From patchwork Mon Jun 16 05:52:39 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Hugues KAMBA MPIANA X-Patchwork-Id: 65029 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id E6B0AC71136 for ; Mon, 16 Jun 2025 05:52:51 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.web11.23940.1750053165642781104 for ; Sun, 15 Jun 2025 22:52:45 -0700 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: hugues.kambampiana@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id D0E4E1515; Sun, 15 Jun 2025 22:52:23 -0700 (PDT) Received: from e129527.arm.com (unknown [10.57.48.230]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 7B11A3F66E; Sun, 15 Jun 2025 22:52:43 -0700 (PDT) From: Hugues KAMBA MPIANA To: meta-arm@lists.yoctoproject.org Cc: Hugues KAMBA MPIANA , Harsimran Singh Tungal Subject: [PATCH] arm-bsp/documentation: corstone1000: Amend for CORSTONE1000-2025.05 Date: Mon, 16 Jun 2025 06:52:39 +0100 Message-Id: <20250616055239.167354-1-hugues.kambampiana@arm.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 16 Jun 2025 05:52:51 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/meta-arm/message/6553 * Update software component recipe references * Update Yocto Project release name * Update Corstone-1000 release name * Update release note * Various other improvements Signed-off-by: Hugues KAMBA MPIANA Signed-off-by: Harsimran Singh Tungal --- .../documentation/corstone1000/change-log.rst | 66 ++- .../images/Corstone1000SecureFlashFVP.png | Bin 0 -> 44060 bytes .../images/Corstone1000SecureFlashMPS3.png | Bin 0 -> 44733 bytes .../corstone1000/images/ExternalFlash.png | Bin 64795 -> 59864 bytes .../corstone1000/images/FIPDiagram.png | Bin 0 -> 16136 bytes .../corstone1000/release-notes.rst | 18 +- .../corstone1000/software-architecture.rst | 528 ++++++++++-------- .../documentation/corstone1000/user-guide.rst | 437 ++++++++------- 8 files changed, 633 insertions(+), 416 deletions(-) create mode 100644 meta-arm-bsp/documentation/corstone1000/images/Corstone1000SecureFlashFVP.png create mode 100644 meta-arm-bsp/documentation/corstone1000/images/Corstone1000SecureFlashMPS3.png create mode 100644 meta-arm-bsp/documentation/corstone1000/images/FIPDiagram.png diff --git a/meta-arm-bsp/documentation/corstone1000/change-log.rst b/meta-arm-bsp/documentation/corstone1000/change-log.rst index a98de3f9..103b7bae 100644 --- a/meta-arm-bsp/documentation/corstone1000/change-log.rst +++ b/meta-arm-bsp/documentation/corstone1000/change-log.rst @@ -1,5 +1,5 @@ .. - # Copyright (c) 2022-2024, Arm Limited. + # Copyright (c) 2022-2025, Arm Limited. # # SPDX-License-Identifier: MIT @@ -10,6 +10,70 @@ Change Log This document contains a summary of the new features, changes and fixes in each release of Corstone-1000 software stack. +*************** +Version 2025.05 +*************** + +Changes +======= + +- OP-TEE OS: Added support for v4.4 +- Trusted Services: PSA-Crypto structures aligned with TF-M, added protobuf interface to crypto-sp +- Documentation: fixed typos, added host-level authentication section, enabled fly-out sidebar menu +- Das U-Boot: Reserved memory for RSS communication-pointer access protocol +- Linux Kernel: Upgraded kernel to v6.12, updated Upstream-Status notes for remoteproc patches +- Corstone-1000 image: Implemented IMAGE_ROOTFS_EXTRA_SPACE workaround + +Corstone-1000 components versions +================================= + ++-------------------------------------------+-------------------+ +| linux-yocto | 6.12.30 | ++-------------------------------------------+-------------------+ +| u-boot | 2023.07.02 | ++-------------------------------------------+-------------------+ +| external-system | 0.1.0 | ++-------------------------------------------+-------------------+ +| optee-client | 4.4.0 | ++-------------------------------------------+-------------------+ +| optee-os | 4.4.0 | ++-------------------------------------------+-------------------+ +| trusted-firmware-a | 2.11.0 | ++-------------------------------------------+-------------------+ +| trusted-firmware-m | 2.1.1 | ++-------------------------------------------+-------------------+ +| libts | 602be60719 | ++-------------------------------------------+-------------------+ +| ts-newlib | 4.1.0 | ++-------------------------------------------+-------------------+ +| ts-psa-{crypto, iat, its. ps}-api-test | 74dc6646ff | ++-------------------------------------------+-------------------+ +| ts-sp-{se-proxy, smm-gateway} | 602be60719 | ++-------------------------------------------+-------------------+ + +Yocto distribution components versions +====================================== + ++-------------------------------------------+----------------+ +| meta-arm | walnascar | ++-------------------------------------------+----------------+ +| poky | ee0d8d8a61 | ++-------------------------------------------+----------------+ +| meta-openembedded | 2169c9afcc | ++-------------------------------------------+----------------+ +| meta-secure-core | 423bc85b05 | ++-------------------------------------------+----------------+ +| busybox | 1.37.0 | ++-------------------------------------------+----------------+ +| musl | 1.2.5 | ++-------------------------------------------+----------------+ +| gcc-arm-none-eabi | 13.3.rel1 | ++-------------------------------------------+----------------+ +| gcc-cross-aarch64 | 14.2.0 | ++-------------------------------------------+----------------+ +| openssl | 3.4.1 | ++-------------------------------------------+----------------+ + *************** Version 2024.11 diff --git a/meta-arm-bsp/documentation/corstone1000/images/Corstone1000SecureFlashFVP.png b/meta-arm-bsp/documentation/corstone1000/images/Corstone1000SecureFlashFVP.png new file mode 100644 index 0000000000000000000000000000000000000000..c7e8467a6d97ec21ad8792957148d7da659f4654 GIT binary patch literal 44060 zcmeFZbyQVt+b_Bh0YO3xLP|lD29a(7MY^RyrCYi~Q2{BHZX^W>=?m|#@^?zJ&t4etf3EUtvT;`-PiT2+dw4+DFVEkcqkN#K>CTK3JP^0 z0)@ilyo3#Z(|@Y$0WTLF#HH0P!7tBCMgb_)EtIt6Lp9fgm2nr%>qBRv8~ZqmOhwkiAa0k*yeW`qG7}BmT%~jSEXGv7{hnSf8 z_3K-&Z?$=Q`y7lOuKjW@`=&WjFhA@+KK#J6`)4=*_Vc-)rKruhhG(*heZ}~VPQm)cZN9m`1!w&k5kdhMoE68 zeZ<0)rEForq>wBU5)(s4hL7#)?*5~vhv@tF?}s;cgk-ITiOvpYh=Ol&g#HQviV+4p|FXlgLTSn82k6u#)Ia%;&mboENn-IjP4ppX?#`{;c@a&j{2gMic06G_Q8U5j~%t-lla9n$4uIaB)= zBX;laZ*6a1BmPKC_c$OZNVaUfGm4e@cz?a8EO%q$Wwz4i*Ppuk`&H+9k_#&F(H)WD z@Pkj()FOs=uM$hk$wfSGd>2?e6kOljg3tlp%LBVV5Pp3 z-64Zd5fOJXWTQz?D%mRZ(lRndjJ2iPvqpXC(m77rHLiua6)zulCyTOYDJDnNpB>5W ztqjvykCv%pU2P4eQti?xHjyvxbVo;Oq`U7fz2G4G88!Vg_Cb+xC&^)}=-FpEc9ryi zm61~B9%CaTqbH5;2(Wy)%=;vv99U^-vHc$A>sHdHNrjQ1I2{+1*+XJ>yZ>uxdj6Ap@-ivg6l@JL9;=vP*)8PF%4ygmrI!AzI%O#@ zn%|>*BOYL-D%I{pQYp9g|MWs4VH&{QM+qZAK*@ zrPKXM4X-3oAMgBapZ#%{mo6?+_1>o}+WA32m$geRGCb?Nj(G^F1R^Zm4LNXc=@=-` zVLuw|G#6zs(>}rvckVG1ROlg^hzR$G+MQ_%yw)+lw>moSmWG2uZW-%Ogz_hbAPLY(9M8aNe)cz@_r?tXOS(;>VQ4U<0SAzw8Lm=+Tg z5`L9hYM}o4n}C2zXu(?juoqaE`EQ6FmLTExXKsHm#K)xWyQ zZIL43PdIE-!8z1DD_Jl!1Euq)#QYkx3!5^%HX`jI2e@heiHpB8WJ&o11!rd4!vlhY z)iTR1hX~(ZCVeVmX)YQ@C1|qgZJJ(6b&rVy%d6|uoagzEi|Uh!SeHpOBYR*WB1OER z#v);Dn5nv|omZK%v$JJJV6!|qKReBMIsK!<-t=e8ZI`vNk0h+xM$DZsjxu1LsO0PN zlM6cMLdht~M6ocUX5srey-!>jl~dnX2*Y|bjgIOFIIozglPf|OfwEFV^PBy;wYj<3 z?i}6_KulL;9mZaFAYS<~Tm9=(mBJT~Fm8#6h}bXvX8c;V34^X{Z=BPH6ty*Mn#|a* zm?)4D=hBlT{4}H7IcY3rSpla=|?Jncx+a{&kAgN;Ta z?tNRGGOJjoyy)oYU`l?KP)hz!Lnc>Mxw79sq8m~K<^+<{IYd=5rQ;A0`1@Tc)g1m!kICDoz@7}yYCJ{`!PACm%tNO}) zQEYnJuwTBUa}RZs8LvtVXDQOCpKsTUU|9}LQsylmqN5FRY|NNpeekIS)cX4SA4%Tf z;!=y_GN(nQ!?Vt*`=vdqXt^gy+&dO}?ZzGK2se&eOEO=W9pit6U`O9kP*Aua_WJef zh z-P{-nykN#z2tO^*w{{>ersjj~b{9(A9!9O(Vn(zYL8f_QwR!(tbTzDEU_cvGT%>u( zP3|IBil7)Gh6fKG6h{s%K+)u^59aBZ{AF}Ffz(O*}UY{n{-4-;Zz z8R0{o_U$k9N=QmN2-3aqs(#ja6rbiK{7BM$e=Sdr{b_EDkn4t64_G4Doy}NQTC;)N(k(&b=29E&YAVVUUT39jzX?l?#^#&uC9Dg zs;M=E)Iu?)?gj=1Xp>v03YT^2!F;{1o+2)53HA>{x$Dl)JXR*_4Gx8#HJ}a-57BXT zPd?HftoxkD8^*y5e!jEN`$enxF5rTKqwY^$CV&>6$jMzqaasMjGG6VX(Z_A}3)LJ% zTKwYgnQ4s&>tGw_wiqk=0)BtHMNNN^{@;JR#HS|30>}Hsb4xLf4ubl+Df> zQHpvC4GB$nA6w_@*WP5WKjBPBNZ@doljE`;Q5*PBf4o+`FqlUnE+O$TD(W4P=n038 zPvr?q8e@N*A1b1IW^r*bN5l+z1S$z%$!ZA-F)qq5Fqc;)P+GJ$x4syDH819Ay~}6` zr9xmca{(p}VNBw^Hw^Cv$Mv_ncH5;oa+&bJ@ z?Eh14O9L~h5MT-P`kvGxgf}!cVgej%_;6c-!*Y-%LC}S8c`#3PJmmwat*xymfUkhi z&=zPfzlu#22Qbb6Txk}Y5TI6%fBNANU7?{VNJzYxBt*{ewV|QG(^p>!^Jo>o*NI7wiATht^x*ZjeTG`wYElB zs}GNblWK?GQo^X~11m}iNCWT+40yDSa0dax9(xSY8uMN8re&X9B*`7(>w(LVaT+}- za|EQEQ|FeMqyE)ocME_|{zZ>W)1qL%K}gRGk`NQ~ zFZN0uE8Z>dP_qEVfPJNjE?g?54R2g5l0kW55Y0WJH}6$Xz@jB zTwiJbWIrmi?ETEBM$I}GX+W)SaIc|IKtH?esC7okrJylf2H5`=fmt<44dFhH@9@cA z`?H9V}7iK z#nI00``3cHxEa~ykjMP@S5;lM=j74I^xdlSK0WF<@QunWcc!+CWKb4YJ?ADRB^`)u z1Ej25#@HvYFqyq1_DVzRyNcm^Ee04E1 zIr-$iPOGNgYc7&lffyO&09b4LdIjj{FrgrNwh70JO?z_I7PwEt2D!+DVc=|u+_@t; zz+isk#*K`d3nZ>vCBd&SaV{Lxcjjmvml?DAct_p;3NW8xo!4e;;a3*k?&_$s{E}+*BUNSY_}hqUkOj{V`GN5lL}NZvPrUYalR8 z>k<+Yc0eC>`{S^8vHdVe+4Z^VFOV>_c?q*?9q*Cb`gVj2I?tJZGi)U^GBNovIXU@v zm+QurD=GMVghG{`i8{5VC8s6M^$&&sOI5t4C|npOCMLcOZS!f%IUX+VM;PdBuqo;3 z=p_FB{W}X4{sF%DJ;1t#1~KD_H*YR7>XhZ8K7bu6^&+^{m(u+D3%{hs~$gfKC2U|5(2_GBWrWz;7g28Ji?1%RiDtVemY%54$> zi!|hLu8o!}a^D>R*d4j|(v>bJCbi_2t4HFUeKI3SabvRsd2b8!y zWe^81g2Th_DRzL`q1Fli$xPt06Mtc7sJ>|06_=5IxYb(0QJmZfnCXipygZ@ z6&0hV0OJ3U3dZVv47SVKa}4UeW%QvHIk}R9ka7o=4s5B&eb)kA9vBpaeChl8`g+s{ z<+R7ybHzrQ zmSPW2gQJN_W`Nm0$XV3e4>-V=xd()|Y&po(mNm+4^oA=PvT}7RRk%eAU%vbnpgGvB zIm$LW2dh0i=+hCwhzKp{Qm5so!{46!oy?1#e|#Kr6Bku!H}kG}Id%YkE|LpiT32as zR9W)iipyiSe;^%3#$$jAMZmMoM@q7xs9-x@g%^O3oQ5s<>LXCc+1N(d zw}8DwLbU{SR=~AbjixAl7B8}$6yf(g_-4UjJ=N~p1N`;rTv%{$1k9%FBpD1bPcJXy z-(QqF!Wn({Rcq(ad0j6Dm|JRd_pSH+g;UPRB# zq?sQZ-5?>!jJQWj`y-R{I=lYZU-bFOc28f9I`ihvj@s6Jy~kZ~+{TAnX#Q@?c9C#U zj|^LamCNeQsbC~#TZ{wY$y-@Q-MMv3?5=!V#44i%y-dUhK;V}7@q-bgeUrBePM@uf zRd!r+ms_3&@#2x>Y(f2*3YNM+qQZpdwtOs~U8+SAr*Vgwjj5G2X%Q#Y?C7Uxg)G&w zuk_2Y;n06^QNtzXs`=>ag}JBK3$5xO5Rh~sk4O66r%pcyMh!%dw41?(7K;cfsgk%6 zjH)dwdKuEv(!gUSO-$}yz{D&L=`_g$=qM>AMR)r)25|FBgoNF8W)VoYtaZNuPzfRM z#RNeS$;LlH7{jBbqXT@7Cn_o$!K}eH85ODS?k)gQ?T4hKP=GmcR3#Hg8w#KFK07q6 zsHphDHh<#{XoEAb7X!k=q&|zky>k6}dbU9}{c&)>)Y8CLP&54e{c(VI6@_5pqM*Ma z^3(M4auAbx&TQv5ajeRM`IcuK3_a!fAk3D@Hffn#n@!2C1Nv@4)Ta#{n1H=C%b)Z0>&mv3I|&mz8d z4b$&CN>Nb}n9yxLK0X5?k{&$SvK~+^f5En(z%#k>WcvU0`C=?hGiUgH&Zm>)lW zMEL?dWe(G+fo7Am%gDiT1t^h*h(VnvIh1G)7bw&cP-4VXREex+_t7gW_%1Fk2gk?p zUb;CXb5W)Wuz)E;q;jfO@;XLqOX!kpxrV{rD6-a%1D;SiWFA zFs@?+=odsQik|-7`yrZ^J1hd@MfFqx+7nw!->8PRcAQ$Cwz^gUKue}c^wZ=W_u7j% zIGq5M)!dxcC-ijn^dcProm)1|}J1Q-4` z2cdtwy=;GW;>PcFRDww6MW#K}=A&h+4nto|{%cKJFyd_3aCNWJaq$yy0d&fBYHIx} z&E?fTr^^O8r#(AUFCt1sPGNZP&pE-~Gyn7LGdLt2`Fhp%a^X7TLNBL$gK0$doxUMb z%$kooMvWaD>S_yBJ`i^XRM z`Lic{?sPm>>F{@c{vIkFpvTo4H|S|;p}~jQBa`w0Je6MHVQ^7tF!N2=!!KfEr^2xRqFu^l zF_;^OO>lDx)=R3`q>EDZ84ex+L9>C+DHckz%8?QNKQ8Lmq9cProe&UazYia-_(z#f zHN4u`-*1KKPgOORpjqt&B)ZUJ-^LRV(4SIEQYMZ3m0$Mr{@3m)JR8i_a&BLS31Zfl zj+>g6R_Jr?U1Bw?((l<)b=bjN@C@+N!bs`Yt?|R{`9kkg_phB$gxobC!hF%M6@WMT z!;~>vPSXIz5x5>X@LI8%mXO}h5;$L@afI}a1sckTTB&jNJ}{?;?(XiPi#C&WA;~^xbTuapI_K0NxqBZn1f9C^u4NXjPb)=N|%9UrT`u7wP#KP~&PtDD} zYxE~##<92LGW#XAJFMB0M@&Yx@WCxOsSNP0)$#A7$f{bqna7lZ&iE*$95u!g^Zv)X zUhzEE_IW*nzYh_7ziwz~xY@5LijJ|F{_z%MfbvCGE2De@gsp%a`vD{s08FDbHS<)q z9qke?UeE%-#6>Y^72UbXV`b)~59kHa$hosby^gp*GztS94jH}Oa-m? zF^IR^k;-z^MO^l?PjaSGtw6x9T zg8IL(XOIiIaN)wQDkn?C(JKA0$7K-nLiv-!C*l&{_uxUuK0u%$+aMUzF#^4}iB7WOu~BC^75(k?JOY3Sb=3vp~v!^Xu0y-F?fvqKV&W z=*PYZ_|!sVYinyHJ)~Ez_zry4NCVw7ZeJD^x921~8g>#fX-)IY?O5ZAb#m=;8U5}^ zoPd>fl7@j7x6Tz2Xqoe0-f#Uo3!sa%Pmm}nADH}XfMJJ1ZO?T{fOxNN4zkVWxXa{p z>5zVLXNd0H2nrf0m+b^4h~nQr(n-DCSy1M(_}w;#7AePDP&t0^97F)g~u z1r)qCZNLl@twkJ813(g&%<7khPdA=z`?v*Lm%$vKI4jICwLV0ReNV#5gqW!yo5_G9 zl@1ol1u=yrq3ra|k+3gd0{lgzBlFlhK>FvhP6lBodv1Gc>l0i^2mIbjSPx>aQ#v9p zwHT0LdYa3CYHDqjf=kJep&%i-3m>d1@Wy53kFxvD!fjBll#h}_pyA3yFnneTf@$FD z;UNoBeq;^k@Jv9`FNiG-<}o8O=g}|6)e&`AjK~tx?u3tLr^m9eK_Z3zJ70sLpM*v8 z+0d#3JU#U@j>YxJj~{QNnn1z>!-)yR>quyP>LbA2wQBPm`pc|!=+C2Abu8jq7eE61 zyR?+E6UaH96t(kNx6~pMQ00^3y;XW)VZHvMu7NHP%b6#!u&~-;le22`Iso3t(msPN zVJ~Oe?w##qP@aDJO@pT6wb`*`NvV&b#HeXcm9=?oStcPx`EAr8AbajEP_`3EiQVQC zUDTFqpoglD08F`zI)u($yeg%Aq@>-C{WIpig!BWDXS+tHA2s=M5cJxtE)Q;toNz) zat)LL^EO}|^EfHVSy0VX>bGZw^6Db709hS7DxYxZ1&l5{GHwdoQt}+GRaI-SSt; zD+^t5hq}W#3dE^yfKHn~#?g!Himud0K^q&>jk?>2;H&SxNKYx^Nd^;S0Y+<5XNk#i zj4Bvyzw`AdP~U(ggQ6yJXaiko$2KgRG(PwWHt9Wxl1h&9~;A%x2)1TcU?V7zJU=~39~9eXWr)nAyuY85lr z_8c#Dwf|FARF$=SZCMH7WUYtBt{cE#h{SM$E(Q?y9nyzE(Tovv$!AK;b3z3395$Ky zldYh>0z3Fo#Jz?UnVvP$TX-Q)@$85q8BDJnbR7qtK&n?9dCy~v50Ivrjk%k3o2aNR z_mExqp4ZWia-ToAg>B)_8G`%4???x?zX(S8fH7xU&AV<8x3iY2p)pvF$Z)BgQ!_hTw9CVk_3Kq-WZrMpfu19C6Xrl*NQin}v5`*v z_Q9s1R=s!a3AC9{A3r|lsRg@jW^V2-fGkz{@*Vt)pr9bRcpiD~Jt`EruzSfcr%{(B zObUCrgi0W`@Psv;-u)ODP&esL$TlA@>9c>=7k8@CN#2n#``bI<&pLia+NcQe>Z-xR zaxd+U&lxs4It8qGjX=I~PC$%2XP6}SufC9!&>IpQe4Ti7xuzG)p;Ya%O?Ho9UZw4-~#cL zAJG2~|7~6%BAdiRxqlfer!E92B5ENqPtO{A=c_108(`(-;85zHDdgnjjQGrs`eKvP z=I)d z9mpVK{jajHgndI2ehx6rO*rm3BgC`xM;h!kHF+!j8)hj0I7{!hdf)t%=h0{!K!G4X&u=E zn^xT^uTAl=)Iht>`%gI3^VFjGIi-3zm3o1frziL)`HrO=r}K4I!$mLc?39RZVWKYpR?F1qLJ^~N{6?x>Y=0LR zi0W`)qClf+1*)IEb1W?@+c_we@h`U~)Xmh3@GI;2jjHNuiGm^K(ce4eKS#tyi`f%1 zMy0;O+vtRZbPt8>{z?MeMxlVWLO#)=x2&ujrZLL34`;Z9#{MZtW<$RXy3AUF$uC{L z+z68ng#xVus2l>;bI-;-Jw4TuuU);G+tGUSu+Tue-+Pu+s>Dm|dx;O0dN~Yy^~LS4 z`pb?2a6_v6s_w^o)&u(higS2|C!D;0r96z`GXK;k$^$YLcoOAql%okTmY7@HWSce9 z^y@+~q4SZYv^t*<`Hwp*4DmmBHOp`h%=U0Df6G9^w*fdK(xfXwqmEI;hdVHsX|`L_wT=KSn9M#zm5Jc!(m(S(yf?2t~_ zQuQu}l`2J6swaWpP#u|Bm`fCHY`PUGN8LNFWY@17?F$%y%#TmWr^LOQ7ADfCW+RIp z#3qZ)|Egcm<8;g8g;?ypek##=LMAQaajlT^&*-~MOfuYU_czkT$(RixD7B)~z(PnP zl3@9*)@5BEEj9^Jq5*>`X@k!-YlGaij#qEqj9cxNP(|WIUJBCE%3dG|7jKDha;mu5 z9`WS?C?3F=pk^5tnFCs-IDk4ko;-iLyLq_XBRajhn#ii?Fe<Kn9 zV3*Yq_>F%74)E8>9n-RF6K8jM}`Kp+!f8 z!@`t?E&LXeOV8j@m<{H}4rnm^EHtVAX=zYia_SnVsk-;t>Kre}Mn@HyE)C&q^evOK z07g27=Q^X==^i{#m4*y$wP*JBdi{A_-)`EYAd@9 z;_tP$q6N(H!q=yHKS0mhME3UIrofK0*_JSxFt~LLSNpv=h#GzWL@$fD6>r|XdjZdb z&+hL<-+Qm#Ertlfu>9w(paR_H=O?G}+WBZ-HoHIR(+ZhH@S=TzGGMy)*#ZsX&vCj& zJm6e-_ZCz)s&btIAn5^&k;p|L*AiehfS~FJ1g{vG6=CIsX+uxHf(&VLQl~%`T}wb4v^DA--%{J%(gp(Tukq53WSJtu7-uymFe#Ra-YV?GX_%o#TD3 z5-+#BYI>*9ICpD#s=eLaW?LxHXlxGldI2~>oqlJ?{89x3#{_Jcg2r$t*vrBk*DqiJQ z!<@!qe-rc}Zc;f1;6WG7h{Hi%^bCk7E$!BjfloH}*1)3U)?B=82QU%!ZLlvML;i~a z#Lyd{iMrS71Hz|=7s&k@L6_{{EVmxbylHd67s-df6TS!5=Tm~!XDo;hzC9)af`4%d zkY6ETVRZ=?vdJOni&5+bN!E33ZBG_|XNMzhMbzT*GIQGF5EWrudI0?Jx#8BDgz$X` zNriwR{VF_awZ;?F2PjS%aq-sy0lNR4(M63)N4!YH>mrA&8yoC^uDxmy#4M;Yo8wlC zVR~7OJ}MaM1Xh6t3!76=?lKBm+I#g;0bZn@I45C4ap!s1*i(oDAQx$O@^Tc=3swB$ zx|~;Dl;Pyy5Dxae*@yx_8nAX~0og`Fn()h(i1$f_#nckyujQA^fxn`&c`Nf|5uIXN zv&i5ky0k#2&pXC4$bPG&#EUjH`_u!Ty2qfk>~blq(*eNyaJZqIC{-|upmV+Fw9?UM z$=(K{pM%i?E(o)FjvBGw_Y^r8_sU7flYa^gje%V7lw&;Bt9DlJ1HWK2)p|d*H*g~= zqXwUh0|oo+!p1D88t4s_MY`}-q0TaZhbG6?pp?=<02X#chZY{I#L}Nm7(ie~>wzMX z2JRjd2RsC!?ZS8 z9|m!2ljWBLLX{CDbiF@GUHe7We9xvk1t zy0)y8(4g9x0CGVL+9eGC=(00GdAZh@)WYs>Aesf;iU>Bms?(#-DT z`0ek2D5CW15pAkx6o`jFhn_>?^iPdj@lrdh+%f3s>7Sn*Y@&Q2lyN`iw=YHp zHkgy&!Oj9S6$%^V>srg5)cMYA)hrH3o$JjsDm z5AE$aPfky_g=tt9DPuElMM;4<8IkNrOB<^BA>bJ_@B;|iBFX!eiCT)lz`%pm@=3(9 zt)5S#Po(R=-n3Q1pqzRUoCel7FfZF~!k~dLv-m?&zb!w$HgIN|Aq@=5k)&kPGma;~ zZqi-WCk{V_MLCAbsb1;q|M99CMNC{f<@(djn|~#m0Q3>q@;cns6E$vsXJ_xg2zBm} zk`<83WDG!?fA5f&lnni0*uC9(n-`6Q=|Loc2B0iopjXWU+vn_LTM>*f8o13C$R*!5 z?zj$jGzCqeqXedsS%=i}7G-QpuQ6hD+TZcN7=ajpC>k1?0mqq;JMagykrGA_5Q7+1 zGf^n8H zs0I+)VtG9FtX9SQd!dr5kWHkFhzjK7E7e=GtM1!=S<;3~bqiArq7Z$f-V z4BW8$uwov;LzCC(;28H>llq@0 zz_+3`@fZk9h4-nz$;rtSXw~cg@rC9RG{2P0xF_?$Q>O1K_v?^2j#M;)(p zJ_NK0K|EqdH~zjMwl{=?t@_~!1w)UYRYoaT zCzxG?p4(l#$goA4%PhCgnI}+u8We|l-yLwYF2WTuiNM(h&v6q;$*6xyB=Q`>QpoYV ztq#VRpVAw!d zr9lCNc>|z@sb5%FSQ)Z!5C&+3gItKKur&_-`D=~hlP3*;UfrSvh=n7`l&i6w5XxX)^p#!*G!ndrBU_O@pnds;tA0OO*UiITjaUM4`)OK)}jt*v+*ZaLU9FxU7Jc8+av%t%yp2 z^D!p=6r4FQb>eue@lX{$=OQ5D1p>Ni=6oM>53&1aJJJ->VdxW0a4ZsK<_(Y;CM*Q;|2dH12!R(kml+Eg z8ZlVm$VJctq9AiK&*ueeLQC5RCtZxI^b5d_C1r$zgs2bDT-tzX7e#u(m!%FZM;?Mo z2}4{t(ggVA1u-~E6md=w-iCq9`$b8)v(hZmP=zc^7Yy3boz+oNklV0OkPN&EHUQ#O z1BFt84xl?P3mXNDGw9B50jnDydjqcjCrh1{wtf1O=_B1n%=XD&dRtmrK@iX+l$5T( z7yry;eVR*_1F>XJa7`W~=AU3ADXaDy(8xJr?xbc>BZrv6_Ps6+7EU=1LSeEr(@ z&|idZ7#9tdA-S)jw~f@b479M7$ZFiOiE`$5?7#;@nKi&ui9!;fVfzJDd zi5y*m7}O6KLwF@}dm~XO8ox&X(HafA9posDV8tQV$O@B(mKF}5rb9xg4?fJZ9S|L> zxy?ikBPKTf2hjCpA-$3TQ~^u>u7|ZOF)_~C1(iH#z4b~2-L07*g62om?(hAC=^h;A8@o{1Go(svll>`-`Ls`hZE2& z9k5_|Zo`)2E9!SWBI6NGBC)HW|L-h-J|(Bs2iQiwRxZxqGJ-8wT+C?=4+vbQdlPWJ z<>JMQQ_%+Ag?zARER5lBE&9l{gn*V4Ap}>n6&_@{rq{MGJomx3k1s+VFq(xsgep-f z$iXbGe<4c{avlNC`aHDE+6@;Z+hG*uRICxZqHaUy_uZG(pIwKG2tY0O2yedHuSY4K ze?Q1hz(|D{5ll*T`LNK?r**ugU{4^vjDhDS7L*&yKcCcTv|Kg(Rc?=o7r|t;e0Ne< z^lSLQE%1kaoRdi->P-o~+I6*bD8iiiX|5RTZ|~Dx4TwztO+G)#vgg;Z1gNW}a@Qj_ zzP7`tz#c)@!$FNnXknW%z7q&!Kzfh_bqkK?B8?to{#@M_VE|Hy@)YQ~S?1_+) z&lj4Uc0|~qqxN=DYt?Y^zb{G{0gC^hfY1K8Ip_okE}-0uCfro|dA+>zJ6=&DKxWhr^w5_!O~ zJ|EGDDdS%CPl8kGx!B=}y(Y~+|89f3$o>Bz)%icBJpWJs^TOpSl%%5Hj+A*oJw^PC zi_P0{Ar9Mx0WwmM6S@4{0zf5#lhYC ztU%a%)+gqHF$?vbaU4|5i8iyRz>JRkcFROv;Gc!~HqR5XHR?yxt238r>QxT4#!M%Y zR_kx=PD_+554KuS4K6x5k4kMH<(-K*Un1>E5-+clNEzC`BFj#=wknCTnXC$JHc%A* zjeePa=N<+M_NH=~Cw*5?!&&-8R6 zds;BRk>R_s&9tsQXLwrkhDzqx@yq^}CE3Y$(->i6eBYY#*xpUL^Ts~gx`r;xj~mQ4 zE|Ct22ZYoCJ#efb-E1hgEdQKtAm&Ya8vE&tfxtlic)^}_Z^@g&tOyHG}17ulO4gqQ*X-gV}jCVSPWpM<;yuR5=%BT{2-D{2n_Uk*~)Ql@DHN=N znCFzc?5@|hODe`1!oBm#^QERAs-(_s&6bU`jw^n;dhO-5_8oWuCK;MXG4$eK)H+hO zH{~fc|pwtc6FIm zL(cjfL;oZ-7oM&2DkkcZ=squr7dM8>i&W)5wU^eK#>8)z|In;3VeU>6ve+wcUv{x` zKC8cVux{vIxD)R)V`0Px`6UdLz-0wxlKm~^4ndQbL^}(j*9i>FF={)*Q%bgVFe6K} z_p{Ge$6gOic70#f8JgB^BUlXUyP{i4@-8Iy&4;B@JI8Yy`Qu1~Y_Xud@RHyD2aEo; zg{RR@t_K|Cpc9L0TQI?LyC!^m_1y68=K!hu^tFT5Ru=P71RdV`Une@_${#!%7dgsk zH@21aW=4I{ttHgeyL?;tl(_7?ijdpD!f10VFo_-rd;0gzg3`yW)R-S!*$JVVUcxsY z97VVIPR~rCXD*}oJecrxc=It(zw;+A%Inl+|1`)j(UUu!!@)n?a4;U(GZ>m4Wxsdp z%!Z{-^V`kK=QJMs)RU^G4R$BH<1VDdU&-S=nusc87c(zQJ1UD`Wh#$ww98Hxf23B$ zA#?p|4kGif%N<0L zdk!~w`}$N4ow~V5ekREEo3I{CbuzZ_&?zK6o0~24+?k9}AnciNX z+n)I(fAY-?GxF=ett~aO84+)POb=(>-Wl9KwLarV_)|XRzj-?{GBPi0Or@=wyDMHc zblXcTPH%F3N3|1Byav0>uW5>jEj&^ZQB!3jj2k;g&L#F6XoHbZEM8ZrZIo# z_WP38+nSs$3GaBWQdNh2_Y2dl=p?DJy+?<$pV3L@!ZF?d`3<#j#MfNmq2Db7od>h0 zL;U0D$DdI-$5M`Uy zp14nr@y#N%wP}xfCTMlI4y)~^l4@O_yfe*w>Qr0h1^D-d?xuJ?ni8*mly8a`LHqWl z?5U31#>Xtzsp+y3uOl}@x3F z^}~z&`d251>jO7cN3*yDVWC&2JGR#bmMTg9?G)W+@lt}KBQN36W$v7TF9g0ixGqaP zHREQZb%~>tLbP+k)jnAK-%N2f3-80f{t^B$iBJq}!M$)WCL6J{(Xl_qXRmJ}M=g7F zcr@zb_3;yRk|qnun5_HA_+X2Cd~apz*UHQcX}JKy_7n1*)xLL(57R>G{IT>@QN@|M zF{xkNmhZi^FY4Pm(QAsBH6l5Q;LSz5jIGux{C&~$&3qLvEs@(|s1*{B!d*HPPI)?q z)rCoEL*8X{^XuJ52S+!KBZNW|zFG~d;yy|ay~VaCS6HTzUa|PGJV4s}45MZKx7zX1 z?IgU*+|*L@2|TTNZv;`#KTB=r&de;g-n(W>QBQO4idvd)hwEkS9GEf0)S9IAJ*((hX{;54cviPo)-(Qi=z}Qw2W-%pW1X8^b`^=k z0{fnkEiPP!d%tn5Mk`ttl1)2*&d!sEZ|t!)tLnLvYAS9G-wCB0yKK}|9W!40+3Fcq z+Ru!mt^c^=?z{9iJ7p@WDUyrBD2(2+GmMocvx>0Y?csSJo;KgnwJI)n?e7abC*hzI z4F;w6x>%;Ev>`pytrD&$YjF*4-7Y`ik5byqxinXguFFr?_Hi z+&gz?sW|MoZ#bV@3|Pv&?NGjJNJ++HRK{%&z=k)ZVyvhq9<&Rm2&N4h4yRm(YdbxeRgxaH-SrN$|?oO0_ zK%H!GqGxA6t808dk8SU7^Ktp(g^V`!r}^T>A~*LXlF;3R!6eRax=d!qHL8hgY)MhJ zHT$^oYgNg~brh|C-TDjKc!I(QEYLHX4`MbJm3Z=WUa>y77T?v9V_dINC5K|K*^1KJ zopsUY3^Kz@@Zrr%Q)s+fkwipYmm#yQ>2FhFam)o<+j#k%dQ(y$E#rL*B1QJ<JtKYU{K#zBY0$)$)eflz)sM#d_vV^9X~i%onJfO+&TY4 z_nnsNQqzr`ylbN8zJ4Aqb6RUlOC~}VWtuD%Rh2h1HM0ARgDvmwo{X#B8sZZ5KHIA= zZSGx8-wjVR@6UgL^iU|1`XLsi6>Yb8ByY4g4Ywpt|Ij}sxpz;dBKl$x_T?MpKN7ws zD3S{at(+6RYV$!J&5aj!RU2V1OdhWZGQC1GPaE)DX>-TdO0X4fKV0ZKJrVsiBtSZJ z`TR+1D_XSTIpqH2k`J&@XU3R|zw(GqvBOXe?%ra}=k>=*ec+0{2-jn6aG*Zs@ zqA@+#g;PbCXe}oimr9rPVm>h>TXxi@``>rHOMjSamqe%dmfW}q=l7q+-eseiC1Vz? zjcfa&JA4w4<)0mpPWD625*AV~AA`#z|CDncr_yM@mBl7Bfw|!z?A?GxMg-<_{n`2_ zuT<{fP?X7fvjyWt=G;ssS{s#y-cN};A$3&gpve-YTM$6OolaAIJ}%ePevMM3B6?M4 zFn+|@n@JX&qlLq47paR|i&P@xLwbVd&KmYumk&+*wF#4H z-q;ta`}-f`V)8bhzwIfG83wX7-y|FjW6A%AlF#b&x{%wVQNl@5VdGk9Z=9N3lF+u6OrC(}NH2l9D zsnnB4&)ztWp+u3T;BG>5ZArkQ2Y3ibmR0uEn9}l9_wY>W^SbZ4Wa$)#9t?liY)46y zDRAcrAf=)MB1$a=4Yur8X$_<$IS%H!np{2B?+AiFWqc_d(Nyrl=G^Ay?);vE*c3R3 zGzXnIDMg04`-)A=tG|}KEx|v8<*=i9*2Cu<%(wa3sjWYk+}SbSoJnH$2@Lqz+UgrJ z;B(huqIuFZ{JfeQo<@;-u=^)5?QPZ0Xn}A$<_OD^VWMc38xmn`A*50Y!RcD1L|V?Z zLB=>6A9KisS4RufU9~STPiF^Ca?UBVI@XF`g{e6Vqjo)@J88Q{v==o_Hd;&eH8I7zWKGv--~0J7Pj>3qjR+s}+`QPf5`i;^FY`fO zq{BDBXTFmRdH2wac(UV&eu(+TIqfwxx!A}3-|-r>u`X}p(%-F(qj{cduYC!WWx9KI zqEhqo*aSxH+Tuto*x8<)0SCwFAL}ZW;zQT4cRrHy_4a0p8qB$M;&^$E85PPXb+@6B z*p6>y%NfF2DT~b0Y=_P5I$da7+3Z}P{hqTSabSp6Bv?m1U18+!D+$41lwX{-a}p+d zdw;iHq28Czu%$qoP5x?rt{tzPm;xt%L`3c%2RzuO&Gc{tbts=@R|NPPxMU+&rIsFj z@W&ib-{?LL5*u@13U>DUb&5K}uB6>Xp6`tO`(>k@L`>Yyvu>aI=q-qtuKHZD%F@{4 zcX2SkgO=iiJ}$@O18bX3K2FoE%jf3s_RY~J40oDr1ZKU{OGQbG^Li3hv%4-Rr`Z-q zSxfiQZ~Xg6iun5B%V44diVmy7=EN)#a+jKR^WX1&HKa{{OYvg z!4;Mpc;GklT&lf87`-nGKNWT6yCYbAZ%yaM*?Vi1ykt5$o*QtVLs?+mcs=|+mTI(? zl97?QHb+?Q58v3Sc6}1NnC0}aE>4?LL*qbz_vTDAe}t$wp=?vPYVZoz2Rb_W#}FxR zBR6*fLmn4-l%nSLHzvAp&$~=5%{}kgZ5&suzJXwBZS9C8Zm3!!5f^q?m*66Mzd3We zEX*?1_Q!kX3TmRDOlf$j*+>WYOGYv@eh?H_4yirzxCDbWZs);FFNG6o>5w{O!wx+M z)x^?Vt4GEp)%-#&LrDDUgfSwb@*5DLwQzO9x>upUWHW{$lq)x}s~qz46}VCt^rsrS zwP%lVlDrsE$JGI;rQLUi0(^v|MGme&IMnVy3C{=iddgPh@!PlQWTR$%+h>PTX=TMD~2@I3Se_n$`l_%@7;T=Z-F zRWECs(44vPx>&m`k;3`_F&TjQ4h~SiSlz0C&t_foCVtd-V>K)7)DW+*C8r}TVvIW{ z9#SK@YGo}*e6Q6-3X^fb8jQY%*Eo=U0fNc?G%cji`7bv=1#o9;{hZAe{TA(d$*)7l={nxed+0J`h#(aGLqdHi_lED z^1sBiL>eB#L|b?Ak=jSo)*MFHSh&B>MG8|aq4%9!AxBc(S8{MlHb;$p7B-ty2g& zZP*QFpTyk8RQ$#1cI5-<{oh4ucn~+pzchI*f=4W~sJ9XYgzPCQ) zt>54bc=W}f*As4Qyk1`;yuB%$XIbfn7{Ij;2jVK^{$As>z$DeL@R*PKcL{1YPTNl9 zmc!(ScOaimvc3CG%z0D8C?!98M4{>YA6V@ejg7cxa~TKW_wno6CdtU{Tse#$!$cr< z-Dd==s@(EbS&H8D5#ZfuyQJL0Wj$Ws=V!uYf=xgX9elOa@8`3Tb*-%u?ah1$wZI;- z6VAinW0ITJ-mnZf7C*6nFR;XidBRb1cs--958*u{y&(1bwgHo#t@4O_OH*^3RwP7B z*HH1-gG_sSb&RauoSEP4IH>Nivt2*DAF%PJX*Hc>xWp>pcSJAjlWvZ?Q)?Q&sTI5P zimLY@VL(9IWSE5%ynK&k_Z|WgkJXWUQUsx_#i>KPXZZunN&EJcio(vje@m*KfMbE2 z^g`ULaoS_m7lf zQa%fq`@l)9kmijXaR?F-K+$RmTLTXl74jJl8tL;e&z<_z6%XB;h$F}CguijM@i9HT zJ>(4Gi&1YCsZ?a?$Bp^iNAA%vTGo5wMXD?*=!g8O+9woLnL{SU+gk?|<5m`uGg~#C zM*0H(AC`^#Kn+mqiXqGIOJafwxHh#}YT@fCQnyL350R!nnyjoa`%vs`{#XY^zH?@$dw zuN`@f?%iBqGPbI)jCjaF-*>R8-TMjFzsBsnfxP{KfkW~zGLEMA#A1gIug8yG$I zAw;C)4-PvVNwO}wL$ly~v&kHf?}sSW=;$oll|I^*3WdYn9d=4XQT(Ombq^jAtL+P3 zgzJXK;d@OE;2#Xf4NneYR8&j19b{r3H*I~ZH`A^S2F%cX#SD{B;W7)x+g^m0434x* z3thi!G-ziki`zZUv-#6G*x4nnaX2kBv$SLgyK|*5eZ>3Z9m(y|GgSc%m-Tw>C?_%V z2RHmY8z~93){MM|lU0uAvGy9uEx9X%vl{kLh0D??hgR{ge+=^FAS8h@^Gk8@6nm7Y z?Gok^6qo3S_$24MUk`?Em0wzd6(~I>!`^dS?5`7tK0f#F2fSYBjYl-~{Jd)AdtELR zkCsiNV`6^%M@C@a^iM`W4*7OCYh?Sb50Zq$?Iyd04)L^px^g17+ofxB;g_Tl2QHmR zFkfX4kH+=#|AP6Asi=Jhl^Fk$RaAc1tBo3LDWgp(&3|CTvyW&>V6=u=OJ_B(u#iTi zwRq+?e`eyam79EA)lVk5wmmjM!I;0p&&EHq2FYfxogmfiaEST$NLLLCLTnmrV4Gp7 z!Frmel_OA5Db<`rN=q=@pJs@i5ONZIKW4^F_e=I$aP;R~WbKv_@|T2^H~n3{t7K#< zZ5P73_l#(ROg*vj(TD9zsj!pj8ee?aK1zlK4L^FmI1uVVu$O@ShK?=;;sxwyCh%$h zFaO%c%Hjb7!)HKdlaP~R8LM+01<|2}r8#ga1IW`ffVqEI!y_O_0Z2Ra_-N*HlMdu# zL&b-Q!|QURX58AYTQ7iprU8(`STI!iLad9ok54(>-mpSf5O=m_c`)!>>;Sy~#xVSY zM;>?=0an`0+?$fX7mgjh7eDn1N6Z@Y;{pD`0RUwzY$zgvj5{g-Ak6aB&UVlasWywf zUF;)hF1|+b=mG#_01+St2ryu5oG=`V`1b7yfcYQ09y|b~QZlx=cLIBR#6R1Gx9F?4 z_e)&?XJb2GCi|BUnM?RX0kx9|Ee6o6bWZJQ3iRo9#0p}80Cc&{u_?>s690w;uttXh z*3uX{NTeb;uMiRj;*1Re-fI-PbQep=lqg^%f~MtJK0KnM`v`qqasY?dY^UUW^8|>O zfWglQ0M@`A;}5{8hpq>ffPfvTu*=LhTk1`=AJE@GuV%LcJ3NrtRHAL5u?0G=x1b&1 z#xnVJ!%A$N?kkypp$*VX=YbX(Y3lU)b=;O4;LzUmrxC$#apRy(7r<*+D3lxk%V^vW zbSszh9bC|ZhPgdGa?sXL4>$#<)(yW5=@%$-Y=mFvdq?gr0|R2Vyl(;63ZeB<00BsZ zWB?Llc}D=7#sSbcfNnxJ@u%n5VV|g24f^q;6`GN{54L95k5#MEMioQXZoti$t~Ne; z_pMRyTuUDj4|EP9G6zgpC^?L-d7K_H0{$WasNDdwQ#a+j%Czt@>gpq)tcc{X=mOlc z`^cjg11Sk+r7-9(U)>9Tq6UC>L~uxm4Xdn#1Ww)1(2(l<(o!p+sotO}xUfL=k&%&q z-DtZInwy|m^(XW-@35*UzPq1cZw$P+(_lOJ|C#N@l;*umRUAV=5n_Ei;01(jj+QId~361&%h$}1<3mW!(v!q`PtVh3-p2%;G zw}a`pT3`J%CKGj`{27em(b17Lwp#-lFg4quDdh_=hwo3g8?4c>;De7}^Va zt6dzhRGEOZLH)BU=28JeC;(u?^6<6ES|nT)2;0XRwh!6cDBld!-`gU2cs`yA+MA$> zh@OSz8kS8Ruv^cd6DXj$3?Nd|FtfTX-);kc&LhAu0y~13oZL5ow3gEjB~k-(}sUk7k+ zXj0|`KJ^7)F9pEMUswY7T48|M+~wnogqzmZIj^E(s|`ymCc6Nl`PgpxIv`iGbZTQ^ z0Ex-TTlhDsX5`*8LnETgHEfRQ`#ite`Jn~?x&exVh0rW4I5e*0r)s_`Zq>%Fg*T;* zdar09FJ-#1j=#J(;5U@6M;L1T4x5_>O(#5Y!rU+U#~@pSclak?z5ZXPv;X^R?4JK0 zvi$$Q56eO(3PDs})MwoF7xMdegdS=GYp^eH3}&yO)5m7 z&?cf#=&UWrF3{79i1KX-(SR8B`7d* zwDatK7_&oi)G0C~I`Wr|1-{9L0Znst{?xpin1b3(39U0L3c=Sl ztzN$BCX{U4J0qniF-$pZY>1O`T|qw;j9p_%rP0cbWx>HOLt^f>jU`rhO7(y0IgD5= zblerB|HP;+@Ur?0)2+HbwcZsa=%R1ecI;hJ_Eq*(;evT~^_M`}_Aef1@m4W>wvJ_; zhV3IZ`25ZU%Zj;Ahe~AsBDVjiy-}@TaLho5R*1WP7`TnzOoAbA+K6&kZz*-PHn}>6 zUcJl3$~v^&viRm>peMQ8HFl%I5%QD6)QcsIboYI~<&iio*Q&}}Kk|AOXmv6Rr`QU) z!}c;r-uj>45=BJCW~TK#9Nv?p%HZV9)VV);#9{5Wur}4&jKQ5=n3=Jx#N+FVuqoex zn|k~B(X-HfOq!j=S@HQAFje)=XJt*ezZzPmPuS zIlrIJ%d)lI5GkzD-JgF57wpuXyR|~Qa=&vUd5hIf^{-tnM94zt)Qr!h<+d#YOdlLG zI|~eacy)fVgX@o;!{*ZonjI$QvkC9Q0pG%bAN@9O1$uS~_yoo)T1pB{cJ5wsd*qAy ziECwJcd=mIcO=tnDND#v!+veHhAoDoKanhZqq@5+WH8s1CoxN~xjA-bwZ+NLm-qS3 zLWMPpz%^QS_TJtuqKNNL=B(!^PV{JFJ+_$=-QZOpne_5V#qxW72IfW7_)7_yrh!J! zBAbPSleOCij!wL`uIz@RzYd$|7mv+rQS18nPPs6aPfNy@2U0&rQ8J~cW3P6J8lRWr z7ipk^a>-$!gtX+0s%qJmOLoS9dyR4OQ9oYf$9ktFOK|t(GeXL zw$w3=Pmirn9_w6lkLdHTNI^Z%9xgHF$#$_@So9%5V8|$dy>sA-AVpVuy;p(ZkWAt# z-ls`}j{QlZh;Ma~v>tSN^>@`#eI1uQ_DlzD7Z0?%jyy`vsU?4ujc-TyYucbGPayk&GHbp{e6F^j>O*`=TiUN1>l2 zBPavOgiq}gUZw2l2kP1tY>$(yz0VTs)xkU-axBqM08u7yG)? z$mTF{E0cE0g}wS2JOJ>)C0y7aAH4u4tu?zm;scJPHK*wU3PjoVr;^?-LGG>M7w&l9W*fL|M04;+$v9UxiVuTtE~;&X44sagf|L)nK826{#iC=2+n3_i`9~LyRYc!^Lbq9Kf6CTIxsU1cRNmk z>f_@Pu3T>FA0Wfy%Xs;f!yu;A%*yAAKXQxSw8U&)vH$HfNr-nqV0WQRW8D+isw!{E zm$$%d+bk`WJ?5u8M)c&_zpD(iu=nWqOHN6q2<%~3xyvYqHPIg`qoTHWZ!>LtUZ%62 zgPOvL*SL1=xm@A>XF&rIHp>!}yzcoP*YFSn_m%WoODE?5F)$r$`pi@;Wy8vrpDgea zTh<&UkEO#*Q(2{w*_0f+(e) zy!D_*Bt_RI;?71o&&xXyvn%IFsm<6(n5gHtyYtSuN^2jyJzj4iHR5*{s!@%}GB7YQ zkWMF|H5RyQ-|+qw{S{}6d!1}I?`Zz&3=oRpE3{p^30v}xCW=krd3XX}7w@~t(xJ;C zU}cipXVettG)>H<-fL6G8p&EdFfBE|&2~Ge(Ib0y%4pyEY)#s!qLUsbWX#Q#9S}-a zx`XeCzm%|klM#P%9iDw|xTZAKIH>4_$ZFzKUOFCfc0xk^Ct?uOH6T4W$#1&r7Oe>e zM3Ez7Sa?(HTCH%?Od5SbP!LgY>8a*A>%*}2uv7@O5a5zG_t9$+EXMZy<~cc>Sz1ue zo-r)Z56rG~(6V;2N7go#_CKWA(9S`9r7?DCV4PbeQ!A+3uFcWxN-8hJK4r)0G_(7U z2SKg00q|n)0)BF!X(mq$2)~r~C+`2Uo~1J2w{ia}Yn)kJmvfy?z6gT(94lU(bX7$Q zZg7sNTTTiqYWJ?>)E(tqvVe_P>V9OgMyVx> zfInEE{Oyf^CI|Xs!bkHTR|Pil=h=@x!SY`fw*Gv_R5>Iz=oQ15)65}WpnS8`4=GJO z9P!rHRX)d__!$o8-cna!zrDhXGd?+1$}t^v1?KbG#=iQ8X2!K~I3Fn#G*PJ>aSW|= zn-n@7DfIeuTa4Fo_hoDWSZSK)mqMVvun8eXX*-8N|BRFRo@4CS+y@oL^P3YYI&dRJ5P~JTcdENSbbJ|0)VtyO@QYPnDurAB{Rrmnd8eJNt=;J{ z-a_)dH4&M4$7rpl?m%~~iic@p?D`|y0hHw2>&&MkmCcvQl^K}{QEr5VwN!q7g*HKE z3vkuJYuCSi=RbsjQq7hrsz{}P2>FV^UbYK5zeI|h?b(z;Ur19DN zTH!4pABH=OeMRo)ztn8s-$#YJY_Fe;zU#KKpRIC(39xYE9(AF#0051TZ#;tW*tzP!6yezXjx5ND#dRl$Eo z;kzmMRR@9uef>0BkHRb-vc2{CW4GhEF{5(6amxOu`7=jJPnBQBQ?eOu#U4zF~SA0U5XOJ7VtX5a9M0-E>jLKvtJ&&_9 zE`Hy44bE1rXB(`7739m)pI!8tkMFQ&6O36LCQs1Q%Tv!*yvpKb+}bW|)Rl|+N@eVl zl#~JiUbOtg#NnXbUGDJ8*d^~qy;d%r`SiZjfTi~nE{CKOPFr_o_+7g7Whj17^t%<| z-_~VZJbOkcS~XE?$!||2*7Z}imNns+-(qHdxvl1o$LuoY{UL(?03FO8*&cOJL<$di zel8SWRV^EKY}6}Bp+@R0e85~={_RJo?S|S#D_e|6MNJ6aTU%+Lm^^LaaV6t|v%hMs zSlyL%Eq|JWySesmIm0EaUth&lxu*kGpvCUZRz?`rRYB3cHl^*)tq>75&FqP-SJu8P zahQBpx--YWK}=2A{{A<;Uy_W=Ma<(EFdDxz>-%?G^M1>13?8W+aW%U~HQv#y?6khmgr<0HiI8Kk)#H7|ev-$NW|l1vj5 z4^z8-gRC|~IZN?R8Y*elfPhBunUt%5yO2euylAwfY;$v82>5dO zhYxyI&Aq+HzkwN?&5)3gneUVp+p7O{5yadSZr^$j7HoVV?crn~)r+ugQtPnN5i|ct z&LH+wnJGRg&!EWg zFR+s|JhZ>BaCri7;Q_>BL75o~m7fkz7o3ue4K^3{`-TtOEyhRkh$v4nUW`X*_zTWC z+qtff{Rx`_>syx_29ab1dkdbcCwn~DQs)k8a6X3LF=MhF61#k-bsTKgwT4GVQet%e ze8v7PA*LY6O>%~7aImY!(V&48^~L+86{My?ne*`2H`vZd-rrO*PY_2r1L)-U)D$-Y zYp%;BBgp4e-c2;@3wNLYvuEC|kS%`)VV)ru#K(22@&^q8Y}Bs*wb(aXxAsmQ;;XzW z`7O|^0Rye-2FLbHrX}X_6Z-EQ-Dbs9Z293NL>e$6Iau${CA8q$;VQYe+_cb`dHP5w z5ThHpb@&@Mav@`-kY_SQcTHm(HQ}Sccy8G0wJ_|y@|qp==IqSr`K_I;^4SWaSFb*Q zj=2T-^W;0QV>V#hn`L7e?r;sLn*WnTALc}{LNfbD|8_$|lv z!p8JkCML4_3@Dx!r4WvTvd20HEBAV8{kNRJ?<3wWbmcp@-$iI@X{ISY9)(S_Z@gZmR+nSOW(Ooe@WVb`pa&4J@IPqYBF5Bw4i4QOQTUia7W zSd{>tqMZNWmPO!UXqbmZ!-z@a$g965rTpKcY)aT-yJQ`#JVnb7m55JYzi*WD^?mteoqszTVeKu}8eX`cU@Z&;0CC zUz0I=U~tnyp0@%5E?6*wHbd}SsulLEP_+01AGtD>ll51)9bFvfE30$fAs^7hTZ|P( z$zXKqhsL755|+kybHt=;t<7uBF?L5iuO;+4pJ%&$y)A-O64Okpd(uIREp@?qM7+l4 znL~3F!3qjx)$ZqSTyhJ5>`FhywOQ7WZ0kuMzqhyVBOJrNBm9Hi&QhkOb#t?op|JKP z^x!Q-4fzRMHJ^PFq`%*5R|(bkm%GB9@Y2Ea22PwIiZfACsAl!^5Q;969*K|VIQwzMlkh9AF z1!1fp4=4H}F+LB&Ux*nF~>(9xXZHwA-budQ9=9MwnZRU@pML?-fum874|K(tX!e8s( zOD{oKf$P`!ETVY~s#a;5Ij%WkM?%`#{kdv>%VC-1?Lv^TZk7KZGuGxs$XNG+kBc^1 zbd^u5gWe_z&Hd?}!x|gVjszD_4>dFTCll5-b`z^3loqmqu7N>tfQ3aVDa}l;cKCM- zrNR*sptxxk2Y>L#ns;Z*3hIVJxuj7q|68opRF^uqnBme{LSm0_VyLUH4*NX&G7QOgT$xEtnEDTZz>iNIwO7BCuO-@T?HO z<*Kjr@*qdsrK1Sltp@RnB}})Od?0K*_eZTD$tsnL-|T$WNWo$7%2CAq#;O zP?~HeOcYL*f355&XtjKOkJjU}?o)kiEioc?NviyjA)Z;Fw|C;-w%bI$l*Z)-)L+tM zoic~~Y+a_sgL98F*#)|~M)nJK5(6obL+{2UG@m{DFlIIycYEj4T}#`> z`%P6C0v?qdGuQor-K-D7sR?WXABC?wU+Wg#+cHx`>QCt+z)C~;O!VdO6)^aSxwgKI_+A<=xp|8ALeDFdFU1l8_Xs}77Afj~0;)x&sMuKQqls|@C@GTwo;TLdg-`Z0C zMZ_cl_;5Ov7~|GpTQgMCfg3nWa-^wp_SGlF5@CSVfw|F}X7_hT@9ZW2Q#gX(&?O{p zZf#f0+J{?=*P#L^DJ}Y$W)_;;y9Ffo?bn=)>Q-2^D!)Kwahll1tJfs#e*Wy(#&-V# zWPO>k2^S@AqlHR$${($8@VZ;YnHXn=3D-pZGNl)uE>-e?BRU_zf}n#Z@9A*A53;!S z03|~d6m9DTwmW0PBUY^U1xfG*pJUy@_;ya^hpe6-f({1HD@QxvWF0n?$Qbd zAGV*?B^ro>N!((eYvyOKX^`x;?Q+ndbrXz*@BTb#c?Ga&oD+U{KG+RY zDc>j=v&r6Bi&pbLvZrIT5$Ix@SrDsbLy`9d-MjuC@UrpVGrD%*L|D8E!HVqH@7O%l-Ma~dUhg?z?XW6@nRcg zG)}T69&vZ<929b(q?