From 16a152f96a6fc4b80ef2ebb384e70b9a94dfc46c Mon Sep 17 00:00:00 2001 From: gatieme Date: Sun, 4 Sep 2016 21:22:05 +0800 Subject: [PATCH] ... --- .../kernel/04-net/02-net_namespace/README.md | 2 +- study/kernel/04-net/04-/README.md | 489 ++++++++++++++++++ .../04-net/04-socket_buffer 2/README.md | 21 - study/kernel/04-net/05/README.md | 93 ++++ study/kernel/04-net/1.c | 260 ++++++++++ .../04-net/images/cat_sys_class_net.png | Bin 0 -> 52406 bytes 6 files changed, 843 insertions(+), 22 deletions(-) create mode 100644 study/kernel/04-net/04-/README.md delete mode 100644 study/kernel/04-net/04-socket_buffer 2/README.md create mode 100644 study/kernel/04-net/05/README.md create mode 100644 study/kernel/04-net/1.c create mode 100644 study/kernel/04-net/images/cat_sys_class_net.png diff --git a/study/kernel/04-net/02-net_namespace/README.md b/study/kernel/04-net/02-net_namespace/README.md index 62749ad..45634ba 100644 --- a/study/kernel/04-net/02-net_namespace/README.md +++ b/study/kernel/04-net/02-net_namespace/README.md @@ -375,7 +375,7 @@ void net_drop_ns(void *p) * 网络命名空间定义了2个链表, `pernet_list`和`net_namespace_list` `init_net`会被链接到`net_namespace_list`这个双向链表上 - `pernet_operations`结构将被链接到`pernet_list`这个双向链表上 + `pernet_operations`结构将被链接到`first_device = pernet_list`这个双向链表上 * 如果没自定义网络命名空间的话，所有想用网络命名空间时都将利用默认的`init_net` diff --git a/study/kernel/04-net/04-/README.md b/study/kernel/04-net/04-/README.md new file mode 100644 index 0000000..70e0638 --- /dev/null +++ b/study/kernel/04-net/04-/README.md @@ -0,0 +1,489 @@ +进程虚拟地址空间 +======= + +| 日期 | 内核版本 | 架构| 作者 | GitHub| CSDN | +| ------- |:-------:|:-------:|:-------:|:-------:|:-------:| +| 2016-06-14 | [Linux-4.7](http://lxr.free-electrons.com/source/?v=4.7) | X86 & arm | [gatieme](http://blog.csdn.net/gatieme) | [LinuxDeviceDrivers](https://github.com/gatieme/LDD-LinuxDeviceDrivers) | [Linux内存管理](http://blog.csdn.net/gatieme/article/category/6225543) | + + +#1 网络访问层 +------- + +前面讲述了Linux内核中网络子系统的结构, 现在我们把注意力转向**网络实现的第一层, 即网络访问层**. 该层主要负责在计算机之间传输信息，与网卡的设备驱动程序直接协作. + +本节不会讨论网卡驱动程序的实现和相关的问题, 因为其中采用的方法与第6章的描述仅稍有不同. 本节将详细介绍由各个网卡驱动程序提供、由网络实现代码使用的接口，它们提供了硬件的抽象视图. + +这里根据以太网帧来解释如何在"线上"(on the cable)表示数据，并描述接收到一个分组之后, 将该分组传递到更高层之前，需要完成哪些步骤. + +#2 网络设备的表示 +------- + +在内核中, 每个网络设备都表示为`net_device`结构的一个实例. 在分配并填充该结构的一个实例之后, 必须用`net/core/dev.c`中的`register_netdev`函数将其注册到内核. 该函数完成一些初始化任务, 并将该设备注册到通用设备机制内. 这会创建一个`sysfs`项`/sys/class/net/`, 关联到该设备对应的目录. 如果系统包含一个PCI网卡和一个环回接口设备，则在`/sys/class/net`中有两个对应项: + + +![查看/sys/class/net](../images/cat_sys_class_net.png) + + +##2.1 数据结构 +------- + +在详细讨论`struct net_device`的内容之前, 先阐述一下内核如何跟踪可用的网络设备, 以及如何查找特定的网络设备. 照例. 这些设备不是全局的, 而是按命名空间进行管理的. 回想一下,每个命名空间(`net`实例)中有如下3个机制可用 + +* 所有的网络设备都保存在一个单链表中,表头为dev_base + +* 按设备名散列. 辅助函数`dev_get_by_name(struct net * net, const char * name)`根据设备名在该散列表上查找网络设备 + +* 按接口索引散列。辅助函数`dev_get_by_index(struct net * net, int ifindex)`根据给定的接口索引查找`net_device`实例. `net_device`结构包含了与特定设备相关的所有信息. 该结构的定义有200多行代码, 是内核中最庞大的结构. 因为该结构中有很多细节,所以,尽管下文给出的版本经过了大量的简化,仍然相当长 + +###2.1.1 net_device结构体定义 +------- + +`net_device`结构定义在[`include/linux/netdevice.h, line 1607`](http://lxr.free-electrons.com/source/include/linux/netdevice.h#L1607) + + +```cpp +struct net_device { + char name[IFNAMSIZ]; + struct hlist_node name_hlist; + char *ifalias; + /* + * I/O specific fields + * FIXME: Merge these and struct ifmap into one + */ + unsigned long mem_end; + unsigned long mem_start; + unsigned long base_addr; + int irq; + + atomic_t carrier_changes; + + /* + * Some hardware also needs these fields (state,dev_list, + * napi_list,unreg_list,close_list) but they are not + * part of the usual set specified in Space.c. + */ + + unsigned long state; + + struct list_head dev_list; + struct list_head napi_list; + struct list_head unreg_list; + struct list_head close_list; + struct list_head ptype_all; + struct list_head ptype_specific; + + struct { + struct list_head upper; + struct list_head lower; + } adj_list; + + struct { + struct list_head upper; + struct list_head lower; + } all_adj_list; + + netdev_features_t features; + netdev_features_t hw_features; + netdev_features_t wanted_features; + netdev_features_t vlan_features; + netdev_features_t hw_enc_features; + netdev_features_t mpls_features; + netdev_features_t gso_partial_features; + + int ifindex; + int group; + + struct net_device_stats stats; + + atomic_long_t rx_dropped; + atomic_long_t tx_dropped; + atomic_long_t rx_nohandler; + +#ifdef CONFIG_WIRELESS_EXT + const struct iw_handler_def *wireless_handlers; + struct iw_public_data *wireless_data; +#endif + const struct net_device_ops *netdev_ops; + const struct ethtool_ops *ethtool_ops; +#ifdef CONFIG_NET_SWITCHDEV + const struct switchdev_ops *switchdev_ops; +#endif +#ifdef CONFIG_NET_L3_MASTER_DEV + const struct l3mdev_ops *l3mdev_ops; +#endif + + const struct header_ops *header_ops; + + unsigned int flags; + unsigned int priv_flags; + + unsigned short gflags; + unsigned short padded; + + unsigned char operstate; + unsigned char link_mode; + + unsigned char if_port; + unsigned char dma; + + unsigned int mtu; + unsigned short type; + unsigned short hard_header_len; + + unsigned short needed_headroom; + unsigned short needed_tailroom; + + /* Interface address info. */ + unsigned char perm_addr[MAX_ADDR_LEN]; + unsigned char addr_assign_type; + unsigned char addr_len; + unsigned short neigh_priv_len; + unsigned short dev_id; + unsigned short dev_port; + spinlock_t addr_list_lock; + unsigned char name_assign_type; + bool uc_promisc; + struct netdev_hw_addr_list uc; + struct netdev_hw_addr_list mc; + struct netdev_hw_addr_list dev_addrs; + +#ifdef CONFIG_SYSFS + struct kset *queues_kset; +#endif + unsigned int promiscuity; + unsigned int allmulti; + + + /* Protocol-specific pointers */ + +#if IS_ENABLED(CONFIG_VLAN_8021Q) + struct vlan_info __rcu *vlan_info; +#endif +#if IS_ENABLED(CONFIG_NET_DSA) + struct dsa_switch_tree *dsa_ptr; +#endif +#if IS_ENABLED(CONFIG_TIPC) + struct tipc_bearer __rcu *tipc_ptr; +#endif + void *atalk_ptr; + struct in_device __rcu *ip_ptr; + struct dn_dev __rcu *dn_ptr; + struct inet6_dev __rcu *ip6_ptr; + void *ax25_ptr; + struct wireless_dev *ieee80211_ptr; + struct wpan_dev *ieee802154_ptr; +#if IS_ENABLED(CONFIG_MPLS_ROUTING) + struct mpls_dev __rcu *mpls_ptr; +#endif + +/* + * Cache lines mostly used on receive path (including eth_type_trans()) + */ + unsigned long last_rx; + + /* Interface address info used in eth_type_trans() */ + unsigned char *dev_addr; + +#ifdef CONFIG_SYSFS + struct netdev_rx_queue *_rx; + + unsigned int num_rx_queues; + unsigned int real_num_rx_queues; +#endif + + unsigned long gro_flush_timeout; + rx_handler_func_t __rcu *rx_handler; + void __rcu *rx_handler_data; + +#ifdef CONFIG_NET_CLS_ACT + struct tcf_proto __rcu *ingress_cl_list; +#endif + struct netdev_queue __rcu *ingress_queue; +#ifdef CONFIG_NETFILTER_INGRESS + struct list_head nf_hooks_ingress; +#endif + + unsigned char broadcast[MAX_ADDR_LEN]; +#ifdef CONFIG_RFS_ACCEL + struct cpu_rmap *rx_cpu_rmap; +#endif + struct hlist_node index_hlist; + +/* + * Cache lines mostly used on transmit path + */ + struct netdev_queue *_tx ____cacheline_aligned_in_smp; + unsigned int num_tx_queues; + unsigned int real_num_tx_queues; + struct Qdisc *qdisc; + unsigned long tx_queue_len; + spinlock_t tx_global_lock; + int watchdog_timeo; + +#ifdef CONFIG_XPS + struct xps_dev_maps __rcu *xps_maps; +#endif +#ifdef CONFIG_NET_CLS_ACT + struct tcf_proto __rcu *egress_cl_list; +#endif +#ifdef CONFIG_NET_SWITCHDEV + u32 offload_fwd_mark; +#endif + + /* These may be needed for future network-power-down code. */ + struct timer_list watchdog_timer; + + int __percpu *pcpu_refcnt; + struct list_head todo_list; + + struct list_head link_watch_list; + + enum { NETREG_UNINITIALIZED=0, + NETREG_REGISTERED, /* completed register_netdevice */ + NETREG_UNREGISTERING, /* called unregister_netdevice */ + NETREG_UNREGISTERED, /* completed unregister todo */ + NETREG_RELEASED, /* called free_netdev */ + NETREG_DUMMY, /* dummy device for NAPI poll */ + } reg_state:8; + + bool dismantle; + + enum { + RTNL_LINK_INITIALIZED, + RTNL_LINK_INITIALIZING, + } rtnl_link_state:16; + + void (*destructor)(struct net_device *dev); + +#ifdef CONFIG_NETPOLL + struct netpoll_info __rcu *npinfo; +#endif + + possible_net_t nd_net; + + /* mid-layer private */ + union { + void *ml_priv; + struct pcpu_lstats __percpu *lstats; + struct pcpu_sw_netstats __percpu *tstats; + struct pcpu_dstats __percpu *dstats; + struct pcpu_vstats __percpu *vstats; + }; + + struct garp_port __rcu *garp_port; + struct mrp_port __rcu *mrp_port; + + struct device dev; + const struct attribute_group *sysfs_groups[4]; + const struct attribute_group *sysfs_rx_queue_group; + + const struct rtnl_link_ops *rtnl_link_ops; + + /* for setting kernel sock attribute on TCP connection setup */ +#define GSO_MAX_SIZE 65536 + unsigned int gso_max_size; +#define GSO_MAX_SEGS 65535 + u16 gso_max_segs; + +#ifdef CONFIG_DCB + const struct dcbnl_rtnl_ops *dcbnl_ops; +#endif + u8 num_tc; + struct netdev_tc_txq tc_to_txq[TC_MAX_QUEUE]; + u8 prio_tc_map[TC_BITMASK + 1]; + +#if IS_ENABLED(CONFIG_FCOE) + unsigned int fcoe_ddp_xid; +#endif +#if IS_ENABLED(CONFIG_CGROUP_NET_PRIO) + struct netprio_map __rcu *priomap; +#endif + struct phy_device *phydev; + struct lock_class_key *qdisc_tx_busylock; + bool proto_down; +}; +``` + + +该结构中出现的缩写`rx`和`tx`会经常用于函数名、变量名和注释中. 