Received: by 2002:ad5:474a:0:0:0:0:0 with SMTP id i10csp1871336imu; Fri, 14 Dec 2018 01:57:17 -0800 (PST) X-Google-Smtp-Source: AFSGD/V8dxhZK9DNtYSa3xLGV37TRzyHB8r/IvLLNLmPBAG37M7ScS6Emq7xNz8364Gneani7vjV X-Received: by 2002:a17:902:15a8:: with SMTP id m37mr2266341pla.129.1544781437650; Fri, 14 Dec 2018 01:57:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1544781437; cv=none; d=google.com; s=arc-20160816; b=VnOfN3tLs0k+gE9uMr/ud/HHuRn5CSBWvAdOyWyH3O6zCU6dP2xyQHlajobnamIWHS YgYMjFuoZcu5ah2au/OpLh4a7Y6N/9oLCMVlNgC8QMsJ49XGNIA2UXkP7MzU0elI8MMp JJPLy/6FG3D1XMqmMRLaKnryCF3LlZxK9eRGJh008qQw0FFKWad3mN7vCYLnqePDztp7 uz+41h5qSohuiVWsf1O0vIHg832TU6P5uYVUXyM21bqpbUX+FhOvU8BQApYss5VEyXot KQ2eEdXCFpk7P5ewtsUHUUgzLworh+hLYNnlVJy9rPU3PZwzrSVJtafX7Gu3oNhdGoIU NCVA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:spamdiagnosticmetadata :spamdiagnosticoutput:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:dkim-signature; bh=J7OScccAHzxVtJJeX/OOJScq953Y7fcsOoPlaZRE7xw=; b=Cp3LrayYFvTcAEZ/AY/eoxYm4zCmD+WiHcJ8QYWosPGELMHHBeSUA+BZygB40z62Gg wlVC6MSMbrXFsipAlRqrkRfpWVuv6wMrFy0SMtmkmGp5lTG9R41XVAhtCSwzOs5KHEr5 IaDZwCdy7Lfl6aeShJXBsZEd3a9zyR015BMv7wWLv2KWZzIrpehA5bFUvzkQU0+dKkeY 0JS4rs2i4b+g+1d3ybqiZIMukm/bSYT62zGBSB3BsKc7GoOCA1Kjm5bgad0q2fMzOs5X 9gg0gfTCC3r7lugX84QzZlz/oWe9WQTDyhTWlP3p+2CgmAaqOnSwrGBpspKLPLmU0PA6 emig== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@fortanix.onmicrosoft.com header.s=selector1-fortanix-com header.b=PvMVKLY4; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id t13si3487145pga.102.2018.12.14.01.57.02; Fri, 14 Dec 2018 01:57:17 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@fortanix.onmicrosoft.com header.s=selector1-fortanix-com header.b=PvMVKLY4; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729395AbeLNJzy (ORCPT + 99 others); Fri, 14 Dec 2018 04:55:54 -0500 Received: from mail-eopbgr820125.outbound.protection.outlook.com ([40.107.82.125]:28640 "EHLO NAM01-SN1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1728612AbeLNJzy (ORCPT ); Fri, 14 Dec 2018 04:55:54 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fortanix.onmicrosoft.com; s=selector1-fortanix-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=J7OScccAHzxVtJJeX/OOJScq953Y7fcsOoPlaZRE7xw=; b=PvMVKLY4cp7yLxIkeVsn2qrNAWwDw8vAwmIgpye7cA8lzbq7X3xv6NqqmyHaWHinXJxPFjfdRWZ9AO90s6tEeRY0NMV93/EvhtfBEZvJbLMDD4Vf2mkRn96B63XgtyE8x5WU6RRwvOfqK6XIF2lcfivmXKZgMH+wTN3Mys51lYo= Received: from SN6PR11MB3167.namprd11.prod.outlook.com (52.135.109.144) by SN6PR11MB2607.namprd11.prod.outlook.com (52.135.91.