%6tmv?Td!-o|HhC4*gkEnR`>VK*H8x}xCB||AI)YQE7BgCJK zeB58szLRGuGl$`{PpK6c)U1H}g^E&;wc!bjo5P6pe@b_lrsl&}jt`PVWTN>zk%8TJ zXuAQE@}H8YBGj>6KEydPFJ4T|FH0m_&skTGh|QYFK?1=fH}MB{j!073Jvr^#e%RIU z^Y5r#>^J`fsP}(={l8B^VYOJXt>XiWb{^11f+iSf?@W;b+Qs@XjMr(K0a!mHG`mr# znD_7BOS+R$QAq(KFsMv3ZFBR=i^A%fl_&%kreS5)VpRAW@DcW_!#{yCuoJldfRDlu zh;)GUD5C`q^rHn0*UM%IfDFR6wWP>&=qoVx@ODE%gr^t8;z=T8{lEgnFG>EAW8BDj0^{8{b_zE0LY4BGx6U$=m5Ke ze6tDXKsOEkH!0lyiSjo<{OcXmOUuY@1~Ta*lN z8BcSUS7F#i#l+S~e2<=v?lBNf0vk|UaTTz#Kv4rL0SGd~?LZ%n<$i$&VSN1fJ5cQ3 zYzJix6BR+UdG|!cgvS|1;CKhPE4BwUEaudNfHr4*eB2R$ICyr~d<*_Yf;1+pUYY}T zcyfe?$C+mP`Sa%kHh`G91^9m*r+pZ)w+D#`#2=7djt5ASz{zI48R#lu;ThUkk)4bc zJ)m`a4Py?%7W6~g{{jX959k5FINCc*H5HD|Wm;=@TS&3cCJ?Vd z@RW{|1y@$`BVb7&ir$Td13A|YC}H$~sw_}idLogupgs?t$E9sVW2jN+XptVv8V#{^ zR3)5Z3xKX3s51%4>PU)x{TXJqKL_YrJ-^G=Z>Rx`@+Dm zfFX9V@EFTg{2M`)lcaYgbVOkU*hm-DV?#qPywAz3juuxteg#Sta$;!%fH?9 zcrh{15u|sm?CiM0fj997P@d%hj0w7OFz;&R|Asx42m2bz$^3W7BKYG1K)Cf2)*!GO z+n2#e@Q$W{$X1^1k~}c3hnYJ412Y2pQ(O>O1Abbk#dt3SR<-H(P=4Cz?3;fcxJa-3 zIndL#gBEQY2npG+PL{l*1iqGWmyPPC0-*5($|lm9lWj>LR+I!vG_`7HE+AyG$8HL- z(F+gs8ZK*tyt05B!|~oqGw>hBnvQ^4ixcpTEsmA4J50Jc1eLV@w)X?%mFC+|1XInouA@1;Pz@&%a#z2?GWUYx(9VKA?i4%4nXjMi1J7 z&I^#6)-mVKu1UH6C&baWz3`Z5h0CN$QLFF%hIm=sD{*iF;h7-NCixB2Z0aRutpJX~ z%2@%;{JGcLv#lVY5ec|Ho1@*gKmvCe1hgh6kw9leLQUNX#F;v;|K2o@zHu$40OktV zTeN=b%k}>QL?dWKFE^S2H4@OG5`!w#{kRd0K*2cxJfZJraFf2MWWC{+f=^5oq^Enu z@kOq7l?EL|WbR-l^rlIlh2BcARQ4!~eb_Niw-dbJ<(ubl1CZBJs6 zvONBa-x)*$k3(qZ&FH3Wal)8G>Eir(ZZ{|LQpdbpyZNE2cSc)#)t*p!#WQYy^jmqy z=^X8h10y3Iz*|aOOL>;7OF9ncXzkbV7RJl{1tu%YRNu;_;-L6Ale=y9|4i$#CI~{h zuYDt`GyH7Q+ghs-(kr@;IrbbPIc1oiL<0Q}y=SH#9vnM8+OMP;_fWyV#Y`>}RqZoz z-gx^Ay)Ia@P;oYMuv3{BKy6mo`NhXSNsieoI8wx`J^oR8C{l+rw1O|8<#y6&*mY{Q z_?6`+B4qB#beftH1apc-x<=tY9_oL2H`%>G7$G~@;4m@img+QaQHnB0ZX6$f-YR}^^R)MwxcrP{ zV$q&(y^{QN|LuENUieh+ga+}u( z=~TT4?q5o2-)(F@KWF*)zU~SlcFNmXq~U9Zk3K6RqbebR*luMf$KIGal%X2aCTRaX zRA$}k1gV|9H~XF-ILSi!G(pVEUEajsD5CKm3uj(`Z2RO68Z9puU{Zn3C=*_tv3xmj z9@Brat?G7yK5N;ib-7ckc~m&>QNC0qOpj2!i*x7w{f!wX(_&UujbKF%PC1l?se6;V zn@e$igmH&@_S(|%9r3*t&y@nvS8UxXos%kS>O7%=`y+(9xVTCR80RVU%En-Fr2sBM z^X27Gc<8?U6D>DGtz)W|Nk0qn^lyI<;_~7?3V5{>EaJ{fhdC8)53$D3gwF`hg0J<4Z)sn?Fo-j=k->B zfwXz_A)=1t?-y(FzBM;X6U0C*B##!IN#)0g&KCbNEvpVM{ZWa;E^(zbKnQlzquxrZgmFR+}(8mhGo+r;%duMZwAA32-6#w`uRLxlO* zVBcG?QrnO{ckEj{iLs+e0K>cC0}KN!EHNt5A8;a z7f8C4EUvSJ@;DU>-hCp^9N>ihTKLuBsF8o6qGw^ZG)BOl;0b9%VHLZzKszN_2&_cu z;{y$8jAfYnaA^AS2luPFYFf2M3zES(l_ei8?N`3i;?vsl(q|ABR6w$wygDYNVj7?! z|C0)Xqh7vw#nbbWMDWC6vjjdhzYgxs*YIV^8#mKRhB$jZ5(cAAu6)3w?B33)xExBx zi*tuf8Q$ui>BenpR)P3GaVEam)F#3zlusIO$ti1T&f)(_P!#L|ZqELU)klapi9b{T z??#Z{mcv0H>MnmEh7Y1JNC?D(XK@!0pihW%2R``2T0tOQe|~ZWKG2U3Q`KEuk#mo? zUu{!b|A}*W;Fzw9xjYb%uC{K~>#$&AESlr%3%n{+ao-oe?cBsgSQ=r6GpQMgOdL9^ zks{LNx~{=5qM=Y|cOsIX^Oh);iNyJS{EKRvulb8n$lW0#q=~6X$?_1sO0kL1XgRY= zv+Q-|$7zw=tR6CZdRM{`uYI3f`SUR}LMLrSgR6gg_yjQPn zDw(bIT#dm++^1ZS!zp`>veqX#JdQc3EPeG!eHk^QF5Wvu-@N;CmCIObKbwMCNprP7 zrnEG#KFM~QVxpdAg~4LO7c)6opp@=w!6EVKi>rM64x-NUyIK{7pjxyy?OI09=?F_nF3t+c4v@9 zYlO2z(G8Z&ea3z7XU}o2QxMH=JN|3*Y~3=y0Cf)SV?A~x4O=%u#$fA{VrRFC(edzv z+n@NCziQ-sL*|w;Eaeh1hN~^acx3f|uVs}VoOr&yvlm`JC3l9KqtMpEKR2_ZaSOF; z6CUfTn{(sLB?=UbW@pxtXBd44;s0Y<_O+GvdtCjn#!FpGNhg@|tXCEwznq z^=w9+@0sJDE{>Mlhr%iuTHaf_x!EDLHtP1|DObi@mHBfQFCDy{DbO`h75+6KO@LSk zcs_wRQHd_LK)R@pwVS$+Cs!WHDA^Xq-#l1l!R)qAJi<)EZo329 z(Z#*9FIbj#pvkb_cGWTHF2?PL{DivR{@6huP4V)HZ;f`1Qg%*8Zgo_1<}HlHP5xc> zwo#Xt)aGxpl5$i=Fk=jw2`@Ns-%fw8yd%CNG#RH&C_9AS#W>rz1`}+&d=<#XS`5o| z*>Z?sZMaw`xIej%RGri2TY(J$Gyg(fuLEsQi;9p6^5>Z%Y&4gXs^^{+Gc~1l_s+hf z&8RYW?GlR*C%c zS{U;?6>T*txh9*uAIMYtD2dYGC09bEa+JoAlmW&cg7cY=3Aw zE^|9M@vfG9auVAc^e3%Iz^Dpx9C7f*geQe~rRli73t~t&dJ|_}!KS^1Prp{*bar4+ zEZCG-ZiT*8hgLT+=@&w?w1 zXlV*JXDE7~CV0c6`;+a9sLzr`o1Y8}-%(|X>$@!WN}7ypVAj?`K5P%IPO@!^qk`y> z-+ylVP-N|*%I)#N?3scwWm%ck?i>v=tXE%4E5t3UJ|-AjL0OSd!lgvnd=2xBtRZ8CHue^HU&Y0l0-&*-}5wZA7&5=Kx`9c$b^hr!O77C+s|}OGO51;X;v>%K635 z_qM&wjXZJQ;|)ItyFF{GzRYoeJaTQ7Rp0EMwe}Pjzj-oF;(wYBCT>ZM^Dm5_vWB*SA}?r%6FrYE4DUg z8)Ep#Jh@;+#=DBoFHI)Yo~>z%2bY#knJXeJi9Qh5U1WqkpWfKexQ!AZF+u zON|-fZKmMglB_=NK3m)j(zhSW;Ns_89_XH1TT9NbKc!omjcr??*)ZD|U*?f+S4qC_ z=8%JpG#bw)jB5AW@K9^j{(>~lvV{w0aS%Tr@!I9yaIaQ_McT;YU38p#XcfVYiB6{F zF3;cT>P?7S9Zp{Ti9w1UdBO?&q7{O*L<d1rY7*Z+2Cn$7VT{v9ScJPntu8-mrvSM+Y#1Ubr%#l#ro;#>=mUiwE0neAXd_P^~wi4 zXaWZJ>MYELb3T_+V#S%-&`6lm6R&MNB``7&=bq@+g5hpE*^7fCh|i zt;66`2=2nmamEW+);d}Sf8Nyx0pG*eLCg%93OTUMd2$5sPqBY6POoi+-8N>7IREy}*ro zpm~x-rtSEY-(g)5I?h5NprR0cZkWaHdew?#wlPrrB_W=EGCD5i-q=x#@Zx9F= zNLOH-o1cfrGI9pKUM^?`tn3CJ_FT~TtEj%~@J`YPg6&Nz9K(URe4Bfdjx+dn%l+a{ zpFRzix%2~D0fN>?d3*bkf4!7>^`5dFXcF^4{|bhLgoIuk8t+0F;7PRQb#>!o-OwZQ z#a%J{rQ^kwnS?N4sg4YCM#jdbP}Mc*O%hK>L$#@W$<_qwit71#o}yo=(t)hp1mwgd zq@@R-Ft}C%GgHp_HFKw&Zx9N5ZLYB(%M^Mw&}P2l6%76cmU zKUl-B!4G?T%dbH@9Qqg<7Zsp|4=S|x#O0w$HT2uJI5;BJf(qR-sK80il<^@m^)VAA z@5XkaR=1o}xgN|gH#>U|WRIa@9^SX4sIDGagF$P6PEYRmSRCETB?Kbv9!+`Mala=M zFpwvY%C7x}Hqr|kJy_lH2QBnyg#DliH1s;b{XHSAT6mFCjIvTE)Av>*F&dTMNN z#84|sY)A;bIQGrgD^}PJkB&0Z(q00QwC53eEfW-5%8FBVvX29yN4Aw{?`8SmIm92= zlhaB(B`-0YSQ|l<3}8E`8RLUP|As-_|iWfy#PTH6CC&{oLqJOZJ}5O|>t`ewn`hL+>-GBdZkpV?yP6FMO| zK{hryB_-U2O64f5GzF`11LqpcL%BNXXedD6d;C}x<~w;5bYEbPCBrL}7pH6w;v*1p zzXgczJ%9e(Zf`)v6vXb5M~AXC7(sRfWm%7JKju%tah;4T6}YjbKow^hX438P(7-&8WqDfgQr4U>U|a#P;*@KWzOjVox)w1Ez{GJ!~0B3zhN^cf+#`+--WfD zNX=|YNYP0I(2I=jlCOvUKX|=83n(i;2H@@nT{13=XZp^^BYk zJ6G4}iOn{PF5%xyffSvRcr)(Vj&@+?X9gKBoYaS42mE_3bll1d7vTK*xU?y*-yi?t|G{1zVW>G z!|Irj5)n*Wh@h zWGGY!Q1BxVcoE_vPZd+Yf=X9dSXeRstQUU&B^O{2=uo_aqyU@me|L)x; z8b;6`0;vmMAD>siu0TpdlLOv;Y)1x^pjkCa`oYQE5eFgzd0X2e^ID8OoN%_&Fv0`C z=~BUQOhz^wt~rC!x?tJGbAQHR(Pk9E^`_w64M!{OR#M=2gqfdT16t!FL2w&uc->DN zT?l7Es?`nzb}~VfDDr{sM^p`1Kxw3qR&XfT>4pXomuQe(csEk;LQPH0WUM56duNBs zZ1_R-P8WZ05)8;aCZ^V$L{LM7Bds8;vL>O>!4q&cXjRZLmj^*ah9yrjZ8`9yc5qm> z^20bbz31H}#N3Ox3v$U-$Lp06FJI<)bX~vOodidwU_p`2`|H_o3^lfvtzHar@)%nX ziit3pEPC5V(fk%95`7(Z6p>&Lrk0iQYUGkx3i5#57vD+ zzqWr@Hr9-tR=`niXQ6xHz8!*$0lS9o+`j#^wY3%9y)@OSgmu5$>CeY%Erh`X@;1L6 z$Ox+j>Ivb@xVS&jD+0Sc&#zv-{Efj4B%#5wg)q2*vH|uF!pwGK&LQgR%kJSm39}wh zQdx@kqAAd^fZ@{C4%;cUv9!#?>hfx8va}b3Mnz?Uv;xvD21FTQ`XoWXBE(QFQoyMI zE!;k5$a47goQ`fEfWzg;aXHd% z19J`jBkp6y1%ypBB&)LB1uQO3psX?qWEGf-q$CkfPtT*%;|=VA-^Gg;mEN#|=q5Ha zv9ij?s?&=z651i%8y%nuR$XP(c@t|P;9*Qgi_(Eff+40V`xQtM6}#-4YdOt@nZO8n zg3}ab(d<7UtwWB0oxqCVN(Q$J!xk=pK?PYMQ_nA7M%O^4Y7jyhWAHbjrMXs2gB$;+Bj}q-!Y<=wx)1UVs1tMgcJ+K`5+)LD>vdm=p?S zl#Qhzmu3FnB^sCbK|i=p_Cr54@7q4_dCvKt^PHYv0@mLvA^|3<20BlocrY)&(1s^< z$4YR4fxn5%M*uny(Tqt7arayt?vlRGQhJ|GsalbTcn6}wvuRICwe&pvA|LuxD8uo1 zGE^5kDM<<#GvSYzoE=PNGN3C7&{cqJac3V~ij*iZKSZn5D({A<3OtA?bF|-uWWbDx z{b!1b;yD~cz=o}z-2%9QDPg+IL z)~86gwIHXPak4!MpotZI79CB2q`IvrW|M4lECvN66 z8Vw^g;S0h@@1x=6q}Xc4>E%~`T-#ny4uSPfV%uT59?VPyJ|f9g<6t`t9@vvc8+PLx zs&UlZsoFbr@&|sjKJ2@${(HqPq$zryiN$qYhT{C&s`!5viyo`JKgqk`FFl3x^Yet^ zgN&xX81{VeH|HxVl<<~c7Z!?gxAU!vvultJp2A)js)GY!kJ0!kkv)NCG6trwNFtGg zu3QJ5<`}9Y@Lq7?2WN-MHSmgD_d#yH=l)PO!*$E?IdqmCDVYwE+qVQ8ulY}2zS`Sc zkI*}a3(seNbd!^H4mn$+{WcFKbCQRa4(dQfNN!F?Uncv4w(Pp2`=%penejKBLKD1_ z+=g8-4t!FgauGRIJB(co%vQo21Mh88bc*PX`B4)W}={uz}B0>=Qzk@Ej~fv08^i9fyMK^+=%~%Em1FcTyt(S_$DLn#B zK-O#>QVDWUjv6lc&MMc<1Zx`dVs)gJJ(r#dDutNsip(RJ*ZT=msb>&6ASr8Yv#;*R0@SgrG^RL1PCmu?2WfUOVthx zyw75ZFuxXk8r9%4d;0scL1<){7#8(F6|t>wy_mZo{KU{{wAej+PN9B+rT@B zIu1-fI`aFVC_Llv7C1K4mmVGQJxMq7ug)I-|6>23y0^(B+f*7)b)U&uarQXp8{?cm&iNQ)4cCjz$^1Rf9oKzb*X`$*GNL!IA7Z0Ws2k#9Lh>lo1uGN^ zlkUnT_zutVZZiCF(dN0h;uZLEz4FEfg(5|X3kfPZ#;lGxx!y257dRVep$NJa)GSgT z6-4csBpOIAYg#qJ|Wi2T3}-CLsYpKrYWxBu%;-3%yP+|ZxBy^5n{Hll1D6B8sd zGBORtZH0xbPberd8V`?-eh&?m4Tg#DCh6TWgzsHa$hS?aR2!%g47P?Xb73M95`*aere%bgbO2D?^EP(YBmS(qfGl zbqgQ=Q&Q5C;H{31jw{&M%sd`KLKlhoUEeZ~*VSQi$1-$QV$^nY++<*2NRv;-*3{B! zXSj@FW@ffL+BK?gYI>0~P&YP4#Lv%v<>pOxuCCOiq{-<9Uok1E`qSfmxjbFr4<9~| zK7IPKCm*}wB%h|{G@bP8*RNNuUj0Slaq`Y;rtuL!zjow3V&bp!?a}ylOm{!sB>KHM zRcEy`FRed%c6!{Et;LhM?HdrlaTVLYthDsIa+bRCob(%(BtKt&|Iqz$7ul1OlZ&3H zTd^{fcWIUHT)uo6gA_h*cZxK@;o0$qWJRfd$6RZ8vSYY{EW9pUthn)2lug1 zYR~7)%*=y>gDWVb;lgwwVd1;nRYg1ZqXj&wFJ8RpBa^Dof7z3hi%VQnQ}f+U9Iul+ zTfl398&|G;W2` z!Vf2Zd1dI&JMfz1z3n1P*RCpWIT{%mk$m>d)9*f0!XmcJZUjw_;AlrIPeWbZ3$BBa zA`?n@&%mEQ>2PtK4mN)f3b<=F`aO6I2i~2dQzOq{H53>Z#{dVP$H~KElCj(5_aHIp z@OYz!oQ+K>Lph5E^@NH_OkP3ZTIl$&(>Al&Fl%t|N}*8?c8uYl?}8LNuDe~L20Plt zrjapRHX`oFYaE9)=f?v2m2isUo}sa^^z<6VcTnBsb|zeIM}v$v+{QO={#4_iJB`*UwG`}#7hp`4 zjSs6iKhyZTHbNQ83@S zbRL|qS8UMiv`4YEF7Nht1e4T>H(8Q*J~cg9cvLbtsA^?xeOpII$JdK<25;EwGES2H z+Ax|G-pgro@*T6=>Cqm#&}N}yPA%-)w_Cxa*=hv_8La#3V|XemD&#pFC?^N_s!gebcl2|~N&-j)JBc_SX@ zT`J|Ds_#C0xCkc|VsG{3gG_2&6q||VOydpLgQ-sjJ@B{>ovVmZa6y>*t_23|Ayc8W zD(bOtgKZD^oC}#_zJ2qwTj`&RG;awacif!BfSAyeJ1gVj=1$OS`ikB!E#)NScU3(+ z+n?~Dt-DL3*vt}uuk9$fH#Rat@Z-mi3@dYU^NeCKCMKpRv|;K@5U`w9(;v30Oa`*C*uyS+3VL1o@#51>iWxmUy*&Nadr;6xX=$&W zot-WArsJuXm}f~iz;k@~_%Xea&20FNprGKNmA%1ItH;F_6JOm=kETLZv@uXn@O0OP zi+sL(c@7b?{Y|(tjt?mEZGj0+tGd{ z;_<$WL;PJSQ+aWu#3F8lnw$IKNU_-qDXHtW+(gTLnV;a-{IH%wW0~vdamU^?8!7IK zIjen#iO$W*$zdkEb?f_eQ4tX`28NsN?(X+eOAH>U`w{a!EHLa8QC7Z(dNuX?<9%Mo zTpDQ+kxSKQM<%@ICp*I3i-bmTOjsJ_9$!EtbOlmH*laVa@`vs2)F5*Cx>Q*nzy^yh3RS6RGO^M=m#Z1Z)3bFswbY`?cqXad{dFh zz_*wfKR>_grDbJ5Ue|dqLJG9JV4h#jtmNe6L@ou+tYK@WslA`EL2$*HnA4K9^D?#b z-_@%wE-o>=PPe8N&eua*fL%W`%0~llEzTO zs9iaj;aYwAS7R>B6v8pdVPjn4@ra6!n-cVmkV3&gbJl-Bn0_?b7s>C{)7%{=#~>mpZd}EAX*s z+qgTEDgJDEgCl&auk!fsS^*6d{n;kVW6{~JES#A`9Ae%yi3-ypW(-n|VpFEFQ~jki zMchC*o&}y$D3>bIJDZ!|-~c34RU?M%nC<7#ck@b0RJPSh%wtmye`-~eA8R=}miDH} zz3>#hG5O-fi)7h&e)QS|q#E)w&=jfWa^V&86XkZ97cXC??Sa-BY7|C16BfoNFz>#z zGLX|MaDJl49A7q){^-%8gr21&tqOZ)`&Ct^^|FPKLWt;4AD=7aS!G9P(*3nw49rVu z!{qpiHL4Y7^KZ2}JNb{L2#JV7ji4BW!Bf*n-)6TMr_0hPxrge`(%?`cP|MoOEjo_t z-@)K>Lch6XcvAQnH3a>q!3n7bMvw2_zn@0<0m_r&w%hsXzVtkcc`&Q(;>&cMnrc)) z+{@l2+kD3@U2#dt;4gP+u~A&kyJ^f85)xmaeNlz#N=f+{^Fgy#T4bKjegn5o4cTCQ zxUKKBoSv!}>T5+_WVfQMuMRgPEHt~=m544ijB{$7Hlx$!_i1fuVWQ6Y)!>V-)YG4> zWn$%Q688G5)va)zE30D_B|$Pd1CnB5J{PgD!~rV>UbKR|RZ1Be8WMMP1q4J-FKrj} z^sF~sLG&J-Dk&hJPMg^7o}M{qLHWjgG)8~EzhjOkUmN(T23Iu(>5(L#EP*b(LBLMc z^ZWPj5K@MHdshCyFFvlDzb-q)iQOn9gqx`%g`2_QKX_K|uwl*|A4Y24lOm1Yht86& zkoq;K8t#~kENX=ocV#8~_s<$G^#O%hxskVZ2XH>f)iis`ATA4dy=-Ohu< zZk?lto^ew8`O=!})uG!Jy*l3*Yfj{i9`8;2GSUz!+pmwRi5J)|$&c1}2u$!Q=V<$< z#yMk)ekBxyas!{@CW_PLFCBF3(AStyT%;nIv51L@$(0+~&4z0`J8{@d`s+Vj#S7Wu z;^HcWM!fAdUg?C+{V|d1eS?5z<|{E@#xhAp+AKqbm)DE9I@GtgIP-tb`ZI-eRGPWn z$#yGasr}kR)GN3qA3s0j&9F^#()%1H+&)1cq?!11{lNti5|X)!%uL#|2o4M4>Z4`a_PGLs!?0BcIL8+f z64hH~?=UYXNQN_@ z9iSSrnhh%+nja8hE9e+y>3j+9-@E7u(2}|?Jv}|cJ{O0CzaCoVW+Q<`8uwF%FU}EE z0{YB8EQBvF^|NN5?sN)-zMf$h=*v`5@$TvFwuGMIy5o4dH;@OR!h5`0kXukt2Y}~K zv6+Ta^8S3ZMFQaO!Ad6DE_Y=oH<}Vd~jeaBVG0t7xJ5mOjMvM z%(Qb%C^pvo9X4^gq$(ZF-cV+<@YJX~iFf3)h^XicG)Fm^;Y&9jvetT>AM3P5bKns1 z*bC|Ek^#u_ao$^=8qCv+YBg!urXSi6x>$3v?aSP8fPpjFW#KyC_8^$u>m!`4c1%-S zl6deR7z^fX7XLiTM4xRnktAxCS!Y-Qazy7&3FahZ+G^&4C$}U&@Ion3XBKIA44;vfN+S@}2MO=n#4S{QdS=>2&+4V(e7LmwQmk z-gYNlegFRbpCoZSRKWWW?a>^GaGYuCMKt#qG*vV7+a#Yqzd+3E_}w+0N$=7_cGI-- z3>2@k1QQh%RVTE5m!ImzzP`RR&CJ=BHUiSC%ge_9glzhsKQH@wVkX>==^=%4EhhN= z2)Vjv>&>r1h#-9rLh3$~?#20zSYNxBd$1nWCa%oS=?iA%o6}J9Ia`C*sJ+hnI>6TP&4OT-n@CD z?S81=zC)l=?Rm5;xt_`HZ7xOkqh~1>LiU5VcSf9Ixy{1O#sCr=zy<|l(svvlTvPAA z##reYMz0Z-bnWU@Ild}=I(qu{A%FlL zjtN&xRH@rBd$HMwH>B&mrEQzbl!t2$5U@`VMd|lL!-G=xBAC`YL}+DYWfkF5971)n z=`)j|SI*Y_JXQB;2L4B-Q_VZ>v_QmaK6<}3oUsWyn4*y{oEUxB&(vQgIaS`s3>aAr zt%%j6|9Z{oUjjJeLrEW!*r- z&rb~Xp?{Q5RBmyiMj(pA;_GKT$|$K!wE~L%ERED%wy?-ZWLAM$^wE8S`zfWbdZYUeV~vcg@H1isOIZ*!q(6U zO@eDn(5Z2U-ukIwz#D0>8h`e2a>eoSmE6QF_B@hSp*Mr|P| z_NccNtJwTggd{_VMGyT9HkF+!DFU1qRYdsi}$DRn7+s@g7p$4=oVS3r&Fum z(y2XhH+1E3*qLvKRI{%(^7pc;(hdM*C_PsqWJJt@)iS2ss_7zO2^-p;BWfE6XhxJjQ`hb5*e%u1Bjm8KQ6EpPWAq?z1_N(6jl_8+% zC(R5L4@I{dYhx8Ek$(YxXQmKw+locn14Xp;_pfqFk=ckc6bx$QMF4o3L#P$D*YxNZ zOU%cDf+=OuCx<&qtuZWyUt>6}p5MNGTXAWjBQ`VX@Ngl1t~*&${>O8yWIDi(A0>bi zD;ukDkVRM%WbAC5b*qB^#z$?#<)k+n8W^Af_@oZsLs0RaLTFrE_N>_fokp?L`goN| zv1Vgywnj77A^m@5~I=5ydZW?PE{z=6p)D_aEdMP0CNXhGi2Lo7K}4%gM~&4YCyrX z0a=k$r!+J1as>fMI|>mKCnXc^3hjoAifTCnnf-adLgc&bo2!*sCuf`&PENkU&HGuM zU+mrzu(kE(Kq{VJ3jk)iD-7EVkd+}8)rTT+PV)~iNC$FsN*wuYj)7?jVFl);qr@+) zzpj7Xg$yemXR$>w#fvjglo3lOPxoUX96r#HikERvT}!s|74~LMfSjbYsa%0}yn5q? zl5;A@ZtYm9mEI7L1~hAsexZ2PTTNqQV@V2)5U1%XIdO}&+`y9|+zj#u4h~KvpGz^# z8dQI!SlK(`nN$99b zl$NOJwKaO=;HyllNa1cNMyPWFUK8E8N3Z@QE-nu3%+1BsLSRw(h?<%j=J0>2(5q3o z)Tx=()t}3U?&oKx@+Ib4T`PO&(qzeSn%Ix?d&o@c3X>34N;)9Zq3tZF%G~y=RO{>O zXxBz3cH>?#_k*d+eY`+|DgJ#>SFInB1J{?Y*L1U>mA-9Tm~LbPpt}Ba{b#hrTi2Kp zIJ$&{gpfi2%P+HnYieqwqS>VlI%3kJN}zaI1G4b_YGs0si!PfOZEdBUaKfik{a#7^ z`@m5fuGGipWf#eURAH1BJT?n5%Rt;#eMSiy#@#ii-V)&wp#T&^5a+^gc1R|`9pLx!39jromKSQ z(cVg_?b7Yaswz3C0Jb4vh*iK2wWrbk_e&zw$6Ru4|Tw$Y!!3O>5@ zim^DK=~{K_oa-~$oBya0_sTua`Qcr+I(RlFq2@8HO}~7gWI$p{N=DXg45Z%yl#tL3 zfOW_tiugZN`jVWG{}oX%0w0uEOf&|OOIj{;5SfmZ-vy{q51eP)NT^~4`i)@?aA9HG z*0Vm_G84eZOnKq(Q_bC$Q)^;JWDtX--K5tDm%L_#r=k$IXz4UZ37vyeohpy(o6GFT{M#q}0?c35P^PM7Xza zzZW<=z=Y&_@z1agasyy^#$_^E0JI+v)CLFvT?+hvA}|)hK^|~6GV%QW2M3OD2@o=M zO-+}7{rc7LFlHEAvRD>qG{_4D<*X+^3e7K0_5S z;-}WCaVG*U3grm{>UYQzA75YE%>$S&AJQmgB)QhW&BIitWJII<(+B9i$L#F=PsE-Y zSXkfyDGzj7lv`1p@_d+)3>@mz0%4=AQaqd;PT3*Uv8`TdM*a1?*Ee3>!2nY(Nkd z>_DTEsB+#5akAeSrzZ>A*jkvJB!wfVV7#^g)Ae%l^7!~Tvr+dGT--xo8d!;1xnpJE zv?vj6ASo&7j&a3x0`|6y@O%P(D=Vvy>h7=A)IEmO-4088LyML1R|oT6KsBI1A#@$W zVE$ZzrYn>)Kx?!!LJ94lZG8eDPTS7G^?ykv34fYw<>iBb_wtF3jy8oRH(0D94)TR2 zFlaEFeU?dO;fhF=j!qe-Mmis0?{7N`ovlFc%|Q@`xgGx%ho&80N(vmQhI+9nH7W@> zZEH}WaB-nXBfL`N)7S4&-+=16C%9x5P&BdtLe%u+HgL}^uGDXP9P?efs>eCUuOVqrG-V> zy=fab?Kj)AEg5*vp#+e_2$g?B_YFY&+k}L4z$OL*H!K0{mu7{%G`H>IcN*k!$w6)C zh~awt35O)CC75yq__kNHdvi1LD#P+xz&Kc0+1lPgO)oFgK+u1KpF;aGR;QUZJzz12 zXbX3VN0GwtM{B9(b?F9k`y6Hj@O*P`uK}>Ugl(Bqp8YWp6bQ?FFzJPpYuHH)WLv6G ztJWQ%i!Z#d3&IGGdIfqznq1neVFdV?##0k;U(CQKsGDNx#=l>hv zDGCM3UmkZnv@v|8z%PC>skFT(-V#?)G>U2845Na6`UMd4L0T%4K6-@l;K2j(;?a{k z2FHj*5CL$sJ+2LCx(_fbW1v98+yt&IGX+?h*3JF>PKPrXEw2-C-;s`DrG6UAg>Yyv z$xf}V`T_W)qLei$eB1SWZ|o(bY9?TCa%P;(10sTXUh_SDqyErhd3dAq zy8<1fr13&8Q8Yl=8}NKCaPGW4^lJGR;lZhDB0E?Arx&32aIkiii4O)l$jV17EO>RF za2R*DB@{s5c|=Z*MXQp15v7-TX;Bq~vl3hS~ zRBoebg^S&?HOmq%3S45W+`Isq#RXg@m%9x;J$S(4BpAn#k8m>rQPhyH-%3j6xRO;O z)&GdGan7_S#lJ<|5~?XyhX4eXpUnk~O4W)Se7*ogNlr0X_Br>PmhEb-q`FU^9H>Y5j zc%iC#A4uXaz|5!oX{EoLY)eq02<+7JGM#al&3JnvOoDBI;Q}1wAvMo3(D?Yt6Cqpf z*g}&5nZ~a~w4HqWF+s%u*>2d z$rA&!zOJq=$?R7IlOC&CJk)+|w)jtjXFQNikE(BN zm6VC)PL?1bCT0NI=GLTK-2pIx&^ZE1%gbrZyeMSj=s*Nf4sB>}mjy$L#*@zqj{t03Y7ZluU>rzL@<%C*NrgU z8O)kB?tGoL>ihaxP2S{t{$gE4pItOpTAP0S`=;GNi$wo3d^C1OvWPyIfSMS5c>VZ; zPcuw9KhzPzKBJofrd3okG+C*?SLw~Be{!W5cE)8TJ>W2pNio~vqzM)r)v%~aK5_J> z9I|F93I0a`x#X!%lMJ&A^#sgXNpRj0N5G2u_=u^iM{Uaz?Y;Id9)?gVDQ zBLA!Rmz$nYHWil#au{n9DbsAZwcZKFu#Jd5ITz{k{&HOZ8Bbz3T*qBad|`2sDx5(p z-&g}5(Gw$^U`#YU0*y2nZxS3R$$&4q6NIllV14@yrcKgLClY>FD#*idkWM6&mBV~| zLTFWFS|lZJ?GG8oQ)BqU00)*B6ZOtfCwkS~XTR&}^kEofHfX!A?+WEd`h8SF0=Z9t ztq!|`sn6RSi|b!#eOxq`kqd0gBqUeDS9Nal^?@o#{VQH3H5gHXip|GpfCRh1>pXk_ z?jVYt2bZm&F3D$EK<5p$1zP3#^XG_Z1AzZeY~(TlKBOhF+>|ksjx@z{0DPoBctGqS zNcQ+K?!9{{u4hLpjG1A4mXptHm%4=y%?%AdK~cajAp}y@8aW0 zfWG;B6_0{y1_Hnm&{l!It({#1=nfOSCGDVbFuneLkrgIjYTC`T*O~989tHk~!c-Uu z?gLR-W@!M&g=?APQ|{0X__`@))o%(T8i?&}YZ za%0v4bW@se0EGgQM=)n#2E-86BICQztUqC0yBE<0a8MIbwgpZ$y_8O`bwn^>lDKZZ zv(}&iDF6UxdkK@BAca(fCvXPeVYoh6&ddR89jGm(Rx_+)+B6Kpd5jAwMb*^C#qv5~ zB3kL>ozofD==kO_YFk>af`TgwV+ko4^cr4}>b?Shrub787ZLa&8m_e^iU(6<%)>2j z`*zEi{inY6%Fs|tOt+oM>?Ast+YX&E$A3?P=L_8p?@R{N8&J)iQd(BF7Dq`;&I;OE zp zwa?02_Ol_}(vOyz$5R@Y_Q7TY5oLFmA*XsCC}#!`&hFsus1RJ&(wgm9fy~JOk4VjV z`aDbZZH_n1xB9^0b49x3Ns&2;*L(NW-CbM#gGj?Txo*G?;voDmw+ES-bpV3Uha}E- zKXnHFkUg58n_Ioe4@tAp|ZpTE^*qbe2M8AOYSPs~tBlss%v zZ+?HcYS0?XlLJ_)8AuA?2WYKln{oR*)ilwY_aK|e>;QC{1vr!Dk^fkCEhSQR?{P=R3p(smFR3Ly(nhfgCr4xkAZbx8bq(^3~6ex1)$EsXZ9`rjay=wS!x77W#eA@{; z8b8(lBB=na{Q3jti!forP)n2xHxO(K%mdm(51>OdhlL1uc3u`4D?!8mlcBGH2ArVd zx`m|+E*YqWyK5u(i14=iZxIUM_e(a%*newbM*+7`AVeXqy*U~})Wu7eqUcHh07hy1 z2gSx_+1g<|>-)~TAFLb3Yjywj?F7@~_ixAe)$gOLjd~~u5yn{nBEZqbg?55|sDFNN zWF!%g37BJYQc5n)LKw{5XEP3AjtLG%FbAe%;l@n@_UpjufLV;Cjp4C?WEkBqATs=5 zRFq?L|Med0kbf#K8$6!{fe%*-Un^2A zvnKb(A^8deRRS1S92a68{s0vT0Fn^6A^GIKC0nE>fR_ZJfb>s*>wF4=E^u0RS`r7< zp-(@8Uk@HApU?837uqg@1t)T2&HcLLV8udKh{nYR-yJ0@Vhd19>- z)_GbeFUMTsR)}tC`6Wu?mgKts_irPlkCKsfj*Z|*d76`x)31gG;j&mmLO;+xiQu{= zJmkGK=`H5joyh;eg|K|B+R27HbdU)VhBvB1kLLJ=AjTH$ga+v zS^dwTj=TmagWd-QJk5LuzhrtaoIc&+i@I7CV|-!xBvjOlRDJ)7ZKJ{5N02_Bz$S>W zYKXzbX}LEdHkJr}Y3gV(B$NoKtW%Jaf79(vB6w14;*b4jE@;Suv!eeNW|}cpy7Dggo{eVxjR@dCt-{?RhXGz zcEC~zF^i>xfIi)iY@T=I0OaT&IC9soe?%e)yXIoVupKoKmXg~1_(E#(1H#_DjbdyKiw37sUN9bPqqHR|Ec|+N@|W^CN9?iS zt(nFdm`Q5^NBhh2A6|skqC96I184Qm1OjJemc@{}8__w2qqF|3_uyVe82@Ej#WYX2 zhm1zV2V<~MAR^er`aL^`kdSbD?dPGD3Pjk9L~bd~+^F>i>HIJbkThxB+ZTz~K6qo2 zl9GOZdo7|B2%ha5mOuvQ#LxjHlYVrK*SJ;gkAhcYNgrs6rrW)VdE0ZXnboPOshQRL zi(M}sKzb>A`|Biw_LIOZcn?dmB!KH0K7*nX_xWL`hoTw#*~yNqqqB3=tdY3}eiB%O zBX}Gb<~!p9Aghd`3=cM^(ABQcZ|0WKfKI*z2PY=6@XB#Q--+S2qv;H=a_NOxVFvt@ z1Df{WhA|z?6)f^cbZ?Mgj5_KDfqV#g9V?ScXb2qu2)ugWrkLP<5CTS7r;4Mg+pX-o zUS0Rmyp^8hUNU_jRv7UP1_nmPI(C}=J(6olWplChj=L$g6#W;4K{`SQ8^odh*N zz9{r*wJj02Y7h{I_Lu`TPVS-Myt$Zp8z;`pRAu)(C8*W(>V>ty42H(?0WS}ZG!}q$ zmr(a%TG)0D2Fi!#{4U6w_W*1)fy40w6wqmy1sj143LUs04WhI^0mr4y#V>U>oqV6* zkn})0MX9?5(l4fBTUXn z_A+^#x%QQR_A#zd#k&Ym?s>BB4_WF8JqLXN#D5|*T%Uk|Ca~%uU3e6Zpp5TTOEH7b zmeL>40*%!{n6?1H?mBoqfsr{_ObqxI82ApXA=F0Wt~>3|i)1AwC0V%6%*QK@@@2qm z!0vQ;1)e7Fb=@WMKWN$<7)6j&g&U}Yg4vZSO9JydW^H1oEA*Tfpz@-4Gfw=y+JU=@ z)_h0j;{#^&j#=et7(u0+D@$y37#0UD9UMwZt1-4GM6c;e0t@(3@iNyWj2Xi&})-yPW?~^#FWNXTqjXK)D>wSG@XlA$h^{KHqqy^_&FI zzi`G%L`uuH+)i_$DsRAWlHmm8+7mLe=LjDRv@j%RJ(M2g4?sf(Fe}p809egvYQqpK zv!0s;uPg$^lsImBZ=1phT)S2PNN;H{FA?Eth(|cCbNpKv3qDLpOiXs!U!PuFOjA#R zsSt6P^wqf=8)rzxaCXfGx`Kxv;yg4hjf(sq^-l{J-G8fpK0caN&Pvd!8^*`ATQEJr z526YMDw$>m=ImtPp($!ID=I4H86N%|;-Bz1uWGSJy!UXkEfA3A#V(gn2uqwfE=lY^ouBP%Xa;3v!)s@8vC%0HZpd&l{sVWIy2I!k~u@Gg>`#7uFh+ARl5`kWLr7ldnxrPj3RbmPy=^ ztEB(eJ|hnq3czl+2q+|Pmrxp5-sBZ{5X4i4c&-Z}VhVi~p4_j0ATBK}48w_J#eMi8 z#d>H8paoL4Z}=Bs{aZe)uK}!+=zqarWY~raUf{p~8mSIgdgil@!raWAj=^%#g;^J0mGXf0w1_cRU z@;_fKyx9Y+uF-EBnI)=SWgIAn;LO!xGoSkX5z(Un1PjLngxQiurm%*kV&PDck2Irt;PfFOqHo*04e1KKV(V9(`X zE?kGM<6l?QtxpDD%v8OhoG(i70eoa^L6W10`K(PRfpJG@FK8~v_&fzx9jkvGbPxj` zvJNTu<9#W76GXWuPoAVTHZ?ZV^!S^Nmg0hLRtsS63v^81o&Uqf!@gUul%aSPKp87+ zS!6!+0Fe=vtfrxws5Bx5Qz+zv`TEzuC$W{|aVlA+l*UFvzw{qREG9R|F9C8GBaBbh zV8Ot}1#bKsx7~6x_z6Q;RBq|j|0`>zgc21fA)zuLe6E3ACaMSEL85NMmj+eH$tD~x zPBQ0J7zr?dX~YB(*b7vHf~9bJ4R08cL!Y(y_z;s+#!3hU0LRlf2}Z9p*sx$WM~6^@ z>rlkro;^Q5A42mBtW`atqDs3X8C3$;JzD8hQ0OZtB+Ci4?F}Aq;V>nmKt_Wh_y@ot zSn_>|DnvDKQ;- z5ARSnFo0iOU5y}XBoo2bdjo78!a(65mkaEHE?i|AxV=FI!T>N1N)B#hWF*QH2GZYP zNo+|4(Qk8W>m4Xtpzz#)Duf7DYU{8?=?T*>QV~#|P!WE?FVZTv6$GnRsH>}+8!jQ? z&m@+Rc367=zQO6Lxgc4-9dx>8iuO1@0&pc}wj4mjPQsIeEByih5Ts2X93SibT^&M) z79)lgz*%r^wTAI-DSp6IGrFH_iK1#NopzAVPEGV)gg4JcXJuG`p?+uOgdF;0U0zaFaBQ!t(DpCBqASgP^hJ{A3uWzx7qR@1>- zkmCqF&wn_Jr+<{IEfamXTX=myN3Ua?wBCnV~yvj@!DBv^!Q z;X+RT>gy}2bpl1M3w$ppz~|h;bp`TTHTM+;a_)W)*|51|vp-143dv$?e|}6BUHIzP zdwH`LVCKoW&I9|RQ44UF%HAIE!@z9b0UfIWgf6+>hQ|rap5Ve7ssy3u0Xzj`-dr*` zs$k6x^|IR4sX#0EKC4mpMQ9jUC9eaV#G&_z zB`XdnjIuP99Ad!xpI}Zu`8#6435)@5*jFDk89&s$kWau8BCNonJ4j=IFVtcufVM=E z;|JtEh|ZTl=u*4W@FaoR&ulvGrD^;#MNZ)28o{5eI0L;BO7wN#9d5@>Qg+ipBqeOu zhVKHULYJX?o9~`u2Q|@kcp2|^AD^_O%@_r4M;=(y^J%`s`b zlS2FazyE8lJ4zxj{tJQ|4k}$2(2NN1&U9!+#gQO*w>Zs@?rUK_ zuVDQUG0Y=-8L%{m5Be-(e3yfvoeX)gB)SlGWDu$aJchr4%aAOR5-y_0sJ`$K+T=}W zlS0@=VBwiwTB3%o2CZyhB^k!)?i!DC-4=KQdL#4E(nsL-351MB!Y&DdFj+e#VK|J8 z?7w#Z{|j`e-VKF7+`u5k#|L^4TPJCDQY$=${D;eT;2%XGjI)st{XuLB638>yc>xDg z=EDit8-n~f0UW~#w}2Er1T#kPyK#e=7R(e(`lFzwvm$6ueP?@f^BFuac9FTT8buZY zlF2S$!z#^xV#k32mB?|}>_V1DdQxRCqkt$wxM>jiExpQ^3jFHfscbn3swD|@ z3UZ;*aL8!y=X|lwkjtp2WeG|Ul&ELmxLrs}@Rk@plgZ#vUQ>QIVA76TPsFk*<#(O=P_;mGJm9bx=S6lba;pA5 zJUKnxYGtfZjR9C47LrcYpOpr8J_k_d#C|sD-!R@J^LsbL^GL8y zPcS8ex5P<*6pTK%Af>@&Qwxjb=SKrIAsQdm|J&bRPCkur)QAHH4&WjRq=9J=o$8T> zqVWMr*e_rTx4J}0egPwaY=RJS*j5i7mwh!%NTMk zWRNw90v&h?K8TR3D{oLx&?ZbguVL{XF~)r&arc4wD%>%$kOB5DeA51G$gm-z0vN@B zNx{Uy3HT>xHRu)OLNro)ww9pG(co%nU~P@1Cx35#&*@zG6pBPb&~MUg+gt}&CH-Ho z5C6}q%m0U7{q2PjzGoUIUo%>$d+h^nDp$CJpnfL}xn@H5{&D}_!Rr>nH={K;sKvvh zr`L&g+~bTC)}N5gxR*DyZtmfDcC5D?l59B+oDT2@2j$12mEfMQf`J9l)&!-^u zkICc}PR`9<@qo+gpLd0PE1Yh$R!4Y8NCt|@N@Aga8%lI;C#@VTyX<_!u^>cJbz6IR z97ntaZ*ylK(3rEEOtn#s_EWse`=%<@1TxME1NfzW@ebaJy2)tam%~kUJ)QgkQyZ=y zoO&oPP&r0FAjCN)sXpCS7%hExgQUjT(w64ahryNR4tEs33WsZv!R3sD1AK=rGql%F zDOY|wUYU>QA0Oysqh6ieufAhd{O33=Y$8Mbl^NZME%VKdiI1}L9y%1~7)ec?!8N%*`hLaen{;jXmxNgHyDR0r+57wavSr>t&aBJFN%3v@w>m#hPwy9>-uSySd+EXJ1m1>Ie3s_k>){jQS7VePTX!@|_|?~0bcKW~tL zz1&U?|JYbQbVX@`%xNRJYJTP20gJ>QBiRbQoregHva1Mx`8X|`dA!WkX_ttZyVJ}l z^Ejl8R$D#m%mAa~+~)ePy@ykWGFtReCGauGYm{DPaWDQ!#=os=@#@2MzH;~Zq_GO$=mA}+;&=TMA}bp~K`|c) z1{faC$&jrQ5we9dZYdL@Cars&f;Dm&vds?$NO6YqM=F<1N!m+$=8p=-y&te?Vl93ByQ-O91GvR*5PU2bu|fSK8? z$4?rY0wW`TixZXVH9{@3SH|x1$4MB;GP>(* zKlWX4Yt4Icj2bMqqSqoZ67knqW_BHAO&r(vb$`{tfyaf1_YqA0_k2Ho8nH`g%G}7c zt20h<;}7cXjk$cyJXn zHX&zB#fC?OKv>(t2zC7ZR-XMu(P+vFl;x`p8Hxb6@U$LW$B@5ImTfuLlX)W!#&T8< z4HW_xQgU~uS6%rX*GJ0()8pNqEe2u&=EitsHK`mE@8Q`sj={(C=Z6N#dg(ESrl!sN zR~0gh_x0DRQu@!TKLGfcQgpm;zMkAHCYxxmcC<_M)KA^+VXo1bL`8Py_wBnx+uPr~R=-W3=I!$?3$&vqA%IG>qiiRab*IBk9rCzk*#?Ha~N3(bW+3loEVEAQ3{ zk*3)tdAnInj8V^eBFy5h7hw?t^cpTmIyd=Gz;MB_AcvRABQhyvTow~pB!XN(4m($uL zrj6SKL@mu%3y>2*eud+>)IE0r|CDx(?K4B*u|(pyTlRYzcb3k_pHM$K%OAP)EizD0 z*Of5dwaRlN%zS!8hy7)lvvh*YCzh!?2hLoF1tq>X&#~iytPPZTby2k(!(%=o&&wok zUsCo9S;H2_A4!PIys58^1D6cbPI%3M!PG;FPHpehaE>9hNa48XgbvB<7svKYtN!>` z_^dtQIG?%<8Ql9hB-uGIo_Bno_n`T(Lj2R;HQnCH@TDU$777nmzg)dfJE27jQNyJM zSb7sKu?kbK;VxnhGwrQAF|)V|E%0B!uD9*M)rtTfPWxC_*3}#Hol(yvtjXe~qB|=E z?ElPm+!I;M2ur=zJ+9~aql%{(#f3xuK{3O4--_Yp*BDw9?5MndPIF;lgkE0$&a}{W zY0;S(?}3=hx<@I!S-ktWDzWncO!&XO+GVg zPkUMR&|M#WflGl>lZtNlDNpf9!}omw{iB4Ui=jD=YGz(BR=iryRU+_e3`@p2!7*=# z`(`60CedD^v*@7;4`Hrc2g=V|R^SZ_j19$lHn+^SbTH~0@^_bEca+mw+d!5;w!iEs z-nkejnXf8Wl@5YFzaq;&nmyGfKxIezbzn?LZ8uhdQ<({DUK8s1k<%_mU5H>gJ+Y<0 zDK!5S9L$o{F-9*bDXl++gM}&ox@l~D<;kP7>(TvLtix&r_HM93Qnv7}Uqov~g`TC~ zW_P&LZg*5mOh@3{gx~Gc;{_U(^}@$_U4c*P3$HEgf-*jgb~-4-4Jie9FH-%+Y+6*V1XgJ-hxx>4lNfFhV|+_4S33$dFqOY6Asg zRxf?Rc8ReL~6N_|B4!8tTWMo`UnM6^{#>ikLQ)7vHBW!A|p{Z_RA|AIlF-!3bu z;q{n+fC>GgzPC1GBG-={X|}BLejd-Lz+1PZ2RC7;9@KHze=IE>d~3>1fJ)w8)f=zX z>nwcY6i`t$AYN9x?dW{?Eht6|>N>ENz$QML9_2@k+S(A+p6SK#G(J@^F!1hTbD44& z2!dinaBd)?!FW_Vq%8x>S$; zNr4fc-9z?YYojDCHO%@>KVNVV8y~YKUaD#9zmfSF>Y9Z0?Ktgm`+;bJd4`kge+6u( zn(d~im(e?nH{NWE)^SD$wbggMNK;D15a^7(S=(O1{(TRx^Uk36zRQaVa%E_$Wkne^nh z2Ok_A&e(pYywKigP&B=u6ZS)|`qk0zBHsP!XO*2})FZ`4T0d5XU9>CRIy>3ISWZQL z>lfLfDK~63C$zA_D$2?T#vuIo~H=O7k$(pfR5196d%^W!t@cVrA zBhIafTxYC;6j$tL@MA>fd&v`%fhf*+f)Mv~8@&xDD?7WH6m>hliT$;3+N}+?qGALT5y?sr z$s$TlDuRHLb5szJEIBtQA|Od}4oVhia)w6984-}2bIvrmXZ3#HQ#IerIa5Au!=%?O9RCX~nx4KP*7vz;Uy!MF!;z1?{$?s|CbWcHEi5-ik{n^v$5RnL}feW zEuF0eM^%D@sp*@1MkWFDe-soi2~~}MbBpECf7nLa(SotwbE_=fKIxx^Iq@{j@zchw zS`?Ew`GaQu6r4n{eXZHK!Um#UdsQb2Mi**E zya>mZ+IWa1h^=UEPJBU~#1z|%eSgo*a1f&3PInZ@p~JVLyI5H zeR}z`G-`MIFZngph6J3S=dI|bJa%BD8%O$bampVw5`}Nw@2E3ROp~b_K3MTA4IrBz zm3I2=@Y7|))fDe@)mHYVI6_sGhkAWKj&sfAu%44OX8YRUAfIOmo+rzLH-B&Fx3@zu zh~{!rK>r$p!1Sl2=Zew~XJXwziZ_BSM)_(uqe@@P{SDhe`~aRY??}n4-yEcGFOsuz zq;_MC9gjvEZ>Rl9(1BPfTsJV%l3qs_Yt=~-MRc8%j(qw16nwF|iX+c-9hfMyN zQu16|kp+1W47uH1c5ZS@8j+A2)0sMj+-~?+r*WZ$e{D~Tk>eWqFE_$sgAt!I$K}WK zert>~$C`&`hfkRkuFULFPgikgp9aW#+MsIWiEG*%%)T7*jBFR*ZG7mG+g$|#1Xjb= z*ajc61DR3XZ>G8Z98P8y^g(0lcn!X$vUk_`Q;8gQ<6lYMgHWdloq)j2pr z-+JzxPN6Y??*I7mL#k}4tIvIiEda!*45fe=97u&{^*y){r7LBvaMmiH6LML3cHWuq zmS^rSjSSf6KnzT;t%Gcp?taP*>Qo^P)A1YAU08}9!l*u73`_jMejnTk@MHg+3ua>+j>ce ztQ}W4bdNA0LoTROty8XP@vA@k`T}xEv(Ym(ClmoswOZtSDrK1JeVfC-1o_Q&2+M{# zb9-^jA4jb3Y9Mm$UHp^1_qxAn>OvYjL1J#&Us6N1Wy0g?*7jgEUF6EON`?l*Le8Xl zMchsh(slE;@3Q4symw-BzdrnGfG_d&V85Xv3kC?qmok-#MLndYd>HTXr!SWnZ%3$B zx=nVhX6g|2IdQ&oVxmUC_(aTT$iBdx@_TdNcc&>av6=4{ruG~L ztr7a`fo!h4GbBroO}>PN62sc4Zy#~Qy^{GpZ~Ck()goDMP-mHuU$I2%!L*30H^X+# zba#5iE$QlpH`oOCsK>L!&N~$C#PKd+wl-o2yL6q>-gsu(hP!-BA9h(HH`h@)^@+X= zKrl$7D`N3O*?W$ShEwN)Zk$30G2eCPoiAfL3L~|3fiPeA^u3o9!)O?m-Yz}js#n=^ z7(@UcEtbnx4A1o8j>W`YzPKv`Kk7e0(Ei`QeAECVF=hK)oND3c zs>&^z*YuLI>Bw184HIUYG}*VO*-UQ@40Uqm&JuxF#3)dQv60#;m(tNH+=fRPe8XmI z|2jI6n;PD+&n>k5Wd;$vd>QTSkHD8}t@8}*s`d#D-R^t$;|*r-)y~@f9bH$!l^+%o zVk!4=_dpBgo)|>gzUnY8J8SZIMTg_w(oKW};fY^gO#FH!+_ddFh8y-5sWuNgcTBTS zC^R!~RsPVJ2pvGW36_C$-PKa|k94 z<U=d;!4VX(kd7O^(fqc<+S4G)iRDe20{u2!UIBsWnU$x8h8M2I zjx8_lDNgD^c9Yo069{U8`R|elp8q{a=;MVYzY# z4+ATFv}D1=W?}@WkRL5;jz2|?yV8hY5e0=SGh}ztHTW$zc{96SKHuT zXTfQ+y;rpy{7w_~Xigg;{^~feVD{s}wk->!u)gl1cVvZz@jZUm9W9P;Gd=v%16%9a z=YZJHk)<5lMz1Ej#*t}HLMwgz0yv+JuGX^b^&sINPv`=?CZ23KyB1egZoTXAQFCmPB&H054ht=yZlb-c|fpMGXz zlSMx}@#xNTFnYw)wBBH)4GRML6(g?82jxr0cxMmB=eaJM%PtMx45U6L^?)puX?5|u zDD)tb+o9NDuR!G{is+}eKSt8*oEkwoO$^E89>@P!zB%n=8u{_^(^@D0j_18zZm35q z%Lz-V<2akck`RW8s0g^dx2c5IF8CmPGM?<(z})C?#eM&R2V_8v1wO>z1d$GG)HRj2 zg41QrevOZR1)Bq$8f0OJef%(%JT|Py&!@vTNGZ&-b(yb3R>fmW?*UQ)H7M}ZDenrGne;44ZxPs|XWodY~o!P&NrEysb-TEO~YdR<} zgH7*o-X&-zql>^WS`I*HW>_A%o#z+5)p7)JQ1!zsq@d!e$qjnHI!39mf}xv+Z&Qes z(0U(e{2D^mQLoKxl|EGXDWsY4(H*DGUy3r$oL`U9ULnwZ11=JIYCy(6cO{KOtIdXk zpnkZC(8E0TFW-px_43nqFXMc)xT5FsR?hblKT4c2SA%(I<14}0!Fv>gS&%5 zX*bpRi1|ReEGuatE$z{NS0Z3Tz5#*s-27YLE!8hxMTs^r^H_mLhqyLa>LO6Q{Fq&? zbISJABIfb1iR<3|RY~Z2@L6x@Ldy)d;^3dfa3w~sxmsSe*B}%x-h?ZY<)rvGh;G01 zws6aYW(rh_{)M5ZSWPioMj0{Gw=I$^xkCHuvmz*zg?MyK@$#(8#Yw%njws;xv3VgB ztH(MFA3g3aM9s)(RI$5CI5QILa(EEw|1jBmN54xX78;Ntbof|L(_J`~f&!;9znXD;bt%{017p;NhWIx0?@3s0_e)QRJnxcdiS?CD_) zeA69g31B8CT5jmJ5*xDp>S>E5sX1=WW=bR?r3feuqLK97RLWJ4h3H{r>Uj@wT)pRj zrsS!0H2JHSPeiHUi%Vgl4--&w3=SgM8{GtvXvWXVqK3@4Y3XD_B4R#5&vx^(Z(Dd=n5dT7 zRWO3ED+Dc=&zFL+m%YkDzWwv5kRzHtzl(Z{vu*hA5+tMWBkC(InfhPrrL>juO>**9 zK!;u;AV>o;Bh_kZmsS#$d&0sA0L(kP?C9ilorp+|*4*0G1lUCL`Hsz`nph`V*Li-7W@Rf=@8kUMx1G zq}6oer(S;E+vzvne{q+jgo?5Yyep4FSscnCeO+@gDFS*KK=DQxF+vj4)3s%*6J-ldQ#Mpc$EPZ9C6c; z=ngOMz&;wV2ryU;as}cDIiNy>A%I$7kb%(~0zky&Y3~kH3b`z|0{Q+cGc#5|(h;m{ zT9veP+xr2oBw+Q+Q!Rk^BY>mqAi~Ab5%D!D>Y^y1zZOR;d4R@X7FM2BEf3-D?hZh{ z2|1y?u)mn z1OZeE`hx(O*ay(jB9OboNHT7^brSa^EVY5PMh}k38!>QuFn8_+j1~DXWo0^cPvW2T zYliRq(4Z9uz>TqV!Vv)jI;im>oWR3S#7n@+I|0H2LYh?>SQg)(v?^c}ae|SIeZZZn zm%YCW%UqdeUNK^?`=zju3!Z1)H#?|I*uCe=b?C}V;NkSal%ZdP!bA(8EiXPq6U85r z0N?HH?dg(X3w;=sJczJ_IR#Z!)wODjj{YFb$>Ov!V8osF!Go_bAVHz+wf9$Fmd|CG zT-ep|!^tH=Li{A)#OSYj6-bG*>R^@xMhjS|~DFJWuKXxlXadfN9Z#+es5;C42x>hVyH7T}D4 z(f|6*o1bcGu*$hj3D(cUC11P%LdnY>z|jR*XO$^)>$fgmP=k;YGt$!be}Z*&URAkt zzl4Yp%LYXit#uAm+WsumxVPaK68_ion*aTc{$CD*d2-0(?NcPHkXRpwN#Fa6R4kEAddWs_?e6u?~0QZE;SvUzCQWsvv+88xL0l@>1^A1 z1y0_56K+h!gQLhqNnw`=Mol5xhW_{R^AlaK+zXxhWe#h8=xZ?Od=D{4ibHi{{3|E|XOWomi**6@~EZpyIspNEA7jzw@*e_%tRd(}NrfP%YX z#dILphUmua`j5V$2bhh!Ys-JVG6n{247vwnAA0cyV-bE0AJe_@cTM~B=Awe$+t{6- zz+7_&=t-igd8KKo#kVnib4Rycd{uJ_RU3g@toD&7CSzI!1%<}_TThloT?_L^dg?rR zT=p6VGhbuIi}{5cIua^F_Q*Mn1u0GkWv2P<7B=3;N=FpVliTl5_GZe58V#4wJvyeZ z9&<|{*pr-b{zk;OMKe9U_&ogU<;L|`hgH@hR}*LQ;k~uHLUeTFTNwjt1XP5N8~wGL zp&H*04flUwyCGyq%`mHb4&^WbZ;;y>g z(vyxDaC$8=_;pRvp|!m*7OOg_!XmALZPBC&x_hvqj)>{aY?CFvw>>(Q=wv#g z2Go;ctj&js`_x-#$ z#?Vh-E$>L}*)P+9Zkw;md(OK|vuiRM&ip;dxTfk?77iIywEbM8zQhMXl3mRcj*g!; zkJ$QtY%jQB3LUpp;W^)cXR_&YQFveP2H2E0*XE}9U_;hv(y*o{uk+M7SVO6u@mQxV zEVbV7m{8GLU%Wn}?AiD3J%&Zt8t;JJn7@`kIdokcBrN9y=^vP%3Lc(Vp1Up|%o=-m zO>>Teo=qrTa@@UXp3CU=@~W`oSC>k`y4C=SvT7Z-z+4UKm9!lH1q^xm_wQfK1;A)0 zH%VOz=YK!3$W=|u>s$62u8QZx8!tL46CN(nMj!I;x(6^5j-5v4^O`T8JRY^&IsAPQ26`~D! zc2{Obq~4_Xp-C$#_^>lXH;H}{=bYw>mb*y=<$;;BQ=VMMkHo&Q)ppzOyP5oQzKObS zuqAqaNa)gxtpoCO^(ulnlCTAHGcC82XV-M}X+W!T9-MidE=ePfU0vT<9Z~gWD}-C0 zo{DxpA}&7+qBbtF15e2`z3d03xjbzS$wfm+JRv&jt>AgSJQqS&!GC}XaH{EMra5ZI z^Xw4)DYWMRyVAgTZ>z70?~(C%po1`#5nvUvM*}J6uV^n-J?SjVbI^75IxMz0lVqEz zFk+)gd?(${ZaUB%;o~cy@6VZ~CH!f4skZ^{9RkJM-s0B{mIPGe(u3vhB8W2vtpg`v zwr~3L=;rU_etE*D7$he4{06Z@Bg)=q;<1R2qH!?Z`SENDcq)LMWJ3n*$t*h9+ZH{)>dZ+$UEuBq5fdGM>uXOlUK=Or!;u#+osS_$$JtB-8y)3u zUOE@H$x$E#J_{ENJX&X;Ic{`TIxeiu?K`^2=Nht+_h;&34jpkW zbRFUI(lY;Ou8?UGqevw5rfSNP@7za?h?J-g4uabxB1iri&^Z8jcP}xe-21^v(_oAVsi9B@_nhqB{vebnwV71(k6aFdEnjJ+FF0cJQI*f#UB@}?%4nkN z7o!VRom+OMzFz_u?($vI<*=+=Vnt0u7w=t9CH^pG?fmN{toY{p?K%ILt@FCa8*b8(+}pys~h>fz+kQHtbXa`zb+hX z?qqjvz2SnIY!kv)ADqwqP&>qGohzaoa=r>$-G5`*M~2P(kxAv#j#Vml4i(jxp8V1o;-r zx4`HJ{j+D;J$N7?CnjYf>p2~2mkMiw(v@@Yvve)Nd@ zFcayl`DAwMZtoA3YaX9c=ugM;r@zmlYy}{GJ<8S|-gld3DA5nfak1C6by~ZPYApTB zSwXTB9ZwI!Wq4_A0WTDt;}W@UHFM`(&Z_ph9) zn)4ql^T0h(Ub>=>?M`OZuKb+6vZ6QGNzs+K4yp`pEVS{Oitq@G*Q-x}^iawdme^lNy!)LH$UG|bcjGLfpIgY@%j7Gaya zvz-^N9T?ZnoLxRHFk!Itr#2Qef0wU@dzPLqHScVzXJhg=7(dHW;&M3yS2thj7fHw* z&3)UAuV-cL(c6o>_u6BO{rP@?C-2xMomigjP~Dz;aG1pu*V?13(K()o)UM>rkl@fC zq@mz>;95IxhIPo@lo*B8z*Zhn∓~RY@aZ9pTS5PE&mA8=EFqX8a2ai3vx0;&e~7 z&d>OVFKwx5-Xo;2>YhIRMH;G>H^oEniMp;u@9zCO9`!SC6%-VWHEPb(={SYoDxFXK zU6N-%Y!gStXQ|tT4K5X?*0*i@3mNTE>}X59u#E?g_K>0i0P3Ih~R{|wQ{U1)QE_M51blpzA zl$IK{84m5NJy91CIX&4eeTrvk1&c8t3fEd~vb|hD!Op#<{-Z9eT?Nqfi+> zI;r62?v$GmPht{>GxZtlnuUys|M}l!qZAb=AKHq%2@$bf- zpBqX#bf^;U(LeBs6t8NEv_U3WrW<|9S(6?tvca!oM0PHm@pQ}?-d1&Up*2id>s=13 zP<)Qk-SqW6E}G)uJ}!)3;L3k%U^KnHERj4^`sehUcZSBdDdj)sQ##j!VJKJw`2}O@Yk!dey`^2 zn+oBs0a=zjL(19Ikxuxef*vfmnMsnv}7Q`8F44#|^`-Fa(qXiA`%sQ%21boShi3Pe@@SyX z3mqJ8VdeAyqdRRg#@?=J+WSD5L;WOu)9JXBE1)ZA3@eJR5JqmBlmA5*|6Yw3bi3>k zkG~gc-qDGP4@xJc*`x8P$z6ZmAK>qM7fS3!GBPg*Yw?LCMX^syB6g zv&Zg+AMskr5;4^L=S0N~@0pgEo&DL-7q0n3wM(^MsPr+DwaW(sJj6hO3n^QLy`fx? zP7%8FJmfow9hZ`cwx0Bk#3pY=^o)}2P54JhF`SFme=dBmoSJey?Ho;bhVSGuB9VRQ zLdV|OS;kxWH6i-f$*b7z$;rPjPfrExsdy1H{%u)XKdT?1iwUkUBH#3GPH&}NP2^2T zW|Wzj)cMl8^T;AgF;W(va1tuX4{>rwf1C7Q2)o?!xM#Pt)$^&vwRGQTjGQL|s>BuD zl8?