id=iVados dhcp-option=HostName \
+    dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP
+add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\
+    ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \
+    dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \
+    use-src-mac=yes
+/ip dhcp-server network
+add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\
+    domain-search-list dhcp-option-set=domain-search-set dns-server=\
+    10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\
+    24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98
+/ip dns
+set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \
+    doh-max-server-connections=20 servers=10.30.30.33,8.8.8.8 \
+    verify-doh-cert=yes
+/ip dns static
+add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \
+    type=A
+add address=109.107.177.79 name=vds.vados.ru type=A
+add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \
+    regexp=*.vados.ru type=NS
+add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\
+    "\".*\\\\.vados\\\\.ru\"" type=FWD
+add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\
+    10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\
+    FWD
+add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\
+    ns.vados.ru.local type=A
+add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\
+    vados.ru ns=ns.vados.ru.local type=NS
+add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A
+add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\
+    dns.google type=A
+add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A
+add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A
+add address=10.30.30.33 name=ros.vados.ru type=A
+add address=10.30.30.95 name=vados-nuc type=A
+add address=10.30.30.33 name=amster-nuc type=A
+add address=10.30.30.33 name=amster type=A
+add address=10.30.30.33 name=amster-reg type=A
+add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A
+add address=10.30.30.33 name=mgr.vados.ru type=A
+add address=10.30.30.33 name=prt.vados.ru type=A
+add address=10.30.30.33 disabled=yes match-subdomain=yes name=\
+    mikrots.vados.ru type=A
+add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A
+add address=10.30.30.30 name=MILLER-LEN type=A
+add address=10.30.30.30 name=miller type=A
+add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\
+    security.cloudflare-dns.com type=A
+add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\
+    dns.quad9.net type=A
+add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\
+    dns.quad9.net type=A
+add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \
+    type=A
+add address=10.30.30.81 comment=LocalNet name=MikroVados type=A
+add address=10.30.30.10 name=MikroNUC type=A
+add address=10.30.30.86 disabled=yes name=MikroYellow type=A
+add address=10.30.30.85 disabled=yes name=MikroMic type=A
+add address=10.30.30.95 name=VADOS-NUC type=A
+add address=10.30.30.98 name=VADOS-LEN type=A
+add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\
+    A
+add address=10.30.30.20 disabled=yes name=garage type=A
+/ip firewall address-list
+add address=91.215.120.206 list=TRUSTED
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=8.8.4.0/24 list=YouTube
+add address=8.8.8.0/24 list=YouTube
+add address=8.34.208.0/20 list=YouTube
+add address=8.35.192.0/20 list=YouTube
+add address=23.236.48.0/20 list=YouTube
+add address=23.251.128.0/19 list=YouTube
+add address=34.0.0.0/15 list=YouTube
+add address=34.2.0.0/16 list=YouTube
+add address=34.3.0.0/23 list=YouTube
+add address=34.3.3.0/24 list=YouTube
+add address=34.3.4.0/24 list=YouTube
+add address=34.3.8.0/21 list=YouTube
+add address=34.3.16.0/20 list=YouTube
+add address=34.3.32.0/19 list=YouTube
+add address=34.3.64.0/18 list=YouTube
+add address=34.4.0.0/14 list=YouTube
+add address=34.8.0.0/13 list=YouTube
+add address=34.16.0.0/12 list=YouTube
+add address=34.32.0.0/11 list=YouTube
+add address=34.64.0.0/10 list=YouTube
+add address=34.128.0.0/10 list=YouTube
+add address=35.184.0.0/13 list=YouTube
+add address=35.192.0.0/14 list=YouTube
+add address=35.196.0.0/15 list=YouTube
+add address=35.198.0.0/16 list=YouTube
+add address=35.199.0.0/17 list=YouTube
+add address=35.199.128.0/18 list=YouTube
+add address=35.200.0.0/13 list=YouTube
+add address=35.208.0.0/12 list=YouTube
+add address=35.224.0.0/12 list=YouTube
+add address=35.240.0.0/13 list=YouTube
+add address=57.140.192.0/18 list=YouTube
+add address=64.15.112.0/20 list=YouTube
+add address=64.233.160.0/19 list=YouTube
+add address=66.22.228.0/23 list=YouTube
+add address=66.102.0.0/20 list=YouTube
+add address=66.249.64.0/19 list=YouTube
+add address=70.32.128.0/19 list=YouTube
+add address=72.14.192.0/18 list=YouTube
+add address=74.125.0.0/16 list=YouTube
+add address=104.154.0.0/15 list=YouTube
+add address=104.196.0.0/14 list=YouTube
+add address=104.237.160.0/19 list=YouTube
+add address=107.167.160.0/19 list=YouTube
+add address=107.178.192.0/18 list=YouTube
+add address=108.59.80.0/20 list=YouTube
+add address=108.170.192.0/18 list=YouTube
+add address=108.177.0.0/17 list=YouTube
+add address=130.211.0.0/16 list=YouTube
+add address=136.22.160.0/20 list=YouTube
+add address=136.22.176.0/21 list=YouTube
+add address=136.22.184.0/23 list=YouTube
+add address=136.22.186.0/24 list=YouTube
+add address=142.250.0.0/15 list=YouTube
+add address=146.148.0.0/17 list=YouTube
+add address=152.65.208.0/22 list=YouTube
+add address=152.65.214.0/23 list=YouTube
+add address=152.65.218.0/23 list=YouTube