二者分别是`Receive`和`Transmit`的缩写,即接收和发送,在以后几节里会反复出现. + + +###2.1.2 常见设备类别 +------- + +网络设备的名称存储在`name`中. 它是一个字符串, 末尾的数字用于区分同一类型的多个适配器(如系统有两个以太网卡). + + + +下表列出了最常见的设备类别 + +| 名称 | 设备类别 | +|:---:|:-------:| +| ethX | 以太网适配器,无论电缆类型和传输速度如何 | +| pppX | 通过调制解调器建立的PPP连接 | +| isdnX | ISDN卡 | +| atmX | 异步传输模式(asynchronous transfer mode),高速网卡的接口 | +| lo | 环回(loopback)设备,用于与本地计算机通信 | + + +例如, 在使用`ifconfig`设置参数时, 会使用网卡的符号名. + +在内核中, 每个网卡都有唯一索引号, 在注册时动态分配保存在`ifindex`成员中. + +内核提供了[`dev_get_by_name`](http://lxr.free-electrons.com/source/net/core/dev.c?v=4.7#L775)和[`dev_get_by_index`](http://lxr.free-electrons.com/source/net/core/dev.c?v=4.7#L849)函数, 用于根据网卡的名称或索引号来查找其`net_device`实例. + + +###2.1.3 设备属性 +------- + +一些结构成员定义了与网络层和网络访问层相关的设备属性. + +| 字段 | 描述 | +|:---:|:----:| +| [mtu](http://lxr.free-electrons.com/source/include/linux/netdevice.h?v=4.7#L1691) | (maximum transfer unit,最大传输单位)指定一个传输帧的最大长度。网络层的协议必须遵守该值的限制,可能需要将分组拆分为更小的单位 | +| [type](http://lxr.free-electrons.com/source/include/linux/netdevice.h?v=4.7#L1692) | 保存设备的硬件类型,它使用的是 中定义的常数.
例如, ARPHRD_ETHER和ARPHDR_IEEE802 分别表示10兆以太网和802.2以太网, ARPHRD_APPLETLK 表示AppleTalk,而ARPHRD_LOOPBACK 表示环回设备 | +| [dev_addr](http://lxr.free-electrons.com/source/include/linux/netdevice.h?v=4.7#L1701) | 存储设备的硬件地址(如以太网卡的MAC地址),而 addr_len 指定该地址的长度 | +| broadcast | 是用于向附接的所有站点发送消息的广播地址 | + + + + +ip_ptr 、 ip6_ptr 、 atalk_ptr 等指针指向特定于协议的数据,通用代码不会操作这些数据, 他们定义在[include/linux/netdevice.h?v=4.7, line 1721](http://lxr.free-electrons.com/source/include/linux/netdevice.h?v=4.7#L1721) + +```cpp +struct net_device +{ +/* Protocol-specific pointers */ +#if IS_ENABLED(CONFIG_VLAN_8021Q) + struct vlan_info __rcu *vlan_info; +#endif +#if IS_ENABLED(CONFIG_NET_DSA) + struct dsa_switch_tree *dsa_ptr; +#endif +#if IS_ENABLED(CONFIG_TIPC) + struct tipc_bearer __rcu *tipc_ptr; +#endif + void *atalk_ptr; + struct in_device __rcu *ip_ptr; + struct dn_dev __rcu *dn_ptr; + struct inet6_dev __rcu *ip6_ptr; + void *ax25_ptr; + struct wireless_dev *ieee80211_ptr; + struct wpan_dev *ieee802154_ptr; +#if IS_ENABLED(CONFIG_MPLS_ROUTING) + struct mpls_dev __rcu *mpls_ptr; +#endif +}; +``` + + +##2.2 函数指针操作接口 +------- + +`net_device`结构的大多数成员都是函数指针,执行与网卡相关的典型任务. 尽管不同适配器的实现各有不同,但调用的语法(和执行的任务)总是相同的. 因而这些成员表示了与下一个协议层次的抽象接口. 这些接口使得内核能够用同一组接口函数来访问所有的网卡, 而网卡的驱动程序负责实现细节. + +###2.2.1 net_device中的函数指针成员 +------- + + +```cpp +// http://lxr.free-electrons.com/source/include/linux/netdevice.h#L1668 +struct net_device +{ + const struct net_device_ops *netdev_ops; + const struct ethtool_ops *ethtool_ops; +#ifdef CONFIG_NET_SWITCHDEV + const struct switchdev_ops *switchdev_ops; +#endif +#ifdef CONFIG_NET_L3_MASTER_DEV + const struct l3mdev_ops *l3mdev_ops; +#endif + + const struct header_ops *header_ops; +}; +``` + +###2.2.2 net_device_ops基本函数操作 +------- + + + +其中`net_device_ops`函数中提供了最基本的`net_device`操作接口, 这些函数指针成员变量的命名都以`ndo_`开头, 定义在[`include/linux/netdevice.h, line 1104`](http://lxr.free-electrons.com/source/include/linux/netdevice.h#L1104) + + + +| 函数 | 描述 | +|:---:|:----:| +| ndo_open 和 ndo_stop | 分别初始化和终止网卡。这些操作通常在内核外部通过调用ifconfig命令触发
open负责初始化硬件寄存器并注册系统资源,如中断、DMA、IO端口等
close 释放这些资源,并停止传输 | +| ndo_start_xmit | 用于从等待队列删除已经完成的分组并将其发送出去 | +| ndo_get_stats | 查询统计数据,并将数据封装到一个类型为`net_device_stats`的结构中返回. 该结构的成员有20多个, 都是一些数值, 如发送、接收、出错、丢弃的分组的数目等. (统计学爱好者可用 ifconfig 和 netstat -i 查询这些数据)
因为`net_device`结构没有提供存储`net_device_stats`对象的专用字段,各个设备驱动程序必须在私有数据区保存该对象 | +| ndo_tx_timeout | 调用`tx_timeout`来解决分组传输失败的问题 | +| ndo_do_ioctl |将特定于设备的命令发送到网卡。 +| ndo_change_mtu | 是由`eth_change_mtu`实现的,负责修改最大传输单位. 以太网的默认值是1.5KB, 其他传输技术各有不同的默认值. 在某些情况下, 增大/减小该值是有用的. 但许多网卡不允许这样做,只支持默认的硬件设置 | + +有些函数通常不是由特定于驱动程序的代码来实现的,它们对所有的以太网卡都是相同的. 因而内核提供了默认实现(在 [`net/ethernet/eth.c`](http://lxr.free-electrons.com/source/net/ethernet/eth.c?v=4.7)中) + + + +可以将一个ioctl应用到套接字的文件描述符, 从用户空间修改对应的网络设备的配置. 必须指定`sockios.h`中定义的某个符号常数, 表明修改配置的哪一部分. 例如, SIOCGIFHWADDR负责设置网卡的硬件地址, 内核最终将该任务委派给`net_device`实例的`set_mac_address`函数. 设备相关的常数会传递给`do_ioctl`函数处理. 由于有许多调节选项,具体的实现非常冗长,我们对此也不是特别感兴趣,就不在这里讨论了. + +网络设备分两个方向工作, 即发送和接收(这两个方向通常称为下向流和上向流). 内核源代码包含了两个驱动程序框架( `drivers/net`中的`isa-skeleton.c`和`pci-skeleton.c`), 可用作网络驱动程序的模板. 在下文中, 主要关注驱动程序与硬件的交互, 但又不想局限于某种特定的专有网卡类型时, 偶尔会引用这两个驱动程序. 与对硬件进行编程相比,我们对内核与硬件通信所用的接口更感兴趣, 这也是我们在下文详细介绍这些接口的原因. 下面将介绍如何将网络设备注册到内核中. + + + +###2.2.3 header_ops +------- + + + +`net_device->header_ops`数接口对象是一个指向`struct header_ops`构的指针,该结构提供了更多的函数指针, 用于操作硬件首部. 该结构定义在[`include/linux/netdevice.h?V=4.7, line 261`](http://lxr.free-electrons.com/source/include/linux/netdevice.h?V=4.7#L261) + +```cpp +struct header_ops { + int (*create) (struct sk_buff *skb, struct net_device *dev, + unsigned short type, const void *daddr, + const void *saddr, unsigned int len); + int (*parse)(const struct sk_buff *skb, unsigned char *haddr); + int (*cache)(const struct neighbour *neigh, struct hh_cache *hh, __be16 type); + void (*cache_update)(struct hh_cache *hh, + const struct net_device *dev, + const unsigned char *haddr); + bool (*validate)(const char *ll_header, unsigned int len); +}; + +``` + + +其中最重要的是`header_ops->create`和`header_ops->parse`, 前者创建一个新的硬件首部, 后者分析一个给定的硬件首部 + +* header_ops->create 的默认实现是`eth_header`该函数为现存的分组数据生成网络访问层首部. + +* header_ops->parse(通常由eth_header_parse实现)获取给定的分组的源硬件地址. + +##2.2 注册网络设备 +------- + +每个网络设备都按照如下过程注册. + +1. `alloc_netdev`分配一个新的`struct net_device`实例,一个特定于协议的函数用典型值填充该结构。对于以太网设备,该函数是`ether_setup`. 其他的协议(这里不详细介绍)会使用形如`XXX_setup`的函数, 其中 XXX可以是`fddi(fiber distributed data interface`, 光纤分布式数据接口)、tr +(`token ring`,令牌环网)、 `ltalk`(指`Apple LocalTalk`)、 `hippi`(`high-performance parallel interface`, 高性能并行接口)或`fc` (`fiber channel`, 光纤通道) + + 内核中的一些伪设备在不绑定到硬件的情况下实现了特定的接口,它们也使用了`net_device`框架. 例如, ppp_setup 根据PPP协议初始化设备。内核源代码中还可以找到几个 XXX_setup 函数 + +2. 在`struct net_device`填充完毕后, 需要用 `register_netdev`或`register_netdevice`注册. +这两个函数的区别在于, `register_netdev`可处理用作 接口名称的格式串(有限). 在`net_device->dev`中给出的名称可以包含格式说明符%d. 在设备注册时, 内核会选择一个唯一的数字来代替%d. + 例如, 以太网设备可以指定`eth%d`, 而内核随后会创建设备eth0、eth1 ...... + + +便捷函数`alloc_etherdev(sizeof_priv)`分配一个`struct net_device`实例, 外加`sizeof_priv`字节私有数据区. 回想前文可知, `net_device->priv`是一个指针, 指向与设备相关联的特定于驱动程序的数据. 此外, 还调用了上面提到的`ether_setup`来设置特定于以太网的标准值. + +`register_netdevice`的各个处理步骤概括为图12-9中的代码流程图 + + +![register_netdevice`代码流程图](../images/register_netdevice.png) + +如果`net_device->init`提供了特定于设备的初始化函数,那么内核在进一步处理之前, 将先调用该函数. + +由`dev_new_index`生成在所属命名空间中唯一标识该设备的接口索引。该索引保存在 net_device->ifindex`中. 在确保所选择的名称尚未使用, 而且没有指定自相矛盾的设备特性(所支持特性的列表, 请参见``中的 NETIF_F_* )后, 用`netdev_register_kobject`将新设备添加到通用内核对象模型中. 该函数还会创建上文提到的sysfs项. 最后,该设备集成到特定命名空间的链表中, 以及以设备名和接口索引为散列键的两个散列表中. + + diff --git a/study/kernel/04-net/04-socket_buffer 2/README.md b/study/kernel/04-net/04-socket_buffer 2/README.md deleted file mode 100644 index a24b664..0000000 --- a/study/kernel/04-net/04-socket_buffer 2/README.md +++ /dev/null @@ -1,21 +0,0 @@ -进程虚拟地址空间 -======= - -| 日期 | 内核版本 | 架构| 作者 | GitHub| CSDN | -| ------- |:-------:|:-------:|:-------:|:-------:|:-------:| -| 2016-06-14 | [Linux-4.7](http://lxr.free-electrons.com/source/?v=4.7) | X86 & arm | [gatieme](http://blog.csdn.net/gatieme) | [LinuxDeviceDrivers](https://github.com/gatieme/LDD-LinuxDeviceDrivers) | [Linux内存管理](http://blog.csdn.net/gatieme/article/category/6225543) | - - -#1 网络访问层 -------- - -前面讲述了Linux内核中网络子系统的结构, 现在我们把注意力转向**网络实现的第一层, 即网络访问层**. 该层主要负责在计算机之间传输信息，与网卡的设备驱动程序直接协作. - -本节不会讨论网卡驱动程序的实现和相关的问题, 因为其中采用的方法与第6章的描述仅稍有不同. 