|^ICR?(h9YZ&eN}QG^P*HFb3?>|pT9s9t+hVx>{U-Swf4aK7L?Z%iPb{V6p3|o zvUo(`XA6yu5fJAL4l3+$EgESeO>miXGUERc@XP0Y~4P?*ICOL z_jpcR^AmD>tDc%UZ-yFNWV^xQ(D;S&B>Ti+0`W;c})Ia1Z9xVgeS*6&aJi(|(8q7MPfmG0em19>e!Y-!w?tOiDhIH<_v~S@lEo` zz6xSI#H06XOar;-bGR>ft91McBv4HA>x4g7bdlUk3nI?+nTvd9Z2pfWB(xhsaw`Y= zhhw1z{3brj+*m+Z6Qk$4c08aDyK7sklJP?v`%qU+yj8c`ki*W!tkbdP_HG)h_Xjje zmok6OjaK>u1krJ^v|ThW9aH+Jfz{Mj_*;NAC*3=DYYabK$-YpF@B4gJ-&~(aKzg z-4#xLu7nTOa#V!lH?Jjj#1Z`LCT6@C)b8}<(a&6ed6aEtT&0nBp!ZoKx4EkjV=l~m zD!ga6OlIJT*P8#fwU>4{EG(q9^W+EtY4lK8aumh;Gf)k=cH7~#hP~-)UtbugxE9_T zIX}!vBhSRk_#i>hE#@#tq;|u1nh$~>)P*k(tUo+2kq|?1fP1l4ew3*hR4pCBWwRqu z)t5y$IwbU~$r5euy1u@Q?-A60fcjIVzsN6gShneOQj$YY&p=Y%k#>!|;Puqoz#OfP zveNO%wAS!|b>YPD?Tz}ysBIuUtqYv)%MjKHSh5kMrS!;NF@yT+;x!T94nw>o*K%vE z`|JB?XU&ZUj}cF0=2F2T{9>+2!#%bl2kByD!s1g5W8zfwncPCxQH}3<`jRg?Y0hOqSo)KT zW|vEh%`!!E8s1`!%*PzWw^{Qgwru<1DOd6eY!CPMIGOk2A6Fd8g2CdZI;7nhAkxcQ zUM-ul|Kj7c0J@G^B;&`A62q?CTO5TQvRU4z?SRMkgu}t26pEiIV&Z^@<)zK)p&$r*$+Q9nX*VI$!Pn>|8?bFejUkC-YsB%g4AZD|hLOPszH)px4LN3-BAA z=F7+N1yxP6dJYHd4JO5q{;_TgA4FG>{|6R;s_WOR`$kRwSW5K@aSeP29v<)=FT9fOARsJq97K456Y#I}0-teQt>5&#jZeK3YxGD!0842%mXOe! zYj*|FV$>B96>?QnP3)8WTtee>*>54s^Wp9f^rp@sn9rT(%yW@N-`+#Y2%xq;HPUX4 z|C3L2R2kHe6HlL(xiZyQ?q4xtG`e@yjnG|0Bw1@cF#esbDHY;gXTozJTYS#q&VzQ( zGD@T^eQda->MDelfHtGQf&2QvuVxO$>6MvwA7t(sK8KmHB|9{l-Se;zYE)=f7TREi zRZgnA_brsLPa5NkI`PI||N1h{d*fE)X|jZRh5a??Uo_r+?2+Sw$%7W2J=K8ax!+HO zoXN+#fSJ}~u!i-5_1aAxGlI(6cJ+#S$01UHb!nT-n%dC9C7npOnP~)8?q#z}k2t@~h~HM(M`l#NCm;3{FH%wnhs@vIMzo zrv~dSTs)Z=XgFm#wyRzd`|%uK!(9S~guz?g3I*_&F*xEaWMKUudXh=;SM)%g4WjM29~& zbEV|8vI5|vB2$?lG}%ZiWZ;*e+rXsD?&0we2M+lfR^QUxQ&w3n&v`#e0Z!A=vd~kR zS?qx(zfRF|KLjXpYMHIU!gJwl(ys>#?AQCfU^ntn5qm;C0-m!A2M`HKB2s<$uiN|g zA?H7E;_KHr??N-dn>^~bn`t>c#fdU$A z22>q6fFFnp^q&zRLqJSJqnlI}8A%EU`l>mv8kC{P6tgh9729E08FCo{8gSki05y*w zh<;{km4|>j7xG}16iBBOS9S+9Er3-C^mGEgekHO%9~gp8U<(kxzL1hSi__@@Vch~z zfdrQ|KEw7X`4w|!)Wf|3HP)21k>%g~a9|$^9R(`X1DR%nvMC}S;2Vd(ZOqqi0#r?- zVIk0$C<6J@FQCiSh0juC=jM(8J={M)u?DCUi)P8!mH%FvbEx+(wSZ#;pMWw6m|zYfc;5X+Wc9TInIuku7N>h-{S>D`1yBZ@un_|I zLi|DUjYM4**icu8bm0FuA!lHEdeB%id->{B*1v9rrLW-i{fLKvF)6A%0cvf>M;ZDK zP5}96o1IfJd$!VWM%A`Ah?4KD+{6m9@jbyb7XuepCR_Ce*SRvS> z5m4Cyt~ej4?|-P|v;s=2e7jS?ulV1KP2W%A#p~B_R_^tKlSJVzr8RNg%WI&Zf&=22BI^1c>ml5H==|pO6XE$5iuS3Vc-~}qU zI-%Tr8o2F)yX`VC2)%r@%YuAl*RQ{EP3#A8PUFD>27qkM0G8^XD*@5T)buoH=cu6{ z0+SsqMDW+I?^{loR8f=&5U*<(N}FQFQPG4fe|Z`Q>|Ld!_7pgIu~Jt+X2Cd(HSjKx zx53`Raj~fty}J&aUbgFFqYKPMIGmC?>n%{U(idb6W`TPLBYnj)dhV;`X_?mK;M@UIa>jT5>&dOlV0xb|<@rVGSGZ6UvYHRZYKp9S= z0i?qh00kD|0#y0HwvUs=ZFI&FAocZy0}zS2xtt{`I@;LPvRETp(CHz_8USqydf-1k zFX{GJ{7}BW1jwAe1h%SoAcqZnPwBw%2wcAe9>zUsoS=t7?Kp7;?Df*+%e1Vl{y=aA zYCA6hy#`-fCm084^8mC_J}4CFxS!bF;?Q{sGe>YWJ-B!A(zmZ)-vPd{bf6*vor!$l zaKo7xJQf`1tc&Je1PkgR4mBiqHFvZ%JS5~Ppqk(|f#^+l7Y9cx*5I>Wxvi2F4rFzt zj6O|?oo>@oDbai{-UCZG2KhIvQ)@Ho zp9obB$p&tn|Ermp|NPwr>~Q6F8FO1z(DZm6K`ZT@I~U8IL`Ot$v+EDOPRr2<$av)! z6q=^;_tE2IZYC3p$1;^{L7A`A)zi|14g8{$r{A)tzB4YnL+k5v$LCI4d7=pA8vQFm zYY+D0DqRkp+#{`d2i<-}@`6v8@d~ShsIj<(EA41~O;%I&q+o>XZLPGE3 zld8T)ta3U!#{pN9?5|HDZgcSDzTnc?e~ERqtS+#*OhVct7W~RH3@xI{SKidieOHR` zc++Im!GX}p`Sd1=+WFXxZU24Y$xvP0T}f;HoWek!6JMnBdR>RqiLkVR0ZDrG`s!*X z!K$7u#)F;QN|w;c#ihbn`pg6)L0duRsXNQjo&U{59QAw#=#;$xNa4)ev@1fqQ3=^!(f<|5{(9~hdm^Pn*iDEtsj$eWBqTCa9PE8OnbAvwSoK*~5$(xu0ezgtF(qaqcO=O% zax?)hWkL3<9o=P_(!1UB!wiyc$bJ=?8ZIdU?__FWsw4|uS{fp&?`!!rG#>e_t<1gd z&89<%;f#{bvx`scJwj#H)Q=K>Y46SlSJO)Zxyuv6K(|~en$=-(mPhnSt<)8X+dDgQ zaGNJ{U-osgt$0(!&j>I5W*1+t+7j71SRX5uRdLHrO-xC^aG(9jaku`=gTDfPJSOuf zGf9QeuZU6SXWm?YuThP3=p>ZBuC`C7iJ&j`xuQ7y=|yDI_V(^yWo^y2w(S*f3D2`9 zy|nD@$dkS_+sGyaLKXK&mwSb@;@SO*yNr*@>;GN{tB9mmR^lx_E;J8GS#)1cUq%^g z=5S(nClhbpSaI*oZl@{jeWIrsu3GX zAAg@s_3%{d$Zq&kh6WYkPcL60{GV#&5?@wk#m}IPa?Ec|=yT8r8wfer@Uy)-JZfTQ zX9}f%{`}k`hQ}ehcoU&jR@QJ4p&#$eSzC_s7uYSin^5z9p!nV`*D`fo_d;2LKLx8- z*oJf|a}GGhlYcfMEocZ4u(A9}u2W~kjp&D@)as{?yJD2m$Kpzj)$~id7|>1`sLHe) z)ViJTN4yieK?csH5zfxlX@n>P?we>kIaQUcAIpdQi1XaDi7;TA{u#`?T&~$K!?v@K zp<}U5ia=hP$320cNY#P1*pjyyJ6C08zoxJa6J{(pX41FxH%Xry>ZmYo<9Q5;`QW|I zMoUI63}tbI(34Pc^ofjXx;Iut&gbMu(vU@`WcVcUN7EpB@4;s$S04?@+0_(;(=W=( zx+Y>#P7ix3X1mkj_FJ9fJ{E~sQ0Df0dISA^uBEUZ>mzG4J32i7rs2>u0kUlG-hYdbVA9#?Fx z^d3I(F-^K?RVD{tO8M`vWPTm3A4#Gj4UewmC+c5LvL~8a!dFc{`%aGh{QmuK$~}h( zAT`3@>5GRzJRrJDfI$2d{RFBX2t2Sr1mY?z)PMd)eFySPZ+Y_hhM__Z)pDojTU%Rl z%eN-K1Xw7nBL86KO)SMxu;p%2&g3p+Ol&U!#V1@#E}i;x_^A-4MweNzC|@t;ys3mn ziA-3;a%_RA_rX*{2I&s-?EumG^$!x z-w=q_iQ}%fb>&N6vb3oidgIB#p(B&IY+!{JwusxcQdY85BzM)6T4Z^wD3^P+ufw7G z`@LUhh6+rw*(>SA|FjsT$(%Md#cb9ZF|)Dd_L;vJ4oyb5Tf$0Z_E{k&%y=0IMB^*h zV*F;8ZMH0%KdHR3>-QLc5pp>wd?5$J6K6LH)}riGu2?!c&`t0jcfmlHj37ZFQ;fT* zE=pQauhh4~z1^jlp8yee#bpZ7o9Tl6t=*BFwf5_a@8RO^uegtes2Z$j0{!B!dGwEr z_bQjnpL{?%J3n>z;x@Kzv?HWuma~$K{+|4CmB{Jd^CszVyNwK2x9XeM$JCJMu@L&U zf}Mf-2BUFN$w59Zehs*|4j{r$lG$DOb68YTClNTHy*H}6+OEegvbAYgF=QwG zC`3kczRw-iH{+fy2UfMUxffP9`Fo?%Ju8~2w54r1oha(iE#g%0O|USwUj}r1n%jDw zF-o=dE&uR)l;O@OByuEeK8O_k)3UwweJDsdoxtj_=75eta-DrJrRJ4p+UTP9?D~8T z+_v^0rw+$UiX?W`qObI9C-lle{#enbFETGeP%F1{4J-qGLrhujBEH20Ag;_dycbfc zl8HWh2KyoxeQKD99x74|vBmz*va@r&iU1mI3Ume9zsZ zi^OEo85UE53S*6zWT2ctRMtr}Mk z*1TzU4{GceR#iX08=q@2xlRG^CNzQ#W@cyC5}2>Do1|G0YNscO))XSe5$spN8STzF zT4kQ@Z@5Y-V3#?1+QWvmG&pASDT?d|=_>Laj+p1``QjrIkc&1aZhu>Z%wTm{xL9;U zZc-oiI9Z=L6%I+E*`o}hr{dRow|?#FrM-Sj_8?&Od46HJ2eT%!?26mbvAr)P6(Gg3 zZ~hW=!nEUduujuiX3>+^s8P9c{TjNsa7r&`Azsz{KKL!6rW19iij1STC+0&BQ&(HM z@!VH3!OPjWi6Ph#xI6w1>CT6`xp%{Xthk(u&Gkgb35%)XR<&IoQD_?{|CXJjxN{tK z#-yhp^JGj!hmULu*?zi6>sutmxAldZEq9??YCO@jYf{X(e9v&EwLoUA+Vqx{v#7}} zr@h~{8*<;Okp}xAkdL7Ewmty2!Vn4-ukpi*PS*}T03O_FC6&bE*+E%bd5q*?U9%H} zfh7f91UWam8A5KJnK`b)rdQDIxWU1BuVsAs+nfHfs!>bLVMh&j;jskePEH$M8J5h5)(4pF*`>YZ+1YQ( ze$;(8RJXXTSe-O7KHe!@#h(2%fY>z!@ZzZVtH z%uFj6h)pYM-Cjxwov&5q@1aH)TJf_z=f2iEKs6eEYAqd@H_Z~<_1M- zGL^WXOlcRenA0EgW9 zcK)Wx-mzUs3aMf4-#m#i;nn%v(1^IgM5Zp}_x`ctQn1tk^JVUp?)n;cdRbX;Hx7j< zp)NDj?q#{!p@L?CD!I~%klEofj4o_(4|09+Qt6OO&xMhriZR{809>|=F~-NGkjxwo z%=yZnv}-1Z-EcYoxJ8?ivAS2Ipkw^W*hfMh$-~7ZRS{jwlSTBn^3iro&3jKbU4F^K zH<*?yoZzI?i;vF!-r&tvlpPZFoP5vw)}Tghya(}v*D*u1gPqFZZ_NJOH>vSQi=^YS zPKR{WHMWKJE3FaWd*!b`fmrqZ`!r*3j*avyYMW3bX1JbtxeEMIg6rH&2a*NC)Y9Z+ zP0xTg^0ICs@}T;Z+q|6Hq9w1(2$zzNr$`q$u04Q~WQij*Vj)_!M$W0cCt*E8S)T+F zj{fn}Aozo50*IgBs{&_eRGaoXc58dj?7a$%bgfb*40P#2oBW-8pP}p;mEbtzJj#{l zClpz{>|i>v!Pm;~sFb7mscm>zku2KDc_K)4xrLKQb(xkZsf6!e6~*-_^7~II$twy9 zE>j6xzw{2e+0xVV%!>0>Z&~oVdjDXglb8e~Cae$DUe%Ff^|VjB^$bp<7roUV}D{^!p8(w9MwA^pn{qN>Z{BT z9>_%)WI}t?1eB}CkVoe5VN%)_7ATxJG7w42!tB>xg^=^kZ)jgKNP-?h4^V0Y4|Ov0 zHV6>-r@f5+4pX0Hb~0-}tVkdWms5qOo!mHIUkyTNOCZ^N77vdh{wkrvm{U3^ge8Ge z0`4P5L2E!+ODntPbT?PI5gKB_)vhPI{aLy-$cnuo)73=iNlGdJgZqduqeCC$^DiD> zwSuPNP`OPyJ9>YLc@_GkUwamNq2*I-*g>9}l5(Gc;W_A!DS?17PM)$96ftU3ky=!; zAs}Os0mFAg^EJw#7m*hU9LDZLdq4#|NPt|63#~MP>ofN))P4qKBIyuN`OPW0V5GqU?ix=0d4rT+Ydx#(iNfW zCl3-DphBw6P=7K4QdYabX>W3Re83(wYoZO}7^4b`RPby9oAG}X!$z2|tMiQ2?)4`3 zDr@z_k%4Cwsji)2xqtsFJt!c_LhrR7r@1V!R`v`?yDwk6)&~-?Kl*}L?0}3uBn8wV z7l0K#62!M!TU&Qve$o{B`OrN3OIAAD!kE|#()K1;?}bjVi8OxJwyEQD2+{cWyp+2_ zURM-=S!b4Gb^gt-MOAnso+0kIV~{KzvGxNI zaMS*(%|;6Hhi`pQ<#Xf=jEt)4?qGx(g@ysp-rLoP{*NVnhc%it=lJ61msLbcLLwOg z(#9(#z&dRTjO;_8c2Qx!%FMx$Yl1Tfj=mA+<(!Zdkg!Q8p~5NSP=kux!Tx^lV%!f+ zsO97`#qYA;z59f~d%B2)v9O?E1tVJw9YvUBl~zo9DX*cSQG8^Tih}9d%a<=Jh>MGd z$0Q})fdhvH&^J*Y!mJD?L)-k_K;E1AVslh)dDaC4kZ8jSym;XQJ?az?4^TE92SxL$ z>S{ZXEf_Y3ho$K1S{1>n{vC!)uTk;$3M(y`h@g7;C<#X2*InCdxDgKJwI}uRWs!IwrE$O6Xhk2+ zyp-kT->63zxB(M)1pP7$PG_lz^pSP-_xEd5Ip&YTe5N2c_2EMhr&uWgTg!s>s|t`e zI9bMK*}={Wr$82iH~F+4cPKw?lzxwq5u`=5mqsf~oiS@Uz*qePgqUOaY|`kBK^h~5 zQ~z^FNJtpiEok-_ynRb75&s&2AmEi0d!lq-P*4jdOqIb0G{QdV{AUNTSMMmW=~SuV z=944XwSRp1a@lROfiyo^?F4~%aevvhQJj~1XIq6O=;tX?6i;@7p^!6D z=}`=qQ6OlVD66R0cOK$s@9D(-Gd!cu{LIDoRy=dOG~$jufpdpY_VSqO#sAe@sYp`g%Y zSU4ef1z{$z?_L-i*Bw_p^ZO^1uO8iSXqU6G@jlW7_U&8s2t7T$A4TiKrLu6AX);u_ zsNP@7Dh=YoN>*0+AdogQJ8L&|6eP5#w#$t`bP_`g;yJSVqyzJrn$ZS{y7)hvVF|%C!nE`0x6dFL9_nkc>%|zpLiFsnzr))Pn0% z*&GSJ*nVGFo;8xTeVeACQ-bCY0+Y3UyLx^t3yBQO!_;O07;AL&9P5rRUL)QJws&+R z2t22O0g1;gZC(1YfSyTBv?8(g7=#@8eSS45h#P?jI@bK*@{G&n%fOdcaIZ$ArPuV` z?3HcHms8Uz9J6*4HGpo`x#E7vw6h4qwIb-ehV2O=Kgg83q3o!+zMdJ+WC%3|?^o)Z zefyeQIAiD>81B{1E-qS#7~|7A!*xWhQHKr3Bf=Ev%npT2wzRucYC2R~U40iiBq2^r z*^&d#zVjQy#pOF*^u-u|yHqKRVlpKUAAXeu{p2)n9+Su8De4O@UJQa5(dl$2R%Df) z$;oC0ma`ZO7v78RxEQmCydjvLp;xo%>kxbQZutt>Kq3blx;u z2cdGo1Dn8QF;>>rks^-e!Ih+ZTw57?&)(U=;YQ*IA#P)&`Xj@BPw)byFWC}3^idM#)vrZ&H<%mQ84aM=lesZa5K9)jcmSbAM+1vZ7 zUmf_7F22wQ#qpz+?;5C1kHN~AaOq3=x8o|ilJ|36f)*1giER&Vz8T$z+%?6U0(E-5 zGo2m+h|^V7^k<*#G6N+H1`Q<8lgrQ9iim>9MD;490%e8uBpHoVl=r1$chZ2rnPO*m z0UJ&D%>Zi3f&MY~p!C&rc6L^r65t+6vB6|~G8MlUT{hQb&pds(sdLnluH4cZ256H8 zz|I1YlX}W}EBM_{D9(PB=Txemhw^s&&YjELr1sKKtbWk9ccNR4O(u@*+qw@C;wQ4h zZ>S)D*0|!!@{M{d8Rzh%} zzKd&x0%<+FXxBr#Db!CzeR;v&OLHguFUq4^y5NVCCyOw7L2@yE6b=eG@>Vzk^!=qI zJK-H1=TPQeta~A44U-hseBfPBNXl z;>Y!QH*^nw z8C%uGrcpcBy{MPlF)SLl(nt0^hrLX)Mspj#AsmxG&DZu=w|7A7gE3YD(RNNlz`CLh z1yX5Q+YzYD`hLzeZ%4`}s>@3%)WF1`)EL{;!ML%Mqh?gfYA7yfWTMWAixG)Vfy;)* zfj_ptTy703T;IiliTTvmVzD^6x)!m5hgupM8VcV04`*rn44S_i>$R7sz-oyC%It5x?QonHEn;DYq7fCB0Z718Ap@L4TLleqy>WNclkXOy8TkH1yF4SJq6aU}Mp&3Wi<#L&4km;|K$wKku8Nm92~5$O&qBZI{t`B?16jn<{j*wpjZ%YGpJ#KEDu zE7{S@tIRJmEKK~$A}7X`0LwAMLWf9+jCZzHE8f~R%v?C>NE z7m4%p^N)(fzYlCPoyaMxg5i_(7YFC$% zS3(WkuBl-HLjc0@l$kS&FqY=z?#}M6I^s?2x!!10V6r3*Mc#1lbT)B%h~@3 z-$bw~S?xlGF@7>>9!;Br7?IiiqekR^-~{X6^iBWvcAt&TdO6L@n7faUXQzBuVWHmV Hyxo5Q!FgBl literal 0 HcmV?d00001 diff --git a/meta-arm-bsp/documentation/corstone1000/images/ExternalFlash.png b/meta-arm-bsp/documentation/corstone1000/images/ExternalFlash.png index 46519df9c08110d9e37cd32754cd2e4e8976677e..2be201785d97a163d79de0842b48990428fd04a7 100644 GIT binary patch literal 59864 zcmdSB2Ut^E*DflE3R0vhN^b&64JAQ32?-q%dJzbr69S=EL6qJ>>4Fpm6)6e`f`asp zC?ZIcj)KxV$XUVi@3Z&!fB$!$=icX@i_5TBWzI3j9AnH;-kC@pEd=G+OJ`4|K;f~b`AG;l>*LCzfbMdXe`D4i(jW&U#F1R0BmvXO_gkF5jN<^+!z^ye85 zNW|X7-GfIA#sdPOU0sE&9nf}eXlHjJoQ(%?3Am58v%&p(K-0y~0gFZRfZ!5BBET&^ zBT-QvF(u$k!vW{%1N`=ZNLomW^8;s!uC7=cLmMk~2cR9egcw*zOp@@5x{98r1`h}d zoMRoFY=B<~8;p|+;T5R8n~O7W1uiNkDI`Mp2VB%e+oIhZ{?Y`2CU*=PYx9$6(VtXW zxwu)|xc$5YyheD)%f`*!!3Fp88VC%uCqcL&rVNb!*D!&naA=^*11tgYG}2Yn z5(5ZSva^Eu7e{=YRq%ibT?w)>Nq^P3~ zFjly}0b18k0^pqzz$zs*U6j2VT+vq9$ONsaXRizQ)zx%DXc|ixN*Masz|~MzMi@m` zWjh~7C2zEYl!=#@6Bdj2FhXI`U@17z98TBJ1MQ6m&NSUICa%sBswNUjTB0rndg?GE zMYsqCrHj(?v$nQ|!(iT;SU+8imx!&cCcr#6OkEoZhU+MLxG7s{11%`|`C)-iM_;76 zn;&qZ>>#Ou5pjZB`6;<*V!?hYz&nOu4K-Cw7)ld|MBzmYT6qG14c7S%@Magtb=pC{0& zk)ocjConI-G+6uT;k@-EJnVfWq^#AEgg$MNzz4z^B`RWQ3#brW)Y02P4Fz{oHdZtw z$e1QXSwzdw&{fk&-4FqYpqI6xnz)jO7QzUo?V>1-gXpR&;o*1(O({iPWe+c)NhMz` zKTl;_WpRj_IMzeg6Y7G(OX=D9==&HW(P)g5fts%mVg5ZmT=eZVl|hc`CwL#T-;O22rB7`g{vYI zf$`&%l@T^>Cd#^co-jBRs-=w;M_a3TgMl~PRF$Qm_9%p-0a6=cj6tf3Yl|8?0d#m9 zxw^x!dWJ6IB065GdXB)eTJ}gcHQ+Z=4Tn^NAt8=R5@0Wkmz}pBU~u6!2EYeK&rlJV z9<+{xn+EW_lc$}xov4nK9azQJN*QJBt*C``vqp;cqI+IE^yOL)!oaPKnT`VMO0GVO&kJ|!0TZ_AbSY}$j?E-N!-v`RmIEN8tmn% z>a45`LD}eH9HoFaV5%A>Vh{%>q>+sl603zU201FK5foL!*4M@gp=l@uhN|nR>nTI= zR^kqLl#7A5l%u{k*w4ws1Foy4Zvr>emb7*?bVaM`Bh(QND1@s7fn1ut#uT9c!$<6kJ=% z#MxF7?*X^9QA2~#wtluK32QL|brN6^7f-k-ND>b9QgH!UiF&I@d8r#1gOu(3Jbd7) z`dASI6E!7qFJri)uB#4Q%GXfRR?S*h%)s7HA1&d6b<|PBD7j!Ye7)3wvHN)Gp%k@M zZ9R2tofP4EYEoKG2*B*aT_wekULxXFx?Y+Z;^HubsHCpDl$eH-pPjXeCdLn^X74C2 zA^|L$O4?XmeFrTUum;>sOa*0+fp|;#iHRAQXiBMKQ7Tw{HA7b&D<3aicNMIy6bg93 z8wWxeTDjs~#64Z?ynqWRV^JMV9}T>=DA>+cUB}7~m>#$x+)3LB;sx+X$w|yO_9@EpT7VSWHm_Fjq*FzSjy%uw2{w)!=T0z@C7k#d#}NBXYNgSlsU%y4 z*(?X=w*eU%#M}!1I6k+NT+%c>6U7u)M-1_%WheUkQHCd`2V+NXisz811pobDzIUR9 z5@A7<#^U*8nlh2`9wB%x}MBf&NwRbVO1A?#-5e*XLB2tZ%YA$G@gFB#&yrLo5AX5VRBt z5VX{hnMM9D2!gN^+2SDg-%Hv2oy7pt%Xo>qN6UC!+=Tws90il`{ku2m|6QL^On;~) z=2}^wKc}b3a8*Tx1)+`Tf9x5uWOtRNm*rD5QS6hviBbJ_^Xh_n+swwx*L!6cUt2M0 zTKU3sgS1n=e*Nz=PG^Nj)bh*v~OoAtLJ*1@rHz+6W;f=`{2+` zLH`IfVj&&B{3&Ge>DP|F!7-mmom{2;>W{9vMQ_p6U_6R@k5?kHO@rAI3h}8$Lf}U*CIA6zQFA5iZ3v>0mJmED)zHGmxE0~hbaxRQgI{slY zU;=`9NEyvPlN*+V_G0Y5u92=PnaLyE2CySzLd}%ALq!6(fZYum!Lv5-46M+CgnRnN zYU0x)wf?-ZGF3k0lidF0_3-UC_3jTX4<6p4wrZ-m<$=W(+xy(t8>3gN!5JW8Dx>fiIu zXaDP|hf5IL=u7q+vM?q;0kF>JZ5v}DBA`a$_v}e@5U3!i0&v@HRjPi7G zId%`V-nbCY0-M-lc))&n=U{J_P9N0*I}{2mvs&XDSpIZI-%NT(#BTd5PugIi*yE}t zzR<)?usMfykq#Wq&E6|WZl^e4RL(J&n0sB?pIFxM&fenFYl=UD%TE50q$HBGn%n|Y zdwRkZqxj(Sc&HJ-xtDZGm#~EnrNp`Ov8)l!>ho6b2J<5rrOx)Uj#8E%-ZyJH{|pXW z+eoM3Kw0x^naR2{-_58}{wg4a-&`WYX2@U12~t~y*-wG@0>A1fm~z2-PI25Q=uJ8q zzdWAg$=h7tvUU4xtm$M=bYYro`}HX1=jY5|x7(33l4n;lfAF6Bo@f0uOeK@+TuIio zs2*}V4(|>(*UUP0BS50RQ8%_GoUfcsiI1sS>qHfPK8n7y;=0jNQ@3oyA*AL(wS?N0}KuROb$-Fi7;Y z;J9VQ#7c-T?A-DuGnI=mZzw%fGmLk8+0t)92$b32Pc$IPk~!J@UC_vPwVa+>;9d>- zF^hZnRtWW31G9jcCPUNnJxLdN^Ac=Rf=T z94_&bbn#4|=5qO>cH=h5GB`>gL+I{VE|X#iYLvPsp@yS57SJ|@71kGMd6acKr+m=n z0A0^nYlT$&bM_%pq84vOuJLk&y|+-lA^dbh1;6=q&lxU*;b)9bM;CPs2A+be9dEKieS6XIfvg`V#FA z)8UO2$P{6|${XK&kpGdoNvfo!B{ul;eiankN4=G$5&K*Pm0LNE~YJH`eXTxE$*Ne%A@QH{Ep%^_u9A5U+DMV zf98v7sum{g$V^v=(Y_m8Wv&#r)Pk~?TOCOCV+I1)gh+Dih}Z50yX^%c#rbgA(|L~3aVQT+RbW27 z80?`&;n`Exf;7m6fwIjO@42vL3BIonNNH@2>aR|sieqv@UW5z-4L>Nmtc6E&{dU(} znE{uTx$R>XKf#!#!5Xrh`K>IG%x=&8rFSWyNY$p3hh3x8Q(=%sU99|SsdCgM7S;C! zM-$Np1InQ2hVAIOWeUos=z7IbYF^I>F0D|NgnBFk_W>_MUYGb$Oo#X1K771S*MgvKZXlb%c-Ht;er#K^E7XfWv}PIvl%v3u|bg^@1JkE zclAPljgn%-H=gn5JhxXk9BsKZ63@yO3T|=OMv4YTGv!r9@yU(YZJp)694Q(uFm^kp zh8%DJN%V9)+SYcTQ9I-qUrl&!#!h+&V37W1x`GipUla7k7+RyOd zG#1Cm&VZl3$xD6_V9nZnaVbud+%}B|m*#E~^~h_dO>v-OK~GK|RnW)Ta`S$gPoK%E z?0Dpusc5myb&9n5^Ty=o#cl{RpFu`cn%z3@CLOhHz;)ehMo6FNdRt#gs&Z^hc4enZ z?t{f0sT-hc2Xx@(%Blx$9L|y#(#beMDi4>XxZ<5D`P{kKd%a7|lG53x_)PHJPjku2 zu@O$r8<{UI4U^w}yEz|nEAe;eQ=}P;c=Pxhn+by82)@y3V8%nSr>H|(E5-^}zAYL? z=w5ABWs|iNxVyzvRV?ns7IUTK+iYbQZ`^(FF}G(W@JfSwvFjUk-lo}m93?GrIU?;B zcJDXG_OoPs?)-vzRuz^zRy)TL)FgZsosnFFj;jVtYF?Rbx6f*9ixH*dIeRnxY*)^z z@PpWD{OksPqgdbM{2F~>G2^G08`o#az<|TOjr7qcWz93PkCnWRtaq}A*t^1ca{6Ow z4&Z4&sh3bBrUe6TH1Bg8m~)E2Zgd{5Fnev)q$Rc|+SY2Tf%OJRoMIR{9$!tl#l|j| z@MpHK082NTVJU!*Anir!4eU5>?NqWF^}FZZzJ-v{=BwQOv<6ZDTAtk$A`ij{o2G{+yQ&60%K>{UY@nIWb9g^QBR#+9BZO(zSUr=b|2f5wnMVRwaA}U= zL+3fo-+7mqMU>{qbNONIjQtBNTQ0T6MBPs#xr`%atI-#}$u?2nm2dnCjAZwi3;s@h zN*NkTb<0OJi9=KJ!ocDvBAbsZV<%wIs`MNGk4lth#{Hgz)gMtzc|k{T{h7LEd}Y{q z9l*G*ws@uZs3zxIhB{LBklCirf$8e~wDf!3$d^CF84r+hC_{Yh{HV`%PIPa6H0!xBO}LUcz9dF?I+ z;}~jij2Sw6rHM=gSkqEBm4*m6j}PW}AVJZ#E@k&SxsVjhS8+v4IK6tdtoR!``dd%5 z-GY&je3br^XkhjEG(~SO_Gge(KqRSmCW1NSx2pYamC$yBA3^P8w*vlE@*yFZir`P5 zgi$H}7OkJ7{WWG;LbT87FZZvK2r3F^2+Sqo4F6{`hL9;>1w_;+UN-0Vh<@?$XUq3b z0$Go13NzII+tuHF4{|j)^ABSBcnRU+KaK?jAO`z)?{-rzmd_{u;{9KF5lrI24kU3{ z*xg9~O!Hq)7HNPmb#rLF<6lyBjT*R1MJ+}0FK9{#-UK|tf5$3%ut#t^$DaxR>q#*p zcnaut|HxYV9BgL;Ch^4n+&}sVmM0nK>5LcAnrv_FB%}^HsaDo~w9nlk^<|yBr}V`3 z;FB`n^u{*{e{bJE*{hEmP|9|0VKlU4LB z%u4Qm9W>#b{RH3u4H#bBMNeQgx`*=LvHBMi z>DN#7{9RmbHXJiC@R*4{#*NPW|4ny%xT5DGK%a5Kz}X!6r+r_Dc80qTcpCuP?*6Xy{nKyA+=ePk=f+3EX_F6L20^+X* z4$`zsZTtWQ%*PZIU%^3Iw4Yoe3$L7iGOwR@Nn`UicQa+lN!ds@0YCr{JPnZVMcMOp zfH_zS4Nie*;h`+0x&%>rN9%-DpHzQp60M*v^5MN3@Q%aJcP<0(w2#k^65hG_>z#Oa z)2M5&fgw4*E=!U%33-%#88!Mg`Ena45v{8=Kw#WbVDCMEKvq)w$Z0^VS0TUT>_Y&W z$G?I^S5~v2I+s^7PMMe+$YwLPu?+8LNdwEbEcIJj!ic8vf0d`JY56>9UmaLmDE}>0 zVg!i?WWW2uAP7Mi20V(%@7;_MAhK~9!T8a{SA8{r6&*TBB!~xe{u-;@A8{$>1W$ggrb5!`+c4`f^ba#(UZ{1?tWU0 z&5FdSuxxRu^T2#@(OEKkTQ9qR2Y9@tprFoNSe+Z!mi|*8_~yu+(vN43>;LnaBZ&I{ zk!;KpOh|54b-CSGi^G#IzqnK!RH8^V3t;+M36E#E5zLT2=0W_-QXkpftPzqKIr4p7JVnF|TKOB1`Rhqx}TYAjjJM`dB zo=l-Ls&tlJ8If?*1)(v8*s$*?A5yi^qVWdGv1{TA-?J`CBuXlCL%b)i?NQ#lsrjTe zQ>IFB)W^s3NySme`&33bFFD*qAosiqp6h9cz;NR6^41VUZ1S3Zu_J-A^3Oc~)XV3n zV@m_{eOb$b!{T7u(euEJf?NDGVS?_#cfg=;?Om_rlL12 z>?NDbBBva5d7<*&hIa(h&vCU0H_v?wUzwcdt+wt9?#Qp@!VZZ*yw*5Bd9g$?_UCgV z1}oC)t?7E1%{Wg*XpT@R4Xu73JF~l7-gJ#iYiWT`=dqMbP93aVNva$>t`oFRhHmv= z7sN&Md3}?<`91LR)Ip-njpkUqZi-b)1`8>}6?)WRGGl(Y2P|ty)b(hRPTU2|XxDok z`X<0w^ajk3Tb-6|Tsd8l%Xa$U0h7^lAMS^J#_KuPd_SeKAlAWMuPrV29=rL$HZ~)U#Xl}Le}s{FqV@z0 z*KNd?$KPfR5+71t;WWMJmnPYJ-4++25q*i$|MScbWm2|Yve2$7h54#Yo#&4Df?fm4 zGrF7n+vrq5~N&MWU8N?%7um}adu<+ zF4%u4z67`yH-7wF>=zUjx>BuVv+Wpf{kL+(0ESb24IaD~KE2Xg18TDBF5p2eFp9fX zb&uK);~7!h>ZC8UC})`mT|V)O2}_nR&qGI7Vqa>e(x_yK2tC&03ki8}eRXL|Ygn0- zVRCvV6ulU+y$_3x<+)nbDabwELOFr)U!KpYo;);pDc(^YIA+bQwy*>pwIB4N2HB`Y z#ywqZ|E|>hMa=%%pdd?Z@$TZ(>?_$D2HIIOJk}4xsL@`10b-w$o{Ll5?+#i4X zwhSi)i(=$>t6vB#QZ)g)4~+h2YuXvbWcpDngpd6Sh#O|0+`IIJrcWvbIa-8z!SrLS zZsJS_#TV4)cdK{hnq%X0?V$YJ<3J?lStBIEUyw-8I+IKOx z{Jwo?#y#XKH&OA&rsh=my-|h%>_VJ=H2gm9y<9c^d(hUUY>ui2+!1VNCSC`ojyN`k zdnd77e|6(RvTbog3QIULPeq7gVHg#~|3d;;4*O=+|C6Pp6Ua;y&?P?LxP6;u`aHWv z+S_L(t&dJdyY4ON=U4aVHR+^JzAaJKlox;HqW(o5dpTP+DD=y;f9EIWJR^q?pK@fS z6_WnSbX4JsIuKYc=tmT3@2>S+>t^Qm+x!XZnpa$I1*AqbUcBc8#+DGH)K#YkghlX8 zE9ulOa0;xjm?}l#gNW|f?u)v)&?ldsWwwtpLINZWgcyaCGcS01cP-|~1>NL(meIzO zJetA@l1?f46t;57l7;;@7GSaweGnlemlkmJ2%>(%;n=TTP#}mp z3#%P-$bT#9=fU4c{bNvfN8a%G`w85WCfPrCPZS97+3hCYyf1fe(t|}Z(?lC$?@C;G ztbZk{t|il|xxtGsO_<41(k<1Pyd?HX!+Hm~F?EIFJ-3C$L1r>kYHQLkRHrV2{9%uI zY_DuvM+Va(c)6+LJ*$z7e?oUyk->y!6j|P2czZ~ic;G3o1L;%Ab|n;L7CKX5Z6Boh z407)lpIY17^v|y@M|Tk!yJL<9jY%&E34E1YjMY2hPHa(Fr+4CfF&QB!k=IwAoN8?w zJ(S}1eFX)Jq9^)t-BFDLHZaU6<3=S}n$50h{OSgH5H}jlupW*a)mfVF>+cq2-o~bR zw{9G7w ztu&2}-!8u@^Pd)Xc(U+f`Ln|?ugO3=NU{q5^rqVES@cLr{aS)#lta z9!}bw9Q5W)>1K_|e8HA?YsB8VH{qky(#{xSBA0;OCY`kY79YIl>0sE`{?64TYBHq#G);@vezin0am;eQrLv+v2R!0E zda5NhH1=v67kq=S^*xG;RVo}tmbJRPR!(h-uggi{)Ixk2zzFoRnuj<%|M+?BuBp%7 z5`+2c8_~1tVXCY@m0P({xW(^XMQnLyndats}0%=DlMO+bk`$+0KyhdkQHR}0QA zU;KJ4L~Sapgl^jMGTmER4Nca8+i~<@jbLlL>vci=k{VB!6TYks&8p_tcBvDwOe|&P z70@eqeUqh19R5(D$dlePbA5CNaPZXh9l}v9YxhmVPs=StzE1=Ep*YH`tsRS;SGjbv zKUFW64{KN5f?U3K{j0V8zTILbB+P`lhgs4V$2Jv4ZKQo~vmu7;74fE?<>BpW4wykd z#YpFEpTt5V40p_O%y$;19U3sqg5&F1f7sGo>fx7Nzd+kDuHoo z#f#1dPnEl{5=P4rP*U@Av~#GzBRL=`+P6^(FQ{HM+*z8kC75S2T_8$(=o~YZ`*O=^!Tt+_>L~a_8o^&1v&g!pZ3-FbDI`MKkf3>bEXSaWV10qCEXvfVEcFP{f_c8H_)u9)|G1F$9Rq$UfvG=h{T);yQ zrgx8EIF3@p;|WoUGe%&-zcTbgoaWoQg-dW*7o8da$dR~+~uQc=4toA|y#_gr)qM6eDvNq+djU+=k;L6_JMntpD3g&q2QC7Wsm#KLN1@VbeII-l zE7HCymFRvS%Gd(`fl2-i& zg6m;uw98aK9xGbN=5QG^7xqKr$PpIB6cpMggc}5cvMiBbhU<0EG;b9uV(C`t#B23L zj{DP@{$9?UEwNDPxz9N>ku%nmM?Y33#nkj1xyX~wcji!%+fm)giPoS*-a=HEk7Z1? z#j{lhZqr`f z~6x-juv8OT(jvE_v_0T5mcQZI_BYSrD6?CQlfLB+e6Jw!tWesuql ziC-iWAfxk-f2B00B!E=yuhiCGlK}*MoJgHIr4B|P4A@k=diVynfyv)+-tUeDLdPy= zepX&X#e=F6)Hk6ONX;khF>++EEs*!BBkG z;>W??DITF;DW0GJ4s*t@;N@F|eHI-Uc1q2<;L)HJk{80b75vA}N@--Rs_@b{q{nEZ zuS{4DSdU#hvRR$YobID)l%jlp1Rdujw15oYZ{<~Pg|0T%h!j{j8P~0UPJB)?+Qvn|nC?5kG&>kLk8( z!FZeVpP$Yd_HI}t_Z6OM_uNeL7cUgi$i zu@8>!upu~bbwNio-rr^6XI}IJA#?XdR7dYL!Xq(=e3etXyj6v9!kE>@xVVhG*#+I= zf?E6_z_lNt=aYDC7YMbQBfnJ&TU0(Ir0Ar7CVFJae9T_m+A9gPE=L}Lq&EUm%rTLI zf^JUgx1#(gJMh>DAiG8>75(ruIZ^AX<(uyC1(lzcoNK3^IVzngh)idBgdexVb0vy+ z?>x9U^7K?SVwD&_fq5?Dh+xihp2SR%2oEvNkLw=d&gVERNgvdd{R4Pp@y)EpjcIVT@$2jk5G+4>tl z^8%bY=-!2`|Fl2d^TpfufVxiRf<+tx-{gUZX4#AQ&Zz<66042cjPmZKdm?~AuW6gu z$H#^Ru3F6$Avw`NY|LlgJS!|~Q!`QtB;=j~3Ge?T)!9PnJk|Q%uC&Z|pCg88{92R2f|MI)C**GloNAZ?o;$M=Q$5|ElzAihLqzl$oyFDTUN77YGL z@czt(8l3&5@nX%C#$}~F?9A8vsF)1nk`Y3u@6>RFT|jiDJRKyuKJqcOund4G0j&5o z4kN`LL zml}&bfOkFoFhh3bu_VFEk<$6ka?vdT|3A){9%tu${j{g$4 z{}*SDP^>tvhyACrfm25kDslh$MEqZv9RGiytnr$h?ldyl=AF9=p{AoiOr_djg3sct zgbIPRGJwhg@z2QQylZee6y)Bd;hOSN@OI&usBoG16|G#sO;Y*kC}Akpk;Zjzg@1_R zlkdUVu-=iV5MQzT+O?10Y?;YL5K_}i>A?}xU^bcXk%GzyHt9>W&2eGonqBSu@&S97 zkes220hLKl<%Xl2#i(Qg&rJ}U<;L|EQ<)p920vtrof*g`cOFRd zeZbM)IQkK*r<#TL!wdT!HpU_#u3M*Rn^$R}Zgv{qecnPagtBXyD4~vuXZ%yy8G0#I zf8#L4A}M-C#W_puwQar*pOYGWcZyonMViLY%1wuNH;!L4CSI1mk=Tg%RDhplu41i; zaYhI?t?!x!>>MyiKlHfsar@qDsuz(#AcZMdllb<_wY~CaZ)zzk2!9wXzFR;e^E#S2^9_xzVLa~ z6Tr-K-{%F2nSSpMYRl7VR=p2A>N7`B9tg*eCt2l!7W)j6nHEr`5VcuV;rZI#w>;_T zG(1+2+H85=V-y(oXXVdLg{2YnZ&ZJ5Cpq)3?9_ZTV8jRF>ciId@&w!Zr?n{)22`i4 zhTqz*?R_1yqn1*FG#@=@xokTS(X4h{cedmN2)G<_HVoH2N_x88gcYc#kqfph`foHk z%lK?vs#Kr5le{eM#iJB{mM1huX&CjzJgaw=)V-BJzU2f-_G>@h&~u63kmZ)PQp03j z+m`$NT|Nf~_qtD{FBzDc=hSR{&bh?iZ*yLy@MX))W^K0cY<*K0+3TtKt#1syaRAFx zj#=)1TsnJ43sl>rU^MQqPpd;bwbqkT999ueFaJi;TdET8_l>Sx3A^GH9Pp+gg<*C& ztY;*Q=(%LaHMZERGcD~@=Dg0a7B86+VU!8-g-zC4ci$$>;jsi6(Fpjqx`&ccXo4jMEg>7Zq!j}nD>5AB8-UnJMxN3}L@~W-8b)c?xK1b1i(a|V z8v^U?pT(F^nnnTAoM&032h#luLVJy*s)Nq*hjp;EHqUbf*wt}A8LDA~TB=IS)ih>Kz3CN?n-I0(9Pd?Ymh1|e2Lf#Qg5Sq}fSoc-%U+=m3Q>!@L{OLAhw z!90E1Wrp=Ug~2;(FN-pHqHHlkw@SbG%TAO`X7+M(h|e!#DW0AT)8+3j&Ujf23VW46 zeszyCaBXMJFTDS1-81tlV($1kEWV z!n4@6xb$vyR_!W%nsMM)rh4c>?NJ^6D#eS^)2SbKm}%b|uzCvdtfuG&_+yY2EH}vf=6W^%s0uvJ8!3 zWP;(3Mm;k|Ik`$Ku8UD4xk6JvKJm)Axl^9sd5vB3>fEjM9L}O;xd6#6(Kf1a0HAW8 z0NL4FJIL$@3^aH{z*V?~l3an(sy+6Muw_s7bGOV$_n3A_d0AoItr3loi3393Nn8 zLT;XDiM0&IPH_SFJI!+f4>f!~rOZ z-|`fssu18!Gt8RzFxMkMK<{$<;fIGY+l;{tLN;dMg5KG zuVcK=*c~_IM;v~<;~v){raIQ$5&|?qn2;je@NB={mn!$wiu=lq%$KfQKRQ=4ADJ%k>jdSCU>kY*#iZ~VSqZRDEYZCCVUP2in6A;*|l^Sbvw+_+7v z;Tcb)A-6|SLT7h$SVFKG0GBM9ru^j^dTfL)CbWQ{)4;kmbgf+WS%Fr;^a69#ajE?n zlDBlLAt>iHQ&N_c=Ihl8>a*Z;~aT-`5luOaH6NlreLX!ZDDxlnawlW7XCKD z2g6i!TxziW;6~$w;M0H^7H@dwY6zeV8OsJImFM6)+S(Q4b7hA)^*)j6sU@GMTCVb$ zRGa|WsRCgsNCwl(AKdp5_W6UZ_Gq04RgL|1;zp!`Vz)@gaMfDeFqt@ z%fI&n09NyDYQux+@Rhw`Is!%*sEU@RF5p)eh$!q)l!~Pk5s%&TzK37a>3lr) zuUTDdLr~27sARM*rs^LruJ=QMy`2?rtt_6<7(pCQXf2P$y%5gHcfI?`e$YSd19tM( zuZ8e<7P@&?=32z~{R-L>l&RdT7waMZt}p7&OPcv?WW9!&%LDty2K&-)GvcQ>9=gkj zf02Nh*Smd9qgQOM6w%U}V``KpV5Fi5+etg`RmorEF!#xl3F+dEpIV&PUJ!A6oHdYs zSW7KvfSo=faSnQzMf69j$PyGRNwP=lG2JJ8H#f*0S68KuZI_tF&C-QWZ$2+?7^ zjLGCFWgCA+6_1+`Im-s%wSm1hz)oCF!cJVbswmyS?Y#%|VrwZS+kTO@JY(F~E^p&4G(EX*mU}BQ-*8va? zl++x45%Lcf#S=fiBIkGPyrwsNvy9_p3(pbO^C{C&|RGpG`Vl!_k?Wf;ZCI$ zl@0Ann4W}@)V?mKevGtfyBd``ahxh)C*>FKG26r4rXW%_{%6dkc27aoo?o(Lk}9pg zwYHnS%)|9fD*UldgcD13lJD2o6HXypsxBb=00j8gcL!u+CX=JNuY8W?7(P+miix|PlG?)ncCuse?5(FjNE`G+DrJ-OtH(xXGhrXDq;T4oySbA| zeZVwW+C#4Y@tBTJZpxG3%pmK$C!6VZJN4idM)(voUn>^F{$It zG=CK#A71vjCI)5gmWePr%VuHAGvbeIiz%P&Y_Qzk(-pHeyI|Pt5htvC4u2(oa!ff( zi0(>7YCuVgh)Xi_(>03*$fC_*6 zC_l%yrTO`A(U7ogAU9mUfl*pJz_!PtWC_tcSUmr8*;Z#6_R?sj$NnD$la*9rAgc-7 z`X-pcmx0MsOT;wbIV#|rA4-CNZ+=kiI8AB>?D}*LOtt+vHNZJh_oXLh?0FI+4w-+!h4XvM2?`=Wne=OVB-R>U@# zbdt+|GU@z_#B*$Kzrc5GugUb|>O`ht z#3ZwY?akYGH#fZ)wH{!2YBeW)UYAq0YJ7^yx`^RIgbnef%ja61fAtsOS6 z8|K6Yb)Huf;0;_F71Ovr$5GlAPe%hy!L`nl%Ipn(x(d{&DrG+}?nZu(SNM9ThML2X zvqd2PpQv@>ak9~u)n~o)4FDIk;Tf=^oyz(=cH250&Y`@PMaUhJ{{w(dG(qqopI<(P zTNd!Bvc)#a6P`T#&nN4TpSUkv=o7Q zlJ&&Auz5bRi)aX_A!m<{-mLBwjm2!Ric>bVcCU-gB}v^vmfBvF|5zWe8@7U9+pEcz z^aPnnRhpPD14y^iv1zeHvZgy%VKL10)ZY(z)mLpSOH)KVugm!VxRky&0PHx2A}e&X zUah*x{Icb5318?kmY5;SE(Y#~+oc1Tbfd7V2q0-e$_jjw#!zi4nA2fuXXjw|Dghb$ zqX}5N7rlL4ZK82uLz&h1)iuo-{y`G992TmC{w_n8M96iiB_sJ$r`Bxm9#S#OMH}1; z%T;;9oF-=%3+%}Tu$DgC-%qCWvRKjj_wfoRuzOzg$ubM|a7fzskEaID34IDKLn}=W zh6d4qtX0?!-_;H@N2j_Fs*?cpg@4iN^NR6M%{C-%Y3*uznmCacuxo&jC%I|Kt$^oZ zM4wsZ`vv|75OqIy%81jf2;vxV=2d>uUnLfA9c44a3LMG1^jMJLzhI=T0E&Vw^vFbOP6S74~} zlw+5gaJnFHvwC2Cu2_NWR6Y4@U)-BOla31qWBXcpdUw65-5pLQaYxxP*Is{tte(M> zpQ-9;1dw$EO5dHTxg~7$iNV(l)G5Vi(!cgJLCo~p9f6Dy zL~GYTx$N84$}qOA{L2E3QI*oJTW?X*c8ikVL)Et^s<#{HPN_+3bKwRYK9QGO!JB6K zahG@3*6xn9r`4X%9{)r@C>*>(L@)s|)>ae!QPkbaU(<9FAuqxfM2L=-w!-4*#p@uiQk(17SHlmx7*2qXK)8S}VPyy*Yu1EzMk^<2}WM?@E`@ zqL?Xb0z=6b5uQSOqArlESLgk9UL{guk~#_X^dWSF8B}kw;Y3mT2Vlq?|L(&9J&jBC zY^YzeKRi}pe2?Vj^5R$3-Sod&1HF?0-LXtddU*0r_=d$xiWi`FOavQlsTwzwwNQOr z?+l9hr7+l3Y_ryS2W~9ycBv*{8*LtgUCfawg>Qu3((!(;X(i|SGF2N0HeROauSHc8 z`eKZh_Yl;DQ8h{C<>iPo+@w4=cS(K`Nu6}(QUozkBO_O{GG*T&i zweTw){Ccg2>PmkI`HQf})`}=9B_-^8dlb?!c_bN#7X;C@ox@I|>sGGS`CN-pIyS;I z&U@lZms|sBlkh0{|7ma(VS|y6uQT2_qH+RV9!`ojfSYs{LZClIlB1jZKl4jprL zaEUJuA}g+n2TJEwJ&8!8l&L?SuKhyH7{g$S!_(Ok5@XJ=w>4Uaxz4;u z&uQwLE=e15V8I|-jN-$*;H=O(gYv7);RIEAz<}(ZU|&WA&enJ02ODiL<{kL%zYp0F z3G$32h}giZ#2n;;_l&eZ(rj%ZK0p(#cl9T&H=Pb8ODf2B_KmYB@!g8{LkGw_6f?4x zq5`2Wo`u}pf_RRT49NaZel3C)`hbYEpQygwXZ><*)OLN;hqcbqY4c#FQ)lbsw##I( z+Dntb`L7k0Tc$WHk%A)D*;;4efrM0yc!S5f^BC=(yrSJP77Spoc4lRS%(Mt-izMe0 z*enup;w8HM^4}PSp>EA-Og+M!Q<7Nk&Q)D4H(Yy%O2jU0T#Lgp_Xuq#CZ3SuE(n6C z*LV1OX{WuR)_VO$b$5$ z1x4?sV%qO5mhNz z=#p+zwmuHz{n*(6{NN2xTlY+q?{oBv6NfQwTN4CZ1&1O~Oa;=e$Ix4-t1pR7gww0% z7Z3bJ$kP}yDnao_rC6<#+FE>`8Xl428P|7<*_xPA-Ih#?Ur`+65{6m?8bHNhNTE{h z*6D!F1R5Cv_>`~uEM8_kJ(4yo{-h%aw)luwX*l3p9 z(}7kI$_-WxAbj`OX=kIO@C_<=cDN_geS;E}`VVF#PXIljNVFrg0{)2*S`p+SmiaiW zl&VWuD`nHuKkwhFq?AQ*DVx=$wpkf|?}gu7<|g7lCl=?WqkBzuz@l(ux;(3ZcZ#F_ z7qkjTxeJXwLbCryhDCf7Z~130f#yjU&OpfB;17$Cqy&y`G|u&su382;>yz`xG4x+i zcH$#MBiy5NkjnMC)C^KXn#FSsrV}nf<5oySw7O1{`xC|I`k+zZcyo4Fef$-s7|tNh z-r(GY(m<`2%WITcBuW$VI_KQ6<>#9OtG|7pw!-Y=8GIO5Ywjei@ zFtVV%7g?4;2U8UvRTF8bmyj-WMU^6KRKhN1aoeb=wDy`tXK>XZIVM{O6JFrL|!k;%eVe#te?Fs ztU?rS1gj85#sL+l8?%N+}wHN0>WLPrUUE*I& zk8ZV0JXon~+NBR@YQxJ_alMN4#~yQ4)0FuZhE?m1=M1YY&eJEt{RT10;6opJMQT z5flCedKHma7ln;IAj>vuM^ClR1iZXuDze{>?ba9Bm*BI8p8q+~3p%6J5pwspo-*3A z#sF?UM~kt2&6#jj@uBZEq3-Lp;+3N^hAUKFx6f%Ce~ME2XQuYhv)1#Kmv) zDuo}#IjXNYm$%sICq&Uqq38FEjcN@F1`(a%JmMTG9M6NNbR_~c! z|Gc<$2Zz=mX)M%#X45fS7@p~`p-7!+EHW7 z!&fyjCFp}L5@q^wFe$>54+xE(2Se5|Y6b*x{=O=B?67biL=lnUcvUc8v}NE_ixte@ z^k}m3r_KO<@UU&ksntWKIR|3^*aAG`fH8Ftx5w25K>zE~yo7c0|2-mPnH7$i6(yJa z+yC!Ridg%Y14nz1<&?d-0KHKIpTk)!iG^*62hCpej0B0lt$SxgwwV7mgHpdM$nVm8 zpjz=2G*trdX27kScDaZB6pORqu<^bTsoa$ag8)fyWlYDjPMSv21F=wf9BJ2 zbR_-7qAPv@8fI)wvn>lhbQGX{SE>AJxw^$3nZ{ZOVoQMZ1gZG&8KrUGQc=O)XTc)Q zPKzaj$&X4;-25-3^0ji#a8*R@oWLd#o=rp>|r z(VlUaCNO(06qg2iKBCj{2qzef;+oukCwXbM2C_XK;(0p^xBAmAU%u6-1`*4izt&qT zCypyVAk%_TkZ<*2nA!%&*WUxLq4<>O;)qiO^90xpw~qjK?iXf!aYW;Ev`gdYctC+y zr0Yq*o-J2N8UH1n$0jy(1ZuLLZ)tvNvRd)etd&ArZ2_=bYtO z2UV;4fRM7|?ic*Qq*RKJ!PJ{mr4aqjV7OuFG=dQ~@@CgNZ$RN^ z>4hNDt7hU{+3$yVytfo7xv68bg}&wO2{Ewy_MSAoRdpDfK7pDanP#vgM3Auf2k)^ zT22(cB_mnj&kzekR%@_jjvLnX(#~^$ww63TCWNZ5v&K^&>6YqfrWA7Yuy6~Gc59ne`d|+OnZoZ6Gx>vOqZJ0 z9ZjkH&`#i`4ENt(l)zke_rHy#9Rq0nR$MNiCqoA+72mAQ_PvLkX{J`q_#;z-kS;RG zc(;6fBINM`B879P>E`m{N-3DLwzS$i+3_WmY{`S%CX0#J_L96Cog_kKODWsS-0gBE z%1xThx|2FIS@2o4>?Fq`m5{kwUDP}>)p@k?Je$kbi4+2CT1e|tZc{N4E}nTr+juc6 z5s=#~d=qzhmic+ZJ%Pt%TK}yH(gW(Qa3))6{t%1Dm?`<0 zqKNG*G+&L|gO9`br|0xgc^I_&PbT)^{vJOn!Gf^J6qoFT#7;@^+bUZ{gY+j3WErxf z1sn}xI5>M_SfC6g&dL0gaAk=?e4MooMeu*I5OBHSIM*Dkt)@MD z^D@ioXFI)80cawsd@uA_1?V-KC*+hpjiyp2qtitAx|A>vUY{7b7@=u>7%$Tr?6T56Shh)=|QcOr{Hrn z*i_R6dU!t?8MsWnz=`=KrE;MoQ z9LWsKcbbnhbnsp~;r(w%1~`b`?wz6>K!LqSd=rUcHOAgPvZ!Nhy`L05-4U# ziVnB!zxpb`@NAEdo|C2X-PiTKWO3sDZB-tFG^Tw94#C-p&prZv$64AJHDLHA7mvRJ zssGnCIsNgZ!2}))(y0UOClqOcE|QAMfH$);-}47W(7tQ4xT2uky`)UrE~Q%MEyg4j zb8qcDdoUR`vNxVvcxaKI>R!_?_hJjbpctPyv@4FP+|rfD+V`+xP%er=&saD;M>bgr zS+6;ncSs2*Zoyi=AtIv2VmjQCxj}D#n~&S+*k^G^vUR0DAWqdR*^R++I(Ml^ulm8K z48ZC9^<3!g_VvZim;#=CIVkM4)<)Tze)a?rhD~A;i@ich|PRM~*tl7J- z1~`2x1R*?3Vo<}N$0U^wJwg?Mjpk2&iCiO`5)UFKTlw%xTHOYp5%3y&3VaM^cKkc! zdiT)f3V?H*A;!C00fgKq`>Abh*CvtN?kwNrBA*kOY~N=$g2{@~O~+>=-|VoRvVt6d zd7a;E**KloYI&%J*bLsTq8A)jodzg>^Oq-P4$`nP)g(HHyrbuwsXN77zuJFmmpCQxP+^1b(!XeSDWVtsn73fcS5g$+uhTh+X00>;PLT>$a z-$b=~r>9vxftJLd*4kA;v`53B^kqVvKf6b13qU2rLKwpriLQCWZr=WSSMbMsJREzA zC1PoG;^@42)qKs#T5UC)P%=TQ7h=9hUJ2#;AC{-R0`UZiz#K`^MVG*Ju4IFrpCn`c zdQAbV-IEZtGRx*0hrIPv#bz_7)2#_jFb9LV_r7GF+(VBGoP-lhs@N9wHEmhyA%|P5 zbQ2E62L^K$ditOZJ8n>umeY2r#U&!1Rfj^%_mCr*T5(K*&Cv3XyZjk+(skfIe?$2- z5g(xfnQ(00LG|YHl?NE@?}+nryjypE#R|!4dIjDAWglanrWU~gX`htoRpj#ieo31T zse3@fHObQZ*tyHkF*6G@gS)xwPL5`bPyeL_aNOtMUl_kFOiN32C@6gU%@Fg(=}ZB2 zpU<}`nl-Jim6-p0*K<;CY8gNWdhK!?XSDq;vT^Q`MPDr^n@qO|`Up>t z4L`i49ng0LE90BodvDM7i(P76S2$cSf;Rkx9h@%TdKC9XiM5VCO*pQ|@b?>FHKR{- zAIQ(nV>4?tMJ1RdyPdx_IO>*!i?fORu|p8Su2$}bpx+tlRf9Hn^d(3G&AcK2{#KZI zHD_t_z~2%LhB*b?Zek3gFBgxx^3cf?n|zpJ(3qyW4pP>`^ zR?LC|T~6cO>pAc0lNm^S;|p$**}&t={>oZRE{%!5tVh0+AO!!GE~RLyP01wj5>yQB z3d0q8z9KjYF~2C%gY)7zqj^O@mU?aft}|?T$Y9>!Z2M-%6yc?LqZ zyTV#k`c)WxKBD9ydcA>4Z3yjybDB_Vry^~YrYAJ!h#$@0|f z7o;58+5V$+sZ9U+3$=}GuF8w53$}9|Huz6V4Q^yTz8Px`)Rd0QXJR$P>X(jJF6R~M zeM$=eG<{eL$K`d{7O?*`+opbG>T+_0*0)jWsm!CGKXbFz);*t5OV%ZeFYc9vFp_7W z`%Na^e>I)vbqdDgdeqj6;(jq)lHBXp;^6{(e_Z|TzrBj3{41jsiuhD8?Iib*{r6AN z{-^*2Qqpaw(Cg1ye9U?YpapRJ>hYXb}A&_Yw${p$!j z(Xc`oaSH~9iAwAWsf>#fav|?!ztcV#u)kT+JK?vTXoXbVd+?N&3EgtxcU*9oJdZdy zCT&*xatb#ms<7WHeRmWE*TO@zUhS&H=dInqxO#Trv(A-dbEw$YN|gq=H(+5UYiX8R zL!!XYL3*&|pucSyH3&jYS~Syys5xcX-Ar;_ZkmmrB^A~eYxi*!H^yzqu|JaUu?sbP zI6CIo(i3}^q{p$1674gVvjz_o!Oo!T!e$j$Dz!M%!mB4fQs3Ha(cGg z3k;rzhV|7s60hK2CzeXgj|}r-S&IwTEXPf2%$IHK;=klfWl7GqJ4cZwV9gDN7*59z z>sGjBON6z1nKP^-I$6R}Hr0@K;>j$nfyj4no`#M5!zS)k=2Z?SY zF=Ws)n{Q1v^L$ww40825p?GukB0=B_hl^!Qu~xY5`DF038VsJr7Pp9kuEHaw=&Jj4 z>xeY$zTeE|QMG!Wk~2#JJ&w?+v$=#O*SP;Fx_x4{d|R025ixMjG}Aj7?#-zEa-&C` zx_7VC@bYWD#*>E-8FA|&8v9wDD8vE67T z6aA}w_9n!fUFXHez{J=DFbzj2R&>5snGIc_9<6;w*<^-!hJP zN8a6`RyS-(Q`&cKvi!qndf@SRHffsNa}Z%?tm(7t<&5#3Hvty~b%7*w+}x!z-URGf z*;7okYi72aEM#gzm>IRKLk!hRdq67`{i-!Lj8x0d=lbMcIPpC1AAjW zA+8S@f1{nOx8KLto5(}QtJ!yK*GT>QI)aSgfGfN*|3+4V?e5n50O2)( z5T-S>vn`%gcO>Vt37)(-HV^&xjmz;3r>CeERTBPjHUpY_gB}nNj_CNgY&JGV>z=P? zxUD`b>#m3y89F&=xzCcGOLIK^C4M6%_FC}$pMm3*wHG8Vc5LeNuf8%p#dBotEZ*Un zLGjhMeVria)g)#(p7!@D&7Sc5kOEInW0LdboYC?{>59KpF;SLSH8OJIlM6C(nPcik zspv*N#0vs%bTXmCgU3?m@4e+xd0ii22Po+Oy61?MHE8XHt93o%@INQ&V@EY@a6HdC z=0UJ-yxp+SI%x>M@jE%X>WozSN|?O$o)warbK`uvjQQifuj~0PvdosS@?Dy@avGrk z553tL)l|Yq?S)-lh)oP5VSacGxNvdUr`}&^*Yho1&jonehIa5nD zj<$L4fAKZn52UlF8?26?VB~0j^K?_pk`R4$QeR%nZa&7O)$)ZzdHu}_*X`7HK=v@R z|6L*s(8xHZ>Q0nJ8Tfi)l!gAiRdMB06;*){jj@Rg7MMv>*alr-*>3$Jl=(`#V#M$p z(R4a#(li`-vM<}Zu$!FShqTBcWjdUvbkS1_wdXZiSg1N@*5^F;6emh)(hZC*G~`W* zz6)RV)k}fQ9BNLl%yt#~~GL{uiX)uL7 z+6{`H%qKe-kLDWtB+aLMx$HC87E@?+KYH1zVn&2YQ_@bvT1aVWYD987X%KdVrK2k} z5e&A4^UCEYrAw{J2A5JIv=#G2E|xXO%K#C2xY&`v(HGsKRv;4uPRK|MWsI8dlUUl< z4x)SA)lQ_(z`mG55#78j=Bm+#cV5s9r*Xhgl#%rhqlI^-%Ts^FnyZMt%E!2GzTinx z`5bKL^6N|AtEA^!