+add address=152.65.222.0/23 list=YouTube
+add address=152.65.224.0/19 list=YouTube
+add address=162.120.128.0/17 list=YouTube
+add address=162.216.148.0/22 list=YouTube
+add address=162.222.176.0/21 list=YouTube
+add address=172.110.32.0/21 list=YouTube
+add address=172.217.0.0/16 list=YouTube
+add address=172.253.0.0/16 list=YouTube
+add address=173.194.0.0/16 list=YouTube
+add address=173.255.112.0/20 list=YouTube
+add address=192.158.28.0/22 list=YouTube
+add address=192.178.0.0/15 list=YouTube
+add address=193.186.4.0/24 list=YouTube
+add address=199.36.154.0/23 list=YouTube
+add address=199.36.156.0/24 list=YouTube
+add address=199.192.112.0/22 list=YouTube
+add address=199.223.232.0/21 list=YouTube
+add address=207.223.160.0/20 list=YouTube
+add address=208.65.152.0/22 list=YouTube
+add address=208.68.108.0/22 list=YouTube
+add address=208.81.188.0/22 list=YouTube
+add address=208.117.224.0/19 list=YouTube
+add address=209.85.128.0/17 list=YouTube
+add address=216.58.192.0/19 list=YouTube
+add address=216.73.80.0/20 list=YouTube
+add address=216.239.32.0/19 list=YouTube
+add address=2ip.ru list=Test-IP
+add address=wg.vados.ru comment=VDSIna list=TRUSTED
+add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED
+add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina
+add address=love.ru comment=love.ru list=NoVdsina
+add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina
+add address=pochta.ru comment=pochta.ru list=NoVdsina
+add address=vdsina.com list=NoVdsina
+add address=vdsina.ru list=NoVdsina
+add address=youla.ru list=NoVdsina
+add address=kupiprodai.ru list=NoVdsina
+add address=myip.ru list=Test-IP
+add address=geoip.co list=NoVdsina
+add address=comp-lenta.ru list=NoVdsina
+add address=128.85.102.70 comment=update.microsoft.com list=\
+    windowsupdateslist
+add address=wu-b-net.trafficmanager.net. comment=\
+    ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\
+    ctldl.windowsupdate.com list=windowsupdateslist
+add address=redir.update.msft.com.trafficmanager.net. comment=\
+    update.microsoft.com list=windowsupdateslist
+add address=geo.prod.do.dsp.trafficmanager.net. comment=\
+    geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12437.d.akamaiedge.net. comment=\
+    kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \
+    comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \
+    list=windowsupdateslist
+add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\
+    sls.update.microsoft.com list=windowsupdateslist
+add address=fe3.delivery.mp.microsoft.com. comment=\
+    fe3cr.delivery.mp.microsoft.com list=windowsupdateslist
+add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\
+    fe3.delivery.mp.microsoft.com list=windowsupdateslist
+add address=fe2cr.update.msft.com.trafficmanager.net. comment=\
+    fe2cr.update.microsoft.com list=windowsupdateslist
+add address=download.windowsupdate.com.delivery.microsoft.com. comment=\
+    download.windowsupdate.com list=windowsupdateslist
+add address=wu-f-net.trafficmanager.net. comment=\
+    download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist
+add address=tsfe.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \
+    comment=9.au.download.windowsupdate.com list=windowsupdateslist
+add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dspw65.akamai.net. comment=\
+    download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \
+    comment=licensing.mp.microsoft.com list=windowsupdateslist
+add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-nlu-net.trafficmanager.net. comment=\
+    star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-tlu-net.trafficmanager.net. comment=\
+    star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=storeedgefd.xbetservices.akadns.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \
+    comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\
+    windowsupdateslist
+add address=e16646.dscg.akamaiedge.net. comment=\
+    storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\
+    windowsupdateslist
+add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=bg.microsoft.map.fastly.net. comment=\
+    3.au.download.windowsupdate.com list=windowsupdateslist
+add list=windowsupdateslist
+add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\
+    star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a2033.dscd.akamai.net. comment=\
+    star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-nlu-net.trafficmanager.net. comment=\
+    dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-b-tlu-net.trafficmanager.net. comment=\
+    1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a122.dscg3.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist
+add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e10370.d.akamaiedge.net. comment=\
+    geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=a1683.dscd.akamai.net. comment=\
+    dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \
+    comment=collections.mp.microsoft.com list=windowsupdateslist
+add address=a1847.dscd.akamai.net. comment=\
+    wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=au.download.windowsupdate.com.edgesuite.net. comment=\
+    2.au.download.windowsupdate.com list=windowsupdateslist
+add address=a767.dscg3.akamai.net. comment=\
+    au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist
+add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\
+    4.au.download.windowsupdate.com list=windowsupdateslist
+add address=cl-glcb907925.gcdn.co. comment=\