本节将详细介绍由各个网卡驱动程序提供、由网络实现代码使用的接口，它们提供了硬件的抽象视图. - -这里根据以太网帧来解释如何在"线上"(on the cable)表示数据，并描述接收到一个分组之后, 将该分组传递到更高层之前，需要完成哪些步骤. - -#2 网络设备的表示 -------- - -在内核中, 每个网络设备都表示为net_device结构的一个实例。在分配并填充该结构的一个实例之后，必须用net/core/dev.c中的register_netdev函数将其注册到内核。该函数完成一些初始化任务，并将该设备注册到通用设备机制内。这会创建一个sysfs项（参见10.3节）/sys/class/net/，关联到该设备对应的目录。如果系统包含一个PCI网卡和一个环回接口设备，则在 \ No newline at end of file diff --git a/study/kernel/04-net/05/README.md b/study/kernel/04-net/05/README.md new file mode 100644 index 0000000..730c40c --- /dev/null +++ b/study/kernel/04-net/05/README.md @@ -0,0 +1,93 @@ +进程虚拟地址空间 +======= + +| 日期 | 内核版本 | 架构| 作者 | GitHub| CSDN | +| ------- |:-------:|:-------:|:-------:|:-------:|:-------:| +| 2016-06-14 | [Linux-4.7](http://lxr.free-electrons.com/source/?v=4.7) | X86 & arm | [gatieme](http://blog.csdn.net/gatieme) | [LinuxDeviceDrivers](https://github.com/gatieme/LDD-LinuxDeviceDrivers) | [Linux内存管理](http://blog.csdn.net/gatieme/article/category/6225543) | + + +#2 接受分组 +------- + + +分组到达内核的时间是不可预测的. 所有现代的设备驱动程序都使用中断来通知内核(或系统)有分组到达. 网络驱动程序对特定于设备的中断设置了一个处理例程, 因此每当该中断被引发时(即分组到达), 内核都调用该处理程序, 将数据从网卡传输到物理内存, 或通知内核在一定时间后进行处理. + +几乎所有的网卡都支持DMA模式, 能够自行将数据传输到物理内存. 但这些数据仍然需要解释和处理,这在稍后进行. + +##2.1 传统方法 +------- + +当前, 内核为分组的接收提供了两个框架. 其中一个很早以前就集成到内核中了, 因而称为传统方法. 但与超高速网络适配器协作时, 该API会出现问题,因而网络子系统的开发者已经设计了一种新的API(通常称为NAPI 1). 我们首先从传统方法开始, 因为它比较易于理解. 另外, 使用旧API的适配器较多, 而使用新API的较少. 这没有问题, 因为其物理传输速度没那么高, 不需要新方法. NAPI在稍后讨论 + +图12-10给出了在一个分组到达网络适配器之后,该分组穿过内核到达网络层函数的路径 + + +因为分组是在中断上下文中接收到的, 所以处理例程只能执行一些基本的任务,避免系统(或当前CPU)的其他任务延迟太长时间. + +在中断上下文中, 数据由3个短函数2处理, 执行了下列任务. + +![接收到的分组穿过内核的路径]() + + +1. net_interrupt是由设备驱动程序设置的中断处理程序. 它将确定该中断是否真的是由接收到的分组引发的(也存在其他的可能性, 例如, 报告错误或确认某些适配器执行的传输任务). 如果确实如此,则控制将转移到`net_rx`. + +2. `net_rx`函数也是特定于网卡的, 首先创建一个新的套接字缓冲区. 分组的内容接下来从网卡传输到缓冲区(也就是进入了物理内存), 然后使用内核源代码中针对各种传输类型的库函数来分析首部数据. 这项分析将确定分组数据所使用的网络层协议,例如IP协议. + +3. 与上述两个方法不同, `netif_rx`函数不是特定于网络驱动程序的,该函数位于`net/core/dev.c`. 调用该函数,标志着控制由特定于网卡的代码转移到了网络层的通用接口部分. + +该函数的作用在于, 将接收到的分组放置到一个特定于CPU的等待队列上, 并退出中断上下文, 使得CPU可以执行其他任务. + +内核在全局定义的softnet_data数组中管理进出分组的等待队列, 数组项类型为softnet_data. 为提高多处理器系统的性能, 对每个CPU都会创建等待队列, 支持分组的并行处理. + +不心使用显式的锁机制来保护等待队列免受并发访问, 因为每个CPU都只修改自身的队列, 不会干扰其他CPU的工作. 下文将忽略多处理器相关内容, 只考虑单"softnet_data等待队列", 避免过度复杂化. + +目前只对该数据结构的一个成员感兴趣: + +```cpp + +struct softnet_data +{ +... +struct sk_buff_head input_pkt_queue; +... +}; +``` + +`input_pkt_queue`使用上文提到的`sk_buff_head`表头, 对所有进入的分组建立一个链表. + +`netif_rx`在结束工作之前将软中断`NET_RX_SOFTIRQ`标记为即将执行, 然后退出中断上下文. + +`net_rx_action`用作该软中断的处理程序. 其代码流程图在图12-11给出. 请记住, 这里描述的是一个简化的版本. 完整版包含了对高速网络适配器引入的新方法, 将在下文介绍. + + +![图12-11 net_rx_action 的代码流程图]() + + +在一些准备任务之后,工作转移到`process_backlog`, 该函数在循环中执行下列步骤. 为简化描述, 假定循环一直进行, 直至所有的待决分组都处理完成,不会被其他情况中断. + +1. `__skb_dequeue`从等待队列移除一个套接字缓冲区, 该缓冲区管理着一个接收到的分组. + +2. 由`netif_receive_skb`函数分析分组类型, 以便根据分组类型将分组传递给网络层的接收函数(即传递到网络系统的更高一层). 为此, 该函数遍历所有可能负责当前分组类型的所有网络层函数, 一一调用`deliver_skb`. + +接下来`deliver_skb`函数使用一个特定于分组类型的处理程序`func`, 承担对分组的更高层(例如互联网络层)的处理. + +`netif_receive_skb`也处理诸如桥接之类的专门特性, 但讨论这些边角情况是不必要的, 至少在平均水准的系统中, 此类特性都属于边缘情况. + +所有用于从底层的网络访问层接收数据的网络层函数都注册在一个散列表中, 通过全局数组`ptype_base`实现. + +新的协议通过`dev_add_pack`增加. 各个数组项的类型为`struct packet_type`, 定义如下: + +```cpp + +struct packet_type { +__be16 +struct net_device +int +``` + +type 指定了协议的标识符,处理程序会使用该标识符。 dev 将一个协议处理程序绑定到特定的网卡 +( NULL 指针表示该处理程序对系统中所有网络设备都有效) +。 +func 是该结构的主要成员。它是一个指向网络层函数的指针,如果分组的类型适当,将其传递给 +该函数。其中一个处理程序就是 ip_rcv ,用于基于IPv4的协议,在下文讨论。 +netif_receive_skb 对给定的套接字缓冲区查找适当的处理 \ No newline at end of file diff --git a/study/kernel/04-net/1.c b/study/kernel/04-net/1.c new file mode 100644 index 0000000..0128897 --- /dev/null +++ b/study/kernel/04-net/1.c @@ -0,0 +1,260 @@ +struct net_device { + char name[IFNAMSIZ]; + struct hlist_node name_hlist; + char *ifalias; + /* + * I/O specific fields + * FIXME: Merge these and struct ifmap into one + */ + unsigned long mem_end; + unsigned long mem_start; + unsigned long base_addr; + int irq; + + atomic_t carrier_changes; + + /* + * Some hardware also needs these fields (state,dev_list, + * napi_list,unreg_list,close_list) but they are not + * part of the usual set specified in Space.c. + */ + + unsigned long state; + + struct list_head dev_list; + struct list_head napi_list; + struct list_head unreg_list; + struct list_head close_list; + struct list_head ptype_all; + struct list_head ptype_specific; + + struct { + struct list_head upper; + struct list_head lower; + } adj_list; + + struct { + struct list_head upper; + struct list_head lower; + } all_adj_list; + + netdev_features_t features; + netdev_features_t hw_features; + netdev_features_t wanted_features; + netdev_features_t vlan_features; + netdev_features_t hw_enc_features; + netdev_features_t mpls_features; + netdev_features_t gso_partial_features; + + int ifindex; + int group; + + struct net_device_stats stats; + + atomic_long_t rx_dropped; + atomic_long_t tx_dropped; + atomic_long_t rx_nohandler; + +#ifdef CONFIG_WIRELESS_EXT + const struct iw_handler_def *wireless_handlers; + struct iw_public_data *wireless_data; +#endif + const struct net_device_ops *netdev_ops; + const struct ethtool_ops *ethtool_ops; +#ifdef CONFIG_NET_SWITCHDEV + const struct switchdev_ops *switchdev_ops; +#endif +#ifdef CONFIG_NET_L3_MASTER_DEV + const struct l3mdev_ops *l3mdev_ops; +#endif + + const struct header_ops *header_ops; + + unsigned int flags; + unsigned int priv_flags; + + unsigned short gflags; + unsigned short padded; + + unsigned char operstate; + unsigned char link_mode; + + unsigned char if_port; + unsigned char dma; + + unsigned int mtu; + unsigned short type; + unsigned short hard_header_len; + + unsigned short needed_headroom; + unsigned short needed_tailroom; + + /* Interface address info. */ + unsigned char perm_addr[MAX_ADDR_LEN]; + unsigned char addr_assign_type; + unsigned char addr_len; + unsigned short neigh_priv_len; + unsigned short dev_id; + unsigned short dev_port; + spinlock_t addr_list_lock; + unsigned char name_assign_type; + bool uc_promisc; + struct netdev_hw_addr_list uc; + struct netdev_hw_addr_list mc; + struct netdev_hw_addr_list dev_addrs; + +#ifdef CONFIG_SYSFS + struct kset *queues_kset; +#endif + unsigned int promiscuity; + unsigned int allmulti; + + + /* Protocol-specific pointers */ + +#if IS_ENABLED(CONFIG_VLAN_8021Q) + struct vlan_info __rcu *vlan_info; +#endif +#if IS_ENABLED(CONFIG_NET_DSA) + struct dsa_switch_tree *dsa_ptr; +#endif +#if IS_ENABLED(CONFIG_TIPC) + struct tipc_bearer __rcu *tipc_ptr; +#endif + void *atalk_ptr; + struct in_device __rcu *ip_ptr; + struct dn_dev __rcu *dn_ptr; + struct inet6_dev __rcu *ip6_ptr; + void *ax25_ptr; + struct wireless_dev *ieee80211_ptr; + struct wpan_dev *ieee802154_ptr; +#if IS_ENABLED(CONFIG_MPLS_ROUTING) + struct mpls_dev __rcu *mpls_ptr; +#endif + +/* + * Cache lines mostly used on receive path (including eth_type_trans()) + */ + unsigned long last_rx; + + /* Interface address info used in eth_type_trans() */ + unsigned char *dev_addr; + +#ifdef CONFIG_SYSFS + struct netdev_rx_queue *_rx; + + unsigned int num_rx_queues; + unsigned int real_num_rx_queues; +#endif + + unsigned long gro_flush_timeout; + rx_handler_func_t __rcu *rx_handler; + void __rcu *rx_handler_data; + +#ifdef CONFIG_NET_CLS_ACT + struct tcf_proto __rcu *ingress_cl_list; +#endif + struct netdev_queue __rcu *ingress_queue; +#ifdef CONFIG_NETFILTER_INGRESS + struct list_head nf_hooks_ingress; +#endif + + unsigned char broadcast[MAX_ADDR_LEN]; +#ifdef CONFIG_RFS_ACCEL + struct cpu_rmap *rx_cpu_rmap; +#endif + struct hlist_node index_hlist; + +/* + * Cache lines mostly used on transmit path + */ + struct netdev_queue *_tx ____cacheline_aligned_in_smp; + unsigned int num_tx_queues; + unsigned int real_num_tx_queues; + struct Qdisc *qdisc; + unsigned long tx_queue_len; + spinlock_t tx_global_lock; + int watchdog_timeo; + +#ifdef CONFIG_XPS + struct xps_dev_maps __rcu *xps_maps; +#endif +#ifdef CONFIG_NET_CLS_ACT + struct tcf_proto __rcu *egress_cl_list; +#endif +#ifdef CONFIG_NET_SWITCHDEV + u32 offload_fwd_mark; +#endif + + /* These may be needed for future network-power-down code. */ + struct timer_list watchdog_timer; + + int __percpu *pcpu_refcnt; + struct list_head todo_list; + + struct list_head link_watch_list; + + enum { NETREG_UNINITIALIZED=0, + NETREG_REGISTERED, /* completed register_netdevice */ + NETREG_UNREGISTERING, /* called unregister_netdevice */ + NETREG_UNREGISTERED, /* completed unregister todo */ + NETREG_RELEASED, /* called free_netdev */ + NETREG_DUMMY, /* dummy device for NAPI poll */ + } reg_state:8; + + bool dismantle; + + enum { + RTNL_LINK_INITIALIZED, + RTNL_LINK_INITIALIZING, + } rtnl_link_state:16; + + void (*destructor)(struct net_device *dev); + +#ifdef CONFIG_NETPOLL + struct netpoll_info __rcu *npinfo; +#endif + + possible_net_t nd_net; + + /* mid-layer private */ + union { + void *ml_priv; + struct pcpu_lstats __percpu *lstats; + struct pcpu_sw_netstats __percpu *tstats; + struct pcpu_dstats __percpu *dstats; + struct pcpu_vstats __percpu *vstats; + }; + + struct garp_port __rcu *garp_port; + struct mrp_port __rcu *mrp_port; + + struct device dev; + const struct attribute_group *sysfs_groups[4]; + const struct attribute_group *sysfs_rx_queue_group; + + const struct rtnl_link_ops *rtnl_link_ops; + + /* for setting kernel sock attribute on TCP connection setup */ +#define GSO_MAX_SIZE 65536 + unsigned int gso_max_size; +#define GSO_MAX_SEGS 65535 + u16 gso_max_segs; + +#ifdef CONFIG_DCB + const struct dcbnl_rtnl_ops *dcbnl_ops; +#endif + u8 num_tc; + struct netdev_tc_txq tc_to_txq[TC_MAX_QUEUE]; + u8 prio_tc_map[TC_BITMASK + 1]; + +#if IS_ENABLED(CONFIG_FCOE) + unsigned int fcoe_ddp_xid; +#endif +#if IS_ENABLED(CONFIG_CGROUP_NET_PRIO) + struct netprio_map __rcu *priomap; +#endif + struct phy_device *phydev; + struct lock_class_key *qdisc_tx_busylock; + bool proto_down; +}; \ No newline at end of file diff --git a/study/kernel/04-net/images/cat_sys_class_net.png b/study/kernel/04-net/images/cat_sys_class_net.png new file mode 100644 index 0000000000000000000000000000000000000000..856f02609c547e6da0c843d048b69574623c7d68 GIT binary patch literal 52406 zcmbUJWn3Ih^eqbaK#-sb?vUW_4uKGY4ema;ySpSv2<{dJhv4oOAh^4`dvJ%B$NuNs z-+S))aKH3aPtWvp)vnsL_gZUDh`g*gDiQ$_005|x5~7L#04MU&UPpv^Ill6y!+d#x zbrg|QMnpthSd&|QIep{wS=~v=*2KwG-@zDAGIMrvGIlWhGWr?-$N)*vkIHWIhfAhz zL^H```zOkW$NP(BPT7RQkRdn``| z-KMKzo99ibd3raTtV@i>Vt$HB=HO98lYNW=Kp4EPB0K6jdrxM5fP_2@jR?%p$s>Z( zWr)huWtwB*_dm{zes4q&-vzuJG6_L}GXHa?j~Dshg?A_$Z|{hOXjFnV^j~wm`uF3V zZUL(NCHl52RV%xX=kWNj?tk6nUBGC3QsBpyEY}^WLUu|{{L+<$rw?UJPm~2tmOpDb zt#LSd9VeC|S`8DF*EB=RtEFkdjV7+YwNfW4GPWAbBE46WD4}ib?}@c6R=4zU{O&)0 z-gw?tQ(B`9ovWMKDw(Q?OG%dqBR-S6#kP*eioh%8Z`HPe?M)-$aS|wdKqHL`pyg1( z0Wy}U3GS2QzVFcd`&e1}0*Tj0$g131Oo0h=(M4VO4s&108853c<4WZnLfd{*LvM`D zwY5#Q!NYMbV%*;Ej8YjH#;}P9VIvy7dgOH04yj2|CLAtoyQv8-Tbb(_D+t+KIJ9QG zDmn@fXpwgM zZ1Om7b_u_9&+;@g{j9o0p6J;j@*JLD7|TtBAO>|awQe0hZPLbp4LhlKCziWElei$VSZ*E#I-cYyPmQqhEo*1OG|^+PRczjdE1{q_>LhVk7`mo=vbkR zsQf#RZuOf99DaDF)zUQXB9=9|+I_m5+E&N51gC(aJX(ltU&p|+SbW>*ab1p|su8t5 z@yI_P==Cf}K67`)2UrZ5-4OC<0KeDXBG|4+*bVz(P_7)+c43~sUn3Dk` zVl3ZD#qsRlq*A7fbe!gPJ|ij~9;E@Kar1{v@)lfQaQGAH%!CK2R&*2VWJeT$Q#eL6 z3t4HbZ%seo{G`=*Rt}x;il?A@P8VnTSlu=SOY1b(d#D1S(aq|lVRkAm=XJH%Xc(Qw zx~u6LZF^7G!JO zr4ZVpvvwae-Z)cYM!miqpeK|r!XXBPAx-CI-xNTzi*RP{@R{lAwt;d$Dllghh)KB> z`_*QsYi#z}3VfG7jMJ*HCn!i5;rM;GVZQ^e!itGYnHX;G(+ZOCI~yZZ6AK-i?V>DBO`%sNu}YQ1-k_lvbD z{NUT7^cv`HJz?5n>W!;Yn9L(6d9LP5a47? zi1PKZ@3ZZ4hI%<3S$sew-j=2G%p2rf#fjEvp^Di^H2kJVF9Dm!H4r^C=ii-&lr}8# zdUvXjVTNl;VC(3>@KPpox~ZxwDWs|oi@^;ik)Q_c(!|2s;;xw7Whk<8W_R?!SP3c_ z8CB50t>n130@|4?5(GaN=Covv^&kPiev~()v+tf+Tt%p_PIM7A(+;=_8lU{pCIM*H z%%4wC579es!t!rPjr1f z#EqiV4_b9o?93=e!l3~g&8c|AHPpRlMCT2E2|Dh{affp-c;Ck@?Avl8tKM(lBL_p% zW$A&8El+VYcqb3ES)`NcqsA`&ny9@8^OdM2c}HLO1`?-S0id^iH}J}6*{bwsR(=l! zHlo@VZTBAsvUyi7Y`Ma?U;HyXmPP7@mc|FlzMjt=3$T+`t~BZ!l@+%I*X;cUJ+hsu z_4zUzKs5ysFJk_qD5YLW5a*ZaIho1_4-ZD}$HQr{uE(zc41&5=r^U-f zGPPeSm;dfCmM9zk-*B~It;tbI`aD;@UAG3NkEvNPIc_kkMEXvOSQJxRb89Qa#e{WQ zfP)HhsYSsdBc{s0-Or+@wxsXmXhCRS?JcrS&_4qmDCgQ9R2O+vmtwvjZal~IVqexQ zU003@FiI370?W?N30^OLdf(Fv5a|aw1wo4ji7f;0xA1{3_xQ7MhX*h%K5%D^{XD_L zPJl70;d^L6`#h=2c^e<#HdzX0?aEI(6>@REa-5%MIFF;rm%;WmX2;19apNxXvV^P~s>K!%ks z#duShd@4t^KA*;iBOaPfGG8ZzvT6?IFUzP)iS0ayRNh% zrXlZJKTe;~N@PZeM8MAn>HJ>*Y(rE2DmYYN{At+0)d8wiLga@7Jr;=REqIAe*tney z*yQMD?r5%6Q|)QubfZEDLaqcbTl)P08P^V2X9A!X2*Y;~LV_BO%2-}o!;%OSe7)LQ z8Y~kyq&jl;tp_84HkKAoGJ%n3+ zCII}TTo%T$-$ueAz4rKQg4&?n*&2W*j5^;4VSN4Bk6w;L5RZ=2=-`?XrmcJ{;Rijl zF&*Gn`=FRqXW_T2TZ!L>BQZi6sJD5OE)#Z?iYuT{Xa#+}s`?5dp#}nky{$GOxSrNJ z#$3#^&Q+Q36t?3(1rDUYE&n~ajx4f9t6<4`!-cPukK=AZJf@Zy#|HdT7ObtcSVrh} z=9)+rHpnZeo(&Ps=s(~}v2abc2z{osgEG`>h)SJDVkg08mE(>B;JHR}UqII)9j$H5 zc;YG{0RTn89BOw)W3|08P>&ou5g=?<;C#P(?PAJ(@_NSA)00v_bH(4g=^7pKrPX^QV8aH>O3l z9nguS_G3gG=G=p>-h99Z>NmJ{Kwp{AEJEUz2wxv-^yRPn_5%KSy8y-vXU)0`0q`!4 zO7~A>^^~%0*>Y{mO-R=sV(zCdza)bJP1MkQqe_(~k+fKL?=mWbd}trfK4Ymv%Ut(s z9Nn@FA{i#}61!vE?CieV(;CfshQ;Yg5nWiafQIdMjG8E=>Md>rV2IU7vW)O0TY9Z~ ziyeo-hK+!_dSfeLR#cl0H%JiX6f+|$V&YD&8AtmBX=AH(sXi-WR?oJm@SQ#18B%Jh ziWeCk00o`?=OfTJOuxEQv6rxJjme->sso6#JzplJu%hJ&KtLc9*0u<%N{%rQ0cglV z-_wVE%F>k-h_+AT9+K^~yhSkFyX||!`6w(4o3TPybYIKD&y_iI+J}y|Q4?r9#!wk! zif7+vO!!q4b~Jbqb%m{RzXon+KpGX`;LV1y<0JN$aM?`6RVqQt4>rVuF<|o9gSz(H z6gj{MKXp9y{aGx3&1!RDZI&@G9{}xB1_6j0i-%V+ZYOM-CrBXjTr9Auu<4MYUi0`j?io^r*df9lLb<$AkzHC(SGkT^3}a;vLe1-G4Du(IV>QJ+_xq0sH@K?gbTCMN5lX1 z(O1h($aeKy%EngU&uE7zhY0m+zdVjy%mp)V#rVSWJ;8$A5)8mk7Ka|oB>?J4)h5D< z4}6WelYZa6hbI-?-*vI9Y!#b>%0tj*wLvML1~*m;0_AEmQpMQ5QNhj-wl`#8grzCI zr0!mIo#;REf68YZ#zno8OtJf}tk7H1XR0acKEHlH!bMCD<^zB!x*`t#3DGb*4Nk-n zH2Ya>m5qd$ln>}Yzf&my?}-123OR-0vn;~*R7$OK#DB!eR;Ni$^tfY2_OG>gd+C4)WnyC!`hh7J!JLW{emJnC)#w;lpbZd zHlb6}!1!3}*gAo?2=Wgyc`U#>7X+wJA5K;gn0@~dE?HIaVXdTDw&ws3Ap0R>I%ElC z&^l024aKR%=gU&19&=Y+VmHC*XYgao(a^~plr(oS&JH-;Ngr;4GdI7uC0EX;kht)> z+3(kkWxh53oX#%p2Ls4+9TP3pJGN6lp_$5oMwI_uEOWd5WtJeIpQPn-;N5vv>L%mS zvo;PRJccOK{iA=vSs>x>AwlN)9$e2!qOGLm)7%%kngtE#(|<))Yh&hA8bz_jTsR)q zu5j=pyp1ojwQ}d)ggkXLzn|V|+ejI6-D_0&6;vKu5 z`V5bi)LD9Go4nior;C)Llq*|`n91@fPuLQOOS%18u$EuyAm=9g^RAik_G`#b@7j7> zcLM0p#WVP{)@k{iH}NXb@W}!Iu5Qn|eK#FQf6QkaZ@&TnY7XC$ZXLw*J9{$cf+&v9 zMTJ=)KfR?pqXtLa4eI41Ar~oS=R6s?JAsGAXZ9o56DL9!fvpOL<=nnuNO&YQCqVY) zsFv9s*Ee31Y3efdH2ND75LaY%VoG#ZRGlioayLz10OOaLYjOhZf`F;7BU^9xt#T2q z+otNQL-kK};}!Fv_?IIqpF+x8d}(IzLiDma_F;E zry$pVO#!ywmL}5Fb1-Ki#GMn7VLQu}kk8JKObj@Q;IpPPQ~scb=&~T*h;myLfN#;k z@d3lKSaCw9_6A$wSdkqr=7>QECv?Upq=`;60>n5%6~t(GvH+`Z(V&z=XMN}6ZfGiS z(_rKfUTlHIpHbKPbL2UAZ?ajdt>A;_kXq8O8N&+H7$m?wg>)1@%fL#lB9Eg^Z}Q8o z&vpS=940b zhEtbsz##OSa2T(+EGZxR9mcf zRre#|1i=HNIigI9q{N33znLKeOjm6rnfpguDtu5F%2f1gu{+r=%tYN!%#sZ-yA55Q zZ0U;10FY%u`BtwYam;*fvw2BE=_Mj;`l?Vh!S z8;+27+BUw1bcRDdbZ^M~x2+9qa9hCuB^>FPFPSPkw>fg}`s7n+2%lwvT+c*GT<>RQ z3Ils=*Kj$YZ;KY-Or+*P{};&XVDW)3!SRae00CyxUKa;%-vVFYmHZZ~J-_4`-H~@b zl8SFk!1IG&0FOJ2mcZ2Ka=urS4cuPOELj&$_On#~&QJQKu+aUGn1|4@=mlov81){~ zL{GW#dT_DbMin+XcXd279+N^)_p(3~gV`+KKVN!xp>NYY=N8W56Z9*$JbHaN>BqBC zU3w4RlVJu<3>(1TCgeb?(S=9yZ&Z^2Luw!V?*Jk$vCvq-{IglTy!8S*{&(SjgDC%M zY7!&l?z7M{v-~v=pOV%P8{5gAwhy9f=% zKugAsakgBBy_BW5w$`#eUlMk*1h4!J6WpHQQ!A@;;dRkWK=lx1jwf3mPHbpplDDVM zvL-RO;5Ovu&k0cWh2mHJa>Gq*=o@*E8 zIZ5CrvEtB~cV15`6ZB+ipwl$!8W4L0u`G(uLxO4BkGPMNubo=V=T>JX`)gp9to|3w zsgrChUh0BPohZmNt|;UgT|ghVxXyeULhYkLfSZ_n8^fNPHYNi>oHIcNJHhpI`(-n& zoGPjD-1kAij(}*L-Ddmn10X{{G82UD2I5-GasOgj_K$jp0-ax|NG;%k_aFChw1P@xSb;$q|-s z)mOMp)E2;8UenHbi3DJu*r8oJR#PvRv*$XBX}Kmvw3I-mQN|V7DPv3_z1@IOK)dT< zG|!sgY2%V)I}yY+^>&vK{x;S|R9C7@O}ICIfCGF8Th_zwam}s6_Gvd$#p!@uU+VY| z-=)J%d?wUJ0WO1x(poNF<%mP}NN$LODHFflY3|xdW$59L=WXN~h88A!OIgGLP1O7G zlSAy5T%Yxm7t|lMWd@JrTt!`7556ahT`s+Oo`+!^VPjLZ7XfY zR5M>H+e(&>lrx!w*>!GI%cE%}rLjnT6Xodlk0C32u+hD#b=^aNMfoPPuhyMU(zexJ z@G+@(e?A?XM!9K$0UH%ed0xkUQCEL_`0jxwof}}EV@lT4uj=P@@pq?lJp8c`_+B$z zfBehLjTU(51jPIY-#`G(1A;cULg8=@NZ2JV(Ugn4A#{2+O@lwtIq~NNCNgP%*R~}I ze%ZD8UKRA}Yj=lnEFE|d>sukrs4x?9DoD5`Aygpid(%ccbxdDPB~k$XO!D$tSI>q9 z8sK-#P;eiqstZ#ifaxv}uSvgcK@kWmZ`KMff9_Qn|2Tpz+AH%oFnKX}^A+Q^UC)S# zaQ-aqdp~#5dUt<<-SY}1Qlh5m@3EVlaEKKjxIiwjE$Q1z3Ns?WE4K1(7FstiR~ZNY z3tL1^?$vYwAnc0R%pB`1|DXVtjKuJzNwY7S%xS+BRNLEY!0?f`sA>`}m_yV&)Go{b zv8H;x_zFHjanNtvYM!6GtO{hu4mbdt&YD-%gnqfI=a;dufnWu^rd*fM?3acA=LI5~ zFyI?Wnw<=R$cQ01?Jdu1%{X)^ghywy7S8X}ZMj9z>{*p_kGt|E(`nNYt`s0hO^&^!M(}OgS07^ zE<~sDWR5^Sc?49ba9L|AY3#9_VfoSJ#?nUDm2Zfr^S{Ngt)Bf>F=K0o;pgOfjUD(L zm4e~jwJmO2mVz%hAk*x;+R|Fw&8tPaJY&X866H|+So0}AtG}jZ0U;h0(e$*omSfVB z2nPz7DKcS)U`sP?OpeX05NOE?y_r{B9#z!Yr>mF`7eLLx8TYU7S2BgCVooj5HNY-a zk_l;jh`6ttAq0e>`}qCwsy9*>C^U1u%C4rSJ4QC`d;aB=Dl&wr^z=k9;vBT8Nd$y@ zd_p`>g>B8^>dRoKlGTa8a=#IwVMf_ax@R)HpNHKpe6dA-d@ao>1t3Q+C3+d@dMkY<*)ejG~`rmOFjBL^uR2@xeg(hbCmRq_^mG4%}aaA%H2H{TRmyPZ%g zYRL)AzgX1&(5JIt%&z(#)-kth~4?%q2)OWqARt>Zt6WFN)3U zop=a|u(giuQdT@3|KxU5Oi$~0)_OKHOtYwa%UHMOr5tmk6Q`!kg-xeQtMPA}HlqI% z^yuTY4YGV#&Q>d`)Lu|NkE<(-oZ=4DJQ>C*3+7Fg2Jt_i$%ShMd$8Ah;Pjq;+q8X| zML_J)V%5*S_m++G+QfqCk$+Xdv&M7}5?