=G0DlY8<6YO?LRIA*vmT{LM_SY(I}bF0?O^sM;J|c{d)W%%RjE zmh=k^+8tKN!)D`+?>fc$`&_+}>?#?pXq-}62XCT^ym5%tY`T|S3`{|gdcaX={c7gw z8l7m&AI;vzHw8l`?E03P^tznq>#ZTe%^uP|cxabx@d6y1aJPS|4N~HhYn<11jzaEl z`91WOhTLS6m>-K7D4@-n-0%qAqzkw{QpW$2w~5M3qyE8~sx|>qa;C+H#XSkp>SIO5 zQg3)oLfl~gBG6A-LpCJ+8-q;q&6hfFL!-#Aw4Z%t-bV7|&cNEB_Dg4zCh(TbhBVuw^X<|DCIjz_rz?_ed$rn)WzF{AIo{OP^(IHx<4W<^UFvpue`S0aUToM;jYm>8a-2M*CuYb zdyePxjOJ?D5{09}i7xhR-RF(B%K0DJVrr3#D|OY(8%-y5^LscRX++?gy>WEAWb3k_ zvMOjZk1t`gq3p8yI9tP@)fe}n)W4vs0Qx(fE|Zo<-;@DqA-T@r*Os=x2fRTY9DUjD zP8sYc1S(!#VQX`76p{rvhl2Yk!=q_xHFkt#!WH-Q-(*v<02d(rYA=DuE$x0R(%Ppk z^avIz>`-R9W#=z?0y2vQL|aMBcuI<)o!@n$a*Qn= z*Wp|)Q{>L4rdmTuw`IG1)#+oojZELSRR8w~qZtAT*iY?Rxi*RF$|tYLr8j+t-t2bW z9aXXOqJ$(v0KvE3wJpLxF0$78_wfq(**Jd3E&qiFG$w|!{8`{I?=%T(JD4M18s9$e*y#_b?h4b*k+2<#6`a8F?S>)_E>Ywdq6&jh;3YPvAk^U!@J29#3B<-CtCe-QY__{%zQ?UkLE8613e#o zCcn5b#SnM3gW#$6gRsT?==8rYrV9?w_c;v$IU8Q@%!gUj?w$@m^Vfs7x7(aZooMB;dn?a zh#PQDjQS2lZJI-iN36qTo>B$JPHFYCBimrr-pZM44p*c;c9J8 zSXkv0`GxOft8$C9CAE;V<)dFRrHy|{*|sapRxS;1N%-}P0;E({cKP8l0EXUcf|#35 zSoJZJffdDUh#u-sB>N>40|Qhj*^HX8U^T2M1}dn(U2T$fAqctX_wIpw%InKlYdgel z!gA+K-zUG*(x)L<#4sDZ8m0gOQ4~t)aNjXpIhzvO*-Z-ju|OHEnh)jP33ZN$Pd;aJ ztyMMpH4@WjEQ+y`;UPY1L48X?kwcBbWC@RN;}f2F`hln9HmG%f#lHnj@oYGS_i>*w z+ky!Zhv860AS8-XQmp@Fv7-g|ntJI{qtKQ8cF41Zxk^oL<~Nz8UVAQ88v$k=xw#9* z=(+dEW|tLa=uku>DaVU*!Fu#v|5%~IGN(b~kr16xCCO0-H8SegDUm-TP0;FAl^LsL zxfnA8q#f|qH&HAiY6PveQpm>cqVNoiLswpy-{1Us!l$&}d3SOxlD}j+SLcME8VL*;>bJ8l;oEDkiW+ zR@4-L9qk97n0|dWpFzV#kt0SO(G=7{r+;wn#zY$FFb7DD*s2n<^&Z_Ih>3ifsK*7| zt5g;)DBT~luKt+i>%rPYgCm#OB|emQ%T5ab<*v8|u-lLDg3OiZaf1_l@`I z*W|c&`?XGvw|d?1K!(@-kT*9Xz0C{Npera0(@pxYL$ zugQjY2$(#ZIr$0!LWk-H9jr25UFcY+jd_EQjeIj&D^9_C=<(iI* z^8T=g4ViR4!^ur@o;+fuer-qZcwVMAlIAhEks)hWfen`m(-pEO^tekAXpo#PT2_Or z4?ydN3K#5gcN5gIf9D5E7TFSsP}7AvuKR^%>nET18r7dheqOT8Im^U+@HKH^1DQ^= z+i9^*wA7h)#iVQy831`2bt^^bmV3I3dkRP>tvbiVCSTJAz{#0>pLVuI0bu**;tRkx ztS;R&d9hf3=;)JVG`QGW2qdQAxR;XqD)pK${KeK7eH!HRQlt1BqJ{eR-o#%^npC{Q z&yHoYSjTrRidPNd99g?==Pr1aBXxL~dqM&s&eat{vuEpPkcrZ1PlQ)kH&SP0UHVi` z+B4(p^tWXQHV+t0x)Y5nX7`$)uk(jTkI?HB&M1B{GIrDEj0k)?qDerqy=T>FyYOXY zR4Huj8Fgz`R(8-?d<{ih@Ypi&8Ac?denpTTK`|_My!b6<)T;~aarM?}?&@s=IssdO z@IhA0$Xa3ChV57dA2*!x`g2U4Q%*cUW<)U8($t*KM*7PizD>C}qYvH~DH!F#3KMM+wGrBIEpwxYI`bu&`L&$KEt|A+;rI^fuGX zi8rs;E0+IVhGyaZO@?x=65(2HE3~`i{wCyU2Q9h&w^y5j-|)$#b=?5U?Mt*dt^Fvd z^F8ADI8$0~C+|%Rqszka8Pl^d6uEoMTMRlK;@cN*jpT@P$QT>U&-Gy5$M?W3!Hfz$ zch|<>XvlvNWcH6PzAC*S<9AGXJf&Pw1waHiDR=ot45aq_=XZj^sgZh#(ahc=d|PK0NOBU&c|@~rko z8Dd_g;45$trIoBSZZ2|3h%@NFSKh&$W7KNYu;)K-mDOTiIPm>EEb{1W2W z;BrkG=ft|kOB_=YuOv3c{qYa=Gio_7$(k-OqR{<4ds*QV?p@tdmC;HI)|i5~Sg~5q zLBi;A$@I*9y2%dRT_np9QiX6npJBv)%H?o-e3mkn;Qf1SeOu`<&IFT7$?kTjX-9Su zyUy>m4u8ZL<)?6|*lcS?qHo?Cx+{wRY>r?^$i%22nd=i34*L<=8TPp0*@v;fp9I3@ z#1$`1)+hldv%iER5>v6jtXumihJ)XFtP>8rxorTA(P8j_2u3Mfd|u+Ue_|117qrc5 zck<26CwA)o>))2p()qFSvBZ2Cp_v^W;QL7E_+&}oKxQ%=91b6Z^hN zWn_1!K>%)46&Zd?V-x3nus43AC*Fy6O{$PvwFo2B(Uf~NF4Qo2iu!;3o+VKSV5|$z zZSom&4w)N5I-9LPI4N)NYjw`-25E=ieHSfN$=w-~xu~2mnYNXdTnoG-hRaNNm2|`1 z+cf69w{#ZFWLD!q8OLXEH51duRh}8gU zB6A#{4wKt`iLy#u zW^V-!_LFkr63C+%!3^bbdDF36hTvM9XY8pQgFZ1rF2C|q;bxl+#^nM3k8<*BKs*!b zXUn6zjac=VrxQja5`Y2^%;YkS7{=Xlt!2+fI?<5nXKOXEo0o`CAS&Hz^Nv>caI-H= z`-e?p*u&tXz(2@CgiXq!qYV8@yDkEWW6lp@_cew2f`R0G8H;YTxr41WRTYkAW)K9> zY;Dz+b}A+6g!scc5`eGaeZ;*+!m~I5TkFg7J;?U^?-4-e@`a7Tz}hFvq=Cn#Cr=^W z2bYI_Pc6G3jPJgVqU>AwpQED=>D`%{CleddJn~kvY!Q||yyxP@{#Bwm9?}o|SBGiBW^IMMY7=c!CQ>jR4pVCtNkrKS>&d zmB;GO5Bkt$+k)`Zh1|t_WYJbMN?*>;Hk6wL=!M|&;{id1m;J&VgSt9>27MO--63%9AaU_Gd9P2%-S&w2jNk$C$*C%pPEMEERTI`&p{eS zOxLkoC;DW>tyVGsk6tt96NYuR>cW&P$y01Pi4`or(Hvb9nzwcEIMoM7hO#?vV01p4 zUy)q|u60Mf>zk5=DX2elr7k?34nf{DGRT+K;CF!Drx=k7ll|-cF3@B=*$f&5zkmX#*+D*grzz+(xCK z2sx_q+c7bm=mY{hp@J*z&dpVXy;iOdOwfm~unNPqka7QPF>m7mn{f7)UbIS?bD6ir z?B7V!;#1Z-6Q$+%Ov4TXz*7*{JKzNzq)X!EdG{t|WvIGb6#|2GvLxUM)n|w-6G?;k zZ%+Czy^$f5N+XOJi*BCc`99C)S*!O)Y{o+5{RE4$^bvsNh^J?smNg&8a{PPLBK{fx zHJgT--FELpl$keUWwAi0v@FV;ySmAF!Hk>GO{2MJTYH{7V{yE3M##&;0DC$! z#qc=rXCS^XsYcxoSTJBCv}@3l8)5G3`w)?ntw z$g21t7@8B3Z4e!9bpUD+RJrf~VY3IHa_A<(OFrXH^n~TGjQG~#z*>a;_4D75aN?f4 za|%fOE<#4HF=^pv`B*&s()j*c&Xewct;ICvzt;j&Be)o(TR5ejq>=pR+r9mw-g6+7 zWz)}?$p6s?WQA5(dF^P6jmK~11bn-si8dfN^a+H-aAoJX$c0aiy1e?VQ~7Z^RFG#A z;d(hu90-kYjG0fwV8zig%v&jP)om5HxJoq}g1<9Ue=c?Zfcl4|pLZxweRItxz(deQ zs($caS^y+yF&=L!$JsQwWuxP{_eN`T$90BN*!r~9hsPSf%(06${B_plddd@oT=Zdw zE@>d_&?TmV_XQHxhq@n7=i2oJ*6NXz82=&yXO*{MivG@6ogA^N4X8_r{!u&}Dk-kl zJFIPMT;%`u#-gt*{0;xgNSe54!BGki!tKk89zYU#-$;q(_wKZpN!@@7tEpxSbDX7m z7855@BadwZi?v_?RK*Us7^7RwO_$G+|&G_0NY379nLZ(*C?2A|40A{fqH)+FP zvl!2Gsfna?{F#MvG6$0t2@Ei_AZ*m>5&!kMs~uOZ`2#}SXU!qGx4>yZ+9P=_MY24V z$p=eARQoG%Dp}DPOdmf275Tp^NYcFHbBF~>;LrH2|40OG#h?Ma=%0nEXrhqXHPFS$ zJM`8R>QA~Z$NwTsn`;Jku##ZIOpH$oz#SW;1P)#B+|TrOVlb^cUTO`NO#U5^BOPJ( z)Y<|ew-l`LYq>*M?Ctl~wX__Rp=8a*^Vgyg=j zf+*Wug*}U;{>87;Dh_qHe$m27Ru8%B^&jb2VT`IiM`

J|^X;UlCTt7z3`<+C? z3iybzuoL%xG#;Q82$N^{9sv6y?=gBMv(7|0V@e<;igQqrM4NI{#|0`sM}EOhqE$&9 zpjf@^PBo2t2-3GhyGxUMMd5P_ZsJe>Xi{csEfs4xf~T)R>$ zKKO8PVu!|8!@i#R@DGH;kN^9&k%Ma~3|hs2y{aL-4Mu^Zz+i-f?PUhe|7C}UEo^ft z_KI&ohRmU}+rDeeqqK7*h87i%UO7mC;OE(a`H-A!7=h$O=7ISq{+sy+oe3|EKqm3* zeWiJIb*=U0qB?Q22cCKgGNpO2xA6~6@a6zAB9 zwN5=e+c-DK3*LT(RnveZ{-Hb!H1+a?0JsCCzJ}yH8zdD66}%A+R=DE5V;ld{7+AaV zXI0Xf9{x4OLmuHQ2{7#ccxM0teX>;oauCADL>S;udmO0b2e`{NEZ9?_iTyu(J6OSP zPegcd<9}tTP=LT02;o44RsYOk(IM{={2_7Sl-lyGRolh^DI!G-uO%{dcr-_^JKrK% z(BdD%z;skTY??{KZviz-lDnk}*U2wQK}eU7Xf87QvL!yF6Vc7_t{6lf08$UdjXwKoVE$2ooISNM+6tG7X$Q3^S>b%UhQ-3UgFHxd3+ z5f0U>YyI(`14#uL#nr*MNm2o4f6#Q9={P$7eO1H%;(*tIaBD1Y%h6vI$j~D-s zd#N0OnL2E9p1qDJgN>+mhNns|X+*P~ah+O@8jlMXzt&PDgB28O)qv;d3dt)l!{kxX ztN1Aj76ZQWDjKLqkcy2?DP0Z*SIGmuT{812-LK;qwh$jgbn5*1P8Pczj&nU1f9qjX z`r|;T?5(JG7nnvpQYC7%{{gftTHlSK-C0a5hnudxi@tE!W`D+RAoX5HWqaZfpT`jU z5x7fu=?{C|Zo%YNTjTfxDf98@C+9PsUL8%2EI(7Ju<;zx)^FwBSxS$A@jOVGOW>U( z%pd$b!5!C=gWR8Gpf&6tY_lmdKSD_KF&zAf2-ETW2KOtqd~5Y!T8q3>Tkl#5rZzwK z@7pH9Tz&8Ymm4g_ZW`gMGpp5GO?%>Z@TlS>L|k$Opb#d4#0Hm?jhgmhk}-DK&4BLu z!xDuq-n&8-djF?X4aax+I?t`z4it=Z%$5pjlmZ46IWl0zg8&pspG4Ic_+S#dpT^SQ zfZ&|?LP@b434iDQN9CwCBi^%wBFyVCp=HdBV(8v%kwa2}(273bwZ}F{_ z8>Q-=L#dqD@7YZ|nIus&dC95^;@5A{=C4-Qb{t-9#Sj?D;YzGJ$2#7FxeGHk@=(tN zb2tV%_)|H6mu{z}{>}Z0B~igoU}TiK`4>^1E*(+b_{{H3yPs}$aP=cM|V3_>6NB>YI$y(o9eHV zn}RPCN9wa1HaIhsO<10b?raunrCSa<`Vm zT2*S7?}&F31up8VO3~x*C9v-Q$jD4{N?$Q zl{ar|_}f(&e)tAidgwol#aix-zW=(}h6eb?ztH>kss z?yr*QX}{72dm+Y-pWOW*Yo^fI{eC{G_b~_T1PC6!nvc3K3S;L!pSbOBg(z%J%@fLC zb$?(nTBxCvs_J!3hd|Tt^S}12-#(ESgu2OKcT2P{QTx2BC6O4j9z+s&HHngLU_4PI zl;0}=&ZC5$H?mIwjuL+aMs$UMfoI2ry238r*>gP0YtcQ9m%lNcorhL$$(EWVuQ{9| z*%Gm_XzkiFoC+Q9FG_W-FHhO;Z-1s>JeSvk)M&}mz_twBCiyOstLuIELF_53i&s`4 z)}U@L!DzjZj?meXu*(u(XD}qTUPMO4&|WiaLP66c{f- zxHI&H{gw;g>~@$byU;|T>}dUYPU>REHKV@d3i2cn z%b&9C`J`yUE&_9-ChUysqaba~7?&@}ZL2XXlf9tF@hi1>`?sI$#%s?c!nY4r98JfG zs9(ov)zS6ePA^J(Rq29*4SfIZocowFMTYq!Fmg|_i1$v{$5fNc?Z!hlm^Aw!R5Flg zK{v+qJ>!r24n-xpDw3CQ*6t??F3zisrN^x}6k_n&7pg>b|Ex%>;?tX(OJz(!j)A z7eH>c(MQu&Ty46R6imOOlSwWNe+$oMa{G-&IDYXJagqYj+g9wK zHE8vKCtYgrdE#()qk!rZ+AWB9%=$ZMCf^lqBoA4G_NBou21#nZ8aJPcq8HjV#O+G3 z&waoH3oy`5>*wpaipA!dD(Z{$DrP{KK5uxs?GBwmfvnAKz?L`X2)%ix*v#630Ai*!1vX8HZrV&tv>h*7ytt2;BmKfvx$`v{dxn9ap1*srz|hVD#+ddQ^<;?sV9xykxft0B}z`kaB3de~@UQ7U1P0z+cDN8sbvQfOz87H8KqEldXs4-#QVg0?Sl+S z^i=sY@m15^wTG7Jf_SiHv?m>|GXCg}^NIZ}Ylf2&-EUUqQF&*^L7YcoU=0W#i;<%O zL%z_Z>Em6{Ld$|*OXTUSH66(zlb!t3TAZ?2%1J31UesAfubKDs;QsWEM87)-;x8Db z3{s4LHUUJ#rv$>%d)f^uLH9?)5oDVJ_Aec_Tm56z_$-RRLyy~}QGOlip%I_@frLpl zO9%h48pG-@5UhATF>_F^s1Lz3JBc8?Fo=WcxY<2qZCsjIq)@B_uhC;@WRbVp1QLQv zQ!ph}jYo15vD7G4=QK8`blkl&-aW?n?|T3?_2>L7gwlEBBt`D5e*S0>#bl*-%I-$7 z;6ojwDUa==gQaTyOb<`HXMst?EG1`-Ek`GMf5_>Ya30mbqWqp(eh!^l|7 zeG?xCnzD;1@gqonFBSaQ4SY%BeCYngzG+m5kvj{A2s>SIk;I5p&M-}l5&jdAI^)la~(ZKK0~7*mH|<= z^N(Oz+g}R7FKOX4l0OE%5oLd_*6Dbh@R>Kv#nCG7*Wgj-on8NBcMP|jebuJ$*NgPU zAL5v7?$Lkn!udqLy$7erzl^cWvlT+~td|OhUOC8IgSY#!L#g)q#?V+bB-6eDynbiq zcT}GZy`Te;zCVF*sm2Hn10y_fFaTW7jO4clN|D}jV;Dq)m|5=C^-f9Jly#ZlEeZ5Z zS$Lm!&>h_^6ymL%o&0~?y>(EX%hEm?BoKl-L4&&nSiuP{f#4q8-CY6%cMlTW-QC^Y zJ-EB;eaSv&@0{~}_tw4t{pwaxmCBNL&GhtiKi$($PfkBd#A28D^B&q+!ygI=SccK> zt+&MYF$Oa?0a59$k6UWT2W?zs4ns0eHwr^V5c#YYJ@+*?g9xi&+P!2MqB@xb z+;6p)X?+E8yDxTkEXWcpvqA7A}k%UD519z`fA7q{?Wc zsp$H20#+9oK?QBkS=*;;@+Oo-eTUSTPAQ#96N}6;X)pl5V*rcA zHD(7BBz+oLZ!cPTQ@pX2WwWE$0+7Q)2T*@S)A~6*KjJ7_4IDR?D=@_5c4qU(q5PqH zFNW|fgBa61j3w zSzakqbAN#>Jl3px^8_shgYEYK`p9ksiQpnV&M6+#0_UQ~7;iJKxE}BE>0dK;)&Xsm z-`0F*@~fo$RY*~qp=iGSNMfkQX@Am^n$#CT;ndGyT$iNq_b&X`fVfZ{Pj5V1c1|~t ztubi(_@K=ou;moAy&VazAoTpx%wmNdNN;#(BSaIZLXsQE&0vXv&F~%hru1Wx7A+oS z&aJrO2AQk#Gs5~}A~jKWV35c8698Sbwpz`fqC{lK<%}1ZXcB0)Uu^lGzx_T5b+*j3 z&0|0dKW&2Ii$Ew!OaSv>ycjaq-LTU4A69E;?kkTR=!i%GLzwPRVZi3s+z0YlFPW~z zC=bAQTxFf3kyiGgS!~v1-%e2DW4h_zyjQuvQu94CsPK;%geiMUM8bU)Wc%sQpM4nv zG}#HTsWyqtj@Gj3ax_|8yB!@sT@bnf$7ai4jz32=)JSs$;k@@0QDD^kUDo}eeoRrI6Pq2zGtd9oq?vW1K&%RquGy& z8>RoJ-oGdxJES_NlRtG%7`3(t01j^i00+!B;kx^DuJk1oX8#({`M$5JkEnPgHZOLj zaDpLE{sSO#L*Ma>K<;LbAP@Hk-o+c3I)=?CR(~u!q0d6;8&By14Kj5x2ZZnqmwvJd z7mX=Q5m*9n(%2H)^rZj5p?_PTjVUdE7Q^11vz=wL!V}yKUB7snRZef`(;Gs4_`NiL z{L7{L2lB{90e}aFOdaa+fHY?cu;~q& z6>xz-^Et_}hvPNIgCy?O34ohPg#lwDpDc>-AqMaPWGEkUoq=Y%eDj6FYV!sMntIJj%z~OPnJBqFwSQ-M~1uIBqBEYa)ZZesxhw zrN{&a3EvRA&}~qxwF|?WN#krI9>1XcF{^0uvzYwW`nqG99D0Vp5t9NGW?sI-|s-H1oUYTO64Qs?R!`TWB@3b$9G zjxGx@o&RInrQn`G?|EubO2bRf(}ts1L7STz?HH4Gw?Ss^`=?9llbdC;E(j8j_&^0i z`B}L<6RY*@5f9~fCV^sFnZ6jxA-rkm>*BBagc)KJ)w#>%#K+g~Kv*fuEsEBdaYYl~ zuVtUsm8{l$;kDQb{~OdgJ9g;VWo>Jc06TX88Xm7cdDJ;EWAS5*bAEja=||I`Th_Ht!ol0l*Hx z@&d;lV4MIf`$wDpS>_i9q4Y`y_}Hqb^gl2EVTG}gk*qqv!~X)5Z~rx|fBB=ozA)+! zY;}xpXu!uDW#s<&>ObQV0?^JE>OPQ4NzLVy59PVK0n`{BEFoef(yc?>Xd|PjYF~J{r#9!E&%q>Xi@=BI?2p^ zdAT+8&EO9P)C#hpx7A&9HhMkzKdE1Mwb8?0u>nd#x=0_NBoZBL08LRZ|#phtvfq0K)>=n1(C# z1f!z@Y)n|`#o5CKaVO;#pt7~vVm6d5*@n@g3iLLP0ymRe7#-lbv3++xdMvv>!0!yi zgWc$Qq2vLDW^ao)YTA1c2^e)AK0nwU)0=Ws%OiuP={0)VdqSf)kQlW)Up3~(S$6Hm zl}N1=eR^f3b5SX6S+pJK@%)I1=}NB|a4mDNT#us~X8viOXWSYOVAfh5j9Sqwluw2V zr8CR_tqgAhUUVcF{ts=n7x)IS+(@elRxq>+_|Fy@FhIEsO_qujQV~rYz7n{1;#TXx zsj;C_9Wq9->NmafxL*Kw_`St<>11L?k1g=U20Ki8jYhtOVl(L?N%`WiMw0B%c&HWB z=32W)3?_qt;MgPDUozF-&+d~bZA!JKgn(;O-&JAH2mvYOQlRNV;Yv+tSRGKDM+W!v zRf|m=5-F9FJR0vYVN*DTDAChT0f>}2?poVnM1aI4bOc^ER`~UUuH7&;O$KmYO=wp? zxx-Nil%_wP**Shm^ncfWqYe9J*-mbLDfAVsMXKDS9T6-@6Q`1YKzlvRa-*Z4e+!FjM;5hYUGxQlK` zFExx$u=mIStw4$0;@vc@hM(1k9zxObPNm(7w-sa~?b7+v#{aGb@O|8mpyOvZ{aS{s z9Y1hmsQPoj;E)7zx?P|}ZAr=nzVLcCSZwz1BsK;y%WF@Md7j%1hKUN5O2J<^CrrLY z>bK57W z-WzB5U7z_7!r!Mvz*5Q)nfy1P+QdC$x+Ze1O z{a3-1v?l2y0Xy7!TO_oa?{|vrb3O}v+9H}GA+6*hNz9A@`8kA$4lE7~euwE5fRSO} zC+yh15v%yy;(KZ!A&tPp`uhK2fjNkfRCuKW4|y5!Cn3?Y=(cI2F(p(%pMau#FH)q) z+E4UXzNCb}x^H1Vz*LZ1;%y9l()J#?^8xG~4?dUU_qiy8^@BW{T8H~&Yy7Y>e8ZjT zR~uzO_XufQoKg8(vwn&%xEzi^H-tW7vh&Ee)oN*3;dG%#Y^54kuI#Wxpg?>gRVgps za`*&P`Jfu7cawZz z9Gx$~bwHz!AWg)`uxn!d)EQF!bs^PX9JzS=_#V;nZkF<3u@bf-ZshHI3JEOMh%Qu> zGveQejK2dL;I2HtA+@^y;nfcOc@4n?QOP8G#ku%UKxD)5{sIB0))rAYwtW37j~_h0 zR~iwTPtvJE1N?ryQ=%Xn3=G`f3D5FCtj>`1tiW`W=jQ+%*`Ci`5s$*?R^H`Jh09Is zlhxyqh%K=0K!+-lXo*J_YvWuZ(@G0+Q{S^3v z(4wg8i3$@c&<$WSi>30Qt0)^Mf5t`+F>Dp6%H@?_@2{`i3H0;e>8x)uiCH2s4>y1d z;QJ$Ma3%5L_z%ec!w(u((FjV!(V~My1}T7g;9ze9nOKa#2(6PvON-@q0O1z46gNZm zg9FeRLryuC$$bY>9ZDNF!)s3zD7c2E$zm?Pc=kOU9^%MVXk@R(og35+JJnZ;<%^dA z*s{eBmG-+T;ko6y=O|aNU>e^A;Q%*U3C=Zcjv5#e1mk~9@DA%uE%Thyy8NO7~B3zosKY=W!SUvJ4fK8BwW@m`t_14Kbf4b4RxNw5TE&u^Wx zp|o1{%BA|SD{?64bmJE)&{yM~PIlNYI9jwgozq298adoL*N@-c^XX@kGIy1u`)xl^ ziglv~^2p?v;*CZ|t!jr!u>n=3Pxv5RpnJulXL(G2sTBW02|#F8=mn@W4CyOx)W^rO z#c}jD#?F$MVg~X9akPayd zLgM$kq5Za|8V<6Mq`@``$`gtJ{Al&7-sO&d88j3EGK9o8VuCmvlBNhm0DaNmW0tM< zz~NFeB4AC|^zb%LKixwI?}Y*FvtFAhi@i>~3ad<#jAadk;d`gzwO~m3g>)tm*gHVY zUd2wib26Ej5EAN2_o~aiQW8_wze{tTCR$gCGO?)yNEzAhwM|qW{Nz^!;1$ z8(Whp_?4DtO~OuWoY(M|JKS$vh7W!*muNLfcVh=Kmb)&LmzoDAY5WZjM!&uIH{Sn% zknO>(X-$5Nr31VGB|gOV-NdhxW#W?^R-_|0_6*VeZUrOEu3f{uc{tMk=vR6lUKbhet*B|=s_~Qfhx0v@bMv2 z{NJ#>{iXE@4TFbL08YtDXIbi$%p^AC+Vhoqg>hGNLfT{@QCW#Tg`ILl>=oDgHEOdv zz1PKu78@coOG#YaXQP&FYtC0DXMNkasJB0LjF_%;-KQZlvSSRL9s}K2SVG8R0^C^I z46kE)KbE?n`p$#V9#R7X)gh(n3L$C9Dox##krM|WS?2s6i%H6*7T{J@8Lnp+;6}Ti zb3LxIaD6)Q!|~z3Aly7h%DWYb`sj9l?%-8pc_(GtSja zIr?QKY?HVp!NCwc6?s-+mA`)^81n_vZSx9NHB)T<64UVJKPaGgF1{FMmBih zPD?#Mrr1eR+0Pbp(?`02raz(gqC;iMprRu>uc+H7l$9LVS3EGm!%>zgn4Lj!4wY5t z_FSK3s!cXD(*Pch1<*T{UX6GL8oNpNcT_Y(`OPY7T#eSVsLU&N!WR|kIJp5I7?v7g zd0BzlG#>FFw@ZVlQp1Q~@6uHB1{>qwk0}MpBr#fTQqxs5qJadviKV~Wr5<9DYDN~o zP8*$PkDUR$%_iKXns@9BAicYa%2`DZR+u1+zK?HU_o_K^rmuj)DewiLDg}%ankxTN z5KzDWa|ctNWoU*suoq=Y8GBmcH?E@I0!(^jOqWc@u&?!r-$$^sxlSkvEr z7B@F{8Z!%+IX14ghT9zf{*0kL4|T}>@{{o9bu(;O$Jv5@z?Xa0cPC4MSo_QRnkUyH5JEI zX&&+-QhpQIc#RZ)oUMwAxJVU^7VGD!xXrHrRi9}a18|CPcbo@)%mPt^=CYn28cv|q?|dw8lt{9n1!QH=4tEZ zG62`SOlAWEfQE3#)**wrk_IkEB_;t+qi~3`#8}ZWgFrAAGSJ(s^G8~f)kZ6w?r;J` z6KD5(hh{!8uET`-bk&t#uE}*Dy4Tn0CVID$aGIb)d~AwcUDXT^D<+4vHOfjTbwmJ~ zj-m2jG#y36s(m~6X$Tx)L+{xcfvQaPmu`X0t`^GM%{OXko;Dc zU5tlhGCbEU$*!S&MTRLCQf{}0Z`oA?=`xq>v-MhffWI$Ne|>?+iEki@*Y*S){#cLW z3WVW9cso}K|60o$tBm2muCGtkU&_u^sQ{x(;__Mkxn$XTjRAn-?)5aaw82@2J2J5i z$&gPOIqg}tf=O(4Xb>*d9i9_4mir?ngw-RNo@niDDqreV0u`aG#12fFvwj<~tp&dQ zNFX0AA?I;vQ-3PCJdeRJ<{Bn%qnfaB%^ih?J{bAEZ~ys!-@9g-wL(<|4E^$ z{c)aAL9w@k?Ow{Vvx(m7nju}mt!us}bB$OaJ3=5Q;VF#x+`hQGeoN{wnTiiI>|t{; z$7L(UA?B*r8M@N(fA;}Hg|%>SP4K5L?P!S!HHl;bE*Eq#q!apNflM?PxURBTYa6c8 z;%u27?bc9|za7VyGtX=qamGp4`z@BiGhA;H(VwFRCrX>&4Zh$36wPpWP>HH9%m)n0 zp2vsVsMkRO#P=Dph=|ctiln?5$IH#0fTosh3q?~%Gdc~v&lI`k*aMkm;9lQN!4|5s zBi`Gawe6YpfJY<^DB~^c8hK)__OlQI@1hn(y>${RiOV` zh~D}SoD12c+EWI%Wn(l->24Y;?=@{2UkD|oP0(oUB^U>4z3ib^BCjEY^DryXH zC-+LjnUHm$C?061Aru4^Gn(-%5>2NONX#!;5l%Y2|L!&1l96g-e2zm(%0hgCsJ^PvI9kZehYE@kJut^bvlp0B{8B3K8FSWi+1$hkBu> zdJ?*ANp>V3;sA*#Cfmag!4M+YK{$A-likaBiQugxKiF`p@f+W4PnJ2c@dZXd(IeWL zcI8(AZGD*KLbyH{-u8NOEie>%U^>z-v@f#|I+@da1(KlIcP@IiJM)MVD)utQWFvuH z%O5PyyU}TsTM&_n1XfqP&KKX%d>*yhsI$7dU>y9x49<3rCUEWEQOEf@%50$%{ih53 z+AL0GlgmAn9TjHVk&Yt7MKC9*+Dy%-Zi2kj01*bymp1cC*)o1#Ws#wC5$Qg`LW|ZS zAE+X;fHsK%;Ju3OrF2Q`4E-gruiR#*M&Fi|G#?-<6h&AeDQuY8sQ*h%P_2l8E+EY( zD=iL*afzd>b`MgGPLE;%ZCb6(Hv8-s$J5x&Gs#+uC(ZrkXkqGyw*@VyK~-r$UqVOv zmA5DyhNvSUtI$@KYh9)8KapvL;4W~OxCN}dwbNW5Zak?&(5YFIIo(^8W#Gg`o^H1Z zbj8sjdg!=TXYndu10-o!)D11(Wa8+}@6}Plh?*DS$+L~exayo9Z?6^X7+sSvfu_dA zw!V$b2nWl7(ox&i+0k4atf%E99n+2GPRxeWu|0hy^9F5t=9p`~X&%}d6SPH}5ztFd4XHV)zxrE2mg1lLa2AG`^XH3ckWB9`Rs_s{;nVg|JK0{$d+?Y zj%x6Jy(=hedn7qksP5sT^%FN)2(~|<@u~bZU`b4qHjA1xYE@BjJf>6i}L2h#(viq)Kx+bXtxJ-YjD~xt_)M5p5X;95gBw zIPaJYI(|KJFgja)IbgSE5f}+MOjPK&-jEg?OeZA<6{~BfwNrK-o9-*pr|4XuSuhvL zL*X?bZX8f{<2c1{(8~pTcgY~lY1g^;kd%<(&PI1jcpHK@`R);m4M9agL|)!z4-FS&b%<>e>3> zJ2A=BTU@JqM-a*?Agq3FA>j5v?2F8Si#fYKUg7&ZCGpz9>}wbp*SzM1u0=ESzR|?l z-BeVq7WMrT6}pSk!o2h$&a~R$;X^1pf~nol3FxkW;fsfevg_0`%i)+WpblP>d*BGg z(+JpJ%8NH=n;)R>f^pg2KJ`YU?>_f_ClABd?w#FDLb2VBtvcxYqz?Ag8F3SHIs^JT zRoIV=La`1?NFrf9g;wtteAxeNy~n}5EF|SUGTqN>!Js?z2r4_3%#m=P54mV|lz!ND ziAtIh=Rp8iH{QfBd0^tt)2PrN=}Jbh!>QUBh6?TbbU*KK7>55S4C%?}?#M%vwBKi> z28&J`kPIQb9u};8lU8H1?+g}7ejJok2b(H)n=j^z-k&>O^pziXxh3dOxjK^C86G#} z`WUzu{E5daDNNh@GxmDhfTRdyMhGM-3g>c@i+57pd4}0`vzTdU_`E^0{IjCW0rizU zN9YBexnTtR56&Xv82UFOb=2XM;`XCVto_-{I#1YDKTMsIGJRjCh8J?R(Z&8BazeE=N9;dZ-eC|42c!pSWmW;fM`>#z&}5_Z zRbmJF)Lr_d7;p>nsMaK5nFW?-&6rVDWl3^HmSGHbLSwFE%E!TFjmk%-$G7t=cAId* z&I`C~s$!OFubntUahCn!?&FEf)tWavTvz3mh{*=qf2z(z9EA-UF6F-6V>KpS^9_Nj zqdmAUkUL=A1N!GUzbZOsHFQeJF5cT@TfmsPO_ffbt#yXkV=*dHVl$Yp#cdeF-X`e~wb;-|%;&`2vYqfVcJX0@3K5Bf0y`OFJ|lzRH2K7*XxDtn zI)v>=tE=f*Xe_Dhr$VaMJXJ?f@>_xF>)&nCEBR*Gqrnht-McL)9z znoayZC;Tfk18KOyBfOaAG&>Uj9VU0d)5=0e;kkanZ~Jy+wp!tw6IrZma<3$#;Rv*3 zxP6FVq~0o7?ABNxLc(M8cXiO13?l)aDHs9=w z0jm6r_gTZ8EO;kOv?7*5IlQtuBJD>yZjM--+D z=cIc)X-jO%5uMCU7i!h>T6{#Jtx3KRF4Vd$cXDPjHZ#L6tG%9T$s6eI>fE1jEf#j{qOU)VG?!>S9hBvV?T zfCfk9-|C-U5(ImXThv!orf|MlZgKa6-TkCCr`L}SA}NF)&M+wYDPwfH1I_GnSPRvI z6D||tzdo&aJaoS*KXQ442+AgTb3H2=Rf~=`BT)}(vlYHeg2uCoB z?!G4UFwT`8vdi_EBq0$G4jw#}ih98@#&*a2^a4q%qv*l z{*{&~jRe|-bcQG=XIN>Du+pg4#K{J*&u3o>zKf-AF*Ze20>D##+Et5Adw+BEkyTqE zB^I|9#@Pmaa7A;^FBT_~weFy>I&o0qG)zXuZno1!yM}&T%bo+6Y!9N=^-bw)WuyCL zGHn-P;^>`~$2zh%FU22W3U1jL23k!{i?mioWy%zDRm2gu ze2NYl?7R35=9(E>-TaG#sOZ?(_@yQkex9g4e4lNwLG@_F;a-NFGG@^g%7WG91;R$4 z367aS2nKvZbzz4{*wIJZBlBDvq5!ZBHh#O;%VeRr-@*u%bpXfufZ7F0cZ!p7!oC`F z<<3=fIbgHml2Zj1t|U8!86Q?(yc=$dX3qcOUHJ(c0AvU+{X$uQ@ciZ{^y|7K7E9*y ztZ%&+rlOB&4zKyQ$oP9qSrAOQcFe4PPH;B6O&G)Nue?59Zu&I5cso{YqX9$$Q`1ZE zr>=h`Up`Z>37wn-Yq(QBhR1Ci7S219w34*^j|le%=e&1}Rak^`s$!h2aQf0 z8%TOo0e$?lfUwQ&k$Ww8g&fWH3Gek!*~Bqy%5)Y_j}!3cH6Q&c->%C7<#oJLA|RRB zPJA^r^S&&`%^MYz9ZC?`Q1c8K;MBbU1d$B-BJ}R8Ssz*EJi>f{82+?ryj1$_X65b& zpqu?0LU4GA#Z(ts7!oMNon2JF^GCaZyO>$03#J*-&Auq}+1hx*Wd5NhkM50#mIH%M z|A=sq4j(tBlZrDC!)!AvE*dUmvag)?p#s;#?=PDH4afT!y@NrjArNjMPbU-Df4Nv4 zVW7wQub-UG-(t-Aixvl(*kUa>zfBrFOCfMuYl6PaqYaYj4=NeXl`=JC8uTT@7U3wg zjRAF#1LzW|wy2Ds(=mSZ=l@=@CreVm6n^yaaT`fu@8|10TA$%F<$Ud*`SESg%+aR{ zEXJ`49a(#HJa&7iz%7vgA@jqrJU?h4uJ{(|H1VtbXU)ySF7fkoSHqLG5D>FE!5d5{ z9DQ_mB!Id+YSoA_e{_PcqDIq2M0QS{YcyxeAy%!|;;}dTIszU*>}U?0f6Y~Cg#eu} zmAv!a_uwq9H6FujB*abiR)AALl;x#)TfGtR^^oRjgL^JA)e1=#Spg!jA~1LnbmQ8*y!o0tO;kv41f7pXQee!a~_ z;^n8Xrv&%PwQY=b@kntvTWAusk2=^IJfh@0$21)tjDO_*u$|;KJa~UMj)|X<^3B}M z$Q*0bf6Ldw@l4-CGt9m>ftF(foR-X2&Ht;Q`w1G2nq1Ru43Rh(X@5hbe5|H2akoUz zgk6d}2+oN(iQ!EsSRJ^6{BDo;#8WHFabHpBAayyK(&4eF&U^}y3+)>kpoIxKYS5n9<| zBBFT~!Kl({!$}e~E}Q{Y%sCaQYFE-K+RuZCeX%5}f|1nCi}!A~$(z*jHiH*r$MYv&ZZ6v5_sBguQGnjW>QOAw*pzg#rz3CEbkD<9L*P8q<6pQ2=ynQ71faNpm? zpji>YuIS9C^n8`_@@lqU@L!^K&HI*Fe%@1eNZt6M9ERO-FGll{2@ zpO)tHYpAu&3tb#iTwcfSKQn>8Zu#O8EawIaPgKMecA=8?ryAriOvOf*v~cb|@eIN1 ztOryXnJ*6Ltg1IWFPo@9i)&bH37tEmk9ruQ?SafA-ZXUjQOHsRiPh1lenG*Q%Pv0} zBK^T(SE!OlVPzRfO3;@+NmT|k}Nbk_cT7vZmg zrj@v3<q4}Z?>ep+|oH{MdS7VDJ%ZnmEXa%pPH(htM&`FiWHb#>vq^ThB>aTz+HwPUw z)_t~(HTNFmjpynMw@RJIxG0BiPWKVlGr5|E9~L4n)p0=*)m!`z*KhPVR%XFQOaSz7bM#OtJ+wOl_i zq6J}N?ul1L90HkhKoq=Tb+J4DwrIgYu=;>)3Inarb}Ua1;*y9jINGx$SRA>I{@VSP zF3)Y``Qg!l$cDcoJsCXtl`(u;npyfl= z8l*9UH|-0ytf^9#`FqLH_8&mGB_8X8G;XAL6*PoD8Qd82zi#3asU#)uOWCO$>IEX=c=b_K z4F)%yj9C<{sXiM+d7+fhR?jl>?+$2Ro2yL61ApN!BG`ivts_Q>=m{jV$2il z+z{Rqse?Q~D4k#^|NKQyT)9T(wZ`3k36K1f zo+9=q@5n{q9Jiy6qRS0vUzN+LH5Q9%iJiGa z!{ccejA|oKY_|6Bl^90v&S}jW>44_KawjD(Dn7G~3<+zA2Y;7t-?gFpCAl(q(@_Yi z(!*9PS_LGQ?BMmh-`en+)FPYQ+rHq@@Eb<+O5nEOsH?=gZqzX@5AQq+K6sPK;xL}4 z8&LKaEKk6k1yIM)6J@FiP8Lo`b&*FE;)qTN1;Wsd$f7JtyKe|pnxyYJQwulO2R46I zZHqx*|HTO58zyfiVm!R@L^t#H!=s6<|9lw z-AE;QD1q#*>VRT?V4Mr0^yx<#s^%X!<&XRdLb%*+U3e)(dokSMpT9F|JRU^IcP`wz z)?MdZaRKV)aJ>8pNVQ3&$*{Bx!S8N|nkANMb~|3WhPUt%epe{S0uKctT5N|dY~FFV zVM7ZYBQ{TJ)N5h`{XL5n2JcihUWc1XpT)Ay&ak53lUr$%7*r7tE1T4qaH$U2{mInUR5fbTR)(^xdEz^$>-tap;{s|8mkP50vsC zd8*5kO4nkzpB>Bt*=dm4<^keLy3^9zqXX8nx_#&<$n0|#>n2XDJ{$>ALYm!%uWe~r zO~??$?*~GQklxJqZ9!dz5KPr?TQD5Ah_Xb}CZF+N#4t`sWhz;9;&Wv(Nd{OEQXfSQ z%g^`N}7Pk z35F0wrYRd-UUKW~XcZNuUE1o-tEFdfP>JrBA)krSx1-i<>kpw&Df~|9EmYIY41((w zvFUi#sGI-fdW%9d59%uIr8I6y#|!*D^#aZFtY)<<+ylnA`CHo&je;LI5-F5^%0V-H z3Yt5tAnxS`R2K(x{*| zfglfO)FHc`Wb?RkiSZEwXOE-#Dp^!6W+>3V7nZR3W~PS|ua& zc@z{k)DeH&{An`!)-#%MuG(&2+@|AOFd(DWa~XLrX3@KuxO&9a-qR14toW_dfYHcV zcFnVRcyF8E43?w~W~OreP~}xeIN+)WQ=d66p=1k~1ydz6c6(-?Nxtb((!%LE7Br1dW{GV!n> z&hzcKvll8`BOS|lF2JAQf4aIsC7rw~`A!YmpgmeJQCz*OlXY8;U8BwJKKjxkXVe@O zRQKzy!Ioy$M)mqKenhdY{%(&e47Iy0Y}=hTF}uq0jL%F1+E?N=A{nT&`0d$o3xoy3g`u!6^|~2Gwv2`8uikSSLpuh>Ky$@Qe;do4-Q!H>Az=1D(H=;jNzXCs=XR4OGMBhfmzHfc&Z zIrFq7Bm++#jO~B1JE7BA`wm}rD{DIBMC}}NwER#!!0TDR_vG7KbxP`-Nd2KV0)xOc z=hege6&EQZiu&pi6Yl2Z!4Q2?AZw}bE(7{vTfSHcDF@FYV5kslv%kEl7&|(Z#itC& zwZqai1aL0F`Mrk8)UxIp#KkAgX3<(6o#o9~tfnHI(Svvjy}k`##AR;z>i&vna?nec z|6!y!*pg6x2|#axX93}fMTS=+pXBYnh%LJov3$%esk#_l!ufgE-MQ2qQOl8wB7-E) z_jdOvf8=oY?v$Fm@y_M}Ck+mf^BXRkbzW0_hmeGjPyf`?e%!pLLM^wf#&$eTWS!<#r}S(y55fzy^7u6O<=Hf3e72keN-&W7R~ap7 z-Km&O2gf_=!IjBk#)k%Su%FjPMoYm~;ggF<-fJ;WUng0SDN!5@WG0c&z4;aN9&dXH z_H6p7C>cSauJ*ioSrJ6kAbm+}AGVSb{sDu6U!!>`i=(=mLf6e5gz-C9hs#IB#BD7D z7{k8w%?;TK_T!5T7TI>{mG7=MaT~P{&SS&{eSBh>OUTuS4|Hw#W!#HAOelv_9zW6g z6)M$1k$hF!qEUVv=Os%Oc#NfZD2N^GMqKg8ka;H>ee$j(M4*FgqyVRS-=+oo`PsY1 zRILcVaEQvjZbxRKG6ZRFzmYA`l4NIchHA@~vl4f~ z=h%z>CtcRJ(RIiNbw%fQrqf~bm0V7x3aLjE`XLZiv{`c#AF*82-B=h2_7vSvTy&b{ z<3mY~hL@KX8nZPqZPqWHWXrS`+|ekMAOYK*-`WvTG9>g8ckXa}E;@=#ZNXEW?pXeD zd~&>UobJ>Vm>&v>ALEGAz&-0Vm3XDOl6=_Dpj^j29}>SH;|1C_G!EylhKf5PZplt@LB7lf^l^o^J0z zW+?r&U*XSIDryGhayNukO;DIrY6*wS*FVz~6A7n7)* zekAsudeMP^O0gv5S4Ph2)BUmV)OZ+C`UsMU+=@HDkj`@Osqv=Y0nFo5BK_3c5b|Ui zA5xo~)wD&YlLuJ5DIDIJe)#xIrnxWO`22=dDpVprYk?CY8*H0wp50ExVI-)ba#E2uGo+HEYDeVeV#hVm_RDyql8+fTO7&qRug<5X znkgQKuh%axaQrDFobGG=q~Q7bn>~}^q^gW&1xAprBd8eN>z0}||GiHejecg(=iPg@ zvBlKpD-dXKlA&k@0x*(O$1O&Bea=tFmi-^GxC-OMb{CJblApldoQ!>bjicErny}pu zPv2Ur)Q#tXp)dC7Cgd(pf@yRr4YSY0am=-r+Jh%q@u-41u?x?bwYf!{X5M z9NrB#RwafKO4W|RR#Di@a%Lhxu*?Ur+j>{c-6dNVp>eD)_h+0EzaNY>hlLg@Y!%7m zU^&6w7R~HFX>RP=1I0hSJ<**S!1V=|{sA$0j1!>x6o*vpIx3HQqI)K zq@ORwk>}FoD{i-!*jR_$%Vr|%RuoAq*nQ;je6P{?ux4YdnraFLCxpDNTHPvY>!2KA zU~gqyjRxSc2))aF8!?;KV77#5HlyhmkZq(lp4(j3x8Os2%Qw~H$D zUbt9|>P?=q;O}G!uPAu}4uMA{L{v9iS11H|Bq_0x@0GwaJ*XU4sZqeFDw1z7#P0Y= zmTlsZ1*AJLu&R#NSd1OvrgN?z+z~(@$_H*C+TSL-eN4s#A~~~k%%H-5jFl6WXrITD znqS`Xjbe#`E(Q*9)^EzNDi0^&e-hmhicg!WR86~$O_`}nYv@?-PhSJ!8~X<9H0AU( z->TH2GHxJ;pBQ00GIpe(cw+r_Nvz~jN61cc%On6z0$!j=g>#3MCdTb*lH%{kU}sCf zX8o>8L%M2EN2x*2B7O7m?DpXuDueE%z-L@8EK)I_RQ?%m{EOfpIA<6i3*B=$vc{Gg z9OUTq1LnqR72Xxjoe>6dK9RULpP?En(yVEjt2J6mzV5xf=oEy=ztaG4(d4709laqH z7(Dcqp`S6!ey$@8JM5)|)20x^R^iW!thzLtt9K?rTfU6$_PJ)4`xSUtDs^F#GyQvz zB^J2QZ8~P%@wUHldY~jT2+|MoV)0swne4MhFx8X^zx9WK{D4B`3Z1$6YpW9t7Y2hp ztit(H2;~aBp6QyI-1jLV3BE3ci-r@GWWGX@LWWZ+++B-?OPRj&M=yCDns|UI^o)*qra^5IgHRI2^;F}**@37+ouzYMBfU|4fSFLVG1NBcHCo+`2bP!+VK zEFB3exzitua=z=%nea@YbkVJke(1q_U0rK=1ZT~aq?+|nrOq+7Kb^_q7V6>v&39JE zuWT)4A>xnh#@*NFxvhDR12R0OdUCz@gYe|WRNdW$q7k)L>)3P}_1}WynY4c8OT1*L zp!BN@yUHVOca4kxZzKCU+j!Jtv4yOR13fEOku+@4oNPnav44yVf1_o_k_N+ zeF2eLyu3L;MlF0X3c!&4ygzWRGZ_+^nJ=dx$J2*)rsKAJ?Y?K%Y2nd=PoXZI$6c@R zQpQx<=UL3xvK3+Ucut^6Jh=VVkXFaEzrz#P+Vbhu)aL1Neg_NNJ(Da`%6hiBGA?oh z@v;nj&z*|lTk6O4M-UQKR+GeDqP@LjexKDU36S>=`n>>H^e;i7jgO+3v>#( z^u-ywM-Zy){+dS8|NCjwUp5icMIhAKIYhmzP+D!pM>Ge77(OOqW)g91m6JkXr7(i$ zv4NynUJ0vFC9{BAm1dTe-;!~Q+IjgFWqDCo2V2+#iD6AGfD| zCqnDvfdi)<)&i(+yv0eNswyf(MVe_M-hWF`aS)!;Z{1z!^P+rMv9Irj&}KL%e#-fc zBZ=o~hKp+8(P__BFfy<{PR}gag71xGS9qnWG!k*4uOT3XpiCH9FFEWhH#|Ofcib|NZu3C;-U9&5XoMUBHw=hz4wO%)bN|c zi=HWvf}y~u`_g{(r|NMQ*EhtzRpk?2G|9!iK?2k#%cPEeB{j@EZXr(dSM%~S= zQ70#-WGFgdAB{)+-}3su1_{A@V5k+upqmCZ|HdrfEMD~K5-fJOq3LC(m#5oK34 z50+3+6g*=)j?M8C8rA|muwiS>8yk#}1gSsE+lS5Z3XIXh3w9=E|GZI&nf`zxv!rF1 zv3SjaX`7lu@!@NqHh#t`YhrG}22JHCj%Ug71&%YXeVY8-6IC3d7#MLpqY;N10%S(q z_MMHt-*qeTA!5~E^v+)f1_n`27sn9fWWGVU@jvrlo&2qR|Nq_xDq!$*^>bP0l+XkK DgWrb2 literal 64795 zcmeFZ1zZ)|-ajk|3ZgV3Al=dpQcA<7MN;WacWyeQQ;;qdL<#AZRs<;#0g(og?rwNz z2#$RD zQu^qCKXA5+;zH+g-(R0Ockbqzov5mvIn2P=40?`|P59)Bl9k!W($7HmeB%g2iyXFH@DO`HZX?jpFG3L%*xKd%+0{UuEfGa$#$EC1^5p;4U}?VZdJ)H>VaSJ1uZ^+seue zssh!87z6W)ajgqoa*Wh7TnUeVTO`=C+l{A+SnRfTAXf^ zoe@~T$q#l;R?w5XhL)CwX268tD{b|3fXidLv7Fq|wY1TP+ML`1R>DfjCQ8YC8+a7_ zunC`17WiVJ1FZUZq&z?@hSTB3rxX@(6joAGGlcN)=v%Ogic1Tzhys-Q@oi`CG>3`X z=vW!aSn5N~fEVk-P8Y<+2`mv@rM}b29WD-@lN*LMXY-s+3*NY6?0mMBM| zLv2srb~4h=($dV%*y_iddX^RzP`y)jpT1GY#>Ud|$HxpT%}#fB`ivE@@gLp}-njD% zNx{1+#`<7>F8TJo{T@f^*vWk=y*m= z8%s;zecv(d`=8GqGKUF6%|K$G(eZR1K;r)IW4}?u=9|v^zr2oz$41{m&(uiBL|)g* zhDFW7%1n%b^;C=uKfh<%>5BedOw;Fpa_h7Ij%nPix@?@B z|0t%hpYHRNW!%4E88`RoGvBl9o4)_+u#AQ4MEd?-EHf}LVAa$69n17NbvZfySuEq^ zI%UsyTJ~?lG9bbLHT>_#GCe&WAWHhxG_rBB@vs3d@${E79|xMzlO_F~jpa{z$8qLZ z{|%W4Fz_cH$^hY>zK$IbcQOl^S?ZbE0v9YYr-c0*dA+|v8&CY-oJ&JsbD0V^Mz%T!eHiOc{XvG1IVcFmlKU0a*aZ`~P&Fvh)09p0b^(^uIPw*?-a2 zW1a%>;C~rUxzF_NEL#1Ip8lKg^faXY&Wp+j-_-?^DKL2EGy{?~aQ!AqW&ueJlIdSt{eKO(l*AZheq}ig8!PjFC$qn0t*3V3-ibDlZ$KO+dN zXO`h#TkE-harzLbjm2@v($N^G*8z;TFt!8A&IUlJ{tL@l{(E@Nb7sZ=9M6AO4>^;A zf1Tj{wBGz(P@rUEZ)*p*(%%II5GYv6`<3~^K!FhGKIrM#0oCZgWvs8S1LZdOZ8e2c zj~l9M@QbtmN2xvASsZvO0^DcC$?sD0f0O);U|RB{4FK=_ zs{1rRE^zyAThjSIn|Uy&`yu5!S^nR*9LsfPa|s>J_0 z2W7uz<-cTDPz(LrAesk2eppyqfKZMfeB*bZkRK5wP?)iuDliCCJ@8uXyK4~;uyOW- z2xtwDzgPfhj&DQ2FW?xk<_ZLXHco#GI{tPx>Q6dnTT6SJWB3a2#BTu>XWe=`9UDUc z>2{39`t5_K{tT-B17PXTqddUi2G|sU_4p2_@?HLR)@}X1YIAna25P2bXAG3ZzlWCn zF0KD-mhi_ywG- z@`M%tKc-{@z<~h#<{Pd5JY`OwK1SjEr6>P7unqu({5i(`n`_dsCj8$t>6`NWPm=(4 zoTi{>!uCDH>(5KUUl41yGsOjM5-<chA4=fs|wLN&AKnN6L2FFvpId~q#!qUcE2SC$yUgrISpI1m_dSOH^p=j9u_1W+MGr{0 zz+)^zAUGfByqVoT{lVN=UmrX$@Z0kNKjweOntO7ngoPUz@z-hc-|#d5C)ZDB0nQ}y zyDW_L?B4fj*w1;;_i-X9#eXRY`hUtU7$DNj5FH6cIe9KURV`^|bp<_}v*STO81fTY z0IB+?CC>Jk{-C_Ea99CpA0Tba{})jNae2THX&om^dvKaRAeY}H@nix2lSEK3e#!Sw zGwq)x@ppLne-lakT}bhdki=uu&&L&I9jrY0;dB6a%=P3n*>1GI{kd}_=OjgLE5S79lM&;vn?Cso4kBM2 zWbh)X=P0jaTwGjyRbC1H1F@3uM8Egwmgnf|(Tm6w-fX)9{z|qYEq=Kamw2A8`x~ET z`geDgk}q}Y4Xt#n$=!RKUA9y&1W$46=g;CT65VoUBo?#1_zp)+H<5zNv_ns2%+4b} zJoocQd#IW2=+dy(uo zmS27aEh|*`b#d5L>u{JPKYz+7Zq?7l47G?w{IW#(<&PJCv#LmNRSt9nqQ9)_Ry~CH zmkBVfAn@2#7JWHp*gwitjK3IPvEF=%JGBqBJ^w|uhnGV?uJNUJ5{7peT{Bwr=w*1gz0m94hye2Dp6qu5ec*qw$vlkH8_K;Wb2B)#!E|-_Fk=T<2 z9V`ZAv#<2ZjWdW#&HMw*? zeycAWO7C8Ovam*XBQVd(${QDAZ?3z3Z8VzIHM>JELI0o9x zR(9<KJAot+@!r6NZVObRI*^`Eb>o~*N2x0J`*s6<=;7)$peq%pPgJd529 z=d<>NE-F~p#JdL&>Tuo7r;q?V>XcZjqqTj@?$!wPp7Gen;d|&+HP-HSQ&$skT6`{7 ztm@Qx+n3H=u~0r==3X6=St+NnNT4+!w@-MiSGPW3JsG{SE1-P^)Y-aBq-i8gjK}wH z;MT9b@X-BOI*x=(>TS}R9n18gP(ryuCh4+0@0MsdetK20LaOHow8f7r@3217TG$HK zdXvv>^;)NHqtGT3ap}>S)Q+ODza5oIk7Lo!C=|U^ESjMB6p_)yUn^EolmqIntWT$Gf3fL~%HHA&AF}ttnGz1W$#mZh+Of9+hCWc0- z;KCPbNFcM$n^ct?*6o8;#BQ?@tY(jQ0Rt*bdMo9m0f{uUVlRg?$?T_4mxM=N;V6kL z4QwN?=nZ?D)MkjRiD;*9lajOI(gX=bn~V-6a$OrqM|`-g zQN-3&_FSROg<8<2!kxImY(l@B&wlJ`hqz-o10{mFDLjFDTpn*4%$utAtHd`V1MnFx zM5fDxr;qys9cHmw@q(|)1}d|NN3xq8VdPm0+W$?cU3tLXe@fYEPj?8DZ zqV=SxrJ2R?;z-sW-A49ETPU=D*&C;43aSCF!MswN}0#h9$}`le1$ zx8^K+wFhp%vgZEU5)v^>r19eyq{l|Ya}N^`<&hd_D`-SUvytMOMd%@BFXs7-D{JAyoa>3Bi<*%hnmj&n&<7!FGQboUjXE5ySNIgWW+X|kJ9Gzw{O2~J^! zfxH+WFhx0oNOv2aD=jpZc61Q)dkU1aK5g}>c&G6y_3`Dap?E&gkHmErBeazKbP4Md zt0g4ax2`YDl|TcF_1QUX`71oPoL?sMV66FV-0q18nN@Obf)&bK% z8Iq>4cy-c9W-Myx-sL+Zc?mbgpw1~C`&sI%^NFJy3+|DK>LU474_7oD^3+3+htzet z`}rUGsL-FqR^P&%WuZFs8-*83ZPrk0J|Yvd6iP|!Ygyc{_TGf9l8FR7jH?>w{z55f zvDeR4PX|eYdgN+}BFJ>iK+L?$x<1FhQ_0P0AIxizX`D)K>QIi5q-}CAd;NT;%X)7X zr|NJjU7d=4Aqv`Pi>f8oR=y&Gti;B2UOz7<;N}QIUcB=={^wf@FEuYnJX7+~_~iXo zzSx9NB%DyCMEu3V@D9;H1)gwXuTX78_Cp>m46T*cjmH8`&&cuyV%kLa^=UtN4C52G zK3h6+Crr7Loprf&wc4$rM{_xdSTgE<>aK0LrUImAAnILaj6m6SK3N9CO_}AENb_*z zWOIAhm3gLp=gDV5o>L5WF>Kglm|0tzhX$B4jP2KxtG)XYcydpiE)5U@+98}+OD)8_ zcZg_3omjz zy5r=8;BmnT`CjsEM={iGeI2hw3F|Uw^_7wt*qPy%@e=~;3(Zruw;9Gz+bp zxObc#m#tA(CLW2C?s-?&UfGCMmD+0Ef$cdY2uwD$79a*;T%T?F|A`#^K8ei%fdsOYzH|@oW zZ)4O`yq+;7t1{5M01F2Vj%D>`(*u_q=dC{;$>H~SEY6-o9v-hO)ecCionv_I;(R2_ zSK)Y((u8we!8glzoXoc7b!qj-!a=ndQR*E=2Ir1@lXLEBOWrDs{izbl&zd8JDPwMy z8*>=U^S&S}e&wx#nOwrOhm}=4Z3Ky;>g6J-y?3NErt;`kAl}{Pg9?9=Z^<+NEIW{ov&mr?SZOzCEI0weywPX%DNGJUHe<)BA0n z+q}4hxH8ivep#!c%K=GU0}WQVp$<-@Q2LHmre`-qZ|-8PgFjb7={Kx%=KON0y;<0QQW#l8|!Y6^Kn5Q4b`O+&hbX$&+2p_Dh~Pni6YT zFA#-&U1%b0O*nr8#>Ehq``$TvPwLZ%ORZK@!pwL?wH31cW_G|b`~<(%+$8{_zw&b0R@dyg6Vv1I&&FT)l zAk1eHIh&4qRIt#twvSX!JY-Dl`&ds z?@1Y_G_+ua6qUSz&l3YvMn(ugHfUuS4mFsIHlZ^=ij!PSVsUi0e}Zdi@}g%M6kjD~In@!bU|y`q5+=rcZZIi1J~iQEn33UhlYg06xE8zo|y$9bz2& z=v7MVt#tmXNO|Mo{2K0Z<13ogu3`GdUttt-6tdA`P}`U_9m+>mgA~ozZvbQxCX0!z zRt-~ec3t8W^1Gal>4}rAiT2i%T^{0D+t46bPbYnF(_iI1lO~JtvsZ^*)ZrNX4%bTz z%Ymp-YF>&Z#(QtVO_YE3$;OAknoF8HGIN5!y0WeN4)Np%Hop67b;MHxj6zy1plM(f z^5cgFHgo>W|Nc>cumE#dhRWzrFo*r|^JFv~?bq^4IVCW4*}O7m(9aV{czVYQ{8HJW z7>xlcptXZm^v00Kh= zyQC?j&3W1?yV70bt?ES>VFPEe0#h@R1+h$|upD;Fhh= zo?#6`uNwREqVpwUJE7?4!U0|WDjb`J97fgp`J!SYaZt70u|~ONmyXrBmr8r%co-TW zSatW>24^p}nXS>n+9Okss~_8Pp5xs7$3@h8iJm><+=zM41p#S+w`H--CT1>be=*7d z3350#9A{CxBk)ewByW{24H`gDE8;48(Bk?g?<^-!it>Wub!Ip`d9m`H1;8~k{C@JY zI%!=pvMN6@AfM}3LFr~Ru-G_nP`ZO%WgyuZ2CBiC?HYZL@G>R*&a#O!3ZM$ixNK#+ zaBKsvmo$r>o$UOqRBL4juiViD=ux#Vpb~Mx@fru7@#X@Ed1{Kqxa_HM zV0ptrfc~_-ZOd`5YvX+E-Ahl~e;k3I6oi8NWs8y4f9&jAj2L>K=VG2Au)>^?sIt zk^WYW8o6X_WUPiyCeUIZM5~qUOCBCuV{gRiwTjM{@JS`ql~Ag%kE|_ zygXb{C>l7Uk~i{1c#Eane$VR_DxxKR7rn8>vCAFhh0CUvGT>Qzn|>;YUUhEPl7NO- zd(pzg!?ZlJdo9PO7b^k?sGnyU_X=QH9o1tER=JH(!7hd;J@9SiBo_%lr@2SM+jx1# zv*1zelaYrr66i}BA=kT6aaym6G!f|)xUUJg?yln@y0>_%J=!I)o0k7vvqz)ui0>u; zR46N8Ax<*bdhD|er4%mxP)I$w;rPKGnnV%}|0#9d=SJ?8;nhsPaO*fZ>&|39qfk+Pr2RYj9+v z*ol!6z&OnF5ymL@qCVm4SuptUq=L(C0@SV@6-m0D*KD5enOq{KBxaN7UJS>|&YIz~ zHdQ#`y|P9hb{?n#YaD-%LH6w;lp%Qfsd7a zsRUo3R!KTr*44PtkY!)VVtRNJC;nh=##V4)egz;6(~*t@634JtTkwo z$Kf@WgUZc&tgp$=Yk0nCdaqNLA8!(Gv*dLr3J_}>PxZ~g9AW;R$o2s=oo*lB&y`NE zaO>%GcOI+cMbpHPec_NyEzeNOMYp+{6>jLbmDwRmA{LNL&{#N*%cMp7lm89S<9X5L7DxBK9V!^56kVqgMpfn=s`^*yX%RQmd-<#E6V^o=*E2s$W9Z0zp{v#ykHZb4qo7fRzyWOH<=quO)_{J@Q86tp>NYYa`nO z z(?dBiBffmS3kex-3idq|Hq_qBO`ENJ(V>|EZC9k;L&~Ga*=&8!Rc{(F6HY9s(_1s1 zF;GnW{+Q z0>VooaM!#fGzfX~Z?E8TUN(5I;cqJ*`(>)A_A_t~Dih1;3)JGOKQkG}1S}4eEit>; zXqBj_xW}?vyDBkiAyr)B$`_TUoW-Zq6u=qdhpk`s3rR?e!4co1x^$Ic#M>#DYX`jw zb7!OVyy}G}jp@(4y3j(s;v zVjv+5bX*!9Z)|tDK~RFE8F;Q$(KPUD7;$GG3TEI17t})gw*R7E|4oIyK z;g#j0+DhXwzIpOPAa=M8h6LqL(5q@SD}7%>HAuui*{N0=A#4)znPXKElwOx_P1>@E z&m~J_o6NoaIbWw+K`egtlM=)Ug58|sqn|sE_aRfpJgL&^t|)~62F}~MVTOmJm658< zZ|?Lp+Zd_cbY1&G^>Uy}PSlYr_ge6aj+8W$p+(rvDo)r!{EJOgGy*oc1;P|Q+w{i{ zhsc_NmmwN0cjp4SF5+fRG&L58(0!U$Qs{fbJ4NDJo}Zyyd-0=dtn|W=%;Ta2^;vrJ z>w@;QrHkBOplEp_PHzoXUfxC`7I@h|RjI$Jy>Uc|9DC2DtHt_+45rBM3UuDyC|2yq zo(~Pjr(~7F?Fep8tL#&zo*q`9?y9H~F&ThT5b^DwudsR6lp6m4o!a5DmL)Cn`r@$5 zOHHz7P1j}u61}(M1iU>M#)_p2H@!dJ?I)Lx`%r2cf@KzhOFw}+m)^?beQ5<@Ki zR2q)mXe`qwSKr)X#JpH4sHa>LQ98N$lE347v1b7o@}JTkNJ&v5r-|^XWOO25nTrxn zH0XJlrp@oVzb?rjzS(MFH4?