+    4.au.download.windowsupdate.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \
+    comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist
+add address=ts-frontend.trafficmanager.net. comment=\
+    tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=sds.trafficmanager.net. comment=software-download.microsoft.com \
+    list=windowsupdateslist
+add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\
+    windowsupdateslist
+add address=e12671.dscd.akamaiedge.net. comment=\
+    download.microsoft.com.edgekey.net list=windowsupdateslist
+add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=e12358.d.akamaiedge.net. comment=\
+    kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\
+    tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=dcat-f-tlu-net.trafficmanager.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=a1856.dspw65.akamai.net. comment=\
+    tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist
+add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\
+    consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\
+    windowsupdateslist
+add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina
+add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \
+    list=windowsupdateslist
+add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=purchase.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.mp.microsoft.com list=windowsupdateslist
+add address=e110219.a.akamaiedge.net. comment=\
+    purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.141 list=windowsupdateslist
+add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=storesdk.xbetservices.akadns.net. comment=\
+    storesdk.dsx.mp.microsoft.com list=windowsupdateslist
+add address=e16646.g.akamaiedge.net. comment=\
+    storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist
+add address=software-download.microsoft.com.delivery.microsoft.com. comment=\
+    software-download.microsoft.com list=windowsupdateslist
+add address=download.prss.microsoft.com.akamaized.net. comment=\
+    software-download.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\
+    windowsupdateslist
+add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina
+add address=87.250.250.50 comment=YandexDisk list=NoVdsina
+add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\
+    displaycatalog.mp.microsoft.com list=windowsupdateslist
+add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\
+    purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\
+    purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist
+add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\
+    cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist
+add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=a1996.dscd.akamai.net. comment=\
+    wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\
+    windowsupdateslist
+add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\
+    tas02.sls.update.microsoft.com list=windowsupdateslist
+add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\
+    windowsupdateslist
+add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \
+    comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist
+add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\
+    star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\
+    windowsupdateslist
+add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\
+    paymentinstruments.mp.microsoft.com list=windowsupdateslist
+add address=10.30.30.33 comment=amster disabled=yes list=NoWG
+add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG
+add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG
+add address=wg.vados.ru comment=VDSina-vpn list=VDSina
+add address=80.85.244.9 list=TRUSTED
+add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\
+    disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist
+add address=185.71.70.78 disabled=yes list=TRUSTED
+add address=176.53.203.171 disabled=yes list=TRUSTED
+add address=176.53.203.170 disabled=yes list=TRUSTED
+add address=176.53.202.194 disabled=yes list=TRUSTED
+add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina
+add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS
+add address=dns.google comment=Google-dns list=Trusted-DNS
+add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\
+    Trusted-DNS
+add address=time.google.com comment=Google-time list=Trusted-NTP
+add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP
+add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\
+    Trusted-NTP
+add address=cp.vdsina.com comment=VDSina-vpn list=VDSina
+add address=vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns.vados.ru comment=VDSina-vpn list=VDSina
+add address=vdsina.com comment=VDSina-vpn list=VDSina
+add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina
+add address=10.30.30.0/24 comment="Local Network" list=Local-Net
+add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net
+add address=146.120.64.208/29 comment="External Net" list=Unet
+add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina
+add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina
+add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina
+add address=10.30.30.30 comment=miller disabled=yes list=NoWG
+add address=10.30.30.33 comment="Direct connet to DNS servers" list=\
+    Direct-DNS
+add address=109.107.177.79 list=VPN-Server
+add address=10.30.30.10 list=AWG-Proxy
+/ip firewall filter
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=12h chain=input comment="block honeypot DNS" \