{^Dai1&t#yuOyy>qcntlao-1^0$) zN0m2bdRY@Yo?1KJSzn$Z8&8^kFef*yOX?WJ-cqlCtMblsx{$|Pr}3mv&ca%jnt;jg zu~z|TW8frbl!F?XqE5*?q>7pigCkcwR7e_o$A9+$0nPj zQ)SRF0SXLUx!>gWa2G$iOiL_T&ocUu{HVf@+VIZjZQXm#U(&@n(gr)K_};gfi>kgw z8s+ocD-fQG2PaJsz_`Niz>+cH_)FET&Sr*jxgbz_NA5o8Fev4IVBj)?ehVawCdOP% zeQx6T8Cy`0szA7&PL4Gw5q7M#s=!S#_tkPkw}w_1ffl`1{@ubo?lMV+NzF?Z0tCgwL$4 z)#NQaN8`A(#9uT7L_r0-ZQS0!D=co`D_NdB1qRV*5j4M9jV# zK2A>)WSYb_c{(U->&`&hQVI*69+|(nez3FTLzK=mYK1q zEiML>v7&k^6waRg4wQD;!<29)XRQ(ok^Clp)QF|zHIM&nm}n}LUoyld7veCle5%G} z_>nFkKUPeJ(+n(Q?XxK5MvV}a+DumXi&0giMP5l9wilDQ00s~>`1Ee4QPEolQ)roK zSXaxkFz1C!#>&pt5R-+&j9wGfo84b`*m#W!2q%nB1RC5IC_QB}i;g1!!cJ_&Nlqs| zzcXF=4+O{9H@YY|Srafp>Kh0$WR|xg??tyv`97l&5%Vu3GnxTWSFSisvFD2xTR`<6 zr=4g~d+f@XL7B9q!Px$q5B)7uCPYZNxJFrGS%M>?We#M*6KQ{h)8GL%z%Xbj^2-jM z)5N^@f*(RucZRpS>v@s;TE39APd=58=O>Re?uE@5DS89QomJMBa3}YO-GJwhq&x{E z02Zrrmxn7>F0iLF+YmFmhJ;Jthqeik=!Ht8Ky9wm*oXt{NZaUJ%{l5}*5Pd`YJdV^ zI3UNepdclEmv>>NyvU!MTN%+bZ-WhZQ(8RT2mEpx30a%Fq!_TNL#H7;va)e_>v!?X z7X3$Znt8;lyoY!Dt>OgE4LLuVs^ntZ?J9HJAG@7p$-yAA798*vhBGW?A`U%jIWR<^`u}r`4EOPNzosJj%(%*Fn@6y+aqpba5{N$Q{Z}T zB&S7ru%u{9K-+2}r*zimrv3&S(Cqt6J{A?$Hu-n1`oeS~MBPT4dY|b$b=SOqu^VNR z_1^byJurc~X_x9lL=ZCIt(VFY0^a|Mr%oY3i6^MMyvOi|%sPOF;}hAi0bwm4 z+CeQ&VJGIfFbHzaPNWEn!@~$w_tj97SB~2h|y(47=-W=`4^CL}p; z+<+R!pRR1dtZ>P=knyQZ{u@dc{4#Etx+_y8ap+L!4^DH3M&?~J=dlQ+2!gh5(^YX@ zQUPa$MgjUD#tK;AjcFfaWFo^EXR6*BS(?_J|HSSDu)0XUX)R>sExfS* zlSj;qqDwppvE75wFAxxrpjj8`W9#a24z=^Ht8>*r$A}|8%BQBU^97h9g7$L7Wz< znK)-ds?3$;7{3pYjW6J;+hsQp2|QjQ8*0%}9ubS_T zuf@K2s-ESoqvMl}Vi60kH|D7>%D&Jl)h%=pjy6MPN7?%Wf zDY4BJ>SPZ0CAX?!Rw#`a5nbY_H7r|gyh1LUv5%li%vR;O4jmiYd>C-5vD2t8DF|$a z7e;g(`buf>uFj0+Pv+}!qN=ba8%nn=HF>FCWg-s0jkb50CG$`m7E6|KNnQTe$y|eMg27TV^rFQy~ z#ZY7Eg(B>8G3ln;bd^$g`gERsP}^~;C7Z8}+!{@QBlSK?MfEkXzTM@Qy^DZ28Z-;e znE;08o9VK#q|UF&UrU`x2ztr=!~l>E9ai?losMNv>H7XODCx8#S1IJS&$+F%I?ImC z=9rPd6{Ib8R6fbsgGuyVt+%l&Gl z`K^Q$i2dm2Ii7gX1hNZHzr3bGpDenxal)ORsE(wg{n4)lgq0sj-pV3mVl#hfcK-Il zU;#j>9nURI9#7zGzCD_f)Gy#YGJ?1hyz20_aoE+{zn~NShr?Xs|0A=-l&kK#IFn&Q z?d0C5XZua9bf^j-!}oyH8kdGO?|!*n?h7KIbewkF{Jq8{q+eMa||(!0!SH; zleNmelvF7k&cDvds*?f$K8<4e*|#3Y$qz_fMgWS`K6}Wkd_$Vgbhs0qN)<9OT&rde zmEnoP&N!k?@UP+=YLX;cKPs#E!E}XJRHI~+Pp9L3U6G-$L%2(?<$-YQQk!?sDt>-f zN0n~=cFR2UL}&lgoHb==#7DdEc+UWdl?LVa;0s;w5>8Pvkdy75eKx4l^y@XuXV9qX3$t%L zBr90tpVvE=#6fs~x!ix?)EofN9Hq~RnlM5jjBGkbq zq4!5m$7;EvW5~4{0FTL!EoQ(*J?0}Qg`x^D6y-_Xh}dSB$7(@5XGlJy0}atv6}P9G zm5TS}mF6*RrVKkJ(}~tThc=!&enN5mV7e{>X=q`0xQdBX>NJ$!i8Y_GU`bh088EAz z+$oBC|30^lcfi8Z3)=($y7emetHyp*ZqjMbq+n>8VmV;}@_gADsj}PHsE8%(e_l?1 zD9C-1QefX8&OW%lt)JJq##_YopnCsW!I0-`mxX;i-x8X4-pLL9&ia}5{T3x4yJK#B z0Y%3}EUTN!hH^vt7wzU)vpz*wzW)2<#es~CA;23A<(UbTx*E8_>(o0d8v>#h1r9ZM)%UCt>J9hPhY&O+e zTPwDfqI_?WcW_Yncv=;=j@|(oT%riRSVKDAd5~+l_)DQ36K2<%hgeK+h>nr4Kks4T zb3%v>3gqGAy2XV0E|{q zTkwuxx}&)-?{*nHpqI{U`ykGA-CiK5X(9^%b|U997K?#@3P=$Y6Okm9stf4|0L1AM zxdi?lPM`IqC&PSE71Q~PoRQ9vN1=%ie`M?Qdz459)^$=2AEs{H6k&n)vo`lJuBU1R zTZ%eu_@p5}0pW)JE1&MnHmRmQ*lgRD7&-t?)8gt_@8Qm&=3NYje2BPyc^(pXnFE#)||`5*>2wl8<6&q;A&I zlYV%FCwCnsq1?7U#g7f-odpNJ*8>;>wZ#;Ssicdpq4<@!D^FV?d!MN{64jJCJnB}S z3+9s%c!K63?wPJnsQUwwN1X%k!s==V$HAJ17Y3v_55yxaoKfX(_G;+*77yw@8>b9t^b~6+vWj=dgUAl*5kb zrsKA8!ZhD3jR-jJNvxhaHEP2Fbia{_;m-+8wD`dV8O9n+$m8pE37Aa6BLW$+xdEge zgmRRfauk?^zt^vn!?uFmI`O|=V#mITJ@bKav8Iwh9MrNSFisX2)HPJnj(Sg;GJj}& z6?kaox!f|)@bqEtVWGk(Vwe7q^SZGl`_l<=FAdqi9Lg_kGbYoCLU`c&4;k}c5V|ih zl5`eKxKLG@<|I{(_Kp|n)(d49c%S{1IOJvvY~J-WL$2J?(k#`Zlwowfwk)wy;I^(< zP5r+(%kPdO7OEH^98dhT1exK5a1P45r$1U7wTCfQdkodsMHj`%NcBczPO<(%NYJqQH_E%0M5L$tgLU9V#(i7c9uIzA{H?e&l@_3X z3a?N_TTyQyJRo;Z{yii#pQGJqdh7)tj0<}Of5+s6*7F)_<5>H9iPVfX*xS!)Hjg55LT-vbp-a!hU0R`&Tb28Paq# zH1w-<;)w03+`3eZ53akn+5=b4@g(Fg2murJYdKSJVNqy)ycbor8Mw6LvbZ1yoX?R& ztT#Gd(46I;Fl3Zrv_1JjiEH$?-TeUq)xk{ll)HcnEck`BO_UYOjxGo}Mb4f;9!8hS z+E{&Ozj22H2?-?6klb@~vM|W9wX=FpyO!edH)pnKVzOcD5VSb^)K~wDr*-}ODk`-c zgtvUIXKncSV9xe8LwnM%%{(&Pz0;JAk0-nKRL8>5_`fr>U~X&nH<`D`_gD43Td~!o zZ`Eo~#?m+$C>ob)>O>@A+VMAK>} z^Eb?8q&Bl~F)DbNv>rv@=W9b@`sFYK_%vWj3=T7_Gi=5agT z)5Z%ooG24u(GXW`fD);?YnRBrcZmHwM9t1)^G|PWUUvK#bKAMlnFn7RK>ZT`v8^8B+Rf)RrX!R>n z-wLi0j%*0XgcjZN_$gAo4{R-~=ckt%^*1ju72vL4|2GEQVtD8|Jft$!2QgR9(lXew ztS_QZ><4?YL^Y!?L~(vA2&L61ixlW-YVX-PEI0P z)7qL9FgeGoABjQX<&pP(&HgH2hmCEBZf%yt z_PUgE(wh{(uW+#KwXTve9FTE?|M%*DIsDa6K&Fp+L;vGTOh}0vF8WEWlrdl0k~`rX zSf33sjSR~RZFl40;Nx;15OlS!P1e!^k6@oLLZmESL|}b-JR0N8J{x@b(YXMJBttnM zj3Sl*;{_u6pC4f1fZXK;)ZGsPQ6F4Q1O$aT5)5>RW7&WMhN{tlKCPe48|_Ue+K@H2 z$}WdD2|K22S_S6zGD@64#_la8CA)7STLjU6Ye};!X)9o;zbC;11h8fAFl#4CZTr2IzM7w|;k?5xE>8g)ft-GH4aXMDEv({aFChX3eBs>x zvnDmWa8kpmC%+Wfi5$El{v?cxqonyLOT z@$m14(!Cljserq*bWYSC$Eheg9Lt-e8(&qp56LM)>gNk^_d zw$qqCY5v4FL9ALl#aQQV<|l3IiU=Y2ufEQVliW*ZU=i|PaODp1(BJJnKoEDJ8&k2K zbCk=z{mz&ZG7+qM5CT5$Tt$~GSv70f7*jo%vi%bIPc*0KF(4RO`nI$(T)^Sxm!;uA zSSxL&`$?-H6z&sV-*V?jTE{=w#@|jyjNN5s5t4$3hq~pKJ!LdH_KJg+IGqH){$|-T zfB04C+ft%*g4Q?vn6joEyF4j027ElzzGpZ0Cy~ZXkf^731?F?3vt|)hnle-o@BnWj z(tUnM@lZDmApF7Mblpu9W_sQF0x5LGxh${e9=?Zdz>6h~N+wc zC7|F~(GF!7_ssu%nP-dh60|Q}7x0k)l`ROqV zAz3Il8sh!FbN02`Cd4Am6J}%DXL_9E`y`Q|Qh0kBX ze1Ez?eaG}{ek01IweNh?Z|re7+~LwxD@~g=H!(fxp=E7dA~_%`_xxzPlBPLV#WR-3 zAyn@?bL`L*&2*KK5QGfOaLRY5uYp##+<2XUVg0$Rh{<^e@rmoUyTYkvB{CaN~BR4r*;z zDqZipt*tG&%gTzF=?l~y2cUcwPBcH7GBr~xxR#oRvYFxWCqC&YxjS#6;lJlNY&Fa;sN+w6p*%Zzfn^I=Yk`tpM%-E! zo~1^4Y6lEfb(XzxMHb$>&+fYua#m(b+Pd3pe;7KE_ct?-$2O6mCbW)Iu)ddnpg2YP zr7xLgT1$nGVXV{Xqp)gM>GSF&-j4V6(n?pJ{&CFl=sE5$RWw+yBnb!t*G-by>yOrlOt=XdpTi;iY z9c_PG-r`VFhchT_F>XqQ??rcQy&fkNUunQo1FQ~gmh`gAjNLL#7EV^G?5&eE)EMx( zv~-r~2nQ0}r0NMRW->2oQd6x-C*FN>vppD=LK8;Q<++@1&$e}u%>#Z-d#M$L>tsrY zjMkUrhJku-S7LpoOX710bLQej+GQrH zNU~=7{F)&MQJBl_>epPW-D%cn?U5y+&LMT>75RBz*qyr|pplQhpqaP&kYF%i-ywK~sYn$o!&i)5%9duiw!Lf0^l?Hl?=2 z^*kUiq&2Hg+E-eL^u;{7e=@)KsS6N=P$T2fmRUF)u4|p7d!F2k?La+Gr}_xp`#5Q# z(2yXNjG-aRG%VrfgWlAgZfck(=v8*`Ba+`sgh|`BxT4%@wKMHN>_>#p=X3MNR#)(1 z-xF7iy{hLS9IFd+xyD8dA2q||cjQ`>{vxU|ksr^)vHw-3{>$dJ=*bLCQU!%M%NP$3 zJ-t*s7uVDV0GmzdZLSWZC+Khp!|4KcbZCHwTymi9+;&=nHhG+j@m8FbzFSUt9OPYX z$J4!K=<9Dn&sA$}k0H+s&nKed_N+!4eYjeC2Q35UfxW-t5P>hQL#=Wv&wE3yDuO(p z4{PeIY0*ruJRo?|g+=sAGK12QT|x;f-jrhtuKTyywgL5muS3u;o6|M$3iLxwLRI6S;x^l?BHjv4i-iA97Xhl{6fUqa>lOLqI6Q_f@ z`m!w(GvnG?Cl$#&?{{LJPS;AI?PHt9YImfK_-j&Hq;oTR^jsmW$79s{+pTG-ZU?_S zy)};V3Sn|xRgwX+=_#S6FwOr*hM+l|L}JL~$O=?G4{^((aJNwuPyj1kAEj692%vn(Yz+SuSJuO5gd7^mZTTJp5 zWOwhFNT&4gXra2n7+gal{2FS>T)d!UUvgdw7BHfjHp&2zt;r2egJmMF?(5>*G)zmv zNs#*!kK74uSDY>JF^@c-b7Nx@nIEO$tIptYLiVxTFGpQ8TDgKo>ic(Nt=jWB^DEqikjKrP-wp;{%(v@2 zBi}K3D-6L2=*-VLUj-fna4?J#F4k{?bGaM@{bN5K`<216-a2;p`hdN;9@fS zR+uV1B_g0V*9yjDe)g&ye*4Io$*e#n8tW`ae7phprCmH6BQ=?@!wDzYV22iZgFWX{ z?76+%+>3|Xr^KvMN$(mRm0!L<46@^%zRL3 zDCi)=eFFg6vvUWH?jx_>P2mbOp0<`qTF~OB3RXncrPX^J|MsJYQ5M;&68b5PGj#jW z?eH*?5XHBV9wKcn&*^hM=Q~ODT+*Z|E#t~IAd}glfq0QDjY9{tbs}5WM7M9iuO;9$WhDT5#Abb-wU-0AM&WGv|L4V56_&vhCtj zCfb^7b!CSy8j$~WEOJm%foBBxRp06qhvlil1AB4T+)X~5Rm_7sBOCeU-Ve)oG5J7g z?uqH?r?T`%3T=k$`m!yv`eyWZEtU;89d`6Uu#)2G#Awf~+~#2hj@oUOWx?o_f%jsQ z_5I{ehcRM-=HT1qR;8=yAPJhqRuwcnma4q1IrLZBc{y8+p9$r&=oc4{?N7Bw3+tcR z*TRC0C#^qe_xQA)+?CXV9P9R08y|@R=1eo(Z0b#RVCk3dd+J@sOuBrJdl+BJy1VIf zmUY;(!z!7?sl62>w04O9X2KP7gy%v>HOtIe;s6@7E=5rNCtfGkG zERus04!3%a?9}NC1b@$sd~hYl6?GCgOAoYA72abuYa&_EnBMcT7uKf%->iV0Efs6u z5kmnrBIctE?slsgkJGy&34Mv-F;p1!DK)WFn9v&;N~zxNFbdtB9Mt{%XD7)mjom zlud28fRJc>K{>(XYe*mrpup@swN&Prp>7*Zzez$xEKg6b1m#zFV$r^9Xy@bBN4Nnc zSRN~@Mx~gXW=;VJ=FJD&m=)A?rDPI8XVqvV_cenT@sllTnShNhYdl(JG&&PU)o;CD zELDKDgIanIX0?>^SAq5suXQH(jkMz@wDc=~#{Aav>K^B>dI3O$s9maSB)240W45-r zCS`;*A5^Fm$m-?1oh)v!kTR>RQZ2)lXfJd-3D5l3b$be>Qa9rU+yNH`Sxk$Y@Zp&9m zmsOAJ@%G1IM&E75P$b9#zN+U~<>C*EO81alb3a}_DJt;GIRb3+rZ=>9`qz_BSm7Rm zzb<`dSti=z$k+FZS@b1t4{*1}GR@!Yoe5#cr4?f8!5c(uw4z%EO(0|RriIzNGqcgx zr|d6=LyJnuBv6$?2tf4tSius1I|&!PC@23GL5c5ejqT|TGi(E{JfYPY8Tj_B4rXc5 zYp2yUGSaHmw=i(0&vKQ2b~Cag`c^nUmA#xz5m>vvBtsBld}DzNr0L8ST0G`L#h=j4 z)S?L|3Qc3KkEOhI1B4B9ZWW3$-ondXXXwKajohYW*E4W?ecz$Re{2*mUK2T4^nS7E*u#>@IUWEfLPpw)V1ca&R!RvS`UQ_fpNHa)0(tr4#lWP&c*Q^aG8eFxOJof94P^plhk{ zx=RlOwY7b*l_%d(U(h955KDr1& zbC6wo?ZBL-3TSE5L?2VIn09_!gwonOeYd!ECG;Kn)?jmcEmK_pfxSzH&Ef6PR2_!V z$ASCq=s3RBa+zO&@lMyu&R3CD7vWbM?{Z-P8PQ+9?soz&wzIUW7UK^i8RDn0Z-CF; z;=XoyHbgScGJI#PaMH5?Ak)9S`r2e|x6pr9zUpnb5|=ZLOP?yB_PbTIuD1E+X!#Rf z_NG}B_BzPYSJtF!x@OJg*LIZY@H=OT< zqo%vn*+)ii5Lq&*L$xc7s*$`8ykv({WEbCt-bU*1v7+fhtkp{6?*k3@^pJc^s%@cB zJVb*u<2An3xd&5sM*12|?EwJx;D^V{+|5}1%~VjAz+hXgyIOHNxV$H^eAY2?6YdrC z+(GE;%uUC*dB6=?I-SQ5h%?NBQg**BD>>miUf(?8ZxDQx_kF(H3i!TzV|Mnh4{RBe>~vbl^*i23P6-M@K?X?cg4E$mPw|lA zsYMhqdqYNgRg0nkLzm)$S}lq~s17j4M(`Pc;)1Nl=ib%q{^&hOV%=G{%k1tS4Cwdc zjo~-(Gnw+boxPRVr=11Zft?56n@D=$*VwMj|HSHuKT} zQOt);PN;yuqSv*sp4D6@3zxbhlY|wmES5S=6^1vG4aHh=cq`{Z^a1*5y%^uk;QF`a zvnHL)!T98Nm!tScvs#s_H7k_^E#W{}+G}K6 zqx3h>=rD15PssXUeoos)uNO9l}Q5?0pG&TeT=Pa*6u7f+2jDfq7tP#$>U63 z3d}bWbEyP%4SIN6_wYOu>t%SG{E4#XKqu7g`KJH!vF9#y`;*xCtCJ(If=m$wl-$lcNXnPQ}Qgw%-fbz&7d$#gKeby%p9-J zxtFDW3S;BY5QK91-fY(X@Q=roqT#Tjij*4^wGwZ8^Z{`q0&0=0)^{h&ZwUo&xNVAd;DZ_R1(reghnKLvSPJq>#g1o=vG>Js9gOg%MWO3C z*tq{g+cV+yPF`A1IMV$+H3=|r?0#37J-^B+@H#?