-5dUI;I#s8_0pUA2{@`o}FtdiPK?u8bQ(*gHEqLm_T zQpjNc%4+6Sko?H2wOb{czOdB{Xr9~S z$xoOM0~Oach0Ug9gO{Vy8uYc?w!$`QXAKMxmx^k&NJRZsRXHtbE`4oJ4ZBw9wneJk zMm#xQ(`z|+J21$+yKivyqeP=8F`KLZZE}OLu?<4bdb+?#Wy{Z@(I|d<8jeTvBJZU5 zW8UL=^YO6t=aS!(O|J0X>Ebi@E^|t2$+(|`t#9h1pK00UL~;14S{&KJ$y&KoU!Xf% zZ8DpCRXkUwZZ=$9x(+yxfL&cl{{Lp^WAV&n5lTftUaKJLY zw~Cp5rP#Km?f7Aj`D}WOh{put2-6Fd%J4V&l+Tf^u5*P3`N2`3M~#)blE#U)DrZVQRfgL{TL%{~;EZm_vaZrMF7hs#G*t!2%n`koBFb zDu!Mzf|dQ1ql5wuHJGD$nzi-B9s+kXD5%0_OKNN7fRI;g-JjH>ny>$;#lRA~FRQ@zKwnVBwmh7=fN~hv=nFZ7t6op8 zH!TcIyYZDCg^k0soz5@mQJ#iL!#`&y06UvSGGT8&Nujs+eBBB5=vF?@qu#pRR+iR4 z5lQE*vRP!%vYiZ%Np4MAf_Au6t97HE&Sg*~XC&0zl3zq z7M=Dl5v8UrxV0m%@=EW#Q`A{{yN6)f?#IvVuu68bEGP8CQ{gnR2Pw1VEEv_BZ^7+i zRuJ8EW>n|cxRt5vq!i_RD{s=IucUf3dVa3Zb*Fv6F#ug4sXv93=~4)p)1{W!_j#MU zMF>pr*P9-wcwB^g*(b;iy1%DO? zRq?O1{Sx=nZe>2N5ra)Y>wD(P6mr!sN<`8NuXCF7s;;oGR#%2kh&0nK`f$>fyMO}ffBt2Iwr0A%9m(wTuLbsvjHb;tQSmgY8cqM4I`Q9ppBPI z)QTxe*;-ca;Pz;$vU#h#-#(-=(T`@9YZ*TO;=}V+r0DsUnr%Zvz;)k)C^7^Z2)eFQ z`>mT!0HuIjhQKWW*Zly=Bhe^Y*wB<(r#W(y^?lvqBX#)OJYf(_xwLI+U@so#ORJ8z zB~LlU^?U6jvuKjL|J)~IUMokvEHO_!usKreh^(ryQ`0{@`A%zM2l0JBOFhvo_{F!a zDpI422^{D%M^>&p^ z0t*91raM!!^i>Y~@VvP!bBPtwbmXq{*<967k&`#H*~1x&ekFC`Bj6@84{9TgHG}Al z8C7l&<99Po3CO;Qi32z_h)spBc8i3j3Fs*9fjiUq&{-w&!Z{E;>ecg5v499##{&rve zqZyKBg#nPab$^_=iz2>#uFUXAlHF1edyAOw_F+|g&+u3rOU;Tdb*pc!jIs#jgUDxh zBX6rm-j>Ahve37yu{Xv7bFLUdf1R$<2PPx=^WsGO&(4#HA%)LgaVEQ;fc?^3jMsy>z|RZfISw0Log9KcGu(3C!J}?F9dsp*vWKR_ z?g41^rf=2a6Q<9A6K&OYh!J1^fQ#)Qzgq8d*i~N#+5&(yXlTO!FcBjwSf^Q zN?ZFpcUYyGe<2SXRh>0o9g>sRt<%C-pI5!;GQKJ*A^%+VXvyqLX_teT z!o@}q3(;;f(pWulkkHX{XwOlLVUh@62$9=q z3&19TJfC3OOYg?KJ?ycYr7ks;XRMZ3UCKw^BWzW(rYa+6eD zB#p%ln<7~QTd;;-SC0_Fz+^)JzJ)fWY$ihnX<&(iGfUrcY1CwO^>~k0fo23pWyEn; zA#tGAJoZQ{zt5<9kEt)PfV%f>;=9?CW->P(+){*QAa*OO3GF6^jvj4^NYsR_USDxR zRlfpWX7Xj+lWNW(&@Sn*LqCr8Of2ZR9!dI(*brL#_y(uyl$@+Q$;Y!Gq~Ar%xc1O5 z@K#LZ*Q0P~p@(s6dbjMyr!Ox6MN(m~!KVxK6cHxjCmUHO;MHo1stIGuX4>jz;FFtf zoV3g1sI)0MBfHMeKca1!rQDGvd%elzB+5-4iW}^KCWG}HK(cwVfyLRh4QF=|)|k(gZq|w;q8#O6KF? zx)vhV{Dx*iwa=kd^bNpn4VMklCh{35ln9fJ#PZFm&0Nj5KfqN{9s~EzA;(c@ zQw$f%q0(aLsEIMWJv7_Xhq`1PG>}Cu_!d=lPqLaksxuaYuLnT)c?K^)akPC>;dWJO zkLwL;6(y6*@s>cbMnITXvFsCfpIEz)vSub(Ha~TqED4HNf?abC&0BVyL9$K~T#Ew& zNTT4j3ABW&`jVpul#mpPE{cvfB}lAH#|1usL>5AIaa`|MP4=qatX440DDQg|DH6Qp ze(E)aTN#Lzk4Ldg4C7!D0s$vWaTrrBR zkPW~{w3*S6tpL^l0SHPYI-ee;=iCx;Z#ZD^2)DRul5Q;*~c|w)eHsT*-|jivt)4&MN5~rxE}d#BwG$ z@|l=UAwc!TKGap-;+#}jtvFzjTZ9BMki*#mO5bi>s1`U1T}iA<6A#CrmNkQt9M#^5 zb*E7-CJDl&)80$kKkfsb(yJ!L^S~97YqPjdIsdr;H=Kz7c7ZNp_aLMtEZL<%d+bs} zDAqvh)asspcnXQ0A8}0$<~}8IIl7k$Z7}y;^WNktZ}c~%k9YRxy0|hPGKAi_8y3Bi zd<#Iz0DUmh2HCi4Y+H}1slIFHdy!BrZ!enj)i@HY*3Q^`y}QOv3u!{Tv&OlT=RB~O z(V1Jhd+)H?WdrlsQHQeo8{iy{Hi#pci&u9L#bbstyV`AWew=E{z92{IqRe#rX$uEK zB^uKiJOxx-^l}9KFlyUslqR&NRuc)OPQ%-|3_bgDQk58YK&2ylMjLj%EDy%j3m|Le zL=LDQq+pMSKDi8Q)DRjse}Z*4_U`w%2&;2&da_1>Oi`Zx0eU;K2!$B?%w+FaJzjQ} zR+|SE((?vc=%x0E`3yiR-Rl%x&?8oXf0@b$av~W2@M1Df@_j zNWw!;CqO`>4;qiHw*5RpV2^;Fo~B9Loe9*W?1U+4$P_8?o&Yz}^M049d~fuulfljx zT&lwP?iJ^dw@I|=y{?j)F`0!@cCGG=zD=y67?13D2Gf#i&tM^Jiw7*h%?z%P`rC|x zux6@@L%y+;-y=r6>Zn0u%{yS2UMeWlPtl#r5kx7{o6B=ZNkEi+ zqppP&YM_WpB7OKh;)FyMBVX>hO%QbpxwjgO&g^Y3(5e&c#=4N{oMj$9(Oo*jCDY1 zwH^;DU7qxre>o-zK%OIV?Z*-Q0)a6|`spf*!^*AMp%MiJWYJT&7u$jdrI!1d?v!dN zlE^kxm&4g&A0C6v{;*6W%ShMy#o!$`o0ywzX40|zGJ{}(_`u-3dE(fsRl~wZjRvdh zJZp-h7lw=8@t&ZNzrnx|$l%D;>C4#RUC10_!;Vyt2AI-00qo+G&6f}z;(IX)mCr^? zI-c>tR;Y-uumjL=Eq^-fHhL2wNuEOdK2 zijVNAmd#P!z?RH9grHMLt~p;aJqAzyAXieO!)YE$tzSJvWAXZ>*ZcdEYsU}ARiuh= z2&_J5B5{|D%50e4dDcA8lj&K&`u)(8YXRhYJnZnjHHl+NMu2I`;ypXi@`qKjk^!My z2aQO8KRoVhpUD$Q%UkFepy!qYASWS{KffMb1Pn3j!9XL8=Lekv19uG2?=ORa`$=!` z`_Z>WKo`shy5PU(l=T6(rlh!8G8w%s&6w?K036 z@>-5w-OJfC>NYvINyP1YvA2}mA}Oxa)NYO!j=Yg!*}C1A?cx)M5=8+451`Rb*6@B| zd=0x969kFOt^wsw?d5ko(_J|%7uHP{-#EO>;F;#ozT|9goUuFfQfsh!>)MPBOdBYG z(?kg-M#G#Kj`{6%iv$GU#RIfI0pF1XAYXeu3BWict_h+FxbFrGI1;70)CPip2n(%Y zGqo#2GRrBIRyaJDdYTfc#rO5sN5_aIA`198bFLX;`OI-H2m`$(`CKLUwxqI8{-fp} z4bZlA zsu9cC=Tmkq*h+3gPn6GN1ucOy1L%DxtOOGsQ0q*kjC0#-KZVx3MmbS(1XNJ8-v1$5 zx25ZV)~nW_=d-}^0h1!T9*1tT&nO*>i*L9T$g?||q}4-=i&Vxphx`L@*zir1Xv1_; z%%fm8oxkwe;2H-!7%+SaSz3W@Ps>r}HeOlsQGC0aF*1OniJ`WUu<@o3MWw)F?y^Yu z)gBaNHjH7@+95IjMLjE^G+O0x1c&!Ay&>)?Vb900WS8(XnD3_>ujBcQ;Ri|*O9;GC zVsppe8aICl407$Z52!}{Pa?yIuQQubDZd;F3~o~ST%%E?oBhf!p#O0Y*Cr{9 zu6HpAC_t}~!VYY3jOG09^|;+@8rDQu>M-=EuL$mCHou1!#Sq`Ixl!}rg+ldhv}Z@8 z>AHr*V;tkSAH%jYAsIEenx}bst}vjRMR{P);so019p`E3z12)Cr%>zUQRTEJD|#he zLa9(HIrnpo1EzaRGIDJ0;H?N7hVIqR$};>`vu#lQRxRA<7M$1Kcqvi{4hw8>Yga8B z(ncIe08Ef3LY`}x!?-48n~wMASuQe|+~XZl28CMZ15QqQ zV!cXbpq!2YG`EukTo9dX4A$=~?@r=2ii%hPEgQLm7~c~|U=QX}n>gQ$-7R!1W(3Qq zcNiF~`V!IFGZTV&Q4$&@Rz5P!)h=5^9{g^LqDjgx`|u*jMSbQOI1rY+%-NzzVr;fQ z^GJv&Az02^>U~C7s=gS`VzVyY|Z31JNv@#D$$)?K|Zl=b>wPH>+Zrs=|4|5%P;!B;-ofjYlMHvIy zsGaFs+KG$})_0IfoIEXt5Hb*QTWeQ-2o zdvq&qV@pY8K7epg%2RCX_>_oIRk@X1_psBJ6p}bn;}$OWSRnIN@HCn6F5AxhxK zsMottJ$V3J5J2+?`pNeB`dtiDjCr}GdC_9a)X%dDg^C)KsiNhG?62vVkYB%T@omp; z9Eh8C} zCn>D9l=^`s6y1?D1&;N5l(oz^x(b@E0U!;9`~H7gsFqF9@|5V-V^0{!_X-;B1vNHAXW7$s$r%*~^qC2xVKTQB{atx#gKzZmmSsX|y^3HwA6#dQB%AIhh@lBqEr z1iN>=d&`h==5b@vtHpd&7^~d26qEo=29~(P+YDrsmDZV_S$7rp1484XyLX$jZJ-@b z1RjZ~H+RMQi>H&B9A(d^%RJ^xSC2HqZuYxZZNqZMTg9Cml0Y3c8}y1pDiJtN+#uhS zqSvh;-B+})y%##48FNt8wAr?1O{io2Wu21AaDVvK+Br!Nn&2E$swW~5gMdLC6poa> zvM{2~;O1`SR@rZxLk_zFaGku5}S6RD91LtPf}@e2cdbSm2hLFeU9%1YE+P z*^U_jsR4a06DUtzH^NNhGAMGK*ESgdH04tSRSv)-B)G{$oB3y_I;TGj6{ zSY#^ZA zl*^Bn1Em_HX>MOP`)qU0yfVxu|543D%8BX=(#oCY%`aV--{Dcd=Xc>02SB;Y+s${1 zXISBns+>a~?OhcLqh{R%jxie0F1!j;lq}0qqVb*?KjJ@p2f*R3L%zmpU1Np{+WE2~ znjydT{+#3FauO0h0%BSjZ`QUS{2wW7A)7Rn4gl4FC_zfyX94BWdOj4qw%*$#S@UgV zt0K$L=BNvA_%yO73JehQ?%BS7eZ{E97{E5(f8vwq#)6P%2?MH-@Gn4+-f9SrRPj~1 zB&<7)cH)2wA%XbDb`WQgB`RJBjl0sJ!=^Me&n6VSY}RXzUAlBLD^gvO&=1W>528ys zHSo!Fm^e0f|9K&IZ?3YGs3I11NH*C}$Dz9ye0suI|Hi;{XC|DpqxsjgSLgjZUe8`} zi3;EhqG;S**s2sTqqHp!xQ8({v@2Wp-27sXwIm20wji9XPg7LbNK7nSB3FB5BQ@W; zBB4mpLbniwi`rjYp+QKGKaHs9R65F9}ON#<(KFlGW(CT?p+a4qVAAK1^U|}Kt1Hi}Kg?fPTC{|(Rx+oeUu^u+m z)E)oksgUpGpc~xtDUp2AF>DadY44rFoAUxy%*WY@ryl5uZNTdDw`HL}guag$pAZe1 z9?@=lh?=3?w?zK%x*}XV3s?xajHX?cOnWOFX|&?zD!bz~y?aQlGQ-?4gQ#s<@jJIV9Sfc|p$ZoEOU*F#6b8-*gWUQN7 ztsXD8IpSWWZ1&!lEHZLVSejgq^{6NxUmHX6h(Mlc%C}}%;nxICh18WG`#5i*E6bAb z)RdPB=5JDrwgKI0FpPB>Fsa}B>SpxLgMLxG4g=or@Qb^j#P|ag^E{Fj1fbzVG1xCK*8Ei5%fFV&2}(DDr(@EXA!2+|m#PJD`2; z^>sUS;CwM~$cY&M`vAM@rFR0HlOnsLkLS}-d#zdUG1!&DsJ3qb54Qy^MuZ;>pC!`J%*XK{eo_W2T^ zTJR{7lggK_UDDigq@p|U_3k}5@MWNYBLpzBB(yO5>8=={@p3u<)$QCdZ7V9G;ejIC zL2|Q{2S73p4;>Uq@EI(LOPYkc#Xzm`1L?_Pg@OO$!K16~IoKejmgJ6?w6}+%Apw6A zWS`>l?1vW&KxYW`giwUL7L2fPBJQ9@A{l1bK8aF>ay?2st5XY!dfT*WvCh-o{kLne z*97&iJD3lJ);>NAMF_-t;(RchF;pJ2TjP3oY5H^J`BmI@%gXoFyj$|DhLTCOjzqQh z_7N8d9P3K;G&o%9EZ6K?dv`L*ptwgZC~CCYG_cx2tb5aj$BRR;cRiP75;6c-rF9#e z@S8-_{4cpKL2vjdbcvDLhP7qf&qZZSs_=YBdRP*Q!yAKNG{=#L>xsYoB3I~`#(CN6 zd~=fUx#GvNrP6ir<-L#dW@?VmFWr@H#1xSD%SFm<#Ss-YW0%xF8K;ZnAPoaB@23_! zHv_KGlD%4A3TkM^9RJdXGFyg|ts+viDRch*vispa-VPgfofpa;hfBBhq_W|VJ*S8D z^@>p^Xg0t!F4%TN$Uw^di`zS^A1X(4l*{m2lxfpO_nl`{*fWQ*A2ePOsd>HQeKB8q zPzsP}?5g_D@t^H5t(Z^f-i}(NxZIMHJag}EJa>CMD{h&4r7vY7Zg$y`q8Qq>(5CQ| zTV%y#Fh|Rw94b{_Su^o%q%m`ZJk6S*i(5n)8M*ODmi|tR z7Z&mj2Z)|YB*S;b$_fu|TXVR4a<&yu%AS=z)a5T2brTieMxlPTxO4{&qe{q7^|1~T z1}nuYCkJ~E)%q%5Kxlbt5dJ^v{yHe?u zfu)gBdg)xcL%KVqTb733cg6dDp6567&b>6`0b_1WmaG|)&A@%_`@?g4vhHUx`lPL;N zEM_UQCZh_z2{}y=w0%@XJ{`ugQ)M`?#;aN5{TY93UfV@-4(u@0sNqSUt>bJRp-d#Z zdW&3}7PwkaY++?hBlWChP%?WdpyM2uom|DBh~-?_h=FNkRJ5k@^&N)yGU z76Ci&jt(EityB2LB5qIw+q;=m7%zGa=l#*hxuIkGRf|I5Pp7SH#F=EKIeBi)&U;qNA1 zE*EW{I7a$GB#p| zTm{2Vh7HBel-J`^wKF|#ECu0*q_RotCcooCHHHd3IKmP+iKiV+T;g7or|AQQd4R4t z&~QcZ0fM84;>hZe8iX)?vHkJqJZKBkAhQhB{gH$^a}45N+F{N@x4!4-tFtK3(suXr zwU6E-1)3!^GtO3DMCdW5t!?LPzG9#P-AxMViY#@ZSgxrH7FU9@WrdpMo}7@+!-%a6NwzWFz2a@>%OdO5G- zO)SBw&NW$19F3=sBo292JWJ?Okw&Rtgswn-X63L+^wgn1*`5?Sh4 z;|JLLyg}%q42J#v!%VH7*E6sEpIq3*4{y_3eRmHu?M~pN{ePbma$WYc+Dwnfqm;jz zc)|A!9SVf?5wtLb5t35??l_;$gl-~F52ar4;qC3L+?)In+$|2X=JV-Q`{Qouumpsh%3T{6oPD0E@ZboLCtooc&kRl^>QqYq!MIm zso&_gJ(WC`6-PPvQjhb>az<*MO(L597&4&S8ioEvSNTwezwi$U#sZsrj3>Z++@ZXA z`m_juEz&JJ33?~D?-j^6umBU$x*J!HC-{j+g*(nYwiJJ03}-hCnFf4!xymLMiYNE$ zWH&OTLi_O2g(~YAl0}o7UTxFh7k8@-fSz z*b}uK7d4pPi^ZDwMb}q$hP}-1yd>lCJSN{2D1VH~K_t?p zM^WN*B0pE_LK0`GDl+OSH|ApOIaAYObaXrKN%uYm?O_*obG1X`S35rqJ@rZGm~cZv zJp1?A2SmP6Vn39%$8Ewx#+kl*CQ~xCf~FVuB0~y4)L>}4S%sT8L6&>67?^|&$J){| zz5Lyl`^9TKE;L|XSJ-a03oSses8_ZFJaHTITnK=o zO74NPmlM$x%hBywu@{_9Y3C zktR&r4_6c*;$p?m&v@&c&a*#CCD3IUky9t=k0Wrg#%Kn@p+snf;O{-z z?=qv~EY-z+3Z|;Ys?iisx)fyUM!JIk zEWHjfV=H$23Hx+}Z{p2V5aILw)QhPiO&0 zNK5{)O3-A8V@?7%A{ct$HS?-CS}7&P zJR+}}^6!DSC?XyN0B=IrZ&bUmgkijuCS&7ckXF8+bC(syzyCSTJe}L{2<6S8y|4)Np%Hpaz9Z= zckCgfiC(AC3SF5?Etfgu${oWEWTjG_Oyl`PlP2I5AlP=9>jUXmlUe_cXBz+nxINww zc56PM@NgAAa_qom@p#k4^8lI;kW~SX%#x27@a0PkY~@>a#*u(NL&Y<-$_;XyAQ?!Jy%#FjVQH_mSuBWKJn#0s$N@Yx|JYfys0>IGZxW9|H34EiHZMbV%clnj z_!x1I#v&Zp@L(~8PJ0WS+s>gmPLPimRVGYHpd6FEcpkS)*xn+QkhfT&oe@*Z%U0zG zM%kFR!DXk7ZWHHc`$e9w+{cW?s`;C)IzmaNob73=3TL+qmg0hbFryB{^OFsv@MOgV z%g_|%DrM!;cTrq9|IrAVVJJGbQh?sXm<9vdHJtX<-rb&t|D@+t4vXvtYe(Q2)mY4? zKI@I&$=Lv?Wwy)}wEMPF)FJ7uWeEO_?xl9k+CqBIGVoT zwWrLYhrP*@E4(t_E$V-quO3mEFP5juV(J0zYJ!6ZDRUqtR}#vnf4;8~`7h6re0e$k zJd-NNH(7)|Qz^$+ssM>KA`;`A-adS{yYq~O&dqw}bMVQF^O^vC;9t>~qaF40veU{& z^fPTUOUg+ElRh&6LB#iwYg0uINn5q!?IHbI_yw*-V#lgIN1H9Qguk@k2>VU?(mQ>7 zne}sNvQOi+dkfwFxnx=|!Rr$W3xVo)sM%7jX&=1;S2sV?g0Ft3YU?SNf0T0(iz+94 z)@(AJ=Rh9r)v#tWJ4tAi7@XMOsPA;+d)tY(k*~eXhGe55>WJnXAyQ$a6IxGpfnd&sUQZE!*hE_7wV!@lDfZa1qd>J^MbnK6aw2)e>-}w#Mjx-VpB_9lRR<*YfaT)|nb9@h@y? z4M6~a%iLI^^xj{NyM*-U5aZE^HHWQ_j>jyN3B{>Qf7h_qFNUv@Mo$I-6gXa{V_A_o zgDkS;(*wcIvULG7H(J%)AzE#<#vpr9<^ryTc&5DP&$vIl_Z~C%*00{P!ADprW(*sP7f{cA?)Ft;qx8}w5 zg%g|Xg@4ij7|yvGXV)~`@RI{WPnymM_7;3{8O{g2*;o}Spij_ON%8t{m&C=}X9q+V z9!(x~4Bu?cp1YhLtDRQc9k=#$$AdtoVd>~SOV`Uco^;aDfNPAc+9l*ItvTak2Oy<( zSsGtYto^*(;!8JXrF3ks!;@eRrq^+?#Fg4Brv)0@Q=%^MAI-+Oty_f?aFK| zWXjulNjOFNTStsVu{#MCjd(guDj_eiyXcz=RH$_==@u^rKlh$$OR}azV~6i>np8C3 z*DPHcO})i?LmQr=bU5)+U&ACAq*fYR#EG*nph&=n*UarxAAFm7RbY}{_BeZEDUAt~ zO6YFig+mdk0oBW6_Hi7l*;U#cuY&X%Gpx^TIaT=#rgQ1%WHvb-VH}h6{486)h@)Jj z+=HM%eYQ5BcOJSXOrOAaNcb=0{iz88a|HTt?SVIM2IeadFyS;D}~RMUU~? z*LyFZN(a%Im>*=IkqEx!gYO&UFC^_Rccl1nKmX&mXa~d$TU>t<^-j z;Arc`gM|ha Hp$iVH>f{#6OIhN!$$frm9+o z48f+?e3b21Dh6y|`j+?g`!=OkeYV}b!TS&E^EiG%ZyYHy+Wggf%#C4??r^&<$L>lq zxs)9EiLA7AugTS?kKv$>ZL`kHghS!rYhoeY6_%DGdO4tr;7roWkHNzcCMR(W0x zvGyK;F^LysdNf$(D%Xc3U038S67$R3c8v<9=U43ZRk5fL)N`HAK6iq@w^Uw%0MtV- zN3_ck7TNJ>quZRWNj#W$PP*M}0}B&TzQ4Mzc9v9L>$Y|6YG8y>=g1a7&dqEz=oFc< zH)zOLxnoUZqG-zgV+Xj7GO?hDka1A{HlXaDtZqcK0p9z~`yJ>OzIPJ8NOO&c|0Gk@ zKA1xCTo$-0Nkp&(pmaJ=?2pac5+poYN#(1CW8(fSJ(OOp@EiWqYKn%VoK;>@4V#r6 zho{G_0Dwz+%H#T6CY~)rPwdj=Z4i)yr=i2r;TA)9pfQ~p4S^r$8!IheI(+HHit}Yr z%b>gFi(l=mB+J#UiXi2tzZ|ae=D)t3Jz&x%i*nF~&uz$E5y;=ViiD3FJqqvWO$Ci5 zd?*rgIdzknxyfquA$3JD+#~1fyD9KB2STwz|d$D+2sP7?6S3 zl>-#X2#VIsOS5PI4}6frHil|{bCo+fU#6|>T4_IBwM_p?$SWj=J=Ey4LFsC{U?O|L z+BYl`fU#xgukphF%5`7EPbI`>>j)sDT{Y-+y5)f4I=?$Sq@Fxwxq*>$(h_7DX+-9w zOJzO?Zj>V1qlJ}qiD#lKuN78S_DvZ6K2FqZFb)s#c%Q&eiLbRamHjPgD6y#ehbQ>; z-!L(jR3y*YzbnAxSFIIp8e|Ijtm@HZ@-tp4{bedk>yFpkZ$5p;)urW~jAqf}9F?Tw z%51;rkYoV(uDUkTe?)#u5vbH4=8^()P!8`YPcImVU9;WCZIT*IbCz7hCgu^T^|m$>bo(4qqUe*KDY;7dk5<~R7Bkk_ zk+%3VarPG)f5z|iB$~oIywS@)+1}YD;-(3>VAKA1q9Js|CeY~CV%0R+$M4!SGAO%J z1P|xS{nFS#0w9Y<4C$9X;De7Q$JYlN21XBC|5FQKsdWPQjj92Q_`EU(cVBOq98b1Z zB`crIS~qacw}sY@Yqe?77eIH50xL4G1k3Hvdg{PAE~V4KqEXaC6w zI7+kB$UU#gt)nY%A41u6@^g$LWEWVgU==?h#KM@ z;cHsXcB7)`dgZHGXW44Yt%2gd$+d>uz*OzwR2mdo?7dEebVrtrCk>av;;msDP9ddfxiOk4EII>YcI(*W;Aic@@w(}1+1pA@cGL(IEoUwlHO zn>&@M)!p5J5dj^JQI4zelk>Sgc^9`+&;0zW9X^+VxNlPFJlyPbJvOEEg9Uy0yZc4; z)S#SWk&lGa$@CW^K!n;)<|~L-T`HB01_`ICXffiM?9T$BP{mlbKgWg)(Z^xmQOb__ z3MUoUdpDTgw_!#ed@3T@TXtap&z@Na0)JbeMx=%1e!PZWtY2F^R|V90ppUJu+YASM z1+xrT0g;n(4{D+oka(u3&&V!87!|wTx|1yAwQkMF8v%Cz#*Q&^zS+>iCR-98Q2oS#$_j-+roG@d9#0N z>z@7gLb>ZdzQ%TG5|)^_pfCGFvcQ0T{>^v)0!Sida_#}u8NFuHFcZa65Bf@oEWEt8 z*Cw!&Lb1}7Xv|VmcF!w@?dJHHR)3D(eiSfE_IGEGb5(0-;;r@kV)IloWKUST6X+i@ zsTTw}Ui29qKs;l8VM*i~|ZWC?|g#x*X5ryF<~#yZHJ zc-4{2xKHNL;6b%OF%IXg-zNbQMORbtEI??6_PZyLbgrBd-F*ShxtL_tZ%cS*q{2&b`e4&h&`8qLf&%`ix!Fv~ z$YK#_U*i&xLdmiZZjD-EosF=?s%!;q*ppB$svXw#wOwu1DX5K^N&B;cN|aOd#pt_3 z3!il7%k;V_2ZW4}vv@dH+-7rn*PoHmi8a99OB=8{Y!RQC;9ZE95xyI(k{hb>)R8Rj zub4GF3;N^dwoq|V<8>lg$wbS0^CKcL#ItFx&GXq}TXX5dD0UZ_4k_exmOJOK+Bea{ zRzQGA_3ApC?aX>oc8``sLvAY)pGZTw$5=iI)l*?li7TFF1JZsV%f+I8@nGF;tA1o7 zt1Bqtz1E^+`m&d5#JlN5M$gCVZNaHPVvlkM?D&g?gLvrc!+tb98gldod6ID&x7kPJVo=mfx){*43%@8XrUy9p=3e3V)-`UVH6%{-u*0{sFk;spv!#9va zUI?;ky7s|qc4gta3Z0|Xm)f(m@T`zE6nxt9#DwY)5Ke)C^qoO|jQFcVF41|ms1$ve z&Fi~#eHa>uC_m`PsjEQMGNyO0eS^W_46X~rV1|H34zr)ZPX;vk2olT9T4R+|?6=P~ zn82xM(;J^fR6Y*$PDdoi;LH{YT7=W}eB(iZo;-e2E0KI@qg3_*z0#L9lxn4+W^3q0 zrMMq`4fj+6*ySzfMLDoL^Og*q z`9*zo&2HM0yZyBi`IGS-9*~*nU+!dmS!9f=g+DM`xw*?m2y?A06PTe-W5XX(K=zc* zHgl&AC%RHwPsNj>*W7O-=?B!L^5JExud4@kwkEFX$OZfTNrv3(HQ0a&bf%{@dKE=Y_M?14=nop~c<0&#Qa0m_e{IwtA;> zR!ba@Mw$!q(+{Z7-R1blX4n398L~~R`Dr!qK8)iGr^hza-<;2YW6(*ORu7N4ZYXE? z)lzOY7)9;$=n18elnoAA1wQlHvdw;-K9EXp_$wubnS{)GiZ*yotlRO;E1rMyeLOs~isUFUB#jNBklFFmm z#%G_1q`W3yHH|zKBCl#LKye-fvTVe^a#Rj`a}qViGm(&U>$s2eXDXYdzE@b%7c6gf z&{8wgdG^uo$y9xqR&6w!glt(D{a9Wj(Km#LXq{gVkub^ZhV1oGY;4Xq;*6L`6*y*u zEXl>QC-&}4SNf2|LbU~BmxxF#(A8P}xI6e?{*Aaae#}c@(A6uPZqVMtsnR);@L9&p zn=kB#NBQ2N0lH)DdPPX*a=Vw_F;*4noryxRRtxAQ&EwOjh4AYaQnAg{VEV@1B}&mT zj@z+Pl>{zZzNAX4{3@PjAXrS9+*`TZi^pL5JERcE%ZTM~fq8FCl*PnClTV5X_`SaR zP9725pTD@M@}V{gad3gBX!DfXApksy1!n#@*WmCc>%vD_^-IXf)NR^l1gyrqKU~y- zTFi?-)cK)1b<+MWc&$b`BuH_YYrZ65v6w4>K@8f|TuyB?CS3@-BTiDa@>7`f$!~lr z>!7w3;=|ddsR$s)3Dg9h%E=s?obXwy7f0?PW#1qQml#OURR-j`4IrTx8UUzeG-iB_vjE>x zAgCx%2k10MG`$N9(3NdFg;oekTu%~nL9YPQm74_C({TQ3Tch?^Jf`ieSbd)hqGQgB za?EsUi7<_^MLNGMG0XVeFaQk1vuGC6^cK&R;zJuK`TGT6j-TRI)P^&SoVo;QF&3oW zK6l@t!|g%;YZb6=vEu~9v3Ge)t_-T@Oer zCnr;v;*1XNT=m^eDFl7cjuwI>Tga|;2OI+L7n91Mh-wF3UJ(D_59t&=p2XheLn9f~ zSN*05@lI8$a2|fulZd5nN6sAmj!e}e2uQ`{p?MFOY$sS~9&KTezx5QpskQA;P|VW9 zQawMf1?{*ke)@^b5SA{0J?&(s(bOkn6bs4B{Vs_g4rJ3eK>qm8!1E!ey_{Vd^z7&h zI~v7V+Iid95K{+>?b$pw;$r<=_#a!%S|p>#k!`o5SFxBUC3>Qz9+Q@m_DpRr3>AW> z<|=emcBd*H5(FwZW=lKB$+A!63J8&%%Xl{ohY>7_H2q zZ}aZSAKso$>TAC7d>!AfF7<;f12Rdw&eEN5dhjH}uPji`H^%15~d}C$pQc3v$@$Wcg!0Pp~1M zE_xi>^U8Qd(YQZ_x}WI7^iQ1zRTrR8NGazv`|)A#MW$G|pYh9>43iCFM%|2xy3RPN z;_tR!>v+KX258hvi7uy9>*2SpB+56g$CJ;v3+Hkjvm(@+CFWu6-RH?0lJ*G3B~6iy5ckbt6ns1`b2`prgMQbL9hI@ z^0MYvhTHZ;+*v@;G;kR0<{I6`TVF7`M)OZl6~7&({F-zuAUz#ho_xn(f_-F47vg+!S4thYA~Sd{7Fx(a^DsfgJ2zk%=wvny?sgk9o!*17$s=i z);;9~YU0yAGzCopvwxnHN{(e-u&7N^xJ*KBI!3~8b+nM*_oQh{%Nlplw3M@Y-Fufvnc7LfoMn8I5pW zOua;dCZ225I_%95z{d>4g{fI-d`8>ppXSK2Ijf>B++YTa=R!4Wkjt1>$WN=yCk%UY z6qJ|FGdKGSw)<{Z(8(OsEVX{pbCGLCYUsH)KAvP$)HWu-ebS2ipr{BNO%p0LJIfm zvCji}4QsU7{a;c&+*B`ItT^+7MLIC^G#}g4RkrwNtcs%P)&GJ_(BZG+C4caxhQ6GX-=NK zQ#Urr{5T$vQ16k3VQCE8^!wTAxX*%2o z|Aa7{lG$&PbM9&*P|ytorniYgiDFXOYO}WhO!I*Uz8S=HW3g3x*@d_QB&ZwA`)wn4 zv(aI-11qj-b33QN9Pj~1t1N>efvEjY;!@oTXFMYRJ`(YtzRMU;Hs;@pR)B0dGJK*w zg$lUn>cW>Or%uylPmZz}=6=B0)xq>?$=UmS7ah|5ntUp#v6u>nGannrIzl(llYN1Z z!T{T@1yH2BKyx2aFn^f}@W7SaQcn(hS?U8kA&VyI8e={hx>(F)*tWtK*F>uA3LESm zo#v8!&sPsj+a}2@48v9t!H`eY>ht3mM`84%N>E2HNlLwoy0R@$G%&ui9Ov;1I5GaX(@LqODwrPDb|SD}%6q+DHh0qSnW4M>pYmoA|G&R_E11!_|IFUD6qd}J4RjPNxq4&fxg z-f7a`qi!|K5<#G#SnD3$l&{?tNw!$wY0?$%VtUc(icg00qFjK85IE7MA{iRz|$%;B~p5T z#>!a2x*fyM-f*zn3= zaYKe|nDriDKM1_~=S>k@5;3SoU&*Sp)N}Lud1ECNw~$dI&Enn9`%NhTfN8gFS0)K) z9a8A1wH;Sx9J+mq*S{F^Qs31QPx#2UM||pqefxzNneVF4=YwBulg=I+1iGMV0JMnS zeV|%l?bN;4r@<1;MX_VCS@lTkZ|vs9jLV4Zs$E}OD>45Vu0rSYibY?K=krU^L;Ipd)MHx z^YtY7!L-k2Hhy=Cf?uQO;Unqi=D_2>+HZ=WD9{emQa%Jf9~aSq)dM}wun^WAnx`Fo z;iIHeV-SH>)Qy5fvw#eUF9~{$M_6|gS=G~A!EEVTXWMV9+YbW<9Y5KFj_;fZFcI9C zsW^aICf)}Oj?%deNN)yOcj!u-kA_WnoL1gg$@+tJ(@kb@@ZSejcO`^T4*lqp$KU?m zCAC2_reGa)tv9O*1X%O-i0M^O07DrR$|Fbn3u}5>h&PAue=nTTA+CBnh1=)y!DFnt_mX}Qz&kZaLcr^r zmF55yG_)CUU4ne;8!9BC7;DwEN;%f4!Lp|GFfNIn%%5JrwpLag!xkX^(oaeYz3AS@Oh(a5~y1tn#Mpq4CSHk&Ve>(AQh zAK3K00GJ?C>Aw6B3(@DHea<&CMC4B8V?PL}pE>e|#(5i7S z|B4YtJe^0(kNR)d1Ya1`^!J#Av)$4d2;FcaA75|Xi0* zh{Z+j#a7I(UXvLuv{4gn4scooinTm&moq;Dx)(98Lu90lhKd1DNkB=Qtc)U|XnO#W zVlU>em6!M3K9GHVfsjdWMY&bQTT$%mWH(KicUa^P=S1uWS!Ka=xCkCs=)5Qj8z3aU zc4%`oH@G`)`syUIF|UZ3AX0g^P1iQ_#j@RTyhx6wA<$dMJv-GG1<<-_yvK{b_#>lu zS_&e}`o`$>MQ^`t3=Ku_QuqkD{*G9^pld2cNFJowZR>Wn*fdbRSjZcREquyhJ3X}N zHn^8}boTybZ9sxku2x>b3$;S{C!s4hbEt|1UN|nC7gy7RI0bk5FiRUcsie8kqNTil zO-z~vklZDBg#zKlT9?<;E~`wIl{=pe)vOA>tRGZE^~GDWd&W7!2U+1vz>U@bwttrZ z(G_d0LpTJ6*8Ol1w}ha+Qn^)K?+Ne>GaNQ>S|BsmEBjfA8x8l6_@0bOLyaVQNGdXg z3+p^lxMe|}KCdr`itz6S_tD{Q0rl<@eBVw29wz#hVu19^!lARr-0mf^4!7GjK?dG? z*v6sdd%!gVK54j7X5WJh+LC*~#PDL>g`;7&&6r=<)Xc3~+jLSfDFy9m4>n%Y85jYx zPUcy;u-pwVh=|j|t2%bmigO``MMLlp{?ixdE$vd>2xw5leW2HAQVWf2 z&`8itV6{I>su>$#H|`mrR#A`O+IuyVvT7Xrrg|;)J4JimyD>u0mjv(6t zM-$~+-d9n|DV6jR)S+ywHg$2}oLH5CH=Qj7yo<*@;)aAgB;9OJ8xL&{=qpWWvRLlN zuFlVp<>vQiIUCu|9(1~A$RR|Br~ZB5DU5{L`crp2@vzAZx9hT+)N^LU)|1dJAt7x9 zbxOnA5XNI~Tz@(w2KemYP6CL{LDlJCz6__-_H+@18?A}+heTbLW!{ODnwz+RU+ zDj?ho&80*-`O&`h21GR09jHA)zs+~&dt!e+P&qeW8&vr>eSpQrU{Ld3HoRm6t9LO) zsD0EVsUa9;4$w*_2WT?L`|y#Fov0&4G!O;S$;cxUwPNp!UqaUXsk^t)lrxU24+WHt^eDg$@dJgZ~O;%@i=!h zQQ~N_TxhhL@uivu;97U6$y*Ne^LRj^*}0!sQsTe*5Gvl@OG#oxukK$&m{?H@nGmgc z8}_#a0ivOaG9Ea(uOi66=%A!m;rd|vwZJls8aH}Ua?TPKsmi0@;WgfJgdah?<|dAD z!4v1(=3?T%^=6s@uj7CE#wDPvQM_OH^+ESXcvD~I!^J`5(W>a2aY9&h$B1{G0-$P+ z)rNSV#$t4&zo~WPbtSGEQT2ZJ=UWR{>z-VT`1$Hx^E9Bb4rKyD8>}EBCNn6a>PJ|B zqFJ=ZzAWH5$icEo4?@$NW-vt4nq=&GhZDqo|0d1f>k{qnyUcErtsXPW|I^O;g-$*2GiT_W zNDjQeA;2X8KK`=JXz?yrm*cphFC|`J(;DQJpM6h>YE7W%1I(%&-8Mm|9%ik{2JRm@ zOf&UwqNPlg6wwh_8ie~f;bIj2)iVFnI0;GkdEuF=C|aMLD8$y)I*Wi!Ocd>;f$Kro z&es>phaO1zO$skTGMY^-b(;bo zm{`i%4OMOMz69@CKwjyrlW+Fev#9S=au*xIKXYt9y{M0VpJLmEWc-0E?mq$p$V{^t zN{a3elY{ll9l zfD{cgTAm(nO#k-^0$*sjk=zbe%ev{BdPKefBbF<($96YuvD*xKi?-}MuIJfc;rI}d z^DIue%jF62MW!*K=5PPejx_1~{n!pYlU`dS1TVR3 z=$Uh3M8Y!AX#5bf&rRQd?^v2P_In(WPMd;$X45lP%rG!{DRxiR|LL*ii<0&@D=tBR z#$Q)A3)qLoKrzb}U=|b8m707}!=)dx${jfBE(SW1?k&ZCe|n%l#dPYFDP5LkvKR*0q}TEVxmxT2@s@G#o!z9lAb`R+f50tobg*D7Jp zVn)sEBXo7~vGPW_gG452?kxPYh3KL7VcmWX(MK!ht4Yhrwo) zJ`idJ4Xws0kqe~^&0wQLL}QPL5zU$n98T}KK@Y|&DdPi4FskQpg>{=5lD~|0sTEY@ zqW}uz{<{*y7Xt;vfec)HP1XI8%BiX8@k`##)T)I)L%|_s=7eSCMOb)drQ>t8AMGLY z01p!npzph`bXWbqjwDKWhya)6MaPg)=A`^yZIEX*)pMPrip^KXkws6Zv=7q+7qQfw zs>+F8aRvO}B_LMu<}+s(1GQ{`Qk95kixtSJjPL`?KPlhJl@j+gd!F8#ZP!+h;J&NKxDczYVtm?(sN=7UNp-XU&I51J2Tqn zhQCM-XM2p|cC~x6a49z=W5~_CkqCCAZ+)A-3=G6Q#UU}j- zQ*Mr*q}L3F+FzJW-;=f4)mh+Y~U`|tkuB5;>0 zy*oUZXKEP7D8xdEvC#49?LlCOt(KoyFhSlbP{+YvRXFblP#~B-rZkz~DsEt^x6}g^ z(?6DzWcBj9?K=*7U2H-(ei*2rO#7ZznG!+wV-(t}@OFUTQM$LO4*N4AD|1+^4I>@S zYzWh3a0T)bjM#d2*C#l=Yb>EaHU9S*hH(+J1)yFv!?|N5e;+Dz7m{-l&va$;wg&H| z%1>1vDj{d&2udEmIDU;s=1}AEdzDfMbi=Kb3Ip8uSLz5O@c9A#^H!_T?O!s5wV-`< zup8y#XS$vkf1W~*yltsuYKnmOPp?H*VR68TUixL;8b%Ev*0p6BUElY?{5`YV zXHW&7aHSi`)nsT>%c9R+_@9HHl4tMcqh8B)zQW@yoI%SQ{UMRQ+%SINxZpne+vv|9 zrKre9%8h)tM2L7P4}*LX5H3G4V_jOg2;CIQrwWN>TH!f6qU{>4bteIm;KV?s1O_!Y zP@decmy?NqI|Sqs%`A>cI1^r#BwW@XRg04m(|GRhBF%72Ti@$Q5OCd#hLDB-w|oq- zfOpidQF>Hfw3SG==`n)EHG3N;^D7I!-{sz(0})om+D%D-YeX$E_%!@2>WM+u4~os1 zGBWIx=}53$ds|Q=ZR}KPBUNT<%|sEj9(x!2$DEd%WZE>#(FJ)nxVtB9+k>V5BQi?;e5S%QAO_oeP6urj;+n% z;Gz%csKIL$n?AwBWuo@_XcK2m4uZ3~5$04w6gW;)RlFDg)O{`w)qV-OuzXJsZW45& zJow>B0=aX02GmnHkWXaE;lQ5VvCzZHH+p}o9}0S3KV7+m9gh-CIfDsSIzxAOx+KMg zl=tx5%>TwhfX=-Pz!nX6{*UHEVMNje0_U#P#j_zmCfx8k<%m(Ks>Y(F-mwd#Yuf@r zd03s1W1g*3rMTN+YswT3@Y`MlPDtHP&A+s~rtcdoTOIr$-`{DJRBk-KX!j$hOjab> zDo{cOYN_`)vV2d*PXSaoIb3_+RbO>O1citTlYtr?r{`wdAIyi!khJf}&ZX7Eb813# zFJ`}%lN>tqSVqLnmejSJ7H})pf3T@+n%2xC-rtb-2~QLC$QP)tk2nx%ttMEyJ-|_< zbNW~~Q;G4V4oewSG2jU{Y6qhZXA0?adfVSo(+N(+nvrSx;>AEhzHdXz%VCRgj>bX z#~exxyOeF)mWkW|L5f?HIgA%Q6!iFmM({ffN99nR^*Fk2pgWJ2yo<136PJa*TGg-G zy3vtQ=?4$r>E4=oh#3Du{Y~u>1;05n_QBng9e6QTbrDU4ct53pGoj9;jc8ShR$OvL z!6uf%Vey9=Wz;Crx8C--M0RFCS~Pckkw3ylGJJ$nsosI*lj=#r%Nt-jL2O6@(Ao|ja708l=mD|$+Z*MN1)`C*SwK9JRUKiC*Lr4dp3F5>aSnzLB-0>+!00IF)!$ z`dTXoGlodd;S2HS4<(vN&QxO*P}p$@h75g6G2M1WHX&1T6L~-wmEQ=F?8^dR|7F(O zIg#aglV{MhIUN>I*5S(4L5;UiGW; z(^qv(d@q<=c2eS{ioGt^ES_xfsurPzZgPhd`jY?^i8l4sSVL*|CxnPZ1B&V^an>6h zAa0F7cR-71Wa-0R$_0SL%0!}v_X9t!cCp)=r{wB6fMkLtipVmwu6{7(48gHx56>3w zz8ju~Skk)(V1csg2b%S^&YdlIB2OXuFoGIwy1wi31E~?pjzt4dt!rz z7g*CLg+ z5H0;I)?|7Qi-O4i!ra9F0tqDi5>%uf$ZUZPTmJ_^f@vpHm4X_efrS|4R`TiemqycarcNCC*l2n<_;r|~~<6y}i;i(2_$Q3+^^7W=Pp2Fx-X=0DS`?}=$C6>(r@(>l+dbI9E$ld;O}4M7-ex#FMlA>g)EA`W_cITw?B7v3YLVhRa`t zcpew=v(Z}kwSNrJnYY=vXk~crcXpYY4CZeceKp@Bu-tVqO<=jeFR^hRr#{lSP#(u% z_QOjcgP5mlvkE%R|M&TCKy34tii?W`d2~tO@q+fq@I2r`>cGSo0K=uF z44jEHs+-IF!+17T_%>Swv|%@+o|A7+wxwW}4^M~+)vo>7%*7MFE;dx?4YSII@z?KLI^41mGM_09D?r$ybYoM#|@8r3c|-hvnlK^zq) z&zvKG*<5KQ!7J0{oU5b|M;88njtm(5e{X8oNFlIteyXfDl41JK$%~w>l@DhIS1O=4 z)|utvb$eD-HVE+otRfxJ+_(#lCWfBpDap*F9(-t?bRHfaQjLphw`Kcca0BTx+kjpR zi5Zj~2l{vyc^!9t6*8#rsg?Hso%GmVA@(6^V@r4yzAFvN)f%_8( z@qi=tfk+zFE(>^;;Lnhr%h_O>faqAR5=DE2Zq1iTy-1^IgYIn&Rlx;(Xn; zUV)yI%G?B0JFLg((ek9ex5#Cf)+^`T_u21L)l)Yh=?9rs$(QFxzg?_(?O&iwY!L)d zOZ00fHCgZjPoF*{Q)f~4`l(nt^7O3-pJ5{@=Aw@$VNMVf$s^d6+wfPg?00s=}E5R_g8=_T|Uh!jD( z)KH{I@6`|>1b!>Wd(J)Q-ZS2N|GqaKBY%Xk#>ifKuC?d><~P4N*W|o?VA;5vcjcMH zr#5HS87}BN_n`#q6axz0^)({3wnS&|#&Hqd?$r-25OE1iUtkaDHcOUrJ$-z*%9~KN z?zneRJHk)M!KlYi$Dz~|V|HO>h>5MCCNwrf?midHXaAUCu;9s+Q1piMO8GLcyNy$l zm@74z?q*Z-d8~S&gEy-Biwekn9r1CrZH{(1$8V_6*ez|emtkp{!6G&Y%V0zNd{Nz@f*wS~;JM21z zVeq=jH1kkVVfP<`jz)EBmGBtRsKkz1Hj89t{msIRtF62kb=HvrXDtJ*m7*bUaDT2d>#qKFNx-gj{0~Dl%?N zQy;io82?^D^q4E%s^t|o>}bD)T519p(ZYdfc`$xk;3Ag+zgFSs0}=-PYepzL63EMC zR@U&BHw9D*I4_46zPp6y2Gh^Lna^elC;x(O#FJ8>iyq~!wH9VB z?h3EjO#R#VArUJT`Zt@X`d2?@t<1Z3h&mQZNx4`R#)L{7K{iP(-r&V$P7`6Wn{2&p zdtv$NHHT~zi598{S1XysGY$jm_Tu@b$=LfE$`R4tvH&;5c&q~UITmrP#}R!nO5x!5 zk-XgLo?ahb0z6&%2ES|;K#dGtP;DG^mMO7YwSE*clYH?sT6-&oBZ=N$UPZU4bIJ>T zE_6Xfo4fRkXQfPfi{c>Z=Egb$ucIDw!H5?zqBSI}QYG)E+A&KG`V*HZe|~1sjr9F- zvc)Hv&mAvZ6AJZ1XPyM;{eT}{?xgK$sf`XTw!$suWzoc1%?@IHPRM0&?i%?ByuxF5 zqwP7m)Hl?~^Vp5gwb5j}-mOs=xq!YqOI?5;I!=H(6B zoew$si1>`j_iR38~-|k^XT13}7?{qUI zHgcTjQ!3Lf9$Wb&+J^WZS9CC{^X_ytSg2DBy|M#t_P)I zot5mOJsh<~CovN7xs!^a0bHUv+Tt0)WRoe^60Q%`+4dEv2w`@QCk%N##`HK1>dqhV zu{I`U8os-sse>`ZxE!cwn*!N(>@kPmUehSz18!$l>O}T!951ik&gsh>+K{1gc9;Ui zN|D1m30=vq{pZ(aT0IAxzZ9R{4Dy|LC)(|qqf-}|0U4s)onF&rdy*}!{PUWidayx; z5$YvLm|b-9s~_(p5l@^ki|m;$rcDKw;ohYli&pbZDfiT=AIDdb#+Q0e3riyR^clx) zbE|*S*KmT7svC)Y0lR5NvdP#fj-32q7h5(4JPujv1E=%r3`?{ZQ20MR&dIPC zyn!Ka!NGbvCrB5KX=03wsjlS@otAK$aebRy`6yXXyb%W;mqEL&BIxS&n7#8i&n@9O z9wU|(Qm3+7n(d)>o{Jnh4sMd88T){l(W~3N!gnh)*jR!4x?<^vm8vW^_Ov4ffx9r{ z3oD#9CkKnnM#n!4`4L#Emp_>^Wf5YHbVQzf|4Wc&u|DCG2v_*Z|#}2UU1?%Ql3rl7|IujD1~Tf7JgkL-`4@#BBAH0MGot zu~Wu0p2sGd7($g}p2e;8eBm*JKS%6wHp{jWy%3UT1Aka%u7>bEoSs}?`o43?%lU`k zIqb&tGuw@cT>5@wEERb|1*K&)a+9qUIY0jH7|*#Pq)${ZRUkoxAj>U2TS(lUt(MCE zaT$obx0h}(iB}_fXvOyIJHpNC#EC-kPT4Y5ZHkmyzkL$wTvQDygsMV-<8o6` z##GMKm!6q~qn^6WTpwn!mlxr6IJ7MRy7gK%iRLvHM?4&Jz z=FQQqID5O-I9H=Hh`~OSnt6I($b;AHfv#-CF=_2j`Tz+rLDQ9y#*Q~4I&0`+vpxse zP^N3zc7wXyg)A->l!&u3dB(ZK0b!{sjkwc|9JZ+m!-YXvg`)X6U#*N2DA&h>A;}45 z%ZG5gO;E#sO`@8OBDG=RnW8%l(#(gdqV+sw@Y)e(l!w=Lj}%FLGr*u5buupTIH{hI z#mIihDZDf~FRCNI*4dg=Z)Ask8DNF?Us;L2 zngOaVFKtHNUs+u1qc_+FelG??nr;!N|7cD*$xWlw?Y z(U{`aVMhax64{ckVmZ@8oV>$P2Q8n+GGoQnj^_6SfNAyn8JUd?3rvtj5cI>L`X@J| zs|1{*=3qk5b4NR!YAauC)i;57mbO9ySovKT}$jEtli1tUBuV&s%eM@4%BN_ijGM0U;4 z!x(n6%Ie2b@IzU-zL97zD2LKN2ggjHAFwa-^y>v2>jX7y{bEO{DXGgQ+V%uoqcNf@dI3cgB31vf(Q}L zue0Nu>+qwCJ^W$JTFpJ@!Ba`1-e<|sYl5Ne*%&`#a8kHVN=@^jTPye#ElzR{Kacqt z5yyd6#d86(smx8u<5k~2xq*T(W(-6Z_oB1mM<&tFzQO=c`Z`IUn;ormd(fehDuX-3 z9LX6L@+C5TP?It&cvJr+(imce`6t$HZiMe)uG#w-DQ3gh88h{D6Zoi*Gy0l&-xWHH z7JI$l&|=tSUdK)--BYloQ2wUWfs(EtH(#_~iDXaeU zo-oK|T%Ev$mEVFTLl?NAMtHl-J23c24IFAxBY-Y{C5beyitU$>8lT5^p!djmk~5^% z3xH491ifef5^LJWl896nS{-lLnCupuF3Ae7y#M|WEr25qXc1N(Yu>Jm!Q)G%97Y51 zc6GrMN){K9B_^K6P-Uvd#GT~wxQ3_X8d<8Vk<;WnP(~oS@T|HKndny=r$GU@A<6|dd6V{{_u6cF3fms$xRa2Xb;NB^=( zDmq^?e%HD0<57-yq2sHkSp`1>F7Cc_D@?mf*IYWCU+u~$<*u%S$EVw68S6LSPYdiT zAG?z1XznyCIT9gc>rYm<&D|a$VNNq&KT3f8OTU;oje$~n&^>=#1)l($WPJi4NAn}@ ziQ-wJkHDd|6-;D(0+axep^9-o@UnJ1gmIjr|G^Iyl6a+&upc39&4ga=Xy3 z`N^FFX8ht!tYEkw`n^8uOj|X0@r2rpC5>MCpZq${%&z}ZN3dY7~)MGG> zX{5xGE8uPX$Nu&s*s5p%W;MNEkxQ?pc}(TV&`|dIahIa=+!}dAc&z`ej?EF%dM$Pu zpUcU!=neG*);lVo`0P$sO4eP&GOyoWx;f-&yc3CS&Q8rHE7J_Vpq>!+!Ext?h<=Ec z%|s1C>AW@aNuBr8lzNN%q?hl~H$C3yZ*6Z_i%?o<@u2I?f5DrLX8^>%_32u%B`wIQ?Evbkschd=yrBh^;99oC#YWl@@L z<5@#1*e-pk&#$O7uS;u6KEl%0{$$EJyIa8#yX9PX&Ze({%|M_aL}FZMW&(tu)}yrI z$Fr0_m-|nHx1)T4UdcD>CD~|K{q%izd-N$e<(RhMUP@4D&fJHcn(CnKC}^z>+EUY9 zFQ?%5Q&?g|x%V_PNI(9~6IQ(NgIv$w#<99*+n%j4pI-BGO86eR-ax!vwIeQ}_6`uI z5+J?`38ekE+eKZIB@D6$Hk%mB4aSTKkwXY|WfQV_ns8S`<&n@$k`%A?fq5sxF!s<6pY?>9=kWe&~1 zwFDio*OnIr5<-7;Lvtht{NZ2$`a<$cihwy&t{4t-RWID75glUP)+NWFo}*{`wSu-g*>66P!W6e4pjTm0G}T%| zpq5rgGYDsTXa-`dJ zpQGiP9S3|D!4@=TEHGOWj+TeRm_YdaY+n@70EjQCs>nCTvLq)v-_eH|y6L#xn(vDH zC{bdHRb+*ISr?JXDp;vXTAneVC^8SC!3hLT*T0x$@3`FcT65|oZUl zB~5s}wf=tQ`82p&=u`o%;5v@Ft_u1&>fkb>~7@Cy#glrPT$#->U zWwMK^p)f#QU5{i4qkLTYkb}F^iE4$U4D)>% zfmej>@(!nms&(|+Fev}VQ&7HEsX>*o zdtrB^J(&@NxyJnAbahY91_c!!C~ETCjgpk6KKmWZ>l?A?awde?^ks-?BnC0e@kmX` zwWav0FVBk77S7=Q*j;u->IqliD-cNPGdmyI-Nt^}OhI26HsV?nx51NldOnXcH|$n=ezk1uNluoM%xzr2 z{7W>#*txEW!}HKug(;XOkuv|fdjmIM3X(JUaS8d?is-u36V^YYDWHJ*o%dclKB_q5 zYEtRDhhc?InJ5$3=ih#@&oO5aS}_uyfPU2AsN5<22h9A4^z7YTYt<*xh2bf6xhySX z^-BPA`Ai2y2gdFROey1Sr&xEhbGgo;i;hlFyC)yp1S4Y`OoxK_Y^Ly1qdiFn$I@yT$3j8aDb4tcRJAZCOz$G<_HL0+oL&G+lD|a zS~mwooqLo%6sp@@1Z8-(8Jik;OP^FLSDjL2{JG}rz#{?6PwY`5f|e`%OT!+YlmuAE zHNu(380?ZdnF&O1mK(=({-xBw!{U)zP3H3D@4EFFH8=^C+PB{Hb4}cd^nVV@%1^D-gTE?9AZr~F436ZR>!>b z-gIr`gxO9lPAFsdG4s3V(EzoSqcOvphJ}%+^IB zpkukV@x2l<|7FtcCquO1_#L9M%+GTo9FYPFj%`!2--h$h-wPMNhk9e%Mkp+BqH3@B zu!2R}6owQ@I!sztp^hNkiiPYrb?!dhDCK%|pnA1TrQbk}fPesO`USbWbbX$kcwnN{ zcYM6x)xA16gV)o(L8Wdw`s?A$ z>8YB3kb^6d2rVjYt z3%OO!n~I-+!(#zGMhZ;mW}hrp?)->t>1CVu|JNh(Sj!(?KO$~TpgxH9UWatN9~Y;a57y|P-(Q% zRv_yw{cF%qh{gNp^%Zd|QR>@Dr_o4kRLIuKJo7!+&*zBVHdEsVga;R#p8YFr6rayc zmF($e7cfR{kS2rmU7#qH=9)M&Y;vizO1;0Km*jjtynez5>E=B#i>C0y)`c!=tL~mL zfsp#Dph=zTZVPBZ7QEhsWK6cP_Eq#gv*1=NcP>2mns15_>yRjq1qhm=O=XIM>SnUYTK$d#rUq9X5Tt;rxrAtE)1 zHutnK^k@)uxqwO5Exnrgdr_INw$kb3d!?w3=TV|6FM+4KqHf}?Pokxt44ufW3W>jg z&y_zoP2jrrXCoAH^f<+a9Zrlab>0b!g5#CS{WQyOHs(=-`Gm!U)96PC|PK0mx( zhCG&{+y16X?FE~@A_d|`4&EmgtZI8^8^<$dL6^gUD#tQfutT|b_Y;HV_{TD(pkNPU z7)lv#5&@mqEt8r=6q(e2TIiak+hm{9(S=cNP6dl7SLK+4FK>R}#mo=0SD%!?D59~G z#Cv-6M&A7PjXY<%d*tVq-#PM{C~Ys<<&$r7|(0iY*-&dQ;SQpX8EA7i+#s z)TMg$FuoP115(=N*ZQ5s7LCs@Y@&$}EwBbk6&;=yqTR9q^p;Dx&5Bdhu83UTVEAR- z;ToG633B+GMKO=dAEv6F|59HUg>M+`8B$q=aU_Q8!LDJ+e= zN&+HW0yjib?(jrzy?0{-DY%z<)aaZ`;AOQ&JJ@BKP8v{4!t(4EiWpJB4LmhngXA@! z_vwgb0z{|mf`bTLQhOE9Oblti0*-&BcMn&58NTcEd4Q-@GR9r}y(*4L3U`sMNAlsu zyqqm}L6Ug5na1Y2DY_|TEal!*0t^Qm1Uf#M#> zy6*j4jlkv)m@vtpE6Eu_=WP4MVGQHRG2k~Vlz5yeTl^OgZ4uhDvtK+fg)XW!F9u>w zTbnQ|P8uHjuejp`eZmZWM1Ob{U>)AoJ#%9VP~F$@ihOL3sOYT0;Z|3@Y)({3A*Vp< z*+fk>bu%DOWL#gIeP*bh_vt(b{)m3I#A}=Jd-Y3tCnODXW~a9FB1A^ZfSNloOJ6=QTyvbTTXI0v!3X{fjIC6RN26HysKaNH89W-%;;m9R5)xYS3AZ{`NK?A-)&KbBZNre94X(!3 z)sjM2@4aE%Q0RiN;u*b6EyqCR-DGB`bgknH!u#`Nu1A-Up}aJ+nWeg+ zr3l#o@GIn|wUeI2AO{8{yqyR*-gRK0fe~fp8DR{%E!>YhN~!hN38U{PL!Ee2g0vW! zuk7Ainw}J;Ou-O_O_i^mm1|VWIEZ}N5>kif3K7pb!@i#oCxfKdGv?UGYFy z{*#^iW-UR!8+iHL5i*TRCy0N0#`&4{_iQjRMLvup58A!k)8`;?^GVsm8#Lt|BVx$7yQR3l^^s<4lYjiMm0-I-<}Gyk4ZOJm$!2o{z=kY>^(#+aL3~G znt;vQvAXE>2^etGVpeL``~$kh@?MfmsrrGdKWuPlCq=y0NELZ;8RE%BAz3tWvBd0) zd%;%6b&%w^>o|c7w`kWi9h^H@QGQVVVm z<$>XCWz^cDq*^N{0OzHz^nCvL@|3P^@S0Xq{XKjiH-RUlB=Cep@zWD!=9dC~E(gKe zP#($;zF%)8U(Jx+&Mz^Op?(*-UjR~~E)B5{f=3+T3U_#oik?}4l&E3hmMCSG4tZYM z^MgG0<(h5m4Rh=Chb0a+Q*Nh}VhS&i%w5OPSh!7tlO72w1FfQC5i(W-TJar9`zxFP&^m(W zT)u0pd~=tJgb~HFq2Nx1?ALIP7e_i}lk(4Zvh)U|vv!VJDL=eN`pcC{L6?@jrXxzA z*hPeX3}`JxrLwBk5_2Yd=ydqC5Lu@fB+@n3QNCl)7TB# z+c0#B&bW6UG??Jby?zOKe$PRZyD?DJ*jYIZ@CWQ3an&r!k*COgEu;vG`eThOC)aKbv(1K!;m!sAEC%x6-#eOMNmI z7zJpUV-R_JyqxhuDsS9)G)u0&q+|+=<29+US>7V>^R)zT!|OWGutCJr=Cssc87PjV zTHS7ReNJG%n8@UgRM#Y>6pkovV(D$BrYljvjb;+g$Mlf{-)30yGAk7_ztTG^y-~5Gwuz%}?(Mgg(oLN`d}|0MVa&hM z8|(Z@^*w~BkNr@3<%yr}F?SmSN6W_JJJ^wrFSssqYAE5DNGHzdQ~{jJMd1*;Qtq_R zfn-G85CcsJT3Qo(GQb&g{pE`_V3OnS4W`RO_Q)9xU-WAbWK`z}{G8w8t&a7_i~^@P zz+n)P-(BXpJ{biC{#<{3h1cAy7Ry>u!@08^LtBh@w5)8q!H6R+lta zgy|ivg7RDmp1=1j%`CtjcnKQI8g>EH-qQ)r$$ptnhE<){2I1{FZM> z;JV8M*BOqPAV82c85DMJ^O{QIszjx`i0k#PUUyTPp!GEPnLfLPaYCvC@tCjx7eSAY zOc33hwja^ky}^VD&1Ps+)PlqqVoZUOg8_)P0A^ zx7$l2=I@l!pmRUSIhMlCHXjf|pOwMOLI@LW$3FQF3y$koXZ9oggD&wffuwnuBJls4 zs8rK~EEyZUSs5?*!Uv@S{Nbvz7SsLU9nL?w0S>fv@LRT;HAo0GQGA*As~?vZa`26W zTU;e4WG@|^$I$iD^ZVozi0Y=*1HA$GEh2F_hnswtHkAaJPk z|NZHpLDD*<4xO;3d47JWyw(3Sg(?j$F-v<#VYw2h?%m0X%V+&vemGhB!5WAc z|22*n#bx~sLjH$B&^@HTAW`#r3Qt@H|M_$YWS>>?tnOIbB0{KO?m)!Wq<564DUv|? zrTilO{>W*0O^@ZHzWqyRR*p#C*;-k+oU=$aEROWGqnubDCMf#c4B2KDGvL1@euNy1 z(%*70|L;fwFC%LUFKzFtZ^g#{M`rmfYctgN6jmH?!!oIO{ zj5_Na$#0tU#K#)H_~`i#Rio!@kJJA3f&8!WcVl9Tnh*5JOW+MzX{@*niI&Jw&8UJVTEcilv;j}*A z+fr>AG&AZ|to)iVruU1hAofT&V35B~NOutO|r%Aw4Uw(!4;=l__6A)zBm#fy=D7*YdL_?JrIZGSc|__J1ZgwXz^u)DeSzlUH- zfM?fq5fA^b+St#-pdtVYWfJ^{Ax$v#l&D$ff3NW$cUDO#OR(Q9{)eFyP^yUez!>o# zHOb)4iUq*^8YTvY{rAw;2Qc;QIT+)AR^GmQRS52PY)stYABM8Q)FoKkX8&4-{_DGg z3b^0l1=HC_?$s52r%wGAt|%+51xkVc{`vpQ_UF?6FP9Bu*Y=j^l`Or{!