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1425.20; Fri, 14 Dec 2018 09:55:49 +0000 Received: from SN6PR11MB3167.namprd11.prod.outlook.com ([fe80::916c:7b87:64a8:d58c]) by SN6PR11MB3167.namprd11.prod.outlook.com ([fe80::916c:7b87:64a8:d58c%3]) with mapi id 15.20.1404.026; Fri, 14 Dec 2018 09:55:49 +0000 From: Jethro Beekman To: Sean Christopherson , Andy Lutomirski , Thomas Gleixner , Ingo Molnar , Borislav Petkov , "x86@kernel.org" , Dave Hansen , Peter Zijlstra , Jarkko Sakkinen CC: "H. Peter Anvin" , "linux-kernel@vger.kernel.org" , "linux-sgx@vger.kernel.org" , Andy Lutomirski , Josh Triplett , Haitao Huang , "Dr . Greg Wettstein" Subject: Re: [RFC PATCH v4 5/5] x86/vdso: Add __vdso_sgx_enter_enclave() to wrap SGX enclave transitions Thread-Topic: [RFC PATCH v4 5/5] x86/vdso: Add __vdso_sgx_enter_enclave() to wrap SGX enclave transitions Thread-Index: AQHUkys/5WIKNGRxZ0KkTLwlMz9v7KV9//sA Date: Fri, 14 Dec 2018 09:55:49 +0000 Message-ID: References: <20181213213135.12913-1-sean.j.christopherson@intel.com> <20181213213135.12913-6-sean.j.christopherson@intel.com> In-Reply-To: <20181213213135.12913-6-sean.j.christopherson@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-clientproxiedby: SG2PR03CA0121.apcprd03.prod.outlook.com (2603:1096:4:91::25) To SN6PR11MB3167.namprd11.prod.outlook.com (2603:10b6:805:c4::16) authentication-results: spf=none (sender IP is ) smtp.mailfrom=jethro@fortanix.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [14.143.179.162] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1;SN6PR11MB2607;6:RUQaxizz5uO3GkaZ855S+OJ4y2K70aE/ubqYCQ6B2ssvwkiigwNCRZW2rDldc7geE2Z9CsfH1+TM0zI0LO8GwcvO2YSlMzI82tzlfUk50uYifXV+x5yQ+i5VV36H4R4KYPnvNG82yrmsf/HVdehCLHEuOQPl10hlkJV/XUJ7UHxS1jIu8+T2Z7oenPor1O+NdN/D+rPvY61wAesA1F+hp2T0C8eLR9z3nTm/8eejPdzEvWRANrPJxBqHLlWvHcWXJc/Tsmfwp0GvcBunLBES7Ap4N7RFGus/rnwrj7kTaitxC6+/o2JWrvxidaFzfMmH/8+hkQGl8dRYVJ/toCMxhBsbV44D7/fDwoC3b3ZZFVWzGhVFmUSMjNnrFcrvdfLro03nSuLKjc7w6Z+q+yMMZeMCZ9SIznHJ25b92V9eEmWMnamz9qKuMY7Xxa5th0KppCRqk7g4G4Qk+eeHXTp0+w==;5:lg3pZ/EuZIIF2Muim/GHmwutL2WSHV/tBYdOn0rCAfWkVHLBiTmEuzZLWgPmuNrW4qcFo1VlaXO4+6j2Dt8FmpDwcDSc/DexcqAVcJXcIksEUX7SIA781VXMn4dxXrQgzZieXyQPK8VS9ZS9iDaQdCP7L9GrhR9t21TCggNlSbo=;7:hdV+BCMxhrhuMdf2aQrbBEmMHGr6SqT80qJR9q3vSxupzLY4XgnIBnhPtVdHLBgnoeRT1KE54+G2k6dfTepq3hqBIUCPuF4VvK4gGEOq/6/jcwv4kSZ4FM/pd119DVug5hS9lx05sVt9hsUoylKvEg== x-ms-office365-filtering-correlation-id: 01da89de-3a8a-48a9-1007-08d661aa5381 x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(7168020)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600074)(711020)(2017052603328)(7153060)(49563074)(7193020);SRVR:SN6PR11MB2607; x-ms-traffictypediagnostic: SN6PR11MB2607: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(3230021)(999002)(102415395)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231475)(944501520)(4983020)(52105112)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(2016111802025)(6043046)(201708071742011)(7699051)(76991095);SRVR:SN6PR11MB2607;BCL:0;PCL:0;RULEID:;SRVR:SN6PR11MB2607; x-forefront-prvs: 08864C38AC