`<&EJFNlZ3=U5&DCbSt25vBa#K z{#7>X8172a0l-7~;lHc}-dgl)0RFPE7x!fbfI{JL(KNsL6G)tlbCGXGpwmhY8(Oeu zZr<&t4m%HAu&l$M?Yh}Fj(;wf#_Lq+=pP%L*1fY;B?Fz##UyGQS?6Nzkg=Gr2ngC4 zImi)V_kkQv-0U`=n_0-9QK35CtN6OrjJgj?r<~$v({8@dmr@f?6;MHSEGuwuo?d^l zXPsLba?ykdg27~CCJv@uyl869l)-e%*o5-S`|Yk2KPkXva;`%{XwRz03D%_NNQuDu zF_ty2CG)O`%X9vR!AUDEA5@0wM>YuI)|Tbq+X*eNKv@hMVdK&l=ZIQq*3o-S6Rg1&k?lkA5MS!W-&%KZ6J$%y@UEh)v`2P8bj=3g%TzA1h+ z7-6Odk8kwq`2Q%VRWqbNjjnAR?_TJIfh78W79#sZO>4z3?)wB`jWTpAusp7R^trbU zBo#TRDGe{(S2FgWY}+|udX?%|AT=UClv4gm`d%g7{tqpkvOZNLSNIEJVrpOED|+QT z{vP;YK6!eX&U|!a-$hvE>MAk^Ht+XTEUZd5-RVJD@kQZj6tn{M<2$5Tq^AB0qsfy> zZ+m+Wg!o0YQFa*}er~iR>XwPU!FGWO^Z2u|^R};34}G{ z!^TZ&eAxV;dN~tuxqFV4aC_AIfa>A_w!PcnG2GT;hVtX&kt{>($%d{E_W9PdtlM;4o zqp6Pk&?QlRPuyj5(avtY6Nk_~oU=18KEISUg^P!BjA5Kq0+?gk%P{p+%#mgq{e)3? z9rD(=(DFdFyUkO4FVv1!c5tuGhQdpUep5XNHj6qmQ~;;g&hZx0?jEW~I9^p`L>pal zxYhxHcW(_VCCihDwLo2l6HEVgy65NWlm!P!6m7Ttq;Vu4G@k1Ne^`}?de&-A6o!JT z7QaqDLsF9CMStf2kV!JOio#181O-9^D1|D#3GDrdvL#QYH4pWa9*MS&%#hn#1>d@n zK^r7!=;xXDJcH9)?KwsMV3hl(AN|!O z-K~x}6oU-mDCQxy#hVCP5Xz5Ev^38P3R2?X=rTfk^+6m9eKrF53g4~FmT6WeElQ`w z*t(cO6SX#K~{gH-423RcP-;C%=mRzE95(g{>hn?{s=g^3u^#hlN9U9GVV? z#z0~l{`erThd(f^+ssEvs*|hyE)W{cFHU{x^iizpTFth_-DK>$*Ggco+wKR3`(Vl* zF-rl_Y5Sr-!9Jaqmr%h_f^m7VG2ILw05g>)5_Wa`>!AC1sX7vx9u4)s?nP6;@fE2H zwf~7>S-C7k=4S#=g>|IqT>WaY5OpdXKVd&Rk;?lu@`@|n>t&vw@^#zR$CKd&ayON4 zNiSwH6j*9iwfQs#_&9OAxbP3oNB}ix(Q@wr{~IxRvFK>k0Vp7i)Wzfkh28lvBUAlneD)VkTd7XN=adK+oJ**E|N^&sDBr z!7UavQ@*q6C#GOf>2CrKBp)d0|T(5g^#3$ zzk4GAZ}7GLjYC}@id75%+^zWD7QQh(I$tukxq}rJ#8DyZ{Ifa6IUJw)+x3?pCloMs zjadq>y>(`6H;uG1Qqoh z!eh0_@IWmf_T&jPU=*e}6oG%QArFR z^8HdMN8~og@=Hqyl7X}9i6V>uR4LCkt!A$HwhK^zvn`{vE>!}|+&YPrjFYasr zekcdSw;H*a>G%ZB+zXt_W~Uj!mq>k$sh;>*(}19Zd2;QwjKCL*X?93(@73sSabXgs zG?r@-!;c9bOsu8jlK_TqJQ3|Nj4N(|9@kD+)oa>%AHsZg%f(><;*bc_Sqe=QIyJ4 zlB#)<1nM_EJZYn@fO;>H< ziiSR`WshKV$oPpe8~|j|fE)E@7pDYlZmZ*z)6?SBAW_()!4LouXzN^h$pKM!g_n8e z?bIb?Q>z6R1}esD8Z+aLaEDZEc16G4O{@R?*>c&&+|qG6idIkxecEBZpadSU6+i5l z8vk+*jzoW*WKwDqj#o6-frzanzrWVybaQt)cTBKn#}Uqxr>%Uav+2S}EiExfB{v@m z_~BG=uh#l0Ne?=5sM!3Oh>T1zbT;JJreVkqH+5o-iD!^lsBFEGDzRoBK->;Wi}At) zIK?Tjr_=7w9np6MGFwEUiIiTBeNB$Jj*E{?1&L)w<93Wg(c(mU(A_S3+vYtDitq40 zA!7i)Ia1r1*9i(?lLJFTp`+7a{MH!T<~(PG`Rg|4 z)kKGqZU;Cxc5%(X0=kz&>(ir%t2REnMgerYlPkY%M_A{y2@Tc!6-+jct|wblM_~Ml zp6&^g@rvJ4d?8UX*Zp?ml;xpm@@L43ZPr@;WEA4;vk*KMnuapC+#=r#m9yq0p-LQ{YZh4X<<;Z722sICnpTDfrCPL$Akps#Hi2{$a&iK~!=nMkH>?u|3rdqQwz}aC^qFyAU?U%0b ze%gy^sE(M7#3i3bS36dbVy7a!f;TS>*d>Jkzq(MOmFT7RMy48dhN2>N`E{W_x_=tIETJ@fC-q z>h`G}GXw(&(A4#LwEJRLJ6oUnSW0en9UxfBB)z|{D`Saj*0BZ&d0{ zq+pggQCu`Jv_7R+%XH6=GNgtoj_8FeF~=5s;j$sY4qo17Vo{V5k2e1e&6 zuU98QQ+<0(n~c|>mC|VMd$n|7_v#6Ug>Fj+X5L;o#{N}QcRcttbTm1Bhs!nZi_zXv zBVr}ddwYu1Rh7ACbNe{q$f|o0X_fzzaZF>_y-Z<&57qVqH%Y zIHs)HDy!TYbzjmyUSAsAZspF1+F5;_@U9Hzc5N);2UC23kDX7bU>kj{bX_~zPe}-* zFrsq5NMVIk#3)83F7VEwH_>KiS4z)|#jumX%W7!JXgJ0+SLhwPFj(Zi*>!ln3^VK_ zOmTn#48Hd28ulVd*J?_ZhY)$>eA{dU8{V9V%izHHY1f@PUUCCxB53UykC__N$5I6z z>#LZ{FU}%Yy9sR5S~TR_lI?f32XJ~vJcpraUhZzY<8<2wK;Tg{r6~a>|6S~P-P)Ae zyAbEwZoHh5tj@~F;u2Y%$o$0|A#?U}dI=P0fNJ!RP_AWR1-+rfC@x>$(Z`ACsQtxe z)%we^x0mqZWYC*-R=(GM9A-c7K=ldA#2&A_p#R+ie{SxprI(zr2kkL{P`-8x)GE#3R32?!hTwu}fT=>r`L-*6-Jw zm^jKjqheUZ0vxkboD@f=xHrZ&33Bi!55r~M#Ox?h+s5XwYgWGxGlE4pRzFrNs&wsl z_A2|DK8lD~WL$d9P0xc35z%f#Cj?h=6{JjLrKjMrw5RcHPCn`Npn^r?s5d{ISmPn1 z30G>9*S4Uv#XFufL|lk-8Irvd(4++b3V^x zy~FtZxwT4wOWzSO{%x&{2=r#Xt4_OD>ADRA^O|U%75efr_u5(@TBU*@S_ex;(RxA? zE#-l@$i9`GFR^&vHiZBKD;3G038Cs(<9g#nxd;i;JhV%-XByBI4 zk+Xo)1%yl`1}W)0V;1Zmjwp8G9tTGi&yN!o7Rflvl?<xg@Iu%t2U+f z`qnGo!ZeMPbaO{;Saz@b-?Zw##}dZP4RXP*$ew*4*S!5N6T6D7G=d_-!FPvvcCQEG z&lT)d!(YF^`xCQiU=y^uoIjm6`44u)46c#-Oesc}VgY~34{c{_7~l|YX{A6KW!g9UO59VI{i-`xa&Le<}F2?oQ^s#QGJt8rlw~DU3G06_>5Mz|Ca@D zC}@2t9c7&VD5E%eB($i5p{ln%h(Z+Fw#qn)u4OXo-weKhdBCF=2*)DQ?Sk z?y@ti+9}<6_4$KcBCrc?q5{KbH{%IPRXiEybD5v8yoZk0>E+yK)hRE@e2?l^hyqCP z{=CLYb5?8g0Pxz89CX8E5SgqBtnT~DOFLLFY5}~JKh?XVv&-oc?fZPE7wd9W% zmG)$XboY1;IlKEh*gjV$+4aRAp1OZ}qXGmS%2oM-0f-m>8W{L0s|gNo(qXrYZRq3x zGQbZ>R=b4n#lt(3wrNX_=3<&{(#ZST`Nw;}?xs!JIeO+D6p&t}D?Y#aqR#ifqYLTH zb#yfPz`Tg}pc^8~!mModbacy6IFzFobs=JYC6N8CS->TOe`C)@Tp&c|9WUX(O$}i# z9x~8Uf7(r3`0I*0H?pbRY*`ZrQg#wGZNrV1!6h~B2ubz4WBl{wUvm^?ytyNL{nV3; zjjVeVc1HAx&HFsLmKFFtZ8XEh2&Vk`&rs41jh5`5OzLU{zyWK?3Uo*KsLRIVmoiqA zeB^2O1qlA#pJPH?MHU6V-Ym&~x-)9bf(YmOs~cwMYGV)7icK!q!5c}Hg@)!& znXz7kATSOurIe%$5m4trlzvuyL>xR6+bXH(JvzW(uS)WOu=9VPD3qKLMbX7qkCV={ z#={Gle#YVey@dptq)VN=SL9XRm4hA0FE7)7eH73ck^HDYn{x|!unq4&XHADk28i&+ zzPRf-5d7@6bRBz)%yhW#;sxx`>DztJjdbMgxKr@4tDG~Q;I7vH{VIq>l6%cy|FMO8 z5y2dUf6d4LF`@skuKzG0q5pU5`VS-gj~@QRJ{vi*CSm>#iUaBQ@CdyJo1&DhLa^`S ztbmLde=B6Qny@LEuu(679Ae*i9x$O;c^Ul)mgyPU^m(!#cZE*VY*u*cUHV{(nOxmR zvLD#1mOWh$7_8#PF6R3w?_+`B)^bJOm%ZKiZBZrK6a zH`keY0x6$wnYA!i`@YYrIrZAuW8oFYI0xW(csq+a_Z>QMu*49gWd}NurZEojW z!PhRZ5mUV4(0h=9=>N*hzHIO$_K{>xbv@*nHD%pY3&vl=n%! zpblM~u!*9;++#GK3l3o@LLZ+)w7{vs3c3l!$<&{3&nT<*B-{_cKj(3R7+W>iFz$@F zOQegS^Qo39Evu7L2$U_V=1wNU&`oO!i`ZSrImOzUf9zAR8Gg zqKS2wr_f*%|Dbn>%%Dg`j6$}rYRsg_Z1_Do^;6P&A7%@}c;!D_9Gd#zCd1tIS<*NR znh4<|IJK5PHq(s1>v*qTy%vSPG;FSd-3m?aJvlUsRo|QeJqI<*ppQoDEugZ$bDn9! zk%8>uoNyo{AJvW#cpJa&y400{B;cBs4-Tg@sh z#XPrd&R;HD$gRWR04vAQ=)S+$qci6?xaA|75;PZN9tBUV1^ zg5<%OOzaFw!KkJ4_B3C$Wn^@qq~5h_J8Kc37fp+!@_n)7KD3|~6HaOIyyZrR;@6T^ zan|~kssWmfL@DIg{#54TB`-S)REGwLQH;NgR%i`#2t3A*7@xjvIP1`&jNDGGiL)(j zUG4SpK(wT0%V!leK^20MC~cIoxCgm`XV2$2`obkOBL*E-6QycO%3~P8MD+v9Iu@Zs z@E7|oki-{aBR(+)*z;ch^Q_4NraXJ}L;n(k0&x3m69 zg1vVOd^dyR0Zp{vv@A@=8Wy^KOL3Ve|e> zdERco2z8L|zL_3}wCq}C9*&~Bq;?;DDSQ-j5+cia*lEL2-xP2`yt?Jb^8U|Lbz^Bs zZEiuWp-MYhLcyN|QKgN|gLI7w%e+xGX2H^kAW*3J(+19&5j$=X`Uwgs^Q;RVw<^td2t&x(IDQ_xgJ^f4FEJR zCM`Sg+3>Gq<)>oNzDU{YimB#^5tAkPc^dtxugq_L?F+2sp&$+Di+OIYX8Rf|!A$7O z?szlrpRM$h(fRJ)QwmnmKuQJh%dMQojO~PdNd4K3pqkC4As+Fb(Ih)Sl_JRuFxlD~ zv}~P3@Cym?uRM!=427sqW*lOnL3>-Aq_h~7$Wf5p1+TL4PRuW?@a-8w`Jp7AdYVaR zqyfO0i{25L(iHl8smdsQ?^sf6dfDselWpf7Dr0-m6c|5z%ikZcZK}c65@VdH@2M3e zr~$i(hJx#jmFIL)OpmaRsO;>weMxv0;FM#ndCG~K$l+7H+WW?4%R*kyORUMgE0l5j zVKd#(p;hy{DMIrwSqxc7;x)}b>@?!}fp2_``BRO_3KAg!!Ji#f)h$YCQ3UtH%#k7U zW>wEdLkCP7r0mh=ISSF|h>#$}G9jP*z?kBmT6q*WpC?%DzxU1hSZrU_~Ht&2IDqB?u`kUF{i;pK^?~_$LJ+?(#0;v470N zfEe4(VgE~WfnjJ3|7DM3GaJiz%(2(TGLLEIM!U-fwm>G`(;=mc5kf)r#LW`NSP-Gt z(Y<#y@-J=gTRmTPjJHGq#Ye4&b7~Z+*9Jl(4ZMfR7Ceg17fGYT4DQ~fTidt3_m+zn zN&TPBM0=|CDxDY%+I3x@W|wT>@JzkKT;g2W2il$88jQ{S;vgc9Pi;RPW08bI0f2ua z<$%{`dnKf;2<5{wDoi6b$W4(W{KhWB4R3FuT+B>Cw5{9@%5OZS-X*p&orMeZ zyg_kD4?lS)0ss=m4h6}Onk8LQlKv!jQqMp(0U;P*sZ_?WtnBpUhDo$Q(^{rVMZ3Y; z@ORzt&Sw5Y+y$h&1`q4uT4AxFyv)buE5@ynk}i^3qsLvPdV!;d$$B{X@QY!6-Ce=y zZ(8z-HiHRls%&LrI_;#Cwr4}LL4Bx%)gEc?!Zu|q1;KSG|3zg2i~mh!&LHCLa^>eK zqeu@%lgVK$0$*FOQAj`yp1bQ?%_M}-m>gDSsKw6Q`MTcSu|}F@Q796% zOPuT{3Kvg|d@lIsmMVVq5WMA`kod!581B4)FFDe=}~f#4i-G~O?<$lIp}UZ?p=5t|>;kcFb; zp)ktWKxYvYER0GYIw#9_D)A`WG)^TfZxu4rFB608E78ZKkQXJZ0cg*Bb+%Rf=*6QUFT|Shx$=twyqyJ zk^+J3kc^UfTuV(4&;I8;%?eBe=RpdeELYBfH$BPkKh~G!yP9>B4O9&b{5ifFEUCrk zD@*^|BIdO`vAOcksTKTVw4|A5oqE7i+()T6Q}8p5_aV&iA8KwGEXW{R!f;|zSz@_? zk@dk1ezZ`0QfWreKCl0cGNm2am6 zRgdX9=|6JQsFyMD(OC?wudxp_Qy(c>YiPcbV;q*6nEWv`a8K9@EEvLv6~p}wN|bkb zFfQWaqG4uUoaX%W1mAXiocbP{;=Sk~bG9zywOpjTP^#|DnwT_e4{&;7o5Gk92BRL> zN%XBx3-92k_mR#!<8(s;;~*8vuVfU3TSj?#l)rmn&SGVMG9bC1>Z)YBjmOfk0DzY7 z0(dPWmC$2Y&-ley!wSm!kHdq;G&T=T8qRsXsI%vjceVJKI6Y_#i$)2xD1X z(R{LY{q}eS25;Ajdukt}koRiixv|QOS#7+rZ)x}kI#l);2}A^cB`#LKg2&_e;Qj@{ z-od6A1(NLJe|Ualni_=5ATvNyHDUk&1)CSC0{reTO+OK2YSZ=)EN}?+KHy4)qXB;U zr-KFA?vH&E$0y<$o>V(9kImf0@-;QJjUNM5D?&XKju!3@b-o?qU(VU}61+v(u?Dqk zeSre*;Kpaw)UFpPxHP_NO1*)sP=}VyHf92d%Mp(6=hW!S3Q9}b@+)l?awR1>#?Ko_ z$I6Q{sO1Fjbi8-*Qn|G^XJzTHbA>F$s)7JNJFU_4+ok2h2kvs`SziUm1CWhr$Fg%l zYkv_fm8v3ulHB4`YME8gSY)$cDI?3G0CX%aF{(9d0Aox{>${6lzEzG{&km-;vu&M{ z+2mh@pn?^*NDG%JZIgH~%%lj$6rli^M|n0Rw>!}}4*rGdN!9{d>iHgC{k~b};Th9ZV=c?In z8RD2?Dmf#DI;lXIkJUo%N((eFL4l21P0&% z+nr2Yhj6uCw~{)E27ggf)c8Xo34?;$a52~Tl4Qxm1QyVzU9GlE7t>HQu;S!FBf+pI z--L2w-*b^05T*lq-ySL5*zXXieKY4H_kCPME(&$VW1eC57Ovwb=HVV8IBu{jsvPcy z2B@pcrLm#TVn@{&uX=BOcv8SwGQ173&L4!97EQ>h=p2RNjm`LNa3paZa;wEh2Xt(m z{jqifm5*-?$pqf-MAFvf>;1`dayM=?09>9FpCP3_0tDUn4~OMOr%PrETdMp~T3o(% zlAxO3Jx!