(o>HU~X`F zv2U_r;JIWL;&VLY)$z0^WIqqob~E4<@fqr(U>jAq*LHeQBGC1=;2ep F{{ai-t4II< diff --git a/meta-arm-bsp/documentation/corstone1000/images/FIPDiagram.png b/meta-arm-bsp/documentation/corstone1000/images/FIPDiagram.png new file mode 100644 index 0000000000000000000000000000000000000000..bfe7315ee3c1669ac2d33326cf87f970cec8c51c GIT binary patch literal 16136 zcmeIZcT^P1);Fx8A}S&n07;US%)pQ&NM;yv&PW(w$YEe$NGg&uNEVQs89)KaA~{IT zFd&&BDmn8udd|6b-TQoNJ>Po&eV4tQrn|bT_O4yKcKGc;B?W2x+fQy^xpD;`A|s)4 z-W!?2Z2xK?Z-;_gTN}}Xq`+((z^i9koSgJr zV!)jo+}7C@_;uyuG34QX4%~^_+grmlVa8B6(2o?Diu{w7}upp^Bm?%<|>o=G6Z z)wH$Eq5S-&wjfDqIWbO2fXvHIxO6N`t-y9jDTod*IZHJqV{sHhR8&by)j^XNVT>>{ zH*FIuOD&X@sfD^NhqbFR z!rItD)=U|k$cq;AF!<+jn(R+Dyfgj>s5iXv=fjg&3;5w;)|NvMRBEd;FX261s!bJkK9 zv*Cll!C+^4keH+n4@e4bE3O8&GB;8JI{}1faPYVRKa!UGFd1uJ8#ghiqpL9tWMyXN zCdRL*py?=XHBLAOQp}A*U0z$$NWw|o z+zz2)ZLK8jBxeReaJ!h>@IYAhxR|MxDVL5lFeSJY%t{(A z>8h@VR5FI!iP;+4I)OF0)YYwRq^xbYlvE)S@{)G)YFt(t5NjQA7%p7SgC8f;4 zld_b(4G3y)uga+;4uiPb>%fslQXo|sJCG?-T3*Wy z*hSJ7qFPqkz#O$YwN_VB6_Zg08i65}T9Vdw zYOc0$HzhM`c{xoT4S8-(MRhGsV>@j=4O?|iRWlAFSFnYRmXbK1q9saOjaOdMOarc| z0Rg^u<dJiP*u5LI(E*hqH%@M!p=l}hD_s9Z$UX2jzN z1^E3~zpR?1teP58*+j_*Hf-!Y(U(dRU$2PXSMo;p&LX#v$f_Fm`Kg2|Wa`nK{hkl} zJ6^)(W-0v39txiu$#m`oJ*E)-A$5)J<$qnTnBG{3^H$vLd|&(ZBMa3-j&d47e!Pe) z|9MHkt`TpMOLAi&z1v1_o+j?*lHaa%A$ofCKdw)BeVIu`S9%ryYowRgE)-uTAnqZ} z1^>JIh}TEg$D(cPZx&wt&yj(~&#rM}?_U3pkuLu%xpg%W5qzuB@_*>@ioAfy>+3TA zb+L%OX28&hl|1<$xbZT&hvdIV0tO1c{}ECdaKG^8<>U^@-q4rWDdPHO~Rn2MK60}&-9kF;w1~nk~ zo646%)Gwncoj)(dL;*a1op#-t!EwZnedTXc^?+~XD?m=^TmnOAyjmIpA zNge&p7N=&s>y80w$oEEF`^_Q#+SEBuwPJ13?-M-b7xnIIwsKUwI0xQU;bk#h=_-3c z7D`#v`>8YjnH^Dcz5d?DrzLoNr{AdsJq~Yamzj$$*C$8NDuzAF6l9P2dxgF}02Vo= zZ@%=;vdj|o*$kW@DPIq^H8@XX5_c=zhYxzc8}Blw_Ii6rGUdckVKWhCW|Nc#%Xxgb zxa^+04+n>&aNcf_ebnU3MXc1|h|{gjNv7>++Spi!OTE0#RY+htR1lVGd+~1j2Gi3L zaVKt@$%mup>8~qqG931Yw8_7Gp@Kv)h<2fh?$e^~B33YzkQvz^^ zy6BL8v42T+B+*Am_(MYEACa;5f6W$sK8bEHnd!0PsNK57Z8?040#$+3N-l94XvysA zJ3RirR&X}TqVGdp=ReoHHy=RpqT*P01LUlfhPpAVd%oQQovQVEfCXiLiksmtxii-i z989Px^{T&HGG4?+ct2&lzz^HS+- ztYp+?h4BhWyB|w^l+rBS$}jxX$vBM0Bs`p4&}WCoF>4tX9qAUBa&U@}r=Oegx5}-S zy{+Q;t%eJY6ZJxkt0v~5Eh`^6`Mi$>W39EUMZ7LH&nzhVq!M;N<@BW4_*C3mV-Wf! z&Ug=eTc}t3Z&vU!)aXFX{FK+#7aNZyEf`d>w(0L{>PaB<@x}TBY`$^;i-3SRk<2 zaB&*!c%!o*9B&}H-oBNFC9(XLdp#y}g)_at^KrLUz%TJu|0kQm-g|-%S#Q|3-23$NHXw$lrSFO|Ix`1|iFp?gF~Ym1)8|OoYUxtzMj-u$!@@ge~``GVgfq z922-6ZPPz4(hbn%wM`RC3$j%3Xo|&m*xD4@wHSO5*P~y?7#5wj)i8bW2&e7t%L=`5 z`?;TZyVjF;p!GV}NauP(|K3usuhY;1%7v8rT;VsPe>}cw$c062O|=Ag(K^`oUTyZ8 z#|N(q!Bz?S3-s-3W7b(c2y1VVX?XfpsV?QyW6G9$ilYYhY-h+Ss5i^5PrjRd;NUuA zBQM69oCKcDV_)1kLdn!asyW^D0;{MYjB- zrX`$#-L5Qj&GqchVki*0+HYNDdR+W&THHMYg|Xyw+ofy0OYXDqT=mslEuKP5WAeXL z`BM<^btK{3-z)j^;yPW@$yZy^h_qj2EP83iH~Nd+U(m_Nz7P4=M=$RHdXbex`_|v8 z_utMqR|ViqaPnh$^EV~`c4~YEbpPnvNZ)_v{;!+Y%YfJlnYR=DYm|RJ{9g}u8uj&; zlOnl+X8rmviu2@?hHrE7!m}|OaaY@eY5r{CH_v3hszsmgjyJgOvp77IwENx__F$QM zt~IbY%W+8aj#QDal3@`at7g1{=i;0hTf^4RCzCf!T@DYhUF;6tSEd&R8GhKXI<%d9 zdK{v2r+?fl53K?J{7}lX{MGJ}7zwU0yU{!1kE(`)@+i4X=~}+hQ(aD~s_KT6y01{Z zVatI$v~zP#{Yd{eGH`zpdg#|s)t7q(I#1o1{Jlj`o4A_qOg}R1`2+fs~qxx!}V0OHb+a#-2tU`!U zsmgi~Lg;3cuN9y3XzHS*+)Lrtr#`r|_p*>NR9n5pL_3@3)syUdd&LIDu?n90^h>EH zT=z~@H7C`vBXJCvhWVDPf;bDL-74>N1dR18_mESTRNTZ&@`Z*bo8(5aVUMg#NPm5G#2ra<5l8xj>hdNDMr zgIXyLwe^G#I5RJ}xd8_i*Jn#SU^1xJ%2QtYrk`zBkBJF?CH|mtB8d_n~YIv&mvLK^H5zCAHneIJ(`SdHc4Ibw@Q1~U^ zyYunqzp`w%e$cF}=f<|KEIlyqzvN*_?D{`sCtxnej%i!pO!@Wcxc@J@Km2d$&NE~& z9nhDLU1oUmyz8KVwo0Ko=?be?{2vZn2L$W?2M1yR4v>lzP!;{*K+At}KuSBBl0*sb z#Kq1jcOsCPAmZ7tB+BQHRcg+16u9XXHt;AvUH1ExxUj*}Pn$mmj-vW< z&EVwxUo`czEuv|W!q>UsJ_CydxeXm#<<}DVTWpTfwQm{JUFSs`iuV)2`ptjx(Yc@K ztM@dCc!^h5g#P?-u77=tkMQ=|6xQTdE1825+JQNQa_SCl!+0QL_=QBd0Dgbf=qrhE zN{WWl(+5)bR^ObtS5T|QlCMmA(>Z$U^%*D>_^AVJ?mMUO54Qg3&NFFG6yinQCGlOa z64p48R1;A|WY-Uk4j&pRRu?qaR*J}1AB^dwnKI9$7JY3SU3=;2sV^$DXHLE{YcZ^X zSR;eUqh#JdmlVVCxZ-Fur>{*QE{r!H3VNUO>U>_CRY~B+hB^3h&l-nRde+?&KX&=n z!Ax+U)=Vx({&?|@dB5OCq9ry=!27&GJG^7YhH6>;#r^&Kf>om-P zqo*?!_;;W1-DC{gY}?#O;;=roZVr4vj8k1Hm6lH5U*hIIRG>pXY{e_Fxa#b1yr8_h z(s$iG%usxN%r4jUnJUKv7mAu7<0@67uK^v;49Wx*$c0{eVRVdoORc`_W3uemmQ|ke zk7*x#7eA0DnUsFKx|T9fy%(d?ms#^$y+96bs;|Azt2tY(718yN+8TLxd|d1zVAaFd z2N^`cF0}*2ORea7({pZEEL+OST7(%w1qDOopIxO;@*`AEwUTdzKkW9pZj_A!j*aag+dYnixoyL zW!B-IPhlUd^w;B6Q1YSWj^{qrIX-*mC^2BnN)A$L!|p8Cw}`MC(wL{5%D%n9 z#rUIjuYiQx^2tb%*1IRpNl&FhNLDLp_*GtM|D?=RNTQS`@brP*F?%%?(sIk7{JQg# z>l5_d2@Hf4l(nx{`qTY&MHKgbOA$#r1Q`>5u%81tpwwl4Z@qZ(>CxdKiXs<{X3oty z55W;4FVYFRRC*NgyRcw0EuhpT;Mxzy>T6=qqN^Sm{B1k)hYCFp5(_7-6`kLC6_1&AB)iRH?=~ursMjlem{Mcw@?$yKI=$lTlUcMpPWd$ZU`JO@5 z__{z}a3AXB%q~U1l5HJwD^U8P^}JH9x|__9&nmr>^r`sF13I~fX^^-xE?7s{s`Hca zg97dPrkVVsy*hUJmv_Q(r~e0{mG zHc2DRJ*;G6E$V)9+NJOLFikY_S1bBA-ig0=Rz%H3zca|iG^^R@~OosfflR-kVyhHfV~W|(Ts|AO z<~g_bT3sVxLV4kb;PjH}R9(Lmffq&tS#5j%NizjT>t*tkT(`VW&yzgEs##xE*y;oe zC*wGr4hV%%4s;1m)p;L` z+V?)eX(ib5zmE4HU4FUVGOrktfonY5S!Ai@{Bt!cfQ*;2Q@!|V$I`j7U-!z8Q$%94 zL8UC`T~aO|A*_*(k=6r7DPE3`pu}=)(CyS=N0dT!{Ng!AXEu0vGE!JoV|}vj5$#Qv zrV1b8rVYqUtnDK3lXog2(ur(mCKKb;jYM$UJTj$%_M(bd4WA=eHi9g zXFPLFFY4FOucmm8bSgGO!QgL_(6oz^K-c9u0zKlduW3(*Gods+-OuO7@H*Q;+Gd|T z58lY6at6x|J#W}L*=Lw`7m<9IX;|w@xk;4Z_@hF8t*_GRPDnh5rjSoj8P>KzV5>I; z1d^R;kA1nfD1-^`G4%?{N5H6rf&YV?R;Qm)4Xu{qa&eKYQ5FF z11{^FGNfo6cjQN_q?^xFOP~0Kr=Bs@oB**BpOdaQ_V=RDC~ndoFL!cz5%zEb)vQKo zELTCumSj+zX!!*G2hm(-DokUR>P!UtV%dUDtaX)IuhYhBvmnti{_oqBBgw}fty0s_ zoKLtic^~&AWX38oYb~fE)_AXBL8cn)b`;mv-c1;ynw*w;!iiwalU(1RHxGM?R*hyh zZDbX-N9)}i2oHDqsh&l$W2}~=t9It4_cfcw7fr&fjZa&?h@f_H9hZ9iV<}MM%f*0F zS8TaF)$c0A^Q)PcQ+_=ruw7-Xpw&j|Q8Z;Ss z-~YvV#~qy2@hFX$S_8iz{}E|n#gUT>Qkp?e>SHM7fT}#L zV@qbL$cg1e3Doo+#ft}{Xnm;(M8bW*)GfzJ9LywpxFEGcHcpg#Q=dt`di*1+mlviN z&Rl0s*58ABH}&BrQ7d&cGU?IHOJ9H&3b~V_iL}?oE*XhV`Dq3oKM9-ad$2m9$z(U| zJWy9km!XGd@qd=_F}qtAp6k-{p*wXHLU7{9SS2P!uo<|*X`K6kwm2R^))f%jo(VxR z%`mt$A`FJK*WPbQ0q(5byb3r0q@rhG05<$oB!@Y~{w9J%=~$tlnc2 zmMEkL{o@-IBq1O_EG7l@qm(=Oy-Y=pUEpsd3o0h!AVWowjEj;tqA8;ktM6)ac(;sN z!c~!SC<&WRSMk-rBI9T@0$ zyVO^<*@=%|RBry56K~eJ_K$y54oFFr=}fT=8K;W{RY+=8bG@aHt*0O>J5xMj@&f{L zrNX6!rqH1Neo_O!&sgcqEnWw`@cmE+iwj#{dn|4EG13)k+Gz)Phf*0WGxIn{r3yq^tU~L<-DF_}82)rgv5YRKlke>?tCe{xUSZz|wq< zfkqe8(j>Ff)<)j1-ov-UQ(LxLtrK#dNj>sf6e_CKE(173xZ%+;kvz+0WZlI&FMmeE zta~}5$onF--n@Rh8}C?8ddCmeN6WL0-*P#hTQ&y}(t^HwEFm$Ci+2bJSJ%8;6N|RC zB|nuIcaTq=&)yW4O~rHDAy$Txwg#tu-3Zocu;k1ig)i*?x;Q^!=P5FrC5Apbj)EYO z9l{WD#xAPjan#trP5sXSmJDaBF~Jsk1t9}V7^H|j3a{difSrsi^}h)-n668+bA^6H zskzDHx}Th_F7*3EtnY_aWEa(Z?EP38L3mgE*!f$Po#IOk*3P7c64Z1|ks8J;{{1J5 zP16q|J4{ziQciu9bG)1$vS~1h5vjJ`YyJESjn3wR?>lxUaZ-MtL`Y^?rWSzIs<6@d zFe@8x_w!S`g|0&$o^^r1A^4!QYjJzZS)_grD`ir}YKX8;+juX%cy5EvC%Hwsz!j9~ zbBxLj(5vqEzU{gn0|YM3dlIfp;$l64aEZVfwLs>AVcURo`cA*<$98RRvhAGNk`+#8-Ji4g{bv+u)e(|N7$DzmK!APd6p?PlI zM4Ox^EFlZ<35?sv656BD_Z28b-jP1=qgI}yi~qFCyv$D1ol@p?_GYkhO89)PYA{}q zK?c7Dj2gsv6{TP>JdBuVdeX%VIdm90*5PgyMV+fAYa~32mB|!Y`712-DYfGw>+1^r zV`{_3^nHG;(O&$;;?k(W+a_HaRf7)&F-If=QsTD8Gz(di>+;AG@Xk4TENrYQf4Yx1 zonEO+z1XOtmP2I*Y{=Fe_PsGJMSOsb=}~W<2DimnEyc9l_G1@Y%twJVzmSACy_Q3& zA*PTyv!WLndW(qxXRTyo6%MR^ds}bq6fgllQ=VmONP%RujVc|Qj^{e&MTW~-${^Is-Ya`&4e`A zZ|aucEn#V4_MrcjRjb>%7ob^E#7*5sN{TCmTSvH|w>b~&P3v8-zfkI>u}iDWof&us z@TIsILcey(pNL}$hn}o-E#dU115x6+75-Nb8A4Xj^=kW6Jj%(Uw&cE_7~9SVMV|gj zf_x97^Tn)c z5ay}2;Vbu!hOTM6T6?pTFUM~n#e+{NBsAs3x3iwgW2BWiN-Bi9yYT&ItUz3dM^cS- zhCogYLmkYAX*GdeXotE|m$#wKohnm_A8efz>F}d6wBs9b_U|xVv#{f<@Z*7JRy)pi zGbCL;2T#=#5&IeYTjRyH!Ueok61A?s`U?#t!9!rD3cXu}ns~T9QyL7Sw$~lGK4b0{ zl9*KcbP*d6<)Tj_En@2#!zh*fP$y~7Sq%fCHywiWEmkg16{cKQMk>;tyk)S$KJJLT zc2!;{Lx1%A(kwsZw$u4ge|}%_0+oL5xzx(6N~yG=TJGi2w6x)1F~fFurC-W(v0)!W zKg6Q>a&N55=cu5(Yj{8(I=a;gSbXpM5ByUQiHL(qzsj&o$iZXnovzTJUc;R{GEE%X zJ!jK_MI6WI$H{7nc7T~G@+mvSAOD3SjY;hK%5*W|`Qe!+H+)=s(Y5_O*k3gQ@IV1? zSPmaH<8?>`n3uk&ihE?dcPMZ~+NKthhHl>rwTw~jUEGeb@^cq9zuY9|)gjsuw9aCB zU(SdvHCYO$ZwRyM_p?T)tj)h|PZ7B4LRFJr%v$!noiCt}?Nndn>ZQXYogTUS*~RwJ zYrv8hwdFQ$UGy`aTxbFE2%qyA6?jOE>9pZlaf(styQG4TTV!K3d4;iQ1?uR$^V~kQ z^vxfjuI8$@KF8H!%)9kwSmtck#i%N+$F+=8oxy=|#9^(h0{NZ`CKJudI3>1|%CLcD zw#iIX3oJTi53GAHuWFqq`g|vO($eC`FX(|9y4D)pxg_0}3y&~0!OxFtE`>JaHb8q( z{$B-FGp@>4pZsd3rDX*2ApEq37+NM_Z%=h*s{xp-Y)_vwcT>}yE+|E5-xfm{v9;>l}W;zYnjGB;b zrU=5A+WFaM+=``e+s$;(mCsqJC``i$>S9-}Tp@jPi3O;!;R4;83RI<>C;f}-{_%WR zU)_c?lDDHQEr4hJp1%a&5I*@i`&hS~RXn?J?DN50Gdc1wU0!qnyPu>}&NsjnQnyP{ z=fyO_VgsFg+4r1%HC8;o4$694}Kc zT-(D!>2o`yn&pl;(^9Kz?U|a-V{j>IaMKXJ`Dyv=J2{`Sg3z%7@2NMac}dUfPlL7N z1yK=C_!-=2zD?4sLgGx8dP&eyY3fDlR4NS)gTw_@Ex7xeN>o=CXpcMPacLyhe)Co? zVU^ZYG5S8SorwDK+ISjXnQ3q6!{>wVK-ivcNL=_C{~$waBUk0G{hBTR{06-lz|DaV zVBj3WsE|z;g-frM0ElWYrPLSx@ZMs3GR%@8oZE%_rl;(A>W7@m983Ku0-vpV~%e7cqjMp>DS8w{wn=E2&m$|WQiMzjpC%1k3zDVK@ z*-dEBrzUcvo<1&~%J*x=MH>WtahM-pK9iaE+&<*IHt8%L+DoP@FonR4(`M*-)NXX? zFQ=p=9Cv~OK-@MfV+qfczVKbTk*cluQg5#Zs!iiUuFyISz)}v$?3zVKdGI5aGVZR7 z(LU3QX4~1?HuoYnw>!_ku9@ScZw5o~Y@PJ$YN4PHcZR>Ce zJBCKy7nQGMX2L8ctJr}6!)>>VJXP$2T{3~jddqKFJLXSm2Ok$t827&2lnH1@4J?vq z3(>m;y(a;gWhaI)=w{9FM{p<`BR0Vj@_3=v!RzB&-OinYrx8L}M+JykrRNSR6Oz;j zi)IsAiu#lKRzou!Dfp ze3gVH<;5ccs`KKdP|bqjD>%|}8cwaS=!#0%{F74vtKfQqIpA=2DACcTu1!HeZarT* z0n!c;S;^C0%lf-(Be#1~&a*n%_3MLY-QD)$%YzJ zM=w7bRC>Ex)*hU`Kw{DVgR9o#*Ic>Er{!ak0v-ybHMl7BQB$O&PgXk|xkS81+ih7myZwRb8{lo`)Yms~tIFU9KV-+(K0vMa36E8} zlWm?k;*L8lwJ_3m=AQ~h(F?9S%5QV3Pv_7D#>JO^eJ#7HB|QmbefsLPS;u0H?p7)0 zr1+?jmeFarHgwf}Td62IIVbPm0n8a@`<`M@(5q`TG5^W)~14x zmf#e;=QHQw&a622ZU4Bu0LXOJCu8yW11s%>l04Z^}#S`G9Z0?I1;%S&t=TS76Do-w`Cd--q#9RMX(ZZVx=i z^P+3;w>g<@1*<(zXiEt-JhyfK6?a{t$8;jbWZ^2ikX#uel_d!dy~fnAhb6y7+GFAS zF7@0RNd0a#)cOxAWrqc(t%B|E4rF${=3)%be*|iN-E}Ls#75l@gw_(o-N_Db>&eg* zV^wFiLUu*PQZGvc|bwoGX>qo&T<{1zm z$BSV&`^!5i%BMYu>6Kk-{CuMzf+zV`^4&{%!&wpq56^(`Hf@O)Yr z=>X(du&t-`Q|AeUrRh#xjYvV{oo&vo;3`%7os)uFPr$>vAV1yWOXsAHE{$$J0ydiX zdHr3zc&j^>1r^L|K#J7+@LgdCa zF;lkRP~{fS6%hGIMNE6#y`5OQ5PRWl!rLbWz#c@WO9O7*_BpwRc!Ds^;5$=Wr?Dc3 zjk0H|X-unN%f-ITxbC=nK2nN1)sQ$8>3D^wwxN;p{0Z~QMD?2{UHwD^X$=2BDY#Ji zcKC(ILdmlZPLn-&MkMFYJ-%CRo;S*B{hcSno*wz<>GNQ@7(>+{UXsolg6W3E-$$DlGYdyX;;S9 zrle@w6MZH#)5{G3#K@G926fB7;`k1Kjo^D2R6V z91-ex!(n}Z-DTzKu(0GO4gH@h{ZwP0=B-XRK`{*O`PZ4^8Y9o#pB_9V-L#!t!1;De z(e_hx`#tJLNGA7hSO8OMxgxM*4)2%7PXCkGFN(tG6J0rXU0bpeAJyA{#7W2usIuwK zrqd5=x+mbgC^4T@Qlax)vmxj6yu)cy*IE7)N}MGZqX84)aoQPO-y9k}kVk3Z`|q!X z#B-XY_x^A|gA*8>JJXC~CUUhaA-QznKnhL+(rHQu9b=i9CfWR>2>`+qkR}Jc8|)5G znOAo=h%8cXKaPaN5jgqpZ)x;3%cKgpDAE6*1o9QflSf>P{nS65_NWb_?)Z^|M=Rj+ z?^$$78!q-=;u}>`(6%iCo}=tOllXE|B0?MdYG~m`np8^_I&nvO^%5B3w(r%D^C#j* zE&ey20=cw(k{?8Y6SP{K4_(B992`}&4>T&YN=;}T=IAWhbi=)9BN@Go+>=dNXMki| zp7ps@L%a0NR;tUh>D+vPesKG6_N>J1g1?-u$R_$IdokFw1z>w5gU#`%UyVQU1veHQ zJ$s^ViiBF77oYIkXpp}HV~sz%J6q@brFJp6J(s%ftm-rbd*2PDnTKa!k603-z2@4l z#z-3SU?Ef@=~N8g4Z;!^@64{W)VTc0WYix?jf-*G-yE|Rk&3Eal1aXw({Ldk`Z)t~ zAXZEENUv}`O1&pwU72L#6+k>P6y+VZp3*#{Py2)2;iF%T zx5i!E-YJbM%@RN=kPtu%s4{cO7z7Eu;NjOhR+Bqkf1Xk5IOvrrlW_B_rcwis;e;S5 z;0bJpw#1VFJRueJf~QdXwtJX&ctfg?WQ>a2FlW>&g{2I;3zX1fG$yd_1uyeFdzbMf z&pjlPm5pN4rdi&s;}ovN;Y8yXk{l>_bbEH;mv}s<5eX5!!drf5gCmwn;QEN@4i83* z6^G^q0K%$1gIk$mVjh)}K0c@Y_amJdtnciq~g z*h@bju3qenfab^mL52QoRl7Yq3I;%->>AT|8BK4ao02azN-n@g&&8v)>B$@6j`tO* zc+mT-PqvBK!cuUgs8PEs&*JwyuUD+y><}AEo4g`N$}6$g-1Q-EO_RNVa%Y$H)2opM zWtqfv8#OdWX|H_@H9$W`XTkn~-`B%8DBo0KdwAufAdUl$xbJn2t$1>qp+ns?u%cdH zCzqNGL}dkp$nx)b)>Jglx1mA$_x=RP1|G{9-5H?Jn?AfXk526DqX-PN(qseh6!GnV zn?K=#^(Wypwirx0P8>D!R5mQw&4l9QDsjKa?lH`YQYNh;t&>wV9bF3la}w~XHnmU4 zxi*ktDm-V8*4Utw%Ys+EgM6+EP2^@h#7X?@LizftyCWWtd_$u1I@U;7ag&kuih zJV6&oDEvL?vAJz6Xc0s#K7#um-3w|EfAY?h;nB`!=yzgU%JY2e{`a*~Sd%5-e2PJs zIh8-k;DL|DN2NS3c&9KcJZr(nIvts4JrHpm+lR)F%7X|nZcZn5kpI5hornD(+0MKN zQf1K%iHOy;NoWaVEHNvsW}|bZV&hJ)AyRvrZyE1Um0YjRkq|QpZa&^rsb8%tSS6~FvwIn0(z)?me@nFM0V5&VGz zCu|I!`vd3*R%yz;BxZ&>`DNi;oz;0IC>~$_ySsSI>Q8Zc&VKT}hg=->*r+k3JZNLb zsMej8b?Aix6OZ6h^a{u6P`(NT0LiF~PSsUOG1S_b?)cqJm z-xL{lcm|-H`)Yw$B1R_rF==TBu3mx;?YIT(-TU#R1~VjJEzxulZ}t+FU*(#}t+5#h zsn}RMuI@@~^JVw}l%u$JJ`;4?zOH|AxBT6ZiT}Rn934chjGv1K*e>OenM!wNsk`gN zBVY0DqIb_3lR>U*W5+X$N>-t80w?L;9O04Nj}EMlMgGw2gY7sSrpIWR9M+wnyy z8yYHgoH(13yQY>VnD-T-4U-UrvP6{|nDQIqZ9NiizO_(Woj}-KfY1X6a$Ji1)QpiK zlrq4Vxspcon*@OHQ=@lc)~sr^62hixo?i!2YZCQuC6fUxLXHX{IOH-$5)XExs~2*( zu8$&+Okx0+tgRp|@3n;lHmQFrfr<$G(8YD89_fFmJIZ;osn?)`H)J!U^4%)#9UO%8 z`qBQ}GVhw5^`+1;U<|=A&Aw4^ov4-$p3jEnneuU0_mV1x8Nhp?9tzc!6NT)n0G&lx z`11e;{X0@!kLQ>V%)73Ac5TT;x7+~bqC#+dUM3-)01{LOiJM(;$_{Ist5W^-b9T$p z3t6s%&tcze8go~HCkEqrbnOzaSnF|gZQh(kG%B;hfD152mcNsr%Nj)7PIH8U-CZHM z*5jCPs_F29Xzu{h;E}xb=473b7R5?inhxELp@D06%oLQgXL7oA14lyhXMs=wkPtGf zJ?p7i87+F0B6J2Fu0b3z>B#Gjk&FO>2g07`=8^2;(H_tDXNdgl>J_0@nEDc5Z_hgI zN*h+8i@yg(e?LwKf*liyDY0)Y2FhQ3wx+Ik^sZoe8LSy{tfTkTC%=u4nYER?M8VWz7BIqVG!KT*FC{>aUX+rhktE0?%? z-2&1z>)*(3-8}rg@)QQMp#XC5~<*OaqT^arqqag8Qi1?*-|5b5-4^$jr ziz@`f{w{#{iULX-igNI*B>t|^`KNa9z9dlNC#^i|HvX?dn!jI;00k$uLh@R)e;2*{ zU4!%#s9^xAUxIG;b}{_(?C+ZrN}x1j4gT#(`__ as well as `Arm SystemReady Devicetree certified `__. -This readme explicitly focuses on the software part of the solution and +More information on the Corstone-1000 subsystems product and design can be +found on `Arm Developer `__. + +This document explicitly focuses on the software part of the solution and provides internal details on the software components. The reference software package of the platform can be retrieved following instructions -present in the user-guide document. +present in the user guide document. *************** Design Overview *************** The software architecture of Corstone-1000 platform is a reference -implementation of Platform Security Architecture (`PSA`_) which provides +implementation of `Platform Security Architecture `__ which provides framework to build secure IoT devices. -The base system architecture of the platform is created from three -different types of systems: Secure Enclave, Host and External System. -Each subsystem provides different functionality to overall SoC. +The base system architecture of the platform is created from three different types of subsystems: + + - Secure Enclave + - Host System + - External System + +Each subsystem provides different functionality to the overall system on a chip (SoC). .. image:: images/CorstoneSubsystems.png :width: 720 :alt: CorstoneSubsystems +Secure Enclave +============== + +The Secure Enclave boots first on system power on, it provides `PSA Root of Trust (RoT) `__ and +cryptographic functions. It is based on a Cortex-M0+ processor, CC312 Cryptographic Accelerator and +peripherals such as watchdog and secure flash. + +.. image:: images/Corstone1000SecureFlashMPS3.png + :width: 400 + :alt: Corstone1000SecureFlashMPS3 + +.. image:: images/Corstone1000SecureFlashFVP.png + :width: 400 + :alt: Corstone1000SecureFlashFVP -The Secure Enclave System, provides PSA Root of Trust (RoT) and -cryptographic functions. It is based on a Cortex-M0+ processor, -CC312 Cryptographic Accelerator and peripherals, such as watchdog and -secure flash. Software running on the Secure Enclave is isolated via -hardware for enhanced security. Communication with the Secure Encalve -is achieved using Message Handling Units (MHUs) and shared memory. -On system power on, the Secure Enclave boots first. Its software -comprises of a ROM code (TF-M BL1), MCUboot BL2, and -TrustedFirmware-M(`TF-M`_) as runtime software. The software design on -Secure Enclave follows Firmware Framework for M class -processor (`FF-M`_) specification. +Software running on the Secure Enclave is isolated via hardware for enhanced security. +Communication with the Secure Enclave is achieved using `Message Handling Units (MHUs) `__ +and shared memory. + +Its software components comprises: + + - `Trusted Firmware-M (TF-M) BL1 `__ + - `MCUboot `__ + - `TrustedFirmware-M `__ + +The software design on the Secure Enclave follows `Arm Firmware Framework for M-Profile +processor `__ (FF-M) specification. + +Host System +=========== The Host System is based on ARM Cortex-A35 processor with standardized -peripherals to allow for the booting of a Linux OS. The Cortex-A35 has -the TrustZone technology that allows secure and non-secure security -states in the processor. The software design in the Host System follows -Firmware Framework for A class processor (`FF-A`_) specification. -The boot process follows Trusted Boot Base Requirement (`TBBR`_). -The Host Subsystem is taken out of reset by the Secure Enclave system -during its final stages of the initialization. The Host subsystem runs -FF-A Secure Partitions(based on `Trusted Services`_) and OPTEE-OS -(`OPTEE-OS`_) in the secure world, and U-Boot(`U-Boot repo`_) and -linux (`linux repo`_) in the non-secure world. The communication between -non-secure and the secure world is performed via FF-A messages. - -An external system is intended to implement use-case specific functionality. -The system is based on Cortex-M3 and run RTX RTOS. Communication between the -external system and Host (Cortex-A35) can be performed using MHU as transport -mechanism. The current software release supports switching on and off the -external system. Support for OpenAMP-based communication is under -development. - -Overall, the Corstone-1000 architecture is designed to cover a range -of Power, Performance, and Area (PPA) applications, and enable extension -for use-case specific applications, for example, sensors, cloud -connectivity, and edge computing. +peripherals to allow booting a Linux-based operating system (OS). The Cortex-A35 has +the `TrustZone `__ technology that allows Secure and Non-secure security +states in the processor. + +The boot process follows `Trusted Boot Base Requirements Client `__. +The Host System is taken out of reset by the Secure Enclave system during its final stages of the +initialization. + +In the Secure world, the Host System runs: + + - FF-A Secure Partitions (based on `Trusted Services `__) + - `OP-TEE OS `__ + +In the Non-secure World, the Host System runs: + + - `U-Boot `__ + - `Linux kernel `__ + +The software design in the Host System follows `Arm Firmware Framework for Arm A-profile +`__ (FF-A) specification. +The communication between Non-secure and the Secure world is performed via FF-A messages. + +External System +=============== + +The External System is intended to implement use-case specific functionality. + +The system is based on Cortex-M3 and runs `Keil RTX5 `__. + +Communication between the external system and Host (Cortex-A35) can be performed using MHU as transport +mechanism. The current software release supports switching the External System ON and OFF. + +The Corstone-1000 architecture is designed to cover a range of +`Power, Performance, and Area (PPA) `__ applications, and enable extension +for use-case specific applications, for example, sensors, cloud connectivity, and edge computing. ***************** Secure Boot Chain ***************** For the security of a device, it is essential that only authorized -software should run on the device. The Corstone-1000 boot uses a -Secure Boot Chain process where an already authenticated image verifies -and loads the following software in the chain. For the boot chain -process to work, the start of the chain should be trusted, forming the +software should run on the device. + +The Corstone-1000 boot uses a `Secure boot `__ chain process +where an already authenticated image verifies and loads the following software in the chain. + +For the boot chain process to work, the start of the chain should be trusted, forming the Root of Trust (RoT) of the device. The RoT of the device is immutable in -nature and encoded into the device by the device owner before it -is deployed into the field. In Corstone-1000, the content of the ROM -and CC312 OTP (One Time Programmable) memory forms the RoT. +nature and encoded into the device by the device manufacturer before it +is deployed into the field. +In Corstone-1000, the content of the ROM and CC312 One Time Programmable (OTP) memory forms the RoT. -Verification of an image can happen either by comparing the computed and -stored hashes, or by checking the signature of the image if the image -is signed. +Verification of an image can happen either by comparing the computed and stored hashes, or by +checking the signature of the image if the image is signed. .. image:: images/SecureBootChain.png :width: 870 :alt: SecureBootChain -It is a lengthy chain to boot the software on Corstone-1000. On power on, -the Secure Enclave starts executing BL1_1 code from the ROM which is the RoT -of the device. The BL1_1 is the immutable bootloader of the system, it handles -the provisioning on the first boot, hardware initialization and verification -of the next stage. - -The BL1_2 code, hashes and keys are written into the OTP during the provisioning. -The next bootstage is the BL1_2 which is copied from the OTP into the RAM. The -BL1_1 also compares the BL1_2 hash with the hash saved to the OTP. The BL1_2 -verifies and transfers control to the next bootstage which is the BL2. During the -verification, the BL1_2 compares the BL2 image's computed hash with the BL2 hash in -the OTP. The BL2 is MCUBoot in the system. BL2 can provision additional keys on the -first boot and it authenticates the initial bootloader of the host (Host Trusted Firmware-A BL2) -and TF-M by checking the signatures of the images. -The MCUBoot handles the image verification the following way: - -- Load image from a non-volatile memory to dynamic RAM. -- The public key present in the image header is validated by comparing with the hash. - Depending on the image, the hash of the public key is either stored in the OTP or part - of the software which is being already verified in the previous stages. -- The image is validated using the public key. - - -The execution control is passed to TF-M after the verification. TF-M being -the runtime executable of the Secure Enclave which initializes itself and, at the end, -brings the host CPU out of rest. - -The TF-M BL1 design details and reasoning can be found in the `TF-M design documents -`_. - -The Corstone-1000 has some differences compared to this design due to memory (OTP/ROM) -limitations: - -- The provisioning bundle that contains the BL1_2 code is located in the ROM. - This means the BL1_2 cannot be updated during provisioning time. -- The BL1_1 handles most of the hardware initialization instead of the BL1_2. This - results in a bigger BL1_1 code size than needed. -- The BL1_2 does not use the post-quantum LMS verification. The BL2 is verified by - comparing the computed hash to the hash which is stored in the OTP. This means the - BL2 is not updatable. - -Host Level Authentication -========================= - -The host follows the boot standard defined in the `TBBR`_ to authenticate the -secure and non-secure software. - -The Firmware Image Package (FIP) packs bootloader images and other payloads into a -single archive. The FIP for Corstone-1000 contains: - -- Trusted Boot Firmware BL2 -- EL3 Runtime Firmware BL31 -- Secure Payload BL32 (Trusted OS) -- Non-Trusted Firmware BL33, -- TOS_FW_CONFIG -- key & content certificates - -TF-M does not check the FIP signature, it only checks the Trsuted Firmware-A (TF-A) BL2's signature -in the FIP. The TF-M BL2 (MCUBoot) gets the offset for the TF-A BL2 by parsing the -GUID Partition Table (GPT) to find the FIP offset, then parsing the FIP to get the offset for the -TF-A BL2. Finally, MCUBoot loads and validates the TF-A BL2 image. - -The implicitly trusted components are: - -- A SHA-256 hash of the Root of Trust Public Key (ROTPK). A development ROTPK - is used and its hash embedded into the TF-A BL2 image (only for development purposes). - This public key is provided by TF-A source-code. -- In case of Corstone-1000, the TF-A BL2 image, can be trusted because it has been verified - by the secure enclave's BL2 (MCUBoot) before starting TF-A. +It is a lengthy chain to boot the software on Corstone-1000. + +TF-M BL1_1 +========== + +On power-up, the Secure Enclave begins execution from TF-M BL1_1, which resides in ROM and serves as +the Root of Trust (RoT) for the device. + +TF-M BL1_1 is the immutable bootloader and is responsible for: + +- Provisioning the device during the first boot +- Performing hardware initialization +- Verifying the integrity and authenticity of the next stage in the boot chain + +At boot time, TF-M BL1_1: + +- Copies the TF-M BL1_2 image from OTP to RAM. +- Verifies the integrity of BL1_2 by comparing its computed hash with the hash stored in OTP. + +TF-M BL1_2 +========== + +During provisioning, the TF-M BL1_2 binary, along with its hashes and cryptographic keys, is stored +in One-Time Programmable (OTP) memory. + +Once verified, TF-M BL1_2: + +- Takes control and verifies the next stage in the boot chain, which is TF-M BL2. +- Computes the hash of the BL2 image and compares it with the BL2 hash stored in OTP to ensure + integrity before transferring execution to BL2. + +.. note:: + + The TF-M BL1 design details can be found in the `TF-M design documents `_. + + .. important:: + + Corstone-1000 has some differences compared to this design due to memory (OTP/ROM) + limitations: + + - BL1_1 code size is larger than needed because it handles most of the hardware initialization instead of the BL1_2. + - BL1_2 cannot be updated during provisioning time because the provisioning bundle that contains its code is located in the ROM. + - BL1_2 does not use the post-quantum LMS verification. + - BL2 cannot be updated because it is verified by comparing the computed hash to the hash stored in the OTP. + +TF-M BL2 +======== + +In this system, TF-M BL2 refers to MCUBoot. + +On the first boot, MCUBoot can provision additional cryptographic keys. It is responsible for authenticating both: + +- TF-M (Trusted Firmware-M), and +- The initial bootloader of the Host system, `Trusted Firmware-A (TF-A) BL2 `__ + +This authentication is done by verifying the digital signatures of the respective images. + +MCUBoot performs image verification in the following steps: + +#. Load the image from non-volatile memory into RAM. +#. Validate the image's signature using the corresponding public key. + +.. note:: + + The public key present in the image header is validated by comparing with the hash. + Depending on the image, the hash of the public key is either stored in the OTP or part + of the software which is being already verified in the previous stages. + + +The execution control is passed to TF-M after the verification. +As the runtime executable of the Secure Enclave, TF-M initializes itself before +bringing the Host system out of reset. + + + +Host System Authentication +========================== + +The Host system follows the boot standard defined in the `Trusted Board Boot Requirements Client `__ +to authenticate the Secure and Non-secure software. + +The `Firmware Image Package (FIP) `__ packs bootloader images and +other payloads into a single archive. + +.. image:: images/FIPDiagram.png + :alt: FIPDiagram + +The FIP for Corstone-1000 contains: + +- Trusted firmware-A BL2 +- AP EL3 Runtime firmware, BL31 image +- AP Secure Payload, BL32 image +- AP Normal world firmware -U-boot, BL33 image +- Trusted OS Firmware configuration file used by Trusted OS (BL32), TOS_FW_CONFIG +- Key certificates +- Content certificates + + +To load and validate TF-A BL2, TF-M BL2 first parses the GUID Partition Table (GPT) +to locate the FIP. It then determines the offset of TF-A BL2 within the FIP. + +.. note:: + + TF-M does not check the FIP signature, it only checks the TF-A BL2's signature in the FIP. + + +.. important:: + + The implicitly trusted components are: + + - A SHA-256 hash of the Root of Trust Public Key (ROTPK) - + For development purposes, a development ROTPK is used and its hash embedded into the TF-A BL2 image. + This public key is provided by the TF-A source code. + - TF-A BL2 image - it can be trusted because it has been verified by TF-M BL2 before starting TF-A. The remaining components in the Chain of Trust (CoT) are either certificates or bootloader images. -BL images authentication using the FIP certificates: +Bootloader Authentication +------------------------- + +The FIP contains two types of certificates: -- The certificates are categorized as "Key" and "Content" certificates. - The key certificates are used to verify public keys which have been used to sign - content certificates. The content certificates are used to store the hash of a - boot loader image. An image can be authenticated by calculating its hash and - matching it with the hash extracted from the content certificate. +- **Content Certificates** - used to store the hash of a bootloader image. +- **Key Certificates** - used to verify public keys used to sign Content Certificates. -Verification of the certificates: +The Host system bootloader images are authenticated by computing their hash and comparing it to the corresponding hash found in the Content Certificate. -- The public keys defined in the Trusted Key certificate are used to verify the - later certificates in the CoT process. The Trusted Key certificate is - verified with the Root of Trust Public