x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(396003)(376002)(39830400003)(366004)(346002)(136003)(189003)(199004)(97736004)(2501003)(14454004)(486006)(508600001)(7736002)(2616005)(6506007)(446003)(102836004)(53546011)(476003)(4001150100001)(2906002)(78486014)(26005)(71200400001)(186003)(71190400001)(55236004)(52116002)(386003)(11346002)(217873002)(76176011)(6116002)(99286004)(3846002)(305945005)(8676002)(8936002)(81166006)(81156014)(86362001)(25786009)(110136005)(54906003)(316002)(105586002)(99936001)(36756003)(31696002)(66066001)(31686004)(6246003)(229853002)(106356001)(5660300001)(7416002)(6512007)(256004)(6436002)(6486002)(53936002)(4326008)(68736007)(357404004);DIR:OUT;SFP:1102;SCL:1;SRVR:SN6PR11MB2607;H:SN6PR11MB3167.namprd11.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;MX:1;A:1; received-spf: None (protection.outlook.com: fortanix.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: tMclCtOKJUZXJyGyWVmEIjaM6N7rZJ5XiRcAfRWvsOWA4ptFy/YBjtsJdjlUfz+Yvd18sZhdBI65bhVNp9iqTWBkOQYhZDN1sK4KtLdBbQn4Bl7z93GA8rGSJ1PKmQ04MpMCIpPSlybn1PuMGIt2NTa2bkvUeYXfeNF5vjV0qtXBh91zBGiyz/6IlGHgko5AptU5ieBtB19xfYuQb2cfC+cuzW+/Kc9O0Za+nF8MJfcz9xFSWwld73Y8vsAWJbqMJf3FGlYEtKQCoGJzNgeEETndE6gMJDms+rdmb56ZBwHTfBSRUzxW78heWLDM7anp spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060400010902070606040008" MIME-Version: 1.0 X-OriginatorOrg: fortanix.com X-MS-Exchange-CrossTenant-Network-Message-Id: 01da89de-3a8a-48a9-1007-08d661aa5381 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Dec 2018 09:55:49.5767 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: de7becae-4883-43e8-82c7-7dbdbb988ae6 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB2607 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --------------ms060400010902070606040008 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2018-12-14 03:01, Sean Christopherson wrote: > +struct sgx_enclave_regs { > + __u64 rdi; > + __u64 rsi; > + __u64 rdx; > + __u64 r8; > + __u64 r9; > + __u64 r10; > +}; This is fine, but why not just cover all 13 normal registers that are=20 not used by SGX? Minor comments below. > +/** > + * struct sgx_enclave_exception - structure to pass register in/out of= enclave Typo in struct name. > + * by way of __vdso_sgx_enter_enclave > + * > + * @rdi: value of %rdi, loaded/saved on enter/exit > + * @rsi: value of %rsi, loaded/saved on enter/exit > + * @rdx: value of %rdx, loaded/saved on enter/exit > + * @r8: value of %r8, loaded/saved on enter/exit > + * @r9: value of %r9, loaded/saved on enter/exit > + * @r10: value of %r10, loaded/saved on enter/exit > + */ > + /* load leaf, TCS and AEP for ENCLU */ > + mov %edi, %eax > + mov %rsi, %rbx > + lea 1f(%rip), %rcx If you move this below the jump, you can use %rcx for @regs > + > + /* optionally copy @regs to registers */ > + test %rdx, %rdx > + je 1f > + > + mov %rdx, %r11 > + mov RDI(%r11), %rdi > + mov RSI(%r11), %rsi > + mov RDX(%r11), %rdx > + mov R8(%r11), %r8 > + mov R9(%r11), %r9 > + mov R10(%r11), %r10 > + > +1: enclu > + > + /* ret =3D 0 */ > + xor %eax, %eax > + > + /* optionally copy registers to @regs */ > + mov -0x8(%rsp), %r11 > + test %r11, %r11 > + je 2f > + > + mov %rdi, RDI(%r11) > + mov %rsi, RSI(%r11) > + mov %rdx, RDX(%r11) > + mov %r8, R8(%r11) > + mov %r9, R9(%r11) > + mov %r10, R10(%r11) Here you can use %rax for @regs and clear it at the end. > +2: pop %rbx > + pop %r12 > + pop %r13 > + pop %r14 > + pop %r15 > + pop %rbp > + ret x86-64 ABI requires that you call CLD here (enclave may set it). -- Jethro Beekman | Fortanix --------------ms060400010902070606040008 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC Cx8wggUxMIIEGaADAgECAhBdZC9mIseKJlmxx1xn+g00MA0GCSqGSIb3DQEBCwUAMIGXMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBD bGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xODA5MTUwMDAw MDBaFw0xOTA5MTUyMzU5NTlaMCQxIjAgBgkqhkiG9w0BCQEWE2pldGhyb0Bmb3J0YW5peC5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQDOQsroKjy2xAQCXLyqryJt4 Xwj8hcweJCzOnjILKHIoWlOQ0b9yIbFLIWBRt/9zdxlE5ZabDVHnkIyhcVgtU/BA73e78Wx2 LOObdg0wfs9U2CVRYhz2EPHFjGvkYKihItt69ye91hj1w7RKCrYC8KZGSZ/+sbkJzQdXVy32 lxmiNEt17GNRebpkJCaFnznd6C2a8tBAS2Fa/UNyFdEs4eoRoYSKswclRhbe81aVhqY2hjcd O6puyyaYp5hkmau2UPih6OpRSOhbe6Tuebceg1yvumoVX3OZtGPS1VdQ+p0bxB0RE6gNs140 ZKUhrvAJDETuGaaQD4A2/6ksLunjAgMBAAGjggHpMIIB5TAfBgNVHSMEGDAWgBSCr2yM+MX+ lmF86B89K3FIXsSLwDAdBgNVHQ4EFgQUsFUcmGtaJBU7/52LyTYHC/M+LscwDgYDVR0PAQH/ BAQDAgWgMAwGA1UdEwEB/wQCMAAwIAYDVR0lBBkwFwYIKwYBBQUHAwQGCysGAQQBsjEBAwUC MBEGCWCGSAGG+EIBAQQEAwIFIDBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEBATArMCkGCCsG AQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBaBgNVHR8EUzBRME+gTaBL hklodHRwOi8vY3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlv bmFuZFNlY3VyZUVtYWlsQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKGSWh0 dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5k U2VjdXJlRW1haWxDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNv bTAeBgNVHREEFzAVgRNqZXRocm9AZm9ydGFuaXguY29tMA0GCSqGSIb3DQEBCwUAA4IBAQB6 v3tFEUSGv9+yY4wUjvcMyz3126nJrX5LkfEvrnCEpEiImECuoYvxOYNLYYynell7BQGtTaZg shMfDvwpy2isoi3w1AWAfbn6npnSKLzu0BMRvcCPWY8VPmePPizTqXoPkLwgTJfSaWkxMP1u rfL9S5NeRdkjwjHklX5IWuwwDu1hsKVZrxSSY2unCtvq67UHWz+z6rG1JQrP2YDfb98xun3y eLBNe/LFBNnGISbkT5q6D+e5c0bgzoH9nH4bsw3t8aDqJTfT3BqQdWr4pF05ODzzeOmEqeYE qGlD9hIL2AbmTZLjunAnARr6Fv7Sfqt23ptsGkmoZ9ZQNjT3TlwvMIIF5jCCA86gAwIBAgIQ apvhODv/K2ufAdXZuKdSVjANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UEBhMCR0IxGzAZBgNV BAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09N T0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkwHhcNMTMwMTEwMDAwMDAwWhcNMjgwMTA5MjM1OTU5WjCBlzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhl bnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC+s55XrCh2dUAWxzgDmNPGGHYhUPMleQtMtaDRfTpYPpynMS6n9jR22YRq2tA9 NEjk6vW7rN/5sYFLIP1of3l0NKZ6fLWfF2VgJ5cijKYy/qlAckY1wgOkUMgzKlWlVJGyK+Ul