_OgqAPAg%SP($o$mCYCY-WuB41pe$bCEz=z z-JY_&sZ8Yj8jINn`-;8CZTIJ9r=SzIFoiMw$Vytby)j4O%K)7_#52zwo$WtV^>U(T zR_4Xf+N&e1z<*y_s-W2T?TfwBH)aE#3()Ohp9aw2kZ0cQnh8#p8==r@Z=-4o9cso! z);@H00M<&Zc`X@N8vDrrlmu%k={-IH-Z`%|#mPRMeQ01Q&NTnAgz0D?T=*R)Ho)C7re%Q@|C#FM+fI)t*=jaxa7dyv2HMrEgfOx9{>{Gks?Az zOfCX%7M2Kn-cq9&`hjj;XuFi=Al+=AJxD%_0W4%y&(HB-_{S^=`(~|oX$iFRJ9WD^ zNZ3_*{`UR8n8pC(7hG0xeiWfLf9`Xup2>qY&H8W_l{-IYYDlEV=_@ujJJ0)#UWS%l z7W*rQTeD*ARYBmsN5#aNe zSwaG9N3eta0~oc5`DC>#1&zcy6b)!Wa{h6d07n|xr>V6l2XW}La>OWL?8&usU2kKH zpvN6~fvA}lS-;A^TqP+R|AtwcT}!Q|4J#h~+jOCd`XmfR$D4Av-W5+Z4`|-9&lUgx z?=7_b@*OrKOHLUP7gQaoopq~N_%ofQ?URiK{y05H=#`|yP~8lef?B$qP8nLzE^C}x z6|bj8Qvw24^`7_B&IJ3$3JA8%CY5<`_5-dS%ozFHfsV z5Jps3i7lb)8!|E+>dF$?zJqb?bov}S+wT1(HuWtA&)Epm?#{qp zEElN#!RRuY8beJv$(QCEM;E-`Vf68ToVYWZ{5J?$k@LSGBpmr)GPkRYl{~l8Iq6K+ zo4KEv4v_t-{4}T#nA#rzl}IQ^r))0TbLRA7-l+NkAg*wYjt{^vSEM(1?D)-cgpYp~ z`QZuxsB2el6^zTt8b_8Eme*4es(dYP6{(2yZ+`Qmw|yH5F%=g2;77KfUk^_#Ir0bc z#*dAf(EcftS7NDuNXVxV@lUcU;#%bram-MgmrMn<<3A0 z>D4)~Mqn=BEOvgB;S|EZNOg2hcb$SNG){LHxOl%ye0O#Q^N~JuRdnr*H=ORFmJBQ= zr4hERMrv``+^16sXJ?(~C|ArDM01tFwz%K6NA2pMlPxt(Dj`|MuAr4@cS`Q3m$S6( z6*p~ef8M1W(mLb=F<0djs19{)4TPYaJx-#TC%N$)iUJo zBo}=R6|Yyb{w+tf%Z|)bY*P6OR76k`A>_|(wq#nq*L|s`J9Go9jeinkreV2p^@v(V z9OVKSc3B|W2J5Yx^t+y7e0jXojYhE=HB<3kOxMSoV|e6AU=B=#@l5F5BqBWgYsD`4 zBUk}QtWA2OZ*`0^85hA%m1HUeif977H%P@i^^ObhbL<%#!S5=tSyhUrh5~Hmv~8xbP;3FR=*GrQ_0SMLeaUP{G^04(E9-Tc4 z&KK2I$AS+ILXW{e$Kz29sAZu)XE4F3zehRYcfAtP`(#Kjx`Qh{|MSf>o(#NHW~?na z6zBW`bHhwe870mWc&&f!)IQp88V3XCl3*o;=B;1R4aMU{=|~J20$@e+n^2j~)k06c3Dda0_&RZ`VP<&~{{-8^s^Yr}X{{uVRZfOir zyjYQq$D^ys&D~K4Eyy;8N>gp(;71tcBci!jF}6-wq`topZX_-w(}M-ZqD5Crec8dkj3>$mB}HP-R`C8X%#2jk9;o_(5m z2z)GNv+IDw7_?mdl6xCGhz#U3V%&FzM<_nq`*z ztJ^5;Pk9c;PtfOMgYX(-xs_QuGKQnqOfH!4#uQ_^grMd@86asW^EJ9L+d`k2j5&S> z(?ot1M}GLdYI0dY)A3*{#OXEfGkm?0ne07zAr=^j55jOXNKq{#;yS&{Cv4Zl1WAs; zdahbKR8T8H`_Xa3>wALDlT)Tw5Ta#lXZNoRG_6v=GxSpGu}XXT-(C89vOwFrZm(zY z(*EI)_d(KJ4`)6fG)2}WAS7m@;K^#FR+m{o19#3N!;Jlj^~B%$HZkw_0e#7FY3ueC z9!^{mm8Kb_Y5T3+vEyD1b?H26KtZZ@vRGakO=K6EsmlayuZitD=%yo1*yyK^K z^xnRMd2dj_;y*^O^Sv6O|(7)BXnz6nEw6SF{E==K|O zE~GF95gJnRkX@oAFYm`Kvr1;HY80wKZHBcpHEgBTjn4zU-`F#lBgCf%1iz@5PM**~ z3u<1Bj%yrfYH@qTk>?vJMTQ(S(cx3(*2npyZ-|9Mp1zB$0 zc`|f3@MI`vydO9cp&LDKZ05#!1*Y6DCI(R_TS=Ta!H$}F%%-nxXx-mm5pUaF^_kB5 zHW-zJ(=;osK)6lgamiuq0Fl!445=j4 z8{XFSxZ@eEl$nCdHA)LfB|x>dwq0Gr4gUTIZ+1O$zeU4GXM6R}IdpeB zya-^ud||YjqI;_8T)G`|T~2hiPm9_SIGgY;&~R?36tyk>RX>Q5Qwm4W`Wn>C)AGht ze!hkdgFabtTj1I(`yFt1ZfKjnj{wr)A&*~-m$#8<*vGQFz1}3$#np);WQ==R9B0Y+ zyuvLs@chhpo#_gd|JCQ2P>Ddp?knS(_cqUS`>Dnf?ID8X#g|78b!xzGOwAQ-qQXp5v_Z=#syF*$Dd6>NW@_XNpFgAJ@)yvnTGk|1 zcHC;0|9I=&%)6c-uALN_+4gW#yFW;wSh>@jxtz)dD%X~+@P0g6lc9t0H@_9&`&!;w z+wwmw9;~nh_~N*~E)Qf8=8$((4W)JbTX4avkmC3)Hqusf5n8VbY>@OZ%&Ox69o_9R+CA2)JqHTLTDi7B> zt;1=08j^l<&&b=zc3;Qi@RqUlVrn8KF{5+>#4X!!du;17ak74D#i6Kqrk1&?_PIW7 zq3zY9(E9O(FS&;|n{n=*WrJ#Z|G~xd2WJCMVo^uKA>rl}WDz}iIr(8Zia3b)A^qVe zsoDeSULPs^#UQ22w!*@0`}Pg_*eOCKFMtxhirwOz;vPHcAA&##_%)Y}4+|T$cuzo{ z-MGQ@r{}1du5yL_+@Nm+A2VIYE;TZFdO%-YZ(72g2eg#MDlK4_XGv=NKo>ZRZK3@Od6+J8&gV{}plwi(f z9`vOoWLafGo~M)e@)v4f8O97Gw@-C1@8evBuyhMOq_Ey~Hueb%0+-PnTP6gPj-VsTZa#yJ zBdt2`-Zty3rw%|608h_ZGkJOp!z*8ZmSA_V|8Z`uWI6|LmU9r-dEH!EuDe?AQF7zk z$9u81pKxCXCY(P^ zy4)O-5;=1jirl^~Sol8lFEZ!SD=WR40 zFHz38MObviR`=5SKaStC6r#nE4V8u*T7%^xLw{<*7r{gMcc9PuBp+VM@+PdS{~xll z$k0%C-B9;l4zS`tTM)nMAH7p+vw+xmn2HS(i|9>gSlnQ!7Dm37mSwZLB`=dISU&QP z8bn(RUY2TMh#uV1ET1cDbnYmHd&K@DRdVW|YxZFDoCTuXQmXyJ#MH3D&_I+57TpZ3 zA z*Y^|7a~B_n97P{*OV6Rt>jduGAxvUofq%Iwo01LbnYpk>EQ6Z5Vd;V(%|aBUO-_*q zBcwV?O=VIW@7J5}*DQSBTLg|wN3Ue0Q-clT0+=>BFK)aq?w=pM9JRM{eM2hvG+@>g$S5@|}^egnA7%OpXG^&SYN375b z*0*ve8A9rLhx<|Vddn}i z4P5i&d`>gC)oW(xq|YXuCZDWhZC0Wg?TaE_+YvYs)lJXqcsFm}w_JZ`c!NIj|SmCC_6E zIR>=44V0FTFllF5Ep&NZItO@KnR1h3njNPVUX08JocIvz6=WzC@qlRGR12QIpXW6= zMdfM8+Sg@1lm(St`V@|+W-vA<_t`{rzn#?{o|z<@s?os0ZJ4oE5=jo|-1RLqo0p!} zm{xkVziBhRJ~0lqTeMZ1Av7_`NZ0?fpGL{U^Z}b#M6$LNfONDKM}}oY+#$>2A+f=2 z5rf6W!hNchg%VJd`R#r!Pu2O(;(dv2Lw$3lHIY>nPocc|{Pm%php>Qn4BafWyljsJG^Wp#OU4&dphsb+Yze>#_(`DN^w-EqpO+o^ok<$ow(G<|Q$R z5Fet6ZvThdVRv4*ANq~?Dss$yo$<{_!9Meq4dql<;R(huOR0r85y%9v`$Fn&(pGOz zDrd~r93hJuUEEO+MuRKX8~n~smc75wfQI7xWE%-N)8u$O2L`ZqFMn#(LW$J#WH({- z)gD4Lx4B-7Ri{92PyhVjt>86j67+t86x*Y_peNq`KA-vb@@+G#Mm~o)Dz1B*R>Xo% z%Qr!KsLuUjz2o5R-tVwl-K%`%9h!iA*o%yP4b$7&25xa>$kO(BH!a|5=KTzD{TtoY zR8U%6$E%LXc+ZW)OI>g8+Eu9A3^IAj-lUpE6aXK%xtJ2H$xpMxDRWk$RLvfh%B|H# z{Hj9Osr>b87jqw7)ry+7H5SH<^Hb`W51!?1EUWj3(WFw52%BU1{$b5zE*~dG#DUdR zSo`QfE2^)6=C#>L0sWbERQeA(F>6+36zq-EX#z4s%?AA!y{@3&E z^hndd>+J8PkJl(S#)SwxM3QKktR|rha6hLiMFjVKKvLIQF%N$az^)jT-+n|*H9nb- z0S{cwPr2OnMTn5_`ycx129Pc7Z^$v^qGxH^)u{l!WX?#L$aeH~96-Xl3!II&x0I9s z(PX!~QzYCM>}0Kjqc`b=pVCPVWWXN<+6lvB65<^E3+pb|U-KxyG;&3zPMd!p(OJi_ zkU!04hk7V|-HC7uM{Y#IhHveCw?F&STmWHt6f2Atic*?tls;$Z&q5n2NWgg|at-am z&(rVD?yQ%>^-;Hcdm`HM9>ThC)Jl5))C>l)Q( zx|PV7{;T2agVSaMznwkK=dMRZLu65aEzLnc1OHPhwN@MD=D)s=Av%G#{jJY6`gVeA zj<-^!&khM`c0rQ0hbEl|hA&Sx0iJJ-d9MN8Z=gvQeZghNYucLbdF;Hp=`cMQxAui* z344&7084zc|3mr)Buth5)nC5~`76@eUWX26zSQQra<0*mBFfyU3O5jlvLJG;eV%BW z99nZ__>~(A10qmGebr@wMs?MO!c#!0TV+svt=S|cQo7;qlSvJaR9(fzQVwIx3L=Vu z_nvs3VM}myi4Y%3oNGf20Q{X6SsV14Nk)Y&c}-I>ao4u;{~D$-jBYz5z`y9zSlqth z6GM4a(gQ!B_I7wqVJ9e81QREu&USP1_it_Rfxx#v#3|4!))UH*fhX3bv|oeKK)i9{ zRqg|c#if!``#Y6|>KdFVzhg;+yjyuGz$!*X)MzQvfEIb$UsJOf@#qB3vh&I2OCaYk zbmLExL!ujV`{z9X91yZt=XWu$0t4|+na$=0O(+`6 zOHNxLx!zCyU(eJwLrygCx6jFg4rV3|XclhQ4#ufxY?k$0-_zQ<0#XXk1`fLIw5fBZ znjHKaPgc@eU13qh#?(ZNy?xW_{>sZG7W$20@pn4h1{k1xFN)=E4T4-xV z&kxukyf}{UB8jAT?1s~RV@s~U{C?F=4EO8_Y?k=4>hI3m<^w~Kc9>2IMovn)_3Hy3 zsHlrzLjeub;lBB4lsG)xX8r2+zw9_|ufE?K_Hr9Du4I0j?kvs!`n4)4<2JBNTh6Nq zevH9hX>n~nLJJoeWTs&$Xm-n8%&L@>SlnZLQ|`OdWt334_+REDOS?33QoQMC`2DXR zC3g(h>cx_t(nW9X-!8q|zus$-R&tdz!7d0GdLF$jx;3VlBA?8!gN8=*Dn1^)VJy-q zB|wrMuDlobo*8VFILT=fPNjC$c(0(gE9TxhUw4SYe<133dLcz^lnlu_AR^cA+*z8e z`a-)yLIQI1PKhRm2Q~|g)E9?jqkJx6UA@hH2c-(-`JjQEGqSPnCV>oSKGso}X z#Dq_s0^s)v&b7ynU{?Bt&1x{QOe@mOE(iO&^*F$Bv#MhQ59@C}h3mHwqU^C?<`$5W6Z+GR1yOR~FofEmy`{uJqhpxcdr_l@V z_k)Yf2=UA7ggpQ5-oXt)`v$+)nRgYl91=q>kMV#G=OSh?b2a}%#;mi%BlFGnYw(5` zC=e&^H{+yZGn%{8Oh2LAU-%UIgQ2%|H^ z=*ctQA{v|XS0;S$uz}|5Qnp6-jl2+}qx!BQ_yFqaVLy5(xW=zx61TPnbbUFL3 zl5KW};pnb;HTRciF~O^{_CtE@c9YM%i@S0yZ8CJu3=DJNo^1E*MLSHnq){*i1c2@B zRVS8EUI~c=0T>5s_$qJ~r`+LydzZzGOl-`aqwZr<{9};P8fS}YDGrU=OraI!ch%}p zfu$avBnCPj@@r5E zaQEF;PkW!50Z|)Sp3|qp&shwdySH{=svX_woIvuGAc1ey^P?LgZn%TU#}rTyg2or@zP&f4PdA_OgDuZl^v-TdzN+l#(oE zRi%|SASF`4N8-}E$l;iJKhjKFCqv77sA5*=Oi;PoKnz=Istdo2)1K>QowCiyiFp%< zF>qk^V-h>PQejHuJuvEq)*!N~KlR^zg23XoX>eEbN(vXkK#y&Q&6&|&3 z&6MwsPIa&GNr+$>sCVAGbiZV=zMU>9`L>OLJE`!mjZ!Do+73ER?oYJ$4oBER1YNZT)~xR4g`~;-MTc^7w^%rHMbM=?5@Gk z;{tkklQbN-gLBui^0BG2SmzE{fJ<(Rj)W_hS95)MxYDrTfLr{rfU|qiK!px10RSQ=ZT3MH zt)5EkN}WAk&&N`-9_Dn69wK^N+&qF?_*t2R#2)glTna@@4d!->T}uN%-++K_4eG~E zCh~=JIgJ$4QT2+Z8X`W&YJtD^1B|iJiN~E4DG{Aib}=Zy=WJySIH}d6DnFxmF77%( z*7XiD$E+qg-ShGgA?+uGYaLg(T(IOk>zu>73U%8c-I57Ie0awC(epLSXeI6<*{~2m z#HOmbrfZ>XLbjD(M+%RrJw*B#oa4pB7e>!N*-&cv*Lml3^SO%f?By zI74CV9pJDi8*ElI%o#8P-chEQ<}f5w?!5QU9#U3&nF^sg2_s!s_Rq&#^PJpOLI$|@ zP|^yZr|lLvs=r?41Cy*3%3=wP&n{V*a)<052Uku0-GUw`BfgY;KKzND2RCzG(|t5C zxtzqECfO7sHI*Y&Fu=|6U@r0FRzTk4)WI^+M)N`b86p6Yah20+WXo+ncY+<%>;y>eZd`gKXkU&iQHuK! zM8M2DtAVOf*1(@e<89G>y|7B$&1jPS8oEdOAA+F)GF;=(hHHh(T>sZllIQ*I_JCJc zLmU^6jv3((s(5ycwPk>)`eXCGK;H9Cs4_X&mJhhFR-*h2&%qb7SMV}+$^ObKkuZvD zTaquJxX@I&q-RS%IyT9@$x@4uZNP9S~P_@$~(x0YdmO~B=GO*rl z*2Qj$MN`19`RHo9(Rx~ zNUh)3S^cxk^dGl`bg!j>@TNHufdepg*CKdlqSpU=oC2f$RH}#n?f53AVI_Dv!gJ!? zBj=n_>3yb@j$F{|s(p|-ppjDv8F;yLc)ReRtpf7Mjr^oK}6y+PUK(j@J z8>5GBizs>o0$^WoHA|#Pqe|oL5j$l@9+R9{o?^q%4!kg*zKm$QYK5I$W@Nl9|W%&;U6S^{a0x0U zt`b};cTOKG^o3CY=~h3#Tzt`VaB9-Ty5)AMfHI$pgeAaGC*D*pW@cEJhVoc~xrWZG zuN6Yc0cfW)#~xeQtDoNp=BkIMwv$*cFVJ7<}rINvLPYC>{&ai0ukPq1ER^z zvfYYGi9oVgn@MVG>6&HbB4Mp>oN$wYhA1&_%8CaPvZ z$q{h88ZU`4^u4YYG^SY$L#f!QckOX;+t@SUMFWD`Drj>m&X-MaA=pxg7^^x75ERCjB_u4Q>-EeHy(0qiq#1?<$3h#e0nJtEMveiL`>dUWOA>+0 znGNK@3z#m~mK$(U-!=vj_@*dQM9ixgKJXF1008PlIsEx4p9jxz@}0~Gd^Di1+f)iQ;IT1N85Nl5UUI+a7V1!h6HPDQu&4@PPnE=caOK<;f)rTp zc+bnc2u}sAPc}=iWoiiQ)gC&iPr2+o8$Nywrmp`;8L$(Hvt$hXz3|#h$lrK*yRD?` z9GwAEk*97d133C1*?`|MAH2^S+YnGixhlu~y|chRV_t~Io}#I5ml#M&ZfGE-I^Ao0 zAROghU+A%#Rl4)*>VuJkQeI7+7y{s|dKD>1tN;X#sWsU%C2B!Bar1sGT(FyZ$1?9o zlG^yVz&D8Td7b-oA8DMTlbUkHD1z5STcfPMPy@PZyWgh6tLK%bVA@b#HYKC1)03)k z-o=|l2HybyR1)LYp9bDX>u*R;LeeW9Pq*d?Lx+v)2tbm-J?0uCOcM92tXqcdi&&VJ z#WF~MD87bL-+TT&jzw z1^^!Iwv`%OD4b`b0={5ogg8I9QrqxU9*j(xoQ9!fVe)3xC#~fux>(gh{&_o09ODxo zK*@5(0XhnAa$J}@4GhdjD%N#!DcNmT(`Q~a?tK-p#3{Lj{;VT{d%J5aIqm}ZJY`tQ z9it+F|)6_r0}{?Yo`i zk>=I8u_kh{)l@y)B<6i~bCt%&B1d6JUdyHalO z^S{5vw2opXv2)b(v~k^E6Hcftd~d6nVZm9&@-r!VeLWgrp7%Sl^qYW6F$QYQ&a6k5 z=T^Wht-p>N#c5f@3vEj?