Key. +Certificates Verification +------------------------- + +The public keys defined in the Trusted Key Certificate are used to verify the later certificates in +the CoT process. The Trusted Key Certificate is verified with the Root of Trust Public Key. + + +UEFI Authenticated Variables +---------------------------- For UEFI Secure Boot, authenticated variables can be accessed from the secure flash. The feature has been integrated in U-Boot, which authenticates the images as per the UEFI @@ -199,82 +285,74 @@ specification before executing them. Secure Services *************** -Corstone-1000 is unique in providing a secure environment to run a secure -workload. The platform has TrustZone technology in the Host subsystem but -it also has hardware isolated Secure Enclave environment to run such secure -workloads. In Corstone-1000, known Secure Services such as Crypto, Protected -Storage, Internal Trusted Storage and Attestation are available via PSA -Functional APIs in TF-M. There is no difference for a user communicating to -these services which are running on a Secure Enclave instead of the -secure world of the host subsystem. The below diagram presents the data -flow path for such calls. +Corstone-1000 is unique in offering a secure environment for running trusted workloads. +While the Host system includes TrustZone technology, the platform also features a hardware-isolated +Secure Enclave, specifically designed to execute these secure workloads. + +In Corstone-1000, essential Secure Services—such as Cryptography, Protected Storage, +Internal Trusted Storage, and Attestation—are provided through PSA Functional APIs implemented in TF-M. + +From the user's perspective, there is no difference when communicating with these services, +whether they run in the Secure Enclave or in the Secure world of the Host system. +The diagram below illustrates the data flow for such calls. .. image:: images/SecureServices.png :width: 930 :alt: SecureServices +The Secure Enclave Proxy Secure Partition (SE Proxy SP) is a proxy managed by OP-TEE that forwards +Secure Service calls to the Secure Enclave. This communication uses the `RSE communication protocol `_. +While the protocol supports shared memory and MHU interrupts as a doorbell mechanism between cores, +in Corstone-1000, the entire message is currently transmitted through the MHU channels. +Corstone-1000 implements Isolation Level 2 using the Cortex-M0+ Memory Protection Unit (MPU). -The SE Proxy SP (Secure Enclave Proxy Secure Partition) is a proxy partition -managed by OPTEE which forwards such calls to the Secure Enclave. The -solution relies on the `RSE communication protocol -`_ -which is a lightweight serialization of the psa_call() API. It can use shared -memory and MHU interrupts as a doorbell for communication between two cores -but currently the whole message is forwarded through the MHU channels in Corstone-1000. -Corstone-1000 implements isolation level 2. Cortex-M0+ MPU (Memory Protection -Unit) is used to implement isolation level 2. - -For a user to define its own secure service, both the options of the host -secure world or secure encalve are available. It's a trade-off between -lower latency vs higher security. Services running on a Secure Enclave are -secure by real hardware isolation but have a higher latency path. In the -second scenario, the services running on the secure world of the host -subsystem have lower latency but virtual hardware isolation created by -TrustZone technology. +Users can define their own secure services to run either in the Host system's Secure World or in +the Secure Enclave. This choice involves a trade-off between latency and security. +Services running in the Secure Enclave benefit from strong, hardware-enforced isolation, +offering higher security but at the cost of increased latency. In contrast, services running in the +Host Secure World experience lower latency, but rely on TrustZone technology for virtualized isolation, +which offers comparatively less robust security. ********************** Secure Firmware Update ********************** -Apart from always booting the authorized images, it is also essential that -the device only accepts the authorized (signed) images in the firmware update -process. Corstone-1000 supports OTA (Over the Air) firmware updates and -follows Platform Security Firmware Update specification (`FWU`_). -As standardized into `FWU`_, the external flash is divided into two -banks of which one bank has currently running images and the other bank is -used for staging new images. There are four updatable units, i.e. Secure -Enclave's BL2 and TF-M, and Host's FIP (Firmware Image Package) and Kernel -Image (the initramfs bundle). The new images are accepted in the form of a UEFI capsule. +In addition to always booting authorized images, it is equally important that the device only accepts +authorized (signed) images during the firmware update process. Corstone-1000 supports over-the-air (OTA) +firmware updates and complies with the `Platform Security Firmware Update for the A-profile Arm Architecture `__ +specification. + +As defined in the specification, the external flash is divided into two banks: one bank holds the +currently running images, while the other is used to stage new images. + +There are four updatable components: **BL2**, **TF-M**, **the FIP** and **the Kernel Image** (the initramfs bundle). +New images are delivered and accepted in the form of UEFI capsules. .. image:: images/ExternalFlash.png :width: 690 :alt: ExternalFlash -When Firmware update is triggered, U-Boot verifies the capsule by checking the -capsule signature, version number and size. Then it signals the Secure Enclave -that can start writing UEFI capsule into the flash. - -Once this operation finishes, Secure Enclave resets the entire system. -The Metadata Block in the flash has the below firmware update state machine. -TF-M runs an OTA service that is responsible for accepting and updating the -images in the flash. The communication between the UEFI Capsule update -subsystem and the OTA service follows the same data path explained above. -The OTA service writes the new images to the passive bank after successful -capsule verification. It changes the state of the system to trial state and -triggers the reset. - -Boot loaders in Secure Enclave and Host read the Metadata -block to get the information on the boot bank. In the successful trial stage, -the acknowledgment from the host moves the state of the system from trial to -regular. Any failure in the trial stage or system hangs leads to a system -reset. This is made sure by the use of watchdog hardware. The Secure Enclave's -BL1 has the logic to identify multiple resets and eventually switch back to the -previous good bank. The ability to revert to the previous bank is crucial to -guarantee the availability of the device. +When a firmware update is triggered, U-Boot begins by verifying the UEFI capsule by checking its signature, +version number, and size. After successful verification, it signals the Secure Enclave, which then +starts writing the capsule contents to flash memory. + +Once the write operation is complete, the Secure Enclave resets the entire system. The update process +is tracked using a state machine stored in the Metadata Block within flash. TF-M runs an OTA service +that is responsible for verifying and updating the images in the passive flash bank. Communication +between the UEFI capsule update subsystem and the OTA service follows the same data path described +earlier. After verifying the capsule, the OTA service writes the new images to the passive bank, +updates the system state to 'trial,' and initiates a reset. + +During boot, the bootloaders in both the Secure Enclave and the Host system read the Metadata Block to +determine which bank to boot from. If the trial boot succeeds, the Host system sends an acknowledgment +that transitions the system state from 'trial' to 'regular.' If the system fails during the trial phase +or hangs, a watchdog timer triggers a reset. The Secure Enclave’s BL1 contains logic to detect multiple +resets and can revert to the previously known-good bank. This fallback mechanism is essential to ensure +the device remains available and functional. .. image:: images/SecureFirmwareUpdate.png @@ -287,13 +365,15 @@ guarantee the availability of the device. UEFI Runtime Support in U-Boot ****************************** -Implementation of UEFI boottime and runtime APIs require variable storage. -In Corstone-1000, these UEFI variables are stored in the Protected Storage -service. The below diagram presents the data flow to store UEFI variables. -The U-Boot implementation of the UEFI subsystem uses the U-Boot FF-A driver to -communicate with the SMM Service in the secure world. The backend of the -SMM service uses the proxy PS from the SE Proxy SP. From there on, the PS -calls are forwarded to the Secure Enclave as explained above. +The implementation of UEFI boot-time and runtime APIs requires persistent variable storage. In +Corstone-1000, UEFI variables are stored using the Protected Storage (PS) service. + +The diagram below illustrates the data flow for storing UEFI variables. U-Boot’s UEFI subsystem +communicates with the Secure World using the U-Boot FF-A driver, which interfaces with the `UEFI System Management Mode (SMM) service `__. + +The SMM service provides support for the UEFI System Management Mode. This support is implemented by the SMM Gateway secure partition. +The SMM service then uses the Proxy Protected Storage (PS) provided by the SE Proxy SP. +These PS calls are forwarded to the Secure Enclave, following the communication path described earlier. .. image:: images/UEFISupport.png @@ -301,30 +381,38 @@ calls are forwarded to the Secure Enclave as explained above. :alt: UEFISupport -*************** +********** References -*************** -`ARM Corstone-1000 Search`_ - -`Arm security features`_ +********** +* `Arm Developer `__ +* `Arm Security Architectures `_ -------------- -*Copyright (c) 2022-2024, Arm Limited. All rights reserved.* - -.. _Arm Corstone-1000 Technical Overview: https://developer.arm.com/documentation/102360/0000 -.. _Arm Corstone-1000 Software: https://developer.arm.com/Tools%20and%20Software/Corstone-1000%20Software -.. _Arm Corstone-1000 Search: https://developer.arm.com/search#q=corstone-1000 -.. _Arm security features: https://www.arm.com/architecture/security-features/platform-security -.. _linux repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ -.. _FF-A: https://developer.arm.com/documentation/den0077/latest -.. _FF-M: https://developer.arm.com/architectures/Firmware%20Framework%20for%20M-Profile -.. _FWU: https://developer.arm.com/documentation/den0118/a/ -.. _OPTEE-OS: https://github.com/OP-TEE/optee_os -.. _PSA: https://www.psacertified.org/ -.. _PSA L2 Ready: https://www.psacertified.org/products/corstone-1000/ -.. _SRIR cert: https://armkeil.blob.core.windows.net/developer/Files/pdf/certificate-list/arm-systemready-ir-certification-arm-corstone-1000.pdf -.. _TBBR: https://developer.arm.com/documentation/den0006/latest -.. _TF-M: https://www.trustedfirmware.org/projects/tf-m/ -.. _Trusted Services: https://www.trustedfirmware.org/projects/trusted-services/ -.. _U-Boot repo: https://github.com/u-boot/u-boot.git +*Copyright (c) 2022-2025, Arm Limited. All rights reserved.* + +.. _arm-developer-cs1000-website: https://developer.arm.com/Tools%20and%20Software/Corstone-1000%20Software +.. _arm-developer-cs1000-search: https://developer.arm.com/search#q=corstone-1000 +.. _arm-developer-mhu-website: https://developer.arm.com/documentation/ka005129/latest/#:~:text=An%20MHU%20is%20a%20device,that%20a%20message%20is%20available +.. _arm-developer-secureboot-website: https://developer.arm.com/documentation/PRD29-GENC-009492/c/TrustZone-Software-Architecture/Booting-a-secure-system/Secure-boot +.. _arm-architecture-security-features-platform-security: https://www.arm.com/architecture/security-features/platform-security +.. _linux-repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ +.. _arm-trustzone-for-cortex-a-website: https://www.arm.com/technologies/trustzone-for-cortex-a +.. _arm-fmw-framework-a-profile-pdf: https://developer.arm.com/documentation/den0077/latest +.. _arm-fmw-framework-m-profile-pdf: https://developer.arm.com/architectures/Firmware%20Framework%20for%20M-Profile +.. _platform-security-fwu-for-a-profile-pdf: https://developer.arm.com/documentation/den0118/a/ +.. _op-tee-os-repository: https://github.com/OP-TEE/optee_os +.. _psa-certified-website: https://www.psacertified.org/ +.. _psa_l2-ready: https://www.psacertified.org/products/corstone-1000/ +.. _systemready-ir-certification: https://armkeil.blob.core.windows.net/developer/Files/pdf/certificate-list/arm-systemready-ve-arm-neoverse.pdf +.. _trusted-board-boot-requirements-client-pdf: https://developer.arm.com/documentation/den0006/latest +.. _trusted-firmware-m-website: https://www.trustedfirmware.org/projects/tf-m/ +.. _trusted-firmware-m-bl1-website: https://trustedfirmware-m.readthedocs.io/en/latest/design_docs/booting/bl1.html +.. _trusted-firmware-a-bl2-website: https://developer.arm.com/documentation/108028/0000/RD-TC22-software/Software-components/AP-firmware/Trusted-firmware-A-BL2 +.. _trusted-firmware-a-fip-guide: https://trustedfirmware-a.readthedocs.io/en/latest/design/firmware-design.html#firmware-image-package-fip +.. _trusted-services-website: https://www.trustedfirmware.org/projects/trusted-services/ +.. _trusted-services-uefi-smm-website: https://trusted-services.readthedocs.io/en/integration/services/uefi-smm-services.html# +.. _das-u-boot-repository: https://github.com/u-boot/u-boot.git +.. _keil-rtx5-website: https://developer.arm.com/Tools%20and%20Software/Keil%20MDK/RTX5%20RTOS +.. _ppa-website: https://developer.arm.com/documentation/102738/0100/Power--performance--and-area-analysis +.. _mcuboot-website: https://docs.mcuboot.com/ diff --git a/meta-arm-bsp/documentation/corstone1000/user-guide.rst b/meta-arm-bsp/documentation/corstone1000/user-guide.rst index e1e68f56..b7fb8d84 100644 --- a/meta-arm-bsp/documentation/corstone1000/user-guide.rst +++ b/meta-arm-bsp/documentation/corstone1000/user-guide.rst @@ -1,5 +1,5 @@ .. - # Copyright (c) 2022-2024, Arm Limited. + # Copyright (c) 2022-2025, Arm Limited. # # SPDX-License-Identifier: MIT @@ -50,25 +50,32 @@ The Corstone-1000 software stack can be run on: Yocto Stable Branch ------------------- -Corstone-1000 software stack is built on top of Yocto styhead release. +Corstone-1000 software stack is built on top of Yocto Project's `Walnascar release `__. Software Components ------------------- Within the Yocto Project, each component included in the Corstone-1000 software stack is specified as a `BitBake recipe `__. The recipes specific to the Corstone-1000 BSP are located at: -``$WORKSPACE/meta-arm/meta-arm-bsp/``. +``${WORKSPACE}/meta-arm/meta-arm-bsp/``. .. important:: - ``$WORKSPACE`` refers to the absolute path to your workspace where the `meta-arm` repository will be cloned. + ``${WORKSPACE}`` refers to the absolute path to your workspace where the `meta-arm` repository will be cloned. - ``$TARGET`` is either ``mps3`` or ``fvp``. + Consider exporting it (e.g., ``export WORKSPACE=$(realpath .)``) if you're already in the workspace directory, + so you can copy and paste the commands from this guide verbatim. + +.. important:: + + ``${TARGET}`` is either ``mps3`` or ``fvp``. + + Consider exporting it (e.g., ``export TARGET=mps3``) so you can copy and paste the commands from this guide verbatim. The Yocto machine config files for the Corstone-1000 FVP and MPS3 targets are: - - ``$WORKSPACE/meta-arm/meta-arm-bsp/conf/machine/include/corstone1000.inc`` - - ``$WORKSPACE/meta-arm/meta-arm-bsp/conf/machine/corstone1000-$TARGET.conf`` + - ``${WORKSPACE}/meta-arm/meta-arm-bsp/conf/machine/include/corstone1000.inc`` + - ``${WORKSPACE}/meta-arm/meta-arm-bsp/conf/machine/corstone1000-${TARGET}.conf`` .. note:: @@ -81,64 +88,64 @@ Host Processor Components `Trusted Firmware-A `__ ==================================================================================== -+----------+-----------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-bsp/trusted-firmware-a/trusted-firmware-a_2.11.0.bb`` | -+----------+-----------------------------------------------------------------------------------------------------+ ++----------+-------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a_2.11.0.bb`` | ++----------+-------------------------------------------------------------------------------------------------------+ `Trusted Services `__ ==================================================================================== -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/libts_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-crypto-api-test_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-iat-api-test_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-its-api-test_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-ps-api-test_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-sp-se-proxy_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-sp-smm-gateway_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/libts_git.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-crypto-api-test_git.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-iat-api-test_git.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-its-api-test_git.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-ps-api-test_git.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-sp-smm-gateway.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/trusted-services/ts-sp-se-proxy.bb`` | -+----------+-----------------------------------------------------------------------------------------------------------+ ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/libts_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-crypto-api-test_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-iat-api-test_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-its-api-test_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-psa-ps-api-test_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-sp-se-proxy_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/trusted-services/ts-sp-smm-gateway_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/libts_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-crypto-api-test_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-iat-api-test_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-its-api-test_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-psa-ps-api-test_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-sp-smm-gateway_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/trusted-services/ts-sp-se-proxy_git.bb`` | ++----------+-------------------------------------------------------------------------------------------------------------+ `OP-TEE `__ ================================================================ -+----------+----------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-security/optee/optee-os_4.%.bbappend`` | -+----------+----------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-security/optee/optee-os_4.2.0.bb`` | -+----------+----------------------------------------------------------------------------------------+ ++----------+------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-security/optee/optee-os_4.%.bbappend`` | ++----------+------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-security/optee/optee-os_4.4.0.bb`` | ++----------+------------------------------------------------------------------------------------------+ `U-Boot `__ ================================================= -+----------+--------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm/recipes-bsp/u-boot/u-boot_%.bbappend`` | -+----------+--------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/u-boot/u-boot_%.bbappend`` | -+----------+--------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/u-boot/u-boot_2023.07.02.bb`` | -+----------+--------------------------------------------------------------------------------+ ++----------+----------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm/recipes-bsp/u-boot/u-boot_%.bbappend`` | ++----------+----------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/u-boot/u-boot_%.bbappend`` | ++----------+----------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/u-boot/u-boot_2023.07.02.bb`` | ++----------+----------------------------------------------------------------------------------+ Linux ===== @@ -147,13 +154,13 @@ distribution which is a Linux distribution stripped down to a minimal configurat The provided distribution is based on `BusyBox `__ and built using `musl libc `__. -+-----------+----------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-kernel/linux/linux-yocto_%.bbappend`` | -+-----------+----------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/poky/meta/recipes-kernel/linux/linux-yocto_6.12.bb`` | -+-----------+----------------------------------------------------------------------------------------------+ -| defconfig | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-kernel/linux/files/corstone1000/defconfig`` | -+-----------+----------------------------------------------------------------------------------------------+ ++-----------+------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-kernel/linux/linux-yocto_%.bbappend`` | ++-----------+------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/poky/meta/recipes-kernel/linux/linux-yocto_6.12.bb`` | ++-----------+------------------------------------------------------------------------------------------------+ +| defconfig | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-kernel/linux/files/corstone1000/defconfig`` | ++-----------+------------------------------------------------------------------------------------------------+ ************************* Secure Enclave Components @@ -162,11 +169,11 @@ Secure Enclave Components `Trusted Firmware-M `__ ==================================================================================== -+----------+-----------------------------------------------------------------------------------------------------+ -| bbappend | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-m/trusted-firmware-m_%.bbappend`` | -+----------+-----------------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm/recipes-bsp/trusted-firmware-m/trusted-firmware-m_2.1.0.bb`` | -+----------+-----------------------------------------------------------------------------------------------------+ ++----------+-------------------------------------------------------------------------------------------------------+ +| bbappend | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-m/trusted-firmware-m_%.bbappend`` | ++----------+-------------------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm/recipes-bsp/trusted-firmware-m/trusted-firmware-m_2.1.1.bb`` | ++----------+-------------------------------------------------------------------------------------------------------+ ************************************ External System Processor Components @@ -179,9 +186,9 @@ An example application that uses the `RTX Real-Time Operating System `__. -+----------+--------------------------------------------------------------------------------------------+ -| Recipe | ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/external-system/external-system_0.1.0.bb`` | -+----------+--------------------------------------------------------------------------------------------+ ++----------+----------------------------------------------------------------------------------------------+ +| Recipe | ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/external-system/external-system_0.1.0.bb`` | ++----------+----------------------------------------------------------------------------------------------+ .. _building-the-software-stack: @@ -192,7 +199,7 @@ Build Building binaries natively on Windows and AArch64 Linux is not supported. - Use an AMD64 Linux based development machine to build the software stack and transfer the binaries to run the software stack on an FVP in Windows or AArch64 Linux + Use an Intel or AMD 64-bit architecture Linux based development machine to build the software stack and transfer the binaries to run the software stack on an FVP in Windows or AArch64 Linux if required. @@ -200,8 +207,8 @@ Build .. code-block:: console - mkdir $WORKSPACE - cd $WORKSPACE + mkdir ${WORKSPACE} + cd ${WORKSPACE} #. Install kas version 4.4 with ``sudo`` rights. @@ -211,18 +218,18 @@ Build Ensure the kas installation directory is visible on the ``$PATH`` environment variable. -#. Clone the `meta-arm` Yocto layer in the workspace ``$WORKSPACE``. +#. Clone the `meta-arm` Yocto layer in the workspace ``${WORKSPACE}``. .. code-block:: console - cd $WORKSPACE - git clone https://git.yoctoproject.org/git/meta-arm -b CORSTONE1000-2024.11 + cd ${WORKSPACE} + git clone https://git.yoctoproject.org/git/meta-arm -b CORSTONE1000-2025.05 #. Build a Corstone-1000 image: .. code-block:: console - kas build meta-arm/kas/corstone1000-$TARGET.yml:meta-arm/ci/debug.yml + kas build meta-arm/kas/corstone1000-${TARGET}.yml:meta-arm/ci/debug.yml .. important:: @@ -241,22 +248,22 @@ Build .. code-block:: console - kas build meta-arm/kas/corstone1000-$TARGET.yml:meta-arm/ci/debug.yml:meta-arm/kas/corstone1000-extsys.yml + kas build meta-arm/kas/corstone1000-${TARGET}.yml:meta-arm/ci/debug.yml:meta-arm/kas/corstone1000-extsys.yml A clean build takes a significant amount of time given that all of the development machine utilities are also built along with the target images. Those development machine utilities include executables (Python, CMake, etc.) and the required toolchains. -Once the build succeeds, all output binaries will be placed in ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/`` +Once the build succeeds, all output binaries will be placed in ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/`` Everything apart from the Secure Enclave ROM firmware and External System firmware, is bundled into a single binary, the -``corstone1000-flash-firmware-image-corstone1000-$TARGET.wic`` file. +``corstone1000-flash-firmware-image-corstone1000-${TARGET}.wic`` file. The output binaries run in the Corstone-1000 platform are the following: - - The Secure Enclave ROM firmware: ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/bl1.bin`` - - The External System Processor firmware: ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/es_flashfw.bin`` - - The internal firmware flash image: ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/corstone1000-flash-firmware-image-corstone1000-$TARGET.wic`` + - The Secure Enclave ROM firmware: ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/bl1.bin`` + - The External System Processor firmware: ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/es_flashfw.bin`` + - The internal firmware flash image: ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000-flash-firmware-image-corstone1000-${TARGET}.wic`` .. _flashing-firmware-images: @@ -269,6 +276,13 @@ Flash machine does not require any firmware flashing. Refer to `this `__ section for running the software stack on FVP. +.. important:: + + When preparing the SD card for flashing, ensure that it is at least 4GB in size and formatted + with a FAT32 partition. + Using smaller cards or unsupported file systems (e.g., exFAT, NTFS) may cause the flashing + process to fail or the device to become unresponsive. + #. Download the FPGA bit file image ``AN550: Arm® Corstone™-1000 for MPS3 Version 2.0`` on the `Arm Developer website `__. Click on the ``Download AN550 bundle`` button and login to download the file. @@ -302,9 +316,9 @@ Flash └── ES0.bin #. Depending upon the MPS3 board version, you should update the ``images.txt`` file - (found in the corresponding ``HBI0309x`` folder e.g. ``Boardfiles/MB/HBI0309$BOARD_VERSION/AN550/images.txt``) + (found in the corresponding ``HBI0309x`` folder e.g. ``Boardfiles/MB/HBI0309${BOARD_VERSION}/AN550/images.txt``) so it points to the images under the ``SOFTWARE`` directory. - Where ``$BOARD_VERSION`` is a variable containing the board printed on the MPS3 board. + Where ``${BOARD_VERSION}`` is a variable containing the board printed on the MPS3 board. The ``images.txt`` file compatible with the latest version of the