+    connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\
+    udp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment=\
+    "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \
+    connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=add-src-to-address-list address-list="Honeypot Hacker" \
+    address-list-timeout=4w2d chain=input comment="block honeypot NTP" \
+    connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\
+    udp
+add action=fasttrack-connection chain=forward comment=\
+    "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \
+    connection-state=established,related,new disabled=yes
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=tcp
+add action=accept chain=input disabled=yes dst-port=29185 in-interface=\
+    "ether1 - Unet" protocol=udp
+add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \
+    dst-port=53 protocol=tcp src-address=10.30.30.0/24
+add action=accept chain=input comment="udp Accept input DNS queries" \
+    dst-port=53 protocol=udp src-address=10.30.30.0/24
+add action=accept chain=output comment="accept WireGuard" disabled=yes \
+    dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \
+    src-port=13231
+add action=accept chain=output disabled=yes dst-address-list=VPN-Server \
+    dst-port=29185 out-interface="ether1 - Unet" protocol=udp
+add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
+    connection-state=established,related,new disabled=yes routing-mark=\
+    !To-VPN
+add action=accept chain=output disabled=yes protocol=tcp src-port=443
+add action=accept chain=output disabled=yes src-address=127.0.0.1
+add action=accept chain=forward comment="defconf: accept in ipsec policy" \
+    disabled=yes ipsec-policy=in,ipsec
+add action=accept chain=forward comment="defconf: accept out ipsec policy" \
+    disabled=yes ipsec-policy=out,ipsec
+add action=accept chain=forward comment=\
+    "defconf: accept established,related, untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid in-interface="ether1 - Unet" src-address=\
+    !10.30.30.0/24
+add action=drop chain=forward comment=\
+    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
+    connection-state=new in-interface="ether1 - Unet" src-address-list=\
+    !VDSina
+add action=drop chain=forward comment=\
+    "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\
+    facebook
+add action=drop chain=forward comment=\
+    "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \
+    dst-address-list=YouTube
+add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \
+    src-address-list=VDSina
+add action=accept chain=input connection-state=established disabled=yes
+add action=accept chain=input connection-state=related disabled=yes
+/ip firewall mangle
+add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \
+    new-routing-mark=main src-address-list=NoWG
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for VDSina" dst-address-list=VPN-Server \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \
+    new-routing-mark=main src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=\
+    "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\
+    Unet new-routing-mark=main passthrough=no
+add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\
+    To-VPN src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \
+    dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \
+    new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24
+add action=mark-routing chain=prerouting comment="AWG for All sites" \
+    disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \
+    new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \
+    src-address-list=!NoWG
+add action=mark-routing chain=prerouting comment="VDSIna for All sites" \
+    dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\
+    To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\
+    !NoWG
+add action=mark-connection chain=prerouting comment=\
+    "Mark VPN connections to exclude from FastTrack" new-connection-mark=\
+    VPN_No_FastTrack routing-mark=To-VPN
+add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \
+    out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\
+    1381-65535
+add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\
+    10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24
+/ip firewall nat
+add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\
+    yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\
+    !NoWG to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \
+    in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \
+    to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat comment=\
+    "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\
+    udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53
+add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\
+    "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\
+    10.30.30.33 to-ports=44333
+add action=masquerade chain=srcnat comment="Default NAT" out-interface=\
+    "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24
+add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \
+    fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \
+    to-addresses=10.30.30.33 to-ports=443
+add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \
+    dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=80
+add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \
+    dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2904
+add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\