%uMgYE+~b1(?TDe&woF(b%Xh7MRcl#XvGO3w>HIWYtD4$ z=I^w8ue^Aq;M&Gw9ToZbpFiO2YD&Vk^o7H%+(U6{^4dh8{W*KhFXsEPuJG0DGp`)* za}`b#f5I@+)ZyT%sijId^p^+6)iPR;T$g_?cEZibXhqV$v;aiQxV1V1dTUT({j!jO z6N{#~xs>$t`?RPyE#JSdEgY=ok?pivdY)^ip}WMi^;9NV)EEl+(J87lR40>x0iq+eEB6{{()A2ynmz)M zGij$AS_T{xkmj*q*HarkMMxrqn|~;J{;}xO(Y{150NHSrHx+MxQikp;x%Rk2+$~EE zkzsgi=0wMwvvPT2)S_r0cg?GjFc9*6AXWT)O4g;(t%hstU3-sh%Lwo2RkL;Ii@vK-+ld_atG}yw3&=Vp)=jszl>??aJ z9^aq-wwjGFfV|nRkHnT6kyQa@^w=H&*i>nGUM)Cg9%|2L>%F&5CTRs>DZKefV5o;T|X zWiieHMr>tP(z*lPcq(o9J4e1@P5l+AVzwPq2#g?rOuf{XMIn2_;u$u_h3S@cSVLWS z7at`^kzrmAAe;4{OY2@1XT$-3b7k5r{?PHI*3xoOMBptq_m|KlS*^OTck^N6PSwuM zs*V2vekTYX<3I~OT1BDXTJE49yPKhkp=t;l3jSOMEzSPd3E|l3a}&HQ1y*g(<+fst z!wuDC&y@k`VRB|2g_~|?77U=0Sw9U9|7pUqZ*+4CnNON8CQJllz8l&**3;)MD(8Kn zpr+!;gf{ZqVfjTszU+5gMd@dCD>3qoyQ$g(HW92-8~M`lM-lQe_li1x_QKhkz=4U!?DO3~rTe(@jU|3e`avu5 z81k?NrL?>8OQVV=iKfe^dyxR=%MLssaCSh$Zjwp+3sJW1W$d>;M8GQyu1;U%WQ#ud zIyh^a=Yi3pH=&qb?wiVTWJQI>{s3#uR%Z^#?O=rlvU&J1fyvsiVODCMq9nD`nUj|)E@ z8OPo2ntM_ZJRllwdIv}Ha@h+DdD!uNl*wXJej_;B|Etxxfv)GNW!85%;2V3T&mu|9 z;p$NON=>mnYb_VIK}$Ml zXr((Kakhn@alOiRwd5SfmM(WR>uHE_G!en0Z98tEVNR_uz}9V!%PM zT|ALdyUx;(3pn^mddr!1*$<75F~fVPz|FretEe)7)u2}#uMCae5D7NG8dif9>PLda zLuo7ZNK!Fwl%<)HwgOvzH!2dDLqG>bL9Yg3*9e^uxjHlMR9L;O5AeY08;{_Dhdc&} z5v;_&aG1PJP1f(SJRC${=KMW0*7$`+|7lLcQ%*E7*G0|Z5 z9#*%kehJ5+Ozy!Sh&+cbgE?1~5pTj8#i~j$U#?lW?6hr_U625?Pu65>WEzqi0o~pP z9~IFGF3U+M)C7p8D(nCoxDZhHsWeVx=jEBHeu-^szT@_46`)1PZf6ZIALCVfkcBh8dWcIWd6KS<`T+z~4st z@5gIP@^4K-9CEs&@x53WmXam&KgVebC0J2hv;FF)a;AkiLIvDMb-*e(L2{MU1l>9w zB?aICtb)VcK%;&Th<*8G(&kIhC~IceZBh{$eVe-$@YVM1Vq3O;7~S}@eQVB@{Kwa# z)yy2j)KV-cK)`9=b>Tx+2A#z4{&5V?@|^Os`|E>St?Ve>2@z2g&VEE?ySs*-EpaX) zQuH4!y)H2n;C!m=k>}ttzJ{`7B|iCl=is&6E^?RThnAnuHl~D%*oq6aws~fPbP}9> z**6A|zL(f?jb(b3vSE{B7&f%M_CX`RA~5j= z!Y$iVtWS2dFwA71FzHgHM@8unYd;;-5JnsRBm>gX{3xYB8biMnx_LTNAwo?zaKy3$OjnOfeR)B^1Uk5=Z3)yAq&=Rm(KAh4}^{f5Ql9 z(bV^$0DnhN>-k$g8J*gIt(;`FVj-2+d*9=Mp$OIn=j3-EL%ZwhGBpU%Z3T3_$)MC( zdVKO!qEqkAPhxUo!)4KnZ6%&5Q78iXNx_Or@p#`T@g~1tH_Jf$%(f7@9R`6xd`Y=v z?=dI+wd4 zSQZWUG``xot1FN3;Ct$5_@kDbVpy3H4{UyXTYb+V+L|s)t*s4WcUS+UlJ3KTCd0d& zgg5j2-2V9m#Z1slr~SDWr=CZ4B#K8wCmDa{S@DCf4H*S`q&iqA;P!-4Qsi`U?o$%u zK`P+s>Dk89S0d?aGy@hf+5E;q6cYo%A1D`o+fjk`%zpqhsT!#7r7$akH z9p7{QVy{1cQ9PL9jg5`Gz%I1vmPk;;5qfd-I__Vq`=$^#V5m!S7GSsGdrls(?Wsub7b`=;ON)50 z+L!#Vt`CjJeJrxodgi#-uu^9gccbdfUDA!OZ*kPLMVjq+Zlg0H;ZG5~ZXdPqTZ50P zj4MqOL*Ot7Gi|f@4)EqvXtD4a>2I3mZkkRmMVTkA%+gub9K@=_@wiya6{KzWr2snO zA^0||({5kobr<&vMH{!!G`1I?kF9OvJf{L2jZ8=HU*!&ciX}m4 zMF!9@Y$|9wU2gsI-g@<8kaw$b?w=Q=n@idcic9KfAth8>L#&Rm-V~{9{P##z>OmSIr%5BV|HHf36uk zk7ncQgXqAcP5GWNkwV2kng-+K*$e+$RniXgmv~$ue@$Op4B`9Z`v5^~jA`pq`nKIQ zf$H06<0-=%u1MvKJ}MN^iW_(Pq4t4q6=$0l-_3n2Q@gvy+0B_XDrn6Zg`aPG8Iy#% z7TME{Zv%sJZTQx}C;Q z;2<&PbX978SuO_MP~`jI+NFD^dt)b)uyUm0ZOkM+ES-)8ESb2qZmojwJ%;AG$l{a` z`eqOn&ipB4jO7Fy)S1v{dMPQdFDcl^1eZK|mc$W``SBeMUuYpcO#JRmnYt+K;-8UGQ+EH0H&q@=s`g~yYwQCVF1`%WM%b>U#RSJVCCI*6UpNR0H+ncMx&Mc(; zZ*1uGYQG=pkN|%A)44-uC;!^IF(&ZC;kXp;GXz8+*%?uTdI^#J;sNbT4e@Qv_oa$b zU(^^^i6-g94h0(A&5vQ(Bn*OQ=Q}&wcA@kaMtH`JaK!pF;}h8#5dAaf{Eqw|&_&@x z6!YTBqjn#?Io|e{e+S<8JAmG=8Je+iBG3t3>TaiMM-LQ9t4Y%lnKMzyajERowZZZ7 zLF=`%-N~xKVipW#A0KH)>4+i}fUM{3_CC}e3)wvV6P@JH{^xz<7;La&c8m5WbmJbn z9{IG!&8}(BD{-IR;jJHHHe929oEwhp-2nwwCxm)2R=fn3j%t0v5`>bCvtkZYaAEoYc&WHrCu&z0#u z3NBLwD(g5HHX01B{?On*shMwv^^$JRVX0GQdYUc0%I}E^hKLxjOqCPw8=IxxJQDCX z-$1i|e*JT1xPe-OU9una#*MxZ|>;>m8BNOM;zNYgdPP(kgLwa?<`qX?$ zJjI~tmnckHay}k5p6QpTGR**Iuivyqy38;JLv&SR761@-va!4&l+Ro>W&!}PH6KLy z`4)OUi|KuV1xpcmbx>Gao(r=YH_M;LiS&gbIH5n`R@fbB`tCmFxI+Sqv3UNEvUXYz zoZQ}}U|JvR`-q`nJlKrq?Zoi)l+Hcf)Y-EaxtoLvows^$ z=h<~|yTqEYgC&_pU&*y@hjO%U| zhePj`N-xXnKXPNlU{U1Jx=Jf3zxy%$Y&rOJYF+c~?TdhY^*?+)T+&-?N_c0emR}c{ z0@aT{SpRG#V}C+7#jRYxYdQbibA;6Yt5+QShpCWy{{iHSzeoNbs!h88gz$YL_z!g4 z|GqLr@rm}0dN;$T>*+6{>aoXp(qyNrd5G>YT{uUiyHI^=fiy{+oNL3u*yKj*BF0v& zEBH44>oUciskmy8FNA2>yWlOZG*j|@&2VLm~pN#Vk1J}OCU?) z$ca)U{f75&)J>0Q`29ajZ-H0+9K}e36XlPP2!IM1XS^$hW zr2L-iQ)T}R3LV9!K5v}{0#L~P#(&V$F*|Ot3XMq0C^k-ej>J2E;J4Nqp z+ASECM;cERY(q0VXr9`nT;r03H3a7;hggZS|9EVXlCMI#9{lp8tv%nxM~`yZNx?sh z3>&r>tbIHeq~IxQtPS_g-vJNS|^wY2#{|Y#ETU_l$0hThQjNy|1Y_fA%E6nqqrmcf6z5m$ogQ+0E!u* z_bbnow}GC5&YG9k{JZe4CuyV`si10yAfj@i{i+TdiDQt5-i8ut!77X0?pn_KWrfGC<#*3VM>%}6|DYWf#kbh99Op)M%F+FE)If(T=046depgfq zYr&2oK`yoTLsNwAD12KILH(%z_1%;WRKICTHUQ>*Br(6=&lQ4%ws!5@eN9_#4tbS( z|NW8yv*(OU17c=UZwHj^Px39IycMkx2%Mq9I)E9gidM4y zgE!@|1}BQ{)tW>kbn}wTTVjjZu0yfH_*`X`v&oh7UwhxFDA4~z*Gnw8NuHs04<^UX zFMtL-(E}f=Iv)c1npJmY8X0`jmQqdP z71$3QBl!VKJ5As|MM?QNlua4F%xs6o!(0Ug>J8k#?o^FH$-0xTnB0j_1br{AhHe*- z_QgbbflZ?m->Z^x}MvBFplTP#`1BZ^&1Gt<~x5YnCb z+XOZf8vR2Mh7>Lck*SO|k2zGOYO6lNzDV;?q0&DgB$U>a#b#IgG{~Cn@90t8MRbyZRM$*Sylq>EM>8pXsiI4WdDYB5j zv{qW|bmR^g--L)RtL{!de2?P6CACeM;o(L5L8DQbro`7)&?WRo>3;t&6@^hv(`tR{ z$aj?{mC`a|r-4-ASiP~SqsMytaOigbLS2~OaYS!t>NBA-kyB5k%Pa5lJd?H1=brz} zUi@?I>JXqo?zI(oKmd;09vCQ8tjdT0`YB$0gpv49{hc;}pC;dMp+va3o+kvAKVD4r z{ITr`pf21Gr|=$^wa%0b+Vlbt!);7CflDOikIfSwvDtlc8*)+MA9y@6Ha|HaJw&Se(UCt;s5&e>sd{&A6DD#Pir_K*IK6ACnQK$e$ z1z4=eF;&|Tf#pe2^-!OL=!L6z8XV8Rzd#@M>zOt9z zlZ?dUzkemH@C6wD_2X8Za%DvkKZOoKCe6%Vm#_~2&{he$;3<+)4yQi!3UM?wxC^yC~${Cfgt-pMR530m~-{{;WpG4 z(gv+nSg_tKqkixsBG~|(Fei^rP9lC}l$xiMA-tqWl39Cp@(wcIaLd*}Xt^Sn!a*WkOZ;R+S86)8<1! z3@7Q(U&WHEhKD40S!N2deV6MHHRYGB4;7HcSUrJ?G~L4Al0Rh?gVUR}MpX!%=Cb5E zHHLnub7@(UzqmK4X!xp4AJ7}b3Y5X%s2^k>6jch$5)Ik;bjLZ-G>16mM>!C4xSu5l zAcwaTIqR}WM9An{Gtu*v6RFIo`Kyots(D#$k5Z3`UZNuSS&mDuEhV)_NWVrY=n}2r^Dfq(Zlylh z3Wdhax;Hbygr`OSihv%IOgq{oMh>7eA`_-Dbfvya>u@OhJFrz};4{npscdiYEG;SJ zj?Wu^t~u04>KZZlL9^ZzYl>_!1m$%Pb6p}r!fDVtrT@fB)nrrfenkiT#cNE}G)-h9 z?HJ|0b9@QpEqgN$0~MtsfI$EOJ&98vU}(pqr(6S}*@-;g`wmg(A6@_ImHyZ%7%v|3 z;u6Rv`tW*Jlt(_dQAg;5>758avn}kcqZhe8LT48txd++pUU#7C($3iuljJm~z+EQ) zj9rJJ!Y1zPqo0(uG-P7(8D(kdLfTeosegm?!#G@cBK^4ZhYgcrGMV4={=i%=CwjxiJ`MRwn?zgj5TKV{IH^ z&8r4OSAo?J(gbczB|qfJVT1O-YWLqk?r93m=j33MQ(#e9 zO1E)!HdYk4L15f8!z^d0ly(Fp)X2 zGzj%zG}GsqtIdcQrw8xo(wI{a^Q%2Yx<&HsjhgQHtf@#Qgn96t#H_LWz^re}))DV36O z@H>o*C?oz!O&>4Y4AyXx_(heHKAhu)f5}am9r~8A$|F(!{gc|*%@%+rn!|(lR?l(n z6hAkNP5GHPfEa@8(13kMN!r0#s~jICu6u*e0CR^9$Srym1mK_Wr66+jGO1T7tOP#S z1IVB5rA?W6wFGeC+YIHQ90!Q{(u~(8pR|C(+2!t1Y0u9CRGE2M61#^(lIzb-O1lk; z+l4#LIS~Q&6CZ!WGX~#sV$9bx1bnUtA1FvtH3%zT zma8cW@$0i&7aj0XPY7#3oyN)_!t)nRqH8ITce?c+@a8tB;W`A1 zkrvYf7zigt{7r9f{lDiy0gkB8gJH}oq;qo21AmY$UX5N7#QJa|fpF}LrZX{kDIqM= zkIHnXi$_6>C_O&`;B6|*(}{zChzmK8jc?9z1Zx`t_~>A{yX}}hq?4hb!()vjg!QH^ z>G{2WPvQWD5Hfic1q~Y>_zn4&Vet*$G&_h!wj}^79Ksmt3upJti?7yOg<(qWn9Bvz zbxj?N+!%Y(8t61Bw=P)1u-roHwBldyJUHioGwSzawWz<3#;u74BXo+IWlov}IA+m7 zU*zhnhe9IVeW-w!mZqcluYVxqOG$LqXNlK9@okGP$9c+ zRoh7>Z)&X2<89p^xqb;q2qp+t$ilZ!fBFDA02`U+S6l=fc-!e~urV#jBu>X~s%-c4 zHhMr8J#yVM(FLj;B+nX*;i2(wZdYd0Im}|j4mo&Un-{=P6h=dDlzr&1_zvN zaYH!*vN%NEw7HHCo!s=p^_nlTi9hbhDo=>ndX}5$8QPcJx`%zx+a!L7ZEm+&Fih03gNz^CJ4s09;6nIo&D+HhA`;Ce-qZh3Z^z zZlm~JA`P4gGiY?RzKb-$EnK8C+151<{HhoGuRS#V%0VI;E(?pck4pU2j3M_X^5gU3 zygDE%0C!mINrYbpIxz#jHMn(K&B_6yKMg%VqP8chECa`?QH}ZiEfBV;AMuQR2H-sE zf#2D4glHpF_M0fRn=FG5vBe!Y?=+~8K}mooF39T25fbH!4fW$(5T0ApOn0;cO%~GSa9kUS8>-L*!9J3BDuUFT8}wZ7T+&IJCD`j#V(+m zSKaVt%4WCew-lH>_vtT^d+OyBI_;Q<06-T;Gwr-Ez6$$W6?)c5ZmOG3 z{N+#IqhKB^07MaDII5r6m2>CeYqRG67r>T zxSFY;66ZSgt06W3zudBJOu1T>MpLSj*qt(by^*GCtb(mB4W|U7y8UOjQuPk(S$i>5 z8r@a^#$sH?u-rXwErs`@Xi)a?!zp#_A+Y{wN=W~Xp9==G4{8_eoPHyvnfGEe{Xs|U zZy))vr0$jXJ^9!#?lfZvGVte61mV9EIx|7~sF4&wnM;lc07w=rXn==Q5*L#H$U#XW zf$QOpLHZ#vr0i$)P);KU6J%g|B?!fC(|b=s!tNdgZ_g=+kpNU`x^U*II7)Yr*j~uO zxnuZx=qXh-jR)vpjr`0_g!rAjDv-Bw!I$vFdtF-t(^9pQ^N!PaniSEiXPM@6n!kjG z0Y4%K!0Sb9)JG(GKWf=8cK05vqC)}kzc2)7j|eR0JLL0sJJCxQw}|crB1EeS_5h!27y7Q9FS*JFs9n z{Wa34C0&S62Lm-(Vv*kMPQ;p;iwK;pT@t32ibpUNJf=$q4i`mz9=w7~nwTm23ZAVJ zQ;sjIR$M4#Gle1t0rME=QiD-^Wo{*Pq^ zo`sS~);UvCD+HI`e7Oa?xG55!$Bu%HBJ16Uh>2r_mEz-6T^QZGRf< z5rzX7A(z@t5IS#R9|zn)q&_ovF!3pSXUpvOHb;vSZ-w6zBPi(B!cG;`>ssZw_bdEr z1GpN)Ft5i$)ph#-GGydzzv231xowJ>#YqwN1gEuwUd^*f;#t%k7>|FY*zzZ1A*eCa zh7FqTD71A|)Lo*O!d@t&-nB-$c)qJwJ@cnz zRV$NyL&>nvJAYwlULyHwiT;N|sm6Qro4svf_5~)r68*bCeM^tf8<>3uGm2F7Q?A@g zf$*(@-f(2fq3(0qy_5Ip42z~&G+ZDX^?Bk@HpW7er!2jB>cY497yiQE7x>SC8+pS} z03Uhk!m!$R^<_eg;b3%Z_D|vCeht}113&v<+yv?0%c@%D1s;dwr$A;m6?T;cD%ei>G+$)2mj65kUG2Y>)(yf z%46;cC~kfI>D}gxU)AU2c?u3}I>>OK$0WVEE{=hrkM|dgfWLbqcZH>$$gDY!ratPJ zFMjf>32<2f@CcTZe(B|NkJrA9`{wcdHs7Xz=`)oDCm&!vJQ>(EjoP06%k;~}2o0{F zw0Dzuep|=^Pqb;?$Z;S>f3a}Wy(w8L1?RZ;9%tLin!QDAcE~A)h6AlhcJ4Q9pU7r@ zwOY3`*^#5%YVOpqxfVuY;t@%Tva?P8{_W=4>TS00OWl``jqRon-f#Q!JMiyP&#uF9 z@DZvILCN^u{f8&Evhnfke!At~@3i}@{nL1z)w}G=+UYM~-HOZ@^(&?O8|LL>IS0mUu0%ov0a86{pj<|$Ha(=_3#WxN6fJ?VYUcYXEPS nnAdnj2R4cWoHF{(^`HM;@XbAOYyvgFCIo}0tDnm{r-UW|0Mw%a literal 0 HcmV?d00001