software stack can be seen below; @@ -341,10 +355,10 @@ Flash IMAGE2FILE: \SOFTWARE\es0.bin -#. Copy ``bl1.bin`` from ``$WORKSPACE/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` directory of the FPGA bundle. -#. Copy ``es_flashfw.bin`` from ``$WORKSPACE/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` directory of the FPGA bundle +#. Copy ``bl1.bin`` from ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` directory of the FPGA bundle. +#. Copy ``es_flashfw.bin`` from ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` directory of the FPGA bundle and rename the binary to ``es0.bin``. -#. Copy ``corstone1000-flash-firmware-image-corstone1000-mps3.wic`` from ``$WORKSPACE/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` +#. Copy ``corstone1000-flash-firmware-image-corstone1000-mps3.wic`` from ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3`` to the ``SOFTWARE`` directory of the FPGA bundle and rename the wic image to ``cs1000.bin``. .. note:: @@ -427,7 +441,7 @@ Corstone-1000 FVP software image. A Yocto recipe is provided to download the latest supported FVP version. -The recipe is located at ``$WORKSPACE/meta-arm/meta-arm/recipes-devtools/fvp/fvp-corstone1000.bb``. +The recipe is located at ``${WORKSPACE}/meta-arm/meta-arm/recipes-devtools/fvp/fvp-corstone1000.bb``. The latest FVP version is ``11.23.25`` and is automatically downloaded and installed when using the ``runfvp`` command as detailed below. @@ -439,14 +453,15 @@ The latest FVP version is ``11.23.25`` and is automatically downloaded and insta kas shell meta-arm/kas/corstone1000-fvp.yml:meta-arm/ci/debug.yml \ -c "../meta-arm/scripts/runfvp -- --version" -The FVP can also be manually downloaded from the `Arm Ecosystem FVPs`_ page by navigating -to "Corstone IoT FVPs" section to download the Corstone-1000 platform FVP installer. Follow the -instructions of the installer to setup the FVP. +The FVP can also be manually downloaded from `Arm Developer `__ to download +the Corstone-1000 platform FVP installer. +Follow the instructions of the installer to setup the FVP. #. Run the FVP .. code-block:: console + tmux kas shell meta-arm/kas/corstone1000-fvp.yml:meta-arm/ci/debug.yml \ -c "../meta-arm/scripts/runfvp --terminals=tmux" @@ -478,6 +493,13 @@ Tests following the instructions `here `__. +Reports +------- + +Reports for the tests conducted on the `Corstone-1000 software (CORSTONE1000-2025.05) `__ +release are available for reference `here `__. + + .. _clean-secure-flash: Clean Secure Flash @@ -489,12 +511,12 @@ Clean Secure Flash This is to erase the flash cleanly and prepare a clean board environment for testing. -#. Clone the `systemready-patch` repository to your $WORKSPACE. +#. Clone the `systemready-patch` repository to your ${WORKSPACE}. .. code-block:: console - cd $WORKSPACE - git clone https://git.gitlab.arm.com/arm-reference-solutions/systemready-patch.git -b CORSTONE1000-2024.11 + cd ${WORKSPACE} + git clone https://git.gitlab.arm.com/arm-reference-solutions/systemready-patch.git -b CORSTONE1000-2025.05 #. Copy the secure flash cleaning Git patch file to your copy of `meta-arm`. @@ -513,12 +535,12 @@ Clean Secure Flash .. code-block:: console - cd $WORKSPACE + cd ${WORKSPACE} kas shell meta-arm/kas/corstone1000-mps3.yml:meta-arm/ci/debug.yml bitbake -c cleansstate trusted-firmware-m corstone1000-flash-firmware-image bitbake -c build corstone1000-flash-firmware-image -#. Replace the ``bl1.bin`` file on the SD card with ``$WORKSPACE/build/tmp/deploy/images/corstone1000-mps3/bl1.bin``. +#. Replace the ``bl1.bin`` file on the SD card with ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3/bl1.bin``. #. Reboot the board to completely erase the secure flash. @@ -534,7 +556,7 @@ Clean Secure Flash .. code-block:: console - cd $WORKSPACE/meta-arm + cd ${WORKSPACE}/meta-arm git reset --hard cd .. bitbake -c cleansstate trusted-firmware-m corstone1000-flash-firmware-image @@ -544,11 +566,14 @@ Clean Secure Flash You can proceed with the test instructions in the following section after having done all the above. -SystemReady-IR +SystemReady IR -------------- .. important:: - Running the SystemReady-IR tests described below requires USB drives. + + **SystemReady IR** has now been renamed **SystemReady Devicetree Band**. + + Running the tests described below requires USB drives. In our testing, not all USB drive models worked well with the MPS3. Here are the USB drive models that were stable in our test environment: @@ -572,10 +597,10 @@ A storage with EFI System Partition (ESP) must exist in the system for the UEFI- .. code-block:: console - kas build meta-arm/kas/corstone1000-$TARGET.yml:meta-arm/ci/debug.yml --target corstone1000-esp-image + kas build meta-arm/kas/corstone1000-${TARGET}.yml:meta-arm/ci/debug.yml --target corstone1000-esp-image -#. Locate the ``corstone1000-esp-image-corstone1000-$TARGET.wic`` build artefact - in ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/`` +#. Locate the ``corstone1000-esp-image-corstone1000-${TARGET}.wic`` build artefact + in ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/`` **************************** Use the EFI System Partition @@ -605,7 +630,7 @@ MPS3 .. code-block:: console sudo dd \ - if=$WORKSPACE/build/tmp/deploy/images/corstone1000-mps3/corstone1000-esp-image-corstone1000-mps3.wic \ + if=${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3/corstone1000-esp-image-corstone1000-mps3.wic \ of=/dev/sdb \ iflag=direct oflag=direct status=progress bs=512; sync; @@ -622,7 +647,7 @@ It will be used when the SystemReady-IR tests is performed on the FVP in the lat **************************** -Run SystemReady-IR ACS Tests +Run SystemReady IR ACS Tests **************************** ACS is used to ensure architectural compliance across different implementations of the architecture. @@ -643,20 +668,31 @@ See the directory structure of the ACS image ``BOOT`` partition below: .. code-block:: console + ├── acs_results ├── EFI - │   └── BOOT - │   ├── app - │   ├── bbr - │   ├── bootaa64.efi - │   ├── bsa - │   ├── debug - │   ├── Shell.efi - │   └── startup.nsh - ├── grub - ├── grub.cfg + │ └── BOOT + │ ├── app + │ ├── bbr + │ ├── bootaa64.efi + │ ├── bsa + │ ├── debug + │ ├── grub.cfg + │ ├── Shell.efi + │ ├── sie_startup.nsh + │ └── startup.nsh ├── Image - ├── ramdisk-busybox.img - └── acs_results + ├── security-interface-extension-keys + │ ├── NullPK.auth + │ ├── TestDB1.auth + │ ├── TestDB1.der + │ ├── TestDBX1.auth + │ ├── TestDBX1.der + │ ├── TestKEK1.auth + │ ├── TestKEK1.der + │ ├── TestPK1.auth + │ └── TestPK1.der + ├── startup.nsh + └── yocto_image.flag The ``BOOT`` partition is also used to store test results in the ``acs_results`` folder. @@ -674,13 +710,13 @@ This sections below describe how to build and run ACS tests on Corstone-1000. .. code-block:: console - cd $WORKSPACE - git clone https://github.com/ARM-software/arm-systemready.git + cd ${WORKSPACE} + git clone https://github.com/ARM-software/arm-systemready.git -b v23.09_SR_REL2.0.0_ES_REL1.3.0_IR_REL2.1.0 --depth 1 This repository contains the infrastructure to build the ACS and the bootable prebuilt images to be used for the - certifications of SystemReady-IR. + certifications of SystemReady IR. -#. Find the pre-built ACS live image in ``$WORKSPACE/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic.xz``. +#. Find the pre-built ACS live image in ``${WORKSPACE}/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic.xz``. .. note:: @@ -693,7 +729,7 @@ This sections below describe how to build and run ACS tests on Corstone-1000. .. code-block:: console - cd $WORKSPACE/arm-systemready/IR/prebuilt_images/v23.09_2.1.0 + cd ${WORKSPACE}/arm-systemready/IR/prebuilt_images/v23.09_2.1.0 unxz ir-acs-live-image-generic-arm64.wic.xz MPS3 @@ -717,7 +753,7 @@ MPS3 .. code-block:: console - cd $WORKSPACE/arm-systemready/IR/prebuilt_images/v23.09_2.1.0 + cd ${WORKSPACE}/arm-systemready/IR/prebuilt_images/v23.09_2.1.0 sudo dd if=ir-acs-live-image-generic-arm64.wic of=/dev/sdc iflag=direct oflag=direct bs=1M status=progress; sync #. Plug the USB drive to the MPS3. At this point you should have both the USB drive with the ESP and the USB drive with the ACS image plugged to the MPS3. @@ -757,12 +793,12 @@ Run the commands below to run the ACS test on FVP using the built firmware image .. code-block:: console - cd $WORKSPACE + cd ${WORKSPACE} tmux ./meta-arm/scripts/runfvp \ --terminals=tmux \ ./build/tmp/deploy/images/corstone1000-fvp/corstone1000-flash-firmware-image-corstone1000-fvp.fvpconf \ - -- -C board.msd_mmc.p_mmc_file=$WORKSPACE/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic + -- -C board.msd_mmc.p_mmc_file=${WORKSPACE}/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic .. note:: @@ -794,7 +830,7 @@ The results can be fetched from the `acs_results` folder in the ``BOOT`` partiti sudo mkdir /mnt/test sudo mount -o rw,offset=1048576 \ - $WORKSPACE/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic \ + ${WORKSPACE}/arm-systemready/IR/prebuilt_images/v23.09_2.1.0/ir-acs-live-image-generic-arm64.wic \ /mnt/test ##################################################### @@ -822,18 +858,18 @@ Generate Capsules ***************** U-Boot's ``mkeficapsule`` tool is used to generate capsules. It is built automatically for the host machine during the firmware image building process. -The tool can be found in the ``$WORKSPACE/build/tmp/sysroots-components/x86_64/u-boot-tools-native/usr/bin/mkeficapsule`` directory. +The tool can be found in the ``${WORKSPACE}/build/tmp/sysroots-components/x86_64/u-boot-tools-native/usr/bin/mkeficapsule`` directory. ``mkeficapsule`` uses a no-partition image which is created when performing a clean firmware build. -The no-partition image can be found in the ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/corstone1000-$TARGET_image.nopt`` directory. +The no-partition image can be found in the ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000-${TARGET}/corstone1000-${TARGET}_image.nopt`` directory. -The capsule's default metadata passed can be found in the ``$WORKSPACE/meta-arm/meta-arm-bsp/recipes-bsp/images/corstone1000-flash-firmware-image.bb`` -and ``$WORKSPACE/meta-arm/kas/corstone1000-image-configuration.yml`` files. +The capsule's default metadata passed can be found in the ``${WORKSPACE}/meta-arm/meta-arm-bsp/recipes-bsp/images/corstone1000-flash-firmware-image.bb`` +and ``${WORKSPACE}/meta-arm/kas/corstone1000-image-configuration.yml`` files. Valid Capsule ============= -An automatically generated capsule can be found in ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/corstone1000-$TARGET-v6.uefi.capsule`` after running a firmware build. +An automatically generated capsule can be found in ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000-${TARGET}-v6.uefi.capsule`` after running a firmware build. The default metadata values are assumed to be correct to generate a valid capsule. @@ -850,26 +886,27 @@ Run the following commands to generate an invalid capsule with a ``fw-version`` .. code-block:: console - cd $WORKSPACE + cd ${WORKSPACE} ./build/tmp/sysroots-components/x86_64/u-boot-tools-native/usr/bin/mkeficapsule \ --monotonic-count 1 \ - --private-key build/tmp/deploy/images/corstone1000-$TARGET/corstone1000_capsule_key.key \ - --certificate build/tmp/deploy/images/corstone1000-$TARGET/corstone1000_capsule_cert.crt \ + --private-key build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000_capsule_key.key \ + --certificate build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000_capsule_cert.crt \ --index 1 \ - --guid $TARGET_GUID \ - --fw-version 5 build/tmp/deploy/images/corstone1000-$TARGET/corstone1000-$TARGET_image.nopt \ - corstone1000-$TARGET-v5.uefi.capsule + --guid ${TARGET}_GUID \ + --fw-version 5 \ + build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000-${TARGET}_image.nopt \ + corstone1000-${TARGET}-v5.uefi.capsule .. important:: - ``$TARGET_GUID`` is different depending on whether the capsule is built for the ``fvp`` or ``mps3`` ``$TARGET``. + ``${TARGET}_GUID`` is different depending on whether the capsule is built for the ``fvp`` or ``mps3`` ``${TARGET}``. - - ``fvp`` ``$TARGET_GUID`` is ``989f3a4e-46e0-4cd0-9877-a25c70c01329`` - - ``mps3`` ``$TARGET_GUID`` is ``df1865d1-90fb-4d59-9c38-c9f2c1bba8cc`` + - ``fvp`` ``${TARGET}_GUID`` is ``989f3a4e-46e0-4cd0-9877-a25c70c01329`` + - ``mps3`` ``${TARGET}_GUID`` is ``df1865d1-90fb-4d59-9c38-c9f2c1bba8cc`` -The invalid capsule will be located in the ``$WORKSPACE`` directory. +The invalid capsule will be located in the ``${WORKSPACE}`` directory. *************************** Transfer Capsules to Target @@ -887,10 +924,16 @@ MPS3 .. code-block:: console - sudo cp $CAPSULES_PATH/corstone1000-mps3-v6.uefi.capsule $ACS_IMAGE_USB_DRIVE_PATH/BOOT/ - sudo cp $CAPSULES_PATH/corstone1000-mps3-v5.uefi.capsule $ACS_IMAGE_USB_DRIVE_PATH/BOOT/ + cp ${WORKSPACE}/build/tmp/deploy/images/corstone1000-mps3/corstone1000-mps3-v6.uefi.capsule /dev/sdc/BOOT/ + cp ${WORKSPACE}/corstone1000-mps3-v5.uefi.capsule /dev/sdc/EFI/BOOT/ sync +.. note:: + + ``/dev/sdc`` is the assumed path for the ACS Image USB drive. + Replace it with the actual device path as enumerated on your development machine. + + .. important:: Since we are using the direct Capsule Update method, the capsule files should not be placed in @@ -900,7 +943,7 @@ FVP === #. Download and extract the ACS image `as described for the MPS3 `_. - The ACS image extraction location will be referred below as ``$ACS_IMAGE_PATH``. + The ACS image extraction location will be referred below as ``${ACS_IMAGE_PATH}``. .. note:: @@ -911,10 +954,10 @@ FVP .. code-block:: console - fdisk -lu $ACS_IMAGE_PATH/ir-acs-live-image-generic-arm64.wic + fdisk -lu ${ACS_IMAGE_PATH}/ir-acs-live-image-generic-arm64.wic Device Start End Sectors Size Type - $ACS_IMAGE_PATH/ir-acs-live-image-generic-arm64.wic1 2048 309247 307200 150M Microsoft basic data - $ACS_IMAGE_PATH/ir-acs-live-image-generic-arm64.wic2 309248 1343339 1034092 505M Linux filesystem + ${ACS_IMAGE_PATH}/ir-acs-live-image-generic-arm64.wic1 2048 309247 307200 150M Microsoft basic data + ${ACS_IMAGE_PATH}/ir-acs-live-image-generic-arm64.wic2 309248 1343339 1034092 505M Linux filesystem Given that the first partition starts at sector 2048 and each sector is 512 bytes in size, @@ -925,14 +968,14 @@ FVP .. code-block:: console sudo mkdir /mnt/ir-acs-live-image-generic-arm64 - sudo mount -o rw,offset= $ACS_IMAGE_PATH/ir-acs-live-image-generic-arm64.wic /mnt/ir-acs-live-image-generic-arm64 + sudo mount -o rw,offset= ${ACS_IMAGE_PATH}/ir-acs-live-image-generic-arm64.wic /mnt/ir-acs-live-image-generic-arm64 #. Copy the capsules: .. code-block:: console - sudo cp $CAPSULES_PATH/corstone1000-fvp-v6.uefi.capsule /mnt/ir-acs-live-image-generic-arm64/ - sudo cp $CAPSULES_PATH/corstone1000-fvp-v5.uefi.capsule /mnt/ir-acs-live-image-generic-arm64/ + sudo cp ${WORKSPACE}/build/tmp/deploy/images/corstone1000-fvp/corstone1000-fvp-v6.uefi.capsule /mnt/ir-acs-live-image-generic-arm64/ + sudo cp ${WORKSPACE}/corstone1000-fvp-v5.uefi.capsule /mnt/ir-acs-live-image-generic-arm64/ sync #. Unmount the IR image: @@ -945,8 +988,8 @@ FVP Run Capsule Update Tests ************************ -The valid capsule (``corstone1000-$TARGET-v6.uefi.capsule``) will be used first to run the positive capsule update test. -This will be followed by using the invalid capsule (``corstone1000-$TARGET-v5.uefi.capsule``) to run the negative capsule update test. +The valid capsule (``corstone1000-${TARGET}-v6.uefi.capsule``) will be used first to run the positive capsule update test. +This will be followed by using the invalid capsule (``corstone1000-${TARGET}-v5.uefi.capsule``) to run the negative capsule update test. .. important:: @@ -972,16 +1015,17 @@ Positive Capsule Update Test .. code-block:: console + tmux kas shell meta-arm/kas/corstone1000-fvp.yml:meta-arm/ci/debug.yml \ -c "../meta-arm/scripts/runfvp --terminals=tmux \ - -- -C board.msd_mmc.p_mmc_file=$ACS_IMAGE_PATH/ir-acs-live-image-generic-arm64.wic" + -- -C board.msd_mmc.p_mmc_file=${ACS_IMAGE_PATH}/ir-acs-live-image-generic-arm64.wic" .. warning:: - ``$ACS_IMAGE_PATH`` must be an absolute path. Ensure there are no spaces before or after of ``=`` of the ``-C board.msd_mmc.p_mmc_file`` option. + ``${ACS_IMAGE_PATH}`` must be an absolute path. Ensure there are no spaces before or after of ``=`` of the ``-C board.msd_mmc.p_mmc_file`` option. -#. Wait until U-Boot loads EFI from the ACS image and interrupt the EFI shell by pressing the ``Escape`` key when the following prompt is displayed on the Host Processor terminal (``ttyUSB2``). +#. Wait until U-Boot loads EFI from the ACS image and interrupt the EFI shell by pressing the ``Escape`` key when the following prompt is displayed on the Host Processor terminal (``ttyUSB2`` for MPS3). .. code-block:: console @@ -1018,7 +1062,7 @@ Positive Capsule Update Test The software stack copies the capsule content to the external flash, which is shared between the Secure Enclave and the Host Processor before rebooting the system. - After the first reboot, TrustedFirmware-M should apply the valid capsule and display the following log on the Secure Enclave terminal (``ttyUSB1``) + After the first reboot, TrustedFirmware-M should apply the valid capsule and display the following log on the Secure Enclave terminal (``ttyUSB1`` for MPS3) before rebooting the system a second time: .. code-block:: console @@ -1093,13 +1137,13 @@ Negative Capsule Update Test The `positive capsule update test `__ must be run before running the negative capsule update test. -#. After running the positive capsule update test, reboot the system by typing the following command on the Host Processor terminal (``ttyUSB2``): +#. After running the positive capsule update test, reboot the system by typing the following command on the Host Processor terminal (``ttyUSB2`` for MPS3): .. code-block:: console reboot -#. Wait until U-Boot loads EFI from the ACS image and interrupt the EFI shell by pressing the ``Escape`` key when the following prompt is displayed on the Host Processor terminal (``ttyUSB2``). +#. Wait until U-Boot loads EFI from the ACS image and interrupt the EFI shell by pressing the ``Escape`` key when the following prompt is displayed on the Host Processor terminal (``ttyUSB2`` for MPS3). .. code-block:: console @@ -1126,7 +1170,7 @@ Negative Capsule Update Test EFI/BOOT/app/CapsuleApp.efi corstone1000-fvp-v5.uefi.capsule -#. TrustedFirmware-M should reject the capsule due to having a lower firmware version and display the following log on the Secure Enclave terminal (``ttyUSB1``): +#. TrustedFirmware-M should reject the capsule due to having a lower firmware version and display the following log on the Secure Enclave terminal (``ttyUSB1`` for MPS3): .. code-block:: console @@ -1230,9 +1274,9 @@ Follow the instructions below to create the installation media. For openSUSE Tumbleweed, search for an ISO file with the format: ``openSUSE-Tumbleweed-DVD-aarch64-Snapshot$DATE-Media.iso``. - ``openSUSE-Tumbleweed-DVD-aarch64-Snapshot20240516-Media.iso`` was used during development. + ``openSUSE-Tumbleweed-DVD-aarch64-Snapshot20250509-Media.iso`` was used during development. - The location of the ISO file on the development machine will be referred to as ``$DISTRO_INSTALLER_ISO_PATH``. + The location of the ISO file on the development machine will be referred to as ``${DISTRO_INSTALLER_ISO_PATH}``. #. Create the installation media which will contain the necessary files to install the operation system. @@ -1256,7 +1300,7 @@ Follow the instructions below to create the installation media. .. code-block:: console - sudo dd if=$DISTRO_INSTALLER_ISO_PATH of=/dev/sdb iflag=direct oflag=direct status=progress bs=1M; sync; + sudo dd if=${DISTRO_INSTALLER_ISO_PATH} of=/dev/sdb iflag=direct oflag=direct status=progress bs=1M; sync; - FVP: @@ -1279,7 +1323,7 @@ Corstone-1000 on-board non-volatile storage size is insufficient for installing .. code-block:: console - dd if=/dev/zero of=$WORKSPACE/fvp_distro_system_drive.img \ + dd if=/dev/zero of=${WORKSPACE}/fvp_distro_system_drive.img \ bs=1 count=0 seek=10G; sync; \ parted -s fvp_distro_system_drive.img mklabel gpt @@ -1323,10 +1367,11 @@ FVP .. code-block:: console + tmux kas shell meta-arm/kas/corstone1000-fvp.yml:meta-arm/ci/debug.yml \ -c "../meta-arm/scripts/runfvp --terminals=tmux -- \ - -C board.msd_mmc.p_mmc_file=$WORKSPACE/fvp_distro_system_drive.img \ - -C board.msd_mmc_2.p_mmc_file=$DISTRO_INSTALLER_ISO_PATH" + -C board.msd_mmc.p_mmc_file=${WORKSPACE}/fvp_distro_system_drive.img \ + -C board.msd_mmc_2.p_mmc_file=${DISTRO_INSTALLER_ISO_PATH}" The Linux distribution will be installed on ``fvp_distro_system_drive.img``. @@ -1389,9 +1434,10 @@ Boot Distribution .. code-block:: console + tmux kas shell meta-arm/kas/corstone1000-fvp.yml:meta-arm/ci/debug.yml \ -c "../meta-arm/scripts/runfvp --terminals=tmux -- \ - -C board.msd_mmc.p_mmc_file=$WORKSPACE/fvp_distro_system_drive.img" + -C board.msd_mmc.p_mmc_file=${WORKSPACE}/fvp_distro_system_drive.img" .. warning:: @@ -1486,29 +1532,32 @@ Generate Keys, Signed Image and Unsigned Image .. code-block:: console - cd $WORKSPACE + cd ${WORKSPACE} - git clone https://git.gitlab.arm.com/arm-reference-solutions/systemready-patch.git \ - -b CORSTONE1000-2024.11 + git clone https://gitlab.arm.com/arm-reference-solutions/systemready-patch \ + + -b CORSTONE1000-2025.05 #. Set the current working directory to build directory's subdirectory containing the software stack build images. .. code-block:: console - cd $WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/ + cd ${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/ #. Run the image signing script (without changing the current working directory). .. code-block:: console - ./$WORKSPACE/systemready-patch/embedded-a/corstone1000/secureboot/create_keys_and_sign.sh \ - -d $TARGET \ - -v $CERTIFICATE_VALIDITY_DURATION_IN_DAYS + ./${WORKSPACE}/systemready-patch/embedded-a/corstone1000/secureboot/create_keys_and_sign.sh \ + -d ${TARGET} \ + -v ${CERTIFICATE_VALIDITY_DURATION_IN_DAYS} .. important:: The `efitools `__ package is required to execute the script. + ``${CERTIFICATE_VALIDITY_DURATION_IN_DAYS}`` is an integer that specifies the certificate's validity period in days. + .. note:: Consult the image signing script help message (``-h``) for more information about other optional arguments. @@ -1517,7 +1566,7 @@ Generate Keys, Signed Image and Unsigned Image The keys, signed kernel image, and unsigned kernel image will be copied to the exisiting ESP image. -The modified ESP image can be found at ``$WORKSPACE/build/tmp/deploy/images/corstone1000-$TARGET/corstone1000-esp-image-corstone1000-$TARGET.wic``. +The modified ESP image can be found at ``${WORKSPACE}/build/tmp/deploy/images/corstone1000-${TARGET}/corstone1000-esp-image-corstone1000-${TARGET}.wic``. **************************** @@ -1743,7 +1792,7 @@ The tests use the `arm_tstee` driver to access Trusted Services Secure Partition Ensure there are no USB drives connected to the board when running the test on the MPS3. -The steps below are applicable to both MPS3 and FVP). +The steps below are applicable to both MPS3 and FVP. #. Start the Corstone-1000 and wait until it boots to Linux on the Host Processor terminal (``ttyUSB2``). @@ -1825,31 +1874,33 @@ For more information about this, see the following resources: - `Authenticated Debug Access Control Specification `__ - `Arm Corstone-1000 for MPS3 Application Note AN550, Chapter 7 `__ -The Secure Debug Manager API is implemented in the `secure-debug-manager `__ repository. +The Secure Debug Manager API is implemented in the `Secure Debug Manager (PSA-ADAC / SDC-600) `__ repository. This repository also contains the necessary files for the Arm Development Studio support. The build and integration instructions can be found in its `README `__. -The `secure-debug-manager` repository also contains the private key and chain certificate to be used during the tests. -The private key's public pair is provisioned into the One-Time Programmable memory in TrustedFirmware-M. These are dummy keys that should not be used in production. +The `Secure Debug Manager (PSA-ADAC / SDC-600)` repository also contains the private key and chain certificate to be used during the tests. +The private key's public pair is provisioned into the One-Time Programmable memory in TrustedFirmware-M. +These are dummy keys that should not be used in production. -To test the Secure Debug feature, you'll need a debug probe from the DSTREAM family and Arm Development Studio versions 2022.2, 2022.c, or 2023.a. +To test the Secure Debug feature, you'll need a debug probe from the `Arm ULINKpro family `__ +and `Arm Development Studio `__ versions 2022.2, 2022.c, or 2023.a. -#. Clone the `secure-debug-manager` repository to your workspace. +#. Clone the `Secure Debug Manager (PSA-ADAC / SDC-600)` repository to your workspace. .. code-block:: console - cd $WORKSPACE + cd ${WORKSPACE} git clone https://github.com/ARM-software/secure-debug-manager.git #. Navigate into the repository directory and checkout the specific commit in the listing below. .. code-block:: console - cd $WORKSPACE/secure-debug-manager + cd ${WORKSPACE}/secure-debug-manager git checkout b30d6496ca749123e86b39b161b9f70ef76106d6 -#. Follow the steps in the `secure-debug-manager`'s `README `__ for the development machine setup. +#. Follow the instructions in the `Secure Debug Manager (PSA-ADAC / SDC-600)'s README `__ for the development machine setup. #. Rebuild the software stack with Secure Debug. @@ -1871,7 +1922,7 @@ To test the Secure Debug feature, you'll need a debug probe from the DSTREAM fam #. Connect the debug probe to the MPS3 using the 20-pin 1.27mm connector with the ``CS_20W_1.27MM silkscreen`` label. -#. Create a debug configuration in Arm Development Studio as described in the `secure-debug-manager`'s `README `__. +#. Create a debug configuration in Arm Development Studio as described in the `Secure Debug Manager (PSA-ADAC / SDC-600)'s README `__. #. Connect the debuger to the target using the debug configuration. @@ -1882,14 +1933,14 @@ To test the Secure Debug feature, you'll need a debug probe from the DSTREAM fam ... Please provide private key file path: - Enter file path > $WORKSPACE\secure-debug-manager\example\data\keys\EcdsaP256Key-3.pem + Enter file path > ${WORKSPACE}\secure-debug-manager\example\data\keys\EcdsaP256Key-3.pem Please provide trust chain file path: - Enter file path > $WORKSPACE\secure-debug-manager\example\data\chains\chain.EcdsaP256-3 + Enter file path > ${WORKSPACE}\secure-debug-manager\example\data\chains\chain.EcdsaP256-3 ... -#. When successful authenticated, Arm Development Studio will connect to the running MS3 and the debug features can be used. +#. When successful authenticated, Arm Development Studio will connect to the running MPS3 and the debug features can be used. The following prompt should appear in the Secure Enclave terminal (``ttyUSB1``): .. code-block:: console @@ -1899,15 +1950,13 @@ To test the Secure Debug feature, you'll need a debug probe from the DSTREAM fam ... -Reports -------- -Various test reports for the `Corstone-1000 software (CORSTONE1000-2024.11) `__ -release version are available for reference `here `__. - - -------------- -*Copyright (c) 2022-2024, Arm Limited. All rights reserved.* +*Copyright (c) 2022-2025, Arm Limited. All rights reserved.* -.. _Arm Ecosystem FVPs: https://developer.arm.com/tools-and-software/open-source-software/arm-platforms-software/arm-ecosystem-fvps -.. _secure-debug-manager-repo-readme: https://github.com/ARM-software/secure-debug-manager/blob/master/README.md +.. _arm-developer-fvp: https://developer.arm.com/tools-and-software/open-source-software/arm-platforms-software/arm-ecosystem-fvps +.. _secure-debug-manager-repo-readme: https://github.com/ARM-software/secure-debug-manager/tree/master?tab=readme-ov-file#secure-debug-manager-psa-adac--sdc-600 +.. _secure-debug-manager-armds-integration: https://github.com/ARM-software/secure-debug-manager?tab=readme-ov-file#arm-development-studio-integration +.. _meta-arm-repository-release-branch: https://web.git.yoctoproject.org/meta-arm?h=walnascar +.. _arm-ulink-pro-website: https://www.arm.com/products/development-tools/debug-probes/ulink-pro +.. _arm-ds-website: https://www.arm.com/products/development-tools/embedded-and-software/arm-development-studio