+    5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=5000
+add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\
+    2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \
+    to-ports=2377
+add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \
+    to-ports=81
+add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\
+    10.30.30.33 to-ports=22
+add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \
+    dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\
+    10.30.30.33 to-ports=2377
+add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\
+    "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\
+    10.30.30.33 to-ports=22
+add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \
+    out-interface=WG routing-mark=To-VPN src-address-list=!NoWG
+add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \
+    dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \
+    time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\
+    Bridge-LAN protocol=tcp src-address-list=KIDS time=\
+    6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3
+/ip firewall raw
+add action=drop chain=prerouting comment="Drop Honeypot Hackers" \
+    in-interface="ether1 - Unet" src-address-list="Honeypot Hacker"
+add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \
+    in-interface-list=WAN src-address-list=Trusted-DNS
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \
+    content=linux.duke.edu disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleapis.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googlevideo.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \
+    disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    googleusercontent.com disabled=yes
+add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\
+    none-dynamic chain=prerouting comment="YouTube raw" content=\
+    nhacmp3youtube.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \
+    content=rutube.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \
+    content=me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "icloud.com raw" content=icloud.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \
+    disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    "api.db-ip.com raw" content=api.db-ip.com disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=\
+    esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes
+add action=add-dst-to-address-list address-list=NoVdsina \
+    address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \
+    content=gosuslugi.ru disabled=yes
+/ip firewall service-port
+set ftp disabled=yes
+set tftp disabled=yes
+set irc disabled=no
+set sip disabled=yes
+set pptp disabled=yes
+set rtsp disabled=no
+/ip ipsec settings
+set accounting=no
+/ip ipsec policy
+set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0
+/ip ipsec profile
+set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
+/ip proxy
+set cache-administrator="" max-cache-size=none port=80,443 src-address=\
+    0.0.0.0
+/ip route
+add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
+    WG routing-table=To-VPN scope=30 target-scope=10
+/ip service
+set ftp disabled=yes
+set telnet disabled=yes
+set reverse-proxy disabled=yes
+set ssh address=10.30.30.0/24 port=2222
+set winbox address=10.30.30.0/24
+set api address=10.30.30.0/24
+set api-ssl address=10.30.30.0/24 disabled=yes
+set www-ssl certificate=Root-YE port=18443
+set www address=10.30.30.0/24 disabled=yes port=18880
+/ip service webserver
+set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\
+    no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \
+    webfig-secure=no
+/ip ssh
+set forwarding-enabled=both publickey-authentication-options=verify-required
+/ip upnp
+set enabled=yes
+/ip upnp interfaces
+add interface=Bridge-LAN type=internal
+add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external
+add forced-ip=109.107.177.79 interface=*E type=external
+add interface=lo type=internal
+add interface=wlan2 type=internal
+add interface=wlan1 type=internal
+/ipv6 dhcp-client
+add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\
+    info use-interface-duid=yes validate-server-duid=no
+/ipv6 dhcp-server option sets
+add name=domain-search-set options=domain-search-list
+add name="=\"Client ID\"" options=HostName
+/ipv6 firewall address-list
+add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
+add address=::1/128 comment="defconf: lo" list=bad_ipv6
+add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
+add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
+add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
+add address=100::/64 comment="defconf: discard only " list=bad_ipv6
+add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
+add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
+add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
+/ipv6 firewall filter
+add action=accept chain=input comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=input comment="defconf: drop invalid" connection-state=\
+    invalid
+add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=input comment="defconf: accept UDP traceroute" \
+    dst-port=33434-33534 protocol=udp
+add action=accept chain=input comment=\
+    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
+    udp src-address=fe80::/10
+add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
+    protocol=udp
+add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=input comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=input comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+add action=accept chain=forward comment=\