NEQ1/5ErCsHq9x9aU/x1KwTdF/LCrT03Rl/FwFrf1XTCwa2QZYL55AqLPikFlgqOtzk06kb2 qvGlnHJvijjI03BOrNpo+kZGpcHsgyO1/u1OZTaOo8wvEU17VVeP1cHWse9tGKTDyUGg2hJZ jrqck39UIm/nKbpDSZ0JsMoIw/JtOOg0JC56VzQgBo7ictReTQE5LFLG3yQK+xS1AgMBAAGj ggE8MIIBODAfBgNVHSMEGDAWgBS7r34CPfqm8TyEjq3uOJjs2TIy1DAdBgNVHQ4EFgQUgq9s jPjF/pZhfOgfPStxSF7Ei8AwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAw EQYDVR0gBAowCDAGBgRVHSAAMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9jcmwuY29tb2Rv Y2EuY29tL0NPTU9ET1JTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHEGCCsGAQUFBwEB BGUwYzA7BggrBgEFBQcwAoYvaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQWRk VHJ1c3RDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTANBgkq hkiG9w0BAQwFAAOCAgEAeFyygSg0TzzuX1bOn5dW7I+iaxf28/ZJCAbU2C81zd9A/tNx4+js QgwRGiHjZrAYayZrrm78hOx7aEpkfNPQIHGG6Fvq3EzWf/Lvx7/hk6zSPwIal9v5IkDcZoFD 7f3iT7PdkHJY9B51csvU50rxpEg1OyOT8fk2zvvPBuM4qQNqbGWlnhMpIMwpWZT89RY0wpJO +2V6eXEGGHsROs3njeP9DqqqAJaBa4wBeKOdGCWn1/Jp2oY6dyNmNppI4ZNMUH4Tam85S1j6 E95u4+1Nuru84OrMIzqvISE2HN/56ebTOWlcrurffade2022O/tUU1gb4jfWCcyvB8czm12F gX/y/lRjmDbEA08QJNB2729Y+io1IYO3ztveBdvUCIYZojTq/OCR6MvnzS6X72HP0PRLRTiO SEmIDsS5N5w/8IW1Hva5hEFy6fDAfd9yI+O+IMMAj1KcL/Zo9jzJ16HO5m60ttl1Enk8MQkz /W3JlHaeI5iKFn4UJu1/cP2YHXYPiWf2JyBzsLBrGk1II+3yL8aorYew6CQvdVifC3HtwlSa m9V1niiCfOBe2C12TdKGu05LWIA3ZkFcWJGaNXOZ6Ggyh/TqvXG5v7zmEVDNXFnHn9tFpMpO UvxhcsjycBtH0dZ0WrNw6gH+HF8TIhCnH3+zzWuDN0Rk6h9KVkfKehIxggQ1MIIEMQIBATCB rDCBlzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9E TyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEF1kL2Yi x4omWbHHXGf6DTQwDQYJYIZIAWUDBAIBBQCgggJZMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B BwEwHAYJKoZIhvcNAQkFMQ8XDTE4MTIxNDA5NTUzNlowLwYJKoZIhvcNAQkEMSIEIDq5NEnH 1zD06XiODRa/OVRSm3BV8vfKYwEFj0k2EAaDMGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUD BAEqMAsGCWCGSAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcN AwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwICASgwgb0GCSsGAQQBgjcQBDGBrzCBrDCBlzEL MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2Fs Zm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0Eg Q2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEF1kL2Yix4omWbHH XGf6DTQwgb8GCyqGSIb3DQEJEAILMYGvoIGsMIGXMQswCQYDVQQGEwJHQjEbMBkGA1UECBMS R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8g Q0EgTGltaXRlZDE9MDsGA1UEAxM0Q09NT0RPIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIQXWQvZiLHiiZZscdcZ/oNNDANBgkqhkiG9w0BAQEFAASC AQA9/4SP27y4qIb1XoEGxWd2FsK2mifdqYySZhRgRLMYpU5UuculGdlSpn2b1lvZj26z6otO ZYAfCEeBFTojvVzbwdCrxh+0OeB1sRN364SJREKkteUC8R9s76ltq3LLXAE90jMs5TU/VRtY dRTDlE0Z5Pcb1EvRKt5wLHjpcTi8XIR1KExAUW5Cr49DGlnvyrB5ZPVhv50QNg6IF1EtnyeB ziMHxjajKyrlX1Btw+vkFcOTM7CSiILLG+b8cKboZf4+DC3J2CC+5vebkdtggvFR8Yu6Mk/v XKp5pLRrgN10gvPCxmfR/iegQyY/71qpAXLP1/mktyt7CG9q6wWOY3N6AAAAAAAA --------------ms060400010902070606040008--