+    "defconf: accept established,related,untracked" connection-state=\
+    established,related,untracked
+add action=drop chain=forward comment="defconf: drop invalid" \
+    connection-state=invalid
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
+add action=drop chain=forward comment=\
+    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
+add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
+    hop-limit=equal:1 protocol=icmpv6
+add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
+    icmpv6
+add action=accept chain=forward comment="defconf: accept HIP" protocol=139
+add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
+    500,4500 protocol=udp
+add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
+    ipsec-ah
+add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
+    ipsec-esp
+add action=accept chain=forward comment=\
+    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
+add action=drop chain=forward comment=\
+    "defconf: drop everything else not coming from LAN" in-interface-list=\
+    !LAN
+/ipv6 nd
+set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \
+    managed-address-configuration=yes other-configuration=yes pref64=::/64
+/ipv6 nd prefix
+add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none
+/ipv6 nd prefix default
+set dhcp6-pd-preferred=yes
+/ipv6 nd proxy
+add disabled=yes interface=lo
+/ipv6 nd settings
+set router-advertisement-route-distance=100
+/routing settings
+set single-process=no
+/system clock
+set time-zone-name=Europe/Moscow
+/system clock manual
+set time-zone=+03:00
+/system identity
+set name=MikroMaster
+/system logging
+add action=email disabled=yes regex="* added|changed|removed *" topics=\
+    system,info
+/system ntp client
+set enabled=yes
+/system ntp server
+set enabled=yes manycast=yes multicast=yes use-local-clock=yes
+/system ntp client servers
+add address=0.ru.pool.ntp.org
+add address=1.ru.pool.ntp.org
+add address=2.ru.pool.ntp.org
+add address=3.ru.pool.ntp.org
+add address=time.google.com disabled=yes
+/system package update
+set check-certificate=yes-without-crl ip-version=ipv4
+/system scheduler
+add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \
+    on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Every Day Check For Update Scripts" interval=1d name=\
+    AM-ScriptInstallUpdate on-event=\
+    ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\
+    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\
+    AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \
+    policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
+    start-time=startup
+/system watchdog
+set watchdog-timer=no
+/tool e-mail
+set certificate-verification=no from=MikroVados<vadossio@icloud.com> port=587 \
+    server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com
+/tool mac-server
+set allowed-interface-list=LAN
+/tool mac-server mac-winbox
+set allowed-interface-list=LAN
+/tool netwatch
+add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\
+    -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\
+    e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \
+    interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\
+    https-get up-script=""
+add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\
+    flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\
+    oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \
+    name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \
+    up-script=""
+add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\
+    8.8.8.8 down-script="" host=dns.google http-codes="" name=\
+    "Google-DNS IPv4" test-script="" type=dns up-script=""
+add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\
+    rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\
+    -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \
+    http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\
+    "" test-script="" type=dns up-script=""
+add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \
+    dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \
+    interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \
+    test-script="" timeout=800ms type=dns up-script=""
+add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\
+    ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \
+    down-script="" host=149.112.112.112 http-codes="" interval=10s name=\
+    "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script=""
+add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \
+    down-script="" host=91.192.189.2 http-codes="" interval=10s name=\
+    ns1.unet.ws test-script="" type=simple up-script=""
+add check-certificate=yes comment=\
+    "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \
+    disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\
+    vds.vados.ru port=443 test-script="" type=https-get up-script=""
+/user aaa
+set accounting=no
diff --git a/MikroMaster/tmp/Config.rsc b/MikroMaster/tmp/Config.rsc
deleted file mode 100644
index e69de29..0000000
diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc
deleted file mode 100644
index dcf6829..0000000
--- a/MikroMaster/tmp/Diff-Config.rsc
+++ /dev/null
@@ -1,8 +0,0 @@
-88,90c88
-< /ppp profile
-< set *FFFFFFFE use-upnp=no
-< #error exporting "/queue/interface" (timeout)
----
-> #error exporting "/ppp/profile" (timeout)
-3497a3496
-> #error exporting "/ip/ipsec/key/psk